[tor-relays] bad validity timestamps on authority certificates

Scott Bennett bennett at cs.niu.edu
Fri Nov 4 23:06:41 UTC 2011


     For the last day or so, my relay has been logging messages like these:

Nov 04 15:51:00.273 [warn] Certificate not yet valid: is your system clock set incorrectly?
Nov 04 15:51:00.274 [warn] (certificate lifetime runs from Nov  5 04:26:47 2011 GMT through Nov  4 04:26:47 2012 GMT. Your time is Nov 04 20:51:00 2011 GMT.)
Nov 04 17:28:37.359 [warn] Certificate not yet valid: is your system clock set incorrectly?
Nov 04 17:28:37.361 [warn] (certificate lifetime runs from Nov  5 06:26:47 2011 GMT through Nov  4 06:26:47 2012 GMT. Your time is Nov 04 22:28:37 2011 GMT.)
Nov 04 17:56:47.782 [warn] Certificate not yet valid: is your system clock set incorrectly?
Nov 04 17:56:47.782 [warn] (certificate lifetime runs from Nov  5 06:26:47 2011 GMT through Nov  4 06:26:47 2012 GMT. Your time is Nov 04 22:56:47 2011 GMT.)

My system's clock gets adjusted to the network timeservers' values once per
hour.  I've checked the logs and found that the each adjustment has been less
than 71 ms during this time.
     So the question is why are the authorities putting out new certificates
with valid time periods beginning six or more hours in the future?  Also, when
will the authorities be corrected?


                                  Scott Bennett, Comm. ASMELG, CFIAG
**********************************************************************
* Internet:       bennett at cs.niu.edu                              *
*--------------------------------------------------------------------*
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."                                               *
*    -- Gov. John Hancock, New York Journal, 28 January 1790         *
**********************************************************************


More information about the tor-relays mailing list