Certificate verification will fail on system startup before NTP synchronization is available, because time/date is 1.01.1970 and certificates validity starts on a later date.
This is a problem if NTP server access is only available AFTER the secured connection is in place.
A parameter “startup-date” under /system/clock would be useful in this case, so date will to be set to a specified value on system startup and updated later via NTP.
Of course this could be done via a script, but that’s not really nice.
I agree with that, but…
A RTC usually implies a lithium cell battery. which will limit the temperature range for the router, since lithium cells are not stable and reliable above 60 deg. Celsius, tending to let out some magical smoke.
This is no problem in desktop installations, where the device stays cool. But in an rack with limited ventilation one can possibly expect temperatures above that limit.
Really not are need one 3 years clock without power, only one capacitor with maintain date and time for 10 minutes, or just for reboot…
And is better than start date/time with RouterOS build date and time.
For example, if the package are made 26/06/2014, is absurd to start the clock on 1970…
Or better, if the bios [firmware] are builded for example 25/05/2014 is absurd to start the RB with one previous date…
A RTC usually implies a lithium cell battery. which will limit the temperature range for the router, since lithium cells are not stable and reliable above 60 deg. Celsius, tending to let out some magical smoke.
Usually cetificates are installed on gateway, not on access point, RB1100, RB1200, CCR, CRS and all rack models must have one RTC,
the rack never go to 60°!!!
“We” do not need one perennial battery, but just if I reboot the device (without leave the power) the clock must still syncronized…
It is also saved “on clock adjust”. Is a SNTP update considered a clock adjust?
Anyway, to solve certificate validity issues, it is enough.
Good job MT team!