rename MaxClockOffset to MaxClockSkew

certificate/authorization/authorizations.go

@@ -27,9 +27,9 @@ import (
 const (
 	// Bucket is the bucket used with a bolt-backed authorizations DB.
 	Bucket = "authorizations"
-	// MaxClockOffset is the max duration in seconds in the past or
-	// future that a claim timestamp is allowed to have and still be valid.
-	MaxClockOffset  = 5 * time.Minute
+	// MaxClockSkew is the max duration in the past or future that a claim
+	// timestamp is allowed to have and still be valid.
+	MaxClockSkew    = 5 * time.Minute
 	tokenDataLength = 64 // 2^(64*8) =~ 1.34E+154
 	tokenDelimiter  = ":"
 	tokenVersion    = 0

certificate/authorization/db.go

@@ -172,8 +172,8 @@ func (authDB *DB) Claim(ctx context.Context, opts *ClaimOpts) (err error) {
 	defer mon.Task()(&ctx)(&err)
 	now := time.Now()
 	reqTime := time.Unix(opts.Req.Timestamp, 0)
-	if (now.Sub(reqTime) > MaxClockOffset) ||
-		(reqTime.Sub(now) > MaxClockOffset) {
+	if (now.Sub(reqTime) > MaxClockSkew) ||
+		(reqTime.Sub(now) > MaxClockSkew) {
 		return Error.New("claim timestamp is outside of max delay window: %d", opts.Req.Timestamp)
 	}
 

certificate/authorization/db_test.go

@@ -246,8 +246,8 @@ func TestAuthorizationDB_Claim_Valid(t *testing.T) {
 
 	claimTime := time.Unix(claim.Timestamp, 0)
 	assert.Condition(t, func() bool {
-		return now.Sub(claimTime) < MaxClockOffset &&
-			claimTime.Sub(now) < MaxClockOffset
+		return now.Sub(claimTime) < MaxClockSkew &&
+			claimTime.Sub(now) < MaxClockSkew
 	})
 }
 

certificate/peer_test.go

@@ -203,8 +203,8 @@ func TestCertificateSigner_Sign(t *testing.T) {
 			now := time.Now()
 			claimTime := time.Unix(claim.Timestamp, 0)
 			assert.Condition(t, func() bool {
-				return now.Sub(claimTime) < authorization.MaxClockOffset &&
-					claimTime.Sub(now) < authorization.MaxClockOffset
+				return now.Sub(claimTime) < authorization.MaxClockSkew &&
+					claimTime.Sub(now) < authorization.MaxClockSkew
 			})
 		})
 	})