| If a CRL refresh fails, then the agent won't try again until another crl_refresh_interval has elapsed. This was intentionally done during the initial implementation so that we didn't overload puppetserver in the event of failed refreshes. But now that the code has been proven and we have confirmation that conditional GET requests for the CRL are don't have a significant performance impact, we want to be more robust in the event of transient network issues. If the agent fails to refresh the CRL, then it should continue retrying the next time it runs, and continue retrying until it succeeds. This is also an issue for CA refresh (see PUP-10639) |