more useful warning messages

(fixed because the old ones confused a user)

svn:r2055

diff --git a/src/common/tortls.c b/src/common/tortls.c
index cfca993cafa67d5e6151939281f579d5d24b7049..f2b8ae039400b99527625990453e30cfdea9322c 100644 (file)
--- a/src/common/tortls.c
+++ b/src/common/tortls.c
@@ -619,12 +619,12 @@ tor_tls_verify(tor_tls *tls, crypto_pk_env_t *identity_key)
   now = time(NULL);
   t = now + CERT_ALLOW_SKEW;
   if (X509_cmp_time(X509_get_notBefore(cert), &t) > 0) {
-    log_fn(LOG_WARN,"Certificate becomes valid in the future: possible clock skew.");
+    log_fn(LOG_WARN,"Certificate becomes valid in the future: is your system clock set incorrectly?");
     goto done;
   }
   t = now - CERT_ALLOW_SKEW;
   if (X509_cmp_time(X509_get_notAfter(cert), &t) < 0) {
-    log_fn(LOG_WARN,"Certificate already expired; possible clock skew.");
+    log_fn(LOG_WARN,"Certificate already expired; is your system clock set incorrectly?");
     goto done;
   }