diff --git a/spec/acceptance/cfssl_spec.rb b/spec/acceptance/cfssl_spec.rb
index 981a578c37e9d10dc9ddd3d6c1e5c188a3eeeb4b..eee90c0a4d1c356c0087dfd21640097e02841221 100644
--- a/spec/acceptance/cfssl_spec.rb
+++ b/spec/acceptance/cfssl_spec.rb
@@ -64,6 +64,7 @@ describe 'cfssl' do
     end
     it 'applies idempotently' do
       apply_manifest(pp, catch_changes: true)
+      shell('sleep 5') # gives some time for generating CRL
     end
 
     describe port(8080) do
@@ -126,6 +127,7 @@ describe 'cfssl' do
     end
     it 'applies idempotently' do
       apply_manifest(pp, catch_changes: true)
+      shell('sleep 5') # gives some time for generating CRL
     end
 
     describe port(8080) do
diff --git a/templates/cfssl-gencrl.timer.epp b/templates/cfssl-gencrl.timer.epp
index efd2f94e617b4ffdfe7b05b3afafdcdb42742875..46ff855cff50331c691f178f208d9c996fd78c12 100644
--- a/templates/cfssl-gencrl.timer.epp
+++ b/templates/cfssl-gencrl.timer.epp
@@ -6,7 +6,7 @@ Description=CFSSL CRL generator for CA <%= $ca %>
 [Timer]
 OnCalendar=*-*-* <%= $cfssl::crl_gentimer %>
 Persistent=true
-OnActiveSec=10
+OnActiveSec=1
 
 [Install]
 WantedBy=timers.target