Fix DKDM generation by moving the validity period a day inside the certificate validity.

diff --git a/src/tools/dcpomatic.cc b/src/tools/dcpomatic.cc
index 13569d11d7acd648961358ae1f36cf18fd268ea4..3168197d519b49d00eef7249734824f51e5deb5e 100644 (file)
--- a/src/tools/dcpomatic.cc
+++ b/src/tools/dcpomatic.cc
@@ -905,9 +905,9 @@ private:
 
 
                dcp::LocalTime from (Config::instance()->signer_chain()->leaf().not_before());
 
 
                dcp::LocalTime from (Config::instance()->signer_chain()->leaf().not_before());

-               from.add_minutes (1);
+               from.add_days (1);

                dcp::LocalTime to (Config::instance()->signer_chain()->leaf().not_after());
                dcp::LocalTime to (Config::instance()->signer_chain()->leaf().not_after());

-               to.add_minutes (-1);
+               to.add_days (-1);

 
                optional<dcp::EncryptedKDM> kdm;
                try {
 
                optional<dcp::EncryptedKDM> kdm;
                try {