Make DKDMs with validity 2 minutes shorter than the signer certificate
authorCarl Hetherington <cth@carlh.net>
Tue, 10 Mar 2020 16:10:56 +0000 (17:10 +0100)
committerCarl Hetherington <cth@carlh.net>
Tue, 10 Mar 2020 16:10:56 +0000 (17:10 +0100)
validity (#1728).

src/tools/dcpomatic.cc

index 47851a2..ea3cfbe 100644 (file)
@@ -879,10 +879,10 @@ private:
                        );
 
 
-               dcp::LocalTime from (Config::instance()->decryption_chain()->leaf().not_before());
-               from.add_months (1);
-               dcp::LocalTime to (Config::instance()->decryption_chain()->leaf().not_after());
-               to.add_months (-1);
+               dcp::LocalTime from (Config::instance()->signer_chain()->leaf().not_before());
+               from.add_minutes (1);
+               dcp::LocalTime to (Config::instance()->signer_chain()->leaf().not_after());
+               to.add_minutes (-1);
 
                optional<dcp::EncryptedKDM> kdm;
                try {