From: Carl Hetherington <cth@carlh.net>
Date: Tue, 10 Mar 2020 16:10:56 +0000 (+0100)
Subject: Make DKDMs with validity 2 minutes shorter than the signer certificate
X-Git-Tag: v2.15.48~23^2
X-Git-Url: https://main.carlh.net/gitweb/?p=dcpomatic.git;a=commitdiff_plain;h=b24fe6cc8a1e9a980bfd3f6df8476dfa86c3b3a2

Make DKDMs with validity 2 minutes shorter than the signer certificate
validity (#1728).
---

diff --git a/src/tools/dcpomatic.cc b/src/tools/dcpomatic.cc
index 47851a218..ea3cfbe32 100644
--- a/src/tools/dcpomatic.cc
+++ b/src/tools/dcpomatic.cc
@@ -879,10 +879,10 @@ private:
 			);
 
 
-		dcp::LocalTime from (Config::instance()->decryption_chain()->leaf().not_before());
-		from.add_months (1);
-		dcp::LocalTime to (Config::instance()->decryption_chain()->leaf().not_after());
-		to.add_months (-1);
+		dcp::LocalTime from (Config::instance()->signer_chain()->leaf().not_before());
+		from.add_minutes (1);
+		dcp::LocalTime to (Config::instance()->signer_chain()->leaf().not_after());
+		to.add_minutes (-1);
 
 		optional<dcp::EncryptedKDM> kdm;
 		try {