From b24fe6cc8a1e9a980bfd3f6df8476dfa86c3b3a2 Mon Sep 17 00:00:00 2001 From: Carl Hetherington Date: Tue, 10 Mar 2020 17:10:56 +0100 Subject: [PATCH] Make DKDMs with validity 2 minutes shorter than the signer certificate validity (#1728). --- src/tools/dcpomatic.cc | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/tools/dcpomatic.cc b/src/tools/dcpomatic.cc index 47851a218..ea3cfbe32 100644 --- a/src/tools/dcpomatic.cc +++ b/src/tools/dcpomatic.cc @@ -879,10 +879,10 @@ private: ); - dcp::LocalTime from (Config::instance()->decryption_chain()->leaf().not_before()); - from.add_months (1); - dcp::LocalTime to (Config::instance()->decryption_chain()->leaf().not_after()); - to.add_months (-1); + dcp::LocalTime from (Config::instance()->signer_chain()->leaf().not_before()); + from.add_minutes (1); + dcp::LocalTime to (Config::instance()->signer_chain()->leaf().not_after()); + to.add_minutes (-1); optional kdm; try { -- 2.30.2