OpenSAML user discussion

[Scott Cantor <>]

> In order to check if the assertion is not yet valid or has 
> expired, shouldn't the following occur:
> 
> if( (notBefore.getTime()    - 300000 <= System.currentTimeMillis())
> &&
>     (notOnOrAfter.getTime() + 300000 >  
> System.currentTimeMillis()) ) {
>   bExpired = true;
>   continue;
> }

While this particular boolean check gives me a headache, it was fixed a
while back to be in the form you see it now, and we used that code briefly
in the old alpha version. Your expression is backwards, because you're
fencing the current time in between the Before/After values and then saying
it's bad. That interval is the valid interval.

-- Scott

---------------------------------------------------mace-opensaml-users-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

---------------------------------------------------mace-opensaml-users--