diff options
author | awnuk <awnuk@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2009-08-17 22:10:23 +0000 |
---|---|---|
committer | awnuk <awnuk@c9f7a03b-bd48-0410-a16d-cbbf54688b0b> | 2009-08-17 22:10:23 +0000 |
commit | cf2d8c36dc25b4ef743940287e872bd516b9c754 (patch) | |
tree | d856118016c8d83edb68a2a0dc383db084584ce1 /pki/base | |
parent | 93390521dff7fa1622dec18a9231d6faac165d40 (diff) | |
download | pki-cf2d8c36dc25b4ef743940287e872bd516b9c754.tar.gz pki-cf2d8c36dc25b4ef743940287e872bd516b9c754.tar.xz pki-cf2d8c36dc25b4ef743940287e872bd516b9c754.zip |
Fixed bugzilla bug #517609
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@760 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
Diffstat (limited to 'pki/base')
-rw-r--r-- | pki/base/common/src/com/netscape/cms/profile/constraint/ValidityConstraint.java | 21 |
1 files changed, 13 insertions, 8 deletions
diff --git a/pki/base/common/src/com/netscape/cms/profile/constraint/ValidityConstraint.java b/pki/base/common/src/com/netscape/cms/profile/constraint/ValidityConstraint.java index 476cb8ec1..7bff5f67a 100644 --- a/pki/base/common/src/com/netscape/cms/profile/constraint/ValidityConstraint.java +++ b/pki/base/common/src/com/netscape/cms/profile/constraint/ValidityConstraint.java @@ -126,6 +126,12 @@ public class ValidityConstraint extends EnrollConstraint { "CMS_PROFILE_VALIDITY_NOT_FOUND")); } + if (notAfter.getTime() < notBefore.getTime()) { + CMS.debug("ValidityConstraint: notAfter (" + notAfter + ") < notBefore (" + notBefore + ")"); + throw new ERejectException(CMS.getUserMessage(getLocale(request), + "CMS_PROFILE_NOT_AFTER_BEFORE_NOT_BEFORE")); + } + long millisDiff = notAfter.getTime() - notBefore.getTime(); CMS.debug("ValidityConstraint: millisDiff=" + millisDiff + " notAfter=" + notAfter.getTime() + " notBefore=" + notBefore.getTime()); long long_days = (millisDiff / 1000 ) / 86400; @@ -167,21 +173,20 @@ public class ValidityConstraint extends EnrollConstraint { } long notBeforeGracePeriod = Long.parseLong(notBeforeGracePeriodStr) * SECS_IN_MS; + Date current = CMS.getCurrentDate(); if (notBeforeCheck) { - Date current = CMS.getCurrentDate(); - if (notBefore.getTime() > (current.getTime() + notBeforeGracePeriod)) { - CMS.debug("ValidityConstraint: notBefore (" + notBefore + ") < current (" + current + ")"); + CMS.debug("ValidityConstraint: notBefore (" + notBefore + ") > current + "+ + "gracePeriod (" + new Date(current.getTime() + notBeforeGracePeriod) + ")"); throw new ERejectException(CMS.getUserMessage(getLocale(request), - "CMS_PROFILE_NOT_BEFORE_BEFORE_CURRENT")); + "CMS_PROFILE_NOT_BEFORE_AFTER_CURRENT")); } } - if (notAfterCheck) { - if (notAfter.getTime() < notBefore.getTime()) { - CMS.debug("ValidityConstraint: notAfter (" + notAfter + ") < notBefore (" + notBefore + ")"); + if (notAfter.getTime() < current.getTime()) { + CMS.debug("ValidityConstraint: notAfter (" + notAfter + ") < current + (" + current + ")"); throw new ERejectException(CMS.getUserMessage(getLocale(request), - "CMS_PROFILE_NOT_AFTER_BEFORE_NOT_BEFORE")); + "CMS_PROFILE_NOT_AFTER_BEFORE_CURRENT")); } } } |