Hi, I am using iTextsharp, and found the following issue with signature
verification. According to the methods:
/// <summary>
/// The time that this certificate is valid from.
/// </summary>
/// <returns>A DateTime object representing that time in the* local time
zone*.</returns>
public virtual DateTime *NotBefore*
{
get { return c.StartDate.ToDateTime(); }
}
/// <summary>
/// The time that this certificate is valid up to.
/// </summary>
/// <returns>A DateTime object representing that time in the *local
time zone*.</returns>
public virtual DateTime *NotAfter*
{
get { return c.EndDate.ToDateTime(); }
}
However, the time is returned in UTC. So, when verifying:
public virtual bool IsValid(
DateTime time)
{
return time.CompareTo(NotBefore) >= 0 &&
time.CompareTo(NotAfter) <= 0;
}
I pass "time" variable in local time, and validation fails because my
timezone is -5 UTC.
I changed the line:
return time.CompareTo(NotBefore) >= 0 && time.CompareTo(NotAfter) <= 0;
To:
DateTime timeUtc = time.ToUniversalTime();
return timeUtc.CompareTo(NotBefore) >= 0 && timeUtc.CompareTo(NotAfter) <=
0;
And validation is successful!
¿Is NotBefore and NotAfter supposed to return the time in UTC always?
or
¿Should I assure NotBefore and NotAfter to always return in local time?
Regards,
Jose.
--
Saludos cordiales,
José Bonilla
(+593) 95031497
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions
iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples:
http://itextpdf.com/themes/keywords.php
