From 5d4d7a9de6f562017a4606e6879886ed97136d83 Mon Sep 17 00:00:00 2001
From: Olav Morken <olav.morken@uninett.no>
Date: Tue, 4 Aug 2009 08:12:16 +0000
Subject: [PATCH] saml2_Message: Workaround for SPs which doesn't allow for
clock drift.
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1623 44740490-163a-0410-bde0-09ae8108e29a
---
modules/saml2/lib/Message.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules/saml2/lib/Message.php b/modules/saml2/lib/Message.php
index 342a485e7..a28f11c6f 100644
--- a/modules/saml2/lib/Message.php
+++ b/modules/saml2/lib/Message.php
@@ -442,7 +442,7 @@ class sspmod_saml2_Message {
$a->setDestination($dstMetadata->getString('AssertionConsumerService'));
$a->setValidAudiences(array($dstMetadata->getString('entityid')));
- $a->setNotBefore(time());
+ $a->setNotBefore(time() - 30);
$assertionLifetime = $dstMetadata->getInteger('assertion.lifetime', NULL);
if ($assertionLifetime === NULL) {
--
GitLab