Skip to content
Snippets Groups Projects
Commit af1165aa authored by Olav Morken's avatar Olav Morken
Browse files

saml: Allow missing NotOnOrAfter & NotBefore conditions.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2765 44740490-163a-0410-bde0-09ae8108e29a
parent 76542b5b
No related branches found
No related tags found
No related merge requests found
......@@ -552,12 +552,12 @@ class sspmod_saml_Message {
/* Check various properties of the assertion. */
$notBefore = $assertion->getNotBefore();
if ($notBefore > time() + 60) {
if ($notBefore !== NULL && $notBefore > time() + 60) {
throw new SimpleSAML_Error_Exception('Received an assertion that is valid in the future. Check clock synchronization on IdP and SP.');
}
$notOnOrAfter = $assertion->getNotOnOrAfter();
if ($notOnOrAfter <= time() - 60) {
if ($notOnOrAfter !== NULL && $notOnOrAfter <= time() - 60) {
throw new SimpleSAML_Error_Exception('Received an assertion that has expired. Check clock synchronization on IdP and SP.');
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment