Possible problem with validUntil in opensaml

[Leif Johansson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I just ran into a strange issue: I have (or rather had) metadata where
one of the EntityDescriptor elements had a validUntil tag which had
expired. The containing EntitiesDescriptor element had a validUntil
attribute which was still current. Both validUntil attributes were
syntactically correct timestamps.

An admittedly strange situation, but...

The effect on consuming this metadata in 2.4.5 IdPs was very strange:
it seemed like the "inner" validUntil element caused the full metadata
to be treated as expired.

	Best Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/fM5QACgkQ8Jx8FtbMZnfiggCfVt2OyUFRE5tyXnMDd1Yl6Rmb
f+EAoKfnKaNixbKAiPGVQOHNhVbolzEq
=wbrs
-----END PGP SIGNATURE-----