Validate certificate date against the IssueDate instead of current time

[remia]

From DCI Specifications 1.4.4:

The CPL meets the two validation requirements defined in Section 5.2.1. of SMPTE 430-5 "D-Cinema Operations – Security Log Event Class and Constraints for D-Cinema" with the following caveat: When performing Step 9 of Section 6.2 in SMPTE ST 430-2, the desired time of the validation context shall be equal to the IssueDate field of the target CPL (and not the current time). This behavior permits the continued playback of a CPL after the expiration of its signing certificate, but ensures that the signing took place during the certificate's validity period.

[jamiegau]

A full breakdown of the error, who it affects. More info than you want about this issue..

https://www.isdcf.com/certs-expiring/

[remia]

Thinking only now but should we keep a Warning / Info if the check fail when validation (wrongly) with the current date? Mostly for EOL playback systems that are not going to get the upgrade?

[jamiegau]

Sounds reasonable. Or people are too lazy to update those systems that will be getting upgrades to address it..