I've found a bug when authenticating with certificate right after it has been created.
I mean UserAccountService.Authenticate(TAccount account, X509Certificate2 certificate). There is a validation of validity dates (NotBefore, NotAfter) against UtcNow property, which is not correct, because NotBefore and NotAfter properties are in local time. So the user with a newly created certificated is not able to login when he is not in the UTC timezone.
Hi,
I've found a bug when authenticating with certificate right after it has been created.
I mean
UserAccountService.Authenticate(TAccount account, X509Certificate2 certificate)
. There is a validation of validity dates (NotBefore, NotAfter) against UtcNow property, which is not correct, because NotBefore and NotAfter properties are in local time. So the user with a newly created certificated is not able to login when he is not in the UTC timezone.