diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml index e6791d3d..c9656353 100644 --- a/owasp/suppressions.xml +++ b/owasp/suppressions.xml @@ -21,7 +21,8 @@ CVE-2022-34305 - Bug is fixed with SnameYAML 1.32, but CVE Matcher is invalid + DGCG is not using YML User Input, Bug is fixed with SnameYAML 1.32, but CVE Matcher is invalid + CVE-2022-38751 CVE-2022-38752 diff --git a/src/test/java/eu/europa/ec/dgc/gateway/service/SignerInformationServiceTest.java b/src/test/java/eu/europa/ec/dgc/gateway/service/SignerInformationServiceTest.java index abc4d9b7..61a47d2c 100644 --- a/src/test/java/eu/europa/ec/dgc/gateway/service/SignerInformationServiceTest.java +++ b/src/test/java/eu/europa/ec/dgc/gateway/service/SignerInformationServiceTest.java @@ -33,6 +33,7 @@ import java.security.PrivateKey; import java.security.cert.X509Certificate; import java.time.ZonedDateTime; +import java.time.temporal.ChronoUnit; import java.util.Base64; import java.util.List; import java.util.Optional; @@ -68,9 +69,9 @@ class SignerInformationServiceTest { private static final String countryCode = "EU"; private static final String dummySignature = "randomStringAsSignatureWhichIsNotValidatedInServiceLevel"; - private static final ZonedDateTime now = ZonedDateTime.now(); - private static final ZonedDateTime nowMinusOneMinute = ZonedDateTime.now().minusMinutes(1); - private static final ZonedDateTime nowMinusOneHour = ZonedDateTime.now().minusHours(1); + private final static ZonedDateTime now = ZonedDateTime.now().truncatedTo(ChronoUnit.SECONDS); + private final static ZonedDateTime nowMinusOneMinute = now.minusMinutes(1); + private final static ZonedDateTime nowMinusOneHour = now.minusHours(1); @BeforeEach void setUp() {