try

{ if (!AssertionUtil.hasExpired(issuedAssertion)) throw logger.samlAssertionExpiredError(); }

catch (ConfigurationException e)

{ throw logger.processingError(e); }

When the hasExpired method returns true, an exception should be thrown. Right now, it is throwing on opposite.