mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

floblanc
10.13.2009 5deca13557d25ac83c49e35dddbbaf01d8ab686f
refs
author floblanc <floblanc@localhost>
Tuesday, March 10, 2009 14:13 +0100
committer floblanc <floblanc@localhost>
Tuesday, March 10, 2009 14:13 +0100
commit5deca13557d25ac83c49e35dddbbaf01d8ab686f
tree 73813b8ae1736966914bee3e996240a98a4c1112 tree | zip | gz
parent e39ae477fb0a723923acf3b314797a0d8b4c3d92 view | diff
Fix issue 3860 OpenDS unable to find a certificate in JKS keystore if the alias contains upercase
When OpenDS is configured to use alias xxx-cert in JKS keystore, LDAPS does not work if the alias contains upercase.

Javadoc for KeyStore specifies that
"Whether aliases are case sensitive is implementation dependent. In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case."

This fix compares the found alias with the configured alias name using String.equalsIgnoreCase() instead of String.equals().

We should also document that the user must not define 2 certificates aliases that only differ in case.
1 files modified
9 ■■■■■ changed files
opends/src/server/org/opends/server/util/SelectableCertificateKeyManager.java 9 ●●●●● diff | view | raw | blame | history