mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

floblanc
10.13.2009 e3815a1c20981296547bf5a074e7822ff2088df3
refs
author floblanc <floblanc@localhost>
Tuesday, March 10, 2009 14:13 +0100
committer floblanc <floblanc@localhost>
Tuesday, March 10, 2009 14:13 +0100
commite3815a1c20981296547bf5a074e7822ff2088df3
tree 303ccf9c7b8d4295a29be8868cf5f6a8abc67644 tree | zip | gz
parent 0a02fefcd10ec4b109237e580a2f70bf4e09af07 view | diff
Fix issue 3860 OpenDS unable to find a certificate in JKS keystore if the alias contains upercase
When OpenDS is configured to use alias xxx-cert in JKS keystore, LDAPS does not work if the alias contains upercase.

Javadoc for KeyStore specifies that
"Whether aliases are case sensitive is implementation dependent. In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case."

This fix compares the found alias with the configured alias name using String.equalsIgnoreCase() instead of String.equals().

We should also document that the user must not define 2 certificates aliases that only differ in case.
1 files modified
9 ■■■■■ changed files
opendj-sdk/opends/src/server/org/opends/server/util/SelectableCertificateKeyManager.java 9 ●●●●● diff | view | raw | blame | history