From 9b22e6c88920b4d06ff0a8a67153452f8fd1bd1b Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Tue, 04 Aug 2026 08:29:20 +0000
Subject: [PATCH] Fix CodeQL note-severity alerts: deprecated JDK calls and inefficient expressions (#823)

---
 opendj-server-legacy/src/main/java/org/opends/server/util/ExpirationCheckTrustManager.java |    9 +++++----
 1 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/opendj-server-legacy/src/main/java/org/opends/server/util/ExpirationCheckTrustManager.java b/opendj-server-legacy/src/main/java/org/opends/server/util/ExpirationCheckTrustManager.java
index 2e55493..ec397ff 100644
--- a/opendj-server-legacy/src/main/java/org/opends/server/util/ExpirationCheckTrustManager.java
+++ b/opendj-server-legacy/src/main/java/org/opends/server/util/ExpirationCheckTrustManager.java
@@ -13,6 +13,7 @@
  *
  * Copyright 2008 Sun Microsystems, Inc.
  * Portions Copyright 2014-2016 ForgeRock AS.
+ * Portions Copyright 2026 3A Systems, LLC.
  */
 package org.opends.server.util;
 
@@ -92,13 +93,13 @@
       catch (CertificateExpiredException cee)
       {
         logger.error(ERR_EXPCHECK_TRUSTMGR_CLIENT_CERT_EXPIRED,
-            c.getSubjectDN().getName(), c.getNotAfter());
+            c.getSubjectX500Principal().getName(), c.getNotAfter());
         throw cee;
       }
       catch (CertificateNotYetValidException cnyve)
       {
         logger.error(ERR_EXPCHECK_TRUSTMGR_CLIENT_CERT_NOT_YET_VALID,
-            c.getSubjectDN().getName(), c.getNotBefore());
+            c.getSubjectX500Principal().getName(), c.getNotBefore());
         throw cnyve;
       }
     }
@@ -134,13 +135,13 @@
       catch (CertificateExpiredException cee)
       {
         logger.error(ERR_EXPCHECK_TRUSTMGR_SERVER_CERT_EXPIRED,
-            c.getSubjectDN().getName(), c.getNotAfter());
+            c.getSubjectX500Principal().getName(), c.getNotAfter());
         throw cee;
       }
       catch (CertificateNotYetValidException cnyve)
       {
         logger.error(ERR_EXPCHECK_TRUSTMGR_SERVER_CERT_NOT_YET_VALID,
-            c.getSubjectDN().getName(), c.getNotBefore());
+            c.getSubjectX500Principal().getName(), c.getNotBefore());
         throw cnyve;
       }
     }

--
Gitblit v1.10.0