Accessibility tools

European Commission Joinup  

STORK

(
 
)
Membership of this software must be approved by a facilitator
64 reads

Bug in class SignSW in SAML engine

final String isu = certificate.getIssuerDN().getName(); if (serialNum.equalsIgnoreCase(serialNumber) && isu.equalsIgnoreCase(issuer)) { alias = aliasCert; find = true; } isu.equalsIgnoreCase(issuer) compares the complete DN of a certificate as String. However, the String returned by certificate.getIssuerDN().getName() depends on the underlying implementation and registered security provider. Thus the complete DN must not be compared but only the individual elements of the DN separately. This means individual comparison of e.g. CN, O, L... of the certificate's DN.

Hardware All
Product Common functionalities
Operating System All
Component SAML engine
Version None
Severity normal
Resolution Accepted As Bug

Attachment

Information

Project:
STORK
Version:
1.0-MS
Component:
Code
Category:
Bugs
Priority:
Major
Assigned:
joaquin
Status:
Fixed
Identifier:
35503

Comments

John Heppe
Posted by John Heppe on December 12, 2011 at 19:11
Project:» STORK
Component:» Code
Category:» Bugs
Priority:» Major
Assigned to:former user» joaquin
Status:» Closed

Has been solved in March

John Heppe
Posted by John Heppe on December 14, 2011 at 10:50
Version:<none>» 1.0-MS
Status:Closed» Fixed