This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/11.0.x by this push:
     new 59eb10e78e Retrieve correct principal
59eb10e78e is described below

commit 59eb10e78ed2b383f95811e38ea88821c0b27392
Author: Mark Thomas <[email protected]>
AuthorDate: Tue Oct 7 10:00:38 2025 +0100

    Retrieve correct principal
    
    Note: Code is currently unused
---
 java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java        | 2 +-
 java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java 
b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
index 9da88f121a..86539f20f7 100644
--- a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
@@ -1324,7 +1324,7 @@ public final class OpenSSLEngine extends SSLEngine 
implements SSLUtil.ProtocolIn
         }
 
         private Principal principal(Certificate[] certs) {
-            return ((java.security.cert.X509Certificate) 
certs[0]).getIssuerX500Principal();
+            return ((java.security.cert.X509Certificate) 
certs[0]).getSubjectX500Principal();
         }
 
         @Override
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java 
b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 913b1e8262..4dc3b00e40 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1574,7 +1574,7 @@ public final class OpenSSLEngine extends SSLEngine 
implements SSLUtil.ProtocolIn
         }
 
         private Principal principal(Certificate[] certs) {
-            return ((java.security.cert.X509Certificate) 
certs[0]).getIssuerX500Principal();
+            return ((java.security.cert.X509Certificate) 
certs[0]).getSubjectX500Principal();
         }
 
         @Override


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to