This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/main by this push:
     new 6723da014d Retrieve correct principal
6723da014d is described below

commit 6723da014d00e12a8616f733a6429bb1b029992b
Author: Mark Thomas <[email protected]>
AuthorDate: Tue Oct 7 10:00:38 2025 +0100

    Retrieve correct principal
    
    Note: Code is currently unused
---
 java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java        | 2 +-
 java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java 
b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
index dc5b0f4b6c..87505b32b6 100644
--- a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
@@ -1324,7 +1324,7 @@ public final class OpenSSLEngine extends SSLEngine 
implements SSLUtil.ProtocolIn
         }
 
         private Principal principal(Certificate[] certs) {
-            return ((java.security.cert.X509Certificate) 
certs[0]).getIssuerX500Principal();
+            return ((java.security.cert.X509Certificate) 
certs[0]).getSubjectX500Principal();
         }
 
         @Override
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java 
b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 2e8c37784a..89e1283f51 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1574,7 +1574,7 @@ public final class OpenSSLEngine extends SSLEngine 
implements SSLUtil.ProtocolIn
         }
 
         private Principal principal(Certificate[] certs) {
-            return ((java.security.cert.X509Certificate) 
certs[0]).getIssuerX500Principal();
+            return ((java.security.cert.X509Certificate) 
certs[0]).getSubjectX500Principal();
         }
 
         @Override


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to