This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
     new c891cc5086 Retrieve correct principal
c891cc5086 is described below

commit c891cc50869b60e2cb168f37d29a492c628f90d9
Author: Mark Thomas <[email protected]>
AuthorDate: Tue Oct 7 10:00:38 2025 +0100

    Retrieve correct principal
    
    Note: Code is currently unused
---
 java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java        | 2 +-
 java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java 
b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
index 24406792c0..8a575ab86f 100644
--- a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
@@ -1371,7 +1371,7 @@ public final class OpenSSLEngine extends SSLEngine 
implements SSLUtil.ProtocolIn
         }
 
         private Principal principal(Certificate[] certs) {
-            return ((java.security.cert.X509Certificate) 
certs[0]).getIssuerX500Principal();
+            return ((java.security.cert.X509Certificate) 
certs[0]).getSubjectX500Principal();
         }
 
         @Override
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java 
b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index f7c7cc874e..0b602c0d17 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1574,7 +1574,7 @@ public final class OpenSSLEngine extends SSLEngine 
implements SSLUtil.ProtocolIn
         }
 
         private Principal principal(Certificate[] certs) {
-            return ((java.security.cert.X509Certificate) 
certs[0]).getIssuerX500Principal();
+            return ((java.security.cert.X509Certificate) 
certs[0]).getSubjectX500Principal();
         }
 
         @Override


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to