This is an automated email from the ASF dual-hosted git repository. dsoumis pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 77901381d835295d3740910d04bd8c240efe1fab Author: Dimitris Soumis <[email protected]> AuthorDate: Thu Oct 29 17:47:59 2026 +0200 Ignore alias case when reporting a resolved certificate alias. --- java/org/apache/tomcat/util/net/AbstractEndpoint.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/java/org/apache/tomcat/util/net/AbstractEndpoint.java b/java/org/apache/tomcat/util/net/AbstractEndpoint.java index d61ba03d36..b9012a2538 100644 --- a/java/org/apache/tomcat/util/net/AbstractEndpoint.java +++ b/java/org/apache/tomcat/util/net/AbstractEndpoint.java @@ -540,14 +540,14 @@ public abstract class AbstractEndpoint<S, U> { String configuredAlias = certificate.getCertificateKeyAlias(); if (sslContext != null && configuredAlias != null) { String servedAlias = sslContext.getServedAlias(certificate); - if (servedAlias != null && !servedAlias.equals(configuredAlias)) { + if (servedAlias != null && !servedAlias.equalsIgnoreCase(configuredAlias)) { getLogCertificate() .info(sm.getString("endpoint.tls.info.cert.aliasResolved", configuredAlias, servedAlias)); } } if (getLogCertificate().isDebugEnabled() && sslContext != null) { - X509Certificate[] x509Certificates = sslContext.getCertificateChain(certificate); + X509Certificate[] x509Certificates = sslContext.getCertificateChain(sslContext.getServedAlias(certificate)); if (x509Certificates != null && x509Certificates.length > 0) { getLogCertificate().debug(generateCertificateDebug(x509Certificates[0])); } else { --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
