This is an automated email from the ASF dual-hosted git repository. dsoumis pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 888aac479e20f1a6d8da1b40e00b0d6a8044dddd Author: Dimitris Soumis <[email protected]> AuthorDate: Thu Oct 29 17:47:59 2026 +0200 Ignore alias case when reporting a resolved certificate alias. --- java/org/apache/tomcat/util/net/AbstractEndpoint.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/java/org/apache/tomcat/util/net/AbstractEndpoint.java b/java/org/apache/tomcat/util/net/AbstractEndpoint.java index 8d9890c2cd..b2a58490af 100644 --- a/java/org/apache/tomcat/util/net/AbstractEndpoint.java +++ b/java/org/apache/tomcat/util/net/AbstractEndpoint.java @@ -653,14 +653,14 @@ public abstract class AbstractEndpoint<S, U> { String configuredAlias = certificate.getCertificateKeyAlias(); if (sslContext != null && configuredAlias != null) { String servedAlias = sslContext.getServedAlias(certificate); - if (servedAlias != null && !servedAlias.equals(configuredAlias)) { + if (servedAlias != null && !servedAlias.equalsIgnoreCase(configuredAlias)) { getLogCertificate() .info(sm.getString("endpoint.tls.info.cert.aliasResolved", configuredAlias, servedAlias)); } } if (getLogCertificate().isDebugEnabled() && sslContext != null) { - X509Certificate[] x509Certificates = sslContext.getCertificateChain(certificate); + X509Certificate[] x509Certificates = sslContext.getCertificateChain(sslContext.getServedAlias(certificate)); if (x509Certificates != null && x509Certificates.length > 0) { getLogCertificate().debug(generateCertificateDebug(x509Certificates[0])); } else { --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
