DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40076>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=40076

           Summary: Denigrated
                    (org.apache.xml.security.keys.content.x509.XMLX509Issuer
                    Serial)
           Product: Security
           Version: Java 1.3
          Platform: All
        OS/Version: other
            Status: NEW
          Keywords: RFC
          Severity: normal
          Priority: P3
         Component: Encryption
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: [EMAIL PROTECTED]


org.apache.xml.security.keys.content.x509.XMLX509IssuerSerial
...
public XMLX509IssuerSerial(Document doc, X509Certificate x509certificate) {
      this(doc,
           RFC2253Parser.normalize(x509certificate.getIssuerDN().getName()),
           x509certificate.getSerialNumber());
}

In this piece of code, x509certificate.getIssuerDN().getName() should be 
replaced by x509certificate.getIssuerX500Principal().getName(), as suggested by 
the JDK 1.5 API  
(http://java.sun.com/j2se/1.5.0/docs/api/java/security/cert/X509Certificate.html
#getIssuerDN())


The problem I have now, is that the IssuerDN with the current implementation 
will report:

[EMAIL PROTECTED],CN=blah,...

RFC2253 format will report:  

1.2.840.113549.1.9.1=#<hex string>,CN=blah,...

This cause issuer distinguished name not to be identified.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to