https://issues.apache.org/bugzilla/show_bug.cgi?id=44586

           Summary: XMLX509IssuerSerial.getIssuerName incorrectly escapes
                    '#' in hex values
           Product: Security
           Version: Java 1.4.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: [EMAIL PROTECTED]


If one of the AVAs in the Issuer DN contains a hex value, ex:
"9.99.999=#abc123"
XMLX509IssuerSerial.getIssuerName escapes the leading '#' and returns, ex:
"9.99.999=\#abc123"

It's ok to insert a '\' before the '#' if it is a String value, but not with a
hex value, and so inserting a '\' makes it non-compliant with RFC 2253.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to