[JIRA] Created: (JXT-93) X509Util.determineEntityCertificate doesn't catch lower layer SecurityException

[Scott Cantor (JIRA)]

X509Util.determineEntityCertificate doesn't catch lower layer SecurityException
-------------------------------------------------------------------------------

                 Key: JXT-93
                 URL: https://issues.shibboleth.net/jira/browse/JXT-93
             Project: XMLTooling - Java
          Issue Type: Bug
          Components: Security
    Affects Versions: 1.3.4
         Environment: OS X, Oracle Java 7
            Reporter: Scott Cantor
            Assignee: Brent Putman
             Fix For: 1.4.0


I saw a failing test case that I tracked to this loop that checks for a match between a set of certs and a private key parameter. The loop only works if the SecurityHelper.matchKeyPair function doesn't throw, but it's documented as throwing SecurityException. Java 7 seems to throw on a non-matching keypair, which breaks the loop by throwing out.

For this function's purposes, a throw of SecurityException from the match() method is just a false result and the loop should continue by swallowing it.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira