[JIRA] Closed: (JXT-93) X509Util.determineEntityCertificate doesn't catch lower layer SecurityException

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/JXT-93?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor closed JXT-93.
---------------------------


> X509Util.determineEntityCertificate doesn't catch lower layer SecurityException
> -------------------------------------------------------------------------------
>
>                 Key: JXT-93
>                 URL: https://issues.shibboleth.net/jira/browse/JXT-93
>             Project: XMLTooling - Java
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 1.3.4
>         Environment: OS X, Oracle Java 7
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 1.4.0
>
>          Time Spent: 1 hour
>  Remaining Estimate: 0 minutes
>
> I saw a failing test case that I tracked to this loop that checks for a match between a set of certs and a private key parameter. The loop only works if the SecurityHelper.matchKeyPair function doesn't throw, but it's documented as throwing SecurityException. Java 7 seems to throw on a non-matching keypair, which breaks the loop by throwing out.
> For this function's purposes, a throw of SecurityException from the match() method is just a false result and the loop should continue by swallowing it.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira