[java-opensaml COMMIT] in /trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl: AbstractD...
noreply at shibboleth.net
noreply at shibboleth.net
Wed Feb 11 17:54:55 EST 2015
Author: putmanb
Date: Wed Feb 11 17:54:55 2015
New Revision: 4221
URL: http://svn.shibboleth.net/view/java-opensaml?rev=4221&view=rev
Log:
Reverse order of checks in boolean expression, put the less expensive and more-likely-to-be-false one first.
Modified:
trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolver.java
trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/HTTPMetadataResolver.java
Modified: trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolver.java
URL: http://svn.shibboleth.net/view/java-opensaml/trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolver.java?rev=4221&r1=4220&r2=4221&view=diff
==============================================================================
--- trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolver.java (original)
+++ trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolver.java Wed Feb 11 17:54:55 2015
@@ -281,7 +281,7 @@
* @param request the HTTP URI request
*/
protected void checkTLSCredentialTrusted(HttpClientContext context, HttpUriRequest request) {
- if ("https".equalsIgnoreCase(request.getURI().getScheme()) && tlsTrustEngine != null) {
+ if (tlsTrustEngine != null && "https".equalsIgnoreCase(request.getURI().getScheme())) {
if (context.getAttribute(HttpClientSecurityConstants.CONTEXT_KEY_SERVER_TLS_CREDENTIAL_TRUSTED) == null) {
log.warn("Configured TLS trust engine was not used to verify server TLS credential, "
+ "the appropriate socket factory was likely not configured");
Modified: trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/HTTPMetadataResolver.java
URL: http://svn.shibboleth.net/view/java-opensaml/trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/HTTPMetadataResolver.java?rev=4221&r1=4220&r2=4221&view=diff
==============================================================================
--- trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/HTTPMetadataResolver.java (original)
+++ trunk/opensaml-saml-impl/src/main/java/org/opensaml/saml/metadata/resolver/impl/HTTPMetadataResolver.java Wed Feb 11 17:54:55 2015
@@ -264,7 +264,7 @@
* @param context the current HTTP context instance in use
*/
protected void checkTLSCredentialTrusted(HttpClientContext context) {
- if ("https".equalsIgnoreCase(metadataURI.getScheme()) && tlsTrustEngine != null) {
+ if (tlsTrustEngine != null && "https".equalsIgnoreCase(metadataURI.getScheme())) {
if (context.getAttribute(HttpClientSecurityConstants.CONTEXT_KEY_SERVER_TLS_CREDENTIAL_TRUSTED) == null) {
log.warn("Configured TLS trust engine was not used to verify server TLS credential, "
+ "the appropriate socket factory was likely not configured");
More information about the commits
mailing list