[java-identity-provider] branch main updated: Adjust an X509Support call.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=a345e1bf60ef9d10a3b2386922c90daa8d97465c

The following commit(s) were added to refs/heads/main by this push:
     new a345e1bf6 Adjust an X509Support call.
a345e1bf6 is described below

commit a345e1bf60ef9d10a3b2386922c90daa8d97465c
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Mar 28 10:53:58 2023 -0400

    Adjust an X509Support call.
---
 .../net/shibboleth/idp/authn/impl/X500SubjectCanonicalization.java   | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/X500SubjectCanonicalization.java b/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/X500SubjectCanonicalization.java
index 56576a3c2..d547cfe7e 100644
--- a/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/X500SubjectCanonicalization.java
+++ b/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/X500SubjectCanonicalization.java
@@ -151,9 +151,10 @@ public class X500SubjectCanonicalization extends AbstractSubjectCanonicalization
     protected void doExecute(@Nonnull final ProfileRequestContext profileRequestContext, 
             @Nonnull final SubjectCanonicalizationContext c14nContext) {
 
-        if (certificate != null && !subjectAltNameTypes.isEmpty()) {
+        final X509Certificate localCopy = certificate;
+        if (localCopy != null && !subjectAltNameTypes.isEmpty()) {
             log.debug("{} Searching for subjectAltName types ({})", getLogPrefix(), subjectAltNameTypes);
-            final List<?> altnames = X509Support.getAltNames(certificate, subjectAltNameTypes.toArray(new Integer[0]));
+            final List<?> altnames = X509Support.getAltNames(localCopy, subjectAltNameTypes.toArray(new Integer[0]));
             assert altnames != null;
             for (final Object altname : altnames) {
                 if (altname instanceof String) {

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.