You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Andrei Shakirin (JIRA)" <ji...@apache.org> on 2013/03/17 16:19:14 UTC

[jira] [Created] (CXF-4897) STS: check not found certificates in DefaultSubjectProvider for symmetric key type

Andrei Shakirin created CXF-4897:
------------------------------------

             Summary: STS: check not found certificates in DefaultSubjectProvider for symmetric key type
                 Key: CXF-4897
                 URL: https://issues.apache.org/jira/browse/CXF-4897
             Project: CXF
          Issue Type: Bug
            Reporter: Andrei Shakirin


DefaultSubjectProvider retrieves X509 certificate to encrypt key information. It asks crypto provider for X509 certs using:
X509Certificate certificate = crypto.getX509Certificates(cryptoType)[0];

If certificates are not found it caused NLP or ArrayOutOfBound exceptions in STS code.

Proposal: check returned array in following way for null and 0 length.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira