[jira] [Updated] (CXF-4897) STS: check not found certificates in DefaultSubjectProvider for symmetric key type

["Andrei Shakirin (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CXF-4897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrei Shakirin updated CXF-4897:
---------------------------------

    Component/s: STS
    
> STS: check not found certificates in DefaultSubjectProvider for symmetric key type
> ----------------------------------------------------------------------------------
>
>                 Key: CXF-4897
>                 URL: https://issues.apache.org/jira/browse/CXF-4897
>             Project: CXF
>          Issue Type: Bug
>          Components: STS
>            Reporter: Andrei Shakirin
>
> DefaultSubjectProvider retrieves X509 certificate to encrypt key information. It asks crypto provider for X509 certs using:
> X509Certificate certificate = crypto.getX509Certificates(cryptoType)[0];
> If certificates are not found it caused NLP or ArrayOutOfBound exceptions in STS code.
> Proposal: check returned array in following way for null and 0 length.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira