-
Type:
Bug
-
Resolution: Fixed
-
Priority:
P3
-
Affects Version/s: 17, 19
-
Component/s: security-libs
-
b12
In the TlsChannelBinding.java implementation, the string operation is placed before the case conversion. The behavior may be not expected.
String hashAlg = serverCertificate.getSigAlgName().
- replace("SHA", "SHA-").toUpperCase(Locale.ENGLISH);
+ toUpperCase(Locale.ENGLISH).replace("SHA", "SHA-");
String hashAlg = serverCertificate.getSigAlgName().
- replace("SHA", "SHA-").toUpperCase(Locale.ENGLISH);
+ toUpperCase(Locale.ENGLISH).replace("SHA", "SHA-");