In the security components, there are cases that the string case-insensitive operations are performed before the case conversion. The behavior may be not expected.

For example, in the SignatureUtil implementation, the checkName() requires case-insensitive input. However, the method is called before the case conversion, for example:

            sigName = checkName(sigName).toUpperCase(Locale.ENGLISH);