Details
-
Type:
Bug
-
Status: Resolved
-
Priority:
P3
-
Resolution: Fixed
-
Affects Version/s: 19
-
Fix Version/s: 19
-
Component/s: security-libs
-
Labels:
-
Subcomponent:
-
Resolved In Build:b12
Description
In the TlsChannelBinding.java implementation, the string operation is placed before the case conversion. The behavior may be not expected.
String hashAlg = serverCertificate.getSigAlgName().
- replace("SHA", "SHA-").toUpperCase(Locale.ENGLISH);
+ toUpperCase(Locale.ENGLISH).replace("SHA", "SHA-");
String hashAlg = serverCertificate.getSigAlgName().
- replace("SHA", "SHA-").toUpperCase(Locale.ENGLISH);
+ toUpperCase(Locale.ENGLISH).replace("SHA", "SHA-");