summaryrefslogtreecommitdiffstats
path: root/base/server
diff options
context:
space:
mode:
authorChristina Fu <cfu@redhat.com>2017-06-20 15:04:12 -0700
committerChristina Fu <cfu@redhat.com>2017-06-20 15:04:12 -0700
commit2d69d9332eea7ddc5205dc9e44d15452be4be61f (patch)
tree806991e02107db676d47598ae4f5a65d41e0e827 /base/server
parenta0146a3eb316dde1deabbfaded12b20bf0bec064 (diff)
downloadpki-2d69d9332eea7ddc5205dc9e44d15452be4be61f.tar.gz
pki-2d69d9332eea7ddc5205dc9e44d15452be4be61f.tar.xz
pki-2d69d9332eea7ddc5205dc9e44d15452be4be61f.zip
Ticket #2618 UniqueKeyConstraint fix on subjectDN comparison
Diffstat (limited to 'base/server')
-rw-r--r--base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java6
1 files changed, 1 insertions, 5 deletions
diff --git a/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java b/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java
index 030995a72..261457671 100644
--- a/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java
+++ b/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java
@@ -240,11 +240,7 @@ public class UniqueKeyConstraint extends EnrollConstraint {
}
// only VALID or EXPIRED certs could have reached here
X509CertImpl origCert = rec.getCertificate();
- String certDN =
- origCert.getSubjectDN().toString();
- CMS.debug(method + " cert retrieved from ldap has subject DN =" + certDN);
-
- sjname_in_db = new X500Name(certDN);
+ sjname_in_db = (X500Name) origCert.getSubjectDN();
if (sjname_in_db.equals(sjname_in_req) == false) {
msg = msg + "subject name not match in same key renewal;";