From 883e0ec158eec04547da6856dbdaef0a8f640cb0 Mon Sep 17 00:00:00 2001
From: Andrew Wnuk <awnuk@redhat.com>
Date: Thu, 6 Dec 2012 17:02:17 -0800
Subject: number verification

This patch improves number verification.

Bug 864397.
---
 base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java')

diff --git a/base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java b/base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java
index 74a3183d6..508cd72c1 100644
--- a/base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java
+++ b/base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java
@@ -103,7 +103,11 @@ public class RequestProcessor extends CertProcessor {
                 String requestNonce = data.getNonce();
                 boolean nonceVerified = false;
                 if (requestNonce != null) {
-                    long nonce = Long.parseLong(requestNonce.trim());
+                    long nonce = 0L;
+                    try {
+                        nonce = Long.parseLong(requestNonce.trim());
+                    } catch (NumberFormatException e) {
+                    }
                     X509Certificate cert1 = nonces.getCertificate(nonce);
                     X509Certificate cert2 = getSSLClientCertificate(request);
                     if (cert1 == null) {
-- 
cgit