hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ilian Iliev (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HTTPCLIENT-1836) DefaultHostnameVerifier#getSubjectAltNames(X509Certificate) throws java.lang.ClassCastException
Date Mon, 27 Mar 2017 13:10:41 GMT
Ilian Iliev created HTTPCLIENT-1836:

             Summary: DefaultHostnameVerifier#getSubjectAltNames(X509Certificate) throws java.lang.ClassCastException
                 Key: HTTPCLIENT-1836
                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1836
             Project: HttpComponents HttpClient
          Issue Type: Bug
          Components: HttpClient (classic)
    Affects Versions: 4.5.3
            Reporter: Ilian Iliev
            Priority: Minor

After upgrade to HttpClient 4.5.3, all of a sudden I started to receive the following exception
in one of my projects:
  java.lang.ClassCastException: [B cannot be cast to java.lang.String

The exception is thrown in DefaultHostnameVerifier#getSubjectAltNames() method, on line 309:
  final String s = (String) entry.get(1);

The code above assumes that each entry is either a String or something castable to String.
However, according to Javadoc documentation of X509Certificate.getSubjectAlternativeNames(),
it can be a byte array containing ASN.1 DER encoded value. Attempt to cast this byte array
to String is throwing java.lang.ClassCastException.

Seems to be a regression introduced in version 4.5.3 with the fix for HTTPCLIENT-1802

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org

View raw message