changeset 29390:9927a5ff3ded

8072385: Only the first DNSName entry is checked for endpoint identification Reviewed-by: weijun, jnimeh
author xuelei
date Wed, 11 Mar 2015 04:52:39 +0000
parents 348a32f79d79
children b4fad461f2b5
files jdk/src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java
diffstat 1 files changed, 3 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/jdk/src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java	Tue Mar 10 14:23:03 2015 -0700
+++ b/jdk/src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java	Wed Mar 11 04:52:39 2015 +0000
@@ -1569,6 +1569,9 @@
     /*
      * Returns the subject alternative name of the specified type in the
      * subjectAltNames extension of a certificate.
+     *
+     * Note that only those subjectAltName types that use String data
+     * should be passed into this function.
      */
     private static Collection<String> getSubjectAltNames(
             Collection<List<?>> subjectAltNames, int type) {