You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
In WSX509KeyManager class, Liberty is only trying the first keyType : keyType[0]
Steps to Reproduce
The user updated Java from 17.0.9 to 17.0.11. It is suspected that in the user's environment, the keyType array in 17.0.9 coincidentally started with a keyType matching the certificate, whereas this is not the case in 17.0.11.
Expected behavior
Liberty locates and sends a SSL client certificate correctly to the SSL server during SSLHandshake
Diagnostic information:
OpenLiberty version: This issue is not related to the OpenLiberty version
Describe the bug
In WSX509KeyManager class, Liberty is only trying the first keyType : keyType[0]
Steps to Reproduce
The user updated Java from 17.0.9 to 17.0.11. It is suspected that in the user's environment, the keyType array in 17.0.9 coincidentally started with a keyType matching the certificate, whereas this is not the case in 17.0.11.
Expected behavior
Liberty locates and sends a SSL client certificate correctly to the SSL server during SSLHandshake
Diagnostic information:
transportSecurity-1.0
,ssl-1.0
For GOOD log, WSX509KeyManager.chooseEngineClientAlias() finds a matching alias for RSA.
For ERROR log, WSX509KeyManager.chooseEngineClientAlias() finds no matching alias for [EC, EdDSA, RSASSA-PSS, RSA, DSA] when passed all at once.
Additional context
The text was updated successfully, but these errors were encountered: