8178458: Better use of certificates in LDAP
authorweijun
Thu, 14 Sep 2017 07:45:53 +0800
changeset 48575 2ce508de5c77
parent 48574 96bff87ea130
child 48576 b0ab05328879
8178458: Better use of certificates in LDAP Reviewed-by: vinnie, asmotrak
src/java.naming/share/classes/sun/security/provider/certpath/ldap/LDAPCertStore.java
--- a/src/java.naming/share/classes/sun/security/provider/certpath/ldap/LDAPCertStore.java	Tue Sep 05 15:53:33 2017 +0100
+++ b/src/java.naming/share/classes/sun/security/provider/certpath/ldap/LDAPCertStore.java	Thu Sep 14 07:45:53 2017 +0800
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2000, 2015, Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
@@ -136,6 +136,11 @@
                         + params.getClass().getName() + " passed");
         }
 
+        SecurityManager security = System.getSecurityManager();
+        if (security != null) {
+            security.checkConnect(serverName, port);
+        }
+
         Key k = new Key(serverName, port);
         LDAPCertStoreImpl lci = certStoreCache.get(k);
         if (lci == null) {