# HG changeset patch
# User weijun
# Date 1505346353 -28800
# Node ID 2ce508de5c771ec239b3ee1d37db0e90043a3b5d
# Parent  96bff87ea130ebe587c9e7724bf4977f96fa7f80
8178458: Better use of certificates in LDAP
Reviewed-by: vinnie, asmotrak

diff -r 96bff87ea130 -r 2ce508de5c77 src/java.naming/share/classes/sun/security/provider/certpath/ldap/LDAPCertStore.java
--- a/src/java.naming/share/classes/sun/security/provider/certpath/ldap/LDAPCertStore.java	Tue Sep 05 15:53:33 2017 +0100
+++ b/src/java.naming/share/classes/sun/security/provider/certpath/ldap/LDAPCertStore.java	Thu Sep 14 07:45:53 2017 +0800
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2000, 2015, Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
@@ -136,6 +136,11 @@
                         + params.getClass().getName() + " passed");
         }
 
+        SecurityManager security = System.getSecurityManager();
+        if (security != null) {
+            security.checkConnect(serverName, port);
+        }
+
         Key k = new Key(serverName, port);
         LDAPCertStoreImpl lci = certStoreCache.get(k);
         if (lci == null) {