Add support for certificates without cn

scality · Oct 2, 2024 · b739688 · b739688
1 parent 398797f
commit b739688
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/main/java/com/scality/keycloak/truststore/JpaCertificateTruststoreProvider.java b/src/main/java/com/scality/keycloak/truststore/JpaCertificateTruststoreProvider.java
@@ -57,12 +57,13 @@ private CertificateRepresentation toCertificateRepresentation(TruststoreEntity e
         X509Certificate x509Certificate = toX509Certificate(entity.getCertificate());
         try {
             X500Name x500name = new JcaX509CertificateHolder(x509Certificate).getSubject();
-            RDN cn = x500name.getRDNs(BCStyle.CN)[0];
+            RDN[] rdns = x500name.getRDNs(BCStyle.CN);
+            RDN cn = rdns.length > 0 ? rdns[0] : null;
 
             CertificateRepresentation certificate = new CertificateRepresentation(
                     entity.getAlias(),
                     entity.getCertificate(),
-                    IETFUtils.valueToString(cn.getFirst().getValue()));
+                    cn != null ? IETFUtils.valueToString(cn.getFirst().getValue()) : "-");
 
             return certificate;