diff options
author | Bjørn Christian Seime <bjorncs@vespa.ai> | 2023-11-16 12:26:49 +0100 |
---|---|---|
committer | Bjørn Christian Seime <bjorncs@vespa.ai> | 2023-11-16 12:26:49 +0100 |
commit | 3883df58e2f69ad1517a08958391d9da5ca551dc (patch) | |
tree | a1faacc01163b76abbd4663b755b9180129090e2 /security-utils/src | |
parent | eefa6cbc2c2cfe397b0c42336ae14763b8c62669 (diff) |
Only add extensions if non-empty
Diffstat (limited to 'security-utils/src')
-rw-r--r-- | security-utils/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/security-utils/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java b/security-utils/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java index c34e3acb09f..629b610564a 100644 --- a/security-utils/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java +++ b/security-utils/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java @@ -90,7 +90,8 @@ public class Pkcs10CsrBuilder { .toArray(GeneralName[]::new)); extGen.addExtension(Extension.subjectAlternativeName, false, generalNames); } - requestBuilder.addAttribute(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest, extGen.generate()); + if (!extGen.isEmpty()) + requestBuilder.addAttribute(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest, extGen.generate()); ContentSigner contentSigner = new JcaContentSignerBuilder(signatureAlgorithm.getAlgorithmName()) .setProvider(BouncyCastleProviderHolder.getInstance()) .build(keyPair.getPrivate()); |