summaryrefslogtreecommitdiffstats
path: root/security-utils
diff options
context:
space:
mode:
authorjonmv <venstad@gmail.com>2023-06-27 10:32:57 +0200
committerjonmv <venstad@gmail.com>2023-06-27 10:32:57 +0200
commit16a5e8e11248c4a9e6c00421ba30caca8a1e46eb (patch)
tree3c525f06528b51912af58947c158d2e4779cca11 /security-utils
parent3a066100ef96ffd3ac73d1d06096c98da077f296 (diff)
Short-cut re-acquiring ordered locks
Diffstat (limited to 'security-utils')
-rw-r--r--security-utils/src/main/java/com/yahoo/security/tls/PeerAuthorizer.java14
1 files changed, 4 insertions, 10 deletions
diff --git a/security-utils/src/main/java/com/yahoo/security/tls/PeerAuthorizer.java b/security-utils/src/main/java/com/yahoo/security/tls/PeerAuthorizer.java
index d0e1a33fcac..7c798eddab1 100644
--- a/security-utils/src/main/java/com/yahoo/security/tls/PeerAuthorizer.java
+++ b/security-utils/src/main/java/com/yahoo/security/tls/PeerAuthorizer.java
@@ -58,16 +58,10 @@ public class PeerAuthorizer {
}
private static boolean matchesRequiredCredentials(RequiredPeerCredential requiredCredential, String cn, List<String> sans) {
- switch (requiredCredential.field()) {
- case CN:
- return cn != null && requiredCredential.pattern().matches(cn);
- case SAN_DNS:
- case SAN_URI:
- return sans.stream()
- .anyMatch(san -> requiredCredential.pattern().matches(san));
- default:
- throw new RuntimeException("Unknown field: " + requiredCredential.field());
- }
+ return switch (requiredCredential.field()) {
+ case CN -> cn != null && requiredCredential.pattern().matches(cn);
+ case SAN_DNS, SAN_URI -> sans.stream().anyMatch(san -> requiredCredential.pattern().matches(san));
+ };
}
private static List<String> getSubjectAlternativeNames(X509Certificate peerCertificate) {