430951 Support SNI with ExtendedSslContextFactory

relax cert constraints
2015-04-23 07:24:23 +10:00 · 2015-04-23 07:24:23 +10:00 · 6ec2a50cae
parent c9d8d07a63
commit 6ec2a50cae
1 changed files with 2 additions and 3 deletions
--- a/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/ExtendedSslContextFactory.java
+++ b/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/ExtendedSslContextFactory.java
@ -96,9 +96,8 @@ public class ExtendedSslContextFactory extends SslContextFactory
                    if (x509.getKeyUsage()!=null)
                    {
                        boolean[] b=x509.getKeyUsage();
-                        for (int i=0;i<b.length;i++)
-                            if (b[i])
-                                continue loop;
+                        if (b[5]/* keyCertSign */)
+                            continue loop;
                    }
                    
                    // Look for alternative name extensions