From 7f29261148fa4a27824cb2006c515d376288ec64 Mon Sep 17 00:00:00 2001

From: Christina Fu <cfu@redhat.com>

Date: Tue, 20 Jun 2017 15:04:12 -0700

Subject: [PATCH] Ticket #2618 UniqueKeyConstraint fix on subjectDN comparison

(cherry picked from commit 2d69d9332eea7ddc5205dc9e44d15452be4be61f)

---

 .../com/netscape/cms/profile/constraint/UniqueKeyConstraint.java    | 6 +-----

 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java b/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java

index 030995a..2614576 100644

--- a/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java

+++ b/base/server/cms/src/com/netscape/cms/profile/constraint/UniqueKeyConstraint.java

@@ -240,11 +240,7 @@ public class UniqueKeyConstraint extends EnrollConstraint {

                             }

                             // only VALID or EXPIRED certs could have reached here

                             X509CertImpl origCert = rec.getCertificate();

-                            String certDN =

-                                    origCert.getSubjectDN().toString();

-                            CMS.debug(method + " cert retrieved from ldap has subject DN =" + certDN);

-

-                            sjname_in_db = new X500Name(certDN);

+                            sjname_in_db = (X500Name) origCert.getSubjectDN();

                             if (sjname_in_db.equals(sjname_in_req) == false) {

                                 msg = msg + "subject name not match in same key renewal;";

-- 

1.8.3.1