added back support for subject key identifier check where serial number is not provided.
@@ -2492,6 +2492,14 @@ protected Collection getTrustAnchors(X509Certificate cert, Set trustanchors) thr
{
certSelectX509.setSerialNumber(authID.getAuthorityCertSerialNumber());
}
+ else
+ {
+ byte[] keyID = authID.getKeyIdentifier();
+ if (keyID != null)
+ {
+ certSelectX509.setSubjectKeyIdentifier(new DEROctetString(keyID).getEncoded());
+ }
+ }
}
}
catch (IOException ex)
