[jboss-remoting-commits] JBoss Remoting SVN: r3770 - remoting2/branches/2.x/src/main/org/jboss/remoting/transport/http/ssl.

[jboss-remoting-commits at lists.jboss.org]

Author: ron.sigal at jboss.com
Date: 2008-03-26 00:36:21 -0400 (Wed, 26 Mar 2008)
New Revision: 3770

Modified:
   remoting2/branches/2.x/src/main/org/jboss/remoting/transport/http/ssl/HTTPSClientInvoker.java
Log:
JBREM-934: Put Boolean.getBoolean() in AccessController.doPrivileged() call.

Modified: remoting2/branches/2.x/src/main/org/jboss/remoting/transport/http/ssl/HTTPSClientInvoker.java
===================================================================
--- remoting2/branches/2.x/src/main/org/jboss/remoting/transport/http/ssl/HTTPSClientInvoker.java	2008-03-26 04:35:00 UTC (rev 3769)
+++ remoting2/branches/2.x/src/main/org/jboss/remoting/transport/http/ssl/HTTPSClientInvoker.java	2008-03-26 04:36:21 UTC (rev 3770)
@@ -30,16 +30,18 @@
 import org.jboss.remoting.security.SSLSocketBuilderMBean;
 import org.jboss.remoting.socketfactory.SocketFactoryWrapper;
 import org.jboss.remoting.transport.http.HTTPClientInvoker;
-
 import javax.net.SocketFactory;
 import javax.net.ssl.HandshakeCompletedListener;
 import javax.net.ssl.HostnameVerifier;
 import javax.net.ssl.HttpsURLConnection;
 import javax.net.ssl.SSLSession;
 import javax.net.ssl.SSLSocketFactory;
+
 import java.io.IOException;
 import java.lang.reflect.Constructor;
 import java.net.HttpURLConnection;
+import java.security.AccessController;
+import java.security.PrivilegedAction;
 import java.util.Map;
 
 /**
@@ -178,8 +180,16 @@
 
       // If we still don't have a HostnameVerifier, look for directive to ignore host name.
       if (hostnameVerifier == null)
-      {
-         boolean ignoreHTTPSHost = Boolean.getBoolean(IGNORE_HTTPS_HOST);
+      {  
+         Boolean b = (Boolean) AccessController.doPrivileged( new PrivilegedAction()
+         {
+            public Object run()
+            {
+               return new Boolean(Boolean.getBoolean(IGNORE_HTTPS_HOST));
+            }
+         });
+         
+         boolean ignoreHTTPSHost = b.booleanValue();
          String ignoreHost = (String) metadata.get(IGNORE_HTTPS_HOST);
          if (ignoreHost != null && ignoreHost.length() > 0)
          {