Coverity static analysis, Unwritten field, EntitySaslClient.clientCertUrl (Elytron) ----------------------------------------------------------------------------------- Key: WFLY-8107 URL: https://issues.jboss.org/browse/WFLY-8107 Project: WildFly Issue Type: Bug Components: Security Reporter: Martin Choma Assignee: Ilia Vassilev Coverity found field {{EntitySaslClient.clientCertUrl}} is never filled. So probably initially intended behavior in {{X509Certificate getClientCertificate()}} method is not covered. {code:java} private X509Certificate getClientCertificate() throws SaslException { if ((clientCertChain != null) && (clientCertChain.length > 0)) { return clientCertChain[0]; } else if (clientCertUrl != null) { try { return EntityUtil.getCertificateFromUrl(clientCertUrl); } catch (IOException e) { throw log.mechUnableToObtainServerCertificate(getMechanismName(), clientCertUrl.toString(), e).toSaslException(); } } else { throw log.mechCallbackHandlerNotProvidedServerCertificate(getMechanismName()).toSaslException(); } } {code}