Bug #38192 trustStore and keyStore-Properies for SSL are not used due to bad code
Submitted: 17 Jul 2008 10:47 Modified: 23 Jul 2008 8:48
Reporter: Jan Mönnich Email Updates:
Status: Duplicate Impact on me:
None 
Category:Connector / J Severity:S2 (Serious)
Version:5.1.6 OS:Any
Assigned to: CPU Architecture:Any
Tags: trustCertificateKeyStore

[17 Jul 2008 10:47] Jan Mönnich
Description:
The connection properties "clientCertificateKeyStoreUrl" and "trustCertificateKeyStoreUrl" are not evaluated.

Line 151 in ExportControlled.java:
 if (StringUtils.isNullOrEmpty(clientCertificateKeyStoreUrl)) {

and Line 202:
 if (StringUtils.isNullOrEmpty(trustCertificateKeyStoreUrl)) {

How to repeat:
correctly set trustCertificateKeyStore or userCertificateKeyStore in an connection-String leads to an exception!

Suggested fix:
The condition here should be: NOT isNullOrEmpty:

Line 151 in ExportControlled.java:
 if (!StringUtils.isNullOrEmpty(clientCertificateKeyStoreUrl)) {

and Line 202:
 if (!StringUtils.isNullOrEmpty(trustCertificateKeyStoreUrl)) {

I think this is what the programmer ment ;-) Works fine for me!
[17 Jul 2008 11:11] Tonci Grgin
Hi Jan and thanks for your report. I believe this is a duplicate of Bug#36948 and would like to close it like that if you agree.
[17 Jul 2008 11:18] Jan Mönnich
Of course I agree to close it! Bug#36948 describes exactly what I meant. Sorry that I didn't search the bug database before reporting it. Next time I will do so! :-)

Cheerio
Jan
[17 Jul 2008 11:25] Jan Mönnich
Duplicate to Bug#36948
[23 Jul 2008 8:48] Tonci Grgin
Jan, no problem. Thanks for your interest in MySQL.