[HTTPCLIENT-1836] DefaultHostnameVerifier#getSubjectAltNames(X509Certificate) throws java.lang.ClassCastException

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 4.5.3, 5.0 Alpha1
• Fix Version/s: 4.5.4, 5.0 Alpha2
• Component/s: HttpClient (classic)
• Assignee: Unassigned
• Reporter: Ilian Iliev
• Created: 27/Mar/17 13:09
• Updated: 15/Aug/18 17:55
• Resolved: 28/Mar/17 18:54

Description

After upgrade to HttpClient 4.5.3, all of a sudden I started to receive the following exception in one of my projects:
java.lang.ClassCastException: [B cannot be cast to java.lang.String

The exception is thrown in DefaultHostnameVerifier#getSubjectAltNames() method, on line 309:
final String s = (String) entry.get(1);

The code above assumes that each entry is either a String or something castable to String. However, according to Javadoc documentation of X509Certificate.getSubjectAlternativeNames(), it can be a byte array containing ASN.1 DER encoded value. Attempt to cast this byte array to String is throwing java.lang.ClassCastException.

Seems to be a regression introduced in version 4.5.3 with the fix for HTTPCLIENT-1802

Issue Links

• is duplicated by: HTTPCLIENT-1851 Regression ClassCastException when connecting SSL
• relates to: MNG-6388 Error Fetching Artifacts: "[B cannot be cast to java.lang.String"