[SANTUARIO-609] Remove call to Signature.getProvider() in debug log

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Java 4.0.1, Java 3.0.4, Java 2.3.5
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 23/Nov/23 06:37
• Updated: 23/Nov/23 06:38
• Resolved: 23/Nov/23 06:38

Description

The debug log message makes a call to Signature.getProvider() too early.
This causes Signature.chooseFirstProvider() to be called which matches the first provider always rather than the correct provider based on PrivateKey.getAlgorithm() when there are multiple providers.
This debug log was changed in this commit and introduced the issue: 1f48918

https://github.com/apache/santuario-xml-security-java/pull/240