LDAP/TLS regression in 8u272

[Thorsten Meinl]

Hi folks,

Not sure if this is the right place to report issues but I didn't find any 
other place (Jira is not accessible for non-contributors).
The 8u272 update has broken LDAP via TLS. Connection attempts fail with

 javax.naming.NamingException: hostname of the server '' does not match the 
hostname in the server's certificate.
        at 
org.apache.catalina.realm.JNDIRealm.createTlsDirContext(JNDIRealm.java:2518)
        at 
org.apache.catalina.realm.JNDIRealm.createDirContext(JNDIRealm.java:2424)
        at org.apache.catalina.realm.JNDIRealm.open(JNDIRealm.java:2392)
        at org.apache.catalina.realm.JNDIRealm.authenticate(JNDIRealm.java:
1286)
        at 
org.apache.catalina.realm.CombinedRealm.authenticate(CombinedRealm.java:195)
        at 
org.apache.catalina.realm.LockOutRealm.authenticate(LockOutRealm.java:158)
        at 
org.apache.catalina.realm.CombinedRealm.authenticate(CombinedRealm.java:195)

in Apache Tomcat. Note the empty server name. I can confirm that the LDAP 
server is configured correctly and the certificate matches the hostname. 
Switching back to 8u265 makes it work again.
I'm wondering if this is related to the various TLS changes in 8u272.

Thanks,

Thorsten

-- 
Dr.-Ing. Thorsten Meinl
KNIME AG
Hardturmstrasse 66
8005 Zurich, Switzerland