Fixed signature algorithm extraction when specified in keyalias (Goog…

…le Cloud KMS)
ebourg · Jan 16, 2024 · 5df3a06 · 5df3a06
1 parent 93da678
commit 5df3a06
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/jsign-core/src/main/java/net/jsign/jca/GoogleCloudSigningService.java b/jsign-core/src/main/java/net/jsign/jca/GoogleCloudSigningService.java
@@ -120,8 +120,8 @@ public SigningServicePrivateKey getPrivateKey(String alias, char[] password) thr
                 // full key with version specified
                 if (alias.contains(":")) {
                     // syntax with the algorithm appended to the alias
-                    alias = alias.substring(0, alias.indexOf(':'));
                     algorithm = alias.substring(alias.indexOf(':') + 1) + "_SIGN";
+                    alias = alias.substring(0, alias.indexOf(':'));
                 } else {
                     Certificate[] chain = getCertificateChain(alias);
                     if (chain != null && chain.length > 0) {