From 8b7806dbb1eb78d827534d97638ad965a809aabf Mon Sep 17 00:00:00 2001
From: Luca Leonardo Scorcia <l.scorcia@gmail.com>
Date: Wed, 2 Dec 2020 17:06:31 +0100
Subject: [PATCH] KEYCLOAK-16519 Fix typo in regex

The regex has a typo that prevents correct splitting of parameter values containing multiple OIDs.
---
 .../authenticators/x509/CertificateValidator.java               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java b/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java
index b5dfe05dfe..d3dc2330aa 100644
--- a/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java
+++ b/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java
@@ -737,7 +737,7 @@ public class CertificateValidator {
                 if (extendedKeyUsage == null || extendedKeyUsage.trim().length() == 0)
                     return _parent;
 
-                String[] strs = extendedKeyUsage.split("[,;:]]");
+                String[] strs = extendedKeyUsage.split("[,;:]");
                 for (String str : strs) {
                     _extendedKeyUsage.add(str.trim());
                 }