From aa96326f1633f314b75499e14761cd755d1c7235 Mon Sep 17 00:00:00 2001
From: CiiLu <109708109+CiiLu@users.noreply.github.com>
Date: Wed, 12 Aug 2026 17:23:57 +0800
Subject: [PATCH 1/2] Fix incorrect Boolean.getBoolean usage in
 ScepConfiguration

---
 .../src/org/ejbca/config/ScepConfiguration.java             | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java b/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java
index f98e7927fd..eb2f88015a 100644
--- a/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java
+++ b/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java
@@ -260,7 +260,7 @@ public boolean getClientCertificateRenewal(final String alias) {
         //Lazy initialization for SCEP configurations older than 6.3.1
         if (value == null) {
             data.put(alias + "." + SCEP_CLIENT_CERTIFICATE_RENEWAL, DEFAULT_CLIENT_CERTIFICATE_RENEWAL);
-            return Boolean.getBoolean(DEFAULT_CLIENT_CERTIFICATE_RENEWAL);
+            return Boolean.parseBoolean(DEFAULT_CLIENT_CERTIFICATE_RENEWAL);
         }
         return Boolean.valueOf(value);
     }
@@ -288,7 +288,7 @@ public boolean getAllowClientCertificateRenewalWithOldKey(final String alias) {
         //Lazy initialization for SCEP configurations older than 6.3.1
         if (value == null) {
             data.put(alias + "." + SCEP_CLIENT_CERTIFICATE_RENEWAL_WITH_OLD_KEY, DEFAULT_ALLOW_CLIENT_CERTIFICATE_RENEWAL_WITH_OLD_KEY);
-            return Boolean.getBoolean(DEFAULT_ALLOW_CLIENT_CERTIFICATE_RENEWAL_WITH_OLD_KEY);
+            return Boolean.parseBoolean(DEFAULT_ALLOW_CLIENT_CERTIFICATE_RENEWAL_WITH_OLD_KEY);
         }
         return Boolean.valueOf(value);
     }
@@ -360,7 +360,7 @@ public boolean getAllowLegacyDigestAlgorithm(String alias) {
         // Allow for SCEP configurations older than 7.5.1 to use SHA-1 in responses by default
         if (value == null) {
             data.put(alias + "." + SCEP_ALLOW_LEGACY_DIGEST_ALGORITHM, "true");
-            return Boolean.getBoolean("true");
+            return Boolean.parseBoolean("true");
         }
         return StringUtils.equalsIgnoreCase(value, "true");
     }

From 8e1ef5d0b5d5cca85299ffabc1d2fa9a5728e6b6 Mon Sep 17 00:00:00 2001
From: CiiLu <109708109+CiiLu@users.noreply.github.com>
Date: Wed, 12 Aug 2026 18:50:31 +0800
Subject: [PATCH 2/2] Fix incorrect Boolean.getBoolean usage in
 ScepConfiguration

---
 .../ejbca-common/src/org/ejbca/config/ScepConfiguration.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java b/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java
index eb2f88015a..8f6eff6297 100644
--- a/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java
+++ b/modules/ejbca-common/src/org/ejbca/config/ScepConfiguration.java
@@ -360,7 +360,7 @@ public boolean getAllowLegacyDigestAlgorithm(String alias) {
         // Allow for SCEP configurations older than 7.5.1 to use SHA-1 in responses by default
         if (value == null) {
             data.put(alias + "." + SCEP_ALLOW_LEGACY_DIGEST_ALGORITHM, "true");
-            return Boolean.parseBoolean("true");
+            return true;
         }
         return StringUtils.equalsIgnoreCase(value, "true");
     }