IJ05754: CERTPATH PKIXPARAMETERS CLASS CAUSES NULLPOINTEREXCEPTION

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: The com.ibm.security.validator.Validator.validate
  method experiences the following exception:
  java.lang.NullPointerException:
  at
  com.ibm.security.cert.PKIXExtendedParameters.setRevocationEnable
  d(PKIXExtendedParameters.java:139)
  at
  java.security.cert.PKIXParameters.initialize(PKIXParameters.java
  :193)
  at
  java.security.cert.PKIXParameters.<init>(PKIXParameters.java:143
  )
  at
  java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParam
  eters.java:99)
  at
  com.ibm.security.cert.PKIXExtendedParameters.<init>(PKIXExtended
  Parameters.java:55)
  at
  com.ibm.security.validator.PKIXValidator.engineValidate(PKIXVali
  dator.java:214)
  at
  com.ibm.security.validator.Validator.validate(Validator.java:257
  )
  at
  com.ibm.security.validator.Validator.validate(Validator.java:233
  )
  .
  

Local fix

Problem summary

• The PKIXParameters class is a super class of
  PKIXExtendedParameters. When PKIXValidator,engineValidate()
  invokes the PKIXExtendedParameters constructor, that constructor
  first calls the constructor of its superclass.
  When the PKIXParameters constructor executes, it attempts to set
  a default "revocation enabled = true"
  boolean within the PKIXExtendedParameters object. However, the
  PKIXBuilderParameters object within the
  PKIXExtendedParameters object, which contains the "revocation
  enabled" boolean to be set, has not yet been initialized.
  Therefore, a NullPointerException occurs.
  

Problem conclusion

• The most current copy of the PKIXParameters class no longer
  attempts to set a default "revocation enabled = true"
  boolean value. PKIXParameters.java has been replaced with the
  more current copy.
  The associated CMVC defects are 117842 and 117846.
  The associated RTC PMRs are 137836 and 137841
  <<<<<<<<<<<<<<<<<<<<<<<<<<<<<
  The associated APAR is IJ05678.
  The affected jar is ibmcertpathfw.jar.
  The build level of ibmcertpathfw.jar is 20180416.
  This fix has been delivered for:
  70sr10fp25, 727sr4fp25, and 80sr5fp15.
  .
  This APAR will be fixed in the following Java Releases:
   8 SR5 FP15 (8.0.5.15)
   7 SR10 FP25 (7.0.10.25)
   7 R1 SR4 FP25 (7.1.4.25)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels