PK67599: NULLPOINTEREXCEPTION IN JAVA.SECURITY.CERT.CERTPATHBUILDER.BUILD

APAR status

• Closed as program error.

Error description

• Error Message: NullPointerException is thrown when multiple
  threads call java.security.cert.CertPathBuilder.build at the
  same time.
  Stack Trace: java.lang.NullPointerException
          at
  com.ibm.security.cert.CertPathUtil.getExtension(CertPathUtil.jav
  a:155)
          at
  com.ibm.security.cert.CertPathUtil.getBasicConstraints(CertPathU
  til.java:186)
          at
  com.ibm.security.cert.BasicChecker.check(BasicChecker.java:217)
          at
  com.ibm.security.cert.PKIXCertPathValidatorImpl.engineValidate(P
  KIXCertPathValidatorImpl.java:258)
          at
  com.ibm.security.cert.PKIXCertPathBuilderImpl.myValidator(PKIXCe
  rtPathBuilderImpl.java:474)
          at
  com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIX
  CertPathBuilderImpl.java:386)
          at
  com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIX
  CertPathBuilderImpl.java:332)
          at
  com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCe
  rtPathBuilderImpl.java:195)
          at
  java.security.cert.CertPathBuilder.build(CertPathBuilder.java:21
  5)
  .
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server Version    *
  *                  6.0.2 users                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: NullPointerException in                 *
  *                     java.security.cert.CertPathBuilder.build *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The problem occurred when multiple threads try to access to the
  same X509Certificate object at the same time.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR6
  .
  The JVM has been modified to synchronize the relevant code path
  in CertificateExtensions class to resolve this problem.
  .
  To obtain the fix:
  Install build 20070610 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IY99712

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R60A PSY

     UP