IT15706: FAILURE LOADING CRL; GENERATES NULL POINTER EXCEPTION

Media_IM_5020602_1
iSeries_Media_5020602_1.zip
iSeries_Media_5020602_1.zip
Media_IM_5020602_1.zip

APAR status

• Closed as program error.

Error description

• Failure loading CRL; generates Null pointer Exception:
  
  
  [2016-04-19 07:48:40.66] ERROR 000000000000 GLOBAL_SCOPE Failure
  loading CRL
  java.security.cert.CRLException: CRL expired on 2016-02-22
          at com.sterlingcommerce.security.kcapi.CRLInfo.
  processAndVerifyCRL(CRLInfo.java:802)
          at
  com.sterlingcommerce.security.kcapi.CachedCRLInfo.processCRL
  (CachedCRLInfo.java:261)
          at
  com.sterlingcommerce.security.kcapi.CachedCRLInfo.load
  (CachedCRLInfo.java:227)
          at
  com.sterlingcommerce.woodstock.util.cache.CRLInfoLoader.load
  (CRLInfoLoader.java:63)
          at
  com.sterlingcommerce.woodstock.util.frame.cache.CacheManager.
  get(CacheManager.java:438)
          at
  com.sterlingcommerce.woodstock.util.frame.cache.CacheManager.
  get(CacheManager.java:318)
          at
  com.sterlingcommerce.security.kcapi.CertificateInfoBase.
  buildAuthChain(CertificateInfoBase.java:2676)
          at com.sterlingcommerce.security.kcapi.PrivateKeyInfo.
  getPrivateKey(PrivateKeyInfo.java:1842)
          at
  com.sterlingcommerce.security.jsseimpl.SCIX509KeyManagerImpl.
  getServerAliases(SCIX509KeyManagerImpl.java:161)
          at com.certicom.jsse.jdk1_5.c.a(Unknown Source)
          at com.certicom.jsse.jdk1_5.c.getServerAliases(Unknown
  Source)
          at
  com.certicom.tls.interfaceimpl.i.getServerAliases(Unknown
  Source)
          at com.certicom.tls.interfaceimpl.l.a(Unknown Source)
          at com.certicom.tls.interfaceimpl.l.a(Unknown Source)
         at
  com.certicom.tls.interfaceimpl.TLSConnectionImpl.a(Unknown
  Source)
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.
  setEnabledCipherSuites(Unknown Source)
          at com.certicom.tls.interfaceimpl.l.m(Unknown Source)
          at com.certicom.net.ssl.impl.m.accept(Unknown Source)
          at org.mortbay.jetty.security.SslSocketConnector.accept
  (SslSocketConnector.java:170)
          at com.sterlingcommerce.woodstock.noapp.ssl.
  SCISslSocketConnector.accept(SCISslSocketConnector.java:99)
          at org.mortbay.jetty.AbstractConnector$Acceptor.run
  (AbstractConnector.java:537)
          at org.mortbay.thread.BoundedThreadPool$PoolThread.run
  (BoundedThreadPool.java:450)
  [2016-04-19 07:48:41.325] ERROR Failure loading CRL
  [2016-04-19 07:48:41.325] ERROR [1461048521325] CRL expired on
  2016-02-
  22
  [2016-04-19 07:48:41.325] ERRORDTL
  [1461048521325]java.security.cert.
  CRLException: CRL expired on 2016-02-22
          at com.sterlingcommerce.security.kcapi.CRLInfo.
  processAndVerifyCRL(CRLInfo.java:802)
          at
  com.sterlingcommerce.security.kcapi.CachedCRLInfo.processCRL
  (CachedCRLInfo.java:261)
          at
  com.sterlingcommerce.security.kcapi.CachedCRLInfo.load
  (CachedCRLInfo.java:227)
          at
  com.sterlingcommerce.woodstock.util.cache.CRLInfoLoader.load
  (CRLInfoLoader.java:63)
          at
  com.sterlingcommerce.woodstock.util.frame.cache.CacheManager.
  get(CacheManager.java:438)
          at
  com.sterlingcommerce.woodstock.util.frame.cache.CacheManager.
  get(CacheManager.java:318)
          at com.sterlingcommerce.security.kcapi.PrivateKeyInfo.
  getPrivateKey(PrivateKeyInfo.java:1852)
          at
  com.sterlingcommerce.security.jsseimpl.SCIX509KeyManagerImpl.
  getServerAliases(SCIX509KeyManagerImpl.java:161)
          at com.certicom.jsse.jdk1_5.c.a(Unknown Source)
          at com.certicom.jsse.jdk1_5.c.getServerAliases(Unknown
  Source)
          at
  com.certicom.tls.interfaceimpl.i.getServerAliases(Unknown
  Source)
          at com.certicom.tls.interfaceimpl.l.a(Unknown Source)
          at com.certicom.tls.interfaceimpl.l.a(Unknown Source)
          at
  com.certicom.tls.interfaceimpl.TLSConnectionImpl.a(Unknown
  Source)
          at com.certicom.tls.interfaceimpl.TLSConnectionImpl.
  setEnabledCipherSuites(Unknown Source)
          at com.certicom.tls.interfaceimpl.l.m(Unknown Source)
          at com.certicom.net.ssl.impl.m.accept(Unknown Source)
          at org.mortbay.jetty.security.SslSocketConnector.accept
  (SslSocketConnector.java:170)
          at com.sterlingcommerce.woodstock.noapp.ssl.
  SCISslSocketConnector.accept(SCISslSocketConnector.java:99)
          at org.mortbay.jetty.AbstractConnector$Acceptor.run
  (AbstractConnector.java:537)
          at org.mortbay.thread.BoundedThreadPool$PoolThread.run
  (BoundedThreadPool.java:450)
  
  [2016-04-19 07:48:41.325] ERROR 000000000000 GLOBAL_SCOPE
  Failure
  loading CRL
  

Local fix

• No workaround.
  

Problem summary

• Users Affected:
  ALL
  
  Problem Description:
  java.security.cert.CRLException NPE in security logs.
  
  Platforms Affected:
  ALL
  

Problem conclusion

• Resolution Summary:
  A code fix is provided.
  
  Delivered in:
  5020602_1
  5020603
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels