Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8179191

keystore.load() fails to load a certificate

    XMLWordPrintable

    Details

      Description

      FULL PRODUCT VERSION :
      java version "1.8.0_121"
      Java(TM) SE Runtime Environment (build 1.8.0_121-b13)
      Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode)

      ADDITIONAL OS VERSION INFORMATION :
      macOS Sierra Version 10.12.4 (16E195)


      A DESCRIPTION OF THE PROBLEM :
      CANNOT LOAD PKCS12 KEYSTORE FILE . KeyStore.load() fails to load RSA 1024 key length certificate.

      REGRESSION. Last worked in version 8u112

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Run the attached source code to reproduce this error.

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      it should load the certificate.
      ACTUAL -
      CertificateException thrown by KeyStroe.load() API call .

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      java.security.cert.CertificateException: Unable to initialize, java.io.IOException: DerInputStream.getLength(): Redundant length bytes found
      at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:198)
      at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:102)
      at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:339)
      at sun.security.pkcs12.PKCS12KeyStore.loadSafeContents(PKCS12KeyStore.java:2189)
      at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2025)
      at java.security.KeyStore.load(KeyStore.java:1445)
      at KeyStoreTest.main(KeyStoreTest.java:35)
      Caused by: java.io.IOException: DerInputStream.getLength(): Redundant length bytes found
      at sun.security.util.DerInputStream.getLength(DerInputStream.java:606)
      at sun.security.util.DerValue.<init>(DerValue.java:252)
      at sun.security.util.DerInputStream.getDerValue(DerInputStream.java:451)
      at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1784)
      at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:195)
      ... 6 more

      REPRODUCIBILITY :
      This bug can be reproduced always.

      ---------- BEGIN SOURCE ----------
      import java.io.FileInputStream;
      import java.io.FileNotFoundException;
      import java.io.IOException;
      import java.security.KeyStore;
      import java.security.KeyStoreException;
      import java.security.NoSuchAlgorithmException;

      import java.security.cert.CertificateException;


      public class KeyStoreTest {

      /**
      * @param args
      * @throws java.security.cert.CertificateException
      * @throws NoSuchAlgorithmException
      * @throws IOException
      */
      public static void main(String[] args)throws KeyStoreException, NoSuchAlgorithmException, java.security.cert.CertificateException, IOException {
      // TODO Auto-generated method stub
      KeyStore keystore = null;
      FileInputStream fip = null;
      try{
      keystore = KeyStore.getInstance("pkcs12");
      }catch(KeyStoreException ex){
      ex.printStackTrace();
      }
      try{
      fip = new FileInputStream("/home/Downloads/cert_1024.p12");
      }catch(FileNotFoundException ex){
      ex.printStackTrace();
      }

      try{
      keystore.load(fip, "1024".toCharArray());
      }catch(CertificateException e){
      e.printStackTrace();
      }
      }

      }
      ---------- END SOURCE ----------

      CUSTOMER SUBMITTED WORKAROUND :
      this issue was not reproducible in Java8u112 so the only workaround is to change JRE to java8u112

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              psonal Pallavi Sonal (Inactive)
              Reporter:
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: