JDK-4887933 : Unable to read my trusted store
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 1.4.2
  • Priority: P3
  • Status: Closed
  • Resolution: Duplicate
  • OS: windows_2000
  • CPU: x86
  • Submitted: 2003-07-09
  • Updated: 2003-07-10
  • Resolved: 2003-07-10
Related Reports
Duplicate :  
Description

Name: gm110360			Date: 07/09/2003


FULL PRODUCT VERSION :
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2-b28)
Java HotSpot(TM) Client VM (build 1.4.2-b28, mixed mode)

FULL OS VERSION :
Windows 2000

A DESCRIPTION OF THE PROBLEM :
I was running my secure application without problems on 1.4.1_02 using the unlimited strength jurisdiction policy jars for that runtime.

I upgraded to the new J2SE 1.4.2 along with the new versions of the unlimited strength policy jars, and now I get this error when my secure application attempts to read my trusted store:

java.security.cert.CertificateParsingException: java.io.IOException: java.io.IOException: Host portion is not a valid DNS name, IPv4 address, or IPv6 address
	at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:157)
	at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1679)
	at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:173)
	at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:90)
	at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:389)
	at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:725)
	at java.security.KeyStore.load(KeyStore.java:652)
rethrown from
java.io.IOException: java.io.IOException: Host portion is not a valid DNS name, IPv4 address, or IPv6 address
	at sun.security.x509.CertificateExtensions.parseExtension(CertificateExtensions.java:111)
	at sun.security.x509.CertificateExtensions.init(CertificateExtensions.java:78)
	at sun.security.x509.CertificateExtensions.<init>(CertificateExtensions.java:57)
	at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:731)
	at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:155)
	at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1679)
	at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:173)
rethrown from
java.io.IOException: Host portion is not a valid DNS name, IPv4 address, or IPv6 address
	at sun.security.x509.URIName.parseName(URIName.java:205)
	at sun.security.x509.URIName.<init>(URIName.java:85)
	at sun.security.x509.GeneralName.<init>(GeneralName.java:94)
	at sun.security.x509.GeneralNames.<init>(GeneralNames.java:51)
	at sun.security.x509.DistributionPoint.<init>(DistributionPoint.java:193)
	at sun.security.x509.CRLDistributionPointsExtension.<init>(CRLDistributionPointsExtension.java:126)
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)



REPRODUCIBILITY :
This bug can be reproduced always.
(Review ID: 190774) 
======================================================================

Comments
EVALUATION Since the report does not include the certificate that causes the error I cannot say for sure, but most likely this is a duplicate of 4874076. Even if it is not the exact same problem, the issue should be resolved by the fix implemented there. ###@###.### 2003-07-10
10-07-2003