The clone method of PKIXParameters should be made threadsafe. This is causing a race condition in with multiple threads.
Comments
EVALUATION
From the thread stack, we can find that the PKIXParameters.clone() has already synchronized by the SSLSockerImpl.performInitialHandshake(). So it would not work to add one more lock at the PKIXParameters.clone() method. I think the issue is similar to 6862064, when PKIXParameters.clone() is called, the PKIXParameters.certStores is reset with its shallow copy, then will result in multiple thread safe issues.
Close this bug as a duplicate of CR 6862064.
20-01-2010
EVALUATION
need to make it multiple thread safe.
14-01-2010
SUGGESTED FIX
Not create a new copy of the collection on each clone and make the collection itself synchronized