000013765 - FIM - Null pointer exception -'error encrypting the name id unable to encrypt'

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000013765
Applies ToFederated Identity Management Module 4.x
IssueFIM - Null pointer exception -"error encrypting the name id unable to encrypt"

error encrypting the name id unable to encrypt due to an error. Server logs indicate Null pointer exception.

2009-06-08 09:19:19,375, (SSOHelper.java:607), uhapw003, , , , Unable to process the AuthnRequest message, com.rsa.fim.profile.sso.SSOProfileException: Error encrypting the nameid: Unable to encrypt due to an error: null
        at com.rsa.fim.profile.util.ProfileHelper.encryptOrSignResponse(ProfileHelper.java:1165)
        at com.rsa.fim.profile.sso.SSOProfileBean.processAuthnRequest(SSOProfileBean.java:1162)
        at com.rsa.fim.profile.sso.EJSRemoteStatelessSSOProfile_3ac19df2.processAuthnRequest(Unknown Source)
        at com.rsa.fim.profile.sso._SSOProfile_Stub.processAuthnRequest(_SSOProfile_Stub.java:312)
        at com.rsa.fim.servlet.sso.SSOService.doGet(SSOService.java:82)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
        at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1284)
        at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1241)
        at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:136)
        at com.wachovia.thirdpartyauth.fim.base.SsoRequestFilter.doFilter(SsoRequestFilter.java:100)
        at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:142)
        at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:121)
        at com.ibm.ws.webcontainer.filter.WebAppFilterChain._doFilter(WebAppFilterChain.java:82)
        at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:671)
        at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3003)
        at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:221)
        at com.ibm.ws.webcontainer.VirtualHost.handleRequest(VirtualHost.java:210)
        at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1958)
        at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:88)
        at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:472)
        at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(HttpInboundLink.java:411)
        at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:288)
        at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:950)
        at com.ibm.ws.ssl.channel.impl.SSLConnectionLink$MyReadCompletedCallback.complete(SSLConnectionLink.java:582)
        at com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1701)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager.requestComplete(WorkQueueManager.java:566)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager.attemptIO(WorkQueueManager.java:619)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager.workerRun(WorkQueueManager.java:952)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager$Worker.run(WorkQueueManager.java:1039)
        at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1470)
Caused by: com.rsa.fim.exception.CryptoUtilException: Unable to encrypt due to an error: null
        at com.rsa.fim.util.crypto.EncryptionHelper.encrypt(EncryptionHelper.java:137)
        at com.rsa.fim.profile.util.ProfileHelper.encryptOrSignResponse(ProfileHelper.java:1151)
        ... 30 more
Caused by: java.lang.NullPointerException
        at com.rsa.fim.util.crypto.EncryptionHelper.encrypt(EncryptionHelper.java:134)
        ... 31 more

CauseIncorrect alias was specified in the configuration for the truststore and exception was not properly caught.  A proper error message should be logged, indicating cause of error 
ResolutionThis problem has been resolved in hotfix 4.1.11 for FIM 4.1.  Please contact RSA Customer Support and request this hotfix, or the latest cumulative hotfix. 
NotesText of added error message to cover incorrect alias configured "Unable to retrieve the certificate for the alias: " + alias + " configured"
Legacy Article IDa46419

Attachments

    Outcomes