FIM - Null pointer exception -'error encrypting the name id unable to encrypt'
2 years ago
Originally Published: 2009-06-23
Article Number
000046470
Applies To
Federated Identity Management Module 4.x
Issue
FIM - Null pointer exception -"error encrypting the name id unable to encrypt"

error encrypting the name id unable to encrypt due to an error. Server logs indicate Null pointer exception.

2009-06-08 09:19:19,375, (SSOHelper.java:607), uhapw003, , , , Unable to process the AuthnRequest message, com.rsa.fim.profile.sso.SSOProfileException: Error encrypting the nameid: Unable to encrypt due to an error: null
        at com.rsa.fim.profile.util.ProfileHelper.encryptOrSignResponse(ProfileHelper.java:1165)
        at com.rsa.fim.profile.sso.SSOProfileBean.processAuthnRequest(SSOProfileBean.java:1162)
        at com.rsa.fim.profile.sso.EJSRemoteStatelessSSOProfile_3ac19df2.processAuthnRequest(Unknown Source)
        at com.rsa.fim.profile.sso._SSOProfile_Stub.processAuthnRequest(_SSOProfile_Stub.java:312)
        at com.rsa.fim.servlet.sso.SSOService.doGet(SSOService.java:82)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
        at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1284)
        at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1241)
        at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:136)
        at com.wachovia.thirdpartyauth.fim.base.SsoRequestFilter.doFilter(SsoRequestFilter.java:100)
        at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:142)
        at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:121)
        at com.ibm.ws.webcontainer.filter.WebAppFilterChain._doFilter(WebAppFilterChain.java:82)
        at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:671)
        at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3003)
        at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:221)
        at com.ibm.ws.webcontainer.VirtualHost.handleRequest(VirtualHost.java:210)
        at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1958)
        at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:88)
        at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:472)
        at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(HttpInboundLink.java:411)
        at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:288)
        at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:950)
        at com.ibm.ws.ssl.channel.impl.SSLConnectionLink$MyReadCompletedCallback.complete(SSLConnectionLink.java:582)
        at com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1701)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager.requestComplete(WorkQueueManager.java:566)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager.attemptIO(WorkQueueManager.java:619)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager.workerRun(WorkQueueManager.java:952)
        at com.ibm.ws.tcp.channel.impl.WorkQueueManager$Worker.run(WorkQueueManager.java:1039)
        at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1470)
Caused by: com.rsa.fim.exception.CryptoUtilException: Unable to encrypt due to an error: null
        at com.rsa.fim.util.crypto.EncryptionHelper.encrypt(EncryptionHelper.java:137)
        at com.rsa.fim.profile.util.ProfileHelper.encryptOrSignResponse(ProfileHelper.java:1151)
        ... 30 more
Caused by: java.lang.NullPointerException
        at com.rsa.fim.util.crypto.EncryptionHelper.encrypt(EncryptionHelper.java:134)
        ... 31 more


Cause
Incorrect alias was specified in the configuration for the truststore and exception was not properly caught.  A proper error message should be logged, indicating cause of error 
Resolution
This problem has been resolved in hotfix 4.1.11 for FIM 4.1.  Please contact RSA Customer Support and request this hotfix, or the latest cumulative hotfix. 
Notes
Text of added error message to cover incorrect alias configured "Unable to retrieve the certificate for the alias: " + alias + " configured"