[AMQ-8550] ActiveMQSslConnectionFactory: Check for null SSL Keystore and Truststore password

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.17.1, 5.18.0
• Component/s: JMS client
• Assignee: Christopher L. Shannon
• Reporter: Andreas Gorges
• Created: 23/Mar/22 14:12
• Updated: 05/Apr/22 17:52
• Resolved: 05/Apr/22 17:52

Description

When you assign a Truststore without a password the method ActiveMQSslConnectionFactory.createTrustManager throws a NullPointer exception in Line 135:

 

trustedCertStore.load(tsStream, trustStorePassword.toCharArray()); 

 

Please change the code to:

char[] password = null;
if (trustStorePassword != null) {
     password = trustStorePassword.toCharArray();
}
trustedCertStore.load(tsStream, password);