[SANTUARIO-383] NPE in DOMXMLSignature

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Java 1.5.6
• Fix Version/s: Java 2.0.0, Java 1.5.7
• Assignee: Colm O hEigeartaigh
• Reporter: Frank Cornelis
• Created: 14/Apr/14 10:52
• Updated: 01/May/14 14:18
• Resolved: 22/Apr/14 10:06

Description

DOMXMLSignature.validate is doing:

ksResult = validateContext.getKeySelector().select
    (ki, KeySelector.Purpose.VERIFY, sm, validateContext);
validationKey = ksResult.getKey();

this while the javadoc on KeySelector states:

Note that an inability to find a key is not considered an exception (null should be returned in that case).

Hence you can get an NPE.