[WSS-294] Merlin doesn't support physical providers with no keystore file

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.6.1
• Fix Version/s: 1.6.2
• Component/s: WSS4J Handlers
• Environment: using PKCS11 provider
• Assignee: Colm O hEigeartaigh
• Reporter: rotem a
• Created: 26/Jun/11 14:04
• Updated: 12/Aug/11 09:41
• Resolved: 03/Aug/11 09:20

Description

At Merlin.loadProperties, in order for the load method to be called, there must be a non null inputStream.
In case of physical keystore (like smart card), there is no keystore inputStream, the keystore is not loaded and later on we'll get an error when we try
to retrive a certificate from the keystore.

The solution is to allow not getting a keystore file and in this case just send a null inputStream to the load method (it works).

There is a workaround: creating a new class which extends Merlin and just override the loadProperties method (though it's not perfect cause we can't
set the loadCACerts property (it's private).

Issue Links

• duplicates: WSS-302 Unable to load keystore/truststore when it cannot be loaded from an InputStream