src/share/classes/sun/security/x509/X509CertImpl.java

*** 1072,1084 ****
              AuthorityKeyIdentifierExtension aki =
                  getAuthorityKeyIdentifierExtension();
              if (aki != null) {
  
                  try {
!                     issuerKeyId = ((KeyIdentifier)
!                         aki.get(AuthorityKeyIdentifierExtension.KEY_ID))
!                             .getIdentifier();
                  } catch (IOException e) {
                      // should never happen (because KEY_ID attr is supported)
                  }
  
              } else {
--- 1072,1089 ----
              AuthorityKeyIdentifierExtension aki =
                  getAuthorityKeyIdentifierExtension();
              if (aki != null) {
  
                  try {
!                     KeyIdentifier ki =
!                         ((KeyIdentifier) aki.get(
!                             AuthorityKeyIdentifierExtension.KEY_ID));
!                     if (ki != null) {
!                         issuerKeyId = ki.getIdentifier();
!                     } else {
!                         issuerKeyId = new byte[0]; // no hash-based AKID present
!                     }
                  } catch (IOException e) {
                      // should never happen (because KEY_ID attr is supported)
                  }
  
              } else {
*** 1197,1209 ****
              SubjectKeyIdentifierExtension ski =
                  getSubjectKeyIdentifierExtension();
              if (ski != null) {
  
                  try {
!                     subjectKeyId = ((KeyIdentifier)
!                         ski.get(SubjectKeyIdentifierExtension.KEY_ID))
!                             .getIdentifier();
                  } catch (IOException e) {
                      // should never happen (because KEY_ID attr is supported)
                  }
  
              } else {
--- 1202,1219 ----
              SubjectKeyIdentifierExtension ski =
                  getSubjectKeyIdentifierExtension();
              if (ski != null) {
  
                  try {
!                     KeyIdentifier ki =
!                         ((KeyIdentifier) ski.get(
!                             SubjectKeyIdentifierExtension.KEY_ID));
!                     if (ki != null) {
!                         subjectKeyId = id.getIdentifier();
!                     } else {
!                         subjectKeyId = new byte[0];// no hash-based SKID present
!                     }
                  } catch (IOException e) {
                      // should never happen (because KEY_ID attr is supported)
                  }
  
              } else {