src/java.base/share/classes/sun/security/provider/certpath/AlgorithmChecker.java

*** 183,207 ****
       */
      public AlgorithmChecker(TrustAnchor anchor,
              AlgorithmConstraints constraints,
              Date pkixdate) {
  
!         if (anchor == null) {
!             throw new IllegalArgumentException(
!                     "The trust anchor cannot be null");
!         }
! 
          if (anchor.getTrustedCert() != null) {
              this.trustedPubKey = anchor.getTrustedCert().getPublicKey();
              // Check for anchor certificate restrictions
              trustedMatch = checkFingerprint(anchor.getTrustedCert());
              if (trustedMatch && debug != null) {
                  debug.println("trustedMatch = true");
              }
          } else {
              this.trustedPubKey = anchor.getCAPublicKey();
          }
  
          this.prevPubKey = trustedPubKey;
          this.constraints = constraints;
          this.pkixdate = pkixdate;
          this.jarTimestamp = null;
--- 183,209 ----
       */
      public AlgorithmChecker(TrustAnchor anchor,
              AlgorithmConstraints constraints,
              Date pkixdate) {
  
!         if (anchor != null) {
              if (anchor.getTrustedCert() != null) {
                  this.trustedPubKey = anchor.getTrustedCert().getPublicKey();
                  // Check for anchor certificate restrictions
                  trustedMatch = checkFingerprint(anchor.getTrustedCert());
                  if (trustedMatch && debug != null) {
                      debug.println("trustedMatch = true");
                  }
              } else {
                  this.trustedPubKey = anchor.getCAPublicKey();
              }
+         } else {
+             this.trustedPubKey = null;
+             if (debug != null) {
+                 debug.println("TrustAnchor is null, trustedMatch is false.");
+             }
+         }
  
          this.prevPubKey = trustedPubKey;
          this.constraints = constraints;
          this.pkixdate = pkixdate;
          this.jarTimestamp = null;