Update PKIXCRLUtil.java
This fixes a NullPointerException in findCRLs, when a CRL does not have the nextUpdate attribute set.
@@ -41,7 +41,8 @@ static Set findCRLs(PKIXCRLStoreSelector crlselect, Date validityDate, List cert
{
X509CRL crl = (X509CRL)it.next();
- if (crl.getNextUpdate().after(validityDate))
+ Date nextUpdate = crl.getNextUpdate();
+ if (nextUpdate == null || nextUpdate.after(validityDate))
{
X509Certificate cert = crlselect.getCertificateChecking();
