When IS tried to verify client certificate against CRL which is cmplient with RFC3280, it gets following exception ..
Certificate: CertRevoked =
java.security.cert.CRLException: Illegal reason code parsed
        at sun.security.x509.CRLExtensions.parseExtension(CRLExtensions.java:134
)
        at sun.security.x509.CRLExtensions.init(CRLExtensions.java:101)
        at sun.security.x509.CRLExtensions.<init>(CRLExtensions.java:64)
        at sun.security.x509.X509CRLEntryImpl.parse(X509CRLEntryImpl.java:379)
        at sun.security.x509.X509CRLEntryImpl.<init>(X509CRLEntryImpl.java:119)
        at sun.security.x509.X509CRLImpl.parse(X509CRLImpl.java:875)
        at sun.security.x509.X509CRLImpl.<init>(X509CRLImpl.java:146)
        at sun.security.provider.X509Factory.engineGenerateCRL(X509Factory.java:
165)
        at java.security.cert.CertificateFactory.generateCRL(CertificateFactory.
java:351)
        at com.sun.identity.authentication.modules.cert.Cert.verifyCertificate(C
ert.java:760)
        at com.sun.identity.authentication.modules.cert.Cert.process(Cert.java:4
41)
        at com.sun.identity.authentication.spi.AMLoginModule.login(AMLoginModule
.java:675)
        at java.lang.reflect.Method.invoke(Native Method)
        at javax.security.auth.login.LoginContext.invoke(LoginContext.java:595)
        at javax.security.auth.login.LoginContext.access$000(LoginContext.java:1
25)
        at javax.security.auth.login.LoginContext$3.run(LoginContext.java:531)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java
:528)
        at javax.security.auth.login.LoginContext.login(LoginContext.java:449)
        at com.sun.identity.authentication.service.AMLoginContext.run(AMLoginCon
text.java:274)
07/14/2003 07:27:50:628 PM PDT: Thread[Thread-259,5,main]

Bug#4907915 has more info..



###@###.### 2003-08-19