FULL PRODUCT VERSION :
java version "1.8.0_121"
Java(TM) SE Runtime Environment (build 1.8.0_121-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode)

ADDITIONAL OS VERSION INFORMATION :
macOS Sierra Version 10.12.4 (16E195)


A DESCRIPTION OF THE PROBLEM :
CANNOT LOAD PKCS12 KEYSTORE FILE . KeyStore.load() fails to load RSA 1024 key length certificate.

REGRESSION. Last worked in version 8u112

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Run the attached source code to reproduce this error.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
it should load the certificate.
ACTUAL -
CertificateException thrown by KeyStroe.load() API call .

ERROR MESSAGES/STACK TRACES THAT OCCUR :
java.security.cert.CertificateException: Unable to initialize, java.io.IOException: DerInputStream.getLength(): Redundant length bytes found
at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:198)
at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:102)
at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:339)
at sun.security.pkcs12.PKCS12KeyStore.loadSafeContents(PKCS12KeyStore.java:2189)
at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2025)
at java.security.KeyStore.load(KeyStore.java:1445)
at KeyStoreTest.main(KeyStoreTest.java:35)
Caused by: java.io.IOException: DerInputStream.getLength(): Redundant length bytes found
at sun.security.util.DerInputStream.getLength(DerInputStream.java:606)
at sun.security.util.DerValue.<init>(DerValue.java:252)
at sun.security.util.DerInputStream.getDerValue(DerInputStream.java:451)
at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1784)
at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:195)
... 6 more

REPRODUCIBILITY :
This bug can be reproduced always.

---------- BEGIN SOURCE ----------
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;


public class KeyStoreTest {

/**
* @param args
* @throws java.security.cert.CertificateException
* @throws NoSuchAlgorithmException
* @throws IOException
*/
public static void main(String[] args)throws KeyStoreException, NoSuchAlgorithmException, java.security.cert.CertificateException, IOException {
// TODO Auto-generated method stub
KeyStore keystore = null;
FileInputStream fip = null;
try{
keystore = KeyStore.getInstance("pkcs12");
}catch(KeyStoreException ex){
ex.printStackTrace();
}
try{
fip = new FileInputStream("/home/Downloads/cert_1024.p12");
}catch(FileNotFoundException ex){
ex.printStackTrace();
}

try{
keystore.load(fip, "1024".toCharArray());
}catch(CertificateException e){
e.printStackTrace();
}
}

}
---------- END SOURCE ----------

CUSTOMER SUBMITTED WORKAROUND :
this issue was not reproducible in Java8u112 so the only workaround is to change JRE to java8u112