java-1.7.0.79 might break LDAP(S) on shibboleth 2.4.4

[Rich Graves]

> Do you actually know what they changed that broke it?

Nope, just checking if someone else had already run into this. Guess not. 

I've got meetings next couple hours but will return to it in the afternoon. The RHSA mentions two crypto-ish things.

Backing down the stack trace a little (I have *not* yet taken the time to look at what's in my trust store):

Caused by: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1904) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1862) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1845) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1771) ~[na:na]
        at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:127) ~[na:na]
        at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82) ~[na:1.7.0_75]
        at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140) ~[na:1.7.0_75]
        at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:431) ~[na:1.7.0_75]
        at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:404) ~[na:1.7.0_75]
        at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:358) ~[na:1.7.0_75]
        at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:213) ~[na:1.7.0_75]
        ... 58 common frames omitted
Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:90) ~[na:1.7.0_75]
        at sun.security.validator.Validator.getInstance(Validator.java:179) ~[na:1.7.0_75]
        at sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:314) ~[na:na]
        at sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:173) ~[na:na]
        at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:186) ~[na:na]
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:107) ~[na:na]
        at edu.vt.middleware.ldap.ssl.AggregateTrustManager.checkServerTrusted(AggregateTrustManager.java:77) ~[vt-ldap-3.3.9.jar:na]
        at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:885) ~[na:na]
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1428) ~[na:na]
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:209) ~[na:na]
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:901) ~[na:na]
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:837) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1023) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1332) ~[na:na]
        at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:709) ~[na:na]
        at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122) ~[na:na]
        ... 64 common frames omitted
Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200) ~[na:1.7.0_75]
        at java.security.cert.PKIXParameters.<init>(PKIXParameters.java:120) ~[na:1.7.0_75]
        at java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParameters.java:104) ~[na:1.7.0_75]
        at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:88) ~[na:1.7.0_75]
        ... 79 common frames omitted