From e785be5c467d2aec2190d362fdd5e2e5363df36e Mon Sep 17 00:00:00 2001
From: Chris Conlon <chris@wolfssl.com>
Date: Thu, 17 Sep 2026 14:21:51 -0600
Subject: [PATCH] F-13481: close the keystore input stream on load failures in
 loadKeyStoreFileByType

---
 src/java/com/wolfssl/provider/jsse/WolfSSLUtil.java | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/java/com/wolfssl/provider/jsse/WolfSSLUtil.java b/src/java/com/wolfssl/provider/jsse/WolfSSLUtil.java
index 2990f43..9e587f0 100644
--- a/src/java/com/wolfssl/provider/jsse/WolfSSLUtil.java
+++ b/src/java/com/wolfssl/provider/jsse/WolfSSLUtil.java
@@ -777,11 +777,17 @@ public class WolfSSLUtil {
 
             stream = new FileInputStream(file);
             ks.load(stream, pass);
-            stream.close();
 
         } catch (KeyStoreException | IOException | NoSuchAlgorithmException |
                  CertificateException e) {
             return null;
+        } finally {
+            try {
+                if (stream != null) {
+                    stream.close();
+                }
+            } catch (IOException e) {
+            }
         }
 
         return ks;