From 239a9f1d23a0353220a8ff33b569c4a389301c45 Mon Sep 17 00:00:00 2001
From: Pasindu Suraweera <pasisuraweera2003@gmail.com>
Date: Fri, 21 Nov 2025 20:10:54 +0530
Subject: [PATCH] Fix NPE in CipherTool when deployment.toml has configurations
 after secrets section

---
 .../src/main/java/org/wso2/ciphertool/CipherTool.java        | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/components/ciphertool/src/main/java/org/wso2/ciphertool/CipherTool.java b/components/ciphertool/src/main/java/org/wso2/ciphertool/CipherTool.java
index 3ed678a..3964cf4 100644
--- a/components/ciphertool/src/main/java/org/wso2/ciphertool/CipherTool.java
+++ b/components/ciphertool/src/main/java/org/wso2/ciphertool/CipherTool.java
@@ -384,7 +384,10 @@ private static void updateDeploymentConfigurationWithEncryptedKeys(Map<String, S
                             if (stringTokenizer.hasMoreTokens()) {
                                 String key = stringTokenizer.nextToken();
                                 String value = encryptedKeyMap.get(key.trim());
-                                line = key.concat("= \"").concat(value).concat("\"");
+                                // Fix: Check if value exists before replacing
+                                if (value != null) {
+                                    line = key.concat("= \"").concat(value).concat("\"");
+                                }
                             }
                         }
                     } else {