openjdk team mailing list archive

Thread
Date

[Bug 244412] Re: Errors removing CAs that don’t exist, or adding ones that do

To: openjdk@xxxxxxxxxxxxxxxxxxx
From: Bug Watch Updater <bugwatch@xxxxxxxxxxxxxxxxxx>
Date: Wed, 17 Dec 2008 19:04:14 -0000
Reply-to: Bug 244412 <244412@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: ca-certificates-java (Debian)
       Status: New => Fix Released

-- 
Errors removing CAs that don’t exist, or adding ones that do
https://bugs.launchpad.net/bugs/244412
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in ubuntu.

Status in “ca-certificates-java” source package in Ubuntu: Fix Released
Status in ca-certificates-java in Ubuntu Intrepid: Fix Released
Status in “ca-certificates-java” source package in Debian: Fix Released

Bug description:
Binary package hint: ca-certificates-java

Running ‘sudo dpkg-reconfigure ca-certificates’ and deleting a certificate gives me this error:

Running hooks in /etc/ca-certificates/update.d....keytool error: java.lang.Exception: Alias <brasil_gov_br_pem> does not exist

Adding it back gives me this error:

Running hooks in /etc/ca-certificates/update.d....Certificate already exists in keystore under alias <brasil_gov_br>
Do you still want to add it? [no]:  keytool error: java.lang.IllegalArgumentException

Furthermore, because the jks-keystore hook begins with ‘set -e’, if there is an error on the first certificate, all the later changes in the same run are ignored.