openjdk team mailing list archive

[Thierry Carrez <thierry.carrez@xxxxxxxxxx>]

Public bug reported:

Binary package hint: ca-certificates

Recent update to ca-certificates 20090624 breaks ca-certificates-java
installation, currently preventing all Java-based builds in karmic from
succeeding (ca-certificates-java is required by default-jdk, so default-
jdk cannot be installed as a build dependency).

Note that you should also get ca-certificates upgrade errors on systems
where ca-certificates-java is already installed.

Here is the buildlog error:

Setting up ca-certificates-java (20081028) ...
creating /etc/ssl/certs/java/cacerts...
Certificate was added to keystore
  added certificate cacert.org/cacert.org.crt
Certificate was added to keystore
  added certificate gouv.fr/cert_igca_dsa.crt
Certificate was added to keystore
  added certificate gouv.fr/cert_igca_rsa.crt
keytool error: java.security.NoSuchAlgorithmException: SHA384withECDSA Signature not available
  error adding mozilla/COMODO_ECC_Certification_Authority.crt
Certificate was added to keystore
  added certificate mozilla/DigiNotar_Root_CA.crt
Certificate was added to keystore
  added certificate mozilla/Network_Solutions_Certificate_Authority.crt
Certificate was added to keystore
  added certificate mozilla/WellsSecure_Public_Root_Certificate_Authority.crt
failed.
dpkg: error processing ca-certificates-java (--configure):
 subprocess post-installation script returned error exit status 1

Apparently the addition of
mozilla/COMODO_ECC_Certification_Authority.crt doesn't please ca-
certificates-java since it doesn't know how to handle SHA384withECDSA
signatures. I guess this can either be fixed in ca-certificates or ca-
certificates-java, so I'll pull both as affected.

** Affects: ca-certificates (Ubuntu)
     Importance: High
         Status: New

** Affects: ca-certificates-java (Ubuntu)
     Importance: High
         Status: New

** Affects: ca-certificates-java (Debian)
     Importance: Unknown
         Status: Unknown

** Changed in: ca-certificates (Ubuntu)
   Importance: Undecided => High

** Also affects: ca-certificates-java (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: ca-certificates-java (Ubuntu)
   Importance: Undecided => High

** Bug watch added: Debian Bug tracker #534520
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534520

** Also affects: ca-certificates-java (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534520
   Importance: Unknown
       Status: Unknown

-- 
[Karmic] Update to ca-certificates 20090624 prevents ca-certificates-java from installing
https://bugs.launchpad.net/bugs/392104
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in ubuntu.

Status in “ca-certificates” package in Ubuntu: New
Status in “ca-certificates-java” package in Ubuntu: New
Status in “ca-certificates-java” package in Debian: Unknown

Bug description:
Binary package hint: ca-certificates

Recent update to ca-certificates 20090624 breaks ca-certificates-java installation, currently preventing all Java-based builds in karmic from succeeding (ca-certificates-java is required by default-jdk, so default-jdk cannot be installed as a build dependency).

Note that you should also get ca-certificates upgrade errors on systems where ca-certificates-java is already installed.

Here is the buildlog error:

Setting up ca-certificates-java (20081028) ...
creating /etc/ssl/certs/java/cacerts...
Certificate was added to keystore
  added certificate cacert.org/cacert.org.crt
Certificate was added to keystore
  added certificate gouv.fr/cert_igca_dsa.crt
Certificate was added to keystore
  added certificate gouv.fr/cert_igca_rsa.crt
keytool error: java.security.NoSuchAlgorithmException: SHA384withECDSA Signature not available
  error adding mozilla/COMODO_ECC_Certification_Authority.crt
Certificate was added to keystore
  added certificate mozilla/DigiNotar_Root_CA.crt
Certificate was added to keystore
  added certificate mozilla/Network_Solutions_Certificate_Authority.crt
Certificate was added to keystore
  added certificate mozilla/WellsSecure_Public_Root_Certificate_Authority.crt
failed.
dpkg: error processing ca-certificates-java (--configure):
 subprocess post-installation script returned error exit status 1

Apparently the addition of mozilla/COMODO_ECC_Certification_Authority.crt doesn't please ca-certificates-java since it doesn't know how to handle SHA384withECDSA signatures. I guess this can either be fixed in ca-certificates or ca-certificates-java, so I'll pull both as affected.