openjdk team mailing list archive

[Frank Lin PIAT <fpiat@xxxxxxxx>]

Hello,

I was a bit confused about this error message:

$aptitude install ... ca-certificates-java ... 
> [..]
> Setting up ca-certificates-java (20090629) ...
> creating /etc/ssl/certs/java/cacerts...
> [..]
>   removed untrusted certificate cacert.org/class3.crt
>   removed untrusted certificate cacert.org/root.crt
>   added certificate mozilla/Equifax_Secure_Global_eBusiness_CA.crt
>   removed untrusted certificate quovadis.bm/QuoVadis_Root_Certification_Authority.crt
>   ignored import, signature not available: mozilla/COMODO_ECC_Certification_Authority.crt
> keytool error: java.security.NoSuchAlgorithmException: SHA384withECDSA Signature not available

I think that the "error" would be very much easier to understand if the
"keytool error" was above "ignore import", or if the log message was
idented, like:


>   removed untrusted certificate quovadis.bm/QuoVadis_Root_Certification_Authority.crt
> keytool error: java.security.NoSuchAlgorithmException: SHA384withECDSA Signature not available
>   ignored import, signature not available: mozilla/COMODO_ECC_Certification_Authority.crt

or like:
>   removed untrusted certificate quovadis.bm/QuoVadis_Root_Certification_Authority.crt
>   ignored import, signature not available: mozilla/COMODO_ECC_Certification_Authority.crt
>   -> keytool error: java.security.NoSuchAlgorithmException: SHA384withECDSA Signature not available

See the sample patch below (not actually tested;)

Thanks,

Franklin

--- ca-certificates-java.postinst.orig	2009-10-04 12:46:17.000000000 +0200
+++ ca-certificates-java.postinst	2009-10-04 12:56:46.000000000 +0200
@@ -63,7 +63,7 @@
 		      echo "  added certificate $pem"
 		  elif grep -q 'Signature not available' $log; then
 		      echo "  ignored import, signature not available: ${line#+*}"
-		      cat $log
+		      sed -e 's/^/   -> /' $log
 		  else
 		      echo >&2 "  error adding ${line#+*}"
 		      errors=$(expr $errors + 1)

--- ca-certificates-java.postinst.orig	2009-10-04 12:46:17.000000000 +0200
+++ ca-certificates-java.postinst	2009-10-04 12:46:22.000000000 +0200
@@ -62,8 +62,8 @@
 		  then
 		      echo "  added certificate $pem"
 		  elif grep -q 'Signature not available' $log; then
+		      cat $log
 		      echo "  ignored import, signature not available: ${line#+*}"
-		      cat $log
 		  else
 		      echo >&2 "  error adding ${line#+*}"
 		      errors=$(expr $errors + 1)