openjdk team mailing list archive

[Eliah Kagan <degeneracypressure@xxxxxxxxx>]

In
https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/779174/comments/16,
I presume you mean "apt-get update && apt-get dist-upgrade" for step 4,
since "apt-get upgrade" won't install new packages or remove installed
ones, and thus would often perform a partial upgrade producing a mixed
Natty/Oneiric system of dubious functionality.

With that modification, and starting with a command-line only Natty
system (freshly installed from the Natty i386 Alternate CD), I was able
to reproduce the bug today. However, after running those commands, I
then ran "apt-get dist-upgrade" again, and it was able to configure ca-
certificates-java successfully. This workaround (of simply updating
again, to trigger a re-attempt at configuring the package) had also
worked on my fully-fledged graphical Oneiric system created by updating
from Natty (that was the system on which I reported duplicate bug
779327) when the original fix for this bug was released. It also works
when I create makeshift Oneiric live CD's by using the procedure at
https://help.ubuntu.com/community/LiveCDCustomization and upgrading the
live CD system's unpacked squashfs filesystem in the chroot (that is, in
the chroot, ca-certificates-java initially fails to install, but when I
run "apt-get upgrade" / "apt-get dist-upgrade" after the first attempt,
it is installed/configured successfully).

That simple workaround has always been effective for me, but I'm not
sure if it's effective in all cases. It would stand to reason that
perhaps it's not, because if it is, then why have there been so many
more sophisticated and cumbersome workarounds proposed here? If it is,
then I think this should still be considered a bug needing fixing
(packages are supposed to install correctly the first time), but perhaps
its importance should be changed from Critical to Low. Or if it's
important to document the bug it its original form as having Critical
importance, perhaps this could be re-marked Fix Released and a new bug
opened to document its new, more easily worked around form. That is, of
course, assuming that it's as easily worked around on other systems as
on mine, and for all I know, that might not be the case.

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in Ubuntu.
https://bugs.launchpad.net/bugs/779174

Title:
  package ca-certificates-java 20110426 failed to install/upgrade during
  upgrade to Oneiric: fix path to libnss3 for multiarch

Status in “openjdk-6” package in Ubuntu:
  Triaged
Status in “openjdk-6” source package in Oneiric:
  Triaged

Bug description:
  Binary package hint: ca-certificates-java

  TEST CASE:
  1. Install Natty
  2. Install openjdk-6-jre
  3. Changes release to Oneiric in /etc/apt/sources.list
  4. apt-get update && apt-get upgrade

  WORKAROUND:
  Edit /etc/java-6-openjdk/security/nss.cfg and set
  nssLibraryDirectory = /usr/lib/i386-linux-gnu

  
  Package doesn't install, this is the error message:

  unseen@MrSlave:~$ sudo aptitude upgrade
  Resolving dependencies...
  The following partially installed packages will be configured:
    ca-certificates-java
  No packages will be installed, upgraded, or removed.
  0 packages upgraded, 0 newly installed, 0 to remove and 17 not upgraded.
  Need to get 0 B of archives. After unpacking 0 B will be used.
  Setting up ca-certificates-java (20110426) ...
  Exception in thread "main" java.security.ProviderException: Could not initialize NSS
   at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:201)
   at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103)
   at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
   at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
   at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
   at java.lang.reflect.Constructor.newInstance(Constructor.java:532)
   at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262)
   at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244)
   at java.security.AccessController.doPrivileged(Native Method)
   at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244)
   at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224)
   at sun.security.jca.ProviderList.getProvider(ProviderList.java:232)
   at sun.security.jca.ProviderList.getService(ProviderList.java:330)
   at sun.security.jca.GetInstance.getInstance(GetInstance.java:157)
   at java.security.Security.getImpl(Security.java:696)
   at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130)
   at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121)
   at sun.security.x509.AlgorithmId.<init>(AlgorithmId.java:114)
   at sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381)
   at sun.security.x509.X509Key.parse(X509Key.java:168)
   at sun.security.x509.CertificateX509Key.<init>(CertificateX509Key.java:75)
   at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:705)
   at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:169)
   at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1747)
   at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:196)
   at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:107)
   at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322)
   at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:763)
   at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55)
   at java.security.KeyStore.load(KeyStore.java:1201)
   at UpdateCertificates.createKeyStore(UpdateCertificates.java:65)
   at UpdateCertificates.main(UpdateCertificates.java:51)
  Caused by: java.io.FileNotFoundException: /usr/lib/libnss3.so
   at sun.security.pkcs11.Secmod.initialize(Secmod.java:186)
   at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:197)
   ... 31 more
  dpkg: error processing ca-certificates-java (--configure):
   subprocess installed post-installation script returned error exit status 1
  Errors were encountered while processing:
   ca-certificates-java
  E: Sub-process /usr/bin/dpkg returned an error code (1)
  A package failed to install.  Trying to recover:
  Setting up ca-certificates-java (20110426) ...
  Exception in thread "main" java.security.ProviderException: Could not initialize NSS
   at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:201)
   at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103)
   at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
   at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
   at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
   at java.lang.reflect.Constructor.newInstance(Constructor.java:532)
   at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262)
   at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244)
   at java.security.AccessController.doPrivileged(Native Method)
   at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244)
   at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224)
   at sun.security.jca.ProviderList.getProvider(ProviderList.java:232)
   at sun.security.jca.ProviderList.getService(ProviderList.java:330)
   at sun.security.jca.GetInstance.getInstance(GetInstance.java:157)
   at java.security.Security.getImpl(Security.java:696)
   at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130)
   at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121)
   at sun.security.x509.AlgorithmId.<init>(AlgorithmId.java:114)
   at sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381)
   at sun.security.x509.X509Key.parse(X509Key.java:168)
   at sun.security.x509.CertificateX509Key.<init>(CertificateX509Key.java:75)
   at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:705)
   at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:169)
   at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1747)
   at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:196)
   at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:107)
   at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322)
   at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:763)
   at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55)
   at java.security.KeyStore.load(KeyStore.java:1201)
   at UpdateCertificates.createKeyStore(UpdateCertificates.java:65)
   at UpdateCertificates.main(UpdateCertificates.java:51)
  Caused by: java.io.FileNotFoundException: /usr/lib/libnss3.so
   at sun.security.pkcs11.Secmod.initialize(Secmod.java:186)
   at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:197)
   ... 31 more
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 31: echo: write error: Broken pipe
  dpkg: error processing ca-certificates-java (--configure):
   subprocess installed post-installation script returned error exit status 1
  Errors were encountered while processing:
   ca-certificates-java

  unseen@MrSlave:~$

  ProblemType: Package
  DistroRelease: Ubuntu 11.10
  Package: ca-certificates-java 20110426
  ProcVersionSignature: Ubuntu 2.6.39-1.6-generic 2.6.39-rc6
  Uname: Linux 2.6.39-1-generic x86_64
  NonfreeKernelModules: nvidia
  AptOrdering:
   lintian: Remove
   libipc-run-perl: Remove
   libio-pty-perl: Remove
   ca-certificates-java: Configure
  Architecture: amd64
  Date: Sat May  7 21:23:17 2011
  ErrorMessage: subprocess installed post-installation script returned error exit status 1
  InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
  PackageArchitecture: all
  SourcePackage: ca-certificates-java
  Title: package ca-certificates-java 20110426 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
  UpgradeStatus: Upgraded to oneiric on 2011-04-09 (27 days ago)