openjdk team mailing list archive

[Hans Joachim Desserud <1396760@xxxxxxxxxxxxxxxxxx>]

Thanks for taking your time to report this issue and help making Ubuntu
better.

I stumbled across this issue after I had reported a similar one. (Bug
1406483 where I triggered it by installing maven and openjdk-8-jdk)

I was able to reproduce this issue when installing openjdk-8-jre-
headless on Ubuntu 14.10, though when I tried on Ubuntu Vivid it added
the certificates and worked fine. Tough I don't see why it would as
neither openjdk-8 nor the ca-certificates-java package has changed
between these two releases.

(Oh, and I also found bug 983302 where it looks like the same issue has
plagued the headless package for openjdk-7)


** Changed in: ca-certificates-java (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in Ubuntu.
https://bugs.launchpad.net/bugs/1396760

Title:
  ca-certificates-java doesn't create /etc/ssl/certs/java/cacerts

Status in ca-certificates-java package in Ubuntu:
  Confirmed

Bug description:
  Ubuntu server 14.10 64 bit:
  sudo apt-get install openjdk-8-jre-headless
  installs also ca-certificates-java which results in follwing error during install:

  
  ...
  Setting up ca-certificates-java (20140324) ...
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 53: java: command not found
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 66: java: command not found
  done.
  Processing triggers for ca-certificates (20140325) ...
  Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
  Running hooks in /etc/ca-certificates/update.d....
  /etc/ca-certificates/update.d/jks-keystore: 82: /etc/ca-certificates/update.d/jks-keystore: java: not found
  E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.
  done.
  ...

  
  This results in an unconfigued empty /etc/ssl/certs/java/cacerts.
  This induces errors in user applications like " javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

  Solution: 
  sudo /var/lib/dpkg/info/ca-certificates-java.postinst configure

  The root cause for the error is to me unknown, maybe wrong sequence
  order during package configuration?

  BR
  us2000

  
  Description:	Ubuntu 14.10
  Release:	14.10

  ca-certificates-java:
    Installed: 20140324
    Candidate: 20140324
    Version table:
   *** 20140324 0
          500 http://de.archive.ubuntu.com/ubuntu/ utopic/main amd64 Packages
          100 /var/lib/dpkg/status
  openjdk-8-jre-headless:
    Installed: 8u40~b09-1
    Candidate: 8u40~b09-1
    Version table:
   *** 8u40~b09-1 0
          500 http://de.archive.ubuntu.com/ubuntu/ utopic/universe amd64 Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1396760/+subscriptions