← Back to team overview

openjdk team mailing list archive

[Bug 1396760] Re: ca-certificates-java doesn't create /etc/ssl/certs/java/cacerts

 

Reproduce with Virtualbox:

lubuntu-14.10-desktop-amd64.iso	(md5:60e666e9459ec52e56aa6cbd94d6895e)
No install, boot into life-system
(Kernel Boot Parameter vga=791 for display bug)
Then in the Live-System:
	sudo apt-get update
	sudo apt-get install openjdk-8-jre-headless


--or--

ubuntu-14.10-server-amd64.iso (md5:91bd1cfba65417bfa04567e4f64b5c55)
Default install, only openssh-server installed
Then in the installed system:
	sudo apt-get update
	sudo apt-get install openjdk-8-jre-headless

Java bug also triggered, when you do an system update before java install:
	sudo apt-get update
	sudo apt-get upgrade
	sudo apt-get dist-upgrade
	reboot
	sudo apt-get update
	sudo apt-get install openjdk-8-jre-headless


debian-live-7.7.0-amd64-lxde-desktop.iso
-->could not be tested, there exists no  openjdk-8-* package in default apt config


Best regards us2000

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in Ubuntu.
https://bugs.launchpad.net/bugs/1396760

Title:
  ca-certificates-java doesn't create /etc/ssl/certs/java/cacerts

Status in ca-certificates-java package in Ubuntu:
  Confirmed

Bug description:
  Ubuntu server 14.10 64 bit:
  sudo apt-get install openjdk-8-jre-headless
  installs also ca-certificates-java which results in follwing error during install:

  
  ...
  Setting up ca-certificates-java (20140324) ...
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 53: java: command not found
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 66: java: command not found
  done.
  Processing triggers for ca-certificates (20140325) ...
  Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
  Running hooks in /etc/ca-certificates/update.d....
  /etc/ca-certificates/update.d/jks-keystore: 82: /etc/ca-certificates/update.d/jks-keystore: java: not found
  E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.
  done.
  ...

  
  This results in an unconfigued empty /etc/ssl/certs/java/cacerts.
  This induces errors in user applications like " javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

  Solution: 
  sudo /var/lib/dpkg/info/ca-certificates-java.postinst configure

  The root cause for the error is to me unknown, maybe wrong sequence
  order during package configuration?

  BR
  us2000

  
  Description:	Ubuntu 14.10
  Release:	14.10

  ca-certificates-java:
    Installed: 20140324
    Candidate: 20140324
    Version table:
   *** 20140324 0
          500 http://de.archive.ubuntu.com/ubuntu/ utopic/main amd64 Packages
          100 /var/lib/dpkg/status
  openjdk-8-jre-headless:
    Installed: 8u40~b09-1
    Candidate: 8u40~b09-1
    Version table:
   *** 8u40~b09-1 0
          500 http://de.archive.ubuntu.com/ubuntu/ utopic/universe amd64 Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1396760/+subscriptions


References