openjdk team mailing list archive

[Alex Murray <1895435@xxxxxxxxxxxxxxxxxx>]

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in Ubuntu.
https://bugs.launchpad.net/bugs/1895435

Title:
  update-ca-certificates fails due to no  /etc/ssl/certs/java directory
  existing

Status in ca-certificates-java package in Ubuntu:
  New

Bug description:
  Issue:
  /etc/ssl/certs/java/cacerts cannot update when running /usr/local/share/ca-certificates and attempting to update when ca-certificates-java package is installed

  Issue Description:

  When /etc/ssl/certs/java is not available the update-ca-certificates
  fails with the following taceback:

  org.debian.security.UnableToSaveKeystoreException: There was a problem saving the new Java keystore.
          at org.debian.security.KeyStoreHandler.save(KeyStoreHandler.java:86)
          at org.debian.security.UpdateCertificates.finish(UpdateCertificates.java:108)
          at org.debian.security.UpdateCertificates.main(UpdateCertificates.java:54)
  Caused by: java.io.FileNotFoundException: /etc/ssl/certs/java/cacerts (No such file or directory)
          at java.base/java.io.FileOutputStream.open0(Native Method)
          at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
          at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
          at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:126)
          at org.debian.security.KeyStoreHandler.save(KeyStoreHandler.java:82)
          ... 2 more
  E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.

  No updated /etc/ssl/certs/java/cacerts is created.

  Workaround:

          if [ ! -d "/etc/ssl/certs/java" ]; then
           mkdir -p /etc/ssl/certs/java
          fi

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1895435/+subscriptions