openjdk team mailing list archive

[Ubuntu Foundations Team Bug Bot <1895435@xxxxxxxxxxxxxxxxxx>]

The attachment "Patch to recreate /etc/ssl/certs/java if missing with
original permissions when jks-keystore hook run via update-ca-
certificates" seems to be a patch.  If it isn't, please remove the
"patch" flag from the attachment, remove the "patch" tag, and if you are
a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in Ubuntu.
https://bugs.launchpad.net/bugs/1895435

Title:
  update-ca-certificates fails due to no  /etc/ssl/certs/java directory
  existing

Status in ca-certificates-java package in Ubuntu:
  New

Bug description:
  Issue:
  /etc/ssl/certs/java/cacerts cannot update when running /usr/local/share/ca-certificates and attempting to update when ca-certificates-java package is installed

  Issue Description:

  When /etc/ssl/certs/java is not available the update-ca-certificates
  fails with the following taceback:

  org.debian.security.UnableToSaveKeystoreException: There was a problem saving the new Java keystore.
          at org.debian.security.KeyStoreHandler.save(KeyStoreHandler.java:86)
          at org.debian.security.UpdateCertificates.finish(UpdateCertificates.java:108)
          at org.debian.security.UpdateCertificates.main(UpdateCertificates.java:54)
  Caused by: java.io.FileNotFoundException: /etc/ssl/certs/java/cacerts (No such file or directory)
          at java.base/java.io.FileOutputStream.open0(Native Method)
          at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
          at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
          at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:126)
          at org.debian.security.KeyStoreHandler.save(KeyStoreHandler.java:82)
          ... 2 more
  E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.

  No updated /etc/ssl/certs/java/cacerts is created.

  Workaround:

          if [ ! -d "/etc/ssl/certs/java" ]; then
           mkdir -p /etc/ssl/certs/java
          fi

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1895435/+subscriptions