[Bug 1396760] Re: ca-certificates-java doesn't create /etc/ssl/certs/java/cacerts

[Hans Joachim Desserud]

>How come it never got backported?

I guess nobody requested it for an older release before now, see
https://wiki.ubuntu.com/StableReleaseUpdates#Procedure for details.

Though, I do wonder whether what you are experiencing is the exact same
issue. According to bug 1560405 and https://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=775775 it looks like this was fixed by adding
support for openjdk-8, but that doesn't seem to be available in 14.04
(https://launchpad.net/ubuntu/+source/openjdk-8). So... I'm not sure if
that would actually fix things or if you are encountering a separate but
similar issue.

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to a duplicate bug report (1449652).
https://bugs.launchpad.net/bugs/1396760

Title:
  ca-certificates-java doesn't create /etc/ssl/certs/java/cacerts

Status in ca-certificates-java package in Ubuntu:
  Fix Released
Status in ca-certificates-java package in Debian:
  Fix Released

Bug description:
  Ubuntu server 14.10 64 bit:
  sudo apt-get install openjdk-8-jre-headless
  installs also ca-certificates-java which results in follwing error during install:

  
  ...
  Setting up ca-certificates-java (20140324) ...
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 53: java: command not found
  /var/lib/dpkg/info/ca-certificates-java.postinst: line 66: java: command not found
  done.
  Processing triggers for ca-certificates (20140325) ...
  Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
  Running hooks in /etc/ca-certificates/update.d....
  /etc/ca-certificates/update.d/jks-keystore: 82: /etc/ca-certificates/update.d/jks-keystore: java: not found
  E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.
  done.
  ...

  
  This results in an unconfigued empty /etc/ssl/certs/java/cacerts.
  This induces errors in user applications like " javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

  Solution: 
  sudo /var/lib/dpkg/info/ca-certificates-java.postinst configure

  The root cause for the error is to me unknown, maybe wrong sequence
  order during package configuration?

  BR
  us2000

  
  Description:	Ubuntu 14.10
  Release:	14.10

  ca-certificates-java:
    Installed: 20140324
    Candidate: 20140324
    Version table:
   *** 20140324 0
          500 http://de.archive.ubuntu.com/ubuntu/ utopic/main amd64 Packages
          100 /var/lib/dpkg/status
  openjdk-8-jre-headless:
    Installed: 8u40~b09-1
    Candidate: 8u40~b09-1
    Version table:
   *** 8u40~b09-1 0
          500 http://de.archive.ubuntu.com/ubuntu/ utopic/universe amd64 Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1396760/+subscriptions