[Bug 1771363] [NEW] ca-certificates-java: convert PKCS12 cacerts keystore to JKS

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Tiago Stürmer Daitx (tdaitx):

The fix for Debian #894979 and Ubuntu bug #1739631 which updated ca-certificates-java to generate
JKS keystores by default - instead OpenJDK's 9+ default of PKCS12 - only fixes new installs.

Any user already affected by that issue won't benefit from the fix, as the file /etc/ssl/certs/java/cacerts is at most updated by the jks-keystore hook. The only way to actually change it from the PKCS12 to the JKS format is to remove the cacerts file and then calling
'update-ca-certificates -f' - which is also accomplished by removing and then reinstalling the ca-certificates-java package.

** Affects: ca-certificates-java (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: ca-certificates-java (Debian)
     Importance: Unknown
         Status: Unknown


** Tags: bionic cosmic patch
-- 
ca-certificates-java: convert PKCS12 cacerts keystore to JKS
https://bugs.launchpad.net/bugs/1771363
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.