On 02/06/2013 01:46 AM, Erwan David wrote: > java-ca-certificates is not installed, but conf files are still there > (it surely was installed as a dependency then removed (but not purged) > when not needed anymore. > > nux19222:~ % dpkg -l '*ca-cert*' > Desired=Unknown/Install/Remove/Purge/Hold > | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend > |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) > ||/ Name Version Architecture > Description > +++-===================================-======================-======================-============================================================================ > ii ca-certificates 20130119 all > Common CA certificates > rc ca-certificates-java 20110531 all > Common CA certificates (JKS keystore)
I've tested upgrades from Squeeze with both packages fully installed, but I'll try after removing ca-certificates-java_20100412 (20110531 was never in a stable release). A quick test of the current versions in Wheezy do not show this problem. I've attached that output. -- Kind regards, Michael
mshuler@mana:~$ sudo apt-get install ca-certificates-java -V Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: ca-certificates-java (20121112+nmu2) 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 14.9 kB of archives. After this operation, 19.5 kB of additional disk space will be used. Get:1 http://ftp.us.debian.org/debian/ wheezy/main ca-certificates-java all 20121112+nmu2 [14.9 kB] Fetched 14.9 kB in 0s (49.6 kB/s) Selecting previously unselected package ca-certificates-java. (Reading database ... 132548 files and directories currently installed.) Unpacking ca-certificates-java (from .../ca-certificates-java_20121112+nmu2_all.deb) ... Processing triggers for ca-certificates ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d....done. Setting up ca-certificates-java (20121112+nmu2) ... Adding debian:Entrust.net_Premium_2048_Secure_Server_CA.pem Adding debian:Certum_Root_CA.pem Adding debian:Comodo_Trusted_Services_root.pem Adding debian:VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem Adding debian:SwissSign_Platinum_CA_-_G2.pem Adding debian:Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.pem Adding debian:ePKI_Root_Certification_Authority.pem Adding debian:Deutsche_Telekom_Root_CA_2.pem Adding debian:Visa_eCommerce_Root.pem Adding debian:T-TeleSec_GlobalRoot_Class_3.pem Adding debian:DigiCert_Assured_ID_Root_CA.pem Adding debian:Thawte_Server_CA.pem Adding debian:Security_Communication_Root_CA.pem Adding debian:Verisign_Class_1_Public_Primary_Certification_Authority.pem Adding debian:Actalis_Authentication_Root_CA.pem Adding debian:thawte_Primary_Root_CA.pem Adding debian:OISTE_WISeKey_Global_Root_GA_CA.pem Adding debian:Equifax_Secure_eBusiness_CA_1.pem Adding debian:Certum_Trusted_Network_CA.pem Adding debian:Taiwan_GRCA.pem Adding debian:AffirmTrust_Premium.pem Adding debian:ValiCert_Class_1_VA.pem Adding debian:Juur-SK.pem Adding debian:RSA_Security_2048_v3.pem Adding debian:Microsec_e-Szigno_Root_CA_2009.pem Adding debian:Buypass_Class_3_Root_CA.pem Adding debian:Verisign_Class_1_Public_Primary_Certification_Authority_-_G2.pem Adding debian:VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem Adding debian:VeriSign_Universal_Root_Certification_Authority.pem Adding debian:Thawte_Premium_Server_CA.pem Adding debian:COMODO_ECC_Certification_Authority.pem Adding debian:GeoTrust_Universal_CA_2.pem Adding debian:COMODO_Certification_Authority.pem Adding debian:ValiCert_Class_2_VA.pem Adding debian:Security_Communication_EV_RootCA1.pem Adding debian:spi-cacert-2008.pem Adding debian:Buypass_Class_2_Root_CA.pem Adding debian:Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem Adding debian:CA_Disig.pem Adding debian:AddTrust_Public_Services_Root.pem Adding debian:CNNIC_ROOT.pem Adding debian:GeoTrust_Universal_CA.pem Adding debian:Go_Daddy_Root_Certificate_Authority_-_G2.pem Adding debian:TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.pem Adding debian:Security_Communication_RootCA2.pem Adding debian:Equifax_Secure_eBusiness_CA_2.pem Adding debian:Entrust.net_Secure_Server_CA.pem Adding debian:America_Online_Root_Certification_Authority_2.pem Adding debian:Camerfirma_Global_Chambersign_Root.pem Adding debian:TDC_OCES_Root_CA.pem Adding debian:Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem Adding debian:Verisign_Class_4_Public_Primary_Certification_Authority_-_G3.pem Adding debian:Buypass_Class_2_CA_1.pem Adding debian:Certinomis_-_Autorité_Racine.pem Adding debian:ComSign_Secured_CA.pem Adding debian:Izenpe.com.pem Adding debian:AddTrust_External_Root.pem Adding debian:GeoTrust_Primary_Certification_Authority.pem Adding debian:SwissSign_Silver_CA_-_G2.pem Adding debian:E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem Adding debian:QuoVadis_Root_CA_2.pem Adding debian:EC-ACC.pem Adding debian:Cybertrust_Global_Root.pem Adding debian:GlobalSign_Root_CA_-_R2.pem Adding debian:TDC_Internet_Root_CA.pem Adding debian:Sonera_Class_1_Root_CA.pem Adding debian:TC_TrustCenter_Class_3_CA_II.pem Adding debian:NetLock_Qualified_=Class_QA=_Root.pem Adding debian:Comodo_AAA_Services_root.pem Adding debian:ssl-cert-snakeoil.pem Adding debian:GTE_CyberTrust_Global_Root.pem Adding debian:NetLock_Express_=Class_C=_Root.pem Adding debian:NetLock_Arany_=Class_Gold=_Főtanúsítvány.pem Adding debian:SecureSign_RootCA11.pem Adding debian:SecureTrust_CA.pem Adding debian:Network_Solutions_Certificate_Authority.pem Adding debian:thawte_Primary_Root_CA_-_G2.pem Adding debian:Chambers_of_Commerce_Root_-_2008.pem Adding debian:NetLock_Business_=Class_B=_Root.pem Adding debian:EE_Certification_Centre_Root_CA.pem Adding debian:DigiCert_Global_Root_CA.pem Adding debian:Starfield_Root_Certificate_Authority_-_G2.pem Adding debian:certSIGN_ROOT_CA.pem Adding debian:Staat_der_Nederlanden_Root_CA_-_G2.pem Adding debian:Certigna.pem Adding debian:Entrust_Root_Certification_Authority.pem Adding debian:ApplicationCA_-_Japanese_Government.pem Adding debian:Camerfirma_Chambers_of_Commerce_Root.pem Adding debian:A-Trust-nQual-03.pem Adding debian:Buypass_Class_3_CA_1.pem Adding debian:Firmaprofesional_Root_CA.pem Adding debian:Sonera_Class_2_Root_CA.pem Adding debian:Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem Adding debian:RSA_Root_Certificate_1.pem Adding debian:TURKTRUST_Certificate_Services_Provider_Root_2.pem Adding debian:Equifax_Secure_CA.pem Adding debian:QuoVadis_Root_CA.pem Adding debian:ACEDICOM_Root.pem Adding debian:QuoVadis_Root_CA_3.pem Adding debian:Secure_Global_CA.pem Adding debian:EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.pem Adding debian:ca.pem Adding debian:Hongkong_Post_Root_CA_1.pem Adding debian:TC_TrustCenter_Universal_CA_III.pem Adding debian:AffirmTrust_Commercial.pem Adding debian:Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem Adding debian:Microsec_e-Szigno_Root_CA.pem Adding debian:Digital_Signature_Trust_Co._Global_CA_1.pem Adding debian:GeoTrust_Global_CA_2.pem Adding debian:IGC_A.pem Adding debian:StartCom_Certification_Authority.pem Adding debian:UTN_USERFirst_Hardware_Root_CA.pem Adding debian:Trustis_FPS_Root_CA.pem Adding debian:Staat_der_Nederlanden_Root_CA.pem Adding debian:AffirmTrust_Networking.pem Adding debian:S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.pem Adding debian:AddTrust_Qualified_Certificates_Root.pem Adding debian:spi-ca-2003.pem Adding debian:GlobalSign_Root_CA_-_R3.pem Adding debian:SwissSign_Gold_CA_-_G2.pem Adding debian:Verisign_Class_3_Public_Primary_Certification_Authority.pem Adding debian:America_Online_Root_Certification_Authority_1.pem Adding debian:Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem Adding debian:TURKTRUST_Certificate_Services_Provider_Root_1.pem Adding debian:Go_Daddy_Class_2_CA.pem Adding debian:Swisscom_Root_CA_1.pem Adding debian:WellsSecure_Public_Root_Certificate_Authority.pem Adding debian:cacert.org.pem Adding debian:GeoTrust_Global_CA.pem Adding debian:Wells_Fargo_Root_CA.pem Adding debian:TWCA_Root_Certification_Authority.pem Adding debian:UTN_USERFirst_Email_Root_CA.pem Adding debian:NetLock_Notary_=Class_A=_Root.pem Adding debian:AC_Raíz_Certicámara_S.A..pem Adding debian:GlobalSign_Root_CA.pem Adding debian:Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.pem Adding debian:Root_CA_Generalitat_Valenciana.pem Adding debian:ComSign_CA.pem Adding debian:Baltimore_CyberTrust_Root.pem Adding debian:Comodo_Secure_Services_root.pem Adding debian:Equifax_Secure_Global_eBusiness_CA.pem Adding debian:DST_Root_CA_X3.pem Adding debian:GeoTrust_Primary_Certification_Authority_-_G3.pem Adding debian:TC_TrustCenter_Class_2_CA_II.pem Adding debian:Starfield_Services_Root_Certificate_Authority_-_G2.pem Adding debian:XRamp_Global_CA_Root.pem Adding debian:StartCom_Certification_Authority_G2.pem Adding debian:DigiCert_High_Assurance_EV_Root_CA.pem Adding debian:UTN_DATACorp_SGC_Root_CA.pem Adding debian:Starfield_Class_2_CA.pem Adding debian:AffirmTrust_Premium_ECC.pem Adding debian:TC_TrustCenter_Universal_CA_I.pem Adding debian:Global_Chambersign_Root_-_2008.pem Adding debian:GeoTrust_Primary_Certification_Authority_-_G2.pem Adding debian:AddTrust_Low-Value_Services_Root.pem Adding debian:Certplus_Class_2_Primary_CA.pem Adding debian:Digital_Signature_Trust_Co._Global_CA_3.pem Adding debian:thawte_Primary_Root_CA_-_G3.pem Adding debian:DST_ACES_CA_X6.pem done. Processing triggers for ca-certificates ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... done. done. mshuler@mana:~$ sudo apt-get remove ca-certificates-java Reading package lists... Done Building dependency tree Reading state information... Done The following packages will be REMOVED: ca-certificates-java 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded. After this operation, 19.5 kB disk space will be freed. Do you want to continue [Y/n]? (Reading database ... 132558 files and directories currently installed.) Removing ca-certificates-java ... Processing triggers for ca-certificates ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... updates of cacerts keystore disabled. done. mshuler@mana:~$ ls -la /etc/ca-certificates/update.d/ total 12 drwxr-xr-x 2 root root 4096 Feb 6 17:56 . drwxr-xr-x 3 root root 4096 Sep 19 18:06 .. -rwxr-xr-x 1 root root 2328 Jan 27 07:21 jks-keystore mshuler@mana:~$ sudo update-ca-certificates --fresh Clearing symlinks in /etc/ssl/certs...done. Updating certificates in /etc/ssl/certs... 158 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... updates of cacerts keystore disabled. done. mshuler@mana:~$
