Control: reassign -1 ca-certificates-java 20180516 Purge (not just remove) of the ca-certificates-java package should remove config files, including /etc/ca-certificates/update.d/jks-keystore. Reassigning to appropriate package, ca-certificates-java, but perhaps this is wontfix.
-- Kind regards, Michael On 09/15/2018 01:58 AM, Marc Lehmann wrote: > Package: ca-certificates > Version: 20161130+nmu1+deb9u1 > Severity: normal > > Dear Maintainer, > > I get this error when installing openjdk-8-jre:i386 on an amd64 system, which > pulls in > ca-certificates-java automatically: > > Processing triggers for ca-certificates (20161130+nmu1+deb9u1) ... > Updating certificates in /etc/ssl/certs... > 0 added, 0 removed; done. > Running hooks in /etc/ca-certificates/update.d... > > /etc/ca-certificates/update.d/jks-keystore: 86: > /etc/ca-certificates/update.d/jks-keystore: java: Permission denied > E: /etc/ca-certificates/update.d/jks-keystore exited with code 1. > > The way this happened is that I uninstalled opendjk-8.*, which removed > ca-certificates-java and default-jre. The result was that there was no "java" > executable in the PATH anymore. > > Then, during installation of openjdk-8-jre:i386, I got the above error. > > I was able top work around this by installing default-jre again, which gave > me a java executable. > > I don't know if this is a problem in ca-certificates, ca-certificates-java, > openjdk or elsewhere, so apologies if I report this against the wrong package. > > -- System Information: > Debian Release: 9.5 > APT prefers stable > APT policy: (990, 'stable'), (500, 'unstable'), (500, 'testing') > Architecture: amd64 (x86_64) > Foreign Architectures: i386 > > Kernel: Linux 4.18.7-041807-generic (SMP w/4 CPU cores) > Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=C > (charmap=UTF-8) > Shell: /bin/sh linked to /usr/bin/dash > Init: systemd (via /run/systemd/system) > > Versions of packages ca-certificates depends on: > ii debconf [debconf-2.0] 1.5.61 > ii openssl 1.1.0f-3+deb9u2 > > ca-certificates recommends no packages. > > ca-certificates suggests no packages. > > -- debconf information excluded >