Bug#1032093: jameica: missing dependencies

[Jochen Sprickerhof]

Hi Thomas,

thanks a lot for your bug report!

* Thomas Uhle <thomas.u...@mailbox.tu-dresden.de> [2023-02-27 20:58]:

Jameica dies with the following messages if it is started for the very first time, i.e., with an empty user profile directory $HOME/.jameica:

[Mon Feb 27 18:48:06 CET 
2023][INFO][main][de.willuhn.jameica.gui.SplashScreen$3.run]  generating new 
keys and certificates ...
[Mon Feb 27 18:48:06 CET 
2023][INFO][main][de.willuhn.jameica.security.SSLFactory.init]   generating rsa 
keypair
[Mon Feb 27 18:48:09 CET 
2023][INFO][main][de.willuhn.jameica.security.SSLFactory.init]   generating 
selfsigned x.509 certificate
[Mon Feb 27 18:48:09 CET 
2023][INFO][main][de.willuhn.jameica.security.SSLFactory.init]   using 
hostname: localhost
Exception in thread "main" java.lang.NoClassDefFoundError: 
org/bouncycastle/asn1/cms/CMSObjectIdentifiers
        at 
org.bouncycastle.operator.DefaultSignatureNameFinder.<clinit>(Unknown Source)
        at org.bouncycastle.operator.jcajce.OperatorHelper.<clinit>(Unknown 
Source)
        at 
org.bouncycastle.operator.jcajce.JcaContentSignerBuilder.<init>(Unknown Source)
        at de.willuhn.jameica.security.SSLFactory.init(SSLFactory.java:291)
        at de.willuhn.jameica.services.SSLService.init(SSLService.java:45)
        at de.willuhn.boot.BootLoader.resolve(BootLoader.java:139)
        at de.willuhn.boot.BootLoader.resolve(BootLoader.java:119)
        at de.willuhn.boot.BootLoader.resolve(BootLoader.java:119)
        at de.willuhn.boot.BootLoader.getBootable(BootLoader.java:72)
        at de.willuhn.jameica.system.Application.init(Application.java:103)
        at 
de.willuhn.jameica.system.Application.newInstance(Application.java:87)
        at de.willuhn.jameica.Main.main(Main.java:78)
Caused by: java.lang.ClassNotFoundException: 
org.bouncycastle.asn1.cms.CMSObjectIdentifiers
        at 
java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:641)
        at 
java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:188)
        at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:520)
        ... 12 more

$ sudo apt install debvm
# create a Debian unstable VM
$ debvm-create --size=10G -- --include=task-gnome-desktop 
--aptopt='Apt::Install-Recommends "true"' --include=linux-image-amd64 
--hook-dir=/usr/share/mmdebstrap/hooks/useradd
# run it with qemu
$ debvm-run -g -- -m 4G
# inside the VM install hibiscus
$ sudo apt install --no-install-recommends hibiscus
# run it
$ jameica

Can you try this and maybe check the difference to your system?

I was not able to reproduce this. On an up to date Debian unstable I tried:

The reason is that in BouncyCastle version 1.69 some code was moved from bcprov.jar into the new bcutil.jar, and the class path of jameica.jar still references only bcprov.jar and bcpkix.jar but not bcutil.jar (please cf. https://github.com/willuhn/jameica/issues/42#issuecomment-1418240499). This is easily fixed by adding /usr/share/java/bcutil.jar to debian/patches/0001-Update-locations-of-Java-libraries.patch. Maybe it makes sense to also add libbcutil-java to Jameica's package dependencies in debian/control because of its jar file being explicitly on the class path.

I've added this to follow upstream but even when I remove the bcutil-1.72.jar it works fine, so not sure what is going on.

Another issue comes from switching default-jre to openjdk-17-jre which has been openjdk-11-jre before. The bundled JavaScript engine has been removed in OpenJDK 15 which causes the following warning at the start:

[Mon Feb 27 19:05:01 CET 
2023][WARN][main][de.willuhn.jameica.services.ScriptingService.init] java does 
not support scripting (RhinoScript)

So Jameica's scripting service is no longer usable unless rhino.jar and rhino-engine.jar is added to the class path of jameica.jar (please cf. https://github.com/willuhn/jameica/issues/43). Similar to the previous fix, you can simply add /usr/share/java/rhino.jar to debian/patches/0001-Update-locations-of-Java-libraries.patch and add librhino-java to Jameica's package dependencies in debian/control. It might make sense to already add /usr/share/java/rhino-engine.jar to the class path as well although Debian's current version of librhino-java contains all the code in one single file js-1.7.7.2.jar that rhino.jar is linking to.

This one I can reproduce, thanks!

Anyway, I've added both jars and uploaded a new version.

Cheers Jochen

signature.asc
Description: PGP signature