Your message dated Thu, 24 May 2012 22:10:08 +0200
with message-id <201205242210.12121.draz...@debian.org>
and subject line Re: Bug#655330: installation of ca-certificates-java silently
fails
has caused the Debian Bug report #655330,
regarding installation of ca-certificates-java silently fails
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
655330: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655330
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ca-certificates-java
Version: 20111223
Severity: grave
Happens when updating from squeeze. During installation, the following
is printed:
Setting up ca-certificates-java (20111223) ...Installing new version of
config file /etc/ca-certificates/update.d/jks-keystore ...Exception in
thread "main" java.security.ProviderException: Could not initialize NSS
at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:201) at
sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103) at
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:532)
at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262)
at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244)
at java.security.AccessController.doPrivileged(Native Method) at
sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244)
at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224)
at sun.security.jca.ProviderList.getProvider(ProviderList.java:232)
at sun.security.jca.ProviderList.getService(ProviderList.java:330)
at sun.security.jca.GetInstance.getInstance(GetInstance.java:157)
at java.security.Security.getImpl(Security.java:696) at
java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130)
at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121)
at sun.security.x509.AlgorithmId.<init>(AlgorithmId.java:114) at
sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381) at
sun.security.x509.X509Key.parse(X509Key.java:168) at
sun.security.x509.CertificateX509Key.<init>(CertificateX509Key.java:75)
at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:705) at
sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:169) at
sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1747) at
sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:196) at
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:107)
at
java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322)
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:763)
at
sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55)
at java.security.KeyStore.load(KeyStore.java:1201) at
UpdateCertificates.createKeyStore(UpdateCertificates.java:65) at
UpdateCertificates.main(UpdateCertificates.java:51)Caused by:
java.io.FileNotFoundException: /usr/lib/libnss3.so at
sun.security.pkcs11.Secmod.initialize(Secmod.java:186) at
sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:197) ... 31
moredone.
--- End Message ---
--- Begin Message ---
Hi Cyril,
Le samedi 18 février 2012 17:27:00, Cyril Brulebois a écrit :
> Cyril Brulebois <k...@debian.org> (18/02/2012):
> > I'll try and debug it further soon.
>
> That wasn't too hard: switching from stable's to testing's libnss3-1d,
> its .so switches from /usr/lib to /usr/lib/<triplet>; given
> nssLibraryDirectory is written to /etc/java-6-openjdk/security/nss.cfg
> only when first_install is run, you don't get to notice the location
> change. I'm not sure how to best fix that though.
Since some uploades, java-[67]-openjdk doesn't set nssLibraryDirectory anymore
(it then default to search path of dllopen - like any other program).
I've done some more tests of squeeze -> wheezy/sid upgrade and can't reproduce
this issue with current ca-certificate-java and openjdk-6. So I'm now closing
this issue, feel free to reopen if you can reproduce it with other mean.
Cheers,
--
Damien - Debian Developper
http://wiki.debian.org/DamienRaudeMorvan
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
