[From nobody Mon Mar 30 15:53:07 2026
Received: (at submit) by bugs.debian.org; 17 Mar 2026 01:10:56 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-15.4 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,FOURLA,HAS_PACKAGE,HEXHASH_WORD,MD5_SHA1_SUM,
 MONEY,NO_RELAYS,STOCKLIKE,XMAILER_REPORTBUG autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 71; hammy, 150; neutral, 82; spammy,
 0. spammytokens: hammytokens:0.000-+--forky, 0.000-+--HTo:N*Debian,
 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*System
Return-path: <jay@jp-hosting.net>
Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96)
 (envelope-from <jay@jp-hosting.net>) id 1w2IxR-00CGTR-1h
 for submit@bugs.debian.org; Tue, 17 Mar 2026 01:10:56 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: James Addison <jay@jp-hosting.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: josm: init: error adding Harica TLS root CA certificate
Message-ID: <177370984447.69760.13418297603035360999.reportbug@localhost>
X-Mailer: reportbug 13.2.0
Date: Tue, 17 Mar 2026 01:10:44 +0000
Delivered-To: submit@bugs.debian.org

Package: josm
Version: 0.0.svn19481+dfsg-1
Severity: minor

Dear Maintainer,

During initialisation, JOSM reports a SEVERE-level log message complaining
about a certificate fingerprint mismatch for a Harica TLS root CA certificate:

  ...
  2026-03-17 01:03:01.403 SEVERE: java.lang.IllegalStateException: Error adding certificate HARICA TLS RSA Root CA 2021 - certificate fingerprint mismatch. Expected 8dd4b5373cb0de36769c12339280d82746b3aa6cd426e797a31babe4279cf00b, was d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d
  java.lang.IllegalStateException: Error adding certificate HARICA TLS RSA Root CA 2021 - certificate fingerprint mismatch. Expected 8dd4b5373cb0de36769c12339280d82746b3aa6cd426e797a31babe4279cf00b, was d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d
	  at org.openstreetmap.josm.io.CertificateAmendment.checkAndAddCertificate(CertificateAmendment.java:249)
	  at org.openstreetmap.josm.io.CertificateAmendment.addMissingCertificates(CertificateAmendment.java:226)
	  at org.openstreetmap.josm.gui.MainApplication.mainJOSM(MainApplication.java:927)
	  at org.openstreetmap.josm.gui.MainApplication$3.processArguments(MainApplication.java:280)
	  at org.openstreetmap.josm.gui.MainApplication.main(MainApplication.java:766)

  2026-03-17 01:03:04.951 INFO: GET https://josm.openstreetmap.de/wiki/StartupPage -> HTTP/1.1 200 (787 ms)
  ...


The editor does continue to load, and after a few more moments, the graphical
user interface to the JOSM Editor appears as expected.

Regards,
James

-- System Information:
Debian Release: forky/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.19.6+deb14-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages josm depends on:
ii  default-jre [java11-runtime]     2:1.21-76
ii  fonts-noto                       20201225-2
ii  jmapviewer                       2.25+dfsg-1
ii  libgettext-commons-java          0.9.8-1
ii  openjdk-21-jre [java11-runtime]  21.0.10+7-1
ii  proj-data                        9.8.0-1

Versions of packages josm recommends:
pn  josm-l10n  <none>
pn  openjfx    <none>

josm suggests no packages.

-- no debconf information
]