Bug#787277: running into the same with bullseye -> bookworm upgrade

[Yaroslav Halchenko]

Happened to me on a new server I received from a vendor with bullseye
preinstalled so I don't know exactly if they didn't mess with password
there but very unlikely they did. Upon upgrade to bookworm got those
persisting errors

    root at typhon:~# apt-get -f install
    Reading package lists... Done
    Building dependency tree... Done
    Reading state information... Done
    0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
    5 not fully installed or removed.
    After this operation, 0 B of additional disk space will be used.
    Setting up ca-certificates-java (20230103) ...
    org.debian.security.InvalidKeystorePasswordException: Cannot open Java keystore. Is the password correct?
            at org.debian.security.KeyStoreHandler.load(KeyStoreHandler.java:68)
            at org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:52)
            at org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
            at org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
    Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect
            at java.base/sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:795)
            at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222)
            at java.base/java.security.KeyStore.load(KeyStore.java:1479)
            at org.debian.security.KeyStoreHandler.load(KeyStoreHandler.java:66)
            ... 3 more
    Caused by: java.security.UnrecoverableKeyException: Password verification failed
            at java.base/sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:793)
            ... 6 more
    dpkg: error processing package ca-certificates-java (--configure):
     installed ca-certificates-java package post-installation script subprocess returned error exit status 1
    dpkg: dependency problems prevent configuration of openjdk-17-jre-headless:amd64:
     openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>= 20190405~); however:
      Package ca-certificates-java is not configured yet.

    dpkg: error processing package openjdk-17-jre-headless:amd64 (--configure):
     dependency problems - leaving unconfigured
    dpkg: dependency problems prevent configuration of default-jre-headless:
     default-jre-headless depends on openjdk-17-jre-headless; however:
      Package openjdk-17-jre-headless:amd64 is not configured yet.

    dpkg: error processing package default-jre-headless (--configure):
     dependency problems - leaving unconfigured
    dpkg: dependency problems prevent configuration of openjdk-17-jre:amd64:
     openjdk-17-jre:amd64 depends on openjdk-17-jre-headless (= 17.0.6+10-1); however:
      Package openjdk-17-jre-headless:amd64 is not configured yet.

    dpkg: error processing package openjdk-17-jre:amd64 (--configure):
     dependency problems - leaving unconfigured
    dpkg: dependency problems prevent configuration of default-jre:
     default-jre depends on default-jre-headless (= 2:1.17-74); however:
      Package default-jre-headless is not configured yet.
     default-jre depends on openjdk-17-jre; however:
      Package openjdk-17-jre:amd64 is not configured yet.

    dpkg: error processing package default-jre (--configure):
     dependency problems - leaving unconfigured
    Errors were encountered while processing:
     ca-certificates-java
     openjdk-17-jre-headless:amd64
     default-jre-headless
     openjdk-17-jre:amd64
     default-jre
    E: Sub-process /usr/bin/dpkg returned an error code (1)
    root at typhon:~# cat /etc/default/cacerts
    # defaults for ca-certificates-java

    # The password which is used to protect the integrity of the keystore.
    # storepass must be at least 6 characters long. It must be provided to
    # all commands that access the keystore contents.
    # Only change this if adding private certificates.
    #storepass=''

    # enable/disable updates of the keystore /etc/ssl/certs/java/cacerts
    cacerts_updates=yes

The history of the package on the box:

root at typhon:~# zgrep ca-certifica /var/log/dpkg.log*
/var/log/dpkg.log:2023-02-18 19:57:08 upgrade ca-certificates:all 20210119 20211016
/var/log/dpkg.log:2023-02-18 19:57:08 status half-configured ca-certificates:all 20210119
/var/log/dpkg.log:2023-02-18 19:57:08 status unpacked ca-certificates:all 20210119
/var/log/dpkg.log:2023-02-18 19:57:08 status half-installed ca-certificates:all 20210119
/var/log/dpkg.log:2023-02-18 19:57:08 status unpacked ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 19:57:47 upgrade ca-certificates-java:all 20190909 20230103
/var/log/dpkg.log:2023-02-18 19:57:47 status half-configured ca-certificates-java:all 20190909
/var/log/dpkg.log:2023-02-18 19:57:47 status unpacked ca-certificates-java:all 20190909
/var/log/dpkg.log:2023-02-18 19:57:47 status half-installed ca-certificates-java:all 20190909
/var/log/dpkg.log:2023-02-18 19:57:47 status unpacked ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 20:00:22 configure ca-certificates:all 20211016 <none>
/var/log/dpkg.log:2023-02-18 20:00:22 status unpacked ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 20:00:22 status half-configured ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 20:00:23 status installed ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 20:00:23 status triggers-pending ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 20:00:34 configure ca-certificates-java:all 20230103 <none>
/var/log/dpkg.log:2023-02-18 20:00:34 status unpacked ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 20:00:34 status half-configured ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 20:04:35 trigproc ca-certificates:all 20211016 <none>
/var/log/dpkg.log:2023-02-18 20:04:35 status half-configured ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 20:04:36 status installed ca-certificates:all 20211016
/var/log/dpkg.log:2023-02-18 20:08:47 configure ca-certificates-java:all 20230103 <none>
/var/log/dpkg.log:2023-02-18 20:08:47 status half-configured ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 20:12:56 configure ca-certificates-java:all 20230103 <none>
/var/log/dpkg.log:2023-02-18 20:12:56 status half-configured ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 20:13:14 configure ca-certificates-java:all 20230103 <none>
/var/log/dpkg.log:2023-02-18 20:13:14 status half-configured ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 23:18:26 configure ca-certificates-java:all 20230103 <none>
/var/log/dpkg.log:2023-02-18 23:18:26 status half-configured ca-certificates-java:all 20230103
/var/log/dpkg.log:2023-02-18 23:18:33 configure ca-certificates-java:all 20230103 <none>
/var/log/dpkg.log:2023-02-18 23:18:33 status half-configured ca-certificates-java:all 20230103
/var/log/dpkg.log.4.gz:2022-10-27 16:05:17 install ca-certificates:all <none> 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:05:17 status half-installed ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:05:17 status unpacked ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:06:41 configure ca-certificates:all 20210119 <none>
/var/log/dpkg.log.4.gz:2022-10-27 16:06:41 status unpacked ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:06:41 status half-configured ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:06:42 status installed ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:06:42 status triggers-pending ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:07:42 trigproc ca-certificates:all 20210119 <none>
/var/log/dpkg.log.4.gz:2022-10-27 16:07:42 status half-configured ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-27 16:07:42 status installed ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-28 12:58:05 install ca-certificates-java:all <none> 20190909
/var/log/dpkg.log.4.gz:2022-10-28 12:58:05 status triggers-pending ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-28 12:58:05 status half-installed ca-certificates-java:all 20190909
/var/log/dpkg.log.4.gz:2022-10-28 12:58:05 status unpacked ca-certificates-java:all 20190909
/var/log/dpkg.log.4.gz:2022-10-28 13:00:19 configure ca-certificates-java:all 20190909 <none>
/var/log/dpkg.log.4.gz:2022-10-28 13:00:19 status unpacked ca-certificates-java:all 20190909
/var/log/dpkg.log.4.gz:2022-10-28 13:00:19 status half-configured ca-certificates-java:all 20190909
/var/log/dpkg.log.4.gz:2022-10-28 13:00:20 status triggers-awaited ca-certificates-java:all 20190909
/var/log/dpkg.log.4.gz:2022-10-28 13:00:37 trigproc ca-certificates:all 20210119 <none>
/var/log/dpkg.log.4.gz:2022-10-28 13:00:37 status half-configured ca-certificates:all 20210119
/var/log/dpkg.log.4.gz:2022-10-28 13:00:37 status installed ca-certificates-java:all 20190909
/var/log/dpkg.log.4.gz:2022-10-28 13:00:37 status installed ca-certificates:all 20210119


-- 
Yaroslav O. Halchenko
Center for Open Neuroscience     http://centerforopenneuroscience.org
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
WWW:   http://www.linkedin.com/in/yarik