Bug#1030129: ca-certificates-java - Fails to install: Error loading java.security file

[Michael Ablassmeier]

hi,

On Wed, Jul 12, 2023 at 01:21:26PM +0000, Sijmen Mulder wrote:
> Should this ben in stable yet? Running
> 
>   apt-get update &&
>   apt-get upgrade -y &&
>   apt-get install -y openjdk-17-jre-headless git
> 
> on a fresh debian:12 container yields
> 
> ...
> Setting up git (1:2.39.2-1.1) ...
> Setting up ca-certificates-java (20230103) ...
> Exception in thread "main" java.lang.InternalError: Error loading 
> java.security file

same here, our internal CI tests fail due to a package pulling JRE
and failure during install:

> [2023-07-12 15:10:21]     default: Setting up ca-certificates-java (20230103) ...
> [2023-07-12 15:10:21]     default: Exception in thread "main" java.lang.InternalError: Error loading java.security file
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.Security.initialize(Security.java:106)
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.Security$1.run(Security.java:84)
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.Security$1.run(Security.java:82)
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.Security.<clinit>(Security.java:82)
> [2023-07-12 15:10:21]     default: 	at java.base/sun.security.jca.ProviderList.<init>(ProviderList.java:178)
> [2023-07-12 15:10:21]     default: 	at java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:96)
> [2023-07-12 15:10:21]     default: 	at java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:94)
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
> [2023-07-12 15:10:21]     default: 	at java.base/sun.security.jca.ProviderList.fromSecurityProperties(ProviderList.java:93)
> [2023-07-12 15:10:21]     default: 	at java.base/sun.security.jca.Providers.<clinit>(Providers.java:55)
> [2023-07-12 15:10:21]     default: 	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:156)
> [2023-07-12 15:10:21]     default: 	at java.base/java.security.cert.CertificateFactory.getInstance(CertificateFactory.java:193)
> [2023-07-12 15:10:21]     default: 	at org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:50)
> [2023-07-12 15:10:21]     default: 	at org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
> [2023-07-12 15:10:21]     default: 	at org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
> [2023-07-12 15:10:21]     default: dpkg: error processing package ca-certificates-java (--configure):
> [2023-07-12 15:10:21]     default:  installed ca-certificates-java package post-installation script subprocess returned error exit status 1
> [2023-07-12 15:10:21]     default: dpkg: dependency problems prevent configuration of openjdk-17-jre-headless:amd64:
> [2023-07-12 15:10:21]     default:  openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>= 20190405~); however:
> [2023-07-12 15:10:21]     default:   Package ca-certificates-java is not configured yet.

bye,
	- michael