<div dir="ltr"><div>Dear Maintainer, </div><div><br></div>This bug is also present in Ubuntu: <a href="https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1998697" target="_blank">https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1998697</a> <div><br></div><p style="margin:0px 0px 0.8em;padding:0px;width:auto;max-width:45em;color:rgb(51,51,51);font-family:monospace;font-size:12px">This particular issue is caused by <a rel="nofollow" href="https://github.com/openjdk/jdk/commit/1f9ff413126fb68e07b8fc1f36dd3cb17093a484" style="color:rgb(0,51,170);text-decoration-line:none">https://github.com/openjdk/jdk/commit/1f9ff413126fb68e07b8fc1f36dd3cb17093a484</a></p><p style="margin:0px 0px 0.8em;padding:0px;width:auto;max-width:45em;color:rgb(51,51,51);font-family:monospace;font-size:12px">There is a change in behaviour: previously accessing java.security.Security did not require the java.security properties file to be present, now JDK 20 requires it.</p><div><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">See</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> </span><a rel="nofollow" href="https://bugs.openjdk.org/browse/JDK-8292297" style="font-family:monospace;font-size:12px;color:rgb(0,51,170);text-decoration-line:none">https://bugs.openjdk.org/browse/JDK-8292297</a></div><div><br></div><div>Same behaviour applies to keytool - see exception  below:<br></div><div><br></div><div><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Exception in thread "main" java.lang.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">ExceptionInInit</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">ializerError</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">javax.crypto.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Cipher.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">getInstance(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Cipher.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:548)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">pkcs12.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">PKCS12KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">lambda$</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">engineLoad$</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">1(PKCS</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">12KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:2136)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">pkcs12.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">PKCS12KeyStore$</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">RetryWithZero.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">run(PKCS12</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStore.java:257)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">pkcs12.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">PKCS12KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">engineLoad(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">PKCS12KeyStor</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">e.java:2134)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">util.KeyStoreDe</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">legator.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">engineLoad(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStoreDele</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">gator.java:226)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">load(KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:1502)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">getInstance(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:1828)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">getInstance(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">KeyStore.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:1710)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">tools.keytool.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Main.doCommands</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">(Main.java:</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">944)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">tools.keytool.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Main.run(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Main.java:</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">420)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sun.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">tools.keytool.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Main.main(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Main.java:</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">413)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Caused by: java.lang.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">SecurityExcepti</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">on: Can not initialize cryptographic mechani</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">sm</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">javax.crypto.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">JceSecurity.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><clinit></span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">(JceSecurity.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:119)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> ... 11 more</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Caused by: java.lang.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">SecurityExcepti</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">on: Couldn't parse jurisdiction policy files</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> in: unlimited</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">javax.crypto.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">JceSecurity.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">setupJurisdicti</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">onPolicies(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">JceSecur</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">ity.java:364)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">javax.crypto.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">JceSecurity$</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">1.run(JceSecuri</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">ty.java:</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">110)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">javax.crypto.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">JceSecurity$</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">1.run(JceSecuri</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">ty.java:</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">107)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java.security.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">AccessControlle</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">r.doPrivileged(</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">AccessControlle</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">r.java:569)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> at java.base/</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">javax.crypto.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">JceSecurity.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><clinit></span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">(JceSecurity.</span><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">java:106)</span><br style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"> ... 11 more</span><br></div><div><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><br></span></div><div><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px">Both problems are caused by an attempt to run java before the package is configured. </span></div><div><span style="color:rgb(51,51,51);font-family:monospace;font-size:12px"><br></span></div><div><font color="#333333" face="monospace"><span style="font-size:12px">Would it be possible to discuss whether it is possible to break dependency of ca-certificates-java on java? For example, the java application in the package could be replaced by </span></font><span style="font-size:12px;color:rgb(51,51,51);font-family:monospace">C++ or Python utility capable of working with JKS. </span></div><div><br></div></div>