Bug#1030129: ca-certificates-java - Fails to install: Error loading java.security file

[Sijmen Mulder]

Hi,

On Wed, 12 Jul 2023 12:00:50 +0200 Matthias Klose <doko at debian.org> wrote:
> Version: 20230710
>
> should be fixed now.

Should this ben in stable yet? Running

  apt-get update &&
  apt-get upgrade -y &&
  apt-get install -y openjdk-17-jre-headless git

on a fresh debian:12 container yields

...
Setting up git (1:2.39.2-1.1) ...
Setting up ca-certificates-java (20230103) ...
Exception in thread "main" java.lang.InternalError: Error loading 
java.security file
        at java.base/java.security.Security.initialize(Security.java:106)
        at java.base/java.security.Security$1.run(Security.java:84)
        at java.base/java.security.Security$1.run(Security.java:82)
        at 
java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
        at java.base/java.security.Security.<clinit>(Security.java:82)
        at 
java.base/sun.security.jca.ProviderList.<init>(ProviderList.java:178)
        at java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:96)
        at java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:94)
        at 
java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
        at 
java.base/sun.security.jca.ProviderList.fromSecurityProperties(ProviderList.java:93)
        at java.base/sun.security.jca.Providers.<clinit>(Providers.java:55)
        at 
java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:156)
        at 
java.base/java.security.cert.CertificateFactory.getInstance(CertificateFactory.java:193)
        at org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:50)
        at 
org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
        at 
org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
dpkg: error processing package ca-certificates-java (--configure):
 installed ca-certificates-java package post-installation script subprocess 
returned error exit status 1

This is my minimal repro, these two packages together. Installing just
ca-certificates-java by itself doesn't yield the issue.

Sijmen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7128 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20230712/3e8f62b8/attachment.bin>