Bug#1030129: ca-certificates-java - Fails to install with OpenJDK 21: Error loading java.security file

[Sebastiaan Couwenberg]

On Tue, 31 Jan 2023 13:56:42 +0100 Bastian Blank <waldi at debian.org> wrote:
> | dpkg: error processing package openjdk-21-jdk:arm64 (--configure):
> |  dependency problems - leaving unconfigured

It also fails to install with openjdk-17:

Setting up ca-certificates-java (20230103) ...
Exception in thread "main" java.lang.InternalError: Error loading 
java.security file
         at java.base/java.security.Security.initialize(Security.java:106)
         at java.base/java.security.Security$1.run(Security.java:84)
         at java.base/java.security.Security$1.run(Security.java:82)
         at 
java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
         at java.base/java.security.Security.<clinit>(Security.java:82)
         at 
java.base/sun.security.jca.ProviderList.<init>(ProviderList.java:178)
         at 
java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:96)
         at 
java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:94)
         at 
java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
         at 
java.base/sun.security.jca.ProviderList.fromSecurityProperties(ProviderList.java:93)
         at java.base/sun.security.jca.Providers.<clinit>(Providers.java:55)
         at 
java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:156)
         at 
java.base/java.security.cert.CertificateFactory.getInstance(CertificateFactory.java:193)
         at 
org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:50)
         at 
org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
         at 
org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
dpkg: error processing package ca-certificates-java (--configure):
  installed ca-certificates-java package post-installation script 
subprocess returned error exit status 1
Setting up liblwp-protocol-https-perl (6.10-1) ...
Setting up default-jre-headless (2:1.17-74) ...
Setting up libwww-perl (6.70-1) ...
Setting up ant (1.10.13-1) ...
dpkg: dependency problems prevent configuration of 
openjdk-17-jre-headless:amd64:
  openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>= 
20190405~); however:
   Package ca-certificates-java is not configured yet.

dpkg: error processing package openjdk-17-jre-headless:amd64 (--configure):
  dependency problems - leaving unconfigured
Setting up libxml-parser-perl (2.46-4) ...
dpkg: dependency problems prevent configuration of openjdk-17-jre:amd64:
  openjdk-17-jre:amd64 depends on openjdk-17-jre-headless (= 
17.0.7+7-1); however:
   Package openjdk-17-jre-headless:amd64 is not configured yet.

dpkg: error processing package openjdk-17-jre:amd64 (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of default-jre:
  default-jre depends on openjdk-17-jre; however:
   Package openjdk-17-jre:amd64 is not configured yet.

dpkg: error processing package default-jre (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of openjdk-17-jdk:amd64:
  openjdk-17-jdk:amd64 depends on openjdk-17-jre (= 17.0.7+7-1); however:
   Package openjdk-17-jre:amd64 is not configured yet.

dpkg: error processing package openjdk-17-jdk:amd64 (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of 
openjdk-17-jdk-headless:amd64:
  openjdk-17-jdk-headless:amd64 depends on openjdk-17-jre-headless (= 
17.0.7+7-1); however:
   Package openjdk-17-jre-headless:amd64 is not configured yet.

dpkg: error processing package openjdk-17-jdk-headless:amd64 (--configure):
  dependency problems - leaving unconfigured
Setting up libxml-sax-expat-perl (0.51-2) ...
update-perl-sax-parsers: Registering Perl SAX parser XML::SAX::Expat 
with priority 50...
update-perl-sax-parsers: Updating overall Perl SAX parser modules info 
file...
Replacing config file /etc/perl/XML/SAX/ParserDetails.ini with new version
dpkg: dependency problems prevent configuration of default-jdk:
  default-jdk depends on default-jre (= 2:1.17-74); however:
   Package default-jre is not configured yet.
  default-jdk depends on openjdk-17-jdk; however:
   Package openjdk-17-jdk:amd64 is not configured yet.

dpkg: error processing package default-jdk (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of default-jdk-headless:
  default-jdk-headless depends on openjdk-17-jdk-headless; however:
   Package openjdk-17-jdk-headless:amd64 is not configured yet.

dpkg: error processing package default-jdk-headless (--configure):
  dependency problems - leaving unconfigured
Processing triggers for libc-bin (2.36-9) ...
Processing triggers for sgml-base (1.31) ...
Setting up docbook-xsl (1.79.2+dfsg-2) ...
Setting up sgml-data (2.0.11+nmu1) ...
Setting up docbook2x (0.8.8-17+b1) ...
Processing triggers for sgml-base (1.31) ...
Setting up docbook-xml (4.5-12) ...
Processing triggers for ca-certificates (20230311) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Processing triggers for php8.2-cli (8.2.7-1) ...
Processing triggers for libgdk-pixbuf-2.0-0:amd64 (2.42.10+dfsg-1+b1) ...
Processing triggers for sgml-base (1.31) ...
Errors were encountered while processing:
  ca-certificates-java
  openjdk-17-jre-headless:amd64
  openjdk-17-jre:amd64
  default-jre
  openjdk-17-jdk:amd64
  openjdk-17-jdk-headless:amd64
  default-jdk
  default-jdk-headless
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up ca-certificates-java (20230103) ...
Exception in thread "main" java.lang.InternalError: Error loading 
java.security file
         at java.base/java.security.Security.initialize(Security.java:106)
         at java.base/java.security.Security$1.run(Security.java:84)
         at java.base/java.security.Security$1.run(Security.java:82)
         at 
java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
         at java.base/java.security.Security.<clinit>(Security.java:82)
         at 
java.base/sun.security.jca.ProviderList.<init>(ProviderList.java:178)
         at 
java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:96)
         at 
java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:94)
         at 
java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
         at 
java.base/sun.security.jca.ProviderList.fromSecurityProperties(ProviderList.java:93)
         at java.base/sun.security.jca.Providers.<clinit>(Providers.java:55)
         at 
java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:156)
         at 
java.base/java.security.cert.CertificateFactory.getInstance(CertificateFactory.java:193)
         at 
org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:50)
         at 
org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
         at 
org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
dpkg: error processing package ca-certificates-java (--configure):
  installed ca-certificates-java package post-installation script 
subprocess returned error exit status 1
dpkg: dependency problems prevent configuration of 
openjdk-17-jre-headless:amd64:
  openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>= 
20190405~); however:
   Package ca-certificates-java is not configured yet.

dpkg: error processing package openjdk-17-jre-headless:amd64 (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of openjdk-17-jre:amd64:
  openjdk-17-jre:amd64 depends on openjdk-17-jre-headless (= 
17.0.7+7-1); however:
   Package openjdk-17-jre-headless:amd64 is not configured yet.

dpkg: error processing package openjdk-17-jre:amd64 (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of default-jre:
  default-jre depends on openjdk-17-jre; however:
   Package openjdk-17-jre:amd64 is not configured yet.

dpkg: error processing package default-jre (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of openjdk-17-jdk:amd64:
  openjdk-17-jdk:amd64 depends on openjdk-17-jre (= 17.0.7+7-1); however:
   Package openjdk-17-jre:amd64 is not configured yet.

dpkg: error processing package openjdk-17-jdk:amd64 (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of 
openjdk-17-jdk-headless:amd64:
  openjdk-17-jdk-headless:amd64 depends on openjdk-17-jre-headless (= 
17.0.7+7-1); however:
   Package openjdk-17-jre-headless:amd64 is not configured yet.

dpkg: error processing package openjdk-17-jdk-headless:amd64 (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of default-jdk:
  default-jdk depends on default-jre (= 2:1.17-74); however:
   Package default-jre is not configured yet.
  default-jdk depends on openjdk-17-jdk; however:
   Package openjdk-17-jdk:amd64 is not configured yet.

dpkg: error processing package default-jdk (--configure):
  dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of default-jdk-headless:
  default-jdk-headless depends on openjdk-17-jdk-headless; however:
   Package openjdk-17-jdk-headless:amd64 is not configured yet.

dpkg: error processing package default-jdk-headless (--configure):
  dependency problems - leaving unconfigured
Errors were encountered while processing:
  ca-certificates-java
  openjdk-17-jre-headless:amd64
  openjdk-17-jre:amd64
  default-jre
  openjdk-17-jdk:amd64
  openjdk-17-jdk-headless:amd64
  default-jdk
  default-jdk-headless

The above is from the mapserver build dependencies when openjdk-21-jre 
is added to Build-Conflicts.

Kind Regards,

Bas

-- 
  GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1