On Tue, Apr 17, 2018 at 03:57:27PM -0700, Brian Murray wrote: > In Ubuntu I encounter this issue when upgrading ca-certificates from > 20170717~16.04.1 (Ubuntu 16.04) to 20180409 (Ubuntu 18.04) when the > package python-ubuntu-sso-client (only available in Ubuntu 16.04) is > also installed. The python-ubuntu-sso-client package put > "/etc/ssl/certs/UbuntuOne-Go_Daddy_Class_2_CA.pem" on disk. Here's the > error:
Yes, you can do a similar thing on sid: (ca-certificates 20170717 installed initially) root@set-opossum:~# cp /usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt /etc/ssl/certs/Go_Daddy_Class_2_CA_dup.pem root@set-opossum:~# apt install ca-certificates Reading package lists... Done Building dependency tree Reading state information... Done The following packages will be upgraded: ca-certificates 1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 161 kB of archives. After this operation, 35.8 kB disk space will be freed. Get:1 http://deb.debian.org/debian sid/main amd64 ca-certificates all 20180409 [161 kB] Fetched 161 kB in 0s (757 kB/s) debconf: delaying package configuration, since apt-utils is not installed (Reading database ... 8975 files and directories currently installed.) Preparing to unpack .../ca-certificates_20180409_all.deb ... Unpacking ca-certificates (20180409) over (20170717) ... Setting up ca-certificates (20180409) ... Updating certificates in /etc/ssl/certs... rehash: skipping duplicate certificate in Go_Daddy_Class_2_CA_dup.pem dpkg: error processing package ca-certificates (--configure): installed ca-certificates package post-installation script subprocess returned error exit status 1 Errors were encountered while processing: ca-certificates E: Sub-process /usr/bin/dpkg returned an error code (1) Adding set -x to the postinst and update-ca-certificates shows it's failing: + openssl rehash . rehash: skipping duplicate certificate in Go_Daddy_Class_2_CA.pem + cleanup + rm -f /tmp/ca-certificates.crt.tmp.vCjXJG + rm -f /tmp/ca-certificates.tmp.AsH4ms + rm -f /tmp/ca-certificates.tmp.e9IHEJ dpkg: error processing package ca-certificates (--install): installed ca-certificates package post-installation script subprocess returned error exit status 1 Errors were encountered while processing: ca-certificates It looks like `c_rehash' just warned in this case and it was non-fatal, but `openssl rehash' exits with a bad error code and we bomb the installation. Cheers, -- Iain Lane [ i...@orangesquash.org.uk ] Debian Developer [ la...@debian.org ] Ubuntu Developer [ la...@ubuntu.com ]
signature.asc
Description: PGP signature
