[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
I'm reopening because it's reproducible and not fixed in a release upgrade scenario. TEST CASE: 1. Install Natty 2. Install openjdk-6-jre 3. Changes release to Oneiric in /etc/apt/sources.list 4. apt-get update && apt-get upgrade ** Changed in: openjdk-6 (Ubuntu) Status: Fix Released => Triaged ** Also affects: openjdk-6 (Ubuntu Oneiric) Importance: Critical Status: Triaged ** Summary changed: - package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch + package ca-certificates-java 20110426 failed to install/upgrade during upgrade to Oneiric: fix path to libnss3 for multiarch ** Changed in: openjdk-6 (Ubuntu Oneiric) Assignee: (unassigned) => Canonical Foundations Team (canonical-foundations) ** Changed in: openjdk-6 (Ubuntu Oneiric) Milestone: None => oneiric-alpha-1 ** Description changed: Binary package hint: ca-certificates-java + + TEST CASE: + 1. Install Natty + 2. Install openjdk-6-jre + 3. Changes release to Oneiric in /etc/apt/sources.list + 4. apt-get update && apt-get upgrade + + WORKAROUND: + Edit /etc/java-6-openjdk/security/nss.cfg and set + nssLibraryDirectory = /usr/lib/i386-linux-gnu + Package doesn't install, this is the error message: unseen@MrSlave:~$ sudo aptitude upgrade - Resolving dependencies... + Resolving dependencies... The following partially installed packages will be configured: - ca-certificates-java + ca-certificates-java No packages will be installed, upgraded, or removed. 0 packages upgraded, 0 newly installed, 0 to remove and 17 not upgraded. Need to get 0 B of archives. After unpacking 0 B will be used. Setting up ca-certificates-java (20110426) ... Exception in thread "main" java.security.ProviderException: Could not initialize NSS - at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:201) - at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:103) - at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) - at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) - at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) - at java.lang.reflect.Constructor.newInstance(Constructor.java:532) - at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262) - at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244) - at java.security.AccessController.doPrivileged(Native Method) - at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244) - at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224) - at sun.security.jca.ProviderList.getProvider(ProviderList.java:232) - at sun.security.jca.ProviderList.getService(ProviderList.java:330) - at sun.security.jca.GetInstance.getInstance(GetInstance.java:157) - at java.security.Security.getImpl(Security.java:696) - at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130) - at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121) - at sun.security.x509.AlgorithmId.(AlgorithmId.java:114) - at sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381) - at sun.security.x509.X509Key.parse(X509Key.java:168) - at sun.security.x509.CertificateX509Key.(CertificateX509Key.java:75) - at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:705) - at sun.security.x509.X509CertInfo.(X509CertInfo.java:169) - at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1747) - at sun.security.x509.X509CertImpl.(X509CertImpl.java:196) - at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:107) - at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322) - at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:763) - at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55) - at java.security.KeyStore.load(KeyStore.java:1201) - at UpdateCertificates.createKeyStore(UpdateCertificates.java:65) - at UpdateCertificates.main(UpdateCertificates.java:51) + at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:201) + at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:103) + at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) + at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) + at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) + at java.lang.reflect.Constructor.newInstance(Constructor.java:532) + at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262) + at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244) + at java.security.AccessController.doPrivileged(Native Method) + at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.jav
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
As Fabien said, today I was still having this problem, with all updates installed from doing dist-upgrade. Making a symlink fixed it, but I don't think this bug can be considered "fixed" if it's still breaking for people who have already upgraded to O. The dependencies as they are seem to ensure the fix won't ever actually make it into the system. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
*sigh* that was not the question. I sure know how to workaround it (*), but others may not. The fix is in openjdk-6-jre-headless but it is not applied because ca-certificates-java is a dependency and must be done first, it's a catch 22 situation. (*) "dpkg --configure -a --force-all" to let the "fix" in followed by a regular upgrade. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
Hi Fabien, After updating openjdk and some apt-get tomfoolery it worked for me. I think, it really needs reproducing upgrading from Natty to Oneiric to re-open IMO. $ dpkg -l | grep -E '(ca-certificates-java|openjdk-6|icedtea-6)' ii ca-certificates-java 20110426 Common CA certificates (JKS keystore) ii icedtea-6-jre-cacao 6b23~pre1-0ubuntu2 Alternative JVM for OpenJDK, using Cacao ii icedtea-6-jre-jamvm 6b23~pre1-0ubuntu2 Alternative JVM for OpenJDK, using JamVM ii openjdk-6-jdk 6b23~pre1-0ubuntu2 OpenJDK Development Kit (JDK) ii openjdk-6-jre 6b23~pre1-0ubuntu2 OpenJDK Java runtime, using Hotspot JIT ii openjdk-6-jre-headless6b23~pre1-0ubuntu2 OpenJDK Java runtime, using Hotspot JIT (headless) ii openjdk-6-jre-lib 6b23~pre1-0ubuntu2 OpenJDK Java runtime (architecture independent libraries) Thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
should I re-open? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
still broken for me. # dpkg -l | grep -E '(ca-certificates-java|openjdk-6|icedtea-6)' iF ca-certificates-java20110426Common CA certificates (JKS keystore) iU icedtea-6-jre-cacao 6b23~pre1-0ubuntu2 Alternative JVM for OpenJDK, using Cacao iU openjdk-6-jre-headless 6b23~pre1-0ubuntu2 OpenJDK Java runtime, using Hotspot JIT (headless) iU openjdk-6-jre-lib 6b23~pre1-0ubuntu2 OpenJDK Java runtime (architecture independent libraries) 4 not fully installed or removed. After this operation, 0 B of additional disk space will be used. Do you want to continue [Y/n]? Setting up ca-certificates-java (20110426) ... Exception in thread "main" java.security.ProviderException: Could not initialize NSS at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:201) at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:103) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.lang.reflect.Constructor.newInstance(Constructor.java:532) at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262) at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244) at java.security.AccessController.doPrivileged(Native Method) at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244) at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224) at sun.security.jca.ProviderList.getProvider(ProviderList.java:232) at sun.security.jca.ProviderList.getService(ProviderList.java:330) at sun.security.jca.GetInstance.getInstance(GetInstance.java:157) at java.security.Security.getImpl(Security.java:696) at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130) at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121) at sun.security.x509.AlgorithmId.(AlgorithmId.java:114) at sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381) at sun.security.x509.X509Key.parse(X509Key.java:168) at sun.security.x509.CertificateX509Key.(CertificateX509Key.java:75) at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:705) at sun.security.x509.X509CertInfo.(X509CertInfo.java:169) at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1747) at sun.security.x509.X509CertImpl.(X509CertImpl.java:196) at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:107) at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322) at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:763) at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55) at java.security.KeyStore.load(KeyStore.java:1201) at UpdateCertificates.createKeyStore(UpdateCertificates.java:65) at UpdateCertificates.main(UpdateCertificates.java:51) Caused by: java.io.FileNotFoundException: /usr/lib/libnss3.so at sun.security.pkcs11.Secmod.initialize(Secmod.java:186) at sun.security.pkcs11.SunPKCS11.(SunPKCS11.java:197) ... 31 more dpkg: error processing ca-certificates-java (--configure): subprocess installed post-installation script returned error exit status 1 dpkg: dependency problems prevent configuration of openjdk-6-jre-headless: openjdk-6-jre-headless depends on ca-certificates-java; however: Package ca-certificates-java is not configured yet. dpkg: error processing openjdk-6-jre-headless (--configure): dependency problems - leaving unconfigured dpkg: dependency problems prevent configuration of openjdk-6-jre-lib: openjdk-6-jre-lib depends on openjdk-6-jre-headless (>= 6b17); however: Package openjdk-6-jre-headless is not configured yet. dpkg: error processing openjdk-6-jre-lib (--configure): dependency problems - leaving unconfigured dpkg: dependency problems prevent configuration of icedtea-6-jre-cacao: icedtea-6-jre-cacao depends on openjdk-6-jre-headless (= 6b23~pre1-0ubuntu2); however: Package openjdk-6-jre-headless is not configured yet. dpkg: error processing icedtea-6-jre-cacao (--configure): dependency problems - leaving unconfigured -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
fixed in openjdk-6_6b23~pre1-0ubuntu2 ** Package changed: ca-certificates-java (Ubuntu) => openjdk-6 (Ubuntu) ** Changed in: openjdk-6 (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
This workaround could break other applications and is not advised to be left permanently on the system. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 779174] Re: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch
** Summary changed: - package ca-certificates-java 20110426 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 + package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/779174 Title: package ca-certificates-java 20110426 failed to install/upgrade: fix path to libnss3 for multiarch -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
