Hi,

Thank you for the report.

ca-certificates-java use a hardcoded password 'changeit' to access the
certificate store.

The upgrade error is:
----
org.debian.security.InvalidKeystorePasswordException: Cannot open Java 
keystore. Is the password correct?
        at org.debian.security.KeyStoreHandler.load(KeyStoreHandler.java:68)
        at org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:52)
        at 
org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
        at 
org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
Caused by: java.io.IOException: Keystore was tampered with, or password was 
incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:792)
        at 
sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:57)
        at 
sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at 
sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:71)
        at java.security.KeyStore.load(KeyStore.java:1445)
        at org.debian.security.KeyStoreHandler.load(KeyStoreHandler.java:66)
        ... 3 more
Caused by: java.security.UnrecoverableKeyException: Password verification failed
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:790)
        ... 8 more
----

It looks like the certificate keystore password was changed.

probably the easiest workaround would be delete an existing keystore (if
it does not have custom certificates) and recreate it

$ sudo rm /etc/ssl/certs/java/cacerts
$ sudo update-ca-certificates

Best Regards, 
 Vladimir.

** Changed in: ca-certificates-java (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138388

Title:
  pacakage ca-certificates-java 20240118 failed to install/upgrade:
  installed ca-certificates-java package post-installation script
  subprocess returned error exit status 1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2138388/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to