Subject: ca-certificates-java and so openjdk-11-jre-headless installation fails (java err in sun.security.provider.X509Factory.readOneBlock)

From: Marko von Oppen <[email-masked]>
Date: Sat, 06 Mar 2021 15:29:23 +0100

Package: ca-certificates-java
Version: 20190405rcnee1~buster+20201118
Severity: grave
Justification: renders package unusable

Dear Maintainers,

the installation of openjdk-11-jre-headless package fails on my system.
Problem looks similiar to Debian Error #954822, but it is not the same
one.

BR
Marko

Console Output
...
Adding debian:Go_Daddy_Class_2_CA.pem
Adding debian:Buypass_Class_3_Root_CA.pem
Adding debian:GlobalSign_Root_CA_-_R3.pem
Adding debian:GTS_Root_R1.pem
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0xb40a8060, pid=23488, tid=23497
#
# JRE version: OpenJDK Runtime Environment (11.0.9.1+1) (build 11.0.9.1+1-post-Debian-1deb10u2)
# Java VM: OpenJDK Server VM (11.0.9.1+1-post-Debian-1deb10u2, mixed mode, serial gc, linux-)
# Problematic frame:
# J 46 c2 sun.security.provider.X509Factory.readOneBlock(Ljava/io/InputStream;)[B [email-masked] (447 bytes) @ 0xb40a8060 [0xb40a7fe0+0x00000080]
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# //hs_err_pid23488.log
Could not load hsdis-arm.so; library not loadable; PrintAssembly is disabled
#
# If you would like to submit a bug report, please visit:
#   https://bugs.debian.org/openjdk-11
#
/var/lib/dpkg/info/ca-certificates-java.postinst: Zeile 88: 23486 Fertig                  find /etc/ssl/certs -name \*.pem
     23487                       | while read filename; do
    alias=$(basename $filename .pem | tr A-Z a-z | tr -cs a-z0-9 _); alias=${alias%*_}; if [ -n "$FIXOLD" ]; then
        echo "-${alias}"; echo "-${alias}_pem";
    fi; echo "+${filename}";
done
     23488 Abgebrochen             | java -Xmx64m -jar $JAR -storepass "$storepass"
dpkg: Fehler beim Bearbeiten des Paketes ca-certificates-java (--configure):
 »installiertes ca-certificates-java-Skript des Paketes post-installation«-Unterprozess gab den Fehlerwert 134 zurück

-- System Information:
Distributor ID:	Debian
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: armv7l

Kernel: Linux 4.14.30-bone14
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages ca-certificates-java depends on:
ii  ca-certificates                                   20200601~deb10u1
ii  libnss3                                           2:3.42.1-1+deb10u3
ii  openjdk-11-jre-headless [java8-runtime-headless]  11.0.9.1+1-1~deb10u2

ca-certificates-java recommends no packages.

ca-certificates-java suggests no packages.

-- Configuration Files:
/etc/default/cacerts [Errno 13] Keine Berechtigung: '/etc/default/cacerts'

-- no debconf information

---

From: Mark Hindley <[email-masked]>
Date: Sat, 6 Mar 2021 15:36:21 +0000

Control: tag -1 debian

Marko,

Thanks for this.

> the installation of openjdk-11-jre-headless package fails on my system.

However, ca-certificates-java and all the openjdk packages in Devuan are
Debian's packages used directly and without recompilation. This issue should be
reported to Debian's BTS.

Thanks.

Mark