https://bugzilla.novell.com/show_bug.cgi?id=634793 https://bugzilla.novell.com/show_bug.cgi?id=634793#c0 Summary: Spurious warning in ca-certificates RPM and missing Java dependency on mozilla-nss Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: 32bit OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: archie@dellroad.org QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 Fresh 11.3 system: $ sudo zypper install java-1_6_0-openjdk-devel Loading repository data... Reading installed packages... Resolving package dependencies... The following NEW packages are going to be installed: bea-stax-api fontconfig giflib java-1_6_0-openjdk java-1_6_0-openjdk-devel java-ca-certificates jline jpackage-utils libFLAC8 libXi6 libasound2 libfreetype6 libjpeg6 libjpeg8 libogg0 libpng14-14 libpulse0 libsndfile libvorbis rhino timezone-java xmlbeans xorg-x11-libICE xorg-x11-libSM xorg-x11-libX11 xorg-x11-libXau xorg-x11-libXext xorg-x11-libXfixes xorg-x11-libXmu xorg-x11-libXp xorg-x11-libXpm xorg-x11-libXprintUtil xorg-x11-libXrender xorg-x11-libXt xorg-x11-libfontenc xorg-x11-libs xorg-x11-libxcb xorg-x11-libxkbfile The following recommended package was automatically selected: libjpeg6 38 new packages to install. Overall download size: 40.3 MiB. After the operation, additional 148.5 MiB will be used. Continue? [y/n/?] (y): Retrieving package timezone-java-2010h-1.3.noarch (1/38), 107.0 KiB (274.0 KiB unpacked) Retrieving: timezone-java-2010h-1.3.noarch.rpm [done (0 B/s)] Installing: timezone-java-2010h-1.3 [done] Retrieving package java-ca-certificates-1-5.3.noarch (2/38), 9.0 KiB (5.0 KiB unpacked) Retrieving: java-ca-certificates-1-5.3.noarch.rpm [done] Installing: java-ca-certificates-1-5.3 [done] Additional rpm output: which: no java in (/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin) Problem #1: note the spurious "which" error. This comes from the /usr/lib/ca-certificates/update.d/java.run script supplied by the ca-certificates RPM. This is fixed by changing line 38 from java=`which java` to: java=`which java 2>/dev/null` After the install succeeded, I tried this command: $ sudo /usr/sbin/update-ca-certificates creating /var/lib/ca-certificates/java-cacerts ... Exception in thread "main" java.security.ProviderException: Could not initialize NSS at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:201) at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.lang.reflect.Constructor.newInstance(Constructor.java:532) at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:262) at sun.security.jca.ProviderConfig$3.run(ProviderConfig.java:244) at java.security.AccessController.doPrivileged(Native Method) at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:244) at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:224) at sun.security.jca.ProviderList.getProvider(ProviderList.java:232) at sun.security.jca.ProviderList.getService(ProviderList.java:330) at sun.security.jca.GetInstance.getInstance(GetInstance.java:157) at java.security.Security.getImpl(Security.java:696) at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:130) at sun.security.x509.AlgorithmId.decodeParams(AlgorithmId.java:121) at sun.security.x509.AlgorithmId.<init>(AlgorithmId.java:114) at sun.security.x509.AlgorithmId.parse(AlgorithmId.java:381) at sun.security.x509.X509Key.parse(X509Key.java:168) at sun.security.x509.CertificateX509Key.<init>(CertificateX509Key.java:75) at sun.security.x509.X509CertInfo.parse(X509CertInfo.java:705) at sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:169) at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1747) at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:196) at sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:118) at java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322) at keystore.main(keystore.java:177) Caused by: java.io.FileNotFoundException: /usr/lib/libnss3.so at sun.security.pkcs11.Secmod.initialize(Secmod.java:186) at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:197) ... 27 more There is a missing dependency on mozilla-nss somewhere (java-1_6_0-openjdk ?). It was fixed by this command: sudo zypper install mozilla-nss Reproducible: Always Steps to Reproduce: 1. Install fresh openSUSE-11.3 2. sudo zypper install java-1_6_0-openjdk 3. Notice spurious 'which' warning 4. sudo /usr/sbin/update-ca-certificates 5. Notice Java exception Actual Results: Waring in step #2 and exception in step #4. Expected Results: No warning or exception. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.