[Bug 783365] New: update-ca-certificates -f / ca-certificates %post exceptions
https://bugzilla.novell.com/show_bug.cgi?id=783365 https://bugzilla.novell.com/show_bug.cgi?id=783365#c0 Summary: update-ca-certificates -f / ca-certificates %post exceptions Classification: openSUSE Product: openSUSE Factory Version: 12.3 Milestone 0 Platform: Other OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: lnussel@suse.com ReportedBy: suse-beta@cboltz.de QAContact: qa-bugs@suse.de Found By: Beta-Customer Blocker: --- %post of ca-certificates (or a direct call of "update-ca-certificates -f") results in some exceptions. Installation von: ca-certificates-1-20.2 ...................[fertig] Zusätzliche rpm-Ausgabe: Updating certificates in /etc/ssl/certs... 0 added, 0 removed. creating /var/lib/ca-certificates/ca-bundle.pem ... creating /var/lib/ca-certificates/java-cacerts ... 136 added, 0 removed. creating /var/lib/ca-certificates/gcj-cacerts ... imporing thawte_Primary_Root_CA_G2.pem failed: java.security.spec.InvalidKeySpecException imporing GeoTrust_Primary_Certification_Authority_G2.pem failed: java.security.spec.InvalidKeySpecException imporing AffirmTrust_Premium_ECC.pem failed: java.security.spec.InvalidKeySpecException imporing VeriSign_Class_3_Public_Primary_Certification_Authority_G4.pem failed: java.security.spec.InvalidKeySpecException imporing COMODO_ECC_Certification_Authority.pem failed: java.security.spec.InvalidKeySpecException 131 added, 0 removed. Note: Those exceptions seem to exist since a long time - see bug 727223 (which focuses more on a symlink issue, therefore creating a new bugreport) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783365 https://bugzilla.novell.com/show_bug.cgi?id=783365#c1 Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |mvyskocil@suse.com InfoProvider| |lnussel@suse.com --- Comment #1 from Michal Vyskocil <mvyskocil@suse.com> 2012-10-10 10:22:23 UTC --- (In reply to comment #0)
%post of ca-certificates (or a direct call of "update-ca-certificates -f") results in some exceptions.
Installation von: ca-certificates-1-20.2 ...................[fertig] Zusätzliche rpm-Ausgabe: Updating certificates in /etc/ssl/certs... 0 added, 0 removed. creating /var/lib/ca-certificates/ca-bundle.pem ... creating /var/lib/ca-certificates/java-cacerts ... 136 added, 0 removed. creating /var/lib/ca-certificates/gcj-cacerts ... ^^^ gcj does not support the Elliptic Curve Cryptography support, so all ECC certificates cannot be used with gcc java.
@ludwig: it might makes a sense to either filter the java.security.spec.InvalidKeySpecException when making gcj-cacerts, or add a blacklist for ECC certificates ... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783365 https://bugzilla.novell.com/show_bug.cgi?id=783365#c2 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|lnussel@suse.com | --- Comment #2 from Ludwig Nussel <lnussel@suse.com> 2012-11-06 13:17:01 CET --- I wouldn't mind a patch :) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783365 https://bugzilla.novell.com/show_bug.cgi?id=783365#c3 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #3 from Ludwig Nussel <lnussel@suse.com> 2013-07-05 10:23:24 CEST --- That one is now fixed by switching to p11-kit. The java bundle is now generated directly by C code. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com