Upgrade of package ca-certificates has many issues: install/upgrade: subprocess post-installation script returned error exit status 1 (while running final ldconfig)

Confirm on Ubuntu 8.10 i386.

Confirmed here as well..same as parent on AMD64

Same bug here but using intel (C2D) Architecture

On Fri, Dec 5, 2008 at 5:47 PM, wayne Stallwood <email address hidden>wrote:

> Confirmed here as well..same as parent on AMD64
>
> --
> package ca-certificates 20080514-0ubuntu1.1 failed to install/upgrade:
> subprocess post-installation script returned error exit status 1 (while
> running final ldconfig)
> https://bugs.launchpad.net/bugs/305062
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in "ca-certificates" source package in Ubuntu: Confirmed
>
> Bug description:
> Binary package hint: ca-certificates
>
> Package brought and installed by the daily update check
>
> ProblemType: Package
> Architecture: amd64
> DistroRelease: Ubuntu 8.10
> ErrorMessage: subprocess post-installation script returned error exit
> status 1
> NonfreeKernelModules: nvidia
> Package: ca-certificates 20080514-0ubuntu1.1
> PackageArchitecture: all
> SourcePackage: ca-certificates
> Title: package ca-certificates 20080514-0ubuntu1.1 failed to
> install/upgrade: subprocess post-installation script returned error exit
> status 1
> Uname: Linux 2.6.27-9-generic x86_64
>

So keytool is missing when the hook of ca-certificates-java is called.

E: ca-certificates: subprocess post-installation script returned error exit status 1

Error occurred when using synaptic to upgrade ca-certificates

So the problem is that ca-certificates calls a hook out of ca-certificates-java which accesses keytool in a strange way (due to it trying to detect if it needs to run one out of three possible binaries). The attached patch is a band-aid fix so that the hook bails out when there is currently no suitable keytool available. It's minimal.

I'll submit another one shortly which first tries to access the alternative, which might be more robust.

And the possible solution by trying to autodetect the keytool in alternatives first. Resort to JVM iteration when the keytool there is currently not executable.

this doesn't work. the alternative might point to something else than openjdk/sun-java (e.g. gcj), which cannot be used to regenerate the keystore.

ca-certificates probably should implement a trigger for this.

unsubscribing the sponsors since doko said the change would not work correctly

hello,

I don't know if this can help, but the problem appeared when I've upgrade
Ubuntu from the last version to 9.04.

the problem disappeared when I installed it and formatted the pc.

paola

On Tue, May 12, 2009 at 10:58 PM, Sebastien Bacher <email address hidden>wrote:

> unsubscribing the sponsors since doko said the change would not work
> correctly
>
> --
> package ca-certificates 20080514-0ubuntu1.1 failed to install/upgrade:
> subprocess post-installation script returned error exit status 1 (while
> running final ldconfig): "keytool: not found"
> https://bugs.launchpad.net/bugs/305062
> You received this bug notification because you are a direct subscriber
> of a duplicate bug.
>
> Status in “ca-certificates” source package in Ubuntu: Triaged
> Status in “ca-certificates-java” source package in Ubuntu: Triaged
> Status in ca-certificates in Ubuntu Intrepid: New
> Status in ca-certificates-java in Ubuntu Intrepid: New
> Status in ca-certificates in Ubuntu Jaunty: New
> Status in ca-certificates-java in Ubuntu Jaunty: New
> Status in ca-certificates in Ubuntu Karmic: Triaged
> Status in ca-certificates-java in Ubuntu Karmic: Triaged
> Status in “ca-certificates” source package in Debian: New
>
> Bug description:
> Binary package hint: ca-certificates
>
> Package brought and installed by the daily update check
>
>
> ERROR:
> Setting up ca-certificates (20080514-0ubuntu1.1) ...
> Updating certificates in /etc/ssl/certs....done.
> Running hooks in /etc/ca-certificates/update.d....
> updating keystore /etc/ssl/certs/java/cacerts...
> /etc/ca-certificates/update.d/jks-keystore: 80: keytool: not found
> error adding /etc/ssl/certs/cert_igca_dsa.pem
> /etc/ca-certificates/update.d/jks-keystore: 80: keytool: not found
> error adding /etc/ssl/certs/cert_igca_rsa.pem
> failed.
> dpkg: error processing ca-certificates (--configure):
> subprocess post-installation script returned error exit status 1
>
>
> ProblemType: Package
> Architecture: amd64
> DistroRelease: Ubuntu 8.10
> ErrorMessage: subprocess post-installation script returned error exit
> status 1
> NonfreeKernelModules: nvidia
> Package: ca-certificates 20080514-0ubuntu1.1
> PackageArchitecture: all
> SourcePackage: ca-certificates
> Title: package ca-certificates 20080514-0ubuntu1.1 failed to
> install/upgrade: subprocess post-installation script returned error exit
> status 1
> Uname: Linux 2.6.27-9-generic x86_64
>

Grazie Paola ,
lo farò !!!
Ciao
Danilo

Il giorno mer, 13/05/2009 alle 11.14 +0000, pepaola ha scritto:
> hello,
>
> I don't know if this can help, but the problem appeared when I've upgrade
> Ubuntu from the last version to 9.04.
>
> the problem disappeared when I installed it and formatted the pc.
>
> paola
>
> On Tue, May 12, 2009 at 10:58 PM, Sebastien Bacher
> <email address hidden>wrote:
>
> > unsubscribing the sponsors since doko said the change would not work
> > correctly
> >
> > --
> > package ca-certificates 20080514-0ubuntu1.1 failed to install/upgrade:
> > subprocess post-installation script returned error exit status 1 (while
> > running final ldconfig): "keytool: not found"
> > https://bugs.launchpad.net/bugs/305062
> > You received this bug notification because you are a direct subscriber
> > of a duplicate bug.
> >
> > Status in “ca-certificates” source package in Ubuntu: Triaged
> > Status in “ca-certificates-java” source package in Ubuntu: Triaged
> > Status in ca-certificates in Ubuntu Intrepid: New
> > Status in ca-certificates-java in Ubuntu Intrepid: New
> > Status in ca-certificates in Ubuntu Jaunty: New
> > Status in ca-certificates-java in Ubuntu Jaunty: New
> > Status in ca-certificates in Ubuntu Karmic: Triaged
> > Status in ca-certificates-java in Ubuntu Karmic: Triaged
> > Status in “ca-certificates” source package in Debian: New
> >
> > Bug description:
> > Binary package hint: ca-certificates
> >
> > Package brought and installed by the daily update check
> >
> >
> > ERROR:
> > Setting up ca-certificates (20080514-0ubuntu1.1) ...
> > Updating certificates in /etc/ssl/certs....done.
> > Running hooks in /etc/ca-certificates/update.d....
> > updating keystore /etc/ssl/certs/java/cacerts...
> > /etc/ca-certificates/update.d/jks-keystore: 80: keytool: not found
> > error adding /etc/ssl/certs/cert_igca_dsa.pem
> > /etc/ca-certificates/update.d/jks-keystore: 80: keytool: not found
> > error adding /etc/ssl/certs/cert_igca_rsa.pem
> > failed.
> > dpkg: error processing ca-certificates (--configure):
> > subprocess post-installation script returned error exit status 1
> >
> >
> > ProblemType: Package
> > Architecture: amd64
> > DistroRelease: Ubuntu 8.10
> > ErrorMessage: subprocess post-installation script returned error exit
> > status 1
> > NonfreeKernelModules: nvidia
> > Package: ca-certificates 20080514-0ubuntu1.1
> > PackageArchitecture: all
> > SourcePackage: ca-certificates
> > Title: package ca-certificates 20080514-0ubuntu1.1 failed to
> > install/upgrade: subprocess post-installation script returned error exit
> > status 1
> > Uname: Linux 2.6.27-9-generic x86_64
> >
>
> --
> package ca-certificates 20080514-0ubuntu1.1 failed to install/upgrade: subprocess post-installation script returned error exit status 1 (while running final ldconfig): "keytool: not found"
> https://bugs.launchpad.net/bugs/305062
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “ca-certificates” source package in Ubuntu: Triaged
> Status in “ca-certificates-java” source package in Ubuntu: Triaged
> Status in ca-certificates in Ubuntu Intrepid: New
> Status in ca-certificate...

Intrepid Ibex reached end-of-life on 30 April 2010 so I am closing the
report. The bug is still marked as confirmed in later versions of Ubuntu.

sudo apt-get build-dep ca-certificates-java

I'm closing the task for Jaunty which has reached EOL.

I merged all the upgrade issues into this one. It was the first one related to an upgrade issue...

Thank you for reporting this bug to Ubuntu. karmic has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against karmic is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.

/etc/ca-certificates/update.d/jks-keystore is actually from the ca-certificates-java package, but was fixed by adding triggers to ca-certificates and updating ca-certificates-java to activate the trigger.

Fixed in ca-certificates_20121114 and ca-certificates-java_20121112+nmu2

--
Kind regards,
Michael Shuler