Bug#795244: marked as done (ca-certificates-java.jar - String index out of range: -1)

Tue, 19 Jul 2022 07:39:27 -0700 

Your message dated Tue, 19 Jul 2022 14:36:38 +0000
with message-id <[email protected]>
and subject line Bug#795244: fixed in ca-certificates-java 20220719
has caused the Debian Bug report #795244,
regarding ca-certificates-java.jar - String index out of range: -1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
795244: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795244
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message --- 
Package: ca-certificates
Version: 20141019
Severity: normal

One of my Java applications does not recognize a CA certificate from
/usr/local/share/ca-certificates/ as valid so I tried the following
program in the hope it would somehow update the Java Keystore.

It does not work though:

    # java -Xmx64m -jar 
/usr/share/ca-certificates-java/ca-certificates-java.jar -storepass changeit

    Exception in thread "main" java.lang.StringIndexOutOfBoundsException: 
String index out of range: -1
        at java.lang.String.substring(String.java:1875)
        at 
org.debian.security.UpdateCertificates.parseLine(UpdateCertificates.java:89)
        at 
org.debian.security.UpdateCertificates.processChanges(UpdateCertificates.java:76)
        at 
org.debian.security.UpdateCertificates.main(UpdateCertificates.java:53)

The command line options were taken from 
/etc/ca-certificates/update.d/jks-keystore.

Maybe this is caused by limited network connectivity as the server
is behind a firewall but even in this case, the error message is a
bit vague.

best regards

-christian-


-- System Information:
Debian Release: 8.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ca-certificates depends on:
ii  debconf [debconf-2.0]  1.5.56
ii  openssl                1.0.1k-3+deb8u1

ca-certificates recommends no packages.

ca-certificates suggests no packages.

-- debconf information:
* ca-certificates/enable_crts: mozilla/ACCVRAIZ1.crt, 
mozilla/ACEDICOM_Root.crt, mozilla/AC_Raíz_Certicámara_S.A..crt, 
mozilla/Actalis_Authentication_Root_CA.crt, mozilla/AddTrust_External_Root.crt, 
mozilla/AddTrust_Low-Value_Services_Root.crt, 
mozilla/AddTrust_Public_Services_Root.crt, 
mozilla/AddTrust_Qualified_Certificates_Root.crt, 
mozilla/AffirmTrust_Commercial.crt, mozilla/AffirmTrust_Networking.crt, 
mozilla/AffirmTrust_Premium.crt, mozilla/AffirmTrust_Premium_ECC.crt, 
mozilla/America_Online_Root_Certification_Authority_1.crt, 
mozilla/America_Online_Root_Certification_Authority_2.crt, 
mozilla/ApplicationCA_-_Japanese_Government.crt, 
mozilla/Atos_TrustedRoot_2011.crt, mozilla/A-Trust-nQual-03.crt, 
mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt, 
mozilla/Baltimore_CyberTrust_Root.crt, mozilla/Buypass_Class_2_CA_1.crt, 
mozilla/Buypass_Class_2_Root_CA.crt, mozilla/Buypass_Class_3_CA_1.crt, 
mozilla/Buypass_Class_3_Root_CA.crt, mozilla/CA_Disig.crt, mozilla/CA
 _Disig_Root_R1.crt, mozilla/CA_Disig_Root_R2.crt, 
mozilla/Camerfirma_Chambers_of_Commerce_Root.crt, 
mozilla/Camerfirma_Global_Chambersign_Root.crt, mozilla/Certigna.crt, 
mozilla/Certinomis_-_Autorité_Racine.crt, 
mozilla/Certplus_Class_2_Primary_CA.crt, mozilla/certSIGN_ROOT_CA.crt, 
mozilla/Certum_Root_CA.crt, mozilla/Certum_Trusted_Network_CA.crt, 
mozilla/Chambers_of_Commerce_Root_-_2008.crt, 
mozilla/China_Internet_Network_Information_Center_EV_Certificates_Root.crt, 
mozilla/CNNIC_ROOT.crt, mozilla/Comodo_AAA_Services_root.crt, 
mozilla/COMODO_Certification_Authority.crt, 
mozilla/COMODO_ECC_Certification_Authority.crt, 
mozilla/Comodo_Secure_Services_root.crt, 
mozilla/Comodo_Trusted_Services_root.crt, mozilla/ComSign_CA.crt, 
mozilla/ComSign_Secured_CA.crt, mozilla/Cybertrust_Global_Root.crt, 
mozilla/Deutsche_Telekom_Root_CA_2.crt, 
mozilla/DigiCert_Assured_ID_Root_CA.crt, 
mozilla/DigiCert_Assured_ID_Root_G2.crt, 
mozilla/DigiCert_Assured_ID_Root_G3.crt, mozilla/DigiCert_Global_Root_CA.
 crt, mozilla/DigiCert_Global_Root_G2.crt, mozilla/DigiCert_Global_Root_G3.crt, 
mozilla/DigiCert_High_Assurance_EV_Root_CA.crt, 
mozilla/DigiCert_Trusted_Root_G4.crt, 
mozilla/Digital_Signature_Trust_Co._Global_CA_1.crt, 
mozilla/Digital_Signature_Trust_Co._Global_CA_3.crt, 
mozilla/DST_ACES_CA_X6.crt, mozilla/DST_Root_CA_X3.crt, 
mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt, 
mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt, 
mozilla/EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.crt, mozilla/EC-ACC.crt, 
mozilla/EE_Certification_Centre_Root_CA.crt, 
mozilla/E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.crt, 
mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt, 
mozilla/Entrust_Root_Certification_Authority.crt, 
mozilla/ePKI_Root_Certification_Authority.crt, mozilla/Equifax_Secure_CA.crt, 
mozilla/Equifax_Secure_eBusiness_CA_1.crt, 
mozilla/Equifax_Secure_Global_eBusiness_CA.crt, 
mozilla/E-Tugra_Certification_Authority.crt, mozilla/GeoTrust_Global_CA_2.crt, 
mozilla/GeoTrust_Global_CA.crt, moz
 illa/GeoTrust_Primary_Certification_Authority.crt, 
mozilla/GeoTrust_Primary_Certification_Authority_-_G2.crt, 
mozilla/GeoTrust_Primary_Certification_Authority_-_G3.crt, 
mozilla/GeoTrust_Universal_CA_2.crt, mozilla/GeoTrust_Universal_CA.crt, 
mozilla/Global_Chambersign_Root_-_2008.crt, mozilla/GlobalSign_Root_CA.crt, 
mozilla/GlobalSign_Root_CA_-_R2.crt, mozilla/GlobalSign_Root_CA_-_R3.crt, 
mozilla/Go_Daddy_Class_2_CA.crt, 
mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt, 
mozilla/GTE_CyberTrust_Global_Root.crt, 
mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt, 
mozilla/Hongkong_Post_Root_CA_1.crt, mozilla/IGC_A.crt, mozilla/Izenpe.com.crt, 
mozilla/Juur-SK.crt, mozilla/Microsec_e-Szigno_Root_CA_2009.crt, 
mozilla/Microsec_e-Szigno_Root_CA.crt, 
mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt, 
mozilla/NetLock_Business_=Class_B=_Root.crt, 
mozilla/NetLock_Express_=Class_C=_Root.crt, 
mozilla/NetLock_Notary_=Class_A=_Root.crt, mozilla/NetLock_Qualified_=Class_QA=
 _Root.crt, mozilla/Network_Solutions_Certificate_Authority.crt, 
mozilla/OISTE_WISeKey_Global_Root_GA_CA.crt, mozilla/PSCProcert.crt, 
mozilla/QuoVadis_Root_CA_1_G3.crt, mozilla/QuoVadis_Root_CA_2.crt, 
mozilla/QuoVadis_Root_CA_2_G3.crt, mozilla/QuoVadis_Root_CA_3.crt, 
mozilla/QuoVadis_Root_CA_3_G3.crt, mozilla/QuoVadis_Root_CA.crt, 
mozilla/Root_CA_Generalitat_Valenciana.crt, mozilla/RSA_Security_2048_v3.crt, 
mozilla/Secure_Global_CA.crt, mozilla/SecureSign_RootCA11.crt, 
mozilla/SecureTrust_CA.crt, mozilla/Security_Communication_EV_RootCA1.crt, 
mozilla/Security_Communication_RootCA2.crt, 
mozilla/Security_Communication_Root_CA.crt, 
mozilla/SG_TRUST_SERVICES_RACINE.crt, mozilla/Sonera_Class_1_Root_CA.crt, 
mozilla/Sonera_Class_2_Root_CA.crt, mozilla/Staat_der_Nederlanden_Root_CA.crt, 
mozilla/Staat_der_Nederlanden_Root_CA_-_G2.crt, 
mozilla/Starfield_Class_2_CA.crt, 
mozilla/Starfield_Root_Certificate_Authority_-_G2.crt, 
mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt, mozilla
 /StartCom_Certification_Authority_2.crt, 
mozilla/StartCom_Certification_Authority.crt, 
mozilla/StartCom_Certification_Authority_G2.crt, 
mozilla/S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt, 
mozilla/Swisscom_Root_CA_1.crt, mozilla/Swisscom_Root_CA_2.crt, 
mozilla/Swisscom_Root_EV_CA_2.crt, mozilla/SwissSign_Gold_CA_-_G2.crt, 
mozilla/SwissSign_Platinum_CA_-_G2.crt, mozilla/SwissSign_Silver_CA_-_G2.crt, 
mozilla/Taiwan_GRCA.crt, mozilla/TC_TrustCenter_Class_2_CA_II.crt, 
mozilla/TC_TrustCenter_Class_3_CA_II.crt, 
mozilla/TC_TrustCenter_Universal_CA_I.crt, mozilla/TeliaSonera_Root_CA_v1.crt, 
mozilla/Thawte_Premium_Server_CA.crt, mozilla/thawte_Primary_Root_CA.crt, 
mozilla/thawte_Primary_Root_CA_-_G2.crt, 
mozilla/thawte_Primary_Root_CA_-_G3.crt, mozilla/Thawte_Server_CA.crt, 
mozilla/Trustis_FPS_Root_CA.crt, mozilla/T-TeleSec_GlobalRoot_Class_2.crt, 
mozilla/T-TeleSec_GlobalRoot_Class_3.crt, 
mozilla/TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.crt, 
mozilla/TUR
 KTRUST_Certificate_Services_Provider_Root_1.crt, 
mozilla/TURKTRUST_Certificate_Services_Provider_Root_2007.crt, 
mozilla/TURKTRUST_Certificate_Services_Provider_Root_2.crt, 
mozilla/TWCA_Global_Root_CA.crt, mozilla/TWCA_Root_Certification_Authority.crt, 
mozilla/UTN_DATACorp_SGC_Root_CA.crt, mozilla/UTN_USERFirst_Email_Root_CA.crt, 
mozilla/UTN_USERFirst_Hardware_Root_CA.crt, 
mozilla/Verisign_Class_1_Public_Primary_Certification_Authority.crt, 
mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G2.crt, 
mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.crt, 
mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.crt, 
mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.crt, 
mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_2.crt, 
mozilla/Verisign_Class_3_Public_Primary_Certification_Authority.crt, 
mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.crt, 
mozilla/Verisign_Class_3_Public_Primary_Cer
 tification_Authority_-_G3.crt, 
mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt, 
mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt, 
mozilla/Verisign_Class_4_Public_Primary_Certification_Authority_-_G3.crt, 
mozilla/VeriSign_Universal_Root_Certification_Authority.crt, 
mozilla/Visa_eCommerce_Root.crt, 
mozilla/WellsSecure_Public_Root_Certificate_Authority.crt, 
mozilla/WoSign_China.crt, mozilla/WoSign.crt, mozilla/XRamp_Global_CA_Root.crt, 
spi-inc.org/spi-cacert-2008.crt
* ca-certificates/trust_new_crts: yes
  ca-certificates/title:
  ca-certificates/new_crts:

--- End Message ---
--- Begin Message --- 
Source: ca-certificates-java
Source-Version: 20220719
Done: Matthias Klose <[email protected]>

We believe that the bug you reported is fixed in the latest version of
ca-certificates-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <[email protected]> (supplier of updated ca-certificates-java 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 19 Jul 2022 16:02:33 +0200
Source: ca-certificates-java
Architecture: source
Version: 20220719
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 
<[email protected]>
Changed-By: Matthias Klose <[email protected]>
Closes: 688415 767272 776860 795244 864331 908858 922981 929685 940297 994152
Changes:
 ca-certificates-java (20220719) unstable; urgency=medium
 .
   [ Andreas Beckmann ]
   * Team upload.
   * Switch to debhelper-compat (= 13).
   * Set Rules-Requires-Root: no.
   * UpdateCertificates.java: Ignore empty lines in stdin.  (Closes: #795244)
   * Avoid warning about missing /etc/ssl/certs/java/cacerts on initial
     install.
   * Do not be satisfied by java7-runtime-headless.
   * Remove support for upgrading from versions predating wheezy.
   * Clean up misplaced symlinks in the root directory left over by ancient
     versions.  (Closes: #688415)
   * Drop libnss3 manipulations, no longer needed since openjdk-6-jre-headless
     at least.
   * Add update-ca-certificates-java trigger and let jks-keystore record the
     pending certificate updates and postpone them to the processing of this
     trigger.  (Closes: #908858)
   * Add update-ca-certificates-java-fresh trigger, will be activated by
     update-ca-certificates -f.  (Closes: #922981)
   * Remove obsolete certificates when building a fresh cacerts file.
     (Closes: #767272)
   * Bump ca-certificates dependency to 20210120.
   * Skip Java certificates setup if no JRE is available.
   * Add trigger on /usr/lib/jvm to perform Java certificates setup if a JRE
     becomes available.
   * Demote JRE dependency to Recommends to break dependency cycle.
     (Closes: #929685, #940297)
   * Foreign architecture JREs that place java in PATH are also usable.
     (Closes: #776860, #864331)
 .
   [ Matthias Klose ]
   * Support Java 18-21. Closes: #994152.
   * Bump Standards-Version to 4.6.0.
Checksums-Sha1:
 ede5cff6cf6ed0b4258b2828ed63baa99ccddd14 1808 ca-certificates-java_20220719.dsc
 3b18d00913c73c5e735ef4dcebee3b7c47fefc2b 17204 
ca-certificates-java_20220719.tar.xz
 5907f7961d191928f1e60081a018f9d2ca08ba89 10746 
ca-certificates-java_20220719_source.buildinfo
Checksums-Sha256:
 d14b15145e0af9c7b3f054af00d13542a7b0192ce3e27afdf890b627090f89c3 1808 
ca-certificates-java_20220719.dsc
 a627585de3e0c827300094f113dd3326e92744abfabadef55d122d7f980e28ad 17204 
ca-certificates-java_20220719.tar.xz
 9f0339174bd78888e2ac2c9156bcbec36a3306c53338782fabf39be8c0db5824 10746 
ca-certificates-java_20220719_source.buildinfo
Files:
 1174a0a91cd5d5c5065802d8d2465f0e 1808 java optional 
ca-certificates-java_20220719.dsc
 cda24b44319098d0fdd633e7dd59be5c 17204 java optional 
ca-certificates-java_20220719.tar.xz
 0f3fcd50d3012b49f20f32c058a182e6 10746 java optional 
ca-certificates-java_20220719_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=cN37
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to