This looks like it's been fixed in debian with https://launchpad.net/debian/+source/ca-certificates-java/20180413:
* Always generate a JKS keystore instead of using the default format (Closes: #894979) -- You received this bug notification because you are a member of OpenJDK, which is subscribed to openjdk-9 in Ubuntu. https://bugs.launchpad.net/bugs/1743139 Title: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty Status in openjdk-9 package in Ubuntu: Confirmed Bug description: When trying to access anything using Java + HTTPS, the process is terminated with an java.security.InvalidAlgorithmParameterException. Adding -Djavax.net.ssl.trustStorePassword=changeit to the command line flags of java fixes this problem. Either the trust store's password should be changed, or this flag sould be added by default. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openjdk-9/+bug/1743139/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~openjdk Post to : openjdk@lists.launchpad.net Unsubscribe : https://launchpad.net/~openjdk More help : https://help.launchpad.net/ListHelp