package ca-certificates 20180409 failed to install/upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 2

[shemgp]

Upgraded to new ca-certificates and still says script returned 2.

ProblemType: Package
DistroRelease: Ubuntu 18.04
Package: ca-certificates 20180409
ProcVersionSignature: Ubuntu 4.15.0-20.21-generic 4.15.17
Uname: Linux 4.15.0-20-generic x86_64
ApportVersion: 2.20.9-0ubuntu7
Architecture: amd64
Date: Thu Apr 26 21:00:57 2018
ErrorMessage: installed ca-certificates package post-installation script subprocess returned error exit status 2
InstallationDate: Installed on 2015-09-28 (940 days ago)
InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Release amd64 (20150422)
PackageArchitecture: all
Python3Details: /usr/bin/python3.6, Python 3.6.5, python3-minimal, 3.6.5-3
PythonDetails: /usr/bin/python2.7, Python 2.7.15rc1, python-minimal, 2.7.15~rc1-1
RelatedPackageVersions:
 dpkg 1.19.0.5ubuntu2
 apt 1.6.1
SourcePackage: ca-certificates
Title: package ca-certificates 20180409 failed to install/upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 2
UpgradeStatus: No upgrade log present (probably fresh install)

[Brian Murray (brian-murray)]

You have a version of libssl and openssl from a PPA.

libssl1.1 1.1.0g-2.1+ubuntu17.10.1+deb.sury.org+1 [origin: unknown]

That's gonna have a bug in it that the official version will not.

[shemgp (shemgp)]

 shemgp  shemgp-x230t  ~  USAGE  $  apt-cache show libssl1.1
Package: libssl1.1
Architecture: amd64
Version: 1.1.0g-2ubuntu4
Multi-Arch: same
Priority: important
Section: libs
Source: openssl
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Debian OpenSSL Team <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 3411
Depends: libc6 (>= 2.14), debconf (>= 0.5) | debconf-2.0
Breaks: salt-common (<= 2016.3.3+ds-3)
Filename: pool/main/o/openssl/libssl1.1_1.1.0g-2ubuntu4_amd64.deb
Size: 1128092
MD5sum: b2d83d966881fd0893a5394c19836a3f
SHA1: 93e1abb69a44a961ded04834b236d069d1fe6ac4
SHA256: 82e424d50e144320319414a1964d3a980abde4bc39fc7d8c2885819328cb5cb4
Homepage: https://www.openssl.org/
Description-en: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
Description-md5: 88547c6206c7fbc4fcc7d09ce100d210
Task: minimal
Supported: 5y

 shemgp  shemgp-x230t  ~  $  sudo dpkg --configure -a
[sudo] password for shemgp:
Setting up ca-certificates (20180409) ...
Updating certificates in /etc/ssl/certs...
rehash: skipping duplicate certificate in UbuntuOne-Go_Daddy_Class_2_CA.pem
rehash: skipping duplicate certificate in shemgp-nas.crt
dpkg: error processing package ca-certificates (--configure):
 installed ca-certificates package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
 ca-certificates
 shemgp  shemgp-x230t  ~  ERROR  $ 

[shemgp (shemgp)]

Downgraded libssl1.1 and still has the error:

 shemgp  shemgp-x230t  ~  USAGE  $  apt-cache show libssl1.1
Package: libssl1.1
Architecture: amd64
Version: 1.1.0g-2ubuntu4
Multi-Arch: same
Priority: important
Section: libs
Source: openssl
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Debian OpenSSL Team <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 3411
Depends: libc6 (>= 2.14), debconf (>= 0.5) | debconf-2.0
Breaks: salt-common (<= 2016.3.3+ds-3)
Filename: pool/main/o/openssl/libssl1.1_1.1.0g-2ubuntu4_amd64.deb
Size: 1128092
MD5sum: b2d83d966881fd0893a5394c19836a3f
SHA1: 93e1abb69a44a961ded04834b236d069d1fe6ac4
SHA256: 82e424d50e144320319414a1964d3a980abde4bc39fc7d8c2885819328cb5cb4
Homepage: https://www.openssl.org/
Description-en: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
Description-md5: 88547c6206c7fbc4fcc7d09ce100d210
Task: minimal
Supported: 5y

 shemgp  shemgp-x230t  ~  $  sudo dpkg --configure -a
[sudo] password for shemgp:
Setting up ca-certificates (20180409) ...
Updating certificates in /etc/ssl/certs...
rehash: skipping duplicate certificate in UbuntuOne-Go_Daddy_Class_2_CA.pem
rehash: skipping duplicate certificate in shemgp-nas.crt
dpkg: error processing package ca-certificates (--configure):
 installed ca-certificates package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
 ca-certificates
 shemgp  shemgp-x230t  ~  ERROR  $ 

[shemgp (shemgp)]

I tried to reboot:

 shemgp  shemgp-x230t  ~  ERROR  $  sudo dpkg --configure -a
[sudo] password for shemgp:
Sorry, try again.
[sudo] password for shemgp:
Setting up ca-certificates (20180409) ...
Updating certificates in /etc/ssl/certs...
rehash: skipping duplicate certificate in UbuntuOne-Go_Daddy_Class_2_CA.pem
rehash: skipping duplicate certificate in shemgp-nas.crt
dpkg: error processing package ca-certificates (--configure):
 installed ca-certificates package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
 ca-certificates
 shemgp  shemgp-x230t  ~  ERROR  $  sudo dpkg -i /var/cache/apt/archives/ca-certificates_20170717~16.04.1_all.deb
dpkg: warning: downgrading ca-certificates from 20180409 to 20170717~16.04.1
(Reading database ... 763802 files and directories currently installed.)
Preparing to unpack .../ca-certificates_20170717~16.04.1_all.deb ...
Unpacking ca-certificates (20170717~16.04.1) over (20180409) ...
Setting up ca-certificates (20170717~16.04.1) ...
Processing triggers for man-db (2.8.3-2) ...
Processing triggers for ca-certificates (20170717~16.04.1) ...
Updating certificates in /etc/ssl/certs...
WARNING: Skipping duplicate certificate UbuntuOne-Go_Daddy_Class_2_CA.pem
WARNING: Skipping duplicate certificate UbuntuOne-Go_Daddy_Class_2_CA.pem
WARNING: Skipping duplicate certificate shemgp-nas.pem
WARNING: Skipping duplicate certificate shemgp-nas.pem
2 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

Replacing debian:redmine.pem
Replacing debian:redmine.pem
done.
Updating Mono key store
Linux Cert Store Sync - version 4.6.2.0
Synchronize local certs with certs from local Linux trust store.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

I already trust 130, your new list has 130
Import process completed.
Done
done.