package ca-certificates 20180409 failed to install/upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 1

[Marius Gedminas]

I was upgrading an Ubuntu 16.04 LTS server to 18.04 with sudo do-release-upgrade and it crashed.

I did not see where the error was because etckeeper's messages made them scroll too far back, and do-release-upgrade sets up screen in a way that makes it impossible for me to see terminal scrollback. I expect apport attached all the relevant logs to this bug.

ProblemType: Package
DistroRelease: Ubuntu 18.04
Package: ca-certificates 20180409
ProcVersionSignature: Ubuntu 4.4.0-161.189-generic 4.4.186
Uname: Linux 4.4.0-161-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
Date: Wed Sep 11 18:19:10 2019
ErrorMessage: installed ca-certificates package post-installation script subprocess returned error exit status 1
PackageArchitecture: all
Python3Details: /usr/bin/python3.6, Python 3.6.8, python3-minimal, 3.6.7-1~18.04
PythonDetails: /usr/bin/python2.7, Python 2.7.15+, python-minimal, 2.7.15~rc1-1
RelatedPackageVersions:
 dpkg 1.19.0.5ubuntu2.2
 apt 1.6.11
SourcePackage: ca-certificates
Title: package ca-certificates 20180409 failed to install/upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 1
UpgradeStatus: Upgraded to bionic on 2019-09-11 (0 days ago)

[Marius Gedminas (mgedmin)]

So I see

    Setting up ca-certificates (20180409) ...
    Updating certificates in /etc/ssl/certs...
    rehash: error: skipping dovecot.pem, cannot open file
    rehash: warning: skipping duplicate certificate in AlphaSSL_root.crt
    dpkg: error processing package ca-certificates (--configure):
     installed ca-certificates package post-installation script subprocess returned error exit status 1

and I can tell you that (back in 2015) I did run

    wget -O /etc/ssl/certs/AlphaSSL_root.crt https://www.alphassl.com/support/roots/root.txt

when I was trying to make my dovecot use a wildcard certificate bought from AlphaSSL.

Seems a bit harsh to fail the entire OS upgrade because I downloaded an extra file into /etc/ssl/certs/.

Meanwhile dpkg --configure -a that do-release-upgrade ran for me completed without errors and apt upgrade shows no packages needing upgrades (just a bunch expecting autoremovals).