Errors installing certificates with filenames having accented characters

Bug #1299526 reported by jbatista
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ca-certificates-java (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

Installing the latest update of ca-certificates finishes with errors for filenames having special/accented characters.

ubuntu@lucid:~$ echo $LANG
pt_PT.utf8
ubuntu@lucid:~$ sudo apt-get install ca-certificates
A ler as listas de pacotes... Pronto
A construir árvore de dependências
A ler a informação de estado... Pronto
Serão actualizados os seguintes pacotes:
  ca-certificates
1 pacotes actualizados, 0 pacotes novos instalados, 0 a remover e 32 não actualizados.
É necessário obter 194kB de arquivos.
Após esta operação, serão utilizados 94,2kB adicionais de espaço em disco.
Obter:1 http://pt.archive.ubuntu.com/ubuntu/ lucid-updates/main ca-certificates 20130906ubuntu0.10.04.1 [194kB]
Obtidos 194kB em 8s (24,1kB/s)
A ler os changelogs... Feito
apt-listchanges: Deseja continuar? [S/n] S
apt-listchanges: A enviar root por mail: apt-listchanges: changelogs para nox
A pré-configurar os pacotes...
(A ler a base de dados ... 1433134 ficheiros e directórios actualmente instalados.)
A preparar para substituir ca-certificates 20090814ubuntu0.10.04.1 (a usar .../ca-certificates_20130906ubuntu0.10.04.1_all.deb) ...
A descompactar substituto ca-certificates ...
A processar 'triggers' para man-db ...
A instalar ca-certificates (20130906ubuntu0.10.04.1) ...
Clearing symlinks in /etc/ssl/certs...done.
Updating certificates in /etc/ssl/certs... WARNING: Skipping duplicate certificate UbuntuOne-Go_Daddy_Class_2_CA.pem
164 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
updating keystore /etc/ssl/certs/java/cacerts...
  already exists: /etc/ssl/certs/AddTrust_External_Root.pem
  already exists: /etc/ssl/certs/AddTrust_Low-Value_Services_Root.pem
  already exists: /etc/ssl/certs/AddTrust_Public_Services_Root.pem
  already exists: /etc/ssl/certs/AddTrust_Qualified_Certificates_Root.pem
  already exists: /etc/ssl/certs/America_Online_Root_Certification_Authority_1.pem
  already exists: /etc/ssl/certs/America_Online_Root_Certification_Authority_2.pem
  already exists: /etc/ssl/certs/Baltimore_CyberTrust_Root.pem
  already exists: /etc/ssl/certs/COMODO_Certification_Authority.pem
  already exists: /etc/ssl/certs/COMODO_ECC_Certification_Authority.pem
  already exists: /etc/ssl/certs/Camerfirma_Chambers_of_Commerce_Root.pem
  already exists: /etc/ssl/certs/Camerfirma_Global_Chambersign_Root.pem
  already exists: /etc/ssl/certs/Certplus_Class_2_Primary_CA.pem
  already exists: /etc/ssl/certs/Certum_Root_CA.pem
  already exists: /etc/ssl/certs/Comodo_AAA_Services_root.pem
  already exists: /etc/ssl/certs/Comodo_Secure_Services_root.pem
  already exists: /etc/ssl/certs/Comodo_Trusted_Services_root.pem
  already exists: /etc/ssl/certs/DST_ACES_CA_X6.pem
  already exists: /etc/ssl/certs/DST_Root_CA_X3.pem
  already exists: /etc/ssl/certs/DigiCert_Assured_ID_Root_CA.pem
  already exists: /etc/ssl/certs/DigiCert_Global_Root_CA.pem
  already exists: /etc/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.pem
  already exists: /etc/ssl/certs/Digital_Signature_Trust_Co._Global_CA_1.pem
  already exists: /etc/ssl/certs/Digital_Signature_Trust_Co._Global_CA_3.pem
  already exists: /etc/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.pem
  already exists: /etc/ssl/certs/Entrust.net_Secure_Server_CA.pem
  already exists: /etc/ssl/certs/Entrust_Root_Certification_Authority.pem
  already exists: /etc/ssl/certs/Equifax_Secure_CA.pem
  already exists: /etc/ssl/certs/Equifax_Secure_Global_eBusiness_CA.pem
  already exists: /etc/ssl/certs/Equifax_Secure_eBusiness_CA_1.pem
  already exists: /etc/ssl/certs/Firmaprofesional_Root_CA.pem
  already exists: /etc/ssl/certs/GTE_CyberTrust_Global_Root.pem
  already exists: /etc/ssl/certs/GeoTrust_Global_CA.pem
  already exists: /etc/ssl/certs/GeoTrust_Global_CA_2.pem
  already exists: /etc/ssl/certs/GeoTrust_Primary_Certification_Authority.pem
  already exists: /etc/ssl/certs/GeoTrust_Universal_CA.pem
  already exists: /etc/ssl/certs/GeoTrust_Universal_CA_2.pem
  already exists: /etc/ssl/certs/GlobalSign_Root_CA.pem
  already exists: /etc/ssl/certs/GlobalSign_Root_CA_-_R2.pem
  already exists: /etc/ssl/certs/Go_Daddy_Class_2_CA.pem
  already exists: /etc/ssl/certs/NetLock_Business_=Class_B=_Root.pem
  already exists: /etc/ssl/certs/NetLock_Express_=Class_C=_Root.pem
  already exists: /etc/ssl/certs/NetLock_Notary_=Class_A=_Root.pem
  already exists: /etc/ssl/certs/NetLock_Qualified_=Class_QA=_Root.pem
  already exists: /etc/ssl/certs/Network_Solutions_Certificate_Authority.pem
  already exists: /etc/ssl/certs/QuoVadis_Root_CA.pem
  already exists: /etc/ssl/certs/QuoVadis_Root_CA_2.pem
  already exists: /etc/ssl/certs/QuoVadis_Root_CA_3.pem
  already exists: /etc/ssl/certs/RSA_Root_Certificate_1.pem
  already exists: /etc/ssl/certs/RSA_Security_2048_v3.pem
  already exists: /etc/ssl/certs/SecureTrust_CA.pem
  already exists: /etc/ssl/certs/Secure_Global_CA.pem
  already exists: /etc/ssl/certs/Security_Communication_Root_CA.pem
  already exists: /etc/ssl/certs/Sonera_Class_1_Root_CA.pem
  already exists: /etc/ssl/certs/Sonera_Class_2_Root_CA.pem
  already exists: /etc/ssl/certs/Staat_der_Nederlanden_Root_CA.pem
  already exists: /etc/ssl/certs/Starfield_Class_2_CA.pem
  already exists: /etc/ssl/certs/StartCom_Certification_Authority.pem
  already exists: /etc/ssl/certs/SwissSign_Gold_CA_-_G2.pem
  already exists: /etc/ssl/certs/SwissSign_Platinum_CA_-_G2.pem
  already exists: /etc/ssl/certs/SwissSign_Silver_CA_-_G2.pem
  already exists: /etc/ssl/certs/Swisscom_Root_CA_1.pem
  already exists: /etc/ssl/certs/TDC_Internet_Root_CA.pem
  already exists: /etc/ssl/certs/TDC_OCES_Root_CA.pem
  already exists: /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_1.pem
  already exists: /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_2.pem
  already exists: /etc/ssl/certs/Taiwan_GRCA.pem
  already exists: /etc/ssl/certs/Thawte_Premium_Server_CA.pem
  already exists: /etc/ssl/certs/Thawte_Server_CA.pem
  already exists: /etc/ssl/certs/UTN_DATACorp_SGC_Root_CA.pem
  already exists: /etc/ssl/certs/UTN_USERFirst_Email_Root_CA.pem
  already exists: /etc/ssl/certs/UTN_USERFirst_Hardware_Root_CA.pem
  already exists: /etc/ssl/certs/ValiCert_Class_1_VA.pem
  already exists: /etc/ssl/certs/ValiCert_Class_2_VA.pem
  already exists: /etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem
  already exists: /etc/ssl/certs/Verisign_Class_1_Public_Primary_Certification_Authority.pem
  already exists: /etc/ssl/certs/Verisign_Class_1_Public_Primary_Certification_Authority_-_G2.pem
  already exists: /etc/ssl/certs/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem
  already exists: /etc/ssl/certs/Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.pem
  already exists: /etc/ssl/certs/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem
  already exists: /etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority.pem
  already exists: /etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.pem
  already exists: /etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem
  already exists: /etc/ssl/certs/Verisign_Class_4_Public_Primary_Certification_Authority_-_G3.pem
  already exists: /etc/ssl/certs/Visa_eCommerce_Root.pem
  already exists: /etc/ssl/certs/WellsSecure_Public_Root_Certificate_Authority.pem
  already exists: /etc/ssl/certs/Wells_Fargo_Root_CA.pem
  already exists: /etc/ssl/certs/XRamp_Global_CA_Root.pem
  already exists: /etc/ssl/certs/thawte_Primary_Root_CA.pem
  already exists: /etc/ssl/certs/spi-cacert-2008.pem
  added: /etc/ssl/certs/ACEDICOM_Root.pem
  error adding /etc/ssl/certs/AC_Raíz_Certicámara_S.A..pem
  added: /etc/ssl/certs/Actalis_Authentication_Root_CA.pem
  added: /etc/ssl/certs/AffirmTrust_Commercial.pem
  added: /etc/ssl/certs/AffirmTrust_Networking.pem
  added: /etc/ssl/certs/AffirmTrust_Premium.pem
  added: /etc/ssl/certs/AffirmTrust_Premium_ECC.pem
  added: /etc/ssl/certs/ApplicationCA_-_Japanese_Government.pem
  added: /etc/ssl/certs/A-Trust-nQual-03.pem
  added: /etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  added: /etc/ssl/certs/Buypass_Class_2_CA_1.pem
  added: /etc/ssl/certs/Buypass_Class_2_Root_CA.pem
  added: /etc/ssl/certs/Buypass_Class_3_CA_1.pem
  added: /etc/ssl/certs/Buypass_Class_3_Root_CA.pem
  added: /etc/ssl/certs/CA_Disig.pem
  added: /etc/ssl/certs/CA_Disig_Root_R1.pem
  added: /etc/ssl/certs/CA_Disig_Root_R2.pem
  added: /etc/ssl/certs/Certigna.pem
  error adding /etc/ssl/certs/Certinomis_-_Autorité_Racine.pem
  added: /etc/ssl/certs/certSIGN_ROOT_CA.pem
  added: /etc/ssl/certs/Certum_Trusted_Network_CA.pem
  added: /etc/ssl/certs/Chambers_of_Commerce_Root_-_2008.pem
  added: /etc/ssl/certs/China_Internet_Network_Information_Center_EV_Certificates_Root.pem
  added: /etc/ssl/certs/CNNIC_ROOT.pem
  added: /etc/ssl/certs/ComSign_CA.pem
  added: /etc/ssl/certs/ComSign_Secured_CA.pem
  added: /etc/ssl/certs/Cybertrust_Global_Root.pem
  already exists: /etc/ssl/certs/Deutsche_Telekom_Root_CA_2.pem
  added: /etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.pem
  added: /etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.pem
  error adding /etc/ssl/certs/EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.pem
  added: /etc/ssl/certs/EC-ACC.pem
  added: /etc/ssl/certs/EE_Certification_Centre_Root_CA.pem
  added: /etc/ssl/certs/E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  added: /etc/ssl/certs/ePKI_Root_Certification_Authority.pem
  added: /etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G2.pem
  added: /etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G3.pem
  added: /etc/ssl/certs/Global_Chambersign_Root_-_2008.pem
  added: /etc/ssl/certs/GlobalSign_Root_CA_-_R3.pem
  added: /etc/ssl/certs/Go_Daddy_Root_Certificate_Authority_-_G2.pem
  added: /etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  added: /etc/ssl/certs/Hongkong_Post_Root_CA_1.pem
  added: /etc/ssl/certs/IGC_A.pem
  added: /etc/ssl/certs/Izenpe.com.pem
  added: /etc/ssl/certs/Juur-SK.pem
  added: /etc/ssl/certs/Microsec_e-Szigno_Root_CA_2009.pem
  added: /etc/ssl/certs/Microsec_e-Szigno_Root_CA.pem
  error adding /etc/ssl/certs/NetLock_Arany_=Class_Gold=_Főtanúsítvány.pem
  added: /etc/ssl/certs/OISTE_WISeKey_Global_Root_GA_CA.pem
  added: /etc/ssl/certs/PSCProcert.pem
  added: /etc/ssl/certs/Root_CA_Generalitat_Valenciana.pem
  added: /etc/ssl/certs/SecureSign_RootCA11.pem
  added: /etc/ssl/certs/Security_Communication_EV_RootCA1.pem
  added: /etc/ssl/certs/Security_Communication_RootCA2.pem
  added: /etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G2.pem
  added: /etc/ssl/certs/Starfield_Root_Certificate_Authority_-_G2.pem
  added: /etc/ssl/certs/Starfield_Services_Root_Certificate_Authority_-_G2.pem
  added: /etc/ssl/certs/StartCom_Certification_Authority_2.pem
  added: /etc/ssl/certs/StartCom_Certification_Authority_G2.pem
  added: /etc/ssl/certs/S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.pem
  added: /etc/ssl/certs/Swisscom_Root_CA_2.pem
  added: /etc/ssl/certs/Swisscom_Root_EV_CA_2.pem
  added: /etc/ssl/certs/TC_TrustCenter_Class_2_CA_II.pem
  added: /etc/ssl/certs/TC_TrustCenter_Class_3_CA_II.pem
  added: /etc/ssl/certs/TC_TrustCenter_Universal_CA_I.pem
  added: /etc/ssl/certs/thawte_Primary_Root_CA_-_G2.pem
  added: /etc/ssl/certs/thawte_Primary_Root_CA_-_G3.pem
  added: /etc/ssl/certs/Trustis_FPS_Root_CA.pem
  added: /etc/ssl/certs/T-TeleSec_GlobalRoot_Class_3.pem
  error adding /etc/ssl/certs/TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.pem
  added: /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_2007.pem
  added: /etc/ssl/certs/TWCA_Root_Certification_Authority.pem
  added: /etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_2.pem
  added: /etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem
  added: /etc/ssl/certs/VeriSign_Universal_Root_Certification_Authority.pem
failed (VM used: java-6-openjdk).
E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.
done.
localepurge: Disk space freed in /usr/share/locale: 0 KiB
localepurge: Disk space freed in /usr/share/man: 0 KiB
localepurge: Disk space freed in /usr/share/gnome/help: 0 KiB
localepurge: Disk space freed in /usr/share/omf: 0 KiB
localepurge: Disk space freed in /usr/share/doc/kde/HTML: 0 KiB

ubuntu@lucid:~$ dpkg -l ca-certificates
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Nome Versão Descrição
+++-=====================================================-=====================================================-==========================================================================================================================
ii ca-certificates 20130906ubuntu0.10.04.1 Common CA certificates

ubuntu@lucid:~$

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: ca-certificates 20130906ubuntu0.10.04.1
ProcVersionSignature: Ubuntu 2.6.32-57.119-generic 2.6.32.61+drm33.26
Uname: Linux 2.6.32-57-generic x86_64
NonfreeKernelModules: nvidia
Architecture: amd64
Date: Sat Mar 29 17:37:58 2014
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
PackageArchitecture: all
ProcEnviron:
 LANGUAGE=pt:pt_PT:pt_BR:en
 PATH=(custom, no user)
 LANG=pt_PT.utf8
 SHELL=/bin/bash
SourcePackage: ca-certificates

Revision history for this message
jbatista (jmnbatista) wrote :
summary: - Error installing certificates with filenames having accented characters
+ Errors installing certificates with filenames having accented characters
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Did you also install the ca-certificates-java update? You need ca-certificates-java 20110426ubuntu0.10.04.2 to handle the special characters...

Changed in ca-certificates (Ubuntu):
status: New → Incomplete
Michael Shuler (mshuler)
affects: ca-certificates (Ubuntu) → ca-certificates-java (Ubuntu)
Revision history for this message
jbatista (jmnbatista) wrote :

I installed manually each one, separately; first ca-certificates (with the error messages above), then ca-certificates-java.
Does this mean that ca-certificates must have ca-certificates-java as a required dependency for correctly performing updates?

Revision history for this message
Michael Shuler (mshuler) wrote :

164 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....

At this point, ca-certificates package is finished and this is where the ca-certificates-java hook runs:

updating keystore /etc/ssl/certs/java/cacerts...

I'm not sure if this is an issue with openjdk6 utf8 handling, but that's possible, and may not be related directly to ca-certificates-java, which just adds the certs using the keystore utility.

-- Michael

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

@jbatista: upgrading ca-certificates-java after ca-certificates should correctly import the certificates that didn't get imported when you upgraded ca-certificates.

Revision history for this message
jbatista (jmnbatista) wrote :
Download full text (15.7 KiB)

@mdeslaur: I agree. Manually upgrading ca-certificates-java has no corresponding "Removing " info message, but has a "Adding debian:" info message. Casual verification shows that the files appear to be in place.

Output from manual upgrade of ca-certificates-java:

ubuntu@lucid:~$ sudo apt-get install ca-certificates-java
A ler as listas de pacotes... Pronto
A construir árvore de dependências
A ler a informação de estado... Pronto
Serão actualizados os seguintes pacotes:
  ca-certificates-java
1 pacotes actualizados, 0 pacotes novos instalados, 0 a remover e 31 não actualizados.
É necessário obter 8216B de arquivos.
Após esta operação, será libertado 156kB de espaço em disco.
Obter:1 http://pt.archive.ubuntu.com/ubuntu/ lucid-updates/main ca-certificates-java 20110426ubuntu0.10.04.2 [8216B]
Obtidos 8216B em 0s (10,9kB/s)
A ler os changelogs... Feito
apt-listchanges: Deseja continuar? [S/n] s
apt-listchanges: A enviar root por mail: apt-listchanges: changelogs para nox
(A ler a base de dados ... 1433152 ficheiros e directórios actualmente instalados.)
A preparar para substituir ca-certificates-java 20100406ubuntu1.1 (a usar .../ca-certificates-java_20110426ubuntu0.10.04.2_all.deb) ...
A descompactar substituto ca-certificates-java ...
A instalar ca-certificates-java (20110426ubuntu0.10.04.2) ...
A instalar nova versão do ficheiro de configuração /etc/ca-certificates/update.d/jks-keystore ...
Removing starfield_class_2_ca
Adding debian:Starfield_Class_2_CA.pem
Removing microsec_e_szigno_root_ca
Adding debian:Microsec_e-Szigno_Root_CA.pem
Removing geotrust_primary_certification_authority
Adding debian:GeoTrust_Primary_Certification_Authority.pem
Removing verisign_class_2_public_primary_certification_authority_g2
Adding debian:Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.pem
Removing addtrust_external_root
Adding debian:AddTrust_External_Root.pem
Removing affirmtrust_networking
Adding debian:AffirmTrust_Networking.pem
Removing gte_cybertrust_global_root
Adding debian:GTE_CyberTrust_Global_Root.pem
Removing equifax_secure_ebusiness_ca_1
Adding debian:Equifax_Secure_eBusiness_CA_1.pem
Removing verisign_class_3_public_primary_certification_authority_g3
Adding debian:Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem
Removing ec_acc
Adding debian:EC-ACC.pem
Removing spi_cacert_2008
Adding debian:spi-cacert-2008.pem
Removing tc_trustcenter_class_3_ca_ii
Adding debian:TC_TrustCenter_Class_3_CA_II.pem
Removing ca_disig_root_r1
Adding debian:CA_Disig_Root_R1.pem
Removing netlock_business_class_b_root
Adding debian:NetLock_Business_=Class_B=_Root.pem
Removing staat_der_nederlanden_root_ca_g2
Adding debian:Staat_der_Nederlanden_Root_CA_-_G2.pem
Removing affirmtrust_premium
Adding debian:AffirmTrust_Premium.pem
Removing visa_ecommerce_root
Adding debian:Visa_eCommerce_Root.pem
Removing deutsche_telekom_root_ca_2
Adding debian:Deutsche_Telekom_Root_CA_2.pem
Removing actalis_authentication_root_ca
Adding debian:Actalis_Authentication_Root_CA.pem
Removing thawte_primary_root_ca_g2
Adding debian:thawte_Primary_Root_CA_-_G2.pem
Removing trustis_fps_root_ca
Adding debian:Trustis_FPS_Root_CA.pem
Removing tc_trust...

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for ca-certificates-java (Ubuntu) because there has been no activity for 60 days.]

Changed in ca-certificates-java (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.