Path: csiph.com!usenet.pasdenom.info!aioe.org!bofh.it!news.nic.it!robomod
From: Salvo Tomaselli <tiposchi@tiscali.it>
Newsgroups: linux.debian.bugs.dist,linux.debian.maint.java
Subject: Bug#779974: josm: invalid certificate (incomplete /etc/ssl/certs/java/cacert)
Date: Wed, 26 Aug 2015 13:20:01 +0200
Message-ID: <q1GUh-46N-3@gated-at.bofh.it>
References: <p1jwR-3JW-7@gated-at.bofh.it> <phZip-4cv-19@gated-at.bofh.it> <pi6jU-69S-21@gated-at.bofh.it> <pilLX-3Ds-5@gated-at.bofh.it> <q1Grg-3jH-9@gated-at.bofh.it> <q1Grg-3jH-7@gated-at.bofh.it>
X-Original-To: Sebastiaan Couwenberg <sebastic@xs4all.nl>, 779974@bugs.debian.org
X-Mailbox-Line: From debian-bugs-dist-request@lists.debian.org  Wed Aug 26 11:18:09 2015
Old-Return-Path: <debbugs@buxtehude.debian.org>
X-Spam-Flag: NO
X-Spam-Score: -5.319
Reply-To: Salvo Tomaselli <tiposchi@tiscali.it>, 779974@bugs.debian.org
Original-Sender: salvo.g.tomaselli@gmail.com
Resent-To: debian-bugs-dist@lists.debian.org
Resent-Cc: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>
X-Debian-Pr-Message: followup 779974
X-Debian-Pr-Package: josm
X-Debian-Pr-Keywords: unreproducible
X-Debian-Pr-Source: josm
X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 149; neutral, 49; spammy, 1. spammytokens:0.929-+--today hammytokens:0.000-+--4096R, 0.000-+--4096r, 0.000-+--H*f:sk:2015030, 0.000-+--Couwenberg, 0.000-+--couwenberg
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=KTXZwx6ercTlF5PXbiVJvzPMIXhUxF0HiOv2Yli5ebw=; b=e1hrsCN4WidjihNNujz/xFhiee07KG+E5I+QZSZVBDg6ITSXtoMSPNIL3Mon1BzuM8 alpVUTc8shmalvPhz/TvBDV6kjSWfg2JI8QbE2uXwJnlu1JPClT+89qcBHIXy7DTXNhs 4XBrMybUwIOjYAZfECMalTUTAWqLORhj2g5qdqpzKYGQtBwjqEoYKCW7+iV/glnUPuVC 1nY7SCceelXuWl+UrE44iuyGhTierh4a62VEZHdwwXujodLxHhXzQX6gGX8jdbHmN8B/ V5+spteDv9H+0EvEOzQ+9KIZJG3Fua2PMJd/n22SIBi4n5H4L5EQ8CU3zFs+VRuaZmU4 2gTQ==
MIME-Version: 1.0
X-Received: by 10.194.175.200 with SMTP id cc8mr60356876wjc.87.1440587727655; Wed, 26 Aug 2015 04:15:27 -0700 (PDT)
Sender: robomod@news.nic.it
X-Google-Sender-Auth: DVqAaFzwnz9f20Qr0kKZK6vdYPQ
Content-Type: text/plain; charset=UTF-8
X-Debian-Message: from BTS
X-Mailing-List: <debian-bugs-dist@lists.debian.org> archive/latest/1202981
List-ID: <debian-bugs-dist.lists.debian.org>
List-URL: <https://lists.debian.org/debian-bugs-dist/>
Approved: robomod@news.nic.it
Lines: 29
Organization: linux.* mail to news gateway
X-Original-Cc: debian-java@lists.debian.org
X-Original-Date: Wed, 26 Aug 2015 13:15:27 +0200
X-Original-Message-ID: <CAOOnQAcpLQ=eRgi8nJNc9+EXCYNFghk3PyGhfUjyu_C266Y3bw@mail.gmail.com>
X-Original-References: <20150307094541.15301.59729.reportbug@localhost> <3612906.0GkQqr9yNo@hal9000> <5537D31E.7020609@xs4all.nl> <3343429.j8KQaJcb5M@hal9000> <5539332C.80001@xs4all.nl> <55DD9824.8050808@xs4all.nl>
X-Original-Sender: salvo.g.tomaselli@gmail.com
Xref: csiph.com linux.debian.bugs.dist:674959 linux.debian.maint.java:8286

I tried using it today again.

I've noticed that after I get the initial error asking me to configure
a proxy, if I just hit "cancel" I can go on working normally.

2015-08-26 12:42 GMT+02:00 Sebastiaan Couwenberg <sebastic@xs4all.nl>:
> Hi Salvo & Java Team,
>
> As reported in the #779974 josm is not working for Salvo because the
> tile.openstreetmap.org SSL certificates are not trusted. This is caused
> by the /etc/ssl/certs/java/cacert list being incomplete, it doesn't
> include the entries other systems with ca-certificates-java have.
>
> So far I've been unable to get Salvo to regenerate
> /etc/ssl/certs/java/cacert properly, as should be automatic by the
> jks-keystore ca-certificates update hook.
>
> Do you have any advise what we could try to get his Java cacerts fixed?
>
> We've already tried to import the certificates in the CA chain manually,
> although that shouldn't be required.
>
> Kind Regards,
>
> Bas
>
> --
>  GPG Key ID: 4096R/6750F10AE88D4AF1
> Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1