Results 1 to 7 of 7

Thread: Java cacerts bad, where to get good ones and where to put them?

  1. #1
    Join Date
    Oct 2016
    Location
    USA
    Posts
    92

    Default Java cacerts bad, where to get good ones and where to put them?

    Hello,
    I have learned that my java ca certificates are bad because certain applications (minecraft, don't laugh ) give me errors on startup and do not run. i.e.,

    Code:
    Downloading: https://s3.amazonaws.com/Minecraft.Download/launcher/launcher.pack.lzmaException: javax.net.ssl.SSLException: java.security.ProviderException: java.lang.NegativeArraySizeException
    and

    Code:
    FATAL ERROR: net.minecraft.bootstrap.FatalBootstrapError: Unable to download while being forced
        at net.minecraft.bootstrap.Bootstrap.execute(Bootstrap.java:95)
        at net.minecraft.bootstrap.Bootstrap.main(Bootstrap.java:381)
    I've done my homework and it looks like due to bad cacerts, java (jre 8u121 to be specific, just updated with the tarball to be sure!) does not trust amazon web services.

    However, I could use some hand-holding (or even just a pointer or two) on what I need to do next. I have copied year-old good cacerts from a friend's windows machine, and have tried placing them as
    Code:
    /etc/ssl/certs/java/cacerts
    and
    Code:
    /usr/java/jre1.8.0_121/lib/security/cacerts
    Neither of these has fixed the problem. It's my understanding that these are respectively the general certifications directory and the security directory of my jre.
    I am now curious if there are some symlinks i need to create, (so many of those....) or if I'm on completely the wrong track with the cacerts.
    Perhaps I'll even get lucky and some of you folks will be minecraft experts!

    Thanks for reading,

    --Henry Wilson

  2. #2
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    26,507
    Blog Entries
    15

    Default Re: Java cacerts bad, where to get good ones and where to put them?

    Hi
    I have no issues here with minecraft (1.11.2) starts up fine, I'm using java-1_8_0-openjdk not jre on 42.2....

    Maybe look at update-alternatives, check with;
    Code:
    update-alternatives --help
    update-alternatives --list java
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    SUSE SLE, openSUSE Leap/Tumbleweed (x86_64) | GNOME DE
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!

  3. #3
    Join Date
    Oct 2016
    Location
    USA
    Posts
    92

    Default Re: Java cacerts bad, where to get good ones and where to put them?

    Oho, I just assumed I needed the JRE. Perhaps that's not being used at all, and can be removed. I'll try my copied certs in jre-1.8.0-openjdk/lib/security, mentioned by update-alternatives. Update-alternatives seems like a useful tool, thanks for telling me about it!

    Hmm. Not so good. Copied certs, no luck. I'll try uninstalling and reinstalling openjdk. Perhaps that can just replace everything.

    No beans, dice, cigar, et cetera.

    My fail by the way is in minecraft installation, it's trying to download all the files it needs. All I'm running is the launcher, with no version involved.

    Thanks, Malcolm. I'll get back to this tomorrow, try more things. Until then, I've got to sleep. All sorts of classes tomorrow.

  4. #4
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    10,925
    Blog Entries
    2

    Default Re: Java cacerts bad, where to get good ones and where to put them?

    If I were to guess,
    You've installed the JRE or JDK from java.com and munged up your system.

    When you install any Oracle Java, it over-writes any existing Java on your system by default (because Oracle always believes it and only it should exist on any system). What this means is that it likely stomped all over your openjdk and anything else.

    When this happens,
    I don't know of any easy way to remove Oracle Java or re-install openjdk with guaranteed success, it's one of those things that once it's done there really isn't an easy way to undo it.

    It looks like someone has updated the SDB "Install Java" page again, I haven't reviewed it... Maybe there is something in there for you to move forward in your situation

    https://en.opensuse.org/SDB:Installing_Java

    If there is sufficiently complete info about Oracle 8, I'll take a look again at scripting its install so that it plays nice with openjdk.
    I did that with Oracle 7, but the architectural changes in Oracle 8 were too great for me to confidently do the same for it.

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  5. #5
    Join Date
    Oct 2016
    Location
    USA
    Posts
    92

    Default Re: Java cacerts bad, where to get good ones and where to put them?

    I did indeed install a JRE from Oracle, but this was a couple weeks ago, and my java applications broke three days ago. Also, the way I installed it was not by any install script, but by extracting a tarball into (i believe) "/usr/java". I have since removed the files via simple "rm -rf" at the directory. My java still launches things, but it does not trust websites like s3.amazonaws.com. If this is the problem, I'd be pretty surprised, as I probably never ended up using it whatsoever, given all of my calls to java would just have hit my openjdk installation. But I'll take a look at those links, see what I can find. Thanks!

  6. #6
    Join Date
    Oct 2016
    Location
    USA
    Posts
    92

    Default Re: Java cacerts bad, where to get good ones and where to put them?

    Okay, I completely removed openjdk 7; fixed all the issues. Not sure what caused these issues in the first place, but now they are gone.

    Thanks for your help, all!

    --Henry Wilson

  7. #7
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    10,925
    Blog Entries
    2

    Default Re: Java cacerts bad, where to get good ones and where to put them?

    Quote Originally Posted by Amlypygid View Post
    I did indeed install a JRE from Oracle, but this was a couple weeks ago, and my java applications broke three days ago. Also, the way I installed it was not by any install script, but by extracting a tarball into (i believe) "/usr/java". I have since removed the files via simple "rm -rf" at the directory. My java still launches things, but it does not trust websites like s3.amazonaws.com. If this is the problem, I'd be pretty surprised, as I probably never ended up using it whatsoever, given all of my calls to java would just have hit my openjdk installation. But I'll take a look at those links, see what I can find. Thanks!
    I suppose what you described here <might> work if you set your environmental variables accordingly (which you didn't post).

    I'm glad you say that you believe you resolved your situation, but without understanding every detail of what you did be prepared for possible problems in the future. In general, I've found that the SDB:Install Java link I posted for you can be considered authoritative and current recommendations. Even if/when I've modified or created scripts, all have been based on the info posted there.

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •