Bug#1038878: openjdk-17-jre: install fails when installed at the same time as libgdal-dev

[Daniel Grießhaber]

Package: openjdk-17-jre
Severity: important

Dear Maintainer,

when trying to install any variant of openjdk-17-(jdk|jre)[-headless] at
the same time as libgdal-dev, the installation fails with the attached
error message.

This can easily be reproduced by running
`docker run --rm -ti debian:bookworm /bin/bash -c "apt update && apt
install -y openjdk-17-jre-headless libgdal-dev"`

Omitting the libgdal-dev or the openjdk package does not yiel any
errors. As the error message points to a JRE related error, I'm
reporting this to you.
What worked for me as a workaround is either installing the packages
separately or making sure to install `ca-certificates-java` in a
separate apt command before installing both packages at the same time.

Have a nice day,
Daniel

Full Error message:
```
Setting up ca-certificates-java (20230103) ...
Exception in thread "main" java.lang.InternalError: Error loading java.security file
at java.base/java.security.Security.initialize(Security.java:106)
at java.base/java.security.Security$1.run(Security.java:84)
at java.base/java.security.Security$1.run(Security.java:82)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
at java.base/java.security.Security.<clinit>(Security.java:82)
at java.base/sun.security.jca.ProviderList.<init>(ProviderList.java:178)
at java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:96)
at java.base/sun.security.jca.ProviderList$2.run(ProviderList.java:94)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
at java.base/sun.security.jca.ProviderList.fromSecurityProperties(ProviderList.java:93)
at java.base/sun.security.jca.Providers.<clinit>(Providers.java:55)
at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:156)
at java.base/java.security.cert.CertificateFactory.getInstance(CertificateFactory.java:193)
at org.debian.security.KeyStoreHandler.<init>(KeyStoreHandler.java:50)
at org.debian.security.UpdateCertificates.<init>(UpdateCertificates.java:65)
at org.debian.security.UpdateCertificates.main(UpdateCertificates.java:51)
dpkg: error processing package ca-certificates-java (--configure):
installed ca-certificates-java package post-installation script subprocess returned error exit status 1
dpkg: dependency problems prevent configuration of openjdk-17-jre-headless:arm64:
openjdk-17-jre-headless:arm64 depends on ca-certificates-java (>= 20190405~); however:
Package ca-certificates-java is not configured yet.

dpkg: error processing package openjdk-17-jre-headless:arm64 (--configure):
dependency problems - leaving unconfigured
Processing triggers for libc-bin (2.36-9) ...
Processing triggers for ca-certificates (20230311) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Errors were encountered while processing:
ca-certificates-java
openjdk-17-jre-headless:arm64
E: Sub-process /usr/bin/dpkg returned an error code (1)
```

-- System Information:
Debian Release: 12.0
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-23-amd64 (SMP w/16 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages openjdk-17-jre depends on:
ii libc6 2.36-9
pn libgif7 <none>
pn libgl1 <none>
pn libglib2.0-0 <none>
pn libgtk2.0-0 | libgtk-3-0 <none>
pn libharfbuzz0b <none>
pn libjpeg62-turbo <none>
pn libpng16-16 <none>
pn libx11-6 <none>
pn libxext6 <none>
pn libxi6 <none>
pn libxinerama1 <none>
pn libxrandr2 <none>
pn libxrender1 <none>
pn libxtst6 <none>
pn openjdk-17-jre-headless <none>

Versions of packages openjdk-17-jre recommends:
pn fonts-dejavu-extra <none>
pn libatk-wrapper-java-jni <none>

openjdk-17-jre suggests no packages.