Debian Bug report logs - #632794
openjdk-6-jre-headless: Fails to find libnss3.so after multi-arch change in version 3.12.10-2 of libnss3-1d

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Mitsubishi Evo II <mitsubishievo2@ftml.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: openjdk-6-jre-headless: Fails to find libnss3.so after multi-arch change in version 3.12.10-2 of libnss3-1d

Date: Wed, 06 Jul 2011 09:01:47 +0900

Package: openjdk-6-jre-headless
Version: 6b18-1.8.7-5
Severity: important


Firstly, thanks so much for the openjdk packages: I have a Sun/Oracle free OS :-)
Only, three non-free packages still remaining on most of my systems.

Next, from a quick search on the web it is my understanding that
problems like this that occur after a dependency has switched to use
the multi-arch directory layout for the installation of libs, then the
bug should be filed against the programs that do not look for the
library in the new multi-arch directory. If this is incorrect, please
let me know.

Prior to version 3.12.10-2 of libnss3-1d, libnss3.so was located in
/usr/lib, where as from that version onwards multi-arch layout is
used, so for example on my amd64 machine it would be in /usr/lib/x86_64-linux-gnu/.
Running the java program "Koala", a client for the "Evo" online meeting system (http://evo.caltech.edu/evoGate/)
rusults in java.io.FileNotFoundException for /usr/lib/libnss3.so

I can provide a full log from the Koala client if requested.

Finally, if I am completly off base here and the problem is actually
caused by Koala (my java knowledge is shaky at best) feel free to flame me.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-rc5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openjdk-6-jre-headless depends on:
ii  ca-certificates-java    20110531         Common CA certificates (JKS keysto
ii  java-common             0.40             Base of all Java packages
ii  libc6                   2.13-10          Embedded GNU C Library: Shared lib
ii  libcups2                1.4.6-11+b1      Common UNIX Printing System(tm) - 
ii  libfreetype6            2.4.4-2          FreeType 2 font engine, shared lib
ii  libgcc1                 1:4.6.1-2        GCC support library
ii  libjpeg62               6b1-1            The Independent JPEG Group's JPEG 
ii  liblcms1                1.18.dfsg-1.2+b4 Color management library
ii  libnss3-1d              3.12.10-1        Network Security Service libraries
ii  openjdk-6-jre-lib       6b18-1.8.7-5     OpenJDK Java runtime (architecture
ii  tzdata-java             2011h-3          time zone and daylight-saving time
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages openjdk-6-jre-headless recommends:
pn  icedtea-6-jre-cacao           <none>     (no description available)

Versions of packages openjdk-6-jre-headless suggests:
pn  libnss-mdns                 <none>       (no description available)
pn  sun-java6-fonts             <none>       (no description available)
pn  ttf-baekmuk | ttf-unfonts | <none>       (no description available)
pn  ttf-dejavu-extra            <none>       (no description available)
pn  ttf-indic-fonts             <none>       (no description available)
ii  ttf-kochi-gothic            20030809-9   Kochi Subst Gothic Japanese TrueTy
ii  ttf-kochi-mincho            20030809-9   Kochi Subst Mincho Japanese TrueTy
ii  ttf-wqy-microhei            0.2.0-beta-1 A droid derived Sans-Seri style CJ

-- Configuration Files:
/etc/java-6-openjdk/swing.properties changed [not included]

-- no debconf information

Message #10 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Tshepang Lekhonkhobe <tshepang@gmail.com>

To: Debian Bug Tracking System <632794@bugs.debian.org>

Subject: Re: Fails to find libnss3.so after multi-arch change in version 3.12.10-2 of libnss3-1d

Date: Thu, 07 Jul 2011 14:16:58 +0200

Package: openjdk-6-jre-headless
Version: 6b18-1.8.7-5
Followup-For: Bug #632794

I'm getting the same issue. Does making a symlink work? It didn't for me, but it could
be unrelated. Here's what I get instead:

Exception stack is:
1. NSS initialization failed (java.io.IOException)
  sun.security.pkcs11.Secmod:216 (null)
2. Could not initialize NSS (java.security.ProviderException)
  sun.security.pkcs11.SunPKCS11:201 (null)
3. Error creating bean with name 'SslConnector': Invocation of init method failed; nested exception is java.security.ProviderException: Could not initialize NSS (org.springframework.beans.factory.BeanCreationException)
  org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory:1338 (null)
4. Initialisation Failure: Error creating bean with name 'SslConnector': Invocation of init method failed; nested exception is java.security.ProviderException: Could not initialize NSS (org.mule.api.lifecycle.InitialisationException)
  org.mule.registry.AbstractRegistry:76 (http://www.mulesource.org/docs/site/current2/apidocs/org/mule/api/lifecycle/InitialisationException.html)

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.39-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_ZA.utf8, LC_CTYPE=en_ZA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openjdk-6-jre-headless depends on:
ii  ca-certificates-java    20110531         Common CA certificates (JKS keysto
ii  java-common             0.40             Base of all Java packages
ii  libc6                   2.13-10          Embedded GNU C Library: Shared lib
ii  libcups2                1.4.6-11+b1      Common UNIX Printing System(tm) - 
ii  libfreetype6            2.4.4-2          FreeType 2 font engine, shared lib
ii  libgcc1                 1:4.6.1-2        GCC support library
ii  libjpeg62               6b1-1            The Independent JPEG Group's JPEG 
ii  liblcms1                1.18.dfsg-1.2+b4 Color management library
ii  libnss3-1d              3.12.10-2        Network Security Service libraries
ii  openjdk-6-jre-lib       6b18-1.8.7-5     OpenJDK Java runtime (architecture
ii  tzdata-java             2011h-3          time zone and daylight-saving time
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages openjdk-6-jre-headless recommends:
pn  icedtea-6-jre-cacao           <none>     (no description available)

Versions of packages openjdk-6-jre-headless suggests:
ii  libnss-mdns               0.10-3.1       NSS module for Multicast DNS name 
pn  sun-java6-fonts           <none>         (no description available)
ii  ttf-dejavu-extra          2.33-1         Vera font family derivate with add
pn  ttf-indic-fonts           <none>         (no description available)
pn  ttf-sazanami-gothic | ttf <none>         (no description available)
ii  ttf-sazanami-mincho       20040629-8     Sazanami Mincho Japanese TrueType 
ii  ttf-unfonts-core          1.0.2-080608-3 Un series Korean TrueType fonts
pn  ttf-wqy-microhei | ttf-wq <none>         (no description available)

-- no debconf information

Message #15 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Michail Bachmann <michail.bachmann@cms.hu-berlin.de>

To: Debian Bug Tracking System <632794@bugs.debian.org>

Subject: Re: Fails to find libnss3.so after multi-arch change in version 3.12.10-2 of libnss3-1d

Date: Tue, 12 Jul 2011 16:04:53 +0200

Package: openjdk-6-jre-headless
Version: 6b18-1.8.7-5
Followup-For: Bug #632794


Providing the correct path in /etc/java-6-openjdk/security/nss.cfg
fixes this error. You need to change the nssLibraryDirectory option from
"/usr/lib" to (on my system) "/usr/lib/i386-linux-gnu"

Since I am fairly new to this whole multi-arch thing I don't know a better 
(generally working) solution but this one Works For Me(tm).

HTH

CU Micha

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.39-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openjdk-6-jre-headless depends on:
ii  ca-certificates-java    20110531         Common CA certificates (JKS keysto
ii  java-common             0.40             Base of all Java packages
ii  libc6                   2.13-10          Embedded GNU C Library: Shared lib
ii  libcups2                1.4.6-11+b1      Common UNIX Printing System(tm) - 
ii  libfreetype6            2.4.4-2          FreeType 2 font engine, shared lib
ii  libgcc1                 1:4.6.1-3        GCC support library
ii  libjpeg62               6b1-2            Independent JPEG Group's JPEG runt
ii  liblcms1                1.18.dfsg-1.2+b4 Color management library
ii  libnss3-1d              3.12.10-2        Network Security Service libraries
ii  openjdk-6-jre-lib       6b18-1.8.7-5     OpenJDK Java runtime (architecture
ii  tzdata-java             2011h-3          time zone and daylight-saving time
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages openjdk-6-jre-headless recommends:
ii  icedtea-6-jre-cacao         6b18-1.8.7-5 Alternative JVM for OpenJDK, using

Versions of packages openjdk-6-jre-headless suggests:
ii  libnss-mdns                   0.10-3.1   NSS module for Multicast DNS name 
pn  sun-java6-fonts               <none>     (no description available)
ii  ttf-baekmuk                   2.2-3      Baekmuk series TrueType fonts
ii  ttf-dejavu-extra              2.33-1     Vera font family derivate with add
ii  ttf-indic-fonts               1:0.5.12   Metapackage for free Indian langua
ii  ttf-kochi-gothic              20030809-9 Kochi Subst Gothic Japanese TrueTy
ii  ttf-kochi-mincho              20030809-9 Kochi Subst Mincho Japanese TrueTy
ii  ttf-sazanami-gothic           20040629-8 Sazanami Gothic Japanese TrueType 
ii  ttf-sazanami-mincho           20040629-8 Sazanami Mincho Japanese TrueType 
pn  ttf-wqy-microhei | ttf-wqy-ze <none>     (no description available)

-- Configuration Files:
/etc/java-6-openjdk/security/nss.cfg changed:
name = NSS
nssLibraryDirectory = /usr/lib/i386-linux-gnu
nssDbMode = noDb
attributes = compatibility


-- no debconf information

Message #20 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Brian DeRocher <brian.derocher@noblis.org>

To: <632794@bugs.debian.org>

Subject: libnss3.so and Tomcat 6

Date: Tue, 12 Jul 2011 14:50:15 -0400

I had the same problem with Tomcat 6.  I set

nssLibraryDirectory = /usr/lib/x86_64-linux-gnu/

and got it working on my amd64 machine.

-- 
Brian DeRocher, Lead, Noblis
703.610.1589www.noblis.org
brian.derocher@noblis.org

Message #25 received at 632794@bugs.debian.org (full text, mbox, reply):

From: enteon@gmx.de

To: 632794@bugs.debian.org

Subject: Re: Fails to find libnss3.so after multi-arch change in version 3.12.10-2 of libnss3-1d

Date: Sat, 16 Jul 2011 17:59:31 +0200

Setting a symlink does in fact not work.

And here is a duplicate of this bug: http://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=634058
In short: JDownloader is affected by this bug.
and:
"It [the jre] should probably try to let the dynamic linker do its job.
Mike"

Message #30 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Adam Furmańczuk <adam.furmanczuk@fu-berlin.de>

To: 632794@bugs.debian.org

Subject: wrong path in nss.cfg

Date: Sun, 17 Jul 2011 15:30:23 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

editing etc/java-6-openjdk/security/nss.cfg
(as in reply #15, #16) suggested has done the trick


greats,

Adam
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4i4+8ACgkQefEEI87R1Dd3oACdF7i5MmSxzqEmwZfC7bDYrcLo
1isAniOOs2ZtGxlNmidZFSq6Tj9ME1zu
=nMfy
-----END PGP SIGNATURE-----

Message #37 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Sylvestre Ledru <sylvestre@debian.org>

To: 632794@bugs.debian.org

Cc: Tom Marble <tmarble@info9.net>, Niels Thykier <niels@thykier.net>

Subject: Fails to find libnss3.so

Date: Tue, 26 Jul 2011 11:36:07 +0200

Hi,

Looking at the source of the macros & configure, I am pretty confident
that a simple rebuild of the openjdk will fix this bug.

The path to the system library is detected by compiling on the fly a c
file and get the path to the multi arch libs
  $CC conftest.c
  syslibdir=`$LDD a.out | sed -n '/libc\.so./s,.*=> */\(@<:@^/@:>@*
\)/.*,\1,p'`

For example, on my laptop, the output is:
$ ldd a.out 
	linux-vdso.so.1 =>  (0x00007fff77fe1000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f2afa5ce000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f2afa973000)


Sylvestre

Message #42 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Ralf Jung <ralfjung-e@gmx.de>

To: Debian Bug Tracking System <632794@bugs.debian.org>

Subject: Re: openjdk fails to load nss

Date: Thu, 28 Jul 2011 13:52:26 +0200

Package: openjdk-6-jre
Version: 6b18-1.8.7-5
Followup-For: Bug #632794

I am experiencing the same issue. It can be fixed even easier though by just
removing the problematic line from the nss.cfg file - OpenJDK will then look
through the system library paths itself.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.39-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openjdk-6-jre depends on:
ii  libaccess-bridge-java-j 1.26.2-5         Java Access Bridge for GNOME (jni 
ii  libasound2              1.0.23-4         shared library for ALSA applicatio
ii  libc6                   2.13-10          Embedded GNU C Library: Shared lib
ii  libgif4                 4.1.6-9          library for GIF images (library)
ii  libjpeg62               6b1-1            The Independent JPEG Group's JPEG 
ii  libpng12-0              1.2.46-1         PNG library - runtime
ii  libpulse0               0.9.21-4.1       PulseAudio client libraries
ii  libx11-6                2:1.4.3-2        X11 client-side library
ii  libxext6                2:1.3.0-3        X11 miscellaneous extension librar
ii  libxi6                  2:1.4.3-3        X11 Input extension library
ii  libxrender1             1:0.9.6-2        X Rendering Extension client libra
ii  libxtst6                2:1.2.0-1        X11 Testing -- Record extension li
ii  openjdk-6-jre-headless  6b18-1.8.7-5     OpenJDK Java runtime, using Hotspo
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages openjdk-6-jre recommends:
pn  icedtea-netx                  <none>     (no description available)
ii  ttf-dejavu-extra              2.33-1     Vera font family derivate with add

Versions of packages openjdk-6-jre suggests:
pn  icedtea-plugin                <none>     (no description available)

-- no debconf information

Message #47 received at 632794@bugs.debian.org (full text, mbox, reply):

From: Ralf Jung <ralfjung-e@gmx.de>

To: 632794@bugs.debian.org

Subject: Bug fixed

Date: Thu, 29 Sep 2011 16:38:29 +0200

This bug has been fixed since I installed version 6b23~pre7-1, thanks a lot!

Kind regards,
Ralf

Message #52 received at 632794-done@bugs.debian.org (full text, mbox, reply):

From: "Damien Raude-Morvan" <drazzib@debian.org>

To: 632794-done@bugs.debian.org

Subject: Re: Bug#632794: openjdk-6-jre-headless: Fails to find libnss3.so after multi-arch change in version 3.12.10-2 of libnss3-1d

Date: Sat, 1 Oct 2011 12:09:56 +0200

Version: 6b23~pre7-1

Le mercredi 06 juillet 2011 02:01:47, vous avez écrit :
> Package: openjdk-6-jre-headless
> Version: 6b18-1.8.7-5
> Severity: important
[...]
> Prior to version 3.12.10-2 of libnss3-1d, libnss3.so was located in
> /usr/lib, where as from that version onwards multi-arch layout is
> used, so for example on my amd64 machine it would be in
> /usr/lib/x86_64-linux-gnu/. Running the java program "Koala", a client for
> the "Evo" online meeting system (http://evo.caltech.edu/evoGate/) rusults
> in java.io.FileNotFoundException for /usr/lib/libnss3.so

Fixed in 6b23~pre7-1

Thanks,
-- 
Damien - Debian Developper
http://wiki.debian.org/DamienRaudeMorvan

Send a report that this bug log contains spam.