Bug 260161 - jpackage-utils provides rebuild-security-providers and thus prevents using jpackage
Summary: jpackage-utils provides rebuild-security-providers and thus prevents using jp...
Alias: None
Product: Fedora
Classification: Fedora
Component: jpackage-utils
Version: 7
Hardware: All
OS: All
Target Milestone: ---
Assignee: Thomas Fitzsimmons
QA Contact: Fedora Extras Quality Assurance
: 441104 (view as bug list)
Depends On:
TreeView+ depends on / blocked
Reported: 2007-08-28 13:28 UTC by Mary Ellen Foster
Modified: 2009-06-25 21:12 UTC (History)
7 users (show)

Fixed In Version: 1.7.3-1jpp.4.fc9
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2008-01-22 19:58:28 UTC
Type: ---

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
JPackage 289 0 None None None Never

Description Mary Ellen Foster 2007-08-28 13:28:30 UTC
Description of problem:
If I try to use jpackage.org packages on Fedora 7, just about nothing will
install because JPackage has a newer jpackage-utils that doesn't provide

The JPackage people say that this isn't their problem, that Fedora shouldn't
ever have put an extra program into jpackage-utils at all. (See

Is it possible to split the program out into its own package somehow?

Version-Release number of selected component (if applicable):
(JPackage has jpackage-utils-1.7.3-2jpp)

How reproducible:

Steps to Reproduce:
1. Enable JPackage repository
2. Try to "yum update", or to install anything
Actual results:
Error: Missing Dependency: /usr/bin/rebuild-security-providers is
needed by package java-1.5.0-gcj

Expected results:
Successful interoperability

Additional info:

Comment 1 Nick Pierpoint 2007-10-19 09:02:32 UTC
I was just about to report the same thing. I've asked on #jpackage and the
strong view is that Fedora is screwing around with their packages.

What is the reason for including rebuild-security-providers? What does it do?
I'm sure it's there for a good reason and I'd just like to understand.

Perhaps Fedora is seeking to package a current stable view of JPackage? That
*would* be fine if they maintained interoperability with JPackage but they don't
- it makes it impossible to install any JPackage-specific package.

JPackage has made great strides in making Java development on Linux a real
possibility - Fedora and RedHat should do everything they can to support them.

Comment 2 Thomas Fitzsimmons 2007-10-19 19:39:13 UTC
(In reply to comment #1)

> What is the reason for including rebuild-security-providers? What does it do?

From the script's header:

# Rebuild the list of security providers in classpath.security

In detail: the script registers external security providers with libgcj.  See
Fedora's bouncycastle and java-1.5.0-gcj packages, for usage examples.

I did try to send this change upstream but I got no response:


Now that we're shipping IcedTea we can fix the problem properly, by adding
/etc/java/security/security.d support in the JRE itself.

In the short term, since the script seems to be annoying JPackage users, I guess
I could in-line it wherever it is used, which is now only bouncycastle and
java-1.5.0-gcj (previously gnu-crypto and jessie used it, but they've been
merged into libgcj).

Comment 3 Nick Pierpoint 2007-10-20 17:19:55 UTC
The short-term in-line approach seems like a good one, and having the IcedTea
route in the medium-term would be great.

Thanks very much for responding.

Comment 4 Luis Villa 2007-11-03 13:22:55 UTC
I'd personally mark this as high priority, since it makes using jpackage

Comment 5 Thomas Fitzsimmons 2008-01-22 19:58:28 UTC
I inlined rebuild-security-providers in java-1.5.0-gcj and bouncycastle, then
removed the script from jpackage-utils.  Fixed in Rawhide:


Comment 6 Thomas Fitzsimmons 2008-04-10 15:44:30 UTC
*** Bug 441104 has been marked as a duplicate of this bug. ***

Comment 7 Sergio Basto 2008-07-19 11:56:13 UTC
still can't install java-1.5.0-gcj in fc8 , with jpackage-utils-1.7.3-1jpp.4.fc9 

Comment 8 Aleksander Adamowski 2009-04-06 11:14:36 UTC
I have the same problem on RHEL 5.3:

# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 5.3 (Tikanga)

# yum install eclipse-jdt eclipse-subclipse
--> Finished Dependency Resolution
java-1.4.2-gcj-compat- from rhel-x86_64-server-5 has depsolving problems
  --> Missing Dependency: /usr/bin/rebuild-security-providers is needed by package java-1.4.2-gcj-compat- (rhel-x86_64-server-5)
Error: Missing Dependency: /usr/bin/rebuild-security-providers is needed by package java-1.4.2-gcj-compat- (rhel-x86_64-server-5)

# rpm -q jpackage-utils

# yum provides /usr/bin/rebuild-security-providers
Loaded plugins: fastestmirror, rhnplugin, security
Loading mirror speeds from cached hostfile
 * epel: ftp.icm.edu.pl
 * jpackage-rhel: ftp.pbone.net
 * jpackage-generic: ftp.pbone.net
jpackage-utils-1.7.3-1jpp.2.el5.noarch : JPackage utilities
Matched from:
Filename    : /usr/bin/rebuild-security-providers

Could the same fix be done for the RHEL 5 java-1.4.2-gcj package?

Comment 9 Daniel Qarras 2009-04-22 19:53:09 UTC
I was also hit by this on RHEL 5.3. I opened a new bug for this:


I also included the current workaround I am using:


Comment 10 Craig 2009-06-25 21:12:32 UTC
I comment on bug 497213 to this effect:

jpackage 1.7 works now, but jpackage 5.0 is still broken in the same way... so it's still impossible to use jpackage 5.0

Note You need to log in before you can comment on or make changes to this bug.