#1144745 ssl-cert: fails to upgrade 1.1.3 --> 1.2.0, likely a debconf issue

#1144745#5
Date:
2026-08-18 14:31:16 UTC
From:
To:
Hi,

submitting as important as I'm not sure it affects everybody
(would be Rc in case): recent upgrade of ssl-cert fails on my system
---------------------------------

# apt-get install ssl-cert
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Solving dependencies... Done
The following packages were automatically installed and are no longer required:
  bluez firebird-utils firebird3.0-common firebird3.0-common-doc firebird3.0-server-core firebird3.0-utils firebird4.0-common firebird4.0-common-doc
  firebird4.0-server-core firebird4.0-utils libboost-context1.90.0 libboost-iostreams1.83.0 libboost-thread1.55.0 libboost-thread1.83.0 libbox2d2 libcdb1
  libcdr-0.1-1 libel-api-java libfbclient2 libfreehand-0.1-1 libhsqldb1.8.0-java libib-util libiperf0 libjsp-api-java libllvm15 libllvm19 libmspub-0.1-1
  libnss-nisplus libpagemaker-0.0-0 libqxp-0.0-0 libreoffice-uiconfig-base libreoffice-uiconfig-draw libreoffice-uiconfig-impress libservlet-api-java
  libservlet3.1-java libsndio6.1 libtlsrpt0 libtokyocabinet9t64 libtomcrypt1 libtommath1 libvisio-0.1-1 libwebsocket-api-java libzmf-0.0-0 msmtp
  qml6-module-sso-onlineaccounts rpcsvc-proto
Use 'apt autoremove' to remove them.
The following packages will be upgraded:
  ssl-cert
1 upgraded, 0 newly installed, 0 to remove and 427 not upgraded.
Need to get 0 B/17.0 kB of archives.
After this operation, 3,072 B of additional disk space will be used.
Retrieving bug reports... Done
Parsing Found/Fixed information... Done
Reading changelogs... Done
Preconfiguring packages ...
(Reading database… 832841 files and directories currently installed.)
Preparing to unpack …/ssl-cert_1.2.0_all.deb…
Unpacking ssl-cert (1.2.0) over (1.1.3)…
Setting up ssl-cert (1.2.0)…
ssl-cert group already exists, skipping line
dpkg: error processing package ssl-cert (--configure):
 old ssl-cert package postinst maintainer script subprocess failed with exit status 20
Processing triggers for man-db (2.13.1-1)…
Processing triggers for runit (2.3.1-4)…
Runit triggered upgrade: setup
Runit triggered upgrade: upgrade
Processing triggers for runit-user-session (0.14.0)…
sync runit user services for ombra ..
Runit triggered upgrade: setup
Runit triggered upgrade: upgrade
.. done
Errors were encountered while processing:
 ssl-cert
======  How can you help?  (doc: https://wiki.debian.org/how-can-i-help ) ======
----- Show old opportunities as well as new ones: how-can-i-help --old ----- needrestart is being skipped since dpkg has failed E: Sub-process /usr/bin/dpkg returned an error code (1)
----------------------------- there is likely an issue with debconf or something, can't tell for sure but I had to dowgrade to 1.1.3 (which works fine, but maybe only because it does not run debconf on downgrade..) if I run the postinstall it blocks and lines following 14 are not run, for example I don't see 'make-ssl-cert' invoked below sh -x /var/lib/dpkg/info/ssl-cert.postinst configure 1.1.3 + set -e + [ configure = configure ] + systemd-sysusers ssl-cert.conf ssl-cert group already exists, skipping line + . /usr/share/debconf/confmodule + _DEBCONF_IMPL= + [ ] + [ -x /usr/share/debconf/frontend ] + [ ! -h /usr/share/debconf/frontend ] + _DEBCONF_IMPL=debconf + [ ! ] + [ debconf = cdebconf ] + export PERL_DL_NONLAZY=1 + exec /usr/share/debconf/frontend /var/lib/dpkg/info/ssl-cert.postinst configure 1.1.3 Best, Lorenzo