Extracting sun/security/validator/KeyStores.class from the java 8u212 rt.jar and updating the java 8u222 rt.jar solves the problem.
Eg. on the 8u222 version do the following after extracting KeyStores.class from the 8u212 rt.jar jar uf /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/rt.jar sun/security/validator/KeyStores.class -- You received this bug notification because you are a member of OpenJDK, which is subscribed to openjdk-8 in Ubuntu. https://bugs.launchpad.net/bugs/1838645 Title: openjdk Version: 8u222-b10-1ubuntu1~16.04.1 missing sun/security/validator/KeyStores.class Status in openjdk-8 package in Ubuntu: New Bug description: As per the summary package openjdk-8-jre-headless Version: 8u222-b10-1ubuntu1~16.04.1 is missing sun/security/validator/KeyStores.class from /usr/lib/jvm/java-8 -openjdk-amd64/jre/lib/rt.jar Relevant jars for 8u222 are as follows $ jar tvf /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/rt.jar |grep 'sun/security/validator' 858 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/CADistrustPolicy$1.class 790 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/CADistrustPolicy$2.class 2751 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/CADistrustPolicy.class 7291 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/EndEntityChecker.class 10709 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/PKIXValidator.class 9588 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/SimpleValidator.class 4582 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/SymantecTLSPolicy.class 1398 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/TrustStoreUtil.class 4562 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/Validator.class 2224 Thu Jul 18 20:27:16 SAST 2019 sun/security/validator/ValidatorException.class Relevant jars for previous version 8u212 are as follows $ jar tvf /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/rt.jar |grep 'sun/security/validator' 858 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/CADistrustPolicy$1.class 790 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/CADistrustPolicy$2.class 2751 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/CADistrustPolicy.class 7291 Fri Apr 26 02:04:28 SAST 2019 sun/security/validator/EndEntityChecker.class 1295 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/KeyStores.class 10709 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/PKIXValidator.class 9588 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/SimpleValidator.class 4582 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/SymantecTLSPolicy.class 4557 Fri Apr 26 02:04:28 SAST 2019 sun/security/validator/Validator.class 2224 Fri Apr 26 02:04:30 SAST 2019 sun/security/validator/ValidatorException.class Looks like KeyStores.class has been replaced by TrustStoreUtil.class in 8u222 This causes the following issue after upgrading from 8u212 to 8u222 Exception in thread "main" java.lang.NoClassDefFoundError: sun/security/validator/KeyStores Ubuntu release details are as follows $ lsb_release -rd Description: Ubuntu 16.04.6 LTS Release: 16.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openjdk-8/+bug/1838645/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~openjdk Post to : openjdk@lists.launchpad.net Unsubscribe : https://launchpad.net/~openjdk More help : https://help.launchpad.net/ListHelp