# Reconciliation with Wikidata fails (snap): "the trustAnchors parameter must be non-empty"

**URL:** <https://forum.openrefine.org/t/reconciliation-with-wikidata-fails-snap-the-trustanchors-parameter-must-be-non-empty/2752>\
**Category:** Support and Helpdesk\
**Created:** [March 15, 2026, 9:01pm UTC](https://forum.openrefine.org/t/reconciliation-with-wikidata-fails-snap-the-trustanchors-parameter-must-be-non-empty/2752 "2026-03-15T21:01:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pjotrek-b](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.openrefine.org/pjotrek-b/32/1842_2.png) [@pjotrek-b](https://forum.openrefine.org/u/pjotrek-b)\
**Post date:** [March 15, 2026, 9:01pm UTC](https://forum.openrefine.org/t/reconciliation-with-wikidata-fails-snap-the-trustanchors-parameter-must-be-non-empty/2752/1 "2026-03-15T21:01:07Z")

</div>

Hi everyone 🙂

I’m new to OpenRefine, and I’ve installed as [snap](https://snapcraft.io/openrefine) (v3.9.5) on Xubuntu 20.04.

All is running well, but when I select reconcile against wikidata default source, I get this error:

> Guess Types query failed error : javax.net.ssl.SSLException: (internal\_error) Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

I’ve done some homework and it seems that the OpenRefine snap is missing “cacerts” in `/snap/openrefine/current/usr/lib/jvm/java-21-openjdk-amd64/lib/security\`?

I know this is a snap issue, but I wasn’t sure where to report this issue. Is it okay here?  
I’ve tried copying my /etc/ssl/cacerts over, but get a “Read-only file system” error in the snap tree.

I’m surprised to be the only one having this issue with the snap though?

Grateful for any suggestions on how to fix this?  
Thanks!

---

<div class="post-metadata">

**Author:** ![pjotrek-b](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.openrefine.org/pjotrek-b/32/1842_2.png) [@pjotrek-b](https://forum.openrefine.org/u/pjotrek-b)\
**Post date:** [March 15, 2026, 9:06pm UTC](https://forum.openrefine.org/t/reconciliation-with-wikidata-fails-snap-the-trustanchors-parameter-must-be-non-empty/2752/2 "2026-03-15T21:06:40Z")

</div>

> **[Add a custom ca-cert to a java truststore in a snap](https://forum.snapcraft.io/t/add-a-custom-ca-cert-to-a-java-truststore-in-a-snap/38960/16)**
>
> I don’t remember off the top of my head. The problem with /etc is that it’s a literal bind-mount from real host /etc. Making things writable there is tricky, creating new entries is tricky. We do some “creative” things to work around this, but...

Possibly related snapcraft forum entry about missing or broken cacerts symlink inside the snap sandbox.

---

<div class="post-metadata">

**Author:** ![tfmorris](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.openrefine.org/tfmorris/32/17_2.png) [@tfmorris](https://forum.openrefine.org/u/tfmorris)\
**Post date:** [March 15, 2026, 10:32pm UTC](https://forum.openrefine.org/t/reconciliation-with-wikidata-fails-snap-the-trustanchors-parameter-must-be-non-empty/2752/3 "2026-03-15T22:32:02Z")

</div>

Welcome to the forum. Sorry to hear that you're having trouble, but we don't really have anything to do with the packaging on most distributions, so this isn't something we're in a position to help with. Good luck!