Java security Signature Exception : signature does not match on a new install

I struggle to get jitsi running since last Thursday, without success. I did make a new install purging everything I could at least 5 times. Ubuntu 18.04, Apache2.4. It has been working at the begining, after fixing a lot of problems, but only with two peoples. When a third personn entered the room, everything was stopping. So my new installations.
I can open the jitsi application. But when I open a room, it opens and as soon as it tries to start the camera, I obtain a crash, with "unfortunately something went wrong… "
Here is the output of the java consol (on Brave, without protections)

TIME) index.html loaded: 806.4300000551157
Logger.js:154 2020-04-13T19:44:58.669Z [modules/browser/BrowserCapabilities.js] : This appears to be chrome, ver: 80.0.3987.163
Logger.js:154 2020-04-13T19:44:59.052Z [index.web] <HTMLDocument.>: (TIME) document ready: 1216.95000003092
Logger.js:154 2020-04-13T19:44:59.282Z [modules/UI/videolayout/VideoLayout.js] <Object.changeUserAvatar>: Missed avatar update - no small video yet for undefined
o @ Logger.js:154
changeUserAvatar @ VideoLayout.js:538
g.refreshAvatarDisplay @ UI.js:451
G @ middleware.js:363
(anonymous) @ middleware.js:122
dispatch @ redux.js:636
(anonymous) @ middleware.js:249
(anonymous) @ middleware.js:63
dispatch @ redux.js:636
(anonymous) @ actions.js:29
(anonymous) @ index.js:11
***** I deleted a bunch of similar lines*****
(anonymous) @ middleware.js:24
(anonymous) @ middleware.js:61
(anonymous) @ middleware.js:158
(anonymous) @ middleware.js:42
(anonymous) @ middleware.js:23
(anonymous) @ middleware.js:106
(anonymous) @ middleware.js:133
_openURL @ AbstractApp.js:118
(anonymous) @ AbstractApp.js:52
Promise.then (async)
componentDidMount @ AbstractApp.js:49
Gs @ react-dom.production.min.js:238
t.unstable_runWithPriority @ scheduler.production.min.js:20
fi @ react-dom.production.min.js:113
Ws @ react-dom.production.min.js:230
Ps @ react-dom.production.min.js:204
fc @ react-dom.production.min.js:263
hc @ react-dom.production.min.js:263
(anonymous) @ react-dom.production.min.js:272
Bs @ react-dom.production.min.js:208
_c @ react-dom.production.min.js:272
render @ react-dom.production.min.js:273
(anonymous) @ index.web.js:25
Show 181 more frames
Logger.js:154 2020-04-13T19:45:00.885Z [modules/xmpp/xmpp.js] <t.value>: (TIME) Strophe connected: 3049.840000050608
Logger.js:154 2020-04-13T19:45:00.886Z [modules/xmpp/xmpp.js] <t.value>: My Jabber ID: exvs33qaf3i7fva1@visio.mydomain.com/Zs5UntRq
Logger.js:154 2020-04-13T19:45:00.895Z [conference.js] initialized with 2 local tracks
Logger.js:154 2020-04-13T19:45:00.906Z [modules/xmpp/xmpp.js] <t.value>: JID exvs33qaf3i7fva1@visio.mydomain.com/Zs5UntRq using MUC nickname 43a0fdc0
Logger.js:154 2020-04-13T19:45:00.908Z [modules/xmpp/ChatRoom.js] : Joined MUC as essai2@conference.mydomain.com/43a0fdc0
Logger.js:154 2020-04-13T19:45:00.910Z [modules/e2eping/e2eping.js] : Initializing e2e ping; pingInterval=10000, analyticsInterval=60000.
Logger.js:154 2020-04-13T19:45:00.912Z [modules/connectivity/ParticipantConnectionStatus.js] : RtcMuteTimeout set to: 10000
Logger.js:154 2020-04-13T19:45:00.919Z [modules/statistics/AvgRTPStatsReporter.js] : Avg RTP stats will be calculated every 15 samples
Logger.js:154 2020-04-13T19:45:00.921Z [JitsiConference.js] : backToP2PDelay: 5
Logger.js:154 2020-04-13T19:45:00.960Z [JitsiConference.js] <oe._doReplaceTrack>: _doReplaceTrack - no JVB JingleSession
Logger.js:154 2020-04-13T19:45:00.962Z [JitsiConference.js] <oe._doReplaceTrack>: _doReplaceTrack - no P2P JingleSession
Logger.js:154 2020-04-13T19:45:00.965Z [JitsiConference.js] <oe._doReplaceTrack>: _doReplaceTrack - no JVB JingleSession
Logger.js:154 2020-04-13T19:45:00.967Z [JitsiConference.js] <oe._doReplaceTrack>: _doReplaceTrack - no P2P JingleSession
Logger.js:154 2020-04-13T19:45:00.970Z [modules/remotecontrol/RemoteControl.js] <d.init>: Initializing remote control.
Logger.js:154 2020-04-13T19:45:00.971Z [modules/xmpp/moderator.js] <l.setFocusUserJid>: Focus jid set to: undefined
Logger.js:154 2020-04-13T19:45:00.974Z [modules/xmpp/moderator.js] <l.createConferenceIq>: Session ID: null machine UID: 28715053cc02e392c45ec440269e585d
Logger.js:154 2020-04-13T19:45:00.991Z [features/base/tracks] Replace audio track - unmuted
Logger.js:154 2020-04-13T19:45:01.045Z [features/base/tracks] Replace video track - unmuted
Logger.js:154 2020-04-13T19:45:01.169Z [JitsiMeetJS.js] <Object.getGlobalOnErrorHandler>: UnhandledError: null Script: null Line: null Column: null StackTrace: Error: Focus error, retry after 1000
at l._allocateConferenceFocusError (moderator.js:446)
at moderator.js:373
at O.Handler.handler (strophe.umd.js:2716)
at O.Handler.run (strophe.umd.js:1875)
at strophe.umd.js:3157
at Object.forEachChild (strophe.umd.js:830)
at O.Connection._dataRecv (strophe.umd.js:3146)
at I.Bosh._onRequestStateChange (strophe.umd.js:5012)
o @ Logger.js:154
getGlobalOnErrorHandler @ JitsiMeetJS.js:612
window.onerror @ middleware.js:100
callErrorHandler @ GlobalOnErrorHandler.js:61
l._allocateConferenceFocusError @ moderator.js:446
(anonymous) @ moderator.js:373
(anonymous) @ strophe.umd.js:2716
run @ strophe.umd.js:1875
(anonymous) @ strophe.umd.js:3157
forEachChild @ strophe.umd.js:830
_dataRecv @ strophe.umd.js:3146
_onRequestStateChange @ strophe.umd.js:5012
XMLHttpRequest.send (async)
u @ strophe.umd.js:5123
_processRequest @ strophe.umd.js:5137
_throttledRequestHandler @ strophe.umd.js:5290
_onIdle @ strophe.umd.js:4901
_onIdle @ strophe.umd.js:3881
flush @ strophe.umd.js:2599
value @ XmppConnection.js:274
(anonymous) @ moderator.js:379
l.allocateConferenceFocus @ moderator.js:365
(anonymous) @ ChatRoom.js:183
value @ ChatRoom.js:176
oe.join @ JitsiConference.js:465
connect @ conference.js:395
(anonymous) @ conference.js:732
(anonymous) @ conference.js:731
Promise.then (async)
init @ conference.js:668
(anonymous) @ actions.web.js:30
Promise.then (async)
(anonymous) @ actions.web.js:29
(anonymous) @ index.js:11
(anonymous) @ middleware.js:41
(anonymous) @ middleware.js:27
(anonymous) @ middleware.js:13
(anonymous) @ middleware.js:30
(anonymous) @ middleware.js:39
(anonymous) @ middleware.js:22
(anonymous) @ middleware.js:22
(anonymous) @ middleware.js:67
(anonymous) @ middleware.js:19

In the jvb log I found this, which looks like an error (still java)

OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.

2020-04-13 21:28:25.837 INFOS: [1] NewConfig$1.invoke#88: Loaded NewConfig with origin: merge of system properties,system properties,reference.conf @ jar:file:/usr/share/jitsi-videobridge/jitsi-videobridge.jar!/reference.conf: 1,reference.conf @ jar:file:/usr/share/jitsi-videobridge/lib/jitsi-media-transform-1.0-139-g33e0a49.jar!/reference.conf: 1

2020-04-13 21:28:25.873 INFOS: [1] LegacyConfigFileLoader$Companion.load#40: Attempting to load legacy config file at path /etc/jitsi, videobridge, sip-communicator.properties

2020-04-13 21:28:25.876 INFOS: [1] LegacyConfigFileLoader$Companion.load#40: Attempting to load legacy config file at path /etc/jitsi, videobridge, sip-communicator.properties

2020-04-13 21:28:25.878 INFOS: [1] JitsiConfig$Companion.reload#40: Reloading.

2020-04-13 21:28:25.907 INFOS: [1] NewConfig$1.invoke#88: Loaded NewConfig with origin: merge of system properties,system properties,reference.conf @ jar:file:/usr/share/jitsi-videobridge/jitsi-videobridge.jar!/reference.conf: 1,reference.conf @ jar:file:/usr/share/jitsi-videobridge/lib/jitsi-media-transform-1.0-139-g33e0a49.jar!/reference.conf: 1

2020-04-13 21:28:25.907 INFOS: [1] LegacyConfigFileLoader$Companion.load#40: Attempting to load legacy config file at path /etc/jitsi, videobridge, sip-communicator.properties

2020-04-13 21:28:25.908 INFOS: [1] LegacyConfigFileLoader$Companion.load#40: Attempting to load legacy config file at path /etc/jitsi, videobridge, sip-communicator.properties

2020-04-13 21:28:25.966 INFOS: [12] ConfigurationActivator.start#45: Registered the LegacyConfigurationServiceShim in OSGi.

2020-04-13 21:28:25.975 INFOS: [12] AbstractVersionActivator.start#91: VersionService registered: JVB 2.1.169-ga28eb88e

2020-04-13 21:28:26.006 INFOS: [12] AbstractJettyBundleActivator.start#613: Not starting the Jetty service for org.jitsi.videobridge.rest.RESTBundleActivator(port=8080)

2020-04-13 21:28:26.015 INFOS: [12] AbstractJettyBundleActivator.start#613: Not starting the Jetty service for org.jitsi.videobridge.rest.PublicRESTBundleActivator(port=-1)

2020-04-13 21:28:26.017 INFOS: [12] AbstractJettyBundleActivator.start#613: Not starting the Jetty service for org.jitsi.videobridge.rest.PublicClearPortRedirectBundleActivator(port=8080)

2020-04-13 21:28:26.222 INFOS: [12] UlimitCheck.printUlimits#115: Running with open files limit 65000 (hard 65000), thread limit 65000 (hard 65000).

2020-04-13 21:28:26.226 INFOS: [12] VideobridgeExpireThread.start#92: Starting with 60 second interval.

2020-04-13 21:28:26.235 AVERTISSEMENT: [12] Videobridge.start#918: No authorized source regexp configured. Will accept requests from any source.

2020-04-13 21:28:26.303 INFOS: [18] Videobridge.createConference#326: create_conf, id=89f301c72d5c6d54 gid=null logging=false

2020-04-13 21:28:26.334 INFOS: [18] TaskPools.#81: TaskPools detected 2 processors, creating the CPU pool with that many threads

Can’t load log handler “java.util.logging.FileHandler”

java.io.FileNotFoundException: /tmp/jvb-series.log (Permission denied)

java.io.FileNotFoundException: /tmp/jvb-series.log (Permission denied)

at java.base/java.io.FileOutputStream.open0(Native Method)

at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)

at java.base/java.io.FileOutputStream.(FileOutputStream.java:237)

at java.base/java.io.FileOutputStream.(FileOutputStream.java:158)

at java.logging/java.util.logging.FileHandler.open(FileHandler.java:214)

at java.logging/java.util.logging.FileHandler.rotate(FileHandler.java:730)

at java.logging/java.util.logging.FileHandler.openFiles(FileHandler.java:590)

at java.logging/java.util.logging.FileHandler.(FileHandler.java:278)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)

at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)

at java.base/java.lang.Class.newInstance(Class.java:584)

at java.logging/java.util.logging.LogManager.createLoggerHandlers(LogManager.java:1000)

at java.logging/java.util.logging.LogManager$4.run(LogManager.java:970)

at java.logging/java.util.logging.LogManager$4.run(LogManager.java:966)

at java.base/java.security.AccessController.doPrivileged(Native Method)

at java.logging/java.util.logging.LogManager.loadLoggerHandlers(LogManager.java:966)

at java.logging/java.util.logging.LogManager.addLogger(LogManager.java:1199)

at java.logging/java.util.logging.LogManager.demandLogger(LogManager.java:525)

at java.logging/java.util.logging.LogManager$LoggerContext.demandLogger(LogManager.java:643)

at java.logging/java.util.logging.LogManager$LoggerContext.processParentHandlers(LogManager.java:882)

at java.logging/java.util.logging.LogManager$LoggerContext.addLocalLogger(LogManager.java:807)

at java.logging/java.util.logging.LogManager$LoggerContext.addLocalLogger(LogManager.java:755)

at java.logging/java.util.logging.LogManager.addLogger(LogManager.java:1196)

at java.logging/java.util.logging.LogManager.demandLogger(LogManager.java:525)

at java.logging/java.util.logging.LogManager.demandLogger(LogManager.java:515)

at java.logging/java.util.logging.Logger.demandLogger(Logger.java:654)

at java.logging/java.util.logging.Logger.getLogger(Logger.java:717)

at java.logging/java.util.logging.Logger.getLogger(Logger.java:701)

at org.jitsi.utils.logging.Logger.getLogger(Logger.java:52)

at org.jitsi.utils.logging.TimeSeriesLogger.getTimeSeriesLogger(TimeSeriesLogger.java:45)

at org.jitsi.nlj.rtp.bandwidthestimation.BandwidthEstimator.(BandwidthEstimator.kt:47)

at org.jitsi.nlj.rtp.bandwidthestimation.GoogleCcEstimator.(GoogleCcEstimator.kt:37)

at org.jitsi.nlj.Transceiver.(Transceiver.kt:86)

at org.jitsi.videobridge.Endpoint.(Endpoint.java:221)

at org.jitsi.videobridge.Endpoint.(Endpoint.java:293)

at org.jitsi.videobridge.Conference.createLocalEndpoint(Conference.java:692)

at org.jitsi.videobridge.health.Health.check(Health.java:83)

at org.jitsi.videobridge.health.Health.doCheck(Health.java:161)

at org.jitsi.videobridge.health.Health.doRun(Health.java:266)

at org.jitsi.utils.concurrent.PeriodicRunnableWithObject.run(PeriodicRunnableWithObject.java:87)

at org.jitsi.utils.concurrent.RecurringRunnableExecutor.run(RecurringRunnableExecutor.java:216)

at org.jitsi.utils.concurrent.RecurringRunnableExecutor.runInThread(RecurringRunnableExecutor.java:292)

at org.jitsi.utils.concurrent.RecurringRunnableExecutor.access$000(RecurringRunnableExecutor.java:36)

at org.jitsi.utils.concurrent.RecurringRunnableExecutor$1.run(RecurringRunnableExecutor.java:328)

2020-04-13 21:28:26.622 INFOS: [12] JitsiConfig$Companion.reload#40: Reloading.

2020-04-13 21:28:26.639 INFOS: [12] NewConfig$1.invoke#88: Loaded NewConfig with origin: merge of system properties,system properties,reference.conf @ jar:file:/usr/share/jitsi-videobridge/jitsi-videobridge.jar!/reference.conf: 1,reference.conf @ jar:file:/usr/share/jitsi-videobridge/lib/jitsi-media-transform-1.0-139-g33e0a49.jar!/reference.conf: 1

2020-04-13 21:28:26.639 INFOS: [12] LegacyConfigFileLoader$Companion.load#40: Attempting to load legacy config file at path /etc/jitsi, videobridge, sip-communicator.properties

2020-04-13 21:28:26.640 INFOS: [12] LegacyConfigFileLoader$Companion.load#40: Attempting to load legacy config file at path /etc/jitsi, videobridge, sip-communicator.properties

2020-04-13 21:28:26.719 INFOS: [12] OctoRelayService.start#62: Octo relay is disabled.

2020-04-13 21:28:27.159 INFOS: [24] org.ice4j.ice.harvest.StunMappingCandidateHarvester.discover: Discovered public address 92.243.9.115:46242/udp from STUN server 15.236.117.166:443/udp using local address 172.17.0.1:0/udp

2020-04-13 21:28:27.161 INFOS: [25] org.ice4j.ice.harvest.StunMappingCandidateHarvester.discover: Discovered public address 92.243.9.115:44686/udp from STUN server 15.236.117.166:443/udp using local address 92.243.9.115:0/udp

2020-04-13 21:28:27.162 INFOS: [20] org.ice4j.ice.harvest.MappingCandidateHarvesters.initialize: Using org.ice4j.ice.harvest.StunMappingCandidateHarvester, face=/172.17.0.1, mask=/92.243.9.115

2020-04-13 21:28:27.162 INFOS: [20] org.ice4j.ice.harvest.MappingCandidateHarvesters.initialize: Using org.ice4j.ice.harvest.StunMappingCandidateHarvester, face=/92.243.9.115, mask=/92.243.9.115

2020-04-13 21:28:27.163 INFOS: [20] org.ice4j.ice.harvest.MappingCandidateHarvesters.initialize: Initialized mapping harvesters (delay=508ms). stunDiscoveryFailed=false

2020-04-13 21:28:27.168 INFOS: [18] org.ice4j.ice.harvest.AbstractUdpListener.: Initialized AbstractUdpListener with address 172.17.0.1:10000/udp. Receive buffer size 10485760 (asked for 10485760)

2020-04-13 21:28:27.170 INFOS: [18] org.ice4j.ice.harvest.SinglePortUdpHarvester.: Initialized SinglePortUdpHarvester with address 172.17.0.1:10000/udp

2020-04-13 21:28:27.170 INFOS: [18] org.ice4j.ice.harvest.AbstractUdpListener.: Initialized AbstractUdpListener with address [2001:4b98:dc0:41:216:3eff:fefb:5963]:10000/udp. Receive buffer size 10485760 (asked for 10485760)

2020-04-13 21:28:27.174 INFOS: [18] org.ice4j.ice.harvest.SinglePortUdpHarvester.: Initialized SinglePortUdpHarvester with address [2001:4b98:dc0:41:216:3eff:fefb:5963]:10000/udp

2020-04-13 21:28:27.174 INFOS: [18] org.ice4j.ice.harvest.AbstractUdpListener.: Initialized AbstractUdpListener with address 92.243.9.115:10000/udp. Receive buffer size 10485760 (asked for 10485760)

2020-04-13 21:28:27.178 INFOS: [18] org.ice4j.ice.harvest.SinglePortUdpHarvester.: Initialized SinglePortUdpHarvester with address 92.243.9.115:10000/udp

2020-04-13 21:28:28.387 AVERTISSEMENT: [22] [hostname=localhost id=shard] MucClient.lambda$getConnectAndLoginCallable$7#643: [MucClient id=shard hostname=localhost] error connecting

org.jivesoftware.smack.SmackException: javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.parsePackets(XMPPTCPConnection.java:1076)

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.access$300(XMPPTCPConnection.java:1000)

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader$1.run(XMPPTCPConnection.java:1016)

at java.base/java.lang.Thread.run(Thread.java:834)

Caused by: javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:320)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:258)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1332)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1207)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1150)

at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)

at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:177)

at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)

at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1151)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1062)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)

at org.jivesoftware.smack.tcp.XMPPTCPConnection.proceedTLSReceived(XMPPTCPConnection.java:810)

at org.jivesoftware.smack.tcp.XMPPTCPConnection.access$1200(XMPPTCPConnection.java:151)

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.parsePackets(XMPPTCPConnection.java:1071)

… 3 more

Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:369)

at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:275)

at java.base/sun.security.validator.Validator.validate(Validator.java:264)

at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1316)

… 16 more

Caused by: java.security.cert.CertPathValidatorException: signature check failed

at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)

at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:237)

at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:145)

at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:84)

at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309)

at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:364)

… 22 more

Caused by: java.security.SignatureException: Signature does not match.

at java.base/sun.security.x509.X509CertImpl.verify(X509CertImpl.java:456)

at java.base/sun.security.provider.certpath.BasicChecker.verifySignature(BasicChecker.java:166)

at java.base/sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:147)

at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)

… 27 more

And similar message in jicofo.log

Jicofo 2020-04-13 22:01:06.162 AVERTISSEMENT: [848] org.jivesoftware.smack.AbstractXMPPConnection.callConnectionClosedOnErrorListener() Connection XMPPTCPConnection[not-authenticated] (0) closed with error

javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:320)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:258)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1332)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1207)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1150)

at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)

at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:177)

at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)

at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1151)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1062)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)

at org.jivesoftware.smack.tcp.XMPPTCPConnection.proceedTLSReceived(XMPPTCPConnection.java:810)

at org.jivesoftware.smack.tcp.XMPPTCPConnection.access$1200(XMPPTCPConnection.java:151)

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.parsePackets(XMPPTCPConnection.java:1071)

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.access$300(XMPPTCPConnection.java:1000)

at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader$1.run(XMPPTCPConnection.java:1016)

at java.base/java.lang.Thread.run(Thread.java:834)

Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:369)

at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:275)

at java.base/sun.security.validator.Validator.validate(Validator.java:264)

at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222)

at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)

at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1316)

… 16 more

Caused by: java.security.cert.CertPathValidatorException: signature check failed

at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)

at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:237)

at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:145)

at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:84)

at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309)

at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:364)

… 22 more

Caused by: java.security.SignatureException: Signature does not match.

at java.base/sun.security.x509.X509CertImpl.verify(X509CertImpl.java:422)

at java.base/sun.security.provider.certpath.BasicChecker.verifySignature(BasicChecker.java:166)

at java.base/sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:147)

at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)

… 27 more

In prosody log I have other error lines

Apr 13 21:29:24 portmanager error Failed to open server port 5269 on *, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:24 portmanager error Failed to open server port 5269 on ::, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:24 certmanager error SSL/TLS: Failed to load ‘/etc/prosody/certs/localhost.key’: Check that the permissions allow Prosody to read this file. (for localhost)
Apr 13 21:29:24 localhost:tls error Error creating context for c2s: error loading private key (Permission denied)
Apr 13 21:29:24 certmanager error SSL/TLS: Failed to load ‘/etc/prosody/certs/localhost.key’: Previous error (see logs), or other system error. (for localhost)
Apr 13 21:29:24 localhost:tls error Error creating contexts for s2sout: error loading private key (system lib)
Apr 13 21:29:24 certmanager error SSL/TLS: Failed to load ‘/etc/prosody/certs/localhost.key’: Previous error (see logs), or other system error. (for localhost)
Apr 13 21:29:24 localhost:tls error Error creating contexts for s2sin: error loading private key (system lib)
Apr 13 21:29:24 portmanager error Failed to open server port 5222 on *, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:24 portmanager error Failed to open server port 5222 on ::, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:32 portmanager error Failed to open server port 5347 on 127.0.0.1, this port is in use by another application
Apr 13 21:29:32 portmanager error Failed to open server port 5347 on ::1, this port is in use by another application
Apr 13 21:29:32 portmanager error Failed to open server port 5269 on ::, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:32 portmanager error Failed to open server port 5269 on *, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:32 certmanager error SSL/TLS: Failed to load ‘/etc/prosody/certs/localhost.key’: Check that the permissions allow Prosody to read this file. (for localhost)
Apr 13 21:29:32 localhost:tls error Error creating context for c2s: error loading private key (Permission denied)
Apr 13 21:29:32 certmanager error SSL/TLS: Failed to load ‘/etc/prosody/certs/localhost.key’: Previous error (see logs), or other system error. (for localhost)
Apr 13 21:29:32 localhost:tls error Error creating contexts for s2sout: error loading private key (system lib)
Apr 13 21:29:32 certmanager error SSL/TLS: Failed to load ‘/etc/prosody/certs/localhost.key’: Previous error (see logs), or other system error. (for localhost)
Apr 13 21:29:32 localhost:tls error Error creating contexts for s2sin: error loading private key (system lib)
Apr 13 21:29:32 portmanager error Failed to open server port 5222 on ::, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:32 portmanager error Failed to open server port 5222 on *, check that Prosody or another XMPP server is not already running and using this port
Apr 13 21:29:32 portmanager error Failed to open server port 5280 on ::, check that Prosody or a BOSH connection manager is not already running
Apr 13 21:29:32 portmanager error Failed to open server port 5280 on *, check that Prosody or a BOSH connection manager is not already running
Apr 13 21:29:32 portmanager error Error binding encrypted port for https: No certificate present in SSL/TLS configuration for https port 5281
Apr 13 21:29:32 portmanager error Error binding encrypted port for https: No certificate present in SSL/TLS configuration for https port 5281

I don’t understand the “port already in use” messages, as when I check for the ports used, I don’t find any of them

I have never had so much difficulties to start a service.
Any idea ?
Thanks