Re: ca-certificates and backport to bullseye => ca-certificates-java problem

Bastien Roucaries <[email protected]> Thu, 31 Jul 2025 22:43:35 +0200

Newsgroups	gmane.linux.debian.devel.lts,gmane.linux.debian.devel.java
Message-ID	<3429696.TLnPLrj5Ze@debian-ei>

Le jeudi 31 juillet 2025, 22:30:11 heure d’été d’Europe centrale Vladimir 
Petko a écrit :
> Hi,
> 
> As far as I remember, 20230707 removes the circular dependency that
> caused upgrade issues[1][2][3]. It also requires openjdk to trigger
> ca-certificates-java:
> ----JB-jre-headless.postinst.in----
> # Now that java is fully registered and configured,
> # call update-ca-certificates-java
> dpkg-trigger update-ca-certificates-java
> ------
> Please check that this snippet is present in bullseye's
> JB-jre-headless.postinst.in of openjdk package.

No it is not, so that it the path to fix this ? 

1. first upload a openjdk  that trigger update-ca-certificates-java
2. upload a backport of ca-certificates-java
3. upload ca-certificates 

rouca
> 
> Best Regards,
>  Vladimir.
> 
> [1]
> https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2003750
> [2]
> https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1999103
> [3]
> https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2004061
> 
> On Fri, Aug 1, 2025 at 1:14 AM Julien Plissonneau Duquène
> 
> <[email protected]> wrote:
> > Hi,
> > 
> > I can't help you much there as I didn't check what could break in your
> > case (bullseye). The last time this was discussed on the list was
> > 
> > https://lists.debian.org/debian-java/2023/02/msg00011.html
> > 
> > According to the PT in bullseye it depends on default-jre-headless which
> > depends on openjdk-11-jre-headless which depends on
> > ca-certificates-java, but I don't see how updating it could cause
> > issues.
> > 
> > Maybe Emmanuel or doko could share more details about what could go
> > wrong?
> > 
> > Cheers,
> > 
> > --
> > Julien Plissonneau Duquène

signature.asc (application/pgp-signature, 833 B)