Re: ca-certificates and backport to bullseye => ca-certificates-java problem

Bastien Roucaries <[email protected]> Fri, 01 Aug 2025 00:35:30 +0200

Newsgroups	gmane.linux.debian.devel.java,gmane.linux.debian.devel.lts
Message-ID	<21956009.Yz81rIOvuz@debian-ei>

Le jeudi 31 juillet 2025, 23:39:22 heure d’été d’Europe centrale Utkarsh Gupta a écrit :
> Hi Bastien,
> 
> On Fri, Aug 1, 2025 at 2:13 AM Bastien Roucaries <[email protected]> wrote:
> > 1. first upload a openjdk  that trigger update-ca-certificates-java
> > 2. upload a backport of ca-certificates-java
> > 3. upload ca-certificates
> 
> Correct - that's the right sequence. Following up with Vladimir also
> tells me that
> - The first step will get you openjdk reconfiguring ca-certificates-java
> twice. - Then you immediately upload a backport that breaks circular
> dependency. - And then you can refresh ca-certificates.
> 
> Note that this needs to happen for all the openjdk in bullseye - which
> means openjdk-11, openjdk-17, *and* nvidia-openjdk-8-jre.
* 11 is ok : https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk-11/debian/JB-jre-headless.postinst.in#L129
* 17 is ok : https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk-17/debian/JB-jre-headless.postinst.in#L97
* nvidia-openjdk-8-jre is not ok and it does not use ca-certificates-java

Vladimir Petko can you see if I should open a RC bug against  nvidia-openjdk-8-jre ?


> 
> Let me know if you need anything else. Also, please go ahead with or
> without adding them to dla-needed, whatever you find convenient.
> 
> 
> - u

signature.asc (application/pgp-signature, 833 B)