Re: ca-certificates and backport to bullseye => ca-certificates-java problem

Bastien Roucaries <[email protected]> Fri, 01 Aug 2025 21:25:05 +0200

Newsgroups	gmane.linux.debian.devel.java,gmane.linux.debian.devel.lts
Message-ID	<3461172.otXNkdZ6W1@debian-ei>

Le jeudi 31 juillet 2025, 22:43:35 heure d’été d’Europe centrale Bastien Roucaries a écrit :
Hi

I have just pushed a version here:
https://salsa.debian.org/java-team/ca-certificates-java/-/tree/bullseye?ref_type=heads

Can you review ?

rouca

> Le jeudi 31 juillet 2025, 22:30:11 heure d’été d’Europe centrale Vladimir
> 
> Petko a écrit :
> > Hi,
> > 
> > As far as I remember, 20230707 removes the circular dependency that
> > caused upgrade issues[1][2][3]. It also requires openjdk to trigger
> > ca-certificates-java:
> > ----JB-jre-headless.postinst.in----
> > # Now that java is fully registered and configured,
> > # call update-ca-certificates-java
> > dpkg-trigger update-ca-certificates-java
> > ------
> > Please check that this snippet is present in bullseye's
> > JB-jre-headless.postinst.in of openjdk package.
> 
> No it is not, so that it the path to fix this ?
> 
> 1. first upload a openjdk  that trigger update-ca-certificates-java
> 2. upload a backport of ca-certificates-java
> 3. upload ca-certificates
> 
> rouca
> 
> > Best Regards,
> > 
> >  Vladimir.
> > 
> > [1]
> > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/200375
> > 0
> > [2]
> > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/199910
> > 3
> > [3]
> > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/200406
> > 1
> > 
> > On Fri, Aug 1, 2025 at 1:14 AM Julien Plissonneau Duquène
> > 
> > <[email protected]> wrote:
> > > Hi,
> > > 
> > > I can't help you much there as I didn't check what could break in your
> > > case (bullseye). The last time this was discussed on the list was
> > > 
> > > https://lists.debian.org/debian-java/2023/02/msg00011.html
> > > 
> > > According to the PT in bullseye it depends on default-jre-headless which
> > > depends on openjdk-11-jre-headless which depends on
> > > ca-certificates-java, but I don't see how updating it could cause
> > > issues.
> > > 
> > > Maybe Emmanuel or doko could share more details about what could go
> > > wrong?
> > > 
> > > Cheers,
> > > 
> > > --
> > > Julien Plissonneau Duquène

signature.asc (application/pgp-signature, 833 B)