Re: ca-certificates and backport to bullseye => ca-certificates-java problem

Bastien Roucaries <[email protected]> Sun, 31 Aug 2025 15:30:34 +0200
Newsgroups	gmane.linux.debian.devel.lts,gmane.linux.debian.devel.java
Message-ID	<10314566.18pcnM708K@debian-ei>
Le mercredi 6 août 2025, 08:28:05 heure d’été d’Europe centrale Bastien Roucaries a écrit :
Hi,

For stretch we forget to fix gcc...

I am going to fix gcc-jre.

rouca
> Le vendredi 1 août 2025, 21:25:05 heure d’été d’Europe centrale Bastien 
> Roucaries a écrit :
> Hi Vladimir, Hi Marc,
> 
> Could you review this upgradre of ca-certificates-java and view if it is 
> upgrade safe ? I will after a few week upload a ca-certificates
> 
> rouca
> > Le jeudi 31 juillet 2025, 22:43:35 heure d’été d’Europe centrale Bastien
> > Roucaries a écrit : Hi
> > 
> > I have just pushed a version here:
> > https://salsa.debian.org/java-team/ca-certificates-java/-/tree/bullseye?ref_
> > type=heads
> > 
> > Can you review ?
> > 
> > rouca
> > 
> > > Le jeudi 31 juillet 2025, 22:30:11 heure d’été d’Europe centrale Vladimir
> > > 
> > > Petko a écrit :
> > > > Hi,
> > > > 
> > > > As far as I remember, 20230707 removes the circular dependency that
> > > > caused upgrade issues[1][2][3]. It also requires openjdk to trigger
> > > > ca-certificates-java:
> > > > ----JB-jre-headless.postinst.in----
> > > > # Now that java is fully registered and configured,
> > > > # call update-ca-certificates-java
> > > > dpkg-trigger update-ca-certificates-java
> > > > ------
> > > > Please check that this snippet is present in bullseye's
> > > > JB-jre-headless.postinst.in of openjdk package.
> > > 
> > > No it is not, so that it the path to fix this ?
> > > 
> > > 1. first upload a openjdk  that trigger update-ca-certificates-java
> > > 2. upload a backport of ca-certificates-java
> > > 3. upload ca-certificates
> > > 
> > > rouca
> > > 
> > > > Best Regards,
> > > > 
> > > >  Vladimir.
> > > > 
> > > > [1]
> > > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2003
> > > > 75
> > > > 0
> > > > [2]
> > > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1999
> > > > 10
> > > > 3
> > > > [3]
> > > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2004
> > > > 06
> > > > 1
> > > > 
> > > > On Fri, Aug 1, 2025 at 1:14 AM Julien Plissonneau Duquène
> > > > 
> > > > <[email protected]> wrote:
> > > > > Hi,
> > > > > 
> > > > > I can't help you much there as I didn't check what could break in your
> > > > > case (bullseye). The last time this was discussed on the list was
> > > > > 
> > > > > https://lists.debian.org/debian-java/2023/02/msg00011.html
> > > > > 
> > > > > According to the PT in bullseye it depends on default-jre-headless
> > > > > which
> > > > > depends on openjdk-11-jre-headless which depends on
> > > > > ca-certificates-java, but I don't see how updating it could cause
> > > > > issues.
> > > > > 
> > > > > Maybe Emmanuel or doko could share more details about what could go
> > > > > wrong?
> > > > > 
> > > > > Cheers,
> > > > > 
> > > > > --
> > > > > Julien Plissonneau Duquène
> 
>
signature.asc (application/pgp-signature, 833 B)