Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: Thorsten Glaser Newsgroups: linux.debian.maint.java Subject: Re: ca-certificate-java/openjdk installation issues Date: Tue, 21 Feb 2023 23:00:01 +0100 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Tue Feb 21 21:59:24 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-5.6 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, BODY_8BITS=1.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .tarent. - helo: .mail-wm1-x330.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5 X-Gm-Message-State: AO0yUKUl/wTHxmEeneP1QDBs4ZnX1RXjK56afGvvpgv6tFR2DwYFut8c tnp3NDHtR5TgM7I5AtBvEa14Bw== X-Google-SMTP-Source: AK7set9qhvZClV7m8dKmWe6Kfav+PswJTq7qg7Osv4JRytR4p+eQg6ZCEvGTnL83+ZCYpsjbQPNeyQ== X-Received: by 2002:a05:600c:511b:b0:3e2:1a01:3a7c with SMTP id o27-20020a05600c511b00b003e21a013a7cmr5263042wms.6.1677016743191; Tue, 21 Feb 2023 13:59:03 -0800 (PST) Content-Language: de-DE-1901 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE X-Mailing-List: archive/latest/23233 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/ba7f6b37-973a-7c11-3fc5-e83b97f57833@tarent.de Approved: robomod@news.nic.it Lines: 35 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org X-Original-Date: Tue, 21 Feb 2023 22:59:01 +0100 (CET) X-Original-Message-ID: X-Original-References: <665f66a6-347d-18ce-457a-548d7fcd2c@tarent.de> Xref: csiph.com linux.debian.maint.java:12578 On Wed, 22 Feb 2023, Vladimir Petko wrote: >in sync. A possible scenario is CA being revoked, which results in an That=E2=80=99s why I was suggesting to keep it down to manually vetted relevant ones. But if that=E2=80=99s unpalatable (do talk to the security people!), ship an empty JKS keystore by default. The JKS keystore will have no n=C5=8Dn-Java users, and soon as the JRE is there it=E2=80=99ll be regenerated. This all won=E2=80=99t make bookworm any more either, so no need to be hasty. bye, //mirabilos --=20 Infrastrukturexperte =E2=80=A2 tarent solutions GmbH Am Dickobskreuz 10, D-53121 Bonn =E2=80=A2 http://www.tarent.de/ Telephon +49 228 54881-393 =E2=80=A2 Fax: +49 228 54881-235 HRB AG Bonn 5168 =E2=80=A2 USt-ID (VAT): DE122264941 Gesch=C3=A4ftsf=C3=BChrer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Ale= xander Steeg ***************************************************= * /=E2=81=80\ The UTF-8 Ribbon =E2=95=B2=C2=A0=E2=95=B1 Campaign against Mit dem tarent-Newsletter ni= chts mehr verpassen: =C2=A0=E2=95=B3=C2=A0 HTML eMail! Also, https://www.tarent.de/newslette= r =E2=95=B1=C2=A0=E2=95=B2 header encryption! ***************************************************= *