Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: Vladimir Petko Newsgroups: linux.debian.maint.java Subject: Re: ca-certificate-java/openjdk installation issues Date: Fri, 24 Feb 2023 05:20:01 +0100 Message-ID: References: X-Original-To: Thorsten Glaser , doko@ubuntu.com X-Mailbox-Line: From debian-java-request@lists.debian.org Fri Feb 24 04:18:38 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-9.401 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Gm-Message-State: AO0yUKWsKZsjLu+I4vjhnDkNNHogFRAjSUNTg+nJHjRA1ekC8M27QK6u k+r5ISfvooswdTmyUyJSbEQuGPL0BqPvNWKzOj97Ge3HV6rA8sa8g5P6cxKrQdKSAlR26bKt4Cp UT2xu0h+O8/1JabdcPh0a5Doht4j3lRC6X0/52pfQFrrzhOWy6cawC6BIClC3gII= X-Received: by 2002:a63:7e55:0:b0:4fb:97bd:ac25 with SMTP id o21-20020a637e55000000b004fb97bdac25mr2441128pgn.6.1677212294382; Thu, 23 Feb 2023 20:18:14 -0800 (PST) X-Google-SMTP-Source: AK7set9tBPl31z4n1RoAdnJ5K4SIxTab/AQ6rYFV2GJSLjAeE0DDz4V6C2gaYZ75NcDbqzmHQuLA0MjnmaSWjh228eA= X-Received: by 2002:a63:7e55:0:b0:4fb:97bd:ac25 with SMTP id o21-20020a637e55000000b004fb97bdac25mr2441123pgn.6.1677212293979; Thu, 23 Feb 2023 20:18:13 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailing-List: archive/latest/23248 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CALFf3kfDSzmTZCGAMgyiYCk+Ff=98b1ZbMC2WyR55M_WbEdidg@mail.gmail.com Approved: robomod@news.nic.it Lines: 72 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org X-Original-Date: Fri, 24 Feb 2023 17:18:03 +1300 X-Original-Message-ID: X-Original-References: <665f66a6-347d-18ce-457a-548d7fcd2c@tarent.de> <283b139-4276-227e-d17-f640b09f95d@tarent.de> <9c268964-afbc-55f-5415-3aba7b169394@tarent.de> Xref: csiph.com linux.debian.maint.java:12592 Hi, Thank you very much for the advice !!!! I have tested this approach [1] and it looks good - the trigger is called after update-alternatives in the postinstall script of the jre-headless and this guarantees that we have a working java when we try to import certificates. Libreoffice has no problems with installation and OpenJDK 20 packages install successfully. If this change is ok to go forward, I will raise merge requests on Salsa for doko to integrate it. The issue is the migration procedure - those packages have to be published together to avoid any nasty surprises. Summary of changes: - remove dependency on jre from ca-certificates-java - leave only trigger call to update_certs in postinstall of ca-certificates= -java - remove setup_path function (we are guaranteed to have working java in the path) - call update-certificates-java trigger after update-alternatives in every jre-headless postinstall script Potential problem: - update-certificates-java trigger logs appearing multiple times when different openjdk versions are installed at the same time Best Regards, Vladimir [1] https://launchpad.net/~vpa1977/+archive/ubuntu/ca-certificates-lowtech On Fri, Feb 24, 2023 at 8:59 AM Thorsten Glaser wrote: > > On Fri, 24 Feb 2023, Vladimir Petko wrote: > > >This is possible to do if we update openjdk packaging and make it > >trigger certificates-ca-java, so that it always runs after the openjdk > > We can do that easily. I maintain 8 and doko the rest (I hope). > > If that=E2=80=99s needed, i.e. if there=E2=80=99s no other way, that is. = (And > this should not break with older ca-certificates-java, like in > jessie/stretch-ELTS.) > > >Please get well!!!!! > > Thank you. > > bye, > //mirabilos > -- > Infrastrukturexperte =E2=80=A2 tarent solutions GmbH > Am Dickobskreuz 10, D-53121 Bonn =E2=80=A2 http://www.tarent.de/ > Telephon +49 228 54881-393 =E2=80=A2 Fax: +49 228 54881-235 > HRB AG Bonn 5168 =E2=80=A2 USt-ID (VAT): DE122264941 > Gesch=C3=A4ftsf=C3=BChrer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, A= lexander Steeg > > *************************************************= *** > /=E2=81=80\ The UTF-8 Ribbon > =E2=95=B2 =E2=95=B1 Campaign against Mit dem tarent-Newsletter nicht= s mehr verpassen: > =E2=95=B3 HTML eMail! Also, https://www.tarent.de/newsletter > =E2=95=B1 =E2=95=B2 header encryption! > *************************************************= ***