Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.java > #13033

Re: ca-certificates and backport to bullseye => ca-certificates-java problem

Path csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From Vladimir Petko <vladimir.petko@canonical.com>
Newsgroups linux.debian.maint.java
Subject Re: ca-certificates and backport to bullseye => ca-certificates-java problem
Date Thu, 31 Jul 2025 22:40:01 +0200
Message-ID <LeIed-4d4T-1@gated-at.bofh.it> (permalink)
References <Leyyd-46X0-3@gated-at.bofh.it> <LeBmp-48IL-3@gated-at.bofh.it>
X-Mailbox-Line From debian-java-request@lists.debian.org Thu Jul 31 20:30:41 2025
Old-Return-Path <vladimir.petko@canonical.com>
X-Amavis-Spam-Status No, score=-10.745 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-2.907, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SARE_MLH_Stock10=1.66] autolearn=unavailable autolearn_force=no
X-Policyd-Weight using cached result; rate: -5.5
X-Forwarded-Encrypted i=1; AJvYcCX6oGTWvc4rlYskpwKQPg19SyR1G2lMADue0wlz9vfcrSv8ccDF6iEjXAuu3PSsjNQNACSOvt9a6IPACw==@lists.debian.org
X-Gm-Message-State AOJu0YyTDGVJhGE5jVCI8xVvE4r1P9bgEejJtkuNPh6EwOjfcf8ok/kD m3Gm3TVFuDPYftag3g+LJiJXZPsOkcqz09L+TGMDWJd4AdOzck0n1k1D2uf9lhCA6Au8r6+WhjA 1TeAgiLSBGVjdeD/5pRFyx655uPRIApEYkNBVUiou+4VyzvOUuenXM0Fq8EuasJbH4PZzdv2Luk Lla/kk50cDB9wi4It/J/wVOnHEsnBEtHwq5AN/Kp0Qs6a6wyv6wFWM1EVZ
X-Gm-Gg ASbGncutbgOuCPVoeHekks3Ckgvd60XV9bM4HVvaozwJxrH4L2rzgcmOm2mf6jBXR0b 4nHOKHyzSBaglJxX59r9OKa3yJABVR9rKFIaaGk/i1g/xpHh3k57G44iMN8elFTd0oAVGWgUWSm d/oTeQBlTSZNwaIDxFHmdQGQ==
X-Received by 2002:a05:690c:7008:b0:71a:44df:6b8a with SMTP id 00721157ae682-71a46522918mr112499447b3.1.1753993822541; Thu, 31 Jul 2025 13:30:22 -0700 (PDT)
X-Google-SMTP-Source AGHT+IEMdFnKl7zFtwFyA/ISZ0qaBQiFx0o6MvHNh2QZt1QygGcWdDFJtWilPGNX8Od9XD9TnVTGvxrJ3Fm4z3nPD5w=
X-Received by 2002:a05:690c:7008:b0:71a:44df:6b8a with SMTP id 00721157ae682-71a46522918mr112499007b3.1.1753993822058; Thu, 31 Jul 2025 13:30:22 -0700 (PDT)
MIME-Version 1.0
X-Gm-Features Ac12FXye0bSVNOe7tQC9uq-Hgn9p6VgzSfFZmY6_B8jYOe2GH0lw7RyUZzlMROE
Content-Type text/plain; charset="UTF-8"
Content-Transfer-Encoding quoted-printable
X-Mailing-List <debian-java@lists.debian.org> archive/latest/23765
List-ID <debian-java.lists.debian.org>
List-URL <https://lists.debian.org/debian-java/>
List-Archive https://lists.debian.org/msgid-search/CALFf3kf__RAPUn4brCUACwzi3UrRV8dA=A4gD3qTbBs1-znpNQ@mail.gmail.com
Approved robomod@news.nic.it
Lines 46
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Cc Bastien Roucaries <rouca@debian.org>, debian-java@lists.debian.org, debian-lts@lists.debian.org, Emmanuel Bourg <ebourg@apache.org>, doko@debian.org
X-Original-Date Fri, 1 Aug 2025 08:30:11 +1200
X-Original-Message-ID <CALFf3kf__RAPUn4brCUACwzi3UrRV8dA=A4gD3qTbBs1-znpNQ@mail.gmail.com>
X-Original-References <3032477.3Lj2Plt8kZ@debian-ei> <39843841442ebdfb816a7f4f9abe500a@free.fr>
Xref csiph.com linux.debian.maint.java:13033

Show key headers only | View raw


Hi,

As far as I remember, 20230707 removes the circular dependency that
caused upgrade issues[1][2][3]. It also requires openjdk to trigger
ca-certificates-java:
----JB-jre-headless.postinst.in----
# Now that java is fully registered and configured,
# call update-ca-certificates-java
dpkg-trigger update-ca-certificates-java
------
Please check that this snippet is present in bullseye's
JB-jre-headless.postinst.in of openjdk package.

Best Regards,
 Vladimir.

[1] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2003750
[2] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1999103
[3] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2004061

On Fri, Aug 1, 2025 at 1:14 AM Julien Plissonneau Duquène
<sre4ever@free.fr> wrote:
>
> Hi,
>
> I can't help you much there as I didn't check what could break in your
> case (bullseye). The last time this was discussed on the list was
>
> https://lists.debian.org/debian-java/2023/02/msg00011.html
>
> According to the PT in bullseye it depends on default-jre-headless which
> depends on openjdk-11-jre-headless which depends on
> ca-certificates-java, but I don't see how updating it could cause
> issues.
>
> Maybe Emmanuel or doko could share more details about what could go
> wrong?
>
> Cheers,
>
> --
> Julien Plissonneau Duquène
>

Back to linux.debian.maint.java | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

  ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-07-31 12:20 +0200
  Re: ca-certificates and backport to bullseye => ca-certificates-java  problem Julien Plissonneau Duquène <sre4ever@free.fr> - 2025-07-31 15:20 +0200
    Re: ca-certificates and backport to bullseye => ca-certificates-java problem Vladimir Petko <vladimir.petko@canonical.com> - 2025-07-31 22:40 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-07-31 22:50 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java problem Utkarsh Gupta <guptautkarsh2102@gmail.com> - 2025-08-01 00:00 +0200
            Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-01 00:40 +0200
            Re: ca-certificates and backport to bullseye => ca-certificates-java problem Utkarsh Gupta <guptautkarsh2102@gmail.com> - 2025-08-01 01:10 +0200
          Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-01 21:30 +0200
            Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-06 08:30 +0200
              Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-31 15:40 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-01 19:10 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java  problem Santiago Ruano Rincón <santiagorr@riseup.net> - 2025-08-07 20:20 +0200

csiph-web