Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Vladimir Petko Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates and backport to bullseye => ca-certificates-java problem Date: Thu, 31 Jul 2025 22:40:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Thu Jul 31 20:30:41 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-10.745 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-2.907, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SARE_MLH_Stock10=1.66] autolearn=unavailable autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Forwarded-Encrypted: i=1; AJvYcCX6oGTWvc4rlYskpwKQPg19SyR1G2lMADue0wlz9vfcrSv8ccDF6iEjXAuu3PSsjNQNACSOvt9a6IPACw==@lists.debian.org X-Gm-Message-State: AOJu0YyTDGVJhGE5jVCI8xVvE4r1P9bgEejJtkuNPh6EwOjfcf8ok/kD m3Gm3TVFuDPYftag3g+LJiJXZPsOkcqz09L+TGMDWJd4AdOzck0n1k1D2uf9lhCA6Au8r6+WhjA 1TeAgiLSBGVjdeD/5pRFyx655uPRIApEYkNBVUiou+4VyzvOUuenXM0Fq8EuasJbH4PZzdv2Luk Lla/kk50cDB9wi4It/J/wVOnHEsnBEtHwq5AN/Kp0Qs6a6wyv6wFWM1EVZ X-Gm-Gg: ASbGncutbgOuCPVoeHekks3Ckgvd60XV9bM4HVvaozwJxrH4L2rzgcmOm2mf6jBXR0b 4nHOKHyzSBaglJxX59r9OKa3yJABVR9rKFIaaGk/i1g/xpHh3k57G44iMN8elFTd0oAVGWgUWSm d/oTeQBlTSZNwaIDxFHmdQGQ== X-Received: by 2002:a05:690c:7008:b0:71a:44df:6b8a with SMTP id 00721157ae682-71a46522918mr112499447b3.1.1753993822541; Thu, 31 Jul 2025 13:30:22 -0700 (PDT) X-Google-SMTP-Source: AGHT+IEMdFnKl7zFtwFyA/ISZ0qaBQiFx0o6MvHNh2QZt1QygGcWdDFJtWilPGNX8Od9XD9TnVTGvxrJ3Fm4z3nPD5w= X-Received: by 2002:a05:690c:7008:b0:71a:44df:6b8a with SMTP id 00721157ae682-71a46522918mr112499007b3.1.1753993822058; Thu, 31 Jul 2025 13:30:22 -0700 (PDT) MIME-Version: 1.0 X-Gm-Features: Ac12FXye0bSVNOe7tQC9uq-Hgn9p6VgzSfFZmY6_B8jYOe2GH0lw7RyUZzlMROE Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailing-List: archive/latest/23765 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CALFf3kf__RAPUn4brCUACwzi3UrRV8dA=A4gD3qTbBs1-znpNQ@mail.gmail.com Approved: robomod@news.nic.it Lines: 46 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: Bastien Roucaries , debian-java@lists.debian.org, debian-lts@lists.debian.org, Emmanuel Bourg , doko@debian.org X-Original-Date: Fri, 1 Aug 2025 08:30:11 +1200 X-Original-Message-ID: X-Original-References: <3032477.3Lj2Plt8kZ@debian-ei> <39843841442ebdfb816a7f4f9abe500a@free.fr> Xref: csiph.com linux.debian.maint.java:13033 Hi, As far as I remember, 20230707 removes the circular dependency that caused upgrade issues[1][2][3]. It also requires openjdk to trigger ca-certificates-java: ----JB-jre-headless.postinst.in---- # Now that java is fully registered and configured, # call update-ca-certificates-java dpkg-trigger update-ca-certificates-java ------ Please check that this snippet is present in bullseye's JB-jre-headless.postinst.in of openjdk package. Best Regards, Vladimir. [1] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/200= 3750 [2] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/199= 9103 [3] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/200= 4061 On Fri, Aug 1, 2025 at 1:14=E2=80=AFAM Julien Plissonneau Duqu=C3=A8ne wrote: > > Hi, > > I can't help you much there as I didn't check what could break in your > case (bullseye). The last time this was discussed on the list was > > https://lists.debian.org/debian-java/2023/02/msg00011.html > > According to the PT in bullseye it depends on default-jre-headless which > depends on openjdk-11-jre-headless which depends on > ca-certificates-java, but I don't see how updating it could cause > issues. > > Maybe Emmanuel or doko could share more details about what could go > wrong? > > Cheers, > > -- > Julien Plissonneau Duqu=C3=A8ne >