Path: csiph.com!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Bastien Roucaries Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates and backport to bullseye => ca-certificates-java problem Date: Thu, 31 Jul 2025 22:50:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Thu Jul 31 20:43:55 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-115.756 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-2.907, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, SARE_MLH_Stock10=1.66, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=unavailable autolearn_force=no MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart11854876.zapYfy813O"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: rouca X-Mailing-List: archive/latest/23766 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/3429696.TLnPLrj5Ze@debian-ei Approved: robomod@news.nic.it Lines: 92 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org, debian-lts@lists.debian.org, Emmanuel Bourg , doko@debian.org X-Original-Date: Thu, 31 Jul 2025 22:43:35 +0200 X-Original-Message-ID: <3429696.TLnPLrj5Ze@debian-ei> X-Original-References: <3032477.3Lj2Plt8kZ@debian-ei> <39843841442ebdfb816a7f4f9abe500a@free.fr> Xref: csiph.com linux.debian.maint.java:13034 --nextPart11854876.zapYfy813O Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Bastien Roucaries Date: Thu, 31 Jul 2025 22:43:07 +0200 Message-ID: <3429696.TLnPLrj5Ze@debian-ei> MIME-Version: 1.0 Le jeudi 31 juillet 2025, 22:30:11 heure d=E2=80=99=C3=A9t=C3=A9 d=E2=80=99= Europe centrale Vladimir=20 Petko a =C3=A9crit : > Hi, >=20 > As far as I remember, 20230707 removes the circular dependency that > caused upgrade issues[1][2][3]. It also requires openjdk to trigger > ca-certificates-java: > ----JB-jre-headless.postinst.in---- > # Now that java is fully registered and configured, > # call update-ca-certificates-java > dpkg-trigger update-ca-certificates-java > ------ > Please check that this snippet is present in bullseye's > JB-jre-headless.postinst.in of openjdk package. No it is not, so that it the path to fix this ?=20 1. first upload a openjdk that trigger update-ca-certificates-java 2. upload a backport of ca-certificates-java 3. upload ca-certificates=20 rouca >=20 > Best Regards, > Vladimir. >=20 > [1] > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/20037= 50 > [2] > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/19991= 03 > [3] > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/20040= 61 >=20 > On Fri, Aug 1, 2025 at 1:14=E2=80=AFAM Julien Plissonneau Duqu=C3=A8ne >=20 > wrote: > > Hi, > >=20 > > I can't help you much there as I didn't check what could break in your > > case (bullseye). The last time this was discussed on the list was > >=20 > > https://lists.debian.org/debian-java/2023/02/msg00011.html > >=20 > > According to the PT in bullseye it depends on default-jre-headless which > > depends on openjdk-11-jre-headless which depends on > > ca-certificates-java, but I don't see how updating it could cause > > issues. > >=20 > > Maybe Emmanuel or doko could share more details about what could go > > wrong? > >=20 > > Cheers, > >=20 > > -- > > Julien Plissonneau Duqu=C3=A8ne --nextPart11854876.zapYfy813O Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmiL1VsACgkQADoaLapB CF8NkRAAmRYE+gpsQtve9ss7C+453zNqw7r9d8DNnbroNo35YDJiaeYTMKVpbjmz vUREtr3Tn7ETmDqzvizyac8NZDRQ7Ys/M6CBuqIeX9wsf00TyENrZ502imAhK4aP mBygGMtcKMjseUGWjgHo7wNxJTj6DellSe7r0Ou4PRDdVvsIlybnUehnFz4KckUC lLA6FzTktmWaBgzotroHQOU2YT/RGiKBPDialO41XqtozSgakihl+PCiDRCEEr1T yVQgTBFNEhGTliOKGw3xH3B4YXVASh33P1BpHQA3MNcwT4orAlFonrdq40odN6jd HIGbWKHzDVJ8LKjrvWXXJ0grcSxKbhNDz78OBsN3/nyg+HXuYwCyRjo+SbVXo8Ty T95H8v3jc5aZOYXDQtIXI0T1u4ZDFk0bG9fzdyjLQlXPUaaOtFem3CUeGMqn/l/1 GcvtVtINvDlt7hqgU2+y8OWJQEXl2t3UXZDpQN/HMHgosIC8DHy6ODA4iLS3iFGX PYuoOZC2eDYq+rlbIIVTfOI0N0eIPSWP0U1zPcKrUSYLtB6XD/fyTJKzp1xg7JdT NDwYdF9cs1qpjAU2cBskHcW0gUJ/pEawF3O/bMeIlkcgDvTqVhA2gPuN3xcKWVnn toGXhbVph4a+aBONb1ZPRDf3Q+xY9hInwkpLK8Uz6Chb5x38nY8= =admq -----END PGP SIGNATURE----- --nextPart11854876.zapYfy813O--