Path: csiph.com!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Utkarsh Gupta Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates and backport to bullseye => ca-certificates-java problem Date: Fri, 01 Aug 2025 00:00:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Thu Jul 31 21:57:10 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-5.289 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001, SARE_MLH_Stock10=1.66] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Forwarded-Encrypted: i=1; AJvYcCWbCNnQwO01cZqn4pt9FfsGOUYCgdoi8FQvWI0IjOhxVx/ZAQWirN9a6iFXcfPOyz+b0Un4b0OpIM+BxA==@lists.debian.org, AJvYcCXIcllG4i+YFAA4MO/3LGuvXg7CnW++DJJNfMG3LCDK4/yQDD3lMbeMy5wYkNjWgVL6uRk/0+QNSegRdg==@lists.debian.org X-Gm-Message-State: AOJu0YxtzdszvtfbJKuVi7ZzQAwGEWFu3sCdR5An8eDCwZ2shgSQzmBa vnyQJ0tw3KbjYAyBVVt9/xv31Hj/Z5jzJykQAb4Fqe58wCaekOUg1F42hoo0O0tu2LkGpXG5Q96 uF9ERWOTxk/4Pw8K39UqcRWnI6SqY+Xw= X-Gm-Gg: ASbGncuLJOy7OQpNQdpY9hkuCMTjzDyXpP3LswrLjfYRiYQVqHe92oM/1DrD31HJZQZ 2DQZYY7vOe/dOBgNlyLON+2ocLTFdQewqNVgsmYfJ7txakSHZgp6ngsiQTyS7OPPI0YVcGatVkK KgNTZQYUPH7nxy89W8jLGcrPrU8p98npb17zpIAJKtribhvRZKrMvYLN5VUFHGkA2HO6sCcEifO 40oyby2dbBH2mOGWwpRFDnswAex+NqsuoVfotg7 X-Google-SMTP-Source: AGHT+IENekmhL9Azgpe0TYNNzlirgKUBAaKsSbz16r0MHbvekXEhCdQMMCuBmPzOaEIU8D+E8MQBvljMbLXtgOVUoBs= X-Received: by 2002:a05:651c:198a:b0:32b:72c8:9a6d with SMTP id 38308e7fff4ca-33248290319mr892171fa.7.1753997999914; Thu, 31 Jul 2025 14:39:59 -0700 (PDT) MIME-Version: 1.0 X-Gm-Features: Ac12FXzJ9tYul6XwIkcEcgrt8Xe7CiN5HCw9Hxo3d8wao8_Hl8OuYXz-zLABfFk Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailing-List: archive/latest/23767 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CAPP0f96ndy8jgVAecvku4eyGg-aJf2E0bzfPYbkAHVni=SZ4hQ@mail.gmail.com Approved: robomod@news.nic.it Lines: 23 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: =?UTF-8?Q?Julien_Plissonneau_Duqu=C3=A8ne?= , Vladimir Petko , debian-java@lists.debian.org, debian-lts@lists.debian.org, Emmanuel Bourg , doko@debian.org X-Original-Date: Fri, 1 Aug 2025 03:09:22 +0530 X-Original-Message-ID: X-Original-References: <3032477.3Lj2Plt8kZ@debian-ei> <39843841442ebdfb816a7f4f9abe500a@free.fr> <3429696.TLnPLrj5Ze@debian-ei> Xref: csiph.com linux.debian.maint.java:13035 Hi Bastien, On Fri, Aug 1, 2025 at 2:13=E2=80=AFAM Bastien Roucaries = wrote: > 1. first upload a openjdk that trigger update-ca-certificates-java > 2. upload a backport of ca-certificates-java > 3. upload ca-certificates Correct - that's the right sequence. Following up with Vladimir also tells me that - The first step will get you openjdk reconfiguring ca-certificates-java tw= ice. - Then you immediately upload a backport that breaks circular dependency. - And then you can refresh ca-certificates. Note that this needs to happen for all the openjdk in bullseye - which means openjdk-11, openjdk-17, *and* nvidia-openjdk-8-jre. Let me know if you need anything else. Also, please go ahead with or without adding them to dla-needed, whatever you find convenient. - u