Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Utkarsh Gupta Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates and backport to bullseye => ca-certificates-java problem Date: Fri, 01 Aug 2025 01:10:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Thu Jul 31 23:00:11 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-5.289 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001, SARE_MLH_Stock10=1.66] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Forwarded-Encrypted: i=1; AJvYcCWQQpVNltnCxdSpl4XWa0gM/4NxEbqUfxEpbxWMN4Ijtzi8yWCifTBn/WIW6tlkM41rwEGm9EKLH04Q@lists.debian.org X-Gm-Message-State: AOJu0YxyBQBNWINWG46KbB80huBImBdt89tP5Wst86JpCsdGF/v7qVv6 Z+zLpVV0h7WrvOwjtE8Y3Agqk/0s6bfsKZ9LWSLQJdivykRFu5nU6AsCrWPjjU+cnWX6M4ectjG WfCNbNRb0v+tiwOGsWFwCRG7nBFStxXc= X-Gm-Gg: ASbGnctaFkCrZ4UP/aIfrLidzUSuZnddlUbGOijZosiqTONTOpvRl1k3/JCeaqWcU0Y B7vkv8PAzQhtFeOW3iJ8M6Lk7tx4uAvTqvgvuFk37/BLfDfd4da6COBgJ0xxHYj6pdRhAOtswSf s7ZJR9sfm+rQHNpL8KNMhNyEQ7hlgrERfBdTiqneLPaQlsheVBSq5TTVYKsLMbLlPDeiutVegVb 7pCUQaY+L9igY3SOmCgAGBAEuvZDsX1kgyrkUtQlyC/b7qUZEQ= X-Google-SMTP-Source: AGHT+IESgWK3MlrewwtLxqJPA5zJnYnnjXq3NxW/n4JVxr2qfHI11k+wI4ooWUyapmqCRc9dJHzkFN4Dk4ySLGItd9I= X-Received: by 2002:a2e:9a0a:0:b0:32b:a85f:c0b8 with SMTP id 38308e7fff4ca-33224a796ddmr33817461fa.9.1754001807392; Thu, 31 Jul 2025 15:43:27 -0700 (PDT) MIME-Version: 1.0 X-Gm-Features: Ac12FXx0kPobV_llpoL5gF-0msr5o79qa8PzFEkTHN6mD4NFcoHKjCn20_tL3Io Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailing-List: archive/latest/23769 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CAPP0f97wp7dPU3mJK=jj2QaEJ=hNi8+1hx7EZE6o4OeyNTwH0w@mail.gmail.com Approved: robomod@news.nic.it Lines: 18 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org, =?UTF-8?Q?Julien_Plissonneau_Duqu=C3=A8ne?= , Vladimir Petko , debian-lts@lists.debian.org, Emmanuel Bourg , doko@debian.org X-Original-Date: Fri, 1 Aug 2025 04:12:50 +0530 X-Original-Message-ID: X-Original-References: <3032477.3Lj2Plt8kZ@debian-ei> <3429696.TLnPLrj5Ze@debian-ei> <21956009.Yz81rIOvuz@debian-ei> Xref: csiph.com linux.debian.maint.java:13037 Hi Bastien, On Fri, Aug 1, 2025 at 4:05=E2=80=AFAM Bastien Roucaries = wrote: > * 11 is ok : https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk= -11/debian/JB-jre-headless.postinst.in#L129 > * 17 is ok : https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk= -17/debian/JB-jre-headless.postinst.in#L97 > * nvidia-openjdk-8-jre is not ok and it does not use ca-certificates-java Just had a word with Vladimir - looks like it doesn't depend on the usual certs package, which is bad as it's using its own baked certs? Anyway, that means you don't have to worry about it - only 11 and 17 need updating. - u