Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Bastien Roucaries Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates and backport to bullseye => ca-certificates-java problem Date: Fri, 01 Aug 2025 21:30:01 +0200 Message-ID: References: X-Original-To: Julien Plissonneau =?UTF-8?B?RHVxdcOobmU=?= , Vladimir Petko X-Mailbox-Line: From debian-java-request@lists.debian.org Fri Aug 1 19:25:25 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-115.756 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-2.907, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, SARE_MLH_Stock10=1.66, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart12675330.F0gNSz5aLb"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: rouca X-Mailing-List: archive/latest/23771 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/3461172.otXNkdZ6W1@debian-ei Approved: robomod@news.nic.it Lines: 111 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org, debian-lts@lists.debian.org, Emmanuel Bourg , doko@debian.org X-Original-Date: Fri, 01 Aug 2025 21:25:05 +0200 X-Original-Message-ID: <3461172.otXNkdZ6W1@debian-ei> X-Original-References: <3032477.3Lj2Plt8kZ@debian-ei> <3429696.TLnPLrj5Ze@debian-ei> Xref: csiph.com linux.debian.maint.java:13039 --nextPart12675330.F0gNSz5aLb Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Bastien Roucaries Date: Fri, 01 Aug 2025 21:24:36 +0200 Message-ID: <3461172.otXNkdZ6W1@debian-ei> In-Reply-To: <3429696.TLnPLrj5Ze@debian-ei> MIME-Version: 1.0 Le jeudi 31 juillet 2025, 22:43:35 heure d=E2=80=99=C3=A9t=C3=A9 d=E2=80=99= Europe centrale Bastien Roucaries a =C3=A9crit : Hi I have just pushed a version here: https://salsa.debian.org/java-team/ca-certificates-java/-/tree/bullseye?ref= _type=3Dheads Can you review ? rouca > Le jeudi 31 juillet 2025, 22:30:11 heure d=E2=80=99=C3=A9t=C3=A9 d=E2=80= =99Europe centrale Vladimir >=20 > Petko a =C3=A9crit : > > Hi, > >=20 > > As far as I remember, 20230707 removes the circular dependency that > > caused upgrade issues[1][2][3]. It also requires openjdk to trigger > > ca-certificates-java: > > ----JB-jre-headless.postinst.in---- > > # Now that java is fully registered and configured, > > # call update-ca-certificates-java > > dpkg-trigger update-ca-certificates-java > > ------ > > Please check that this snippet is present in bullseye's > > JB-jre-headless.postinst.in of openjdk package. >=20 > No it is not, so that it the path to fix this ? >=20 > 1. first upload a openjdk that trigger update-ca-certificates-java > 2. upload a backport of ca-certificates-java > 3. upload ca-certificates >=20 > rouca >=20 > > Best Regards, > >=20 > > Vladimir. > >=20 > > [1] > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/200= 375 > > 0 > > [2] > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/199= 910 > > 3 > > [3] > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/200= 406 > > 1 > >=20 > > On Fri, Aug 1, 2025 at 1:14=E2=80=AFAM Julien Plissonneau Duqu=C3=A8ne > >=20 > > wrote: > > > Hi, > > >=20 > > > I can't help you much there as I didn't check what could break in your > > > case (bullseye). The last time this was discussed on the list was > > >=20 > > > https://lists.debian.org/debian-java/2023/02/msg00011.html > > >=20 > > > According to the PT in bullseye it depends on default-jre-headless wh= ich > > > depends on openjdk-11-jre-headless which depends on > > > ca-certificates-java, but I don't see how updating it could cause > > > issues. > > >=20 > > > Maybe Emmanuel or doko could share more details about what could go > > > wrong? > > >=20 > > > Cheers, > > >=20 > > > -- > > > Julien Plissonneau Duqu=C3=A8ne --nextPart12675330.F0gNSz5aLb Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmiNFHQACgkQADoaLapB CF9oCQ//Xq7M51Weg14y5ShV4+UzkFtRLWn9fpMb69P47caPJPfyj6BXD0Mb8AxR GYLWDuqslwbm1ayresxIVirX13e91LIqAt9oGQ9to4zJmvTKPLdcgIfGsdwARWx2 AuMrBnVebY5Mqa17LDVvMeYJ/Ho1JNGkjSMSmVASTnHHJuWfFE168sGeRdzSwVgY vKEZonbGMhIp3n7WUkdosipI06ul+cAewVvJfsYdXYjX1fYr7xsM1OqGhuNytMha qPYyWF581MiYmapQQKK9Bg3ZrC9u8nIrcfpgny6wO8Jnuw8gAMHK2girczgGilOe D3itaQsRMLUp3Hbd53pUM+VCV+NxQ2BcNYL0T5ytfEa8OA6KE4S06cVvtMhOjXsn kiEryPq+lmaFRQOHic3mnv5gHW43sXgPyCY7Z3mS4vGiwZlu+82WFwrBenorhSsO Z0MyVlhf8K+uH15bcqO44B8EkSp5dQ7Vouotcb7jyjxgwcmBhLtUieb9U0UA/HvH vzR35SH5SPWpubx89C3IdEiXpr7CinOGJwrlzsk1ymJlY9I3n3xA/T2nMIFEFD1d MRfXOQXRExBewOAXE3BVV1QmmjnpFWktdqwGbTcD1bq6OGd5DlgQLMtunC1lYNxj GyaZectGhC8bR8IjW2Bh9b52ID/SOq1QmlyEN/UwYYNhfj2bsaI= =oNRd -----END PGP SIGNATURE----- --nextPart12675330.F0gNSz5aLb--