Groups > linux.debian.maint.java > #13048

Re: ca-certificates and backport to bullseye => ca-certificates-java problem

Path	csiph.com!news.mixmin.net!news2.arglkargh.de!news.karotte.org!fu-berlin.de!bofh.it!news.nic.it!robomod
From	Bastien Roucaries <rouca@debian.org>
Newsgroups	linux.debian.maint.java
Subject	Re: ca-certificates and backport to bullseye => ca-certificates-java problem
Date	Wed, 06 Aug 2025 08:30:01 +0200
Message-ID	<LgFOV-5ufO-5@gated-at.bofh.it> (permalink)
References	<LgFOV-5ufO-7@gated-at.bofh.it> <Leyyd-46X0-3@gated-at.bofh.it> <LeInT-4d8p-5@gated-at.bofh.it> <Lf3C1-4r33-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-java-request@lists.debian.org Wed Aug 6 06:28:26 2025
Old-Return-Path	<rouca@debian.org>
X-Amavis-Spam-Status	No, score=-115.756 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-2.907, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, SARE_MLH_Stock10=1.66, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=unavailable autolearn_force=no
MIME-Version	1.0
Content-Type	multipart/signed; boundary="nextPart3535151.bgRvk7e4E5"; micalg="pgp-sha512"; protocol="application/pgp-signature"
X-Debian-User	rouca
X-Mailing-List	<debian-java@lists.debian.org> archive/latest/23780
List-ID	<debian-java.lists.debian.org>
List-URL	<https://lists.debian.org/debian-java/>
List-Archive	https://lists.debian.org/msgid-search/8983750.qOBuL9xsDt@debian-ei
Approved	robomod@news.nic.it
Lines	125
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	debian-lts@lists.debian.org, Emmanuel Bourg <ebourg@apache.org>, doko@debian.org, Bastien Roucaries <rouca@debian.org>, Marc Deslauriers <marc.deslauriers@canonical.com>
X-Original-Date	Wed, 06 Aug 2025 08:28:05 +0200
X-Original-Message-ID	<8983750.qOBuL9xsDt@debian-ei>
X-Original-References	<3032477.3Lj2Plt8kZ@debian-ei> <3429696.TLnPLrj5Ze@debian-ei> <3461172.otXNkdZ6W1@debian-ei>
Xref	csiph.com linux.debian.maint.java:13048

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Le vendredi 1 août 2025, 21:25:05 heure d’été d’Europe centrale Bastien 
Roucaries a écrit :
Hi Vladimir, Hi Marc,

Could you review this upgradre of ca-certificates-java and view if it is 
upgrade safe ? I will after a few week upload a ca-certificates

rouca
> Le jeudi 31 juillet 2025, 22:43:35 heure d’été d’Europe centrale Bastien
> Roucaries a écrit : Hi
> 
> I have just pushed a version here:
> https://salsa.debian.org/java-team/ca-certificates-java/-/tree/bullseye?ref_
> type=heads
> 
> Can you review ?
> 
> rouca
> 
> > Le jeudi 31 juillet 2025, 22:30:11 heure d’été d’Europe centrale Vladimir
> > 
> > Petko a écrit :
> > > Hi,
> > > 
> > > As far as I remember, 20230707 removes the circular dependency that
> > > caused upgrade issues[1][2][3]. It also requires openjdk to trigger
> > > ca-certificates-java:
> > > ----JB-jre-headless.postinst.in----
> > > # Now that java is fully registered and configured,
> > > # call update-ca-certificates-java
> > > dpkg-trigger update-ca-certificates-java
> > > ------
> > > Please check that this snippet is present in bullseye's
> > > JB-jre-headless.postinst.in of openjdk package.
> > 
> > No it is not, so that it the path to fix this ?
> > 
> > 1. first upload a openjdk  that trigger update-ca-certificates-java
> > 2. upload a backport of ca-certificates-java
> > 3. upload ca-certificates
> > 
> > rouca
> > 
> > > Best Regards,
> > > 
> > >  Vladimir.
> > > 
> > > [1]
> > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2003
> > > 75
> > > 0
> > > [2]
> > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1999
> > > 10
> > > 3
> > > [3]
> > > https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2004
> > > 06
> > > 1
> > > 
> > > On Fri, Aug 1, 2025 at 1:14 AM Julien Plissonneau Duquène
> > > 
> > > <sre4ever@free.fr> wrote:
> > > > Hi,
> > > > 
> > > > I can't help you much there as I didn't check what could break in your
> > > > case (bullseye). The last time this was discussed on the list was
> > > > 
> > > > https://lists.debian.org/debian-java/2023/02/msg00011.html
> > > > 
> > > > According to the PT in bullseye it depends on default-jre-headless
> > > > which
> > > > depends on openjdk-11-jre-headless which depends on
> > > > ca-certificates-java, but I don't see how updating it could cause
> > > > issues.
> > > > 
> > > > Maybe Emmanuel or doko could share more details about what could go
> > > > wrong?
> > > > 
> > > > Cheers,
> > > > 
> > > > --
> > > > Julien Plissonneau Duquène

Back to linux.debian.maint.java | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

  ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-07-31 12:20 +0200
  Re: ca-certificates and backport to bullseye => ca-certificates-java  problem Julien Plissonneau Duquène <sre4ever@free.fr> - 2025-07-31 15:20 +0200
    Re: ca-certificates and backport to bullseye => ca-certificates-java problem Vladimir Petko <vladimir.petko@canonical.com> - 2025-07-31 22:40 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-07-31 22:50 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java problem Utkarsh Gupta <guptautkarsh2102@gmail.com> - 2025-08-01 00:00 +0200
            Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-01 00:40 +0200
            Re: ca-certificates and backport to bullseye => ca-certificates-java problem Utkarsh Gupta <guptautkarsh2102@gmail.com> - 2025-08-01 01:10 +0200
          Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-01 21:30 +0200
            Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-06 08:30 +0200
              Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-31 15:40 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java problem Bastien Roucaries <rouca@debian.org> - 2025-08-01 19:10 +0200
        Re: ca-certificates and backport to bullseye => ca-certificates-java  problem Santiago Ruano Rincón <santiagorr@riseup.net> - 2025-08-07 20:20 +0200

csiph-web