Groups > linux.debian.maint.java > #13136

Re: ca-certificates-java back to PKCS-12

Path	csiph.com!weretis.net!feeder8.news.weretis.net!fu-berlin.de!bofh.it!news.nic.it!robomod
From	Emmanuel Bourg <ebourg@apache.org>
Newsgroups	linux.debian.maint.java
Subject	Re: ca-certificates-java back to PKCS-12
Date	Thu, 05 Mar 2026 14:10:01 +0100
Message-ID	<MvgCJ-5cUW-29@gated-at.bofh.it> (permalink)
References	<Mu7rP-4q7G-7@gated-at.bofh.it>
X-Mailbox-Line	From debian-java-request@lists.debian.org Thu Mar 5 13:07:26 2026
Old-Return-Path	<ebourg@apache.org>
X-Amavis-Spam-Status	No, score=-18.259 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, NICE_REPLY_A=-2.314, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.717, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.236, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
X-Policyd-Weight	NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .apache. - helo: .mxout1-he-de.apache. - helo-domain: .apache.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5
Authentication-Results	apache.org; auth=none
MIME-Version	1.0
User-Agent	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1
Content-Language	en-US
Content-Type	text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding	8bit
X-Mailing-List	<debian-java@lists.debian.org> archive/latest/23888
List-ID	<debian-java.lists.debian.org>
List-URL	<https://lists.debian.org/debian-java/>
List-Archive	https://lists.debian.org/msgid-search/7ac80711-84e1-ad0c-146b-192623e99d39@apache.org
Approved	robomod@news.nic.it
Lines	13
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	Vladimir Petko <vladimir.petko@canonical.com>
X-Original-Date	Thu, 5 Mar 2026 14:05:39 +0100
X-Original-Message-ID	<7ac80711-84e1-ad0c-146b-192623e99d39@apache.org>
X-Original-References	<50645710.MN2xkq1pzW@debian-ei>
Xref	csiph.com linux.debian.maint.java:13136

Show key headers only | View raw

Le 02/03/2026 à 10:07, Bastien Roucaries a écrit :
> Hi,
> 
> Do you believe it is time to get back java certificate store to PKCS-12 ?
> 
> It is supported since java 9+

It sounds like a good idea to align with the current JDKs.

Ubuntu may have to change the cacerts keystore format in its openjdk-8 
package.

Emmanuel Bourg

Back to linux.debian.maint.java | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

ca-certificates-java back to PKCS-12 Bastien Roucaries <rouca@debian.org> - 2026-03-02 10:10 +0100
  Re: ca-certificates-java back to PKCS-12 Emmanuel Bourg <ebourg@apache.org> - 2026-03-05 14:10 +0100
    Re: ca-certificates-java back to PKCS-12 Bastien Roucaries <rouca@debian.org> - 2026-03-06 10:00 +0100
    Re: ca-certificates-java back to PKCS-12 Bastien Roucaries <rouca@debian.org> - 2026-03-06 10:20 +0100

csiph-web