Path: csiph.com!weretis.net!feeder8.news.weretis.net!fu-berlin.de!bofh.it!news.nic.it!robomod From: Emmanuel Bourg Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates-java back to PKCS-12 Date: Thu, 05 Mar 2026 14:10:01 +0100 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Thu Mar 5 13:07:26 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-18.259 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, NICE_REPLY_A=-2.314, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.717, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.236, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .apache. - helo: .mxout1-he-de.apache. - helo-domain: .apache.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5 Authentication-Results: apache.org; auth=none MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1 Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailing-List: archive/latest/23888 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/7ac80711-84e1-ad0c-146b-192623e99d39@apache.org Approved: robomod@news.nic.it Lines: 13 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: Vladimir Petko X-Original-Date: Thu, 5 Mar 2026 14:05:39 +0100 X-Original-Message-ID: <7ac80711-84e1-ad0c-146b-192623e99d39@apache.org> X-Original-References: <50645710.MN2xkq1pzW@debian-ei> Xref: csiph.com linux.debian.maint.java:13136 Le 02/03/2026 à 10:07, Bastien Roucaries a écrit : > Hi, > > Do you believe it is time to get back java certificate store to PKCS-12 ? > > It is supported since java 9+ It sounds like a good idea to align with the current JDKs. Ubuntu may have to change the cacerts keystore format in its openjdk-8 package. Emmanuel Bourg