Path: csiph.com!weretis.net!feeder8.news.weretis.net!srl.newsdeef.eu!news.corradoroberto.it!diesel.cu.mi.it!bofh.it!news.nic.it!robomod From: Bastien Roucaries Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates-java back to PKCS-12 Date: Fri, 06 Mar 2026 10:00:01 +0100 Message-ID: References: X-Original-To: Emmanuel Bourg , debian-java@lists.debian.org X-Mailbox-Line: From debian-java-request@lists.debian.org Fri Mar 6 08:58:38 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-114.41 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart8657436.T7Z3S40VBb"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: rouca X-Mailing-List: archive/latest/23890 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/3412356.44csPzL39Z@debian-ei Approved: robomod@news.nic.it Lines: 69 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org, Vladimir Petko X-Original-Date: Fri, 06 Mar 2026 09:58:20 +0100 X-Original-Message-ID: <3412356.44csPzL39Z@debian-ei> X-Original-References: <50645710.MN2xkq1pzW@debian-ei> <7ac80711-84e1-ad0c-146b-192623e99d39@apache.org> Xref: csiph.com linux.debian.maint.java:13137 --nextPart8657436.T7Z3S40VBb Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Bastien Roucaries To: Emmanuel Bourg , debian-java@lists.debian.org Subject: Re: ca-certificates-java back to PKCS-12 Date: Fri, 06 Mar 2026 09:57:51 +0100 Message-ID: <3412356.44csPzL39Z@debian-ei> MIME-Version: 1.0 Le jeudi 5 mars 2026, 20:18:43 heure normale d=E2=80=99Europe centrale Vlad= imir Petko a =C3=A9crit : > Hi, >=20 > Yes, we wiil have to introduce the delta to keep the certificate store > Java 8 compatible. Please give a heads up before the upload in > Debian. Ok do we have openjkd 8 in debian due to cuda ? rouca >=20 > Best Regards, > Vladimir. >=20 > On Fri, Mar 6, 2026 at 2:05=E2=80=AFAM Emmanuel Bourg = wrote: > > > > Le 02/03/2026 =C3=A0 10:07, Bastien Roucaries a =C3=A9crit : > > > Hi, > > > > > > Do you believe it is time to get back java certificate store to PKCS-= 12 ? > > > > > > It is supported since java 9+ > > > > It sounds like a good idea to align with the current JDKs. > > > > Ubuntu may have to change the cacerts keystore format in its openjdk-8 > > package. > > > > Emmanuel Bourg >=20 >=20 --nextPart8657436.T7Z3S40VBb Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmmqlw8ACgkQADoaLapB CF9HlRAAo0ZI9X7ydN3avG8lYQY+5xN3fu7oJtGqVs8UNLoE6g/UGkFEnh3NhyC+ KSAw0yNtrq7qQ4SFUhahUqhGLkyEO1ZEFlEe/9qNONuoqArL5XA9+lgL3m+amuxH RjYNNpsL3RiTCL3h6eLpS8zMvn984FaomRphfQdFRVpi0i0t6X4qd19EDIJb4xQ3 KinyNKq7wb2BM/50mxxyAIYQ1SOK8r1SQz2DmxrS51LIZJ63mMybNcI+wE24KdhG wIEp4Q0YKiYrcaJ2/wj1AtoCsgvngDQrbWky1k8lgILxm9qCTSyGEeoBlG5yMmf3 ibyki42HiLIjVkdBavUnfGx9G8WDp/8TPgIHVKJ8oZ1enfxlZXybuRfp+mIrNJWz 5XoF9ily73YKWmB+kJIqwOOxYWD6jkzgVoOXWHf2ZL6mzZaMpO7jxMOPKC+XoNrT L3aDH7HAKFjgmI0UyK5PxnMn+ArvqZ1GpLzVXlC7JcSFmaZhN9fY5eMSHJGu5AET k2Sb5LIPyoq7DhDeyr7QUAN1nztDK1FSlH+JxXhauYiOSC1kDkddNqDfXTr1mcSr w+U71XGX8BU5CwNyvp101ph1Qo6CRhgQ8AHaTivLp3/fwT16AnN92erLG86uZT4N tOhFewEbBtMk+EO7/Qb6yHPsXXW3fgbTSZWUzTQlvfdJyRYlHGA= =xxBx -----END PGP SIGNATURE----- --nextPart8657436.T7Z3S40VBb--