Groups > linux.debian.maint.java > #13138

Re: ca-certificates-java back to PKCS-12

Path	csiph.com!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Bastien Roucaries <rouca@debian.org>
Newsgroups	linux.debian.maint.java
Subject	Re: ca-certificates-java back to PKCS-12
Date	Fri, 06 Mar 2026 10:20:01 +0100
Message-ID	<MvzvH-5pp0-7@gated-at.bofh.it> (permalink)
References	<MvzvH-5pp0-9@gated-at.bofh.it> <Mu7rP-4q7G-7@gated-at.bofh.it> <MvgCJ-5cUW-29@gated-at.bofh.it> <Mvzcl-5p1z-13@gated-at.bofh.it>
X-Original-To	Emmanuel Bourg <ebourg@apache.org>, debian-java@lists.debian.org
X-Mailbox-Line	From debian-java-request@lists.debian.org Fri Mar 6 09:18:33 2026
Old-Return-Path	<rouca@debian.org>
X-Amavis-Spam-Status	No, score=-114.41 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no
MIME-Version	1.0
Content-Type	multipart/signed; boundary="nextPart2038055.PYKUYFuaPT"; micalg="pgp-sha512"; protocol="application/pgp-signature"
X-Debian-User	rouca
X-Mailing-List	<debian-java@lists.debian.org> archive/latest/23891
List-ID	<debian-java.lists.debian.org>
List-URL	<https://lists.debian.org/debian-java/>
List-Archive	https://lists.debian.org/msgid-search/2348464.iZASKD2KPV@debian-ei
Approved	robomod@news.nic.it
Lines	71
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	debian-java@lists.debian.org, Vladimir Petko <vladimir.petko@canonical.com>
X-Original-Date	Fri, 06 Mar 2026 10:18:14 +0100
X-Original-Message-ID	<2348464.iZASKD2KPV@debian-ei>
X-Original-References	<50645710.MN2xkq1pzW@debian-ei> <7ac80711-84e1-ad0c-146b-192623e99d39@apache.org> <CALFf3kf+B_NeY-duHtZ4TMDAth3y2iKJAkN4z3L-6=rejPRwgg@mail.gmail.com>
Xref	csiph.com linux.debian.maint.java:13138

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Le jeudi 5 mars 2026, 20:18:43 heure normale d’Europe centrale Vladimir Petko a écrit :
> Hi,
> 
> Yes, we wiil have to introduce the delta to keep the certificate store
> Java 8 compatible.  Please give a heads up before the upload in
> Debian.

Vladimir could you review head of ca-certificate-java (before PKCS12) change

I will do a release than change the format in the next upgrade

rouca

> Best Regards,
>  Vladimir.
> 
> On Fri, Mar 6, 2026 at 2:05 AM Emmanuel Bourg <ebourg@apache.org> wrote:
> >
> > Le 02/03/2026 à 10:07, Bastien Roucaries a écrit :
> > > Hi,
> > >
> > > Do you believe it is time to get back java certificate store to PKCS-12 ?
> > >
> > > It is supported since java 9+
> >
> > It sounds like a good idea to align with the current JDKs.
> >
> > Ubuntu may have to change the cacerts keystore format in its openjdk-8
> > package.
> >
> > Emmanuel Bourg
> 
>

Back to linux.debian.maint.java | Previous | Next — Previous in thread | Find similar

Thread

ca-certificates-java back to PKCS-12 Bastien Roucaries <rouca@debian.org> - 2026-03-02 10:10 +0100
  Re: ca-certificates-java back to PKCS-12 Emmanuel Bourg <ebourg@apache.org> - 2026-03-05 14:10 +0100
    Re: ca-certificates-java back to PKCS-12 Bastien Roucaries <rouca@debian.org> - 2026-03-06 10:00 +0100
    Re: ca-certificates-java back to PKCS-12 Bastien Roucaries <rouca@debian.org> - 2026-03-06 10:20 +0100

csiph-web