Path: csiph.com!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Bastien Roucaries Newsgroups: linux.debian.maint.java Subject: Re: ca-certificates-java back to PKCS-12 Date: Fri, 06 Mar 2026 10:20:01 +0100 Message-ID: References: X-Original-To: Emmanuel Bourg , debian-java@lists.debian.org X-Mailbox-Line: From debian-java-request@lists.debian.org Fri Mar 6 09:18:33 2026 Old-Return-Path: X-Amavis-Spam-Status: No, score=-114.41 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2038055.PYKUYFuaPT"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: rouca X-Mailing-List: archive/latest/23891 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/2348464.iZASKD2KPV@debian-ei Approved: robomod@news.nic.it Lines: 71 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: debian-java@lists.debian.org, Vladimir Petko X-Original-Date: Fri, 06 Mar 2026 10:18:14 +0100 X-Original-Message-ID: <2348464.iZASKD2KPV@debian-ei> X-Original-References: <50645710.MN2xkq1pzW@debian-ei> <7ac80711-84e1-ad0c-146b-192623e99d39@apache.org> Xref: csiph.com linux.debian.maint.java:13138 --nextPart2038055.PYKUYFuaPT Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Bastien Roucaries To: Emmanuel Bourg , debian-java@lists.debian.org Subject: Re: ca-certificates-java back to PKCS-12 Date: Fri, 06 Mar 2026 10:17:45 +0100 Message-ID: <2348464.iZASKD2KPV@debian-ei> MIME-Version: 1.0 Le jeudi 5 mars 2026, 20:18:43 heure normale d=E2=80=99Europe centrale Vlad= imir Petko a =C3=A9crit : > Hi, >=20 > Yes, we wiil have to introduce the delta to keep the certificate store > Java 8 compatible. Please give a heads up before the upload in > Debian. Vladimir could you review head of ca-certificate-java (before PKCS12) change I will do a release than change the format in the next upgrade rouca > Best Regards, > Vladimir. >=20 > On Fri, Mar 6, 2026 at 2:05=E2=80=AFAM Emmanuel Bourg = wrote: > > > > Le 02/03/2026 =C3=A0 10:07, Bastien Roucaries a =C3=A9crit : > > > Hi, > > > > > > Do you believe it is time to get back java certificate store to PKCS-= 12 ? > > > > > > It is supported since java 9+ > > > > It sounds like a good idea to align with the current JDKs. > > > > Ubuntu may have to change the cacerts keystore format in its openjdk-8 > > package. > > > > Emmanuel Bourg >=20 >=20 --nextPart2038055.PYKUYFuaPT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmmqm7kACgkQADoaLapB CF+LYxAAogFiCoi4oPz7MW3qm3Cyfdwu0/pzw2Nor2lKJrHZuwOJ6YivVRbVWYNg Qv0Fj78cYRK1nQsuiN8DgZYf6+ut26sgxuhyr4N2hR9iGncRK94mEkDsb6vIVecC ITpes+bKJkY6CXz4wufliePi0kJ9JUJ4JQOqFALSVRejQG1zOW1+T7Zz3qbaMs8l DDsbxBfjCJlSyxIl99j0MmHp9eGpTeY6ZpTUC7ZEJpYv36RLX6+QYGku5E8fQsD6 lGT7i8QcwVYQHVJn42Uy3bQRp068LbxrT531lskH3DBMHYVzz6E6o/ENoa9vL98C W9jYi5iaHyTf/kzwb1Xdogv5cp/HI1PIj3/E/LjtzMh+3TU+1tHePeoen7OYp3kQ U5Wn3beBO9fWK5qi3+1CLeATm4VTYvhxIBGjTElWgaNhG+0Uh1WUIX67aP8uu/7t cfEvD4CJ8BuadxrtK1/6v0cFqh/E4D4v77vYLNovVKIjsl7wQmzFvfTHxxW6JYgC NHwXNwJfjjP6Qp57YwrHkgmAuKHXi+wtK9IrohOreirH2Ar91xyuTaIOLAWsL6N8 WQJICFnssllA6pK80r868XW2aaYRIpOnMhzwRQ7oqWeVyanZLC/xUchTNEmAKomn 6k3J1nC2TjTz8UnnPSonUMdHLDhAPu3ogG0ytkjs41RS2WE5dLE= =lX6h -----END PGP SIGNATURE----- --nextPart2038055.PYKUYFuaPT--