Groups > linux.debian.maint.java > #10047

Re: ca-certificates-java_20170930_source.changes ACCEPTED into unstable

Path	csiph.com!weretis.net!feeder4.news.weretis.net!feeds.phibee-telecom.net!news.panservice.it!bofh.it!news.nic.it!robomod
From	Thorsten Glaser <t.glaser@tarent.de>
Newsgroups	linux.debian.maint.java
Subject	Re: ca-certificates-java_20170930_source.changes ACCEPTED into unstable
Date	Sat, 30 Sep 2017 17:10:01 +0200
Message-ID	<uvryV-5MV-7@gated-at.bofh.it> (permalink)
References	<uvqMx-5eq-9@gated-at.bofh.it> <uvqMx-5eq-7@gated-at.bofh.it>
X-Original-To	Emmanuel Bourg <ebourg@apache.org>
X-Mailbox-Line	From debian-java-request@lists.debian.org Sat Sep 30 15:09:47 2017
Old-Return-Path	<t.glaser@tarent.de>
X-Amavis-Spam-Status	No, score=-6.901 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, LDO_WHITELIST=-5, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
X-Policyd-Weight	NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .tarent. - helo: .mail.lixid. - helo-domain: .lixid.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -5
X-X-Sender	tglase@tglase.lan.tarent.de
User-Agent	Alpine 2.20 (DEB 67 2015-01-07)
Content-Language	de-DE-1901
MIME-Version	1.0
Content-Type	text/plain; charset=UTF-8
Content-Transfer-Encoding	QUOTED-PRINTABLE
X-Mailing-List	<debian-java@lists.debian.org> archive/latest/20412
List-ID	<debian-java.lists.debian.org>
List-URL	<https://lists.debian.org/debian-java/>
List-Archive	https://lists.debian.org/msgid-search/alpine.DEB.2.20.1709301708360.22179@tglase.lan.tarent.de
Approved	robomod@news.nic.it
Lines	23
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	Debian Java <debian-java@lists.debian.org>, Matthias Klose <doko@debian.org>
X-Original-Date	Sat, 30 Sep 2017 17:09:30 +0200 (CEST)
X-Original-Message-ID	<alpine.DEB.2.20.1709301708360.22179@tglase.lan.tarent.de>
X-Original-References	<E1dy5kN-0003iW-PH@fasolo.debian.org> <b506ee88-abf3-ed85-0981-6702147051ce@apache.org>
Xref	csiph.com linux.debian.maint.java:10047

Show key headers only | View raw

On Sat, 30 Sep 2017, Emmanuel Bourg wrote:

> Are you suggesting that we should drop ca-certificates-java and just
> rely on the root certificates from OpenJDK instead? I would welcome this
> simplification, the certificates in OpenJDK are frequently updated
> anyway, and that would improve the consistency with the Oracle JDK.

IMHO consistency within Debian is *much* more important.

I would be seriously fucked off if I could connect to a host
using something like wget but not a Java™ application, after
installing the custom CA into /etc/ssl/certs or similar, or
even with the defaults.

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

Thread

Re: ca-certificates-java_20170930_source.changes ACCEPTED into  unstable Emmanuel Bourg <ebourg@apache.org> - 2017-09-30 16:20 +0200
  Re: ca-certificates-java_20170930_source.changes ACCEPTED into  unstable Thorsten Glaser <t.glaser@tarent.de> - 2017-09-30 17:10 +0200
    RE: ca-certificates-java changes "Ingo Bauersachs" <ingo@jitsi.org> - 2017-10-13 00:40 +0200
    Re: ca-certificates-java changes Emmanuel Bourg <ebourg@apache.org> - 2017-10-13 00:40 +0200
    Re: ca-certificates-java changes Emmanuel Bourg <ebourg@apache.org> - 2017-10-13 01:00 +0200
      Re: ca-certificates-java changes Thorsten Glaser <t.glaser@tarent.de> - 2017-10-13 01:20 +0200
  Re: ca-certificates-java_20170930_source.changes ACCEPTED into  unstable Matthias Klose <doko@debian.org> - 2017-09-30 20:30 +0200
  Re: ca-certificates-java_20170930_source.changes ACCEPTED into unstable Tiago Daitx <tiago.daitx@canonical.com> - 2017-10-02 23:20 +0200
    Re: ca-certificates-java_20170930_source.changes ACCEPTED into  unstable Emmanuel Bourg <ebourg@apache.org> - 2017-10-13 00:20 +0200

csiph-web