Re: ca-certificate-java/openjdk installation issues
Hi,
Thank you very much for the advice !!!!
I have tested this approach [1] and it looks good - the trigger is
called after update-alternatives in the postinstall script of the
jre-headless and this guarantees that we have a working java when we
try to import certificates.
Libreoffice has no problems with installation and OpenJDK 20 packages
install successfully. If this change is ok to go forward, I will raise
merge requests on Salsa for doko to integrate it.
The issue is the migration procedure - those packages have to be
published together to avoid any nasty surprises.
Summary of changes:
- remove dependency on jre from ca-certificates-java
- leave only trigger call to update_certs in postinstall of ca-certificates-java
- remove setup_path function (we are guaranteed to have working java
in the path)
- call update-certificates-java trigger after update-alternatives in
every jre-headless postinstall script
Potential problem:
- update-certificates-java trigger logs appearing multiple times when
different openjdk versions are installed at the same time
Best Regards,
Vladimir
[1] https://launchpad.net/~vpa1977/+archive/ubuntu/ca-certificates-lowtech
On Fri, Feb 24, 2023 at 8:59 AM Thorsten Glaser <t.glaser@tarent.de> wrote:
>
> On Fri, 24 Feb 2023, Vladimir Petko wrote:
>
> >This is possible to do if we update openjdk packaging and make it
> >trigger certificates-ca-java, so that it always runs after the openjdk
>
> We can do that easily. I maintain 8 and doko the rest (I hope).
>
> If that’s needed, i.e. if there’s no other way, that is. (And
> this should not break with older ca-certificates-java, like in
> jessie/stretch-ELTS.)
>
> >Please get well!!!!!
>
> Thank you.
>
> bye,
> //mirabilos
> --
> Infrastrukturexperte • tarent solutions GmbH
> Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
> Telephon +49 228 54881-393 • Fax: +49 228 54881-235
> HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
> Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
>
> ****************************************************
> /⁀\ The UTF-8 Ribbon
> ╲ ╱ Campaign against Mit dem tarent-Newsletter nichts mehr verpassen:
> ╳ HTML eMail! Also, https://www.tarent.de/newsletter
> ╱ ╲ header encryption!
> ****************************************************
Reply to: