Re: ca-certificates and backport to bullseye => ca-certificates-java problem

[Vladimir Petko <vladimir.petko@canonical.com>]

Hi,

As far as I remember, 20230707 removes the circular dependency that
caused upgrade issues[1][2][3]. It also requires openjdk to trigger
ca-certificates-java:
----JB-jre-headless.postinst.in----
# Now that java is fully registered and configured,
# call update-ca-certificates-java
dpkg-trigger update-ca-certificates-java
------
Please check that this snippet is present in bullseye's
JB-jre-headless.postinst.in of openjdk package.

Best Regards,
 Vladimir.

[1] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2003750
[2] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1999103
[3] https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/2004061

On Fri, Aug 1, 2025 at 1:14 AM Julien Plissonneau Duquène
<sre4ever@free.fr> wrote:
>
> Hi,
>
> I can't help you much there as I didn't check what could break in your
> case (bullseye). The last time this was discussed on the list was
>
> https://lists.debian.org/debian-java/2023/02/msg00011.html
>
> According to the PT in bullseye it depends on default-jre-headless which
> depends on openjdk-11-jre-headless which depends on
> ca-certificates-java, but I don't see how updating it could cause
> issues.
>
> Maybe Emmanuel or doko could share more details about what could go
> wrong?
>
> Cheers,
>
> --
> Julien Plissonneau Duquène
>