[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ca-certificates and backport to bullseye => ca-certificates-java problem



Le jeudi 31 juillet 2025, 23:39:22 heure d’été d’Europe centrale Utkarsh Gupta a écrit :
> Hi Bastien,
> 
> On Fri, Aug 1, 2025 at 2:13 AM Bastien Roucaries <rouca@debian.org> wrote:
> > 1. first upload a openjdk  that trigger update-ca-certificates-java
> > 2. upload a backport of ca-certificates-java
> > 3. upload ca-certificates
> 
> Correct - that's the right sequence. Following up with Vladimir also
> tells me that
> - The first step will get you openjdk reconfiguring ca-certificates-java
> twice. - Then you immediately upload a backport that breaks circular
> dependency. - And then you can refresh ca-certificates.
> 
> Note that this needs to happen for all the openjdk in bullseye - which
> means openjdk-11, openjdk-17, *and* nvidia-openjdk-8-jre.
* 11 is ok : https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk-11/debian/JB-jre-headless.postinst.in#L129
* 17 is ok : https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk-17/debian/JB-jre-headless.postinst.in#L97
* nvidia-openjdk-8-jre is not ok and it does not use ca-certificates-java

Vladimir Petko can you see if I should open a RC bug against  nvidia-openjdk-8-jre ?


> 
> Let me know if you need anything else. Also, please go ahead with or
> without adding them to dla-needed, whatever you find convenient.
> 
> 
> - u

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: