Hi, Thank you very much for the advice !!!!
I have tested this approach [1] and it looks good - the trigger is called after update-alternatives in the postinstall script of the jre-headless and this guarantees that we have a working java when we try to import certificates. Libreoffice has no problems with installation and OpenJDK 20 packages install successfully. If this change is ok to go forward, I will raise merge requests on Salsa for doko to integrate it. The issue is the migration procedure - those packages have to be published together to avoid any nasty surprises. Summary of changes: - remove dependency on jre from ca-certificates-java - leave only trigger call to update_certs in postinstall of ca-certificates-java - remove setup_path function (we are guaranteed to have working java in the path) - call update-certificates-java trigger after update-alternatives in every jre-headless postinstall script Potential problem: - update-certificates-java trigger logs appearing multiple times when different openjdk versions are installed at the same time Best Regards, Vladimir [1] https://launchpad.net/~vpa1977/+archive/ubuntu/ca-certificates-lowtech On Fri, Feb 24, 2023 at 8:59 AM Thorsten Glaser <t.gla...@tarent.de> wrote: > > On Fri, 24 Feb 2023, Vladimir Petko wrote: > > >This is possible to do if we update openjdk packaging and make it > >trigger certificates-ca-java, so that it always runs after the openjdk > > We can do that easily. I maintain 8 and doko the rest (I hope). > > If that’s needed, i.e. if there’s no other way, that is. (And > this should not break with older ca-certificates-java, like in > jessie/stretch-ELTS.) > > >Please get well!!!!! > > Thank you. > > bye, > //mirabilos > -- > Infrastrukturexperte • tarent solutions GmbH > Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/ > Telephon +49 228 54881-393 • Fax: +49 228 54881-235 > HRB AG Bonn 5168 • USt-ID (VAT): DE122264941 > Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg > > **************************************************** > /⁀\ The UTF-8 Ribbon > ╲ ╱ Campaign against Mit dem tarent-Newsletter nichts mehr verpassen: > ╳ HTML eMail! Also, https://www.tarent.de/newsletter > ╱ ╲ header encryption! > ****************************************************
