openjdk team mailing list archive

[Nick Gaya <1706442@xxxxxxxxxxxxxxxxxx>]

>From what I can tell, the rationale for adding the "Breaks" directive in
openjdk-8 was that with the current version of ca-certificates-java,
users who do not use one of the enumerated JVMs will not have their cert
store updated when this package gets updated, which is a security
problem for those users.

It's true that openjdk-8 comes from a PPA, but since it appears trivial
to add support (see links) I don't see why not.

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in Ubuntu.
https://bugs.launchpad.net/bugs/1706442

Title:
  please add support for openjdk-8

Status in ca-certificates-java package in Ubuntu:
  Invalid

Bug description:
  Please add support for OpenJDK 8.  I conjecture that this can be done
  by adding the relevant packages to the postinst script (see links).

  1)
  $ lsb_release -rd
  Description:	Ubuntu 14.04.5 LTS
  Release:	14.04

  2)
  $ apt-cache policy ca-certificates-java
  ca-certificates-java:
    Installed: 20130815ubuntu1
    Candidate: 20130815ubuntu1
    Version table:
   *** 20130815ubuntu1 0
          500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
          100 /var/lib/dpkg/status

  3-4) Cannot update openjdk-8 due to unmet dependencies.

  $ sudo apt-get upgrade
  Reading package lists... Done
  Building dependency tree       
  Reading state information... Done
  Calculating upgrade... Done
  The following packages have been kept back:
    openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless
  0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.

  $ sudo apt-get install openjdk-8-jre-headless
  Reading package lists... Done
  Building dependency tree       
  Reading state information... Done
  Some packages could not be installed. This may mean that you have
  requested an impossible situation or if you are using the unstable
  distribution that some required packages have not yet been created
  or been moved out of Incoming.
  The following information may help to resolve the situation:

  The following packages have unmet dependencies:
   openjdk-8-jre-headless : Depends: ca-certificates-java but it is not going to be installed
  E: Unable to correct problems, you have held broken packages.

  $ aptitude why-not ca-certificates-java
  i   ca-certificates-java   Depends  openjdk-7-jre-headless (>= 7~u3-2.1.1~pre1-1
                                      ) | java6-runtime-headless                  
  p A openjdk-8-jre-headless Provides java6-runtime-headless                      
  p A openjdk-8-jre-headless Breaks   ca-certificates-java (< 20160321~)

  Links:
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851667
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775775
  * https://anonscm.debian.org/viewvc/pkg-java/trunk/ca-certificates-java/debian/postinst.in?r1=19012&r2=19013

  This is the first Ubuntu bug report I have filed.  Please excuse any
  bureaucratic errors I may have made.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1706442/+subscriptions