Could this be solved with a trigger in the ca-certificates-java package? We change the postinst script [1] to do nothing if the JDK is not installed (so it's executed on upgrades but not on the first install), and we add a trigger executing the postinst script when the JDK is installed. Would that work?
Emmanuel Bourg [1] https://sources.debian.net/src/ca-certificates-java/20140324/debian/postinst.in/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org