Package: java-package Version: 0.56 Severity: important Tags: patch Dear Maintainer,
JVMs supported by Debian create a symlink for the keystore in $JAVA_HOME/lib/security/cacerts pointing to /etc/ssl/certs/java/cacerts. This, together with package ca-certificates-java, unifies the management of the keystore of all Debian JVMs very nicely. Packages generated with java-package do not create that symlink and do not depend on ca-certificates-java which means that the standard process to install SSL certificates (see /usr/share/doc/ca-certificates/README.Debian) is broken. The attached patch fixes this issue. -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages java-package depends on: ii debhelper 9.20141022 ii dpkg-dev 1.17.23 ii fakeroot 1.20.2-1 ii libasound2 1.0.28-1 ii libx11-6 2:1.6.2-3 ii unzip 6.0-14 Versions of packages java-package recommends: ii gcc 4:4.9.1-5 Versions of packages java-package suggests: ii openjdk-7-jre 7u71-2.5.3-2 -- no debconf information
From 31ae773023ded5aa6e7d20bc2b63a33ab20d48b9 Mon Sep 17 00:00:00 2001 From: Francesc Zacarias <franc...@spotify.com> Date: Tue, 27 Jan 2015 17:07:43 +0100 Subject: [PATCH] Unify cacerts --- lib/jdk.sh | 2 +- lib/jre.sh | 2 +- lib/oracle-jdk.sh | 2 ++ lib/oracle-jre.sh | 2 ++ 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/lib/jdk.sh b/lib/jdk.sh index 1c75876..45ebb30 100644 --- a/lib/jdk.sh +++ b/lib/jdk.sh @@ -22,7 +22,7 @@ j2sdk_control() { cat << EOF Package: $j2se_package Architecture: any -Depends: \${misc:Depends}, $depends +Depends: \${misc:Depends}, $depends, ca-certificates-java Recommends: netbase Provides: java-virtual-machine, java-runtime, java2-runtime, $provides_runtime $java_browser_plugin java-compiler, java2-compiler, java-runtime-headless, java2-runtime-headless, $provides_headless java-sdk, java2-sdk, $provides_sdk Description: $j2se_title diff --git a/lib/jre.sh b/lib/jre.sh index 93aed8b..eb9a3cd 100644 --- a/lib/jre.sh +++ b/lib/jre.sh @@ -9,7 +9,7 @@ j2re_control() { cat << EOF Package: $j2se_package Architecture: any -Depends: \${misc:Depends}, \${shlibs:Depends} +Depends: \${misc:Depends}, \${shlibs:Depends}, ca-certificates-java Recommends: netbase Provides: java-virtual-machine, java-runtime, java2-runtime, $provides_runtime java-runtime-headless, java2-runtime-headless, $provides_headless java-browser-plugin Description: $j2se_title diff --git a/lib/oracle-jdk.sh b/lib/oracle-jdk.sh index 1fa6657..6b3d45a 100644 --- a/lib/oracle-jdk.sh +++ b/lib/oracle-jdk.sh @@ -131,6 +131,8 @@ for b in $browser_plugin_dirs;do install_browser_plugin "/usr/lib/\$b/plugins" "libjavaplugin.so" "\$b-javaplugin.so" "\$plugin_dir/libnpjp2.so" done fi + +ln -sf /etc/ssl/certs/java/cacerts $jvm_base$j2se_name/jre/lib/security/cacerts EOF } diff --git a/lib/oracle-jre.sh b/lib/oracle-jre.sh index 2e1ab8c..6941a04 100644 --- a/lib/oracle-jre.sh +++ b/lib/oracle-jre.sh @@ -100,6 +100,8 @@ plugin_dir="$jvm_base$j2se_name/lib/$DEB_BUILD_ARCH" for b in $browser_plugin_dirs;do install_browser_plugin "/usr/lib/\$b/plugins" "libjavaplugin.so" "\$b-javaplugin.so" "\$plugin_dir/libnpjp2.so" done + +ln -sf /etc/ssl/certs/java/cacerts $jvm_base$j2se_name/lib/security/cacerts EOF } -- 2.1.4