Package: java-package
Version: 0.56
Severity: important
Tags: patch

Dear Maintainer,

JVMs supported by Debian create a symlink for the keystore in
$JAVA_HOME/lib/security/cacerts pointing to /etc/ssl/certs/java/cacerts.
This, together with package ca-certificates-java, unifies the
management of the keystore of all Debian JVMs very nicely.
Packages generated with java-package do not create that symlink and
do not depend on ca-certificates-java which means that the standard
process to install SSL certificates (see
/usr/share/doc/ca-certificates/README.Debian) is broken.

The attached patch fixes this issue.

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages java-package depends on:
ii  debhelper   9.20141022
ii  dpkg-dev    1.17.23
ii  fakeroot    1.20.2-1
ii  libasound2  1.0.28-1
ii  libx11-6    2:1.6.2-3
ii  unzip       6.0-14

Versions of packages java-package recommends:
ii  gcc  4:4.9.1-5

Versions of packages java-package suggests:
ii  openjdk-7-jre  7u71-2.5.3-2

-- no debconf information
From 31ae773023ded5aa6e7d20bc2b63a33ab20d48b9 Mon Sep 17 00:00:00 2001
From: Francesc Zacarias <franc...@spotify.com>
Date: Tue, 27 Jan 2015 17:07:43 +0100
Subject: [PATCH] Unify cacerts

---
 lib/jdk.sh        | 2 +-
 lib/jre.sh        | 2 +-
 lib/oracle-jdk.sh | 2 ++
 lib/oracle-jre.sh | 2 ++
 4 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/lib/jdk.sh b/lib/jdk.sh
index 1c75876..45ebb30 100644
--- a/lib/jdk.sh
+++ b/lib/jdk.sh
@@ -22,7 +22,7 @@ j2sdk_control() {
     cat << EOF
 Package: $j2se_package
 Architecture: any
-Depends: \${misc:Depends}, $depends
+Depends: \${misc:Depends}, $depends, ca-certificates-java
 Recommends: netbase
 Provides: java-virtual-machine, java-runtime, java2-runtime, $provides_runtime $java_browser_plugin java-compiler, java2-compiler, java-runtime-headless, java2-runtime-headless, $provides_headless java-sdk, java2-sdk, $provides_sdk
 Description: $j2se_title
diff --git a/lib/jre.sh b/lib/jre.sh
index 93aed8b..eb9a3cd 100644
--- a/lib/jre.sh
+++ b/lib/jre.sh
@@ -9,7 +9,7 @@ j2re_control() {
     cat << EOF
 Package: $j2se_package
 Architecture: any
-Depends: \${misc:Depends}, \${shlibs:Depends}
+Depends: \${misc:Depends}, \${shlibs:Depends}, ca-certificates-java
 Recommends: netbase
 Provides: java-virtual-machine, java-runtime, java2-runtime, $provides_runtime java-runtime-headless, java2-runtime-headless, $provides_headless java-browser-plugin
 Description: $j2se_title
diff --git a/lib/oracle-jdk.sh b/lib/oracle-jdk.sh
index 1fa6657..6b3d45a 100644
--- a/lib/oracle-jdk.sh
+++ b/lib/oracle-jdk.sh
@@ -131,6 +131,8 @@ for b in $browser_plugin_dirs;do
     install_browser_plugin "/usr/lib/\$b/plugins" "libjavaplugin.so" "\$b-javaplugin.so" "\$plugin_dir/libnpjp2.so"
 done
 fi
+
+ln -sf /etc/ssl/certs/java/cacerts $jvm_base$j2se_name/jre/lib/security/cacerts
 EOF
 }
 
diff --git a/lib/oracle-jre.sh b/lib/oracle-jre.sh
index 2e1ab8c..6941a04 100644
--- a/lib/oracle-jre.sh
+++ b/lib/oracle-jre.sh
@@ -100,6 +100,8 @@ plugin_dir="$jvm_base$j2se_name/lib/$DEB_BUILD_ARCH"
 for b in $browser_plugin_dirs;do
     install_browser_plugin "/usr/lib/\$b/plugins" "libjavaplugin.so" "\$b-javaplugin.so" "\$plugin_dir/libnpjp2.so"
 done
+
+ln -sf /etc/ssl/certs/java/cacerts $jvm_base$j2se_name/lib/security/cacerts
 EOF
 }
 
-- 
2.1.4

Reply via email to