support for Liberica JDK

[Gleb]

JDK home page: https://bell-sw.com/pages/downloads/#downloads

Ubuntu 22.04 (Kubuntu edition)

ca-certificates-java package info:

Package: ca-certificates-java
Architecture: all
Version: 20190909ubuntu1.1
Multi-Arch: foreign
Priority: optional
Section: misc
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Debian Java Maintainers <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 42
Depends: ca-certificates (>= 20121114), default-jre-headless | java8-runtime-headless, libnss3 (>= 3.12.10-2~)
Filename: pool/main/c/ca-certificates-java/ca-certificates-java_20190909ubuntu1.1_all.deb
Size: 12004
MD5sum: 26b831e7b82a3b222d6ed9bacc33b211
SHA1: 5f7a8d9a8374136ed2c6a4ce233337836c152726
SHA256: 0da5dd4a84298d5f78a39813c4140f8a23aca193755fcb67061916b0c4ae0e70
SHA512: aa3ff17b0a1d7fff198dc380ead3f7641f715ee0c8c40dc2cf37c77ee49018b5ea306cf901d1df8feccef98897340ee79c4fb58dd47e917f9bff85693b1a5fc8
Description-md5: 304cd3554728e5d076f8ecbb3b5057d8

Package: ca-certificates-java
Architecture: all
Version: 20190909
Multi-Arch: foreign
Priority: optional
Section: misc
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Debian Java Maintainers <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 43
Depends: ca-certificates (>= 20121114), default-jre-headless | java8-runtime-headless, libnss3 (>= 3.12.10-2~)
Filename: pool/main/c/ca-certificates-java/ca-certificates-java_20190909_all.deb
Size: 12132
MD5sum: 4b02a81c5f18284e30a2528f509baedb
SHA1: 645e449b2394e0868c48c8a2fba318eeff5b506d
SHA256: 1f83498a38cbc7bab8c53ed2e106895067469e8a4e88e849e9e5d6924f627ba0
SHA512: f85d6b7c7a67457150cbff9b73e574e35ab44260cb3956e385afecd3f8a86c60503d6e04bd3e9fc095dde6cb86b24e1f975ee499addce914314df14a77f58f61
Description-md5: 304cd3554728e5d076f8ecbb3b5057d8

JDK package info:

Package: bellsoft-java8-full
Status: install ok installed
Priority: extra
Section: misc
Maintainer: BellSoft <email address hidden>
Architecture: amd64
Version: 1.8.0.362+9
Provides: java8-jdk, java8-sdk, java7-jdk, java7-sdk, java6-sdk, java5-sdk, java2-sdk, java-sdk, java-compiler, java8-runtime, java7-runtime, java6-runtime, java5-runtime, java2-runtime, java-runtime, openjfx
Depends: libasound2, libc6, libfreetype6, libfontconfig1, libx11-6, libxdmcp6, libxext6, libxrender1, libxtst6, libxi6, libxau6, libxdmcp6, libxcb1, zlib1g
Description: BellSoft Liberica is a build of OpenJDK verified by the OpenJDK Technology Compatibility Kit
 test suite to be compliant with the Java SE specifications.
 For BellSoft Liberica details and updates, please visit https://bell-sw.com/liberica.
Description-md5: f17aaf5238a026a4a05c8489d1b24f08
Homepage: https://bell-sw.com/pages/libericajdk/

Why i can't use ca-certificates-java with bellsoft-java8-full? Why ca-certificates-java required headless package?

Thanks!

See also: https://github.com/bell-sw/Liberica/issues/91

[Vladimir Petko (vpa1977)]

Starting from 23.04 ca-certificates-java rely on java and keytool binaries provided by update-alternatives. The package dependency on Java runtime was removed.

22.04 still relies on having a distro java runtime installed.

Liberica JDK Maintainers may decide to have support for ca-certificates-java, but as far as I've understood they are generating their own certificate store.

[Gleb (long76)]

Thanks for answer! It's great but i need wait next LTS for using new version ca-certificates-java or Ubuntu Team planned backported ca-certificates-java to Ubuntu 22.04? Position Liberica JDK is set java.awt.headless=true property in jdk not in deb package(see https://github.com/bell-sw/Liberica/issues/91).

[Vladimir Petko (vpa1977)]

For the backport we need a Stable Release Update bug[1] and it only allows backports for:
- Security Vulnerabilities
- Serious Regressions
- Loss of Data
- Change in environment (e.g. deprecation of protocols)

What we've done with ca-certificates-java is more in the area of the new feature to support OpenJDK 20 onwards, so I have my doubts about possibility of the backport, unless it can be shown that ca-certificates-java in Jammy is broken and blocks installing Java software.

[1] https://wiki.ubuntu.com/StableReleaseUpdates