please add support for openjdk-8

Bug #1706442 reported by Nick Gaya
38
This bug affects 7 people
Affects Status Importance Assigned to Milestone
ca-certificates-java (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Please add support for OpenJDK 8. I conjecture that this can be done by adding the relevant packages to the postinst script (see links).

1)
$ lsb_release -rd
Description: Ubuntu 14.04.5 LTS
Release: 14.04

2)
$ apt-cache policy ca-certificates-java
ca-certificates-java:
  Installed: 20130815ubuntu1
  Candidate: 20130815ubuntu1
  Version table:
 *** 20130815ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

3-4) Cannot update openjdk-8 due to unmet dependencies.

$ sudo apt-get upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages have been kept back:
  openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless
0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.

$ sudo apt-get install openjdk-8-jre-headless
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 openjdk-8-jre-headless : Depends: ca-certificates-java but it is not going to be installed
E: Unable to correct problems, you have held broken packages.

$ aptitude why-not ca-certificates-java
i ca-certificates-java Depends openjdk-7-jre-headless (>= 7~u3-2.1.1~pre1-1
                                    ) | java6-runtime-headless
p A openjdk-8-jre-headless Provides java6-runtime-headless
p A openjdk-8-jre-headless Breaks ca-certificates-java (< 20160321~)

Links:
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851667
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775775
* https://anonscm.debian.org/viewvc/pkg-java/trunk/ca-certificates-java/debian/postinst.in?r1=19012&r2=19013

This is the first Ubuntu bug report I have filed. Please excuse any bureaucratic errors I may have made.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in ca-certificates-java (Ubuntu):
status: New → Confirmed
Revision history for this message
Samuel Penn (y-sam-7) wrote :

This is quite critical for us, and anyone else who has software with dependencies on Java 8, since that software no longer installs on 14.04 and there is no workaround. The change that caused the problem is actually in the openjdk package (which worked up until yesterday when the change was made):

https://launchpad.net/~openjdk-r/+archive/ubuntu/ppa/+sourcepub/8107440/+listing-archive-extra

Revision history for this message
Jesse S. (j.stubbins) wrote :

I echo the above statement. Virtually all of my company's applications now use Java 8 on 14.04, so this working is quite important.

Looks like the packages are rebuilding right now, so hopefully that resolves this issue.

Revision history for this message
stevenschlansker (stevenschlansker) wrote :

We're also finding that we cannot install Java 8 on Trusty anymore. One other thing I noted is that the openjdk-8 package seems to have a 'Breaks: ' directive for older versions of ca-certificates-java, including this version.

This is a really serious issue for us, and this is not the first time Java support on Ubuntu LTS has broken in really bad ways that makes me wonder what sort of testing and validation these packages go through :/

Revision history for this message
Matthias Klose (doko) wrote :

this has nothing to do with the LTS. It's a PPA.

Changed in ca-certificates-java (Ubuntu):
status: Confirmed → Invalid
Revision history for this message
Samuel Penn (y-sam-7) wrote :

Sorry, simply saying it's invalid isn't very helpful, especially for a critical bug. How should the bug have been raised? What can we do to raise it in the right place?

I've already tried raising a bug against the openjdk-r PPA, but just get a message that openjdk-r isn't configured to receive bugs.

Looking at the openjdk-8 update which caused the problem, it's saying that it's been deleted, so does that mean that the change has been rolled back, and things should be working again? If so, thank you.

Revision history for this message
stevenschlansker (stevenschlansker) wrote :

Independent of the "Java is completely broken" issue, I do think the originally stated case of "ca-certificate-java should support openjdk-8" is still totally valid. Installing this package seems to bring in java 7 even when you already have 8 installed.

The current situation is pretty ridiculous. Java 7 is EOL and not useful to the majority of users of the most popular languages on the planet. Java 8 is only available via an unsupported PPA, and any attempt to get support (either here, or on the PPA, or via the request process to get Java 8 added to Trusty) has simply failed.

I hate being that guy whining on the bug tracker, but Ubuntu is really dropping the ball on this one. Just look at the request for an official Java 8 packaging: https://bugs.launchpad.net/trusty-backports/+bug/1368094 with 750 "+1"s.

The community is trying to work with Ubuntu to highlight this and get it fixed, but every attempt either gets ignored or closed as invalid...

Revision history for this message
Nick Gaya (ngaya-ll) wrote :

From what I can tell, the rationale for adding the "Breaks" directive in openjdk-8 was that with the current version of ca-certificates-java, users who do not use one of the enumerated JVMs will not have their cert store updated when this package gets updated, which is a security problem for those users.

It's true that openjdk-8 comes from a PPA, but since it appears trivial to add support (see links) I don't see why not.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.