Comment 17 for bug 1723198

I have quickly test, and haven't had any problem to upgrade from actual package of "ca-certificates-java" from the archive to the "ca-certificates-java" (including the openjdk-8 fix) on my PPA.

Seems like in this case openjdk-9 remain and openjdk-8 is discard. Keeping the most recent openjdk version installed.

But I would gladly appreciate foundation team review to double-check.

# sudo apt-get install ca-certificates-java -y
--------------------------
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be upgraded:
  ca-certificates-java
1 upgraded, 0 newly installed, 0 to remove and 9 not upgraded.
Need to get 14.5 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://ppa.launchpad.net/slashd/sf164025/ubuntu xenial/main amd64 ca-certificates-java all 20160321ubuntu1~16.04.1ppab1 [14.5 kB]
Fetched 14.5 kB in 0s (50.9 kB/s)
(Reading database ... 54312 files and directories currently installed.)
Preparing to unpack .../ca-certificates-java_20160321ubuntu1~16.04.1ppab1_all.deb ...
Unpacking ca-certificates-java (20160321ubuntu1~16.04.1ppab1) over (20160321) ...
Processing triggers for ca-certificates (20170717~16.04.1) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

done.
done.
Setting up ca-certificates-java (20160321ubuntu1~16.04.1ppab1) ...
Processing triggers for ca-certificates (20170717~16.04.1) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

done.
done.

--------------------------

#dpkg
--------------------------
ii ca-certificates 20170717~16.04.1 all Common CA certificates
ii ca-certificates-java 20160321ubuntu1~16.04.1ppab1 all Common CA certificates (JKS keystore)
ii openjdk-9-jre-headless:amd64 9~b114-0ubuntu1 amd64 OpenJDK Java runtime, using Hotspot JIT (headless)
--------------------------

- Eric