I have quickly test, and haven't had any problem to upgrade from actual package of "ca-certificates-java" from the archive to the "ca- certificates-java" (including the openjdk-8 fix) on my PPA.
Seems like in this case openjdk-9 remain and openjdk-8 is discard. Keeping the most recent openjdk version installed. But I would gladly appreciate foundation team review to double-check. # sudo apt-get install ca-certificates-java -y -------------------------- Reading package lists... Done Building dependency tree Reading state information... Done The following packages will be upgraded: ca-certificates-java 1 upgraded, 0 newly installed, 0 to remove and 9 not upgraded. Need to get 14.5 kB of archives. After this operation, 0 B of additional disk space will be used. Get:1 http://ppa.launchpad.net/slashd/sf164025/ubuntu xenial/main amd64 ca-certificates-java all 20160321ubuntu1~16.04.1ppab1 [14.5 kB] Fetched 14.5 kB in 0s (50.9 kB/s) (Reading database ... 54312 files and directories currently installed.) Preparing to unpack .../ca-certificates-java_20160321ubuntu1~16.04.1ppab1_all.deb ... Unpacking ca-certificates-java (20160321ubuntu1~16.04.1ppab1) over (20160321) ... Processing triggers for ca-certificates (20170717~16.04.1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. done. Setting up ca-certificates-java (20160321ubuntu1~16.04.1ppab1) ... Processing triggers for ca-certificates (20170717~16.04.1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. done. -------------------------- #dpkg -------------------------- ii ca-certificates 20170717~16.04.1 all Common CA certificates ii ca-certificates-java 20160321ubuntu1~16.04.1ppab1 all Common CA certificates (JKS keystore) ii openjdk-9-jre-headless:amd64 9~b114-0ubuntu1 amd64 OpenJDK Java runtime, using Hotspot JIT (headless) -------------------------- - Eric -- You received this bug notification because you are a member of OpenJDK, which is subscribed to ca-certificates-java in Ubuntu. https://bugs.launchpad.net/bugs/1723198 Title: [SRU] upgrade from 14.04 to 16.04 fails with: ca-certificates 20170717~16.04.1 failed to install/upgrade: triggers looping, abandoned Status in ca-certificates-java package in Ubuntu: Fix Released Status in ca-certificates-java source package in Xenial: In Progress Status in ca-certificates-java source package in Zesty: In Progress Bug description: [Impact] ca-certificates-java currently depend on openjdk-7 which no longer exist after Trusty. It triggers failures while doing release upgrade, due to triggers loop. [Test Case] # Install Ubuntu server 14.04.5 + all the updates. (I used "uvt-kvm create trustylp1723198 release=trusty") sudo apt-get update sudo apt-get dist-upgrade # Install ca-certificates-java and man-db. sudo apt-get install ca-certificates-java man-db # Upgrade to 16.04 LTS. sudo do-release-upgrade # Error: .......................... Removing ca-certificates-java (20130815ubuntu1) ... Removing openjdk-7-jre-headless:amd64 (7u151-2.6.11-2ubuntu0.14.04.1) ... dpkg: cycle found while processing triggers: chain of packages whose triggers are or may be responsible: man-db -> ca-certificates packages' pending triggers which are or may be unresolvable: ca-certificates: update-ca-certificates man-db: /usr/share/man dpkg: error processing package ca-certificates (--remove): triggers looping, abandoned [Regression Potential] * Regression is low risk. Xenial and late doesn't have openjdk-7 available in the archive. It has openjdk-8. This will have the effect to make the release upgrade to work correctly when ca-certificates- java is installed. This patch has been already proven to work in Artful, Bionic and Debian upstream. * See Comment #16 [Other Info] * Debian bug : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863803 * Debian commit: https://anonscm.debian.org/cgit/pkg-java/ca-certificates-java.git/commit/?id=0ddf3c9 [Original Description] Test Case: 1. Install Ubuntu server 14.04.5 + all the updates 2. Install ca-certificates-java and man-db 3. Reboot 4. Upgrade to 16.04 LTS with do-release-upgrade and proceed with the upgrade Actual Result Upgrade fails with Removing ca-certificates-java (20130815ubuntu1) ... Removing openjdk-7-jre-headless:amd64 (7u151-2.6.11-2ubuntu0.14.04.1) ... dpkg: cycle found while processing triggers: chain of packages whose triggers are or may be responsible: man-db -> ca-certificates packages' pending triggers which are or may be unresolvable: ca-certificates: update-ca-certificates man-db: /usr/share/man dpkg: error processing package ca-certificates (--remove): triggers looping, abandoned I have no further information to give at this time except to say that there were several errors during the upgrade process from 14.04. ProblemType: Package DistroRelease: Ubuntu 16.04 Package: ca-certificates 20170717~16.04.1 ProcVersionSignature: Ubuntu 4.4.0-97.120-generic 4.4.87 Uname: Linux 4.4.0-97-generic x86_64 NonfreeKernelModules: nvidia_modeset nvidia ApportVersion: 2.20.1-0ubuntu2.10 Architecture: amd64 Date: Thu Oct 12 17:52:19 2017 ErrorMessage: triggers looping, abandoned InstallationDate: Installed on 2013-11-16 (1425 days ago) InstallationMedia: Xubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016) PackageArchitecture: all RelatedPackageVersions: dpkg 1.18.4ubuntu1.2 apt 1.2.24 SourcePackage: ca-certificates Title: package ca-certificates 20170717~16.04.1 failed to install/upgrade: triggers looping, abandoned UpgradeStatus: Upgraded to xenial on 2017-10-12 (0 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1723198/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~openjdk Post to : openjdk@lists.launchpad.net Unsubscribe : https://launchpad.net/~openjdk More help : https://help.launchpad.net/ListHelp