ca-certificates-java (20190909ubuntu1.3) jammy; urgency=medium

  * d/control: ca-certificates-java should not install default-jre-headless
    when openjdk-25-jre-headless is installed (LP: #2141785).
    This change is relevant only for Ubuntu 22.04 - ca-certificates-java
    no longer depend on Java runtime.
    - d/{postinst,jks-keystore.hook}: add openjdk-25 to the supported versions,
      add jvm configuration workaround.
    - d/t/can-install-jre: check that only one jre is installed.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Mon, 16 Feb 2026 11:12:45 +1300

ca-certificates-java (20190909ubuntu1.2) jammy-security; urgency=medium

  * REGRESSION UPDATE: ca-certificates-java can fail to install with
    openjdk-17 (LP: #2019908).
    - d/postinst, d/jks-keystore.hook: copy java.security for import tool
  * d/t/*: add autopkgtests.

 -- Vladimir Petko <vladimir.petko@canonical.com>  Thu, 18 May 2023 08:09:10 +1200

ca-certificates-java (20190909ubuntu1.1) jammy; urgency=medium

  * debian/jks-keystore.hook: Support locating Java 18-21 to avoid java
    not found message (LP: #1998065).

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 06 Jan 2023 10:48:27 +1300

ca-certificates-java (20190909ubuntu1) jammy; urgency=medium

  * debian/postinst: Support locating Java 18-21. Use setup_path() from
    20220719. (Closes LP: #1998065)

 -- Vladimir Petko <vladimir.petko@canonical.com>  Fri, 09 Dec 2022 15:17:24 +0100

ca-certificates-java (20190909) unstable; urgency=medium

  * Team upload.
  * Removed the ${nss:Depends} substvar
  * Removed the @NSS_LIB@ template parameter
  * Removed the now unused ${jre:Depends} substvar
  * Build with the DH sequencer
  * Standards-Version updated to 4.4.0

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 09 Sep 2019 11:56:28 +0200

ca-certificates-java (20190405) unstable; urgency=medium

  * Team upload.
  * Support Java 12-17 (Closes: #925431)

 -- Jochen Sprickerhof <jspricke@debian.org>  Fri, 05 Apr 2019 14:56:54 +0200

ca-certificates-java (20190214) unstable; urgency=medium

  * Team upload.
  * Declare compliance with Debian Policy 4.3.0.
  * ca-certificates-java: Depend on default-jre-headless to avoid a circular dependency on
    a specific OpenJDK package. (Closes: #864657, #910138)

 -- Markus Koschany <apo@debian.org>  Thu, 14 Feb 2019 22:21:15 +0100

ca-certificates-java (20180516) unstable; urgency=medium

  * Team upload.

  [ Tiago Stürmer Daitx ]
  * debian/jks-keystore.hook.in: don't create a jvm-*.cfg file, a default file
    with the right configuration is already supplied by the openjdk packages.
  * debian/jks-keystore.hook.in, debian/postinst.in: Only export JAVA_HOME
    and update PATH if a known jvm was found.
  * debian/postinst.in: Detect PKCS12 cacert keystore generated by
    previous ca-certificates-java and convert them to JKS. (Closes: #898678)
    (LP: #1771363)

  [ Matthias Klose ]
  * debian/rules: Explicitly depend on openjdk-11-jre-headless, needed to
    configure.

  [ Emmanuel Bourg ]
  * Use salsa.debian.org Vcs-* URLs

 -- Emmanuel Bourg <ebourg@apache.org>  Wed, 16 May 2018 23:00:38 +0200

ca-certificates-java (20180413) unstable; urgency=medium

  * Team upload.
  * Always generate a JKS keystore instead of using the default format
    (Closes: #894979)
  * Look for Java 10 and Java 11 when detecting the JRE
  * Removed Damien Raude-Morvan from the uploaders (Closes: #889412)
  * Standards-Version updated to 4.1.4
  * Switch to debhelper level 11

 -- Emmanuel Bourg <ebourg@apache.org>  Fri, 13 Apr 2018 14:15:39 +0200

ca-certificates-java (20170930) unstable; urgency=medium

  * Team upload.
  * Revert the last two NMUs.
    - Depend again on openjdk-8 after the stretch release.
    - Stop fiddling around with jvm-*.cfg files. ca-certificates-java
      has no business with providing an initial cacerts file. This is
      implemented in the openjdk packages. We are not 2008 anymore.
  * Bump standards version.
  * Remove Torsten Werner as uploader.

 -- Matthias Klose <doko@debian.org>  Sat, 30 Sep 2017 02:02:28 +0200

# For older changelog entries, run 'apt-get changelog ca-certificates-java'
