| Bug ID | 1229003 |
|---|---|
| Summary | ca-certificates-mozilla-prebuilt: java-cacerts differ |
| Classification | openSUSE |
| Product | openSUSE Tumbleweed |
| Version | Current |
| Hardware | Other |
| OS | All |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Other |
| Assignee | meissner@suse.com |
| Reporter | bwiedemann@suse.com |
| QA Contact | qa-bugs@suse.de |
| CC | jzerebecki@suse.com |
| Target Milestone | --- |
| Found By | Development |
| Blocker | --- |
While working on reproducible builds for openSUSE, I found that our ca-certificates-mozilla-prebuilt package varies in every build because java-cacerts are created by a %post script calling update-ca-certificates that calls ca-certificates/.../java.run that call trust extract ... The trust program already supports SOURCE_DATE_EPOCH to override timestamps, but apparently the %post scripts run without this variable set.