Bug#1032464: ca-certificates-java post-install script requires bash

[Brian de Alwis]

Package: ca-certificates-java
Version: 20190909

ca-certificates-java has an undeclared dependency on bash which leads to
installation failure on systems without bash.

`openjdk-17-jre-headless` fails to install on minimal debian base, such as
gcr.io/gke-release/debian-base:bullseye-v1.4.2-gke.3, due to a failure in
`ca-certificates-java`'s post-install script:

```
# apt-get install --no-install-recommends -y openjdk-17-jre-headless
...
Setting up ca-certificates-java (20190909) ...
dpkg (subprocess): unable to execute installed ca-certificates-java package
post-installation script
(/var/lib/dpkg/info/ca-certificates-java.postinst): No such file or
directory
dpkg: error processing package ca-certificates-java (--configure):
 installed ca-certificates-java package post-installation script subprocess
returned error exit status 2
dpkg: dependency problems prevent configuration of
openjdk-17-jre-headless:amd64:
 openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>=
20190405~); however:
  Package ca-certificates-java is not configured yet.
...
```

The root cause is that
/var/lib/dpkg/info/ca-certificates-java.postinst's shebang specifies
`#!/bin/bash`, but bash is not a declared dependency of the
ca-certificates-java package.

Either the ca-certificates-java package should have a dependency on bash,
or the scripts should be rewritten to not require bash.

Workaround: `apt-get install --no-install-recommends -y bash
openjdk-17-jre-headless`
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20230307/4f32a45f/attachment.htm>