[Git][java-team/ca-certificates-java][stretch] Fix the bogus comparison for the keystore magic

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch stretch at Debian Java Maintainers / ca-certificates-java


Commits:
d42d328c by Arnaud Rebillout at 2026-02-25T15:38:14+01:00
Fix the bogus comparison for the keystore magic

The `\x` is a bashism, it's not supported in eg. sh or dash:

    $ sh -c "echo -en '\xfe\xed\xfe\xed'"
    -en \xfe\xed\xfe\xed

So it looks like this comparison never worked, ever?

Fix it by comparing the hexadecimal output instead.

- - - - -


1 changed file:

- debian/ca-certificates-java.postinst


Changes:

=====================================
debian/ca-certificates-java.postinst
=====================================
@@ -205,7 +205,7 @@ if [ "$1" = "configure" ]; then
 
 	if dpkg --compare-versions "$2" lt-nl "20180516"; then
 		if [ -e /etc/ssl/certs/java/cacerts ] && \
-			[ "$(head -c4 /etc/ssl/certs/java/cacerts)" != "$(echo -en '\xfe\xed\xfe\xed')" ]; then
+			[ "$(head -c4 /etc/ssl/certs/java/cacerts | od -A n -t x1 | tr -d ' ')" != "feedfeed" ]; then
 			touch /var/lib/ca-certificates-java/convert_pkcs12_keystore_to_jks
 		fi
 	fi



View it on GitLab: https://salsa.debian.org/java-team/ca-certificates-java/-/commit/d42d328c357c8ec6001183a39bddeef11f717e6a

-- 
View it on GitLab: https://salsa.debian.org/java-team/ca-certificates-java/-/commit/d42d328c357c8ec6001183a39bddeef11f717e6a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20260225/d6b416b5/attachment.htm>