Hi,

You should use ca-certificates-java stuff for upgrading the certificates trust

See https://sources.debian.org/src/openjdk-8/8u462-ga-1/debian/JB-jre-headless.postinst.in/#L129

Backport to bookworm, trixie will be welcomed

Control: tag -1 wontfix
Control: severity -1 normal

The sole purpose of the nvidia-openjdk-8-jre package is running the
NVidia Visual Profiler. AFAIK this does not need any certificate stuff.
The package will finally go away with CUDA 13 which no longer ships nvvp.

Installing ca-certificates-java along nvidia-openjdk-8-jre and running
the trigger results in

     Processing triggers for ca-certificates-java (20240118) ...
     No JRE found. Skipping Java certificates setup.

This is intentional as nvidia-openjdk-8-jre is not intended to provide a
generally usable JRE, e.g. it does not setup java alternatives etc.


Andreas