# -*- mode: yaml; indent-tabs-mode: nil; tab-width: 2; coding: utf-8-unix -*-

# update-ca-certificates fails in Ubuntu16 with java7 but not 8
# org.debian.security.InvalidKeystorePasswordException: Cannot open Java keystore. Is the password correct?
- name: "/etc/ca-certificates/update.d/jks-keystore.diff"
  shell: |
    # this is not on Gentoo or some Ubuntu16 but the directory is there - 0 or 2 ?
    [ -f /etc/ca-certificates/update.d/jks-keystore ] || exit 0
    [ -f /etc/ca-certificates/update.d/jks-keystore.dst ] && exit 0
    [ -f /etc/ca-certificates/update.d/jks-keystore.diff ] || exit 1
    patch -z .dst -b /etc/ca-certificates/update.d/jks-keystore < \
      /etc/ca-certificates/update.d/jks-keystore.diff

# APT::Clean-Installed off