From 65ed8415534929a1f4e17f6902373aad53a02ca5 Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <adellam@isti.cnr.it>
Date: Thu, 15 Feb 2018 16:34:38 +0100
Subject: [PATCH] openjdk: Rebuilt /etc/ssl/certs/java/cacerts after the
 installation. The package fails to do it. See
 https://support.d4science.org/issues/11176

---
 openjdk/tasks/main.yml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/openjdk/tasks/main.yml b/openjdk/tasks/main.yml
index 45fe016..b11725d 100644
--- a/openjdk/tasks/main.yml
+++ b/openjdk/tasks/main.yml
@@ -8,10 +8,16 @@
       with_nested:
         - '{{ openjdk_version }}'
         - '{{ openjdk_pkgs }}'
-        #    - [ 'jre', 'jre-headless', 'jdk' ]
       notify: Set the default OpenJDK
+      register: openjdk_installed
 
-    - name: Set fact jdk_installed
-      set_fact: jdk_installed=true
+    - name: Rebuild the Ubuntu keystore
+      command: update-ca-certificates --fresh
+      when: ( openjdk_installed | changed )
+
+    - name: Set the default OpenJDK
+      shell: update-java-alternatives -s java-1.{{ item }}.0-openjdk-amd64
+      with_items: '{{ openjdk_default }}'
+      when: ( openjdk_installed | changed )
 
   tags: [ 'jdk', 'openjdk' ]