Comment 37 for bug 855171

I believe the change that was committed for this is either wrong or incomplete. The original change that actually broke it was removing libnss3.so from the libnss3-1d package. It never should have been there, as it was already in the libnss3 package. However, jks-keystore does:

    nsspkg=$(dpkg-query -L libnss3-1d | sed -n 's,\(.*\)/libnss3\.so$,\1,p')

So, with the new libnss3-1d package, $nsspkg is empty. The “fix” was to add a test later for an empty $nsspkg. I think this is a fine change, and increases the safety of this somewhat sketchy script, but it does not fix the problem that the script is still looking for a file in the libnss3-1d packing list that is not there.

Whether it should be looking for libnss3.so.1d, or looking in the libnss3 packing list, I'm not sure.