Same for Ubuntu Focal:
```console vagrant@ubuntu2004:~/Downloads$ wget -q https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3_3.98-0ubuntu0.20.04.2_amd64.deb vagrant@ubuntu2004:~/Downloads$ wget -q https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb vagrant@ubuntu2004:~/Downloads$ ls -lah libnss*.deb -rw-rw---- 1 vagrant vagrant 1.4M Apr 11 15:22 libnss3_3.98-0ubuntu0.20.04.2_amd64.deb -rw-rw---- 1 vagrant vagrant 1.1M Apr 11 15:22 libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb vagrant@ubuntu2004:~/Downloads$ LC_ALL=C apt-cache policy libnss3 libnss3-tools libnss3: Installed: 2:3.49.1-1ubuntu1 Candidate: 2:3.98-0ubuntu0.20.04.1 Version table: 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages *** 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages 100 /var/lib/dpkg/status libnss3-tools: Installed: 2:3.49.1-1ubuntu1 Candidate: 2:3.98-0ubuntu0.20.04.1 Version table: 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages *** 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/universe amd64 Packages 100 /var/lib/dpkg/status vagrant@ubuntu2004:~/Downloads$ LC_ALL=C sudo apt-mark unhold libnss3 libnss3-tools Canceled hold on libnss3. Canceled hold on libnss3-tools. vagrant@ubuntu2004:~/Downloads$ LC_ALL=C sudo apt install --yes ./libnss3*.deb Reading package lists... Done Building dependency tree Reading state information... Done Note, selecting 'libnss3' instead of './libnss3_3.98-0ubuntu0.20.04.2_amd64.deb' Note, selecting 'libnss3-tools' instead of './libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb' The following packages will be upgraded: libnss3 libnss3-tools 2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/2446 kB of archives. After this operation, 811 kB of additional disk space will be used. Get:1 /home/vagrant/Downloads/libnss3_3.98-0ubuntu0.20.04.2_amd64.deb libnss3 amd64 2:3.98-0ubuntu0.20.04.2 [1391 kB] Get:2 /home/vagrant/Downloads/libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb libnss3-tools amd64 2:3.98-0ubuntu0.20.04.2 [1055 kB] (Reading database ... 212155 files and directories currently installed.) Preparing to unpack .../libnss3_3.98-0ubuntu0.20.04.2_amd64.deb ... Unpacking libnss3:amd64 (2:3.98-0ubuntu0.20.04.2) over (2:3.49.1-1ubuntu1) ... Preparing to unpack .../libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb ... Unpacking libnss3-tools (2:3.98-0ubuntu0.20.04.2) over (2:3.49.1-1ubuntu1) ... Setting up libnss3:amd64 (2:3.98-0ubuntu0.20.04.2) ... Setting up libnss3-tools (2:3.98-0ubuntu0.20.04.2) ... Processing triggers for man-db (2.9.1-1) ... Processing triggers for libc-bin (2.31-0ubuntu9.14) ... N: Download is performed unsandboxed as root as file '/home/vagrant/Downloads/libnss3_3.98-0ubuntu0.20.04.2_amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) vagrant@ubuntu2004:~/Downloads$ cd ~/.pki/nssdb/ vagrant@ubuntu2004:~/.pki/nssdb$ cat pkcs11.txt library= name=NSS Internal PKCS #11 Module parameters=configdir='sql:/home/vagrant/.pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' NSS=Flags=internal,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})
library=/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so name=OpenSC smartcard framework (0.22)
library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so name=PKCS #11 Trust Storage Module NSS=trustOrder=100
vagrant@ubuntu2004:~/.pki/nssdb$ modutil -dbdir . -delete "OpenSC smartcard framework (0.22)" -force Module "OpenSC smartcard framework (0.22)" deleted from database. vagrant@ubuntu2004:~/.pki/nssdb$ modutil -dbdir . -add "OpenSC smartcard framework (0.22)" -force -libfile /usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so Module "OpenSC smartcard framework (0.22)" added to database. vagrant@ubuntu2004:~/.pki/nssdb$ cat pkcs11.txt library= name=NSS Internal PKCS #11 Module parameters=configdir='sql:/home/vagrant/.pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' NSS=Flags=internal,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30})
vagrant@ubuntu2004:~/.pki/nssdb$ LC_ALL=C apt-cache policy libnss3 libnss3-tools libnss3: Installed: 2:3.98-0ubuntu0.20.04.2 Candidate: 2:3.98-0ubuntu0.20.04.2 Version table: *** 2:3.98-0ubuntu0.20.04.2 100 100 /var/lib/dpkg/status 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages libnss3-tools: Installed: 2:3.98-0ubuntu0.20.04.2 Candidate: 2:3.98-0ubuntu0.20.04.2 Version table: *** 2:3.98-0ubuntu0.20.04.2 100 100 /var/lib/dpkg/status 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/universe amd64 Packages vagrant@ubuntu2004:~/.pki/nssdb$ ```
Same for Ubuntu Focal:
```console ubuntu2004: ~/Downloads$ wget -q https:/ /launchpad. net/~ubuntu- security- proposed/ +archive/ ubuntu/ ppa/+files/ libnss3_ 3.98-0ubuntu0. 20.04.2_ amd64.deb ubuntu2004: ~/Downloads$ wget -q https:/ /launchpad. net/~ubuntu- security- proposed/ +archive/ ubuntu/ ppa/+files/ libnss3- tools_3. 98-0ubuntu0. 20.04.2_ amd64.deb ubuntu2004: ~/Downloads$ ls -lah libnss*.deb 3.98-0ubuntu0. 20.04.2_ amd64.deb tools_3. 98-0ubuntu0. 20.04.2_ amd64.deb ubuntu2004: ~/Downloads$ LC_ALL=C apt-cache policy libnss3 libnss3-tools 0ubuntu0. 20.04.1 3.98-0ubuntu0. 20.04.1 500 us.archive. ubuntu. com/ubuntu focal-updates/main amd64 Packages security. ubuntu. com/ubuntu focal-security/main amd64 Packages us.archive. ubuntu. com/ubuntu focal/main amd64 Packages dpkg/status 0ubuntu0. 20.04.1 3.98-0ubuntu0. 20.04.1 500 us.archive. ubuntu. com/ubuntu focal-updates/ universe amd64 Packages security. ubuntu. com/ubuntu focal-security/ universe amd64 Packages us.archive. ubuntu. com/ubuntu focal/universe amd64 Packages dpkg/status ubuntu2004: ~/Downloads$ LC_ALL=C sudo apt-mark unhold libnss3 libnss3-tools ubuntu2004: ~/Downloads$ LC_ALL=C sudo apt install --yes ./libnss3*.deb 3.98-0ubuntu0. 20.04.2_ amd64.deb' tools_3. 98-0ubuntu0. 20.04.2_ amd64.deb' Downloads/ libnss3_ 3.98-0ubuntu0. 20.04.2_ amd64.deb libnss3 amd64 2:3.98- 0ubuntu0. 20.04.2 [1391 kB] Downloads/ libnss3- tools_3. 98-0ubuntu0. 20.04.2_ amd64.deb libnss3-tools amd64 2:3.98- 0ubuntu0. 20.04.2 [1055 kB] 3.98-0ubuntu0. 20.04.2_ amd64.deb ... 0ubuntu0. 20.04.2) over (2:3.49.1-1ubuntu1) ... tools_3. 98-0ubuntu0. 20.04.2_ amd64.deb ... 0ubuntu0. 20.04.2) over (2:3.49.1-1ubuntu1) ... 0ubuntu0. 20.04.2) ... 0ubuntu0. 20.04.2) ... vagrant/ Downloads/ libnss3_ 3.98-0ubuntu0. 20.04.2_ amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) ubuntu2004: ~/Downloads$ cd ~/.pki/nssdb/ ubuntu2004: ~/.pki/ nssdb$ cat pkcs11.txt configdir= 'sql:/home/ vagrant/ .pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDesc ription= '' internal, critical trustOrder=75 cipherOrder=100 slotParams= (1={slotFlags= [ECC,RSA, DSA,DH, RC2,RC4, DES,RANDOM, SHA1,MD5, MD2,SSL, TLS,AES, Camellia, SEED,SHA256, SHA512] askpw=any timeout=30})
vagrant@
vagrant@
vagrant@
-rw-rw---- 1 vagrant vagrant 1.4M Apr 11 15:22 libnss3_
-rw-rw---- 1 vagrant vagrant 1.1M Apr 11 15:22 libnss3-
vagrant@
libnss3:
Installed: 2:3.49.1-1ubuntu1
Candidate: 2:3.98-
Version table:
2:
500 http://
500 http://
*** 2:3.49.1-1ubuntu1 500
500 http://
100 /var/lib/
libnss3-tools:
Installed: 2:3.49.1-1ubuntu1
Candidate: 2:3.98-
Version table:
2:
500 http://
500 http://
*** 2:3.49.1-1ubuntu1 500
500 http://
100 /var/lib/
vagrant@
Canceled hold on libnss3.
Canceled hold on libnss3-tools.
vagrant@
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libnss3' instead of './libnss3_
Note, selecting 'libnss3-tools' instead of './libnss3-
The following packages will be upgraded:
libnss3 libnss3-tools
2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/2446 kB of archives.
After this operation, 811 kB of additional disk space will be used.
Get:1 /home/vagrant/
Get:2 /home/vagrant/
(Reading database ... 212155 files and directories currently installed.)
Preparing to unpack .../libnss3_
Unpacking libnss3:amd64 (2:3.98-
Preparing to unpack .../libnss3-
Unpacking libnss3-tools (2:3.98-
Setting up libnss3:amd64 (2:3.98-
Setting up libnss3-tools (2:3.98-
Processing triggers for man-db (2.9.1-1) ...
Processing triggers for libc-bin (2.31-0ubuntu9.14) ...
N: Download is performed unsandboxed as root as file '/home/
vagrant@
vagrant@
library=
name=NSS Internal PKCS #11 Module
parameters=
NSS=Flags=
library= /usr/lib/ x86_64- linux-gnu/ onepin- opensc- pkcs11. so
name=OpenSC smartcard framework (0.22)
library= /usr/lib/ x86_64- linux-gnu/ pkcs11/ p11-kit- trust.so
name=PKCS #11 Trust Storage Module
NSS=trustOrder=100
vagrant@ ubuntu2004: ~/.pki/ nssdb$ modutil -dbdir . -delete "OpenSC smartcard framework (0.22)" -force ubuntu2004: ~/.pki/ nssdb$ modutil -dbdir . -add "OpenSC smartcard framework (0.22)" -force -libfile /usr/lib/ x86_64- linux-gnu/ onepin- opensc- pkcs11. so ubuntu2004: ~/.pki/ nssdb$ cat pkcs11.txt configdir= 'sql:/home/ vagrant/ .pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDesc ription= '' internal, critical trustOrder=75 cipherOrder=100 slotParams= (1={slotFlags= [ECC,RSA, DSA,DH, RC2,RC4, DES,RANDOM, SHA1,MD5, MD2,SSL, TLS,AES, Camellia, SEED,SHA256, SHA512] askpw=any timeout=30})
Module "OpenSC smartcard framework (0.22)" deleted from database.
vagrant@
Module "OpenSC smartcard framework (0.22)" added to database.
vagrant@
library=
name=NSS Internal PKCS #11 Module
parameters=
NSS=Flags=
library= /usr/lib/ x86_64- linux-gnu/ pkcs11/ p11-kit- trust.so
name=PKCS #11 Trust Storage Module
NSS=trustOrder=100
library= /usr/lib/ x86_64- linux-gnu/ onepin- opensc- pkcs11. so
name=OpenSC smartcard framework (0.22)
vagrant@ ubuntu2004: ~/.pki/ nssdb$ LC_ALL=C apt-cache policy libnss3 libnss3-tools 0ubuntu0. 20.04.2 0ubuntu0. 20.04.2 0ubuntu0. 20.04.2 100 dpkg/status 3.98-0ubuntu0. 20.04.1 500 us.archive. ubuntu. com/ubuntu focal-updates/main amd64 Packages security. ubuntu. com/ubuntu focal-security/main amd64 Packages 3.49.1- 1ubuntu1 500 us.archive. ubuntu. com/ubuntu focal/main amd64 Packages 0ubuntu0. 20.04.2 0ubuntu0. 20.04.2 0ubuntu0. 20.04.2 100 dpkg/status 3.98-0ubuntu0. 20.04.1 500 us.archive. ubuntu. com/ubuntu focal-updates/ universe amd64 Packages security. ubuntu. com/ubuntu focal-security/ universe amd64 Packages 3.49.1- 1ubuntu1 500 us.archive. ubuntu. com/ubuntu focal/universe amd64 Packages ubuntu2004: ~/.pki/ nssdb$
libnss3:
Installed: 2:3.98-
Candidate: 2:3.98-
Version table:
*** 2:3.98-
100 /var/lib/
2:
500 http://
500 http://
2:
500 http://
libnss3-tools:
Installed: 2:3.98-
Candidate: 2:3.98-
Version table:
*** 2:3.98-
100 /var/lib/
2:
500 http://
500 http://
2:
500 http://
vagrant@
```