- rm -f /etc/ssl/certs/ca-certificates.crt
- rm -f /etc/ca-certificates.conf
- if test -e /usr/share/debconf/confmodule; then
- . /usr/share/debconf/confmodule
- db_purge
- fi
- ;;
+ rm -f /etc/ssl/certs/ca-certificates.crt
+ remove_dangling_symlinks
+
+ # Clean up even if openssl is removed before ca-certificates.
+ # (Which is what piuparts does.)
+ [ -d /etc/ssl/certs ] && rmdir --ignore-fail-on-non-empty /etc/ssl/certs
+ [ -d /etc/ssl ] && rmdir --ignore-fail-on-non-empty /etc/ssl
+
+ rm -f /etc/ca-certificates.conf*
+ if test -e /usr/share/debconf/confmodule; then
+ . /usr/share/debconf/confmodule
+ db_purge
+ fi
+ ;;