-e 's/^[[:space:]]*1[[:space:]]*/!/' \
>> /etc/ca-certificates.conf
fi
- update-ca-certificates
+ # fix bogus symlink to ca-certificates.crt on upgrades; see
+ # Debian #643667; drop after wheezy
+ if dpkg --compare-versions "$2" lt-nl 20110502+nmu2+643667; then
+ update-ca-certificates --fresh
+ else
+ update-ca-certificates
+ fi
;;
abort-upgrade|abort-remove|abort-deconfigure)