Bug#665749: ca-certificates-java: postinst script generates link /libnss3.so

[Jörg-Volker Peetz]

Package: ca-certificates-java
Version: 20120225
Severity: serious

Dear Maintainer,

the postinst script of package "ca-certificate-java" seems to me bogus:
in the function "first_install()" the file
"/etc/java-6-openjdk/security/nss.cfg" is searched for the term
"nssLibraryDirectory" which is only to be found in
"/etc/java-6-openjdk/security/nss-amd64.cfg" on my system.
Therefore, the variable "nssjdk" stays empty resulting in the command

  ln -sf /usr/lib/x86_64-linux-gnu/libnss3.so /libnss3.so

Doesn't this link in "/" violate the debian policy?
-- 
Best regards,
Jörg-Volker.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (600, 'testing'), (500, 'unstable'), (5, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.13 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages ca-certificates-java depends on:
ii  ca-certificates                                  20120212
ii  default-jre-headless [java6-runtime-headless]    1:1.6-47
ii  libnss3-1d                                       3.13.3-1
ii  openjdk-6-jre-headless [java6-runtime-headless]  6b24-1.11.1-3

ca-certificates-java recommends no packages.

ca-certificates-java suggests no packages.

-- Configuration Files:
/etc/default/cacerts [Errno 13] Permission denied: u'/etc/default/cacerts'

-- no debconf information