!@#!$@! signtool thinks it knows how to verify if the certdb's are there and

OK or not. Of course it doesn't.

bob

security/nss/cmd/signtool/util.c

@@ -291,7 +291,10 @@ VerifyCertDir(char *dir, char *keyName)
      return;
   }
 
-  sprintf (fn, "%s/cert7.db", dir);
+  /* This code is really broken because it makes underlying assumptions about
+   * how the NSS profile directory is laid out, but these names can change
+   * from release to release. */
+  sprintf (fn, "%s/cert8.db", dir);
 
   if (PR_Access (fn, PR_ACCESS_EXISTS))
     {