I found the cause of the failure. It is due to the glob in the remove_leftover_crls function. If the glob does not match any files (which is most likely the case on new installations), the loop variable contains an asterisk and the expansion of ${i%.*} will list all files in that directory.
The globbing behaviour of sh is truly hairy. I'll have to find a way to see if the directory contains any .r0 files at all, and all the examples I find are pretty ugly. A temporary workaround is to install and run fetch-crl, which will populate the directory with r0 files. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org