Followup-For: Bug #825730 Control: found -1 20141019+deb8u2 Hi,
the fix that was backported to jessie is incomplete. update-ca-certificates in jessie does not know about the --hooksdir option, therefore the call that was added in the postinst is a no-op that just prints the usage and initial update of /etc/ssl/certs is still deferred to the hooks: Selecting previously unselected package ca-certificates. Preparing to unpack .../ca-certificates_20141019+deb8u2_all.deb ... Unpacking ca-certificates (20141019+deb8u2) ... Setting up ca-certificates (20141019+deb8u2) ... /usr/sbin/update-ca-certificates: [--verbose] [--fresh] Processing triggers for ca-certificates (20141019+deb8u2) ... Updating certificates in /etc/ssl/certs... 174 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d....done. Looks like you need to backport some more commits to get the --hooksdir option for update-ca-certificates into jessie, too. At least this one (but I didn't test whether this is sufficient): fd660d3 Allow customisation of the paths used by update-ca-certificates Andreas