nss: signtool library search path busted

[quigley@…]

Running signtool, I get this:

$ nss-signtool -d certdb
signtool: function failed: Failure to load dynamic library.
	Unknown error: -2804

If I set DYLD_LIBRARY_PATH manually, things seem to work:

$ DYLD_LIBRARY_PATH=/opt/local/lib/nss nss-signtool -d ../certdb -L

S Certificates
- ------------
(...output here...)

This is with an up-to-date ports tree; signtool reports itself as:

Signing Tool 3.12.0.3 -a signing tool for jar files

[jeremyhu (Jeremy Huddleston Sequoia)]

Can you attach a certdb for me to try? I don't see this.

[jeremyhu (Jeremy Huddleston Sequoia)]

Yeah the problem is that it's just using dlopen() without specifying the path... You should use DYLD_FALLBACK_LIBRARY_PATH instead.

[ryandesign (Ryan Carsten Schmidt)]

I would like to determine if this is still a problem, and if so fix it, however when I try to reproduce it, I get a different error:

$ signtool -d certdb
signtool: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.

What is certdb? Is that a file or directory I'm supposed to already have? If so, how would I get it?