--- a/debian/postinst	Mon Nov 09 12:41:00 2015 +0100
+++ b/debian/postinst	Mon Nov 09 21:51:46 2015 +0100
@@ -19,27 +19,33 @@
 
 CONF=/etc/ca-certificates.conf
 DIR=/usr/share/ca-certificates
-CRTS=$DIR/schlittermann-ca*
+CRTS=$DIR/schlittermann/*.crt
 
 hash() { openssl x509 -noout -in "$1" -hash; }
 
 case "$1" in
     configure)
+	# aus der ca-certificates.conf entfernen
+	tmp=`mktemp`
+	grep -v '^schlittermann-ca\.crt$' $CONF > $tmp
+	cp $tmp $CONF
+	rm -f $tmp
+
 	# zuerst mal gucken, ob's nicht zufällig schon in /etc/ssl/certs
 	# mit rumliegt von früher
 
 	for CRT in $CRTS; do
 	    CRT=$(basename $CRT)
-	    HASH=`hash $DIR/$CRT`
+	    HASH=`hash $DIR/$CRT 2>/dev/null || echo 0`
 	    echo "$DIR/$CRT: $HASH"
 
 	    for p in /etc/ssl/certs/*.crt; do
-		test -e "$p" || { rm -f "$p"; continue; }
+		test -e "$p" || { rm -f "$p"; continue; }   # dangling symlinks
 		test "$HASH" = `hash "$p"` || continue
 		test -L "$p" || { rm -v "$p"; continue; }
 		test `readlink "$p"` = "$DIR/$CRT" || { rm "$p"; continue; }
 	    done
-	    grep -q "$CRT" "$CONF" || echo "$CRT" >> "$CONF"
+	    grep -F -q "schlittermann/$CRT" "$CONF" || echo "schlittermann/$CRT" >> "$CONF"
 	done
 
 	update-ca-certificates