Description of problem:
When nss-sysinit is enabled, certutil -L show incorrect / incomplete info when trying to list contents of sql:/etc/pki/nssdb/ database.


I created system nssdb with the following content:
- added and later removed trusted certificate named cacert.org
- added trusted certificate named test-ca

Listing the content of it with sysinit disabled returns:

$ certutil -L -d sql:/etc/pki/nssdb/

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

test-ca                                                      CT,C,C


I created user nssdb with the following content:
- added untrusted certificate named cacert.org (the same one that was added to and later removed from system nssdb)

Listing of the db is:

$ certutil -L -d sql:$HOME/.pki/nssdb

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

cacert.org                                                   ,,  


After enabling nss-sysinit, output for system nssdb changes to:

$ certutil -L -d sql:/etc/pki/nssdb/

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

cacert.org                                                   CT,C,C


test-ca is not listed.  cacert.org is listed as trusted, even though it has been deleted already (this problem is already covered by bug #633043).


Version-Release number of selected component (if applicable):
nss-3.12.7-6.fc13