(In reply to Wolfgang Rosenauer from comment #37) > Quick update: > All NSS packages I'm aware of now have crypto-policies disabled again. > Therefore locking or going back/or stay with 3.97 is not required anymore. > > The relevant support will be added later again. Just to confirm: Leap 15.5 updated mozilla-nss etc to 3.98-lp155.2.1 - all now appears OK, addons can be installed, forced signature verification succeeds.