Part of the mis-configured jetpack breakage has been the breakage of HTTPS scripts and apt repository signatures on the TX2 itself.
Well, at least for me, that’s been a problem after running apt dist-upgrade.
I found how to fix this:
sudo apt-get install --reinstall ca-cacert
If you’re running package management on the board itself (rather than just cross-compiling and re-flashing,) you might want to try this.