If the dist-upgrade broke your APT packages or HTTPS scripts

Part of the mis-configured jetpack breakage has been the breakage of HTTPS scripts and apt repository signatures on the TX2 itself.
Well, at least for me, that’s been a problem after running apt dist-upgrade.

I found how to fix this:

sudo apt-get install --reinstall ca-cacert

If you’re running package management on the board itself (rather than just cross-compiling and re-flashing,) you might want to try this.