Comment 0 for bug 1895435

Issue:
/etc/ssl/certs/ca-certificates.crt cannot update, such as when placing internal CA's into /usr/local/share/ca-certificates and attempting to update when ca-certificates package is installed on a fresh system.

Issue Description:

On a default install of ca-certificates the update-ca-certificates command fails as there is no
 /etc/ssl/certs/java directory

org.debian.security.UnableToSaveKeystoreException: There was a problem saving the new Java keystore.
        at org.debian.security.KeyStoreHandler.save(KeyStoreHandler.java:86)
        at org.debian.security.UpdateCertificates.finish(UpdateCertificates.java:108)
        at org.debian.security.UpdateCertificates.main(UpdateCertificates.java:54)
Caused by: java.io.FileNotFoundException: /etc/ssl/certs/java/cacerts (No such file or directory)
        at java.base/java.io.FileOutputStream.open0(Native Method)
        at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
        at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
        at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:126)
        at org.debian.security.KeyStoreHandler.save(KeyStoreHandler.java:82)
        ... 2 more
E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.

Workaround:

        if [ ! -d "/etc/ssl/certs/java" ]; then
         mkdir -p /etc/ssl/certs/java
        fi