OpenJDK packaged with Ubuntu and Alpine do this thing where $JAVA_HOME/jre/lib/security/cacerts is symlinked to /etc/ssl/certs/java/cacerts and the update-ca-certificates command runs a script in /etc/ca-certificates/update.d/ that updates the keystore to match the certificates files installed on the system. It makes it so that adding certs can be as easy as adding .crt files to /usr/local/share/ca-certificates/ and running update-ca-certificates.

Is this something that can or should be supported in this image?