Comment # 6 on bug 1207484 from Marcus Meissner

if openssl-3 really accesses this directory, we can also add 

%dir /var/lib/ca-certificates/
%dir /var/lib/ca-certificates/openssl

to openssl-3.