[Bug 594434] update-ca-certificates should be called in %post?