I have the patch that adds a temporary option to update-ca-trust extract that brings back the sym-links deleted by this change.
When this option is used, a message will prompt the user to report which package requires this option, with a prefilled Bugzilla report link as well as with a link to a list of already reported packages.
When ca-certificates package is updated/reinstalled the sym-links are removed, this helps us prevent unnecessary usage of this option as well as situations where the option, used for one application(which would be fixed at this point), might hide a similar problem in another.
Due to this I will try to push updates only once all the reported packages were resolved.
Re-running update-ca-trust after using it with the aforementioned option will preserve the old sym-links.
It is discouraged to use this option in any kind of automation, build script etc… as it will go away. It should be invoked only by the end user requiring this option.
Any thoughts?