Latest Safari browsers will not work with custom certificates

[bukovjanmic]

In entrypoint.sh, certificates are copied:

if env | grep -q ROOT_CA_; then
for e in $(env | grep ROOT_CA_ | sed -e 's/=.*$//'); do
certname=$(echo -n $e | sed -e 's/ROOT_CA_//')
echo ${!e} | base64 -d >/tmp/ca-certificates/${certname}.crt
done
update-ca-certificates --localcertsdir /tmp/ca-certificates
fi

However, /tmp/ca-certificates does not exist in the image, so the operation fails:

/entrypoint.sh: line 44: /tmp/ca-certificates/CEZ_SYSTEM.crt: No such file or directory
/entrypoint.sh: line 44: /tmp/ca-certificates/CEZ_CA.crt: No such file or directory
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
PORT=5900

It should be fixed by either adding the directory into the image or mkdir this directory in entrypoint.