Master fix default ca dir

the CA is now stored in /etc/pki/trust/anchors
and we need to run update-ca-certificates