`/etc/ssl` won't be present on a base system, which doesn't have openssl installed (I think).

I would just reword this to say something along the lines of "you should put your SSL certs in a directory, which you need to make available to the container at runtime"?