Try a different approach for handling wmf_ca_2014_2017

Actually use /usr/local/share/ca-certificates and
update-ca-certificates to populate /etc/ssl/certs for wmf_ca_2014_2017

Change-Id: I4b970fc09c0e5b18b84d5d81412e615e13f884b8
Merge "Try a different approach for handling wmf_ca_2014_2017" into production