Add updarte script - 500.ca-certificates_upgrade.sh

Add updarte script - 500.ca-certificates_upgrade.sh

Update script will re-create the concatenated CA bundle
and re-make links to certs on RW partition.

The update script uses openssl binary to parse certificates,
so the line:

Requires: openssl1.1

was added to spec file. CA bundle could be created during
ca-certificate package build, but it looks like the scripts
to manage certificates were already installed together with
the package, so current logic (of creating the bundle
on actual image) was preserved with this "Requires",
at the expense of some additional disk usage for openssl binary.

Change-Id: I4bc44e945ca6592ead02a94c363d984a9982fe05