updater/fix: Add cert-backup cleanup after cznic-cacert-bundle removal

updater/fix/Makefile

@@ -122,6 +122,11 @@ define Package/fix-corrupted-contract-by-rescue/description
   configuration. This script fixes the broken environment.
 endef
 
+define Package/fix-cleanup-cert-backup/description
+  Remove obsolete custom certificates from cert-bakup storage.
+  They originally belonged to now removed cznic-cacert-bundle package.
+endef
+
 $(eval $(call FIX,sentinel-remove-invalid-firewall-rules,+firewall +uci))
 $(eval $(call FIX,samba-migrate-to-samba4,+samba4-server +uci))
 $(eval $(call FIX,updater-v65.0-alternatives-update,+updater-ng +uci,prerm))
@@ -132,3 +137,4 @@ $(eval $(call FIX,updater-rm-log,+updater-ng))
 $(eval $(call FIX,config-foris-restore,+foris-controller +schnapps))
 $(eval $(call FIX,all-lan-ports-in-lan,+uci +netifd))
 $(eval $(call FIX,corrupted-contract-by-rescue,+uboot-envtools))
+$(eval $(call FIX,cleanup-cert-backup,+cert-backup))

updater/fix/files/cleanup-cert-backup

+#!/bin/sh
+
+cert-backup \
+	-r /etc/ssl/api.turris.pem \
+	-r /etc/ssl/startcom.pem \
+	-r /etc/ssl/turris.pem \
+	-r /etc/ssl/ucollect-server.pem \
+	-r /etc/ssl/www_turris_cz_ca.pem \
+	-r /usr/bin/get-api-crl