Okay, my bad: certificates in $LOCALCERTSDIR *are* added to /etc/ssl/certs/, even though they don't appear in the multiselect list.
I don't have a need to disable locally-installed certificates via the multiselect, but do believe the behavior should be for local certificates to appear in the list. Aside from that being what I would have expected, there's also the implicit assumption that the multiselect lists *all* the system-wide SSL certificates currently active, and not just the subset shipped with the distro.
Okay, my bad: certificates in $LOCALCERTSDIR *are* added to /etc/ssl/certs/, even though they don't appear in the multiselect list.
I don't have a need to disable locally-installed certificates via the multiselect, but do believe the behavior should be for local certificates to appear in the list. Aside from that being what I would have expected, there's also the implicit assumption that the multiselect lists *all* the system-wide SSL certificates currently active, and not just the subset shipped with the distro.