certs: Make sure package and group 'ssl-cert' are present.

Signed-off-by: Maximilian Wilhelm <max@rfc2324.org>

certs/init.sls

@@ -6,6 +6,8 @@ openssl:
   pkg.installed:
     - name: openssl
 
+ssl-cert:
+  pkg.installed
 
 update_ca_certificates:
   cmd.wait:
@@ -100,4 +102,6 @@ update_ca_certificates:
     - user: root
     - group: ssl-cert
     - mode: 440
+    - require:
+      - pkg: ssl-cert
 {% endfor %}