> The postinst script of the Debian 10 package copies all files from > /usr/share to /var/lib, including the files in data/certs. > So it will a) overwrite existing certificate files and b) never > generate a custom certficate.
Correction: The package does not overwrite existing certificate files as it does not include the default certificate files in data/certs. Instead, the postinst script tries to generate a certificate using OpenSSL or use the ssl-cert-snakeoil certificate as fallback. However, if the packages openssl/ssl-cert are not installed, no certificate will be installed at all and INetSim's SSL/TLS based services will fail to start.
