/usr/lib/ganeti/ssl-update is in ganeti 2.15.2-7+deb9u3.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/lib/ganeti/../../share/ganeti/default/ssl-update
/usr/lib/ganeti/../../share/ganeti/default/ssl-update