barrier GUI is meant to automatically generate a self-signed SSL
certificate if SSL is enabled in settings but it doesn't because the
code that saves the cert tries to open the file for reading instead of
for writing.

This was fixed in upstream: https://github.com/debauchee/barrier/pull/1425,
but never made it into any release.

Can you perhaps include this patch in the Debian package?