Skip to content

[3.15] main/openssl: let libcrypto replace ca-certificates-bundle

Kevin Daudt requested to merge kdaudt/aports:3.15/openssl-replace-certbundle into 3.15-stable

libcrypto1.1 owns /etc/ssl1.1/certs and /etc/ssl1.1/cert.pem. On edge, this is owned by ca-certificates-bundle.

When downgrading from alpine edge to v3.15, this can cause conflicts, leaving the system without a valid certificate bundle. When apk is set to use https mirrors, it would even fail to fix the issue with apk fix.

Address this by allowing libcrypto1.1 to replace ca-certificates-bundle.

Edited by Kevin Daudt

Merge request reports