#600493 ca-certificates depends on openssl, but it's not a necessity