New comment by Johnnynator on void-packages repository https://github.com/void-linux/void-packages/issues/20935#issuecomment-614627195 Comment: > @Johnnynator hmm I would not do this way. Each ssl implementation must depend on ca-certificates. Yes, all ssl implementation depend on ca-certs but ca-certs depends on only one SSL implementation. But the update-ca-certificates script right now ONLY works with libressl. And the openssl command does not have a proper way of querying whether it is OpenSSL or LibreSSL. (It always exits with 0, even when the command was not found..., so I need to judge it by what is print to stdout, argh...). Edit: correction, OpenSSL exits with `1` on invalid commands, LibreSSL is the one that always exits with `0`.