openssl-c_rehash.sh uses a hard coded path to openssl:
# choose the name of an ssl application
if [ -n "${OPENSSL}" ]
then
SSL_CMD=$(which ${OPENSSL} 2>/dev/null)
else
SSL_CMD=/usr/bin/openssl
OPENSSL=${SSL_CMD}
export OPENSSL
fi
This effectively disables the dependency on openssl-native in ca-certificates.
1. Build an image containing ca-certificates on SUSE Linux Enterprise Server 11 2. Build an image containing ca-certificates on Ubuntu 3. Compare the resulting hashes in /etc/ssl/certs any bsp may be used in the test. Result: Incorrect hashes result in SSL certificate failures.
