Do not try to use "mktemp --tmpdir" in the update-ca-certificates script. This broke upgrading, as the script gets executed during post-upgrade. Related: 66951d3b45 Related: SYS#5283
66951d3b45
We cannot just use the new upstream package but have to deal a bit with package naming convention changes. Fixes: cbc0de86f4
cbc0de86f4
Import latest version from openembedded-core.git, which has the expired "DST Root CA X3" removed. Fixes: OS#5259 Related: 5b83fd9847 Related: 9c351e7a0b Related: https://github.com/openembedded/openembedded-core/tree/hardknott/meta/recipes-support/ca-certificates/ca-certificates
5b83fd9847
9c351e7a0b