(In reply to Marcus Meissner from comment #6) > if openssl-3 really accesses this directory, we can also add > > %dir /var/lib/ca-certificates/ > %dir /var/lib/ca-certificates/openssl > > to openssl-3. Yes, just adding these directories, even empty, solves all the problems with these additional errors. I think this would be least intrusive change.