OK, I checked with Dominique and we cannot add a Requires: ca-certificates to openssl-3 since the package is not in ring0. But we can add a BuildRequires for nodejs to fix the regression tests and possibly a Requires if this is also needed at runtime. Would that be fine?