> Or you can simple add shell script in cron, which will update CA bundle > from Mozilla. > Indeed, that seems more elegant and keeps the bundle fresh.