case ${ACTION} in
pre)
	# clean up certificates
	backup=etc/ca-certificates.conf.tmp
	mv etc/ca-certificates.conf $backup
	echo > etc/ca-certificates.conf
	env DESTDIR="$(pwd -P)" usr/sbin/update-ca-certificates --fresh >/dev/null 2>&1
	mv $backup etc/ca-certificates.conf
	;;
post)
	[ -s etc/ssl/certs/ca-certificates.crt ] || \
		rm -f etc/ssl/certs/ca-certificates.crt
	;;
esac