diff --git a/core/openssl/checksums b/core/openssl/checksums
index 84317209..05e9090d 100644
--- a/core/openssl/checksums
+++ b/core/openssl/checksums
@@ -1,4 +1,4 @@
 aa7d8d9bef71ad6525c55ba11e5f4397889ce49c2c9349dcea6d3e4f0b024a7a
 397851e9cc53edcb00eb068f9ad50eda04dcf2b3659fd1ba2b6f43b5e859572a
 59ce9961cb1b1a2859cacb9863eeccc3bbeadf014840a1c61a0ac12ad31bcc9e
-d4bfcd9ee16eff65bdf6de1e0a3ccac667fdf52d98d0eda5c3e3f638aad13b89
+7f69005492f8076a23025ac22032098da7bb1753ea221f90dc0437d9934500f9
diff --git a/core/openssl/files/update-certdata.sh b/core/openssl/files/update-certdata.sh
index 29230cfb..ec2a89c6 100755
--- a/core/openssl/files/update-certdata.sh
+++ b/core/openssl/files/update-certdata.sh
@@ -1,11 +1,11 @@
 #!/bin/sh -e
 
-[ -w /etc/ssl ] || {
+[ -w "$KISS_ROOT/etc/ssl" ] || {
     printf '%s\n' "${0##*/}: root required to update cert." >&2
     exit 1
 }
 
-cd /etc/ssl && {
+cd "$KISS_ROOT/etc/ssl" && {
     curl -LO https://curl.haxx.se/ca/cacert.pem
     mv -f cacert.pem cert.pem
     printf '%s\n' "${0##*/}: updated cert.pem"