diff --git a/core/libressl/checksums b/core/libressl/checksums
index c947538b..c519d75b 100644
--- a/core/libressl/checksums
+++ b/core/libressl/checksums
@@ -1,2 +1,2 @@
 bdc6ce5ebb3a2eafc4c475f7eeaa5f0a8e60d9bead01efb76e2e254242b6db00  libressl-3.1.1.tar.gz
-8f0ea38bd7b4ba5426f16c1a5efb9fb87774789d00df79f4d57296da18438f64  update-certdata.sh
+d4bfcd9ee16eff65bdf6de1e0a3ccac667fdf52d98d0eda5c3e3f638aad13b89  update-certdata.sh
diff --git a/core/libressl/files/update-certdata.sh b/core/libressl/files/update-certdata.sh
index 38e6a9b1..29230cfb 100755
--- a/core/libressl/files/update-certdata.sh
+++ b/core/libressl/files/update-certdata.sh
@@ -6,7 +6,7 @@
 }
 
 cd /etc/ssl && {
-    curl https://curl.haxx.se/ca/cacert.pem -o cacert.pem
+    curl -LO https://curl.haxx.se/ca/cacert.pem
     mv -f cacert.pem cert.pem
     printf '%s\n' "${0##*/}: updated cert.pem"
 }