provide ca-certificate-bundle file for packages reliant on it (unbound | VPN Policy-Based Routing)
OpenWRT/TO repo package
ca-certificates 20170717 does not provide a single comprehensive ca-certificate-bundle file for unbound to utilise TLS certificate validation (unbound server directive
Such ca-certificate-bundle can be created from those single certificates provided by the
ca-certificates 20170717 package and located in /etc/ssl/certs with e.g.
cat /etc/ssl/certs/* > /etc/ssl/certs/cert-bundle.pem
It would be handy to have such automated whenever the
ca-certificates [x] package gets updated from upstream