From f12586ff4ea4d299cb4dd1687aeee73914e8e92c Mon Sep 17 00:00:00 2001
From: przemyslavic <43173646+przemyslavic@users.noreply.github.com>
Date: Mon, 7 Nov 2022 13:06:32 +0100
Subject: [PATCH] [v1.0.7] Ensure `ca-certificates` package is in the latest
 version (#3297)

---
 CHANGELOG-1.0.md                                            | 6 ++++++
 .../ubuntu-18.04/download-requirements.sh                   | 3 +++
 2 files changed, 9 insertions(+)

diff --git a/CHANGELOG-1.0.md b/CHANGELOG-1.0.md
index 0f3793e174..da057502b6 100644
--- a/CHANGELOG-1.0.md
+++ b/CHANGELOG-1.0.md
@@ -1,5 +1,11 @@
 # Changelog 1.0
 
+## [1.0.7] YYYY-MM-DD
+
+### Fixed
+
+- [#3296](https://github.com/epiphany-platform/epiphany/issues/3296) - Update `ca-certificates` package to the latest version
+
 ## [1.0.6] 2022-08-04
 
 ### Fixed
diff --git a/core/src/epicli/data/common/ansible/playbooks/roles/repository/files/download-requirements/ubuntu-18.04/download-requirements.sh b/core/src/epicli/data/common/ansible/playbooks/roles/repository/files/download-requirements/ubuntu-18.04/download-requirements.sh
index 7004c2460a..c7b7ef44e5 100644
--- a/core/src/epicli/data/common/ansible/playbooks/roles/repository/files/download-requirements/ubuntu-18.04/download-requirements.sh
+++ b/core/src/epicli/data/common/ansible/playbooks/roles/repository/files/download-requirements/ubuntu-18.04/download-requirements.sh
@@ -58,6 +58,9 @@ fi
 
 check_connection apt $apt_sources_list
 
+# Ensure ca-certificates package is in the latest version
+run_cmd_with_retries 3 apt-get install -y ca-certificates
+
 # install prerequisites which might be missing
 apt install -y wget gpg curl tar