If specifying ~openssl, the post-install step will still try to install the non-existent certificate, leading to an IOError.