diff --git a/vars/debian.yml b/vars/debian.yml
index 721a37ef..2c290f42 100644
--- a/vars/debian.yml
+++ b/vars/debian.yml
@@ -82,7 +82,9 @@ _package_repos_keys:
     url: "http://osbpo.debian.net/osbpo/dists/pubkey.gpg"
     state: present
 
-_package_list: []
+_package_list:
+  - name: ca-certificates
+    state: latest
 
 _osbpo_release: "{{ hostvars[inventory_hostname]['ansible_facts']['distribution_major_version'] is version('10', '>') | ternary(openstack_distrib_code_name | lower, 'victoria') }}"
 
diff --git a/vars/redhat-8.yml b/vars/redhat-8.yml
index 24e6230d..36cd9a7c 100644
--- a/vars/redhat-8.yml
+++ b/vars/redhat-8.yml
@@ -86,6 +86,8 @@ _package_list:
     state: absent
   - name: centos-release-storage-common
     state: absent
+  - name: ca-certificates
+    state: latest
 
 _openstack_hosts_rdo_repo_url: "{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/current/"
 _openstack_hosts_rdo_deps_url: "{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/deps/latest/"
diff --git a/vars/ubuntu-18.04.yml b/vars/ubuntu-18.04.yml
index c732fb25..6c64e739 100644
--- a/vars/ubuntu-18.04.yml
+++ b/vars/ubuntu-18.04.yml
@@ -89,6 +89,8 @@ _package_repos_keys: []
 _package_list:
   - name: ubuntu-cloud-keyring
     state: "{{ openstack_hosts_package_state }}"
+  - name: ca-certificates
+    state: latest
 
 _package_repos:
   # Implement the current UCA repo configuration
diff --git a/vars/ubuntu-20.04.yml b/vars/ubuntu-20.04.yml
index 58b96866..c76c1c16 100644
--- a/vars/ubuntu-20.04.yml
+++ b/vars/ubuntu-20.04.yml
@@ -87,6 +87,8 @@ _package_repos_keys: []
 _package_list:
   - name: ubuntu-cloud-keyring
     state: "{{ openstack_hosts_package_state }}"
+  - name: ca-certificates
+    state: latest
 
 _package_repos: []
   # Implement the current UCA repo configuration