diff --git a/software/slapos-master/instance-erp5.cfg.in b/software/slapos-master/instance-erp5.cfg.in
index 0532e03e4b293f7838f17cd556e529cbf514b48f..171bd4f0316d92006ec42dce4c4c32864daa9df4 100644
--- a/software/slapos-master/instance-erp5.cfg.in
+++ b/software/slapos-master/instance-erp5.cfg.in
@@ -251,6 +251,16 @@ state = {{ dumps(slapparameter_dict.get('state', "('State',)")) }}
 city = {{ dumps(slapparameter_dict.get('city', 'City')) }}
 company = {{ dumps(slapparameter_dict.get('company', 'Compagny')) }}
 
+# XXX - Big hack: Change access for certificate authority configuration
+#       To allow apache to read openssl.cnf in this folder
+[fix-ca-folder]
+recipe = plone.recipe.command
+stop-on-error = true
+command =
+  chmod -R 770 ${apache-certificate-authority:ca-dir} && \
+  chmod 644 ${apache-certificate-authority:ca-dir}/openssl.cnf
+update-command = ${:command}
+
 [publish]
 recipe = slapos.cookbook:publish.serialised
 deadlock-debugger-password = ${deadlock-debugger-password:passwd}
@@ -267,6 +277,7 @@ hosts-dict = {{ '${' ~ zope_address_list_id_dict.keys()[0] ~ ':connection-hosts-
 [buildout]
 parts = 
   apache-certificate-authority
+  fix-ca-folder
   publish
 eggs-directory = {{ eggs_directory }}
 develop-eggs-directory = {{ develop_eggs_directory }}
diff --git a/software/slapos-master/software.cfg b/software/slapos-master/software.cfg
index 1bf81384693e36dfa64b14d8a66c843df8a73c32..e4668922beefd464a40f80edad4e0d43f282a15f 100644
--- a/software/slapos-master/software.cfg
+++ b/software/slapos-master/software.cfg
@@ -70,7 +70,7 @@ mode = 644
 [template-erp5]
 < = download-base-part
 filename = instance-erp5.cfg.in
-md5sum = 4f271175389a2e67f2092885b69c0208
+md5sum = 371157b65c48a9695b256dc335a908e7
 
 [template-balancer]
 < = download-base-part