diff --git a/ca-certificates.spec b/ca-certificates.spec
index ac847a6..3cf6006 100644
--- a/ca-certificates.spec
+++ b/ca-certificates.spec
@@ -38,7 +38,7 @@ Name: ca-certificates
 Version: 2023.2.62_v7.0.401
 # for Rawhide, please always use release >= 2
 # for Fedora release branches, please use release < 2 (1.0, 1.1, ...)
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: MIT AND GPL-2.0-or-later
 
 URL: https://fedoraproject.org/wiki/CA-Certificates
@@ -319,7 +319,7 @@ fi
 #fi
 # if ln is available, go ahead and run the ca-legacy and update
 # scripts. If not, wait until %posttrans.
-if [ -x %{_bindir}/ln ]; then
+if [ -x %{_bindir}/ln ] && [ -x %{_bindir}/getopt ]; then
 %{_bindir}/ca-legacy install
 %{_bindir}/update-ca-trust
 fi
@@ -404,6 +404,9 @@ fi
 
 
 %changelog
+* Sat Oct 07 2023 Adam Williamson <awilliam@redhat.com> - 2023.2.62_v7.0.401-3
+- Skip %post if getopt is missing (recent change made update-ca-trust use it)
+
 *Wed Oct 04 2023 Robert Relyea <rrelyea@redhat.com> 2023.2.62_v7.0.401-2
  - Update to CKBI 2.62_v7.0.401 from NSS 3.93
    Removing: