diff --git a/extraconfig/tasks/major_upgrade_controller_pacemaker_2.sh b/extraconfig/tasks/major_upgrade_controller_pacemaker_2.sh
index 63ac0a22bc..9d9b445f97 100755
--- a/extraconfig/tasks/major_upgrade_controller_pacemaker_2.sh
+++ b/extraconfig/tasks/major_upgrade_controller_pacemaker_2.sh
@@ -104,6 +104,11 @@ special_case_ovs_upgrade_if_needed
 
 yum -y install python-zaqarclient  # needed for os-collect-config
 yum -y -q update
+
+# Hack around mod_ssl and ssl.conf - we want mod_ssl but we need to prevent
+# packaging from configuring ssl.conf (puppet does that later)
+# https://bugs.launchpad.net/tripleo/+bug/1682448
+touch /etc/httpd/conf.d/ssl.conf
 yum install -y mod_ssl
 
 # We need to ensure at least those two configuration settings, otherwise