diff --git a/security/ca-certificates/ca-certificates.conf b/security/ca-certificates/ca-certificates.conf
new file mode 100644
index 000000000..2df4f3f96
--- /dev/null
+++ b/security/ca-certificates/ca-certificates.conf
@@ -0,0 +1,67 @@
+# --- SDE-COPYRIGHT-NOTE-BEGIN ---
+# This copyright note is auto-generated by ./scripts/Create-CopyPatch.
+#
+# Filename: package/.../ca-certificates/ca-certificates.conf
+# Copyright (C) 2011 The OpenSDE Project
+#
+# More information can be found in the files COPYING and README.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 of the License. A copy of the
+# GNU General Public License can be found in the file COPYING.
+# --- SDE-COPYRIGHT-NOTE-END ---
+
+oval=""
+target=${root}/etc/ssl/certs/ca-bundle.crt
+
+do_append ()
+{
+    while [ 1 ]; do
+	shift
+	if [ -z $1 ]; then break; fi
+	oval="$oval\0$1"
+    done
+}
+
+ca_convert()
+{
+    local incert=0
+    local count=0
+  
+    echo -n > ${target}
+    while read -r LINE; do
+	if [ "${LINE}" = "CKA_VALUE MULTILINE_OCTAL" ]
+	then
+	    # certificate start
+	    incert=1
+	    oval=""
+	elif [ "${LINE}" = "END" -a $incert -eq 1 ]
+	then
+	    # certificate end
+	    echo -e -n "$oval" | openssl x509 -text -inform DER -fingerprint >> ${target}
+	    echo -n "."
+	    count=$(($count + 1))
+	    incert=0
+	elif [ $incert -eq 1 ]
+	then
+	    # certificate data
+	    IFS="\\"
+	    do_append $LINE
+	fi
+    done < certdata.txt
+    echo -e "\nDone. $count CA's converted."
+}
+
+ca_pm()
+{
+	mkdir -p $root/etc/ssl
+	tar -v $taropt `match_source_file -p ca-certificates`
+	ca_convert
+	cd $root/etc/ssl && ln -sf certs/ca-bundle.crt cert.pem
+}
+
+chownsrcdir=0
+runconf=0
+mainfunction=ca_pm
+
diff --git a/security/ca-certificates/ca-certificates.desc b/security/ca-certificates/ca-certificates.desc
new file mode 100644
index 000000000..4c23c5cab
--- /dev/null
+++ b/security/ca-certificates/ca-certificates.desc
@@ -0,0 +1,32 @@
+[COPY] --- SDE-COPYRIGHT-NOTE-BEGIN ---
+[COPY] This copyright note is auto-generated by ./scripts/Create-CopyPatch.
+[COPY]
+[COPY] Filename: package/.../ca-certificates/ca-certificates.desc
+[COPY] Copyright (C) 2011 The OpenSDE Project
+[COPY]
+[COPY] More information can be found in the files COPYING and README.
+[COPY]
+[COPY] This program is free software; you can redistribute it and/or modify
+[COPY] it under the terms of the GNU General Public License as published by
+[COPY] the Free Software Foundation; version 2 of the License. A copy of the
+[COPY] GNU General Public License can be found in the file COPYING.
+[COPY] --- SDE-COPYRIGHT-NOTE-END ---
+
+[I] The Mozilla CA root certificate bundle
+
+[T] This package contains the set of CA certificates chosen by the
+[T] Mozilla Foundation for use with the Internet PKI.
+
+[U] http://www.mozilla.org/
+
+[A] The Mozilla Foundation
+[M] The OpenSDE Community <list@opensde.org>
+
+[C] extra/crypto
+
+[L] PublicDomain
+[S] Stable
+[V] 1.73
+[P] X -----5---9 800.000
+
+[D] X ca-certificates-1.73.tar.bz2 cvs://:pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot mozilla/security/nss/lib/ckfw/builtins/certdata.txt -r 1.73