diff --git a/kbuildx/scripts/netbsd-deps.sh b/kbuildx/scripts/netbsd-deps.sh
index 53348d3..f253ba9 100755
--- a/kbuildx/scripts/netbsd-deps.sh
+++ b/kbuildx/scripts/netbsd-deps.sh
@@ -62,6 +62,12 @@ printf '%s\n' "$package_path" > /usr/pkg/etc/pkgin/repositories.conf
 ls -ld /usr /usr/pkg /usr/pkg/lib
 mkdir -p /usr/pkg/lib/perl5/5.42.0/TAP/Formatter /usr/pkg/bin /usr/pkg/sbin /usr/pkg/etc
 
-pkgin -y update
-pkgin -y install git || cat /var/db/pkgin/pkg_install-err.log
+export ASSUME_ALWAYS_YES=yes
+pkgin update
+pkgin install git mozilla-rootcerts-openssl || cat /var/db/pkgin/pkg_install-err.log
+if command -v mozilla-rootcerts >/dev/null 2>&1; then
+    mozilla-rootcerts install
+elif [ -x /usr/pkg/sbin/mozilla-rootcerts ]; then
+    /usr/pkg/sbin/mozilla-rootcerts install
+fi
 git --version