diff --git a/kbuildx/scripts/netbsd-deps.sh b/kbuildx/scripts/netbsd-deps.sh
index 2c56188..5afa154 100755
--- a/kbuildx/scripts/netbsd-deps.sh
+++ b/kbuildx/scripts/netbsd-deps.sh
@@ -11,12 +11,15 @@ case "$version" in
     current|trunk) pkg_release=10.1 ;;
     *) pkg_release=${version%%-*} ;;
 esac
-export PKG_PATH="https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/$pkg_arch/$pkg_release/All/"
+bootstrap_path="http://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/$pkg_arch/$pkg_release/All/"
+secure_path="https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/$pkg_arch/$pkg_release/All/"
 if ! command -v pkgin >/dev/null 2>&1; then
     printf '%s\n' 'Bootstrapping pkgin with pkg_add'
+    export PKG_PATH="$bootstrap_path"
     pkg_add pkgin
 fi
 mkdir -p /usr/pkg/etc/pkgin
-printf '%s\n' "$PKG_PATH" > /usr/pkg/etc/pkgin/repositories.conf
+export PKG_PATH="$secure_path"
+printf '%s\n' "$secure_path" > /usr/pkg/etc/pkgin/repositories.conf
 pkgin -y update
 pkgin -y install git-base mozilla-rootcerts-openssl || pkgin -y install git