diff --git a/internal/rosa/gnu.go b/internal/rosa/gnu.go
index 5ec0e423..0aa7e93e 100644
--- a/internal/rosa/gnu.go
+++ b/internal/rosa/gnu.go
@@ -994,6 +994,10 @@ index 1b78b8cf1..350156a86 100644
 
 		Configure: []KV{
 			{"disable-doc"},
+			{"disable-openssl-compatibility"},
+
+			{"with-default-trust-store-file", "/system/etc/ssl/certs/ca-bundle.crt"},
+			{"with-default-trust-store-pkcs11", "pkcs11:"},
 
 			{"with-zlib", "link"},
 			{"with-zstd", "link"},
@@ -1010,6 +1014,7 @@ index 1b78b8cf1..350156a86 100644
 		Python,
 		Texinfo,
 		Diffutils,
+		NSSCACert,
 
 		Libev,
 		Zlib,