diff --git a/src/opnsense/scripts/firmware/config.sh b/src/opnsense/scripts/firmware/config.sh
index 567326ae3..9ee6a92f0 100755
--- a/src/opnsense/scripts/firmware/config.sh
+++ b/src/opnsense/scripts/firmware/config.sh
@@ -69,6 +69,7 @@ env_init()
 		fi
 
 		# ...and then tell libfetch to verify from trust store
+		export SSL_CA_CERT_PATH="/etc/ssl/certs"
 		export SSL_CRL_VERIFY="yes"
 	fi
 }