diff --git a/patches/make-ca/jinx-working-patch.patch b/patches/make-ca/jinx-working-patch.patch
new file mode 100644
index 00000000..8da7c287
--- /dev/null
+++ b/patches/make-ca/jinx-working-patch.patch
@@ -0,0 +1,13 @@
+diff --git make-ca-clean/make-ca make-ca-workdir/make-ca
+index a7663be..f00ad05 100644
+--- make-ca-clean/make-ca
++++ make-ca-workdir/make-ca
+@@ -15,7 +15,7 @@ VERSION="1.13"
+ MAKE_CA_CONF="/etc/make-ca.conf"
+ 
+ # CA root for hg.mozilla.org
+-MOZILLA_CA_ROOT="/etc/make-ca/mozilla-ca-root.pem"
++MOZILLA_CA_ROOT="${MOZILLA_CERT_SYSROOT}/etc/make-ca/mozilla-ca-root.pem"
+ 
+ # Get/set defaults
+ if test -f "${MAKE_CA_CONF}"; then
diff --git a/recipes/make-ca b/recipes/make-ca
new file mode 100644
index 00000000..55379829
--- /dev/null
+++ b/recipes/make-ca
@@ -0,0 +1,16 @@
+name=make-ca
+revision=1
+from_source=make-ca
+imagedeps="openssl"
+rundeps="bash"
+allow_network="yes"
+
+package() {
+	# install it
+	cp -rpv ${source_dir}/* .
+	make install DESTDIR=${dest_dir}
+	install -vdm 755 ${dest_dir}/etc/ssl/local
+
+	# install certificate data
+	MOZILLA_CERT_SYSROOT=${dest_dir} ${dest_dir}/usr/sbin/make-ca -g -D ${dest_dir}
+}
diff --git a/source-recipes/make-ca b/source-recipes/make-ca
new file mode 100644
index 00000000..c574e2e4
--- /dev/null
+++ b/source-recipes/make-ca
@@ -0,0 +1,8 @@
+name=make-ca
+version=1.13
+source_method=tarball
+tarball_url="https://github.com/lfs-book/make-ca/releases/download/v${version}/make-ca-${version}.tar.xz"
+tarball_sha512=c961aec436ad2e88d462e77498640e1b55e9ed90fbe5964bbf44ab55bab511da4f3147bcd40fdac5a362db68414ba5a2f3709d1bdfdf2eb185aa0673986973ab
+regenerate() {
+        true
+}