diff --git a/pkgs/ca-certificates/build.sh b/pkgs/ca-certificates/build.sh
new file mode 100644
index 0000000..31c9805
--- /dev/null
+++ b/pkgs/ca-certificates/build.sh
@@ -0,0 +1,42 @@
+pkgname=ca-certificates
+pkgver=202200601
+pkgrel=2
+
+fetch(){
+        curl http://ftp.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_20200601~deb10u2.tar.xz -o $pkgname-$pkgver.tar.gz
+        tar -xf $pkgname-$pkgver.tar.gz
+}
+
+
+build() {
+	cd work
+	make
+}
+
+package() {
+	mkdir build
+	mkdir -p build/usr/bin
+	mkdir -p build/usr/sbin
+	mkdir -p build/etc/ssl/
+	mkdir -p build/usr/share/ca-certificates
+	
+	make install DESTDIR="$pkgdir/build"
+
+	(
+		echo "# Automatically generated by ${pkgname}-${pkgver}-${pkgrel}"
+		echo "# $(date -u)"
+		echo "# Do not edit."
+		cd "$pkgdir"/usr/share/ca-certificates
+		find . -name '*.crt' | sort | cut -b3-
+	) > "$pkgdir/build"/etc/ca-certificates.conf
+
+	cat > "$pkgdir/build"/etc/ca-certificates/update.d/certhash <<-EOF
+		#!/bin/sh
+		exec /usr/bin/c_rehash /etc/ssl/certs
+	EOF
+	
+	cat "$pkgdir/build"/usr/share/ca-certificates/mozilla/*.crt > $pkgdir/build/etc/ssl/cert.pem
+	chmod +x "$pkgdir/build"/etc/ca-certificates/update.d/certhash
+	mv -v ${pkgdir}/build/usr/sbin/* ${pkgdir}/build/usr/bin/
+	rm -rf ${pkgdir}/build/usr/sbin
+}
diff --git a/pkgs/curl/build.sh b/pkgs/curl/build.sh
index 3695106..5a7935d 100644
--- a/pkgs/curl/build.sh
+++ b/pkgs/curl/build.sh
@@ -1,11 +1,11 @@
-pkgver=7.74.0
+pkgver=7.75.0
 pkgname=curl
 pkgrel=1
 bad=""
 ext="doc:dev"
 
 fetch() {
-	curl -L "https://github.com/curl/curl/releases/download/curl-7_74_0/curl-7.74.0.tar.xz" -o $pkgname-$pkgver.tar.gz
+	curl -L "https://github.com/curl/curl/releases/download/curl-7_75_0/curl-7.75.0.tar.xz" -o $pkgname-$pkgver.tar.gz
 	tar -xf $pkgname-$pkgver.tar.gz
 }