diff --git a/config/hooks/live/ca.hook.chroot b/config/hooks/live/ca.hook.chroot
index 23d7759..f0bae0d 100644
--- a/config/hooks/live/ca.hook.chroot
+++ b/config/hooks/live/ca.hook.chroot
@@ -1,3 +1,7 @@
 #!/bin/sh
 
 update-ca-certificates
+
+mkdir -p /etc/skel/.pki/nssdb/
+certutil -A -n "NetDLData" -t "TC,," -d sql:/etc/skel/.pki/nssdb/ -i /usr/local/share/ca-certificates/NetDLData.crt
+
diff --git a/config/package-lists/net.list.chroot b/config/package-lists/net.list.chroot
index 88767c0..8907ce0 100644
--- a/config/package-lists/net.list.chroot
+++ b/config/package-lists/net.list.chroot
@@ -14,4 +14,5 @@ dnsutils
 ca-certificates
 wireguard
 openssh-client
-openssh-sftp-server
\ No newline at end of file
+openssh-sftp-server
+libnss3-tools