diff --git a/config/25.7/make.conf b/config/25.7/make.conf
index ca4cb2d..eb4d5cb 100644
--- a/config/25.7/make.conf
+++ b/config/25.7/make.conf
@@ -40,6 +40,7 @@ WARNING_WAIT=		0 # no time
 WRKDIRPREFIX=		/usr/obj
 PACKAGE_BUILDING=	yes
 FORCE_PACKAGE=		yes
+CERTCTL_CMD=		: # disable ca_root_nss updating the trust store
 #DEVELOPER=		yes
 BATCH=			yes