diff --git a/config/software/cacerts.rb b/config/software/cacerts.rb
new file mode 100644
index 0000000..1f5ba3d
--- /dev/null
+++ b/config/software/cacerts.rb
@@ -0,0 +1,50 @@
+#
+# Copyright 2012-2014 Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+name "cacerts"
+
+# Date of the file is in a comment at the start, or in the changelog
+default_version "2014.08.20"
+
+version "2014.08.20" do
+  source md5: "c9f4f7f4d6a5ef6633e893577a09865e"
+end
+
+version "2014.07.15" do
+  source md5: "fd48275847fa10a8007008379ee902f1"
+end
+
+version "2014.04.22" do
+  source md5: "9f92a0d9f605e227ae068e605f4c86fa"
+end
+
+version "2014.01.28" do
+  source md5: "5d108f8ab86afacc6663aafca8604dd3"
+end
+
+source url: "http://curl.haxx.se/ca/cacert.pem"
+
+relative_path "cacerts-#{version}"
+
+build do
+  mkdir "#{install_dir}/embedded/ssl/certs"
+  copy "#{project_dir}/cacert.pem", "#{install_dir}/embedded/ssl/certs/cacert.pem"
+
+  # Windows does not support symlinks
+  unless windows?
+    link "#{install_dir}/embedded/ssl/certs/cacert.pem", "#{install_dir}/embedded/ssl/cert.pem"
+  end
+end
--
libgit2 0.21.2