diff --git a/xbps-src b/xbps-src
index 98fd384e467..35a31094c4f 100755
--- a/xbps-src
+++ b/xbps-src
@@ -602,7 +602,7 @@ if [ -z "$IN_CHROOT" ]; then
     fi
 fi
 
-if [ -n "$IN_CHROOT" ]; then
+if [ -n "$IN_CHROOT" -a ! -d /etc/ssl/certs ]; then
     # XXX otherwise etc/ssl/certs is not generated.
     if xbps-query ca-certificates &>/dev/null; then
         xbps-reconfigure -f ca-certificates &>/dev/null