3 files changed, 6 insertions, 4 deletions
diff --git a/security/ca_root_nss/Makefile b/security/ca_root_nss/Makefile
index 3ab0c1a1745e..67da24fce950 100644
--- a/security/ca_root_nss/Makefile
+++ b/security/ca_root_nss/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	ca_root_nss
 PORTVERSION=	${VERSION_NSS}
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	security
 MASTER_SITES=	MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
 DISTNAME=	nss-${VERSION_NSS}${NSS_SUFFIX}
@@ -34,8 +34,10 @@ VERSION_NSS=	3.117
 CERTDATA_TXT_PATH=	lib/ckfw/builtins/certdata.txt
 BUNDLE_PROCESSOR=	MAca-bundle.pl
 
+CERTCTL_CMD?=	/usr/sbin/certctl
+
 SUB_FILES=	MAca-bundle.pl pkg-deinstall pkg-install pkg-message
-SUB_LIST=	VERSION_NSS=${VERSION_NSS}
+SUB_LIST=	CERTCTL_CMD=${CERTCTL_CMD} VERSION_NSS=${VERSION_NSS}
 
 do-build:
 	@${SETENV} PATH=${LOCALBASE}/bin:$${PATH} \
diff --git a/security/ca_root_nss/files/pkg-deinstall.in b/security/ca_root_nss/files/pkg-deinstall.in
index 8e5138c10c22..612219c9e447 100644
--- a/security/ca_root_nss/files/pkg-deinstall.in
+++ b/security/ca_root_nss/files/pkg-deinstall.in
@@ -2,5 +2,5 @@
 
 if [ "$2" = POST-DEINSTALL ]; then
 	CERTCTL_ARGS="-D ${PKG_ROOTDIR}"
-	certctl ${CERTCTL_ARGS} rehash
+	%%CERTCTL_CMD%% ${CERTCTL_ARGS} rehash
 fi
diff --git a/security/ca_root_nss/files/pkg-install.in b/security/ca_root_nss/files/pkg-install.in
index 6f05ab7e72ed..e338a2a6dc08 100644
--- a/security/ca_root_nss/files/pkg-install.in
+++ b/security/ca_root_nss/files/pkg-install.in
@@ -5,7 +5,7 @@ if [ "$2" = POST-INSTALL ]; then
 	if [ -n "${PKG_METALOG}" ]; then
 		CERTCTL_ARGS="${CERTCTL_ARGS} -U -M ${PKG_METALOG}"
 	fi
-	certctl ${CERTCTL_ARGS} rehash
+	%%CERTCTL_CMD%% ${CERTCTL_ARGS} rehash
 
 	[ ! -e %%LOCALBASE%%/bin/cert-sync ] || \
 	    %%LOCALBASE%%/bin/cert-sync --quiet %%PREFIX%%/share/certs/ca-root-nss.crt