diff --git a/panda/src/downloader/Sources.pp b/panda/src/downloader/Sources.pp
index 1e92656e6f..41219c8b15 100644
--- a/panda/src/downloader/Sources.pp
+++ b/panda/src/downloader/Sources.pp
@@ -97,3 +97,14 @@
   #define LOCAL_LIBS $[LOCAL_LIBS] putil net
   #define OTHER_LIBS $[OTHER_LIBS] pystub
 #end test_bin_target
+
+// This is a handy file for identifying public certificate authorities
+// (and thus almost any public https server).  It was taken from the
+// OpenSSL distribution; if you need a fresher copy, go get a new one
+// from the latest OpenSSL.  To use this file, point the variable
+// ssl-certificates in your Configrc file to its installed location,
+// e.g:
+//
+// ssl-certificates /usr/local/panda/install/shared/ca-bundle.crt
+//
+#define INSTALL_DATA ca-bundle.crt