diff --git a/backupninja/files/dup.conf b/backupninja/files/dup.conf
index 3cdf1fd..e57e9bf 100644
--- a/backupninja/files/dup.conf
+++ b/backupninja/files/dup.conf
@@ -14,7 +14,7 @@
 ## options = --s3-european-buckets --s3-use-new-style
 ##
 ## Default:
-options = --no-encryption
+options = --no-encryption --ssl-cacert-file={{ client.cacert_file }}
 
 ## default is 0, but set to something like 19 if you want to lower the priority.
 ##
diff --git a/backupninja/map.jinja b/backupninja/map.jinja
index ebbc5c3..bab9434 100644
--- a/backupninja/map.jinja
+++ b/backupninja/map.jinja
@@ -5,12 +5,14 @@
     'service': 'backupninja',
     'report_email': 'root',
     'config': '/etc/default/backupninja',
+    'cacert_file': '/etc/ssl/certs/ca-certificates.crt',
   },
   'RedHat': {
     'pkgs': ['backupninja'],
     'service': 'backupninja',
     'report_email': 'root',
     'config': '/etc/sysconfig/backupninja',
+    'cacert_file': '/etc/pki/tls/certs/ca-bundle.crt',
   },
 }, merge=salt['pillar.get']('backupninja:client')) %}