diff --git a/Dockerfile b/Dockerfile
index 477cc8f..96a54d5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,6 +22,7 @@ RUN echo "exit 101" > /usr/sbin/policy-rc.d && chmod +x /usr/sbin/policy-rc.d &&
         asterisk \
         asterisk-core-sounds-en-gsm \
         asterisk-modules \
+        ca-certificates \
         openssl \
         curl \
         wget \
diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index 7079e32..ec51151 100644
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -207,7 +207,7 @@ bind=0.0.0.0:5061
 ; Server IP: ${local_ip} | Public IP: ${PUBLIC_IP:-unknown}
 cert_file=/etc/asterisk/certs/server.crt
 priv_key_file=/etc/asterisk/certs/server.key
-ca_list_file=/etc/ssl/certs/ca-certificates.crt
+; ca_list_file not set — only needed for verify_client=yes (client cert auth)
 method=tlsv1_2
 ${nat_settings}
 
@@ -273,7 +273,7 @@ protocol=tls
 bind=0.0.0.0:5061
 cert_file=/etc/asterisk/certs/server.crt
 priv_key_file=/etc/asterisk/certs/server.key
-ca_list_file=/etc/ssl/certs/ca-certificates.crt
+; ca_list_file not set — only needed for verify_client=yes (client cert auth)
 method=tlsv1_2
 ${nat_settings}