diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 27a3e8d..682f841 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -27,6 +27,7 @@ jobs:
             type=sha
       - uses: docker/build-push-action@v2
         with:
+          build-args: customca=${{ secrets.CUSTOMCA }}
           tags: ${{ steps.metadata.outputs.tags }}
           labels: ${{ steps.metadata.outputs.labels }}
           push: true
diff --git a/Dockerfile b/Dockerfile
index ef91b31..d135e4a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,4 +13,4 @@ RUN update-ca-certificates \
 USER seluser
 
 RUN mkdir -p $HOME/.pki/nssdb
-RUN certutil -N -d sql:$HOME/.pki/nssdb -t "C,," -n customca -i $customca_dest
+RUN certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n customca -i $customca_dest