diff --git a/roles/koji_hub/templates/koji-ssl.conf b/roles/koji_hub/templates/koji-ssl.conf
index 47a08d64c6..ea094cbfa4 100644
--- a/roles/koji_hub/templates/koji-ssl.conf
+++ b/roles/koji_hub/templates/koji-ssl.conf
@@ -123,7 +123,7 @@ SSLCertificateChainFile /etc/pki/tls/certs/extras_cacert.pem
 #   certificates for client authentication or alternatively one
 #   huge file containing all of them (file must be PEM encoded)
 #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
-SSLCACertificateFile /etc/pki/tls/certs/extras_upload_cacert.pem
+#SSLCACertificateFile /etc/pki/tls/certs/extras_upload_cacert.pem
 
 #SSLCARevocationFile  /etc/pki/tls/crl.pem
 #SSLCARevocationCheck chain
diff --git a/roles/koji_hub/templates/koji-ssl.conf.stg b/roles/koji_hub/templates/koji-ssl.conf.stg
index 64032a4f73..0c322e19cb 100644
--- a/roles/koji_hub/templates/koji-ssl.conf.stg
+++ b/roles/koji_hub/templates/koji-ssl.conf.stg
@@ -122,10 +122,10 @@ SSLCertificateChainFile /etc/pki/tls/certs/extras_cacert.pem
 #   certificates for client authentication or alternatively one
 #   huge file containing all of them (file must be PEM encoded)
 #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
-SSLCACertificateFile /etc/pki/tls/certs/extras_upload_cacert.pem
+#SSLCACertificateFile /etc/pki/tls/certs/extras_upload_cacert.pem
 
-SSLCARevocationFile  /etc/pki/tls/crl.pem
-SSLCARevocationCheck chain
+#SSLCARevocationFile  /etc/pki/tls/crl.pem
+#SSLCARevocationCheck chain
 
 #   Client Authentication (Type):
 #   Client certificate verification type and depth.  Types are