diff --git a/roles/releng/tasks/main.yml b/roles/releng/tasks/main.yml
index 3121b39d05..6953f14f0f 100644
--- a/roles/releng/tasks/main.yml
+++ b/roles/releng/tasks/main.yml
@@ -43,6 +43,11 @@
 - name: add masher koji ca upload cert
   action: copy src="{{ private }}/files/koji/buildercerts/fedora-ca.cert" dest=/home/masher/.fedora-upload-ca.cert
 
+- name: add koji ca cert to central system ca-trust
+  action: copy src="{{ private }}/files/koji/buildercerts/fedora-ca.cert" dest=/etc/pki/ca-trust/source/anchors/fedora-server-ca.cert
+- name: update ca-trust
+  command: /usr/bin/update-ca-trust
+
 # rawhide group
 - name: rawhide group
   action: group name=rawhide gid=265
diff --git a/roles/releng/templates/fedora-22-compose-aarch64.cfg b/roles/releng/templates/fedora-22-compose-aarch64.cfg
index d5e01b72ea..7aba378503 100644
--- a/roles/releng/templates/fedora-22-compose-aarch64.cfg
+++ b/roles/releng/templates/fedora-22-compose-aarch64.cfg
@@ -22,7 +22,7 @@ assumeyes=1
 
 [fedora]
 name=fedora
-baseurl=http://infrastructure.fedoraproject.org/pub/fedora-secondary/releases/22/Everything/aarch64/os/
+baseurl=https://infrastructure.fedoraproject.org/pub/fedora-secondary/releases/22/Everything/aarch64/os/
 enabled=1
 cost=5000
 
diff --git a/roles/releng/templates/fedora-branched-compose-aarch64.cfg b/roles/releng/templates/fedora-branched-compose-aarch64.cfg
index 188699f8c4..79f8800a58 100644
--- a/roles/releng/templates/fedora-branched-compose-aarch64.cfg
+++ b/roles/releng/templates/fedora-branched-compose-aarch64.cfg
@@ -23,13 +23,13 @@ assumeyes=1
 
 [fedora]
 name=fedora
-baseurl=http://{{kojipkgs_url}}/mash/branched/aarch64/os
+baseurl=https://{{kojipkgs_url}}/mash/branched/aarch64/os
 enabled=1
 cost=5000
 
 [static]
 name=static
-baseurl=http://{{kojipkgs_url}}/repos/f23-build/latest/aarch64
+baseurl=https://{{kojipkgs_url}}/repos/f23-build/latest/aarch64
 enabled=1
 #cost=2000
 """
diff --git a/roles/releng/templates/fedora-rawhide-compose-aarch64.cfg b/roles/releng/templates/fedora-rawhide-compose-aarch64.cfg
index 9c75fe683d..4e2c5e864f 100644
--- a/roles/releng/templates/fedora-rawhide-compose-aarch64.cfg
+++ b/roles/releng/templates/fedora-rawhide-compose-aarch64.cfg
@@ -22,13 +22,13 @@ assumeyes=1
 
 [fedora]
 name=fedora
-baseurl=http://{{kojipkgs_url}}/mash/rawhide/aarch64/os
+baseurl=https://{{kojipkgs_url}}/mash/rawhide/aarch64/os
 enabled=1
 cost=5000
 
 [static]
 name=static
-baseurl=http://{{kojipkgs_url}}/repos/rawhide/latest/aarch64
+baseurl=https://{{kojipkgs_url}}/repos/rawhide/latest/aarch64
 enabled=1
 #cost=2000
 """