diff --git a/Mk/Uses/caroot.mk b/Mk/Uses/caroot.mk
new file mode 100644
--- /dev/null
+++ b/Mk/Uses/caroot.mk
@@ -0,0 +1,17 @@
+# Provide a modern certificate authority bundle. Systems
+# with certctl-built bundle need nothing else. Systems without
+# that bundle need a third-party bundle at runtime.
+#
+# Feature:	caroot
+# Usage:	USES=caroot
+#
+# MAINTAINER: portmgr@FreeBSD.org
+
+.if !defined(_INCLUDE_USES_CAROOT_MK)
+_INCLUDE_USES_CAROOT_MK=	yes
+
+.if !(${OPSYS} == FreeBSD && ${OSVERSION} >= 1202000)
+RUN_DEPENDS+=	ca_root_nss>=0:security/ca_root_nss
+.endif
+
+.endif