diff --git a/security/linux-rl9-ca-certificates/Makefile b/security/linux-rl9-ca-certificates/Makefile
index b5c4e7a12c36..064b97daa74e 100644
--- a/security/linux-rl9-ca-certificates/Makefile
+++ b/security/linux-rl9-ca-certificates/Makefile
@@ -1,22 +1,27 @@
 PORTNAME=	ca-certificates
 PORTVERSION=	2024.2.69
 DISTVERSIONSUFFIX=	_v8.0.303-91.4.el9_4
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	security linux
 
 MAINTAINER=	emulation@FreeBSD.org
 COMMENT=	Mozilla CA root certificate bundle (Rocky Linux ${LINUX_DIST_VER})
 
 LICENSE=	PD
 
 USES=		linux:rl9
 USE_LINUX=	p11-kit
 USE_LINUX_RPM=	noarch
 
 OPTIONS_DEFINE=	DOCS
 
 post-stage:
 	${LINUXBASE}/bin/sh ${STAGEDIR}${PREFIX}/usr/bin/update-ca-trust \
 		extract -o ${STAGEDIR}${PREFIX}/etc/pki/ca-trust/extracted
+	${FIND} ${STAGEDIR}${PREFIX} -type l -exec \
+		${SH} -c "tgt=\$$(readlink {}) ; [ \$$tgt != \$${tgt#/} ] && ${RLN} ${STAGEDIR}${PREFIX}\$$tgt {}" \; || ${TRUE}
+	cd ${STAGEDIR}${PREFIX} && \
+		${FIND} etc/pki/ca-trust/extracted/pem/directory-hash -type f -or -type l >> ${TMPPLIST}
+
 
 .include <bsd.port.mk>
diff --git a/security/linux-rl9-ca-certificates/pkg-plist b/security/linux-rl9-ca-certificates/pkg-plist
index 6b8db78f6226..12ad61e71023 100644
--- a/security/linux-rl9-ca-certificates/pkg-plist
+++ b/security/linux-rl9-ca-certificates/pkg-plist
@@ -1,36 +1,34 @@
 etc/pki/ca-trust/README
 etc/pki/ca-trust/ca-legacy.conf
 etc/pki/ca-trust/extracted/README
 etc/pki/ca-trust/extracted/edk2/README
 etc/pki/ca-trust/extracted/edk2/cacerts.bin
 etc/pki/ca-trust/extracted/java/README
 etc/pki/ca-trust/extracted/java/cacerts
 etc/pki/ca-trust/extracted/openssl/README
 etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
 etc/pki/ca-trust/extracted/pem/README
-etc/pki/ca-trust/extracted/pem/directory-hash/ca-bundle.crt
-etc/pki/ca-trust/extracted/pem/directory-hash/ca-certificates.crt
 etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem
 etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem
 etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
 etc/pki/ca-trust/source/README
 etc/pki/java/cacerts
 etc/pki/tls/cert.pem
 etc/pki/tls/certs/ca-bundle.crt
 etc/pki/tls/certs/ca-bundle.trust.crt
 etc/ssl/cert.pem
 etc/ssl/certs
 etc/ssl/ct_log_list.cnf
 etc/ssl/openssl.cnf
 usr/bin/ca-legacy
 usr/bin/update-ca-trust
 usr/share/man/man8/ca-legacy.8.gz
 usr/share/man/man8/update-ca-trust.8.gz
 usr/share/pki/ca-trust-legacy/ca-bundle.legacy.default.crt
 usr/share/pki/ca-trust-legacy/ca-bundle.legacy.disable.crt
 usr/share/pki/ca-trust-source/README
 usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit
 @dir etc/pki/ca-trust/source/anchors
 @dir etc/pki/ca-trust/source/blocklist
 @dir usr/share/pki/ca-trust-source/anchors
 @dir usr/share/pki/ca-trust-source/blocklist