diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..8878f38
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,4 @@
+update-ca-certificates
+c_rehash
+certdata.stamp
+*.crt
diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..b68925c
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,34 @@
+PYTHON := python3
+
+all: update-ca-certificates c_rehash certdata.stamp
+
+update-ca-certificates: update-ca.c
+	${CC} ${CFLAGS} -o $@ update-ca.c ${LDFLAGS}
+
+c_rehash: c_rehash.c
+	${CC} ${CFLAGS} -o $@ c_rehash.c -lcrypto ${LDFLAGS}
+
+certdata.stamp:
+	${PYTHON} certdata2pem.py
+	touch $@
+
+install: all
+	install -d -m755 ${DESTDIR}/etc/ca-certificates/update.d \
+		${DESTDIR}/usr/bin \
+		${DESTDIR}/usr/sbin \
+		${DESTDIR}/usr/share/ca-certificates \
+		${DESTDIR}/usr/local/share/ca-certificates \
+		${DESTDIR}/etc/ssl/certs
+
+	for cert in *.crt; do \
+		install -D -m644 $$cert ${DESTDIR}/usr/share/ca-certificates/mozilla/$$cert; \
+	done
+
+	install -D -m644 update-ca-certificates.8 ${DESTDIR}/usr/share/man/man8/update-ca-certificates.8
+	install -m755 update-ca-certificates ${DESTDIR}/usr/sbin
+	install -m755 c_rehash ${DESTDIR}/usr/bin
+
+clean:
+	rm -rf update-ca-certificates c_rehash certdata.stamp *.crt
+
+.PHONY: install clean