diff --git a/meta-openeuler/recipes-support/curl/curl_%.bbappend b/meta-openeuler/recipes-support/curl/curl_%.bbappend
index 501e7bd022f8cccdbfaf2da6bf4236168d056508..01acb77c5b8d5bdb8d40af67b43c2ee9bc10694e 100644
--- a/meta-openeuler/recipes-support/curl/curl_%.bbappend
+++ b/meta-openeuler/recipes-support/curl/curl_%.bbappend
@@ -15,3 +15,10 @@ SRC_URI = " \
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=db8448a1e43eb2125f7740fc397db1f6"
 
+# It is not safe to pack crt files in rootfs by default, if you sure what you want, comment these lines:
+EXTRA_OECONF:remove = " \
+        --with-ca-bundle=${sysconfdir}/ssl/certs/ca-certificates.crt \
+        --without-libmetalink \
+"
+RRECOMMENDS:lib${BPN}:remove = "ca-certificates"
+