diff --git a/utils/genrandconfig b/utils/genrandconfig
index 0d08570bc5..8a6bdb6a0c 100755
--- a/utils/genrandconfig
+++ b/utils/genrandconfig
@@ -347,6 +347,9 @@ def gen_config(args):
     with open(minimalconfigfile) as minimalf:
         configlines += minimalf.readlines()
 
+    # Allow hosts with old certificates to download over https
+    configlines.append("BR2_WGET=\"wget --passive-ftp -nd -t 3 --no-check-certificate\"")
+
     # Amend the configuration with a few things.
     if randint(0, 20) == 0:
         configlines.append("BR2_ENABLE_DEBUG=y\n")