diff --git a/.etckeeper b/.etckeeper
index afcb6c7..bf0c409 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -504,6 +504,7 @@ maybe chmod 0640 'dnf/modules.d/go-toolset.module'
 maybe chmod 0644 'dnf/modules.d/httpd.module'
 maybe chmod 0644 'dnf/modules.d/javapackages-runtime.module'
 maybe chmod 0644 'dnf/modules.d/llvm-toolset.module'
+maybe chmod 0640 'dnf/modules.d/mercurial.module'
 maybe chmod 0644 'dnf/modules.d/nginx.module'
 maybe chmod 0644 'dnf/modules.d/nodejs.module'
 maybe chmod 0644 'dnf/modules.d/perl-DBD-MySQL.module'
@@ -2993,6 +2994,9 @@ maybe chmod 0644 'mc/mc.ext'
 maybe chmod 0644 'mc/mc.menu'
 maybe chmod 0644 'mc/mcedit.menu'
 maybe chmod 0644 'mc/sfs.ini'
+maybe chmod 0755 'mercurial'
+maybe chmod 0755 'mercurial/hgrc.d'
+maybe chmod 0644 'mercurial/hgrc.d/certs.rc'
 maybe chmod 0644 'mime.types'
 maybe chmod 0644 'mke2fs.conf'
 maybe chmod 0755 'mock'
diff --git a/dnf/modules.d/mercurial.module b/dnf/modules.d/mercurial.module
new file mode 100644
index 0000000..7d0eef9
--- /dev/null
+++ b/dnf/modules.d/mercurial.module
@@ -0,0 +1,5 @@
+[mercurial]
+name=mercurial
+stream=4.8
+profiles=
+state=enabled
diff --git a/mercurial/hgrc.d/certs.rc b/mercurial/hgrc.d/certs.rc
new file mode 100644
index 0000000..0a83b82
--- /dev/null
+++ b/mercurial/hgrc.d/certs.rc
@@ -0,0 +1,3 @@
+# see: http://mercurial.selenic.com/wiki/CACertificates
+[web]
+cacerts = /etc/pki/tls/certs/ca-bundle.crt