diff --git a/spack.sh b/spack.sh
index e1ede5704f42132689d178757f3f5a40712d03a1..bc9b232011687daec22d97348b4c089d69633b5a 100644
--- a/spack.sh
+++ b/spack.sh
@@ -17,6 +17,7 @@ f6d50f790ee8b123f7775429f6ca6394170e6de9
 f73d7d2dce226857cbc774e942454bad2992969e
 cbab451c1a342523ed75e9be1098615a597a9b59
 4fe5f35c2fff6288e4c05e5946798ad2191a2c40
+4c60deb9921ff2cbbfa6771f4f63ff812a8a5840
 ---
 ## Optional hash table with comma-separated file list
 read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
@@ -33,3 +34,4 @@ read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
 ## f73d7d2dce226857cbc774e942454bad2992969e: dd4hep: cleanup recipe, remove deprecated versions and patches
 ## cbab451c1a342523ed75e9be1098615a597a9b59: dd4hep: Add version 1.29
 ## 4fe5f35c2fff6288e4c05e5946798ad2191a2c40: xrootd: add v5.7.0
+## 4c60deb9921ff2cbbfa6771f4f63ff812a8a5840: xrootd: add github as secondary url to avoid SSL issues