diff --git a/containers/jug/dev.Dockerfile b/containers/jug/dev.Dockerfile
index ee6c6e02c74813e4d5db4b8026cd37d2a8f949d1..0b7f25db21e56b2b58e00d60e12c066abfaf1c92 100644
--- a/containers/jug/dev.Dockerfile
+++ b/containers/jug/dev.Dockerfile
@@ -130,6 +130,8 @@ git -C ${KEY4HEPSPACK_ROOT} checkout ${KEY4HEPSPACK_VERSION}
 spack repo add --scope site "${KEY4HEPSPACK_ROOT}"
 EOF
 
+## Workaround for xrootd server, https://github.com/xrootd/xrootd/issues/2295
+ADD https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Server%20CA%202.pem?api=v2 /etc/ssl/certs/InCommon\ RSA\ Server\ CA\ 2.pem
 
 ## ========================================================================================
 ## STAGE1: builder