diff --git a/disable-ssl-context-in-buildenv.patch b/disable-ssl-context-in-buildenv.patch
new file mode 100644
index 0000000..ddc9884
--- /dev/null
+++ b/disable-ssl-context-in-buildenv.patch
@@ -0,0 +1,13 @@
+Index: pip-24.2/src/pip/_vendor/requests/adapters.py
+===================================================================
+--- pip-24.2.orig/src/pip/_vendor/requests/adapters.py
++++ pip-24.2/src/pip/_vendor/requests/adapters.py
+@@ -81,7 +81,7 @@ try:
+     _preloaded_ssl_context.load_verify_locations(
+         extract_zipped_paths(DEFAULT_CA_BUNDLE_PATH)
+     )
+-except ImportError:
++except ImportError, FileNotFoundError:
+     # Bypass default SSLContext creation when Python
+     # interpreter isn't built with the ssl module.
+     _preloaded_ssl_context = None
diff --git a/python-pip.changes b/python-pip.changes
index dbae277..596c62f 100644
--- a/python-pip.changes
+++ b/python-pip.changes
@@ -97,6 +97,8 @@ Mon Aug 12 16:49:06 UTC 2024 - Dirk Müller <dmueller@suse.com>
     --ignore-conflicts.
   * Fix finding hardlink targets in tar files with an ignored
     top-level directory.
+- add disable-ssl-context-in-buildenv.patch: treat missing
+  ca-certificates as "ssl not available" for buildenvs
 
 -------------------------------------------------------------------
 Sun Jun 30 18:45:16 UTC 2024 - Dirk Müller <dmueller@suse.com>
diff --git a/python-pip.spec b/python-pip.spec
index a1f5f58..40f7ff3 100644
--- a/python-pip.spec
+++ b/python-pip.spec
@@ -46,6 +46,8 @@ Patch0:         pip-shipped-requests-cabundle.patch
 # PATCH-FIX-UPSTREAM distutils-reproducible-compile.patch gh#python/cpython#8057 mcepl@suse.com
 # To get reproducible builds, byte_compile() of distutils.util now sorts filenames.
 Patch1:         distutils-reproducible-compile.patch
+# PATCH-FIX-OPENSUSE: deal missing ca-certificates as "ssl not available"
+Patch2:         disable-ssl-context-in-buildenv.patch
 BuildRequires:  %{python_module base >= 3.7}
 BuildRequires:  %{python_module setuptools >= 40.8.0}
 # The rpm python-wheel build is bootstrap friendly since 0.42