diff --git a/.gitignore b/.gitignore
index 5b83dc9..238935d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,6 @@
 certificate_authority_certificate.pem
 certificate_authority_key.pem
+
+*.deb
+*.tar.xz
+debian/
diff --git a/Makefile b/Makefile
index 0b67477..31b67aa 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,11 @@
 ls:
 	ls -l
 
+all:
+	make make-ca-private-key
+	make make-Certificate-Authority-Certificate-file
+	make create
+
 make-ca-private-key:
 	certtool --generate-privkey > certificate_authority_key.pem
 	# umask 277 certificate_authority_key.pem
@@ -11,3 +16,20 @@ make-Certificate-Authority-Certificate-file:
 		--template certificate_authority_template.info \
 		--load-privkey certificate_authority_key.pem \
 		--outfile certificate_authority_certificate.pem
+
+create:
+	mkdir -p debian/files/etc/pki/CA/
+	mkdir -p debian/DEBIAN
+	cp control debian/DEBIAN/
+	echo "2.0" > debian/debian-binary
+	cp certificate_authority_certificate.pem debian/files/etc/pki/CA/cacert.pem
+	chmod 444 debian/files/etc/pki/CA/cacert.pem
+	cd debian/files/ && md5sum etc/pki/CA/cacert.pem > ../DEBIAN/md5sum
+	cd debian/DEBIAN && tar --ignore-failed-read -cvJf ../control.tar.xz {post,pre}{inst,rm} md5sums control
+	cd debian/files && tar -cvJf ../data.tar.xz .
+	cd debian && ar rcs ../wit-TLS-cert.deb debian-binary control.tar.xz data.tar.xz
+
+clean:
+	rm -f *.pem
+	rm -f *.deb
+	rm -rf debian/
diff --git a/control b/control
new file mode 100644
index 0000000..ff2369d
--- /dev/null
+++ b/control
@@ -0,0 +1,7 @@
+Package: wit-TLS-cert
+Source: wit-TLS-cert
+Version: 0.1
+Architecture: amd64
+Maintainer: Jeff Carr <jcarr@wit.com>
+Homepage: https://www.wit.com/
+Description: TLS cert files for libvirt