diff --git a/package/aktualizr/aktualizr.hash b/package/aktualizr/aktualizr.hash
index 737469b466..0df6ddec9a 100644
--- a/package/aktualizr/aktualizr.hash
+++ b/package/aktualizr/aktualizr.hash
@@ -1,3 +1,4 @@
-# Locally calculated
-sha256  33d141b547d84e73ab6d0c76bceb984ecd6e4b40664b1874332d0d9904f3e99f  aktualizr-ec8bd5758fe71aa606082c614eb2e05cd6798a1d-br1.tar.gz
+# Hash for the source tarball is intentionally omitted: the archive is
+# generated locally by Buildroot (git clone + submodules), so its hash
+# is not reproducible across different git/tar versions.
 sha256  fab3dd6bdab226f1c08630b1dd917e11fcb4ec5e1e020e2c16f83a0a13863e85  LICENSE
diff --git a/package/aktualizr/aktualizr.mk b/package/aktualizr/aktualizr.mk
index 47d018a22c..c918764801 100644
--- a/package/aktualizr/aktualizr.mk
+++ b/package/aktualizr/aktualizr.mk
@@ -10,10 +10,12 @@ AKTUALIZR_SITE_METHOD = git
 
 AKTUALIZR_LICENSE = MPL-2.0
 AKTUALIZR_LICENSE_FILES = LICENSE
-AKTUALIZR_DEPENDENCIES = boost libcurl openssl libarchive libsodium sqlite jsoncpp
+AKTUALIZR_DEPENDENCIES = host-asn1c boost libcurl openssl libarchive libsodium sqlite jsoncpp
 
 AKTUALIZR_GIT_SUBMODULES = YES
+BR_NO_CHECK_HASH_FOR += $(AKTUALIZR_SOURCE)
 AKTUALIZR_SUPPORTS_IN_SOURCE_BUILD = NO
+AKTUALIZR_INSTALL_STAGING = YES
 
 AKTUALIZR_CONF_OPTS = \
 	-DCMAKE_POLICY_VERSION_MINIMUM=3.5