diff --git a/debian/changelog b/debian/changelog
index b04ca1a80..b754a1480 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -76,6 +76,8 @@ freeipa (4.3.1-1) UNRELEASED; urgency=medium
   * fix-oddjobs.diff: Fix paths and uids in oddjob configs.
   * client: Don't create /etc/pki/nssdb on postinst, it's not used
     anymore.
+  * control: Bump certmonger dependency to version that has helpers in
+    the correct place.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Sat, 03 Oct 2015 08:56:31 +0300
 
diff --git a/debian/control b/debian/control
index c881d9489..7d9603150 100644
--- a/debian/control
+++ b/debian/control
@@ -72,7 +72,7 @@ Depends:
  389-ds-base (>= 1.3.4.0),
  acl,
  apache2,
- certmonger (>= 0.78.5-2),
+ certmonger (>= 0.78.6-2),
  custodia,
  fonts-font-awesome,
  freeipa-admintools (= ${source:Version}),
@@ -175,7 +175,7 @@ Package: freeipa-client
 Architecture: any
 Depends:
  bind9utils,
- certmonger (>= 0.78),
+ certmonger (>= 0.78.6-2),
  curl,
  dnsutils,
  freeipa-common (= ${source:Version}),