diff --git a/manifest.dhall b/manifest.dhall
index 278e93f7b9e7c95522388bdfed22ef9ade60d64c..eec2832e11e1a5910145c5ee1ed14a4be54c95fe 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -287,6 +287,7 @@ in  [ callHackage "Cabal" "3.8.1.0"
     , callHackage "hspec-core" "2.10.0.1"
     , callHackage "hspec-discover" "2.10.0.1"
     , callHackage "hspec-meta" "2.9.3"
+    , callHackage "http-client-tls" "0.3.6.1"
     , callHackage "http-client" "0.7.13.1"
     , callHackage "http-date" "0.0.11"
     , callHackage "http-media" "0.8.0.0"
diff --git a/overlay.nix b/overlay.nix
index 37d511d1ae980eb144ca36d9a06393dcf8c1cff8..17e3f1116c5ec99f2613c2b82d0bac2106090572 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -347,6 +347,8 @@ final: prev: with pkgs.haskell.lib; {
 
   http-client = prev.callPackage (./pkgs/http-client.nix) { };
 
+  http-client-tls = prev.callPackage (./pkgs/http-client-tls.nix) { };
+
   http-date = prev.callPackage (./pkgs/http-date.nix) { };
 
   http-media = prev.callPackage (./pkgs/http-media.nix) { };
diff --git a/pkgs/http-client-tls.nix b/pkgs/http-client-tls.nix
new file mode 100644
index 0000000000000000000000000000000000000000..7ea7f681770c964b69795934896c830f83c33ce0
--- /dev/null
+++ b/pkgs/http-client-tls.nix
@@ -0,0 +1,66 @@
+{ mkDerivation
+, base
+, bytestring
+, case-insensitive
+, connection
+, containers
+, cryptonite
+, data-default-class
+, exceptions
+, gauge
+, hspec
+, http-client
+, http-types
+, lib
+, memory
+, network
+, network-uri
+, text
+, tls
+, transformers
+}:
+mkDerivation {
+  pname = "http-client-tls";
+  version = "0.3.6.1";
+  sha256 = "b19fff86a41b6035cbd97271a5d6965e43dcc4bedbe4c03dd586fed65fbac80d";
+  isLibrary = true;
+  isExecutable = false;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [
+    base
+    bytestring
+    case-insensitive
+    connection
+    containers
+    cryptonite
+    data-default-class
+    exceptions
+    http-client
+    http-types
+    memory
+    network
+    network-uri
+    text
+    tls
+    transformers
+  ];
+  testHaskellDepends = [
+    base
+    connection
+    hspec
+    http-client
+    http-types
+  ];
+  benchmarkHaskellDepends = [ base gauge http-client ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  homepage = "https://github.com/snoyberg/http-client";
+  description = "http-client backend using the connection package and tls library";
+  license = lib.licenses.mit;
+  broken = false;
+}