diff --git a/manifest.dhall b/manifest.dhall
index ece193b71db4ac460cab6e25fd59f95dcc6914a9..75401c5baa010aff5ad9c7b09213f9cfe55f004f 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -312,6 +312,7 @@ in  [ callHackage "Cabal" "3.8.1.0"
     , callHackage "hledger-lib" "1.27.1"
     , callHackage "hledger" "1.27.1"
     , callHackage "hlint" "3.5"
+    , callHackage "hopenssl" "2.2.4"
     , callHackage "hosc" "0.19.1"
     , callHackage "hourglass" "0.2.12"
     , callHackage "hpack" "0.35.0"
diff --git a/overlay.nix b/overlay.nix
index b3748647e5047679f042a21e96f5277c5f4f0887..3b715ec72640d40b423ca492d179bd996f589358 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -411,6 +411,8 @@ self: with pkgs.haskell.lib; {
 
   hlint = self.callPackage (./pkgs/hlint.nix) { };
 
+  hopenssl = self.callPackage (./pkgs/hopenssl.nix) { };
+
   horizon-gen-nix = self.callPackage (./pkgs/horizon-gen-nix.nix) { };
 
   hosc = self.callPackage (./pkgs/hosc.nix) { };
diff --git a/pkgs/hopenssl.nix b/pkgs/hopenssl.nix
new file mode 100644
index 0000000000000000000000000000000000000000..16d0743d810a926892b66577c388775df452ad8b
--- /dev/null
+++ b/pkgs/hopenssl.nix
@@ -0,0 +1,25 @@
+{ mkDerivation, base, bytestring, HUnit, lib, openssl }:
+mkDerivation {
+  pname = "hopenssl";
+  version = "2.2.4";
+  sha256 = "9df46c328fc4c1d1566e2d1539770c9fe9d0422e09ee254721b35ee7d48a7671";
+  revision = "1";
+  editedCabalFile = "14bs0wjrqnnn1v8c4yznfzggvmgypm2lssgl0cr498kmp54if0lf";
+  isLibrary = true;
+  isExecutable = false;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [ base bytestring ];
+  librarySystemDepends = [ openssl ];
+  testHaskellDepends = [ base bytestring HUnit ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  homepage = "https://github.com/peti/hopenssl";
+  description = "FFI Bindings to OpenSSL's EVP Digest Interface";
+  license = lib.licenses.bsd3;
+  broken = false;
+}