diff --git a/manifest.dhall b/manifest.dhall
index 0b95e33577815e6fbd2dbdb25b515b33aa4d4797..08bcaa2dda8e28d20fcfc23ea56e361676c7ae31 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -520,6 +520,7 @@ in  [ callHackage "Cabal" "3.8.1.0"
         "https://github.com/haskell-effectful/time-effectful"
         (Some "e212239b685e1ecf7ee95dd1e944cc563351907f")
         (None Text)
+    , callHackage "tls" "1.6.0"
     , callHackage "typed-process" "0.2.10.1"
     , callHackage "type-errors-pretty" "0.0.1.2"
     , callHackage "type-errors" "0.2.0.0"
diff --git a/overlay.nix b/overlay.nix
index 78b5408f62b01a3eb20b80acd2f832fab797e7b9..77dec9930bcf0bf1444883435c0ec28f893cd924 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -665,6 +665,8 @@ final: prev: with pkgs.haskell.lib; {
 
   time-effectful = prev.callPackage (./pkgs/time-effectful.nix) { };
 
+  tls = prev.callPackage (./pkgs/tls.nix) { };
+
   type-equality = prev.callPackage (./pkgs/type-equality.nix) { };
 
   type-errors = prev.callPackage (./pkgs/type-errors.nix) { };
diff --git a/pkgs/tls.nix b/pkgs/tls.nix
new file mode 100644
index 0000000000000000000000000000000000000000..004cf627a09f00960c34d277bf384da38d0c4c71
--- /dev/null
+++ b/pkgs/tls.nix
@@ -0,0 +1,88 @@
+{ mkDerivation
+, asn1-encoding
+, asn1-types
+, async
+, base
+, bytestring
+, cereal
+, cryptonite
+, data-default-class
+, gauge
+, hourglass
+, lib
+, memory
+, mtl
+, network
+, QuickCheck
+, tasty
+, tasty-quickcheck
+, transformers
+, x509
+, x509-store
+, x509-validation
+}:
+mkDerivation {
+  pname = "tls";
+  version = "1.6.0";
+  sha256 = "d29d20afc1c1b852a3c39b076ec853cb596ac888cf521e54144441dec689e498";
+  isLibrary = true;
+  isExecutable = false;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [
+    asn1-encoding
+    asn1-types
+    async
+    base
+    bytestring
+    cereal
+    cryptonite
+    data-default-class
+    hourglass
+    memory
+    mtl
+    network
+    transformers
+    x509
+    x509-store
+    x509-validation
+  ];
+  testHaskellDepends = [
+    asn1-types
+    async
+    base
+    bytestring
+    cryptonite
+    data-default-class
+    hourglass
+    QuickCheck
+    tasty
+    tasty-quickcheck
+    x509
+    x509-validation
+  ];
+  benchmarkHaskellDepends = [
+    asn1-types
+    async
+    base
+    bytestring
+    cryptonite
+    data-default-class
+    gauge
+    hourglass
+    QuickCheck
+    tasty-quickcheck
+    x509
+    x509-validation
+  ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  homepage = "http://github.com/vincenthz/hs-tls";
+  description = "TLS/SSL protocol native implementation (Server and Client)";
+  license = lib.licenses.bsd3;
+  broken = false;
+}