diff --git a/nixos/openssl-111k.nix b/nixos/openssl-111k.nix
index a30c7d34abb8006272266c1e85f87f3f8486e119..935357a6a9a49fa32baff0e39f25258c6c864c2d 100644
--- a/nixos/openssl-111k.nix
+++ b/nixos/openssl-111k.nix
@@ -13,12 +13,28 @@ self: super: rec {
   python2 = super.python2.override (old: {
     packageOverrides = python-self: python-super: {
       pyopenssl = python-super.callPackage ./pkgs/pyopenssl.nix { };
+      cryptography = python-super.cryptography.overridePythonAttrs (old: {
+        version = "3.2.1";
+        src = fetchPypi {
+          version = "3.2.1";
+          pname = "cryptography-3.2.1";
+          sha256 = "1inlnr36kl36551c9rcad99jmhk81v33by3glkadwdcgmi17fd75";
+        };
+      });
     };
   });
 
   python3 = super.python3.override (old: {
     packageOverrides = python-self: python-super: {
       pyopenssl = python-super.callPackage ./pkgs/pyopenssl.nix { };
+      cryptography = python-super.cryptography.overridePythonAttrs (old: {
+        version = "3.2.1";
+        src = fetchPypi {
+          version = "3.2.1";
+          pname = "cryptography-3.2.1";
+          sha256 = "1inlnr36kl36551c9rcad99jmhk81v33by3glkadwdcgmi17fd75";
+        };
+      });
     };
   });
 }