diff --git a/nixos/openssl-111k.nix b/nixos/openssl-111k.nix
new file mode 100644
index 0000000000000000000000000000000000000000..9ee881cb4cf804c6781d50b7e5809c1429d3ee87
--- /dev/null
+++ b/nixos/openssl-111k.nix
@@ -0,0 +1,7 @@
+self: super: {
+  openssl_1_1 = super.openssl_1_1.overrideAttrs (old: {
+    version = "1.1.1k";
+    sha256 = "1whinyw402z3b9xlb3qaxv4b9sk4w1bgh9k0y8df1z4x3yy92fhz";
+    withDocs = false;
+  });
+}
diff --git a/shell.nix b/shell.nix
index 0c9c12f9b65990d42cd37194d33cee834d26e79b..e2e54ee08ef60c4947363acab547200fd1dd512f 100644
--- a/shell.nix
+++ b/shell.nix
@@ -1,7 +1,9 @@
 let
   nixpkgs-pin = builtins.fromJSON (builtins.readFile ./nixpkgs.json);
   nixpkgs-src = builtins.fetchTarball nixpkgs-pin;
-  nixpkgs = import nixpkgs-src { };
+  nixpkgs = import nixpkgs-src {
+    overlays = [ (import ./nixos/openssl-111k.nix) ];
+  };
 in
 { pkgs ? nixpkgs }:
 let