diff --git a/modules/security/ca.nix b/modules/security/ca.nix
index 378fe4e691d..ef33298f19e 100644
--- a/modules/security/ca.nix
+++ b/modules/security/ca.nix
@@ -20,6 +20,10 @@ with pkgs.lib;
     environment.shellInit =
       ''
         export OPENSSL_X509_CERT_FILE=/etc/ssl/certs/ca-bundle.crt
+
+        # !!! Remove the following as soon as OpenSSL 1.0.0e is the default.
+        export CURL_CA_BUNDLE=/etc/ssl/certs/ca-bundle.crt
+        export GIT_SSL_CAINFO=/etc/ssl/certs/ca-bundle.crt
       '';
 
   };