diff --git a/pkgs/development/libraries/kerberos/heimdal.nix b/pkgs/development/libraries/kerberos/heimdal.nix
index 35d7498b927..f126214bfde 100644
--- a/pkgs/development/libraries/kerberos/heimdal.nix
+++ b/pkgs/development/libraries/kerberos/heimdal.nix
@@ -40,9 +40,11 @@ stdenv.mkDerivation rec {
 
   buildInputs = [
     pkgconfig flex yacc readline openldap libcap_ng sqlite db ncurses
-    openssl cyrus_sasl
+    cyrus_sasl
   ];
 
+  propagatedBuildInputs = [ openssl ];
+
   meta = with stdenv.lib; {
     description = "an implementation of Kerberos 5 (and some more stuff) largely written in Sweden";
     license = licenses.bsd3;