diff --git a/pkgs/data/misc/cacert/default.nix b/pkgs/data/misc/cacert/default.nix
new file mode 100644
index 00000000000..f981c79b692
--- /dev/null
+++ b/pkgs/data/misc/cacert/default.nix
@@ -0,0 +1,23 @@
+{ stdenv, fetchurl }:
+
+stdenv.mkDerivation rec {
+  name = "cacert-20090922";
+
+  src = fetchurl {
+    url = http://nixos.org/tarballs/cacert-20090922.pem.bz2;
+    sha256 = "1fakipxy5y62vslw6czj24pksh16b042py9v0199mxhzg5nmbmy7";
+  };
+
+  unpackPhase = "true";
+
+  installPhase =
+    ''
+      ensureDir $out/etc
+      bunzip2 < $src > $out/etc/ca-bundle.crt
+    '';
+
+  meta = {
+    homepage = http://curl.haxx.se/docs/caextract.html;
+    description = "A bundle of X.509 certificates of public Certificate Authorities (CA)";
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 56f7d34d0c4..db1fb14b41b 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6126,6 +6126,10 @@ let
     inherit fetchurl stdenv;
   };
 
+  cacert = import ../data/misc/cacert {
+    inherit fetchurl stdenv;
+  };
+
   corefonts = import ../data/fonts/corefonts {
     inherit fetchurl stdenv cabextract;
   };