add OPENSSL_X509_CERT_FILE to the git command environment

pkgs/applications/version-management/git-and-tools/git/default.nix

@@ -82,6 +82,10 @@ stdenv.mkDerivation {
       # gitweb.cgi, need to patch so that it's found
       sed -i -e "s|'compressor' => \['gzip'|'compressor' => ['${gzip}/bin/gzip'|" \
           $out/share/gitweb/gitweb.cgi
+
+      wrapProgram $out/bin/git \
+          --set GIT_SSL_CAINFO "\$OPENSSL_X509_CERT_FILE"
+
     ''
 
    + (if svnSupport then