Merge pull request #74536 from andrew-d/andrew/bazel-ssl-certs

buildBazelPackage: also set the SSL_CERT_FILE environment variable

pkgs/build-support/build-bazel-package/default.nix

@@ -46,6 +46,9 @@ in stdenv.mkDerivation (fBuildAttrs // {
       export HOME="$NIX_BUILD_TOP"
       # This is needed for git_repository with https remotes
       export GIT_SSL_CAINFO="${cacert}/etc/ssl/certs/ca-bundle.crt"
+      # This is needed for Bazel fetchers that are themselves programs (e.g.
+      # rules_go using the go toolchain)
+      export SSL_CERT_FILE="${cacert}/etc/ssl/certs/ca-bundle.crt"
     '';
 
     buildPhase = fFetchAttrs.buildPhase or ''