diff --git a/pkgs/tools/package-management/nix/common.nix b/pkgs/tools/package-management/nix/common.nix
index 4fa52a64d1e7..c2e9febea64d 100644
--- a/pkgs/tools/package-management/nix/common.nix
+++ b/pkgs/tools/package-management/nix/common.nix
@@ -213,7 +213,7 @@ self = stdenv.mkDerivation {
   passthru = {
     inherit aws-sdk-cpp boehmgc;
 
-    perl-bindings = perl.pkgs.toPerlModule (callPackage ./nix-perl.nix { nix = self; });
+    perl-bindings = perl.pkgs.toPerlModule (callPackage ./nix-perl.nix { nix = self; inherit Security; });
   };
 };
 in self
diff --git a/pkgs/tools/package-management/nix/nix-perl.nix b/pkgs/tools/package-management/nix/nix-perl.nix
index 302d123a87d3..3c44dbdbe144 100644
--- a/pkgs/tools/package-management/nix/nix-perl.nix
+++ b/pkgs/tools/package-management/nix/nix-perl.nix
@@ -1,4 +1,5 @@
 { stdenv
+, lib
 , perl
 , pkg-config
 , curl
@@ -8,6 +9,7 @@
 , autoreconfHook
 , autoconf-archive
 , nlohmann_json
+, Security
 }:
 
 stdenv.mkDerivation {
@@ -16,6 +18,8 @@ stdenv.mkDerivation {
 
   postUnpack = "sourceRoot=$sourceRoot/perl";
 
+  buildInputs = lib.optional (stdenv.isDarwin) Security;
+
   # This is not cross-compile safe, don't have time to fix right now
   # but noting for future travellers.
   nativeBuildInputs = [