diff --git a/pkgs/by-name/ev/evil-winrm/package.nix b/pkgs/by-name/ev/evil-winrm/package.nix
index 681f38d8bae7..aa0c97c89253 100644
--- a/pkgs/by-name/ev/evil-winrm/package.nix
+++ b/pkgs/by-name/ev/evil-winrm/package.nix
@@ -5,6 +5,8 @@
   makeWrapper,
   bundlerEnv,
   bundlerUpdateScript,
+  writeText,
+  sslLegacyProvider ? false,
 }:
 let
   rubyEnv = bundlerEnv {
@@ -13,6 +15,22 @@ let
     lockfile = ./Gemfile.lock;
     gemset = ./gemset.nix;
   };
+  openssl_conf = writeText "openssl.conf" ''
+    openssl_conf = openssl_init
+
+    [openssl_init]
+    providers = provider_sect
+
+    [provider_sect]
+    default = default_sect
+    legacy = legacy_sect
+
+    [default_sect]
+    activate = 1
+
+    [legacy_sect]
+    activate = 1
+  '';
 in
 stdenv.mkDerivation rec {
   pname = "evil-winrm";
@@ -38,6 +56,10 @@ stdenv.mkDerivation rec {
     cp evil-winrm.rb $out/bin/evil-winrm
   '';
 
+  postFixup = lib.optionalString sslLegacyProvider ''
+    wrapProgram $out/bin/evil-winrm --prefix OPENSSL_CONF : "${openssl_conf}"
+  '';
+
   passthru.updateScript = bundlerUpdateScript "evil-winrm";
 
   meta = {