···376376377377# Prevent OpenSSL-based applications from using certificates in
378378# /etc/ssl.
379379-if [ -z "$SSL_CERT_FILE" ]; then
379379+# Leave it in shells for convenience.
380380+if [ -z "$SSL_CERT_FILE" ] && [ -z "$IN_NIX_SHELL" ]; then
380381 export SSL_CERT_FILE=/no-cert-file.crt
381382fi
382383