diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index 3bd7cd9a3..1ce34a951 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -96,7 +96,7 @@ in
       "nmon"
       "nvimpager"
       "nvme-cli"  # nvme
-      # "openssl"
+      "openssl"
       "parted"
       "pciutils"
       "picocom"  # serial TTY
@@ -953,6 +953,8 @@ in
 
     openscad-lsp.sandbox.whitelistPwd = true;
 
+    openssl.sandbox.net = "clearnet";
+
     passt.sandbox.enable = false;  #< sandbox helper (netns specifically)
 
     parted.sandbox.extraPaths = [