> +++ command cargo check --release --locked --all-targets
       >     Updating crates.io index
       > error: failed to get `async-trait` as a dependency of package `libkypc v0.1.0 (/nix/var/nix/builds/nix-72346-1214498785/source/crates/libkypc)`
       >
       > Caused by:
       >   download of config.json failed
       >
       > Caused by:
       >   failed to download from `https://index.crates.io/config.json`
       >
       > Caused by:
       >   [60] SSL peer certificate or SSH remote key was not OK (SSL certificate OpenSSL verify result: unable to get local issuer certificate (20))

{ pkgs, libiconv, lib, stdenv, crane }:
let
  craneLib = crane.mkLib pkgs;
  src = craneLib.cleanCargoSource ./.;
  commonArgs = {
    inherit src;
    strictDeps = true;
    buildInputs = lib.optionals stdenv.isDarwin [ libiconv ];
  };
  cargoArtifacts = craneLib.buildDepsOnly commonArgs;
in {
  kypc = craneLib.buildPackage {
    inherit cargoArtifacts;
    pname = "libkypc";
    version = "0.1.0";
    cargoExtraArgs = "-p libkypc";
    doCheck = false;
    src = lib.fileset.toSource {
      root = ./.;
      fileset = lib.fileset.unions [
        ./Cargo.toml
        ./Cargo.lock
        (craneLib.fileset.commonCargoSources ./crates/libkypc)
      ];
    };
  };
}

# This file is automatically @generated by Cargo.
# It is not intended for manual editing.
version = 3

[[package]]
name = "quick-start"
version = "0.1.0"

@tomasajt:matrix.org already reviewed it as the author of fetchCargoVendor and stated:

I'll look into whether your approach could be improved.

In the meantime you could patch out one of the revisions in the lockfile over to the other revision. It's not guaranteed to be correct, but it might be fine as a hotfix.