stdenv.mkDerivation {
  name = "cef";

  # This is a hack that should be fixed by envvar below
  GIT_SSL_NO_VERIFY=true;
  GIT_SSL_CAINFO = "${cacert}/etc/ssl/certs/ca-bundle.crt";
  SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";
  CURL_CA_BUNDLE = "${cacert}/etc/ssl/certs/ca-bundle.crt";

  buildCommand = ''
    cp -r ${cefSrc}/* .
    ${cefBuildEnv}/bin/cefBuildEnv ${buildScript}
    mkdir -p $out
    cp -r tmp_download_dir/chromium/src/cef/binary_distrib $out/cef
  '';

  outputHash = lib.fakeHash;
  outputHashAlgo = "sha256";
  outputHashMode = "nar"; # nar: recursive Nix Archive
}