{ lib, stdenv, fetchurl, gettext, libgpg-error, libgcrypt, libksba, zlib }:

stdenv.mkDerivation rec {
  pname = "ntbtls";
  version = "0.3.2";

  src = fetchurl {
    url = "mirror://gnupg/ntbtls/ntbtls-${version}.tar.bz2";
    sha256 = "sha256-vfy5kCSs7JxsS5mK1juzkh30z+5KdyrWwMoyTbvysHw=";
  };

  outputs = [ "dev" "out" ];

  buildInputs = [ libgcrypt libgpg-error libksba zlib ]
    ++ lib.optional stdenv.hostPlatform.isDarwin gettext;

  postInstall = ''
    moveToOutput "bin/ntbtls-config" $dev
  '';

  meta = with lib; {
    description = "Tiny TLS 1.2 only implementation";
    mainProgram = "ntbtls-config";
    homepage = "https://www.gnupg.org/software/ntbtls/";
    license = licenses.gpl3Plus;
    platforms = platforms.unix;
    maintainers = with maintainers; [ joachifm ];
  };
}