<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
  <herd>crypto</herd>
  <use>
    <flag name="nettle" restrict="&lt;net-libs/gnutls-3">
      Use <pkg>dev-libs/nettle</pkg> as crypto backend
    </flag>
    <flag name="pkcs11">
      Add support for PKCS#11 through <pkg>app-crypt/p11-kit</pkg>
    </flag>
    <flag name="dane" restrict="&gt;=net-libs/gnutls-3.1.3">
      Build libgnutls-dane, implementing DNS-based Authentication of
      Named Entities. Requires <pkg>net-dns/unbound</pkg>.
    </flag>
    <flag name="bindist">
      Disallow building LZO support, because of a license
      incompatibility with <pkg>dev-libs/lzo</pkg>.
    </flag>
  </use>
</pkgmetadata>