{ stdenv
, fetchFromGitHub
, lib
, pkg-config
, autoreconfHook
, autoconf
, autoconf-archive
, automake
, libtool
, makeWrapper
, curl
, openssl
, tpm2-tss
, pandoc
, doxygen
}:

stdenv.mkDerivation rec {
  pname = "tpm2-tss-engine";
  version = "1.1.0";

  src = fetchFromGitHub {
    owner = "tpm2-software";
    repo = pname;
    rev = "v${version}";
    sha256 = "1pwc38izkk50s73xzcca1l5h265lmh4hcgpfq8lmbv5grq2qdal8";
  };

  nativeBuildInputs = [
    pkg-config
    makeWrapper
    autoreconfHook
    autoconf
    autoconf-archive
    automake
    libtool
    pandoc
    doxygen
  ];

  buildInputs = [
    curl openssl tpm2-tss
  ];

  preFixup = let
    ldLibraryPath = lib.makeLibraryPath ([
      tpm2-tss
    ]);
  in ''
    for bin in $out/bin/*; do
      wrapProgram $bin \
        --suffix LD_LIBRARY_PATH : "${ldLibraryPath}"
    done
  '';

  meta = with lib; {
    description = "OpenSSL Engine for TPM2 devices";
    homepage = "tpm2-software.github.io";
    license = licenses.bsd3;
    platforms = platforms.linux;
    maintainers = with maintainers; [ matthiasbeyer ];
  };
}