dnl The gnutls libgnutls.so library
dnl
dnl Copyright (C) 2016 Red Hat, Inc.
dnl
dnl This library is free software; you can redistribute it and/or
dnl modify it under the terms of the GNU Lesser General Public
dnl License as published by the Free Software Foundation; either
dnl version 2.1 of the License, or (at your option) any later version.
dnl
dnl This library is distributed in the hope that it will be useful,
dnl but WITHOUT ANY WARRANTY; without even the implied warranty of
dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
dnl Lesser General Public License for more details.
dnl
dnl You should have received a copy of the GNU Lesser General Public
dnl License along with this library.  If not, see
dnl <http://www.gnu.org/licenses/>.
dnl

AC_DEFUN([LIBVIRT_CHECK_GNUTLS],[
  LIBVIRT_CHECK_PKG([GNUTLS], [gnutls], [2.2.0])

  dnl Double probe: gnutls >= 2.12 had a configure option for gcrypt and
  dnl gnutls >= 3.0 uses only nettle.  Our goal is to avoid gcrypt if we
  dnl can prove gnutls uses nettle, but it is a safe fallback to use gcrypt
  dnl if we can't prove anything.

  GNUTLS_GCRYPT=
  if $PKG_CONFIG --exists 'gnutls >= 3.0'; then
    GNUTLS_GCRYPT="no"
  else
    GNUTLS_GCRYPT="probe"
  fi

  if test "$GNUTLS_GCRYPT" = "probe"; then
    case $($PKG_CONFIG --libs --static gnutls) in
      *gcrypt*) GNUTLS_GCRYPT=yes       ;;
      *nettle*) GNUTLS_GCRYPT=no        ;;
      *)        GNUTLS_GCRYPT=unknown   ;;
    esac
  fi

  if test "$GNUTLS_GCRYPT" = "yes" || test "$GNUTLS_GCRYPT" = "unknown"; then
    GNUTLS_LIBS="$GNUTLS_LIBS -lgcrypt"
    dnl We're not using gcrypt deprecated features so define
    dnl GCRYPT_NO_DEPRECATED to avoid deprecated warnings
    GNUTLS_CFLAGS="$GNUTLS_CFLAGS -DGCRYPT_NO_DEPRECATED"
    AC_DEFINE_UNQUOTED([WITH_GNUTLS_GCRYPT], 1,
                       [set to 1 if it is known or assumed that GNUTLS uses gcrypt])
  fi

  AC_CHECK_HEADERS([gnutls/crypto.h], [], [], [[
    #include <gnutls/gnutls.h>
  ]])

  AC_CHECK_FUNC([gnutls_rnd])
  AC_CHECK_FUNC([gnutls_cipher_encrypt])
])

AC_DEFUN([LIBVIRT_RESULT_GNUTLS],[
  LIBVIRT_RESULT_LIB([GNUTLS])
])