{ flake ? import ../., nixpkgs ? flake.inputs.nixpkgs, pkgs ? import nixpkgs { } }:
{
  shell = pkgs.mkShell {
    buildInputs = [
      pkgs.openssl
    ];

    OPENSSL_CONF = pkgs.writeText "openssl-pkcs11.conf" ''
      openssl_conf = openssl_def

      [openssl_def]
      engines = engine_section

      [engine_section]
      pkcs11 = pkcs11_section

      [pkcs11_section]
      engine_id = pkcs11
      dynamic_path = ${pkgs.libp11}/lib/engines/libpkcs11.so
      MODULE_PATH = ${pkgs.opensc}/lib/opensc-pkcs11.so
    '';
  };
}