{
  fetchurl,
  lib,
  stdenv,
  libidn,
  libkrb5,
  testers,
}:

stdenv.mkDerivation (finalAttrs: {
  pname = "gsasl";
  version = "2.2.1";

  src = fetchurl {
    url = "mirror://gnu/gsasl/${finalAttrs.pname}-${finalAttrs.version}.tar.gz";
    sha256 = "sha256-1FtWLhO9E7n8ILNy9LUyaXQM9iefg28JzhG50yvO4HU=";
  };

  # This is actually bug in musl. It is already fixed in trunc and
  # this patch won't be necessary with musl > 1.2.3.
  #
  # https://git.musl-libc.org/cgit/musl/commit/?id=b50eb8c36c20f967bd0ed70c0b0db38a450886ba
  patches = lib.optional stdenv.hostPlatform.isMusl ./gsasl.patch;

  buildInputs = [
    libidn
    libkrb5
  ];

  configureFlags = [ "--with-gssapi-impl=mit" ];

  preCheck = ''
    export LOCALDOMAIN="dummydomain"
  '';
  doCheck = !stdenv.hostPlatform.isDarwin;

  passthru.tests.pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;

  meta = {
    description = "GNU SASL, Simple Authentication and Security Layer library";
    mainProgram = "gsasl";

    longDescription = ''
      GNU SASL is a library that implements the IETF Simple
              Authentication and Security Layer (SASL) framework and
              some SASL mechanisms. SASL is used in network servers
              (e.g. IMAP, SMTP, etc.) to authenticate peers.
    '';

    homepage = "https://www.gnu.org/software/gsasl/";
    license = lib.licenses.gpl3Plus;

    maintainers = with lib.maintainers; [ shlevy ];
    pkgConfigModules = [ "libgsasl" ];
    platforms = lib.platforms.all;
  };
})