crypto Disallow building LZO support, because of a license incompatibility with dev-libs/lzo Build the crywrap TLS proxy service Build libgnutls-dane, implementing DNS-based Authentication of Named Entities. Requires net-dns/unbound Use dev-libs/nettle as crypto backend Build openssl compatibility libraries Add support for PKCS#11 through app-crypt/p11-kit Build extra tools Reflect ABI compatibility of libgnutls.so