git: b2efd602aea8 - main - unbound: Vendor import 1.24.0
Date: Tue, 07 Oct 2025 15:24:29 UTC
The branch main has been updated by cy:
URL: https://cgit.FreeBSD.org/src/commit/?id=b2efd602aea8b3cbc3fb215b9611946d04fceb10
commit b2efd602aea8b3cbc3fb215b9611946d04fceb10
Merge: e770e32aa3a0 0064eb9cf1c8
Author: Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2025-10-07 13:58:59 +0000
Commit: Cy Schubert <cy@FreeBSD.org>
CommitDate: 2025-10-07 15:16:21 +0000
unbound: Vendor import 1.24.0
Release notes at
https://nlnetlabs.nl/news/2025/Sep/18/unbound-1.24.0-released/
MFC after: 1 week
Merge commit '0064eb9cf1c8d526e87d3149249445d4bc8d0248'
contrib/unbound/Makefile.in | 1380 ++--
contrib/unbound/cachedb/redis.c | 144 +-
contrib/unbound/compat/fake-rfc2553.c | 6 +-
contrib/unbound/config.h.in | 22 +-
contrib/unbound/configure | 275 +-
contrib/unbound/configure.ac | 31 +-
contrib/unbound/contrib/aaaa-filter-iterator.patch | 98 +-
contrib/unbound/contrib/unbound.service.in | 6 +
contrib/unbound/daemon/cachedump.c | 339 +-
contrib/unbound/daemon/remote.c | 769 +-
contrib/unbound/daemon/stats.c | 2 +
contrib/unbound/daemon/unbound.c | 9 +-
contrib/unbound/daemon/worker.c | 19 +-
contrib/unbound/dns64/dns64.c | 2 +-
contrib/unbound/dnstap/dnstap.c | 4 +-
contrib/unbound/dnstap/dnstap.m4 | 39 +-
contrib/unbound/dnstap/dnstap.proto | 2 +-
contrib/unbound/dnstap/dtstream.c | 2 +-
contrib/unbound/doc/Changelog | 311 +-
contrib/unbound/doc/README | 2 +-
contrib/unbound/doc/README.man | 16 +
contrib/unbound/doc/example.conf.in | 10 +-
contrib/unbound/doc/libunbound.3.in | 675 +-
contrib/unbound/doc/libunbound.rst | 491 ++
contrib/unbound/doc/unbound-anchor.8.in | 383 +-
contrib/unbound/doc/unbound-anchor.rst | 281 +
contrib/unbound/doc/unbound-checkconf.8.in | 121 +-
contrib/unbound/doc/unbound-checkconf.rst | 98 +
contrib/unbound/doc/unbound-control.8.in | 2037 +++--
contrib/unbound/doc/unbound-control.rst | 1374 ++++
contrib/unbound/doc/unbound-host.1.in | 242 +-
contrib/unbound/doc/unbound-host.rst | 176 +
contrib/unbound/doc/unbound.8.in | 169 +-
contrib/unbound/doc/unbound.conf.5.in | 8143 +++++++++++++-------
contrib/unbound/doc/unbound.conf.rst | 4997 ++++++++++++
contrib/unbound/doc/unbound.rst | 119 +
contrib/unbound/edns-subnet/addrtree.h | 2 +-
contrib/unbound/edns-subnet/subnetmod.c | 47 +-
contrib/unbound/edns-subnet/subnetmod.h | 4 +
contrib/unbound/iterator/iter_delegpt.h | 10 +
contrib/unbound/iterator/iter_fwd.c | 32 +-
contrib/unbound/iterator/iterator.c | 32 +-
contrib/unbound/libunbound/libworker.c | 15 +-
contrib/unbound/libunbound/unbound.h | 2 +
contrib/unbound/respip/respip.h | 2 +-
contrib/unbound/services/authzone.c | 90 +-
contrib/unbound/services/authzone.h | 17 +-
contrib/unbound/services/cache/rrset.c | 2 +
contrib/unbound/services/listen_dnsport.c | 117 +-
contrib/unbound/services/listen_dnsport.h | 9 +-
contrib/unbound/services/mesh.c | 1 +
contrib/unbound/services/mesh.h | 2 +
contrib/unbound/services/modstack.c | 4 +-
contrib/unbound/services/modstack.h | 2 +-
contrib/unbound/services/outside_network.c | 6 +-
contrib/unbound/services/rpz.c | 20 +-
contrib/unbound/sldns/keyraw.c | 4 +-
contrib/unbound/sldns/str2wire.c | 2 +-
contrib/unbound/sldns/wire2str.h | 2 +-
contrib/unbound/smallapp/unbound-anchor.c | 12 +-
contrib/unbound/smallapp/unbound-checkconf.c | 51 +-
contrib/unbound/smallapp/unbound-control.c | 3 +
contrib/unbound/testcode/doqclient.c | 71 +-
contrib/unbound/testcode/fake_event.c | 46 +-
contrib/unbound/testcode/testbound.c | 150 +-
contrib/unbound/testcode/unitdname.c | 277 +
contrib/unbound/testcode/unitinfra.c | 1 +
contrib/unbound/testcode/unitmain.c | 24 +
contrib/unbound/testcode/unitverify.c | 133 +
contrib/unbound/testcode/unitzonemd.c | 1 +
.../auth_nsec3_ent_with_out_of_zone_data.rpl | 228 +
.../auth_nsec3_wild_with_out_of_zone_data.rpl | 234 +
contrib/unbound/testdata/iter_fwdfirstequaltcp.rpl | 163 +
contrib/unbound/testdata/iter_minimise_chain.rpl | 623 ++
.../redis_reconnect_interval.tdir/after.zone | 2 +
.../redis_reconnect_interval.tdir/before.zone | 2 +
.../redis_reconnect_interval.tdir/redis.conf | 583 ++
.../redis_reconnect_interval.conf | 33 +
.../redis_reconnect_interval.dsc | 16 +
.../redis_reconnect_interval.post | 18 +
.../redis_reconnect_interval.pre | 46 +
.../redis_reconnect_interval.test | 121 +
.../unbound_control.key | 39 +
.../unbound_control.pem | 22 +
.../unbound_server.key | 39 +
.../unbound_server.pem | 22 +
contrib/unbound/testdata/rpz_cname_wild.rpl | 190 +
.../testdata/stat_values.tdir/stat_values.conf | 2 +-
.../testdata/stat_values.tdir/stat_values.test | 3 +-
.../testdata/stat_values.tdir/stat_values.testns | 5 +
.../subnet_cache_lookup.conf | 36 +
.../subnet_cache_lookup.dsc | 16 +
.../subnet_cache_lookup.post | 15 +
.../subnet_cache_lookup.pre | 42 +
.../subnet_cache_lookup.test | 121 +
.../subnet_cache_lookup.testns | 181 +
.../unbound/testdata/subnet_cached_servfail.crpl | 2 +-
contrib/unbound/testdata/subnet_noecs_mult.crpl | 334 +
contrib/unbound/testdata/subnet_noecs_refused.crpl | 159 +
contrib/unbound/testdata/subnet_noecs_support.crpl | 127 +
.../unbound/testdata/subnet_scopezero_global.crpl | 280 +
contrib/unbound/testdata/val_failure_dnskey.rpl | 2 +-
contrib/unbound/util/config_file.c | 62 +-
contrib/unbound/util/config_file.h | 11 +
contrib/unbound/util/configparser.c | 1300 ++--
contrib/unbound/util/configparser.y | 12 +-
contrib/unbound/util/data/dname.c | 44 +-
contrib/unbound/util/data/dname.h | 15 +-
contrib/unbound/util/data/msgencode.c | 6 +-
contrib/unbound/util/data/msgencode.h | 2 +-
contrib/unbound/util/data/msgparse.h | 6 +-
contrib/unbound/util/data/msgreply.c | 27 +-
contrib/unbound/util/data/msgreply.h | 12 +-
contrib/unbound/util/iana_ports.inc | 2 +
contrib/unbound/util/mini_event.c | 4 +-
contrib/unbound/util/net_help.c | 21 +-
contrib/unbound/util/netevent.c | 82 +-
contrib/unbound/util/netevent.h | 4 +
contrib/unbound/util/random.c | 33 +
contrib/unbound/validator/val_sigcrypt.c | 5 +
contrib/unbound/validator/validator.c | 19 +-
contrib/unbound/winrc/win_svc.c | 1 +
lib/libunbound/config.h | 4 +-
123 files changed, 23206 insertions(+), 6159 deletions(-)
diff --cc contrib/unbound/config.h.in
index 584810398b91,000000000000..a2b3f33c32be
mode 100644,000000..100644
--- a/contrib/unbound/config.h.in
+++ b/contrib/unbound/config.h.in
@@@ -1,1640 -1,0 +1,1650 @@@
+/* config.h.in. Generated from configure.ac by autoheader. */
+
+/* apply the fallthrough attribute. */
+#undef ATTR_FALLTHROUGH
+
+/* apply the noreturn attribute to a function that exits the program */
+#undef ATTR_NORETURN
+
+/* apply the weak attribute to a symbol */
+#undef ATTR_WEAK
+
+/* Directory to chroot to */
+#undef CHROOT_DIR
+
+/* Define this to enable client subnet option. */
+#undef CLIENT_SUBNET
+
+/* Do sha512 definitions in config.h */
+#undef COMPAT_SHA512
+
+/* Command line arguments used with configure */
+#undef CONFCMDLINE
+
+/* Pathname to the Unbound configuration file */
+#undef CONFIGFILE
+
+/* Define this if on macOSX10.4-darwin8 and setreuid and setregid do not work
+ */
+#undef DARWIN_BROKEN_SETREUID
+
+/* Whether daemon is deprecated */
+#undef DEPRECATED_DAEMON
+
+/* Deprecate RSA 1024 bit length, makes that an unsupported key */
+#undef DEPRECATE_RSA_1024
+
+/* Define this to enable kernel based UDP source port randomization. */
+#undef DISABLE_EXPLICIT_PORT_RANDOMISATION
+
+/* default dnstap socket path */
+#undef DNSTAP_SOCKET_PATH
+
+/* Define if you want to use debug lock checking (slow). */
+#undef ENABLE_LOCK_CHECKS
+
+/* Define this if you enabled-allsymbols from libunbound to link binaries to
+ it for smaller install size, but the libunbound export table is polluted by
+ internal symbols */
+#undef EXPORT_ALL_SYMBOLS
+
+/* Define to 1 if you have the 'accept4' function. */
+#undef HAVE_ACCEPT4
+
+/* Define to 1 if you have the 'arc4random' function. */
+#undef HAVE_ARC4RANDOM
+
+/* Define to 1 if you have the 'arc4random_uniform' function. */
+#undef HAVE_ARC4RANDOM_UNIFORM
+
+/* Define to 1 if you have the <arpa/inet.h> header file. */
+#undef HAVE_ARPA_INET_H
+
+/* Whether the C compiler accepts the "fallthrough" attribute */
+#undef HAVE_ATTR_FALLTHROUGH
+
+/* Whether the C compiler accepts the "format" attribute */
+#undef HAVE_ATTR_FORMAT
+
+/* Whether the C compiler accepts the "noreturn" attribute */
+#undef HAVE_ATTR_NORETURN
+
+/* Whether the C compiler accepts the "unused" attribute */
+#undef HAVE_ATTR_UNUSED
+
+/* Whether the C compiler accepts the "weak" attribute */
+#undef HAVE_ATTR_WEAK
+
+/* If we have be64toh */
+#undef HAVE_BE64TOH
+
+/* Define to 1 if you have the 'BIO_set_callback_ex' function. */
+#undef HAVE_BIO_SET_CALLBACK_EX
+
+/* Define to 1 if you have the <bsd/stdlib.h> header file. */
+#undef HAVE_BSD_STDLIB_H
+
+/* Define to 1 if you have the <bsd/string.h> header file. */
+#undef HAVE_BSD_STRING_H
+
+/* Define to 1 if you have the 'chown' function. */
+#undef HAVE_CHOWN
+
+/* Define to 1 if you have the 'chroot' function. */
+#undef HAVE_CHROOT
+
+/* Define to 1 if you have the 'CRYPTO_cleanup_all_ex_data' function. */
+#undef HAVE_CRYPTO_CLEANUP_ALL_EX_DATA
+
+/* Define to 1 if you have the 'CRYPTO_THREADID_set_callback' function. */
+#undef HAVE_CRYPTO_THREADID_SET_CALLBACK
+
+/* Define to 1 if you have the 'ctime_r' function. */
+#undef HAVE_CTIME_R
+
+/* Define to 1 if you have the 'daemon' function. */
+#undef HAVE_DAEMON
+
+/* Define to 1 if you have the declaration of 'arc4random', and to 0 if you
+ don't. */
+#undef HAVE_DECL_ARC4RANDOM
+
+/* Define to 1 if you have the declaration of 'arc4random_uniform', and to 0
+ if you don't. */
+#undef HAVE_DECL_ARC4RANDOM_UNIFORM
+
+/* Define to 1 if you have the declaration of 'evsignal_assign', and to 0 if
+ you don't. */
+#undef HAVE_DECL_EVSIGNAL_ASSIGN
+
+/* Define to 1 if you have the declaration of 'inet_ntop', and to 0 if you
+ don't. */
+#undef HAVE_DECL_INET_NTOP
+
+/* Define to 1 if you have the declaration of 'inet_pton', and to 0 if you
+ don't. */
+#undef HAVE_DECL_INET_PTON
+
+/* Define to 1 if you have the declaration of 'nghttp2_session_server_new',
+ and to 0 if you don't. */
+#undef HAVE_DECL_NGHTTP2_SESSION_SERVER_NEW
+
+/* Define to 1 if you have the declaration of 'ngtcp2_conn_server_new', and to
+ 0 if you don't. */
+#undef HAVE_DECL_NGTCP2_CONN_SERVER_NEW
+
+/* Define to 1 if you have the declaration of 'ngtcp2_crypto_encrypt_cb', and
+ to 0 if you don't. */
+#undef HAVE_DECL_NGTCP2_CRYPTO_ENCRYPT_CB
+
+/* Define to 1 if you have the declaration of 'NID_ED25519', and to 0 if you
+ don't. */
+#undef HAVE_DECL_NID_ED25519
+
+/* Define to 1 if you have the declaration of 'NID_ED448', and to 0 if you
+ don't. */
+#undef HAVE_DECL_NID_ED448
+
+/* Define to 1 if you have the declaration of 'NID_secp384r1', and to 0 if you
+ don't. */
+#undef HAVE_DECL_NID_SECP384R1
+
+/* Define to 1 if you have the declaration of 'NID_X9_62_prime256v1', and to 0
+ if you don't. */
+#undef HAVE_DECL_NID_X9_62_PRIME256V1
+
+/* Define to 1 if you have the declaration of 'reallocarray', and to 0 if you
+ don't. */
+#undef HAVE_DECL_REALLOCARRAY
+
+/* Define to 1 if you have the declaration of 'redisConnect', and to 0 if you
+ don't. */
+#undef HAVE_DECL_REDISCONNECT
+
+/* Define to 1 if you have the declaration of 'sk_SSL_COMP_pop_free', and to 0
+ if you don't. */
+#undef HAVE_DECL_SK_SSL_COMP_POP_FREE
+
+/* Define to 1 if you have the declaration of
+ 'SSL_COMP_get_compression_methods', and to 0 if you don't. */
+#undef HAVE_DECL_SSL_COMP_GET_COMPRESSION_METHODS
+
+/* Define to 1 if you have the declaration of 'SSL_CTX_set_ecdh_auto', and to
+ 0 if you don't. */
+#undef HAVE_DECL_SSL_CTX_SET_ECDH_AUTO
+
- /* Define to 1 if you have the declaration of 'strlcat', and to 0 if you
++/* Define to 1 if you have the declaration of `SSL_CTX_set_tmp_ecdh', and to 0
++ if you don't. */
++#undef HAVE_DECL_SSL_CTX_SET_TMP_ECDH
++
++/* Define to 1 if you have the declaration of `strlcat', and to 0 if you
+ don't. */
+#undef HAVE_DECL_STRLCAT
+
+/* Define to 1 if you have the declaration of 'strlcpy', and to 0 if you
+ don't. */
+#undef HAVE_DECL_STRLCPY
+
+/* Define to 1 if you have the declaration of 'XML_StopParser', and to 0 if
+ you don't. */
+#undef HAVE_DECL_XML_STOPPARSER
+
+/* Define to 1 if you have the <dlfcn.h> header file. */
+#undef HAVE_DLFCN_H
+
+/* Define to 1 if you have the 'DSA_SIG_set0' function. */
+#undef HAVE_DSA_SIG_SET0
+
+/* Define to 1 if you have the <endian.h> header file. */
+#undef HAVE_ENDIAN_H
+
+/* Define to 1 if you have the 'endprotoent' function. */
+#undef HAVE_ENDPROTOENT
+
+/* Define to 1 if you have the 'endpwent' function. */
+#undef HAVE_ENDPWENT
+
+/* Define to 1 if you have the 'endservent' function. */
+#undef HAVE_ENDSERVENT
+
+/* Define to 1 if you have the 'ENGINE_cleanup' function. */
+#undef HAVE_ENGINE_CLEANUP
+
+/* Define to 1 if you have the 'ERR_free_strings' function. */
+#undef HAVE_ERR_FREE_STRINGS
+
+/* Define to 1 if you have the 'ERR_load_crypto_strings' function. */
+#undef HAVE_ERR_LOAD_CRYPTO_STRINGS
+
+/* Define to 1 if you have the 'event_assign' function. */
+#undef HAVE_EVENT_ASSIGN
+
+/* Define to 1 if you have the 'event_base_free' function. */
+#undef HAVE_EVENT_BASE_FREE
+
+/* Define to 1 if you have the 'event_base_get_method' function. */
+#undef HAVE_EVENT_BASE_GET_METHOD
+
+/* Define to 1 if you have the 'event_base_new' function. */
+#undef HAVE_EVENT_BASE_NEW
+
+/* Define to 1 if you have the 'event_base_once' function. */
+#undef HAVE_EVENT_BASE_ONCE
+
+/* Define to 1 if you have the <event.h> header file. */
+#undef HAVE_EVENT_H
+
+/* Define to 1 if you have the 'EVP_aes_256_cbc' function. */
+#undef HAVE_EVP_AES_256_CBC
+
+/* Define to 1 if you have the 'EVP_cleanup' function. */
+#undef HAVE_EVP_CLEANUP
+
+/* Define to 1 if you have the 'EVP_default_properties_is_fips_enabled'
+ function. */
+#undef HAVE_EVP_DEFAULT_PROPERTIES_IS_FIPS_ENABLED
+
+/* Define to 1 if you have the 'EVP_DigestVerify' function. */
+#undef HAVE_EVP_DIGESTVERIFY
+
+/* Define to 1 if you have the 'EVP_dss1' function. */
+#undef HAVE_EVP_DSS1
+
+/* Define to 1 if you have the 'EVP_EncryptInit_ex' function. */
+#undef HAVE_EVP_ENCRYPTINIT_EX
+
+/* Define to 1 if you have the 'EVP_MAC_CTX_set_params' function. */
+#undef HAVE_EVP_MAC_CTX_SET_PARAMS
+
+/* Define to 1 if you have the 'EVP_MD_CTX_new' function. */
+#undef HAVE_EVP_MD_CTX_NEW
+
+/* Define to 1 if you have the 'EVP_sha1' function. */
+#undef HAVE_EVP_SHA1
+
+/* Define to 1 if you have the 'EVP_sha256' function. */
+#undef HAVE_EVP_SHA256
+
+/* Define to 1 if you have the 'EVP_sha512' function. */
+#undef HAVE_EVP_SHA512
+
+/* Define to 1 if you have the 'ev_default_loop' function. */
+#undef HAVE_EV_DEFAULT_LOOP
+
+/* Define to 1 if you have the 'ev_loop' function. */
+#undef HAVE_EV_LOOP
+
+/* Define to 1 if you have the <expat.h> header file. */
+#undef HAVE_EXPAT_H
+
+/* Define to 1 if you have the 'explicit_bzero' function. */
+#undef HAVE_EXPLICIT_BZERO
+
+/* Define to 1 if you have the 'fcntl' function. */
+#undef HAVE_FCNTL
+
+/* Define to 1 if you have the 'FIPS_mode' function. */
+#undef HAVE_FIPS_MODE
+
+/* Define to 1 if you have the 'fork' function. */
+#undef HAVE_FORK
+
+/* Define to 1 if fseeko (and ftello) are declared in stdio.h. */
+#undef HAVE_FSEEKO
+
+/* Define to 1 if you have the 'fsync' function. */
+#undef HAVE_FSYNC
+
+/* Whether getaddrinfo is available */
+#undef HAVE_GETADDRINFO
+
+/* Define to 1 if you have the 'getauxval' function. */
+#undef HAVE_GETAUXVAL
+
+/* Define to 1 if you have the 'getentropy' function. */
+#undef HAVE_GETENTROPY
+
+/* Define to 1 if you have the 'getifaddrs' function. */
+#undef HAVE_GETIFADDRS
+
+/* Define to 1 if you have the <getopt.h> header file. */
+#undef HAVE_GETOPT_H
+
+/* Define to 1 if you have the 'getpwnam' function. */
+#undef HAVE_GETPWNAM
+
+/* Define to 1 if you have the 'getrlimit' function. */
+#undef HAVE_GETRLIMIT
+
+/* Define to 1 if you have the 'gettid' function. */
+#undef HAVE_GETTID
+
+/* Define to 1 if you have the 'glob' function. */
+#undef HAVE_GLOB
+
+/* Define to 1 if you have the <glob.h> header file. */
+#undef HAVE_GLOB_H
+
+/* Define to 1 if you have the 'gmtime_r' function. */
+#undef HAVE_GMTIME_R
+
+/* Define to 1 if you have the <grp.h> header file. */
+#undef HAVE_GRP_H
+
+/* Define to 1 if you have the <hiredis/hiredis.h> header file. */
+#undef HAVE_HIREDIS_HIREDIS_H
+
+/* Define to 1 if you have the 'HMAC_Init_ex' function. */
+#undef HAVE_HMAC_INIT_EX
+
+/* If we have htobe64 */
+#undef HAVE_HTOBE64
+
+/* Define to 1 if you have the <ifaddrs.h> header file. */
+#undef HAVE_IFADDRS_H
+
+/* Define to 1 if you have the 'if_nametoindex' function. */
+#undef HAVE_IF_NAMETOINDEX
+
+/* Define to 1 if you have the 'inet_aton' function. */
+#undef HAVE_INET_ATON
+
+/* Define to 1 if you have the 'inet_ntop' function. */
+#undef HAVE_INET_NTOP
+
+/* Define to 1 if you have the 'inet_pton' function. */
+#undef HAVE_INET_PTON
+
+/* Define to 1 if you have the 'initgroups' function. */
+#undef HAVE_INITGROUPS
+
+/* Define to 1 if you have the <inttypes.h> header file. */
+#undef HAVE_INTTYPES_H
+
+/* if the function 'ioctlsocket' is available */
+#undef HAVE_IOCTLSOCKET
+
+/* Define to 1 if you have the <iphlpapi.h> header file. */
+#undef HAVE_IPHLPAPI_H
+
+/* Define to 1 if you have the 'isblank' function. */
+#undef HAVE_ISBLANK
+
+/* Define to 1 if you have the 'kill' function. */
+#undef HAVE_KILL
+
+/* Use portable libbsd functions */
+#undef HAVE_LIBBSD
+
+/* Define to 1 if you have the <libkern/OSByteOrder.h> header file. */
+#undef HAVE_LIBKERN_OSBYTEORDER_H
+
+/* Define if we have LibreSSL */
+#undef HAVE_LIBRESSL
+
+/* If we have atomic_store */
+#undef HAVE_LINK_ATOMIC_STORE
+
+/* Define to 1 if you have the <linux/net_tstamp.h> header file. */
+#undef HAVE_LINUX_NET_TSTAMP_H
+
+/* Define to 1 if you have the 'localtime_r' function. */
+#undef HAVE_LOCALTIME_R
+
+/* Define to 1 if you have the <login_cap.h> header file. */
+#undef HAVE_LOGIN_CAP_H
+
+/* If have GNU libc compatible malloc */
+#undef HAVE_MALLOC
+
+/* Define to 1 if you have the 'memmove' function. */
+#undef HAVE_MEMMOVE
+
+/* Define to 1 if you have the <minix/config.h> header file. */
+#undef HAVE_MINIX_CONFIG_H
+
+/* Define to 1 if you have the <netdb.h> header file. */
+#undef HAVE_NETDB_H
+
+/* Define to 1 if you have the <netinet/in.h> header file. */
+#undef HAVE_NETINET_IN_H
+
+/* Define to 1 if you have the <netinet/tcp.h> header file. */
+#undef HAVE_NETINET_TCP_H
+
+/* Define to 1 if you have the <netioapi.h> header file. */
+#undef HAVE_NETIOAPI_H
+
+/* Use libnettle for crypto */
+#undef HAVE_NETTLE
+
+/* Define to 1 if you have the <nettle/dsa-compat.h> header file. */
+#undef HAVE_NETTLE_DSA_COMPAT_H
+
+/* Define to 1 if you have the <nettle/eddsa.h> header file. */
+#undef HAVE_NETTLE_EDDSA_H
+
+/* Define to 1 if you have the <net/if.h> header file. */
+#undef HAVE_NET_IF_H
+
+/* Define to 1 if you have the <net/pfvar.h> header file. */
+#undef HAVE_NET_PFVAR_H
+
+/* Define this to use nghttp2 client. */
+#undef HAVE_NGHTTP2
+
+/* Define to 1 if you have the <nghttp2/nghttp2.h> header file. */
+#undef HAVE_NGHTTP2_NGHTTP2_H
+
+/* Define this to use ngtcp2. */
+#undef HAVE_NGTCP2
+
+/* Define to 1 if you have the 'ngtcp2_ccerr_default' function. */
+#undef HAVE_NGTCP2_CCERR_DEFAULT
+
+/* Define to 1 if you have the 'ngtcp2_conn_encode_0rtt_transport_params'
+ function. */
+#undef HAVE_NGTCP2_CONN_ENCODE_0RTT_TRANSPORT_PARAMS
+
+/* Define to 1 if you have the 'ngtcp2_conn_get_max_local_streams_uni'
+ function. */
+#undef HAVE_NGTCP2_CONN_GET_MAX_LOCAL_STREAMS_UNI
+
+/* Define to 1 if you have the 'ngtcp2_conn_get_num_scid' function. */
+#undef HAVE_NGTCP2_CONN_GET_NUM_SCID
+
+/* Define to 1 if you have the 'ngtcp2_conn_in_closing_period' function. */
+#undef HAVE_NGTCP2_CONN_IN_CLOSING_PERIOD
+
+/* Define to 1 if you have the 'ngtcp2_conn_in_draining_period' function. */
+#undef HAVE_NGTCP2_CONN_IN_DRAINING_PERIOD
+
+/* Define if ngtcp2_conn_shutdown_stream has 4 arguments. */
+#undef HAVE_NGTCP2_CONN_SHUTDOWN_STREAM4
+
+/* Define to 1 if you have the 'ngtcp2_conn_tls_early_data_rejected' function.
+ */
+#undef HAVE_NGTCP2_CONN_TLS_EARLY_DATA_REJECTED
+
+/* Define to 1 if you have the 'ngtcp2_crypto_encrypt_cb' function. */
+#undef HAVE_NGTCP2_CRYPTO_ENCRYPT_CB
+
+/* Define to 1 if you have the
+ 'ngtcp2_crypto_quictls_configure_client_context' function. */
+#undef HAVE_NGTCP2_CRYPTO_QUICTLS_CONFIGURE_CLIENT_CONTEXT
+
+/* Define to 1 if you have the
+ 'ngtcp2_crypto_quictls_configure_server_context' function. */
+#undef HAVE_NGTCP2_CRYPTO_QUICTLS_CONFIGURE_SERVER_CONTEXT
+
+/* Define to 1 if you have the
+ 'ngtcp2_crypto_quictls_from_ossl_encryption_level' function. */
+#undef HAVE_NGTCP2_CRYPTO_QUICTLS_FROM_OSSL_ENCRYPTION_LEVEL
+
- /* Define to 1 if the system has the type 'ngtcp2_encryption_level'. */
++/* Define to 1 if you have the `ngtcp2_crypto_quictls_init' function. */
++#undef HAVE_NGTCP2_CRYPTO_QUICTLS_INIT
++
++/* Define to 1 if the system has the type `ngtcp2_encryption_level'. */
+#undef HAVE_NGTCP2_ENCRYPTION_LEVEL
+
+/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_openssl.h> header file.
+ */
+#undef HAVE_NGTCP2_NGTCP2_CRYPTO_OPENSSL_H
+
++/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_ossl.h> header file. */
++#undef HAVE_NGTCP2_NGTCP2_CRYPTO_OSSL_H
++
+/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_quictls.h> header file.
+ */
+#undef HAVE_NGTCP2_NGTCP2_CRYPTO_QUICTLS_H
+
+/* Define to 1 if you have the <ngtcp2/ngtcp2.h> header file. */
+#undef HAVE_NGTCP2_NGTCP2_H
+
+/* Use libnss for crypto */
+#undef HAVE_NSS
+
+/* Define to 1 if you have the 'OpenSSL_add_all_digests' function. */
+#undef HAVE_OPENSSL_ADD_ALL_DIGESTS
+
+/* Define to 1 if you have the <openssl/bn.h> header file. */
+#undef HAVE_OPENSSL_BN_H
+
+/* Define to 1 if you have the 'OPENSSL_config' function. */
+#undef HAVE_OPENSSL_CONFIG
+
+/* Define to 1 if you have the <openssl/conf.h> header file. */
+#undef HAVE_OPENSSL_CONF_H
+
+/* Define to 1 if you have the <openssl/core_names.h> header file. */
+#undef HAVE_OPENSSL_CORE_NAMES_H
+
+/* Define to 1 if you have the <openssl/dh.h> header file. */
+#undef HAVE_OPENSSL_DH_H
+
+/* Define to 1 if you have the <openssl/dsa.h> header file. */
+#undef HAVE_OPENSSL_DSA_H
+
+/* Define to 1 if you have the <openssl/engine.h> header file. */
+#undef HAVE_OPENSSL_ENGINE_H
+
+/* Define to 1 if you have the <openssl/err.h> header file. */
+#undef HAVE_OPENSSL_ERR_H
+
+/* Define to 1 if you have the 'OPENSSL_init_crypto' function. */
+#undef HAVE_OPENSSL_INIT_CRYPTO
+
+/* Define to 1 if you have the 'OPENSSL_init_ssl' function. */
+#undef HAVE_OPENSSL_INIT_SSL
+
+/* Define to 1 if you have the <openssl/param_build.h> header file. */
+#undef HAVE_OPENSSL_PARAM_BUILD_H
+
+/* Define to 1 if you have the <openssl/rand.h> header file. */
+#undef HAVE_OPENSSL_RAND_H
+
+/* Define to 1 if you have the <openssl/rsa.h> header file. */
+#undef HAVE_OPENSSL_RSA_H
+
+/* Define to 1 if you have the <openssl/ssl.h> header file. */
+#undef HAVE_OPENSSL_SSL_H
+
+/* Define to 1 if you have the 'OSSL_PARAM_BLD_new' function. */
+#undef HAVE_OSSL_PARAM_BLD_NEW
+
+/* Define to 1 if you have the 'poll' function. */
+#undef HAVE_POLL
+
+/* Define to 1 if you have the <poll.h> header file. */
+#undef HAVE_POLL_H
+
+/* Define if you have POSIX threads libraries and header files. */
+#undef HAVE_PTHREAD
+
+/* Have PTHREAD_PRIO_INHERIT. */
+#undef HAVE_PTHREAD_PRIO_INHERIT
+
+/* Define to 1 if the system has the type 'pthread_rwlock_t'. */
+#undef HAVE_PTHREAD_RWLOCK_T
+
+/* Define to 1 if the system has the type 'pthread_spinlock_t'. */
+#undef HAVE_PTHREAD_SPINLOCK_T
+
+/* Define to 1 if you have the <pwd.h> header file. */
+#undef HAVE_PWD_H
+
+/* Define if you have Python libraries and header files. */
+#undef HAVE_PYTHON
+
+/* Define to 1 if you have the 'random' function. */
+#undef HAVE_RANDOM
+
+/* Define to 1 if you have the 'RAND_cleanup' function. */
+#undef HAVE_RAND_CLEANUP
+
+/* If we have reallocarray(3) */
+#undef HAVE_REALLOCARRAY
+
+/* Define to 1 if you have the 'recvmsg' function. */
+#undef HAVE_RECVMSG
+
+/* Define to 1 if you have the 'sendmsg' function. */
+#undef HAVE_SENDMSG
+
+/* Define to 1 if you have the 'setregid' function. */
+#undef HAVE_SETREGID
+
+/* Define to 1 if you have the 'setresgid' function. */
+#undef HAVE_SETRESGID
+
+/* Define to 1 if you have the 'setresuid' function. */
+#undef HAVE_SETRESUID
+
+/* Define to 1 if you have the 'setreuid' function. */
+#undef HAVE_SETREUID
+
+/* Define to 1 if you have the 'setrlimit' function. */
+#undef HAVE_SETRLIMIT
+
+/* Define to 1 if you have the 'setsid' function. */
+#undef HAVE_SETSID
+
+/* Define to 1 if you have the 'setusercontext' function. */
+#undef HAVE_SETUSERCONTEXT
+
+/* Define to 1 if you have the 'SHA512_Update' function. */
+#undef HAVE_SHA512_UPDATE
+
+/* Define to 1 if you have the 'shmget' function. */
+#undef HAVE_SHMGET
+
+/* Define to 1 if you have the 'sigprocmask' function. */
+#undef HAVE_SIGPROCMASK
+
+/* Define to 1 if you have the 'sleep' function. */
+#undef HAVE_SLEEP
+
+/* Define to 1 if you have the 'snprintf' function. */
+#undef HAVE_SNPRINTF
+
+/* Define to 1 if you have the 'socketpair' function. */
+#undef HAVE_SOCKETPAIR
+
+/* Using Solaris threads */
+#undef HAVE_SOLARIS_THREADS
+
+/* Define to 1 if you have the 'srandom' function. */
+#undef HAVE_SRANDOM
+
+/* Define if you have the SSL libraries installed. */
+#undef HAVE_SSL
+
+/* Define to 1 if you have the 'SSL_CTX_set_alpn_protos' function. */
+#undef HAVE_SSL_CTX_SET_ALPN_PROTOS
+
+/* Define to 1 if you have the 'SSL_CTX_set_alpn_select_cb' function. */
+#undef HAVE_SSL_CTX_SET_ALPN_SELECT_CB
+
+/* Define to 1 if you have the 'SSL_CTX_set_ciphersuites' function. */
+#undef HAVE_SSL_CTX_SET_CIPHERSUITES
+
+/* Define to 1 if you have the 'SSL_CTX_set_security_level' function. */
+#undef HAVE_SSL_CTX_SET_SECURITY_LEVEL
+
+/* Define to 1 if you have the 'SSL_CTX_set_tlsext_ticket_key_evp_cb'
+ function. */
+#undef HAVE_SSL_CTX_SET_TLSEXT_TICKET_KEY_EVP_CB
+
- /* Define to 1 if you have the 'SSL_CTX_set_tmp_ecdh' function. */
- #undef HAVE_SSL_CTX_SET_TMP_ECDH
-
- /* Define to 1 if you have the 'SSL_get0_alpn_selected' function. */
++/* Define to 1 if you have the `SSL_get0_alpn_selected' function. */
+#undef HAVE_SSL_GET0_ALPN_SELECTED
+
+/* Define to 1 if you have the 'SSL_get0_peername' function. */
+#undef HAVE_SSL_GET0_PEERNAME
+
+/* Define to 1 if you have the 'SSL_get1_peer_certificate' function. */
+#undef HAVE_SSL_GET1_PEER_CERTIFICATE
+
+/* Define to 1 if you have the 'SSL_is_quic' function. */
+#undef HAVE_SSL_IS_QUIC
+
+/* Define to 1 if you have the 'SSL_set1_host' function. */
+#undef HAVE_SSL_SET1_HOST
+
+/* Define to 1 if you have the <stdarg.h> header file. */
+#undef HAVE_STDARG_H
+
+/* Define to 1 if you have the <stdatomic.h> header file. */
+#undef HAVE_STDATOMIC_H
+
+/* Define to 1 if you have the <stdbool.h> header file. */
+#undef HAVE_STDBOOL_H
+
+/* Define to 1 if you have the <stdint.h> header file. */
+#undef HAVE_STDINT_H
+
+/* Define to 1 if you have the <stdio.h> header file. */
+#undef HAVE_STDIO_H
+
+/* Define to 1 if you have the <stdlib.h> header file. */
+#undef HAVE_STDLIB_H
+
+/* Define to 1 if you have the 'strftime' function. */
+#undef HAVE_STRFTIME
+
+/* Define to 1 if you have the <strings.h> header file. */
+#undef HAVE_STRINGS_H
+
+/* Define to 1 if you have the <string.h> header file. */
+#undef HAVE_STRING_H
+
+/* Define to 1 if you have the 'strlcat' function. */
+#undef HAVE_STRLCAT
+
+/* Define to 1 if you have the 'strlcpy' function. */
+#undef HAVE_STRLCPY
+
+/* Define to 1 if you have the 'strptime' function. */
+#undef HAVE_STRPTIME
+
+/* Define to 1 if you have the 'strsep' function. */
+#undef HAVE_STRSEP
+
+/* Define to 1 if 'ipi_spec_dst' is a member of 'struct in_pktinfo'. */
+#undef HAVE_STRUCT_IN_PKTINFO_IPI_SPEC_DST
+
+/* Define to 1 if 'tokenlen' is a member of 'struct ngtcp2_pkt_hd'. */
+#undef HAVE_STRUCT_NGTCP2_PKT_HD_TOKENLEN
+
+/* Define to 1 if 'max_tx_udp_payload_size' is a member of 'struct
+ ngtcp2_settings'. */
+#undef HAVE_STRUCT_NGTCP2_SETTINGS_MAX_TX_UDP_PAYLOAD_SIZE
+
+/* Define to 1 if 'tokenlen' is a member of 'struct ngtcp2_settings'. */
+#undef HAVE_STRUCT_NGTCP2_SETTINGS_TOKENLEN
+
+/* Define to 1 if 'original_dcid_present' is a member of 'struct
+ ngtcp2_transport_params'. */
+#undef HAVE_STRUCT_NGTCP2_TRANSPORT_PARAMS_ORIGINAL_DCID_PRESENT
+
+/* Define to 1 if the system has the type 'struct ngtcp2_version_cid'. */
+#undef HAVE_STRUCT_NGTCP2_VERSION_CID
+
+/* Define to 1 if 'sun_len' is a member of 'struct sockaddr_un'. */
+#undef HAVE_STRUCT_SOCKADDR_UN_SUN_LEN
+
+/* Define if you have Swig libraries and header files. */
+#undef HAVE_SWIG
+
+/* Define to 1 if you have the <syslog.h> header file. */
+#undef HAVE_SYSLOG_H
+
+/* Define to 1 if systemd should be used */
+#undef HAVE_SYSTEMD
+
+/* Define to 1 if you have the <sys/endian.h> header file. */
+#undef HAVE_SYS_ENDIAN_H
+
+/* Define to 1 if you have the <sys/ipc.h> header file. */
+#undef HAVE_SYS_IPC_H
+
+/* Define to 1 if you have the <sys/param.h> header file. */
+#undef HAVE_SYS_PARAM_H
+
+/* Define to 1 if you have the <sys/resource.h> header file. */
+#undef HAVE_SYS_RESOURCE_H
+
+/* Define to 1 if you have the <sys/select.h> header file. */
+#undef HAVE_SYS_SELECT_H
+
+/* Define to 1 if you have the <sys/sha2.h> header file. */
+#undef HAVE_SYS_SHA2_H
+
+/* Define to 1 if you have the <sys/shm.h> header file. */
+#undef HAVE_SYS_SHM_H
+
+/* Define to 1 if you have the <sys/socket.h> header file. */
+#undef HAVE_SYS_SOCKET_H
+
+/* Define to 1 if you have the <sys/stat.h> header file. */
+#undef HAVE_SYS_STAT_H
+
+/* Define to 1 if you have the <sys/sysctl.h> header file. */
+#undef HAVE_SYS_SYSCTL_H
+
+/* Define to 1 if you have the <sys/types.h> header file. */
+#undef HAVE_SYS_TYPES_H
+
+/* Define to 1 if you have the <sys/uio.h> header file. */
+#undef HAVE_SYS_UIO_H
+
+/* Define to 1 if you have the <sys/un.h> header file. */
+#undef HAVE_SYS_UN_H
+
+/* Define to 1 if you have the <sys/wait.h> header file. */
+#undef HAVE_SYS_WAIT_H
+
+/* Define to 1 if you have the <TargetConditionals.h> header file. */
+#undef HAVE_TARGETCONDITIONALS_H
+
+/* Define to 1 if you have the <time.h> header file. */
+#undef HAVE_TIME_H
+
+/* Define to 1 if you have the 'tzset' function. */
+#undef HAVE_TZSET
+
+/* Define to 1 if you have the <unistd.h> header file. */
+#undef HAVE_UNISTD_H
+
+/* Define to 1 if you have the 'usleep' function. */
+#undef HAVE_USLEEP
+
+/* Define to 1 if you have the 'vfork' function. */
+#undef HAVE_VFORK
+
+/* Define to 1 if you have the <vfork.h> header file. */
+#undef HAVE_VFORK_H
+
+/* Define to 1 if you have the <wchar.h> header file. */
+#undef HAVE_WCHAR_H
+
+/* Define to 1 if you have the <windows.h> header file. */
+#undef HAVE_WINDOWS_H
+
+/* Using Windows threads */
+#undef HAVE_WINDOWS_THREADS
+
+/* Define to 1 if you have the <winsock2.h> header file. */
+#undef HAVE_WINSOCK2_H
+
+/* Define to 1 if 'fork' works. */
+#undef HAVE_WORKING_FORK
+
+/* Define to 1 if 'vfork' works. */
+#undef HAVE_WORKING_VFORK
+
+/* Define to 1 if you have the 'writev' function. */
+#undef HAVE_WRITEV
+
+/* Define to 1 if you have the <ws2tcpip.h> header file. */
+#undef HAVE_WS2TCPIP_H
+
*** 33861 LINES SKIPPED ***