Re: git: b2efd602aea8 - main - unbound: Vendor import 1.24.0
Date: Tue, 07 Oct 2025 22:12:21 UTC
In message <CAPwQLcep1-Pt4P1QHiJpnZrMXXicG5Bc_tpxa6MtjVZT+vpJmg@mail.gmail.c
om>
, Jose Luis Duran writes:
> Hello Cy,
>
> According to the changelog:
>
> "The default value increase for so-sndbuf is to mitigate a cross-layer
> issue where the UDP socket send buffers are exhausted waiting for
> ARP/NDP resolution. Thanks to Reflyable for the report.
>
> To help the server start more easily, the setsockopt for sndbuf buffer
> size prints a warning instead of a failure to start the server if it
> can not set the buffer size."
>
> This means so-sndbuf is now 4m. Which triggers a warning, detailed in
> upstream commit 713b5db5 ("- Fix to print warning for when so-sndbuf
> setsockopt is not granted.").
>
> I wonder if we should revert back to using "so-sndbuf: 0" as the
> default for FreeBSD? Or is there a better solution/workaround?
There are in fact two commits.
1ef7b4a24 adjusted so-sndbuf to default to 4m.
03772d10f changed the default from to 1m.
I assume you're suggesting reverting both upstream commits for FreeBSD?
--
Cheers,
Cy Schubert <Cy.Schubert@cschubert.com>
FreeBSD UNIX: <cy@FreeBSD.org> Web: https://FreeBSD.org
NTP: <cy@nwtime.org> Web: https://nwtime.org
e**(i*pi)+1=0
>
> Regards,
>
> On Tue, Oct 7, 2025 at 12:24=E2=80=AFPM Cy Schubert <cy@freebsd.org> wrote:
> >
> > The branch main has been updated by cy:
> >
> > URL: https://cgit.FreeBSD.org/src/commit/?id=3Db2efd602aea8b3cbc3fb215b96=
> 11946d04fceb10
> >
> > commit b2efd602aea8b3cbc3fb215b9611946d04fceb10
> > Merge: e770e32aa3a0 0064eb9cf1c8
> > Author: Cy Schubert <cy@FreeBSD.org>
> > AuthorDate: 2025-10-07 13:58:59 +0000
> > Commit: Cy Schubert <cy@FreeBSD.org>
> > CommitDate: 2025-10-07 15:16:21 +0000
> >
> > unbound: Vendor import 1.24.0
> >
> > Release notes at
> > https://nlnetlabs.nl/news/2025/Sep/18/unbound-1.24.0-released=
> /
> >
> > MFC after: 1 week
> >
> > Merge commit '0064eb9cf1c8d526e87d3149249445d4bc8d0248'
> >
> > contrib/unbound/Makefile.in | 1380 ++--
> > contrib/unbound/cachedb/redis.c | 144 +-
> > contrib/unbound/compat/fake-rfc2553.c | 6 +-
> > contrib/unbound/config.h.in | 22 +-
> > contrib/unbound/configure | 275 +-
> > contrib/unbound/configure.ac | 31 +-
> > contrib/unbound/contrib/aaaa-filter-iterator.patch | 98 +-
> > contrib/unbound/contrib/unbound.service.in | 6 +
> > contrib/unbound/daemon/cachedump.c | 339 +-
> > contrib/unbound/daemon/remote.c | 769 +-
> > contrib/unbound/daemon/stats.c | 2 +
> > contrib/unbound/daemon/unbound.c | 9 +-
> > contrib/unbound/daemon/worker.c | 19 +-
> > contrib/unbound/dns64/dns64.c | 2 +-
> > contrib/unbound/dnstap/dnstap.c | 4 +-
> > contrib/unbound/dnstap/dnstap.m4 | 39 +-
> > contrib/unbound/dnstap/dnstap.proto | 2 +-
> > contrib/unbound/dnstap/dtstream.c | 2 +-
> > contrib/unbound/doc/Changelog | 311 +-
> > contrib/unbound/doc/README | 2 +-
> > contrib/unbound/doc/README.man | 16 +
> > contrib/unbound/doc/example.conf.in | 10 +-
> > contrib/unbound/doc/libunbound.3.in | 675 +-
> > contrib/unbound/doc/libunbound.rst | 491 ++
> > contrib/unbound/doc/unbound-anchor.8.in | 383 +-
> > contrib/unbound/doc/unbound-anchor.rst | 281 +
> > contrib/unbound/doc/unbound-checkconf.8.in | 121 +-
> > contrib/unbound/doc/unbound-checkconf.rst | 98 +
> > contrib/unbound/doc/unbound-control.8.in | 2037 +++--
> > contrib/unbound/doc/unbound-control.rst | 1374 ++++
> > contrib/unbound/doc/unbound-host.1.in | 242 +-
> > contrib/unbound/doc/unbound-host.rst | 176 +
> > contrib/unbound/doc/unbound.8.in | 169 +-
> > contrib/unbound/doc/unbound.conf.5.in | 8143 +++++++++++++-=
> ------
> > contrib/unbound/doc/unbound.conf.rst | 4997 ++++++++++++
> > contrib/unbound/doc/unbound.rst | 119 +
> > contrib/unbound/edns-subnet/addrtree.h | 2 +-
> > contrib/unbound/edns-subnet/subnetmod.c | 47 +-
> > contrib/unbound/edns-subnet/subnetmod.h | 4 +
> > contrib/unbound/iterator/iter_delegpt.h | 10 +
> > contrib/unbound/iterator/iter_fwd.c | 32 +-
> > contrib/unbound/iterator/iterator.c | 32 +-
> > contrib/unbound/libunbound/libworker.c | 15 +-
> > contrib/unbound/libunbound/unbound.h | 2 +
> > contrib/unbound/respip/respip.h | 2 +-
> > contrib/unbound/services/authzone.c | 90 +-
> > contrib/unbound/services/authzone.h | 17 +-
> > contrib/unbound/services/cache/rrset.c | 2 +
> > contrib/unbound/services/listen_dnsport.c | 117 +-
> > contrib/unbound/services/listen_dnsport.h | 9 +-
> > contrib/unbound/services/mesh.c | 1 +
> > contrib/unbound/services/mesh.h | 2 +
> > contrib/unbound/services/modstack.c | 4 +-
> > contrib/unbound/services/modstack.h | 2 +-
> > contrib/unbound/services/outside_network.c | 6 +-
> > contrib/unbound/services/rpz.c | 20 +-
> > contrib/unbound/sldns/keyraw.c | 4 +-
> > contrib/unbound/sldns/str2wire.c | 2 +-
> > contrib/unbound/sldns/wire2str.h | 2 +-
> > contrib/unbound/smallapp/unbound-anchor.c | 12 +-
> > contrib/unbound/smallapp/unbound-checkconf.c | 51 +-
> > contrib/unbound/smallapp/unbound-control.c | 3 +
> > contrib/unbound/testcode/doqclient.c | 71 +-
> > contrib/unbound/testcode/fake_event.c | 46 +-
> > contrib/unbound/testcode/testbound.c | 150 +-
> > contrib/unbound/testcode/unitdname.c | 277 +
> > contrib/unbound/testcode/unitinfra.c | 1 +
> > contrib/unbound/testcode/unitmain.c | 24 +
> > contrib/unbound/testcode/unitverify.c | 133 +
> > contrib/unbound/testcode/unitzonemd.c | 1 +
> > .../auth_nsec3_ent_with_out_of_zone_data.rpl | 228 +
> > .../auth_nsec3_wild_with_out_of_zone_data.rpl | 234 +
> > contrib/unbound/testdata/iter_fwdfirstequaltcp.rpl | 163 +
> > contrib/unbound/testdata/iter_minimise_chain.rpl | 623 ++
> > .../redis_reconnect_interval.tdir/after.zone | 2 +
> > .../redis_reconnect_interval.tdir/before.zone | 2 +
> > .../redis_reconnect_interval.tdir/redis.conf | 583 ++
> > .../redis_reconnect_interval.conf | 33 +
> > .../redis_reconnect_interval.dsc | 16 +
> > .../redis_reconnect_interval.post | 18 +
> > .../redis_reconnect_interval.pre | 46 +
> > .../redis_reconnect_interval.test | 121 +
> > .../unbound_control.key | 39 +
> > .../unbound_control.pem | 22 +
> > .../unbound_server.key | 39 +
> > .../unbound_server.pem | 22 +
> > contrib/unbound/testdata/rpz_cname_wild.rpl | 190 +
> > .../testdata/stat_values.tdir/stat_values.conf | 2 +-
> > .../testdata/stat_values.tdir/stat_values.test | 3 +-
> > .../testdata/stat_values.tdir/stat_values.testns | 5 +
> > .../subnet_cache_lookup.conf | 36 +
> > .../subnet_cache_lookup.dsc | 16 +
> > .../subnet_cache_lookup.post | 15 +
> > .../subnet_cache_lookup.pre | 42 +
> > .../subnet_cache_lookup.test | 121 +
> > .../subnet_cache_lookup.testns | 181 +
> > .../unbound/testdata/subnet_cached_servfail.crpl | 2 +-
> > contrib/unbound/testdata/subnet_noecs_mult.crpl | 334 +
> > contrib/unbound/testdata/subnet_noecs_refused.crpl | 159 +
> > contrib/unbound/testdata/subnet_noecs_support.crpl | 127 +
> > .../unbound/testdata/subnet_scopezero_global.crpl | 280 +
> > contrib/unbound/testdata/val_failure_dnskey.rpl | 2 +-
> > contrib/unbound/util/config_file.c | 62 +-
> > contrib/unbound/util/config_file.h | 11 +
> > contrib/unbound/util/configparser.c | 1300 ++--
> > contrib/unbound/util/configparser.y | 12 +-
> > contrib/unbound/util/data/dname.c | 44 +-
> > contrib/unbound/util/data/dname.h | 15 +-
> > contrib/unbound/util/data/msgencode.c | 6 +-
> > contrib/unbound/util/data/msgencode.h | 2 +-
> > contrib/unbound/util/data/msgparse.h | 6 +-
> > contrib/unbound/util/data/msgreply.c | 27 +-
> > contrib/unbound/util/data/msgreply.h | 12 +-
> > contrib/unbound/util/iana_ports.inc | 2 +
> > contrib/unbound/util/mini_event.c | 4 +-
> > contrib/unbound/util/net_help.c | 21 +-
> > contrib/unbound/util/netevent.c | 82 +-
> > contrib/unbound/util/netevent.h | 4 +
> > contrib/unbound/util/random.c | 33 +
> > contrib/unbound/validator/val_sigcrypt.c | 5 +
> > contrib/unbound/validator/validator.c | 19 +-
> > contrib/unbound/winrc/win_svc.c | 1 +
> > lib/libunbound/config.h | 4 +-
> > 123 files changed, 23206 insertions(+), 6159 deletions(-)
> >
> > diff --cc contrib/unbound/config.h.in
> > index 584810398b91,000000000000..a2b3f33c32be
> > mode 100644,000000..100644
> > --- a/contrib/unbound/config.h.in
> > +++ b/contrib/unbound/config.h.in
> > @@@ -1,1640 -1,0 +1,1650 @@@
> > +/* config.h.in. Generated from configure.ac by autoheader. */
> > +
> > +/* apply the fallthrough attribute. */
> > +#undef ATTR_FALLTHROUGH
> > +
> > +/* apply the noreturn attribute to a function that exits the program */
> > +#undef ATTR_NORETURN
> > +
> > +/* apply the weak attribute to a symbol */
> > +#undef ATTR_WEAK
> > +
> > +/* Directory to chroot to */
> > +#undef CHROOT_DIR
> > +
> > +/* Define this to enable client subnet option. */
> > +#undef CLIENT_SUBNET
> > +
> > +/* Do sha512 definitions in config.h */
> > +#undef COMPAT_SHA512
> > +
> > +/* Command line arguments used with configure */
> > +#undef CONFCMDLINE
> > +
> > +/* Pathname to the Unbound configuration file */
> > +#undef CONFIGFILE
> > +
> > +/* Define this if on macOSX10.4-darwin8 and setreuid and setregid do no=
> t work
> > + */
> > +#undef DARWIN_BROKEN_SETREUID
> > +
> > +/* Whether daemon is deprecated */
> > +#undef DEPRECATED_DAEMON
> > +
> > +/* Deprecate RSA 1024 bit length, makes that an unsupported key */
> > +#undef DEPRECATE_RSA_1024
> > +
> > +/* Define this to enable kernel based UDP source port randomization. */
> > +#undef DISABLE_EXPLICIT_PORT_RANDOMISATION
> > +
> > +/* default dnstap socket path */
> > +#undef DNSTAP_SOCKET_PATH
> > +
> > +/* Define if you want to use debug lock checking (slow). */
> > +#undef ENABLE_LOCK_CHECKS
> > +
> > +/* Define this if you enabled-allsymbols from libunbound to link binari=
> es to
> > + it for smaller install size, but the libunbound export table is poll=
> uted by
> > + internal symbols */
> > +#undef EXPORT_ALL_SYMBOLS
> > +
> > +/* Define to 1 if you have the 'accept4' function. */
> > +#undef HAVE_ACCEPT4
> > +
> > +/* Define to 1 if you have the 'arc4random' function. */
> > +#undef HAVE_ARC4RANDOM
> > +
> > +/* Define to 1 if you have the 'arc4random_uniform' function. */
> > +#undef HAVE_ARC4RANDOM_UNIFORM
> > +
> > +/* Define to 1 if you have the <arpa/inet.h> header file. */
> > +#undef HAVE_ARPA_INET_H
> > +
> > +/* Whether the C compiler accepts the "fallthrough" attribute */
> > +#undef HAVE_ATTR_FALLTHROUGH
> > +
> > +/* Whether the C compiler accepts the "format" attribute */
> > +#undef HAVE_ATTR_FORMAT
> > +
> > +/* Whether the C compiler accepts the "noreturn" attribute */
> > +#undef HAVE_ATTR_NORETURN
> > +
> > +/* Whether the C compiler accepts the "unused" attribute */
> > +#undef HAVE_ATTR_UNUSED
> > +
> > +/* Whether the C compiler accepts the "weak" attribute */
> > +#undef HAVE_ATTR_WEAK
> > +
> > +/* If we have be64toh */
> > +#undef HAVE_BE64TOH
> > +
> > +/* Define to 1 if you have the 'BIO_set_callback_ex' function. */
> > +#undef HAVE_BIO_SET_CALLBACK_EX
> > +
> > +/* Define to 1 if you have the <bsd/stdlib.h> header file. */
> > +#undef HAVE_BSD_STDLIB_H
> > +
> > +/* Define to 1 if you have the <bsd/string.h> header file. */
> > +#undef HAVE_BSD_STRING_H
> > +
> > +/* Define to 1 if you have the 'chown' function. */
> > +#undef HAVE_CHOWN
> > +
> > +/* Define to 1 if you have the 'chroot' function. */
> > +#undef HAVE_CHROOT
> > +
> > +/* Define to 1 if you have the 'CRYPTO_cleanup_all_ex_data' function. *=
> /
> > +#undef HAVE_CRYPTO_CLEANUP_ALL_EX_DATA
> > +
> > +/* Define to 1 if you have the 'CRYPTO_THREADID_set_callback' function.=
> */
> > +#undef HAVE_CRYPTO_THREADID_SET_CALLBACK
> > +
> > +/* Define to 1 if you have the 'ctime_r' function. */
> > +#undef HAVE_CTIME_R
> > +
> > +/* Define to 1 if you have the 'daemon' function. */
> > +#undef HAVE_DAEMON
> > +
> > +/* Define to 1 if you have the declaration of 'arc4random', and to 0 if=
> you
> > + don't. */
> > +#undef HAVE_DECL_ARC4RANDOM
> > +
> > +/* Define to 1 if you have the declaration of 'arc4random_uniform', and=
> to 0
> > + if you don't. */
> > +#undef HAVE_DECL_ARC4RANDOM_UNIFORM
> > +
> > +/* Define to 1 if you have the declaration of 'evsignal_assign', and to=
> 0 if
> > + you don't. */
> > +#undef HAVE_DECL_EVSIGNAL_ASSIGN
> > +
> > +/* Define to 1 if you have the declaration of 'inet_ntop', and to 0 if =
> you
> > + don't. */
> > +#undef HAVE_DECL_INET_NTOP
> > +
> > +/* Define to 1 if you have the declaration of 'inet_pton', and to 0 if =
> you
> > + don't. */
> > +#undef HAVE_DECL_INET_PTON
> > +
> > +/* Define to 1 if you have the declaration of 'nghttp2_session_server_n=
> ew',
> > + and to 0 if you don't. */
> > +#undef HAVE_DECL_NGHTTP2_SESSION_SERVER_NEW
> > +
> > +/* Define to 1 if you have the declaration of 'ngtcp2_conn_server_new',=
> and to
> > + 0 if you don't. */
> > +#undef HAVE_DECL_NGTCP2_CONN_SERVER_NEW
> > +
> > +/* Define to 1 if you have the declaration of 'ngtcp2_crypto_encrypt_cb=
> ', and
> > + to 0 if you don't. */
> > +#undef HAVE_DECL_NGTCP2_CRYPTO_ENCRYPT_CB
> > +
> > +/* Define to 1 if you have the declaration of 'NID_ED25519', and to 0 i=
> f you
> > + don't. */
> > +#undef HAVE_DECL_NID_ED25519
> > +
> > +/* Define to 1 if you have the declaration of 'NID_ED448', and to 0 if =
> you
> > + don't. */
> > +#undef HAVE_DECL_NID_ED448
> > +
> > +/* Define to 1 if you have the declaration of 'NID_secp384r1', and to 0=
> if you
> > + don't. */
> > +#undef HAVE_DECL_NID_SECP384R1
> > +
> > +/* Define to 1 if you have the declaration of 'NID_X9_62_prime256v1', a=
> nd to 0
> > + if you don't. */
> > +#undef HAVE_DECL_NID_X9_62_PRIME256V1
> > +
> > +/* Define to 1 if you have the declaration of 'reallocarray', and to 0 =
> if you
> > + don't. */
> > +#undef HAVE_DECL_REALLOCARRAY
> > +
> > +/* Define to 1 if you have the declaration of 'redisConnect', and to 0 =
> if you
> > + don't. */
> > +#undef HAVE_DECL_REDISCONNECT
> > +
> > +/* Define to 1 if you have the declaration of 'sk_SSL_COMP_pop_free', a=
> nd to 0
> > + if you don't. */
> > +#undef HAVE_DECL_SK_SSL_COMP_POP_FREE
> > +
> > +/* Define to 1 if you have the declaration of
> > + 'SSL_COMP_get_compression_methods', and to 0 if you don't. */
> > +#undef HAVE_DECL_SSL_COMP_GET_COMPRESSION_METHODS
> > +
> > +/* Define to 1 if you have the declaration of 'SSL_CTX_set_ecdh_auto', =
> and to
> > + 0 if you don't. */
> > +#undef HAVE_DECL_SSL_CTX_SET_ECDH_AUTO
> > +
> > - /* Define to 1 if you have the declaration of 'strlcat', and to 0 if yo=
> u
> > ++/* Define to 1 if you have the declaration of `SSL_CTX_set_tmp_ecdh', a=
> nd to 0
> > ++ if you don't. */
> > ++#undef HAVE_DECL_SSL_CTX_SET_TMP_ECDH
> > ++
> > ++/* Define to 1 if you have the declaration of `strlcat', and to 0 if yo=
> u
> > + don't. */
> > +#undef HAVE_DECL_STRLCAT
> > +
> > +/* Define to 1 if you have the declaration of 'strlcpy', and to 0 if yo=
> u
> > + don't. */
> > +#undef HAVE_DECL_STRLCPY
> > +
> > +/* Define to 1 if you have the declaration of 'XML_StopParser', and to =
> 0 if
> > + you don't. */
> > +#undef HAVE_DECL_XML_STOPPARSER
> > +
> > +/* Define to 1 if you have the <dlfcn.h> header file. */
> > +#undef HAVE_DLFCN_H
> > +
> > +/* Define to 1 if you have the 'DSA_SIG_set0' function. */
> > +#undef HAVE_DSA_SIG_SET0
> > +
> > +/* Define to 1 if you have the <endian.h> header file. */
> > +#undef HAVE_ENDIAN_H
> > +
> > +/* Define to 1 if you have the 'endprotoent' function. */
> > +#undef HAVE_ENDPROTOENT
> > +
> > +/* Define to 1 if you have the 'endpwent' function. */
> > +#undef HAVE_ENDPWENT
> > +
> > +/* Define to 1 if you have the 'endservent' function. */
> > +#undef HAVE_ENDSERVENT
> > +
> > +/* Define to 1 if you have the 'ENGINE_cleanup' function. */
> > +#undef HAVE_ENGINE_CLEANUP
> > +
> > +/* Define to 1 if you have the 'ERR_free_strings' function. */
> > +#undef HAVE_ERR_FREE_STRINGS
> > +
> > +/* Define to 1 if you have the 'ERR_load_crypto_strings' function. */
> > +#undef HAVE_ERR_LOAD_CRYPTO_STRINGS
> > +
> > +/* Define to 1 if you have the 'event_assign' function. */
> > +#undef HAVE_EVENT_ASSIGN
> > +
> > +/* Define to 1 if you have the 'event_base_free' function. */
> > +#undef HAVE_EVENT_BASE_FREE
> > +
> > +/* Define to 1 if you have the 'event_base_get_method' function. */
> > +#undef HAVE_EVENT_BASE_GET_METHOD
> > +
> > +/* Define to 1 if you have the 'event_base_new' function. */
> > +#undef HAVE_EVENT_BASE_NEW
> > +
> > +/* Define to 1 if you have the 'event_base_once' function. */
> > +#undef HAVE_EVENT_BASE_ONCE
> > +
> > +/* Define to 1 if you have the <event.h> header file. */
> > +#undef HAVE_EVENT_H
> > +
> > +/* Define to 1 if you have the 'EVP_aes_256_cbc' function. */
> > +#undef HAVE_EVP_AES_256_CBC
> > +
> > +/* Define to 1 if you have the 'EVP_cleanup' function. */
> > +#undef HAVE_EVP_CLEANUP
> > +
> > +/* Define to 1 if you have the 'EVP_default_properties_is_fips_enabled'
> > + function. */
> > +#undef HAVE_EVP_DEFAULT_PROPERTIES_IS_FIPS_ENABLED
> > +
> > +/* Define to 1 if you have the 'EVP_DigestVerify' function. */
> > +#undef HAVE_EVP_DIGESTVERIFY
> > +
> > +/* Define to 1 if you have the 'EVP_dss1' function. */
> > +#undef HAVE_EVP_DSS1
> > +
> > +/* Define to 1 if you have the 'EVP_EncryptInit_ex' function. */
> > +#undef HAVE_EVP_ENCRYPTINIT_EX
> > +
> > +/* Define to 1 if you have the 'EVP_MAC_CTX_set_params' function. */
> > +#undef HAVE_EVP_MAC_CTX_SET_PARAMS
> > +
> > +/* Define to 1 if you have the 'EVP_MD_CTX_new' function. */
> > +#undef HAVE_EVP_MD_CTX_NEW
> > +
> > +/* Define to 1 if you have the 'EVP_sha1' function. */
> > +#undef HAVE_EVP_SHA1
> > +
> > +/* Define to 1 if you have the 'EVP_sha256' function. */
> > +#undef HAVE_EVP_SHA256
> > +
> > +/* Define to 1 if you have the 'EVP_sha512' function. */
> > +#undef HAVE_EVP_SHA512
> > +
> > +/* Define to 1 if you have the 'ev_default_loop' function. */
> > +#undef HAVE_EV_DEFAULT_LOOP
> > +
> > +/* Define to 1 if you have the 'ev_loop' function. */
> > +#undef HAVE_EV_LOOP
> > +
> > +/* Define to 1 if you have the <expat.h> header file. */
> > +#undef HAVE_EXPAT_H
> > +
> > +/* Define to 1 if you have the 'explicit_bzero' function. */
> > +#undef HAVE_EXPLICIT_BZERO
> > +
> > +/* Define to 1 if you have the 'fcntl' function. */
> > +#undef HAVE_FCNTL
> > +
> > +/* Define to 1 if you have the 'FIPS_mode' function. */
> > +#undef HAVE_FIPS_MODE
> > +
> > +/* Define to 1 if you have the 'fork' function. */
> > +#undef HAVE_FORK
> > +
> > +/* Define to 1 if fseeko (and ftello) are declared in stdio.h. */
> > +#undef HAVE_FSEEKO
> > +
> > +/* Define to 1 if you have the 'fsync' function. */
> > +#undef HAVE_FSYNC
> > +
> > +/* Whether getaddrinfo is available */
> > +#undef HAVE_GETADDRINFO
> > +
> > +/* Define to 1 if you have the 'getauxval' function. */
> > +#undef HAVE_GETAUXVAL
> > +
> > +/* Define to 1 if you have the 'getentropy' function. */
> > +#undef HAVE_GETENTROPY
> > +
> > +/* Define to 1 if you have the 'getifaddrs' function. */
> > +#undef HAVE_GETIFADDRS
> > +
> > +/* Define to 1 if you have the <getopt.h> header file. */
> > +#undef HAVE_GETOPT_H
> > +
> > +/* Define to 1 if you have the 'getpwnam' function. */
> > +#undef HAVE_GETPWNAM
> > +
> > +/* Define to 1 if you have the 'getrlimit' function. */
> > +#undef HAVE_GETRLIMIT
> > +
> > +/* Define to 1 if you have the 'gettid' function. */
> > +#undef HAVE_GETTID
> > +
> > +/* Define to 1 if you have the 'glob' function. */
> > +#undef HAVE_GLOB
> > +
> > +/* Define to 1 if you have the <glob.h> header file. */
> > +#undef HAVE_GLOB_H
> > +
> > +/* Define to 1 if you have the 'gmtime_r' function. */
> > +#undef HAVE_GMTIME_R
> > +
> > +/* Define to 1 if you have the <grp.h> header file. */
> > +#undef HAVE_GRP_H
> > +
> > +/* Define to 1 if you have the <hiredis/hiredis.h> header file. */
> > +#undef HAVE_HIREDIS_HIREDIS_H
> > +
> > +/* Define to 1 if you have the 'HMAC_Init_ex' function. */
> > +#undef HAVE_HMAC_INIT_EX
> > +
> > +/* If we have htobe64 */
> > +#undef HAVE_HTOBE64
> > +
> > +/* Define to 1 if you have the <ifaddrs.h> header file. */
> > +#undef HAVE_IFADDRS_H
> > +
> > +/* Define to 1 if you have the 'if_nametoindex' function. */
> > +#undef HAVE_IF_NAMETOINDEX
> > +
> > +/* Define to 1 if you have the 'inet_aton' function. */
> > +#undef HAVE_INET_ATON
> > +
> > +/* Define to 1 if you have the 'inet_ntop' function. */
> > +#undef HAVE_INET_NTOP
> > +
> > +/* Define to 1 if you have the 'inet_pton' function. */
> > +#undef HAVE_INET_PTON
> > +
> > +/* Define to 1 if you have the 'initgroups' function. */
> > +#undef HAVE_INITGROUPS
> > +
> > +/* Define to 1 if you have the <inttypes.h> header file. */
> > +#undef HAVE_INTTYPES_H
> > +
> > +/* if the function 'ioctlsocket' is available */
> > +#undef HAVE_IOCTLSOCKET
> > +
> > +/* Define to 1 if you have the <iphlpapi.h> header file. */
> > +#undef HAVE_IPHLPAPI_H
> > +
> > +/* Define to 1 if you have the 'isblank' function. */
> > +#undef HAVE_ISBLANK
> > +
> > +/* Define to 1 if you have the 'kill' function. */
> > +#undef HAVE_KILL
> > +
> > +/* Use portable libbsd functions */
> > +#undef HAVE_LIBBSD
> > +
> > +/* Define to 1 if you have the <libkern/OSByteOrder.h> header file. */
> > +#undef HAVE_LIBKERN_OSBYTEORDER_H
> > +
> > +/* Define if we have LibreSSL */
> > +#undef HAVE_LIBRESSL
> > +
> > +/* If we have atomic_store */
> > +#undef HAVE_LINK_ATOMIC_STORE
> > +
> > +/* Define to 1 if you have the <linux/net_tstamp.h> header file. */
> > +#undef HAVE_LINUX_NET_TSTAMP_H
> > +
> > +/* Define to 1 if you have the 'localtime_r' function. */
> > +#undef HAVE_LOCALTIME_R
> > +
> > +/* Define to 1 if you have the <login_cap.h> header file. */
> > +#undef HAVE_LOGIN_CAP_H
> > +
> > +/* If have GNU libc compatible malloc */
> > +#undef HAVE_MALLOC
> > +
> > +/* Define to 1 if you have the 'memmove' function. */
> > +#undef HAVE_MEMMOVE
> > +
> > +/* Define to 1 if you have the <minix/config.h> header file. */
> > +#undef HAVE_MINIX_CONFIG_H
> > +
> > +/* Define to 1 if you have the <netdb.h> header file. */
> > +#undef HAVE_NETDB_H
> > +
> > +/* Define to 1 if you have the <netinet/in.h> header file. */
> > +#undef HAVE_NETINET_IN_H
> > +
> > +/* Define to 1 if you have the <netinet/tcp.h> header file. */
> > +#undef HAVE_NETINET_TCP_H
> > +
> > +/* Define to 1 if you have the <netioapi.h> header file. */
> > +#undef HAVE_NETIOAPI_H
> > +
> > +/* Use libnettle for crypto */
> > +#undef HAVE_NETTLE
> > +
> > +/* Define to 1 if you have the <nettle/dsa-compat.h> header file. */
> > +#undef HAVE_NETTLE_DSA_COMPAT_H
> > +
> > +/* Define to 1 if you have the <nettle/eddsa.h> header file. */
> > +#undef HAVE_NETTLE_EDDSA_H
> > +
> > +/* Define to 1 if you have the <net/if.h> header file. */
> > +#undef HAVE_NET_IF_H
> > +
> > +/* Define to 1 if you have the <net/pfvar.h> header file. */
> > +#undef HAVE_NET_PFVAR_H
> > +
> > +/* Define this to use nghttp2 client. */
> > +#undef HAVE_NGHTTP2
> > +
> > +/* Define to 1 if you have the <nghttp2/nghttp2.h> header file. */
> > +#undef HAVE_NGHTTP2_NGHTTP2_H
> > +
> > +/* Define this to use ngtcp2. */
> > +#undef HAVE_NGTCP2
> > +
> > +/* Define to 1 if you have the 'ngtcp2_ccerr_default' function. */
> > +#undef HAVE_NGTCP2_CCERR_DEFAULT
> > +
> > +/* Define to 1 if you have the 'ngtcp2_conn_encode_0rtt_transport_param=
> s'
> > + function. */
> > +#undef HAVE_NGTCP2_CONN_ENCODE_0RTT_TRANSPORT_PARAMS
> > +
> > +/* Define to 1 if you have the 'ngtcp2_conn_get_max_local_streams_uni'
> > + function. */
> > +#undef HAVE_NGTCP2_CONN_GET_MAX_LOCAL_STREAMS_UNI
> > +
> > +/* Define to 1 if you have the 'ngtcp2_conn_get_num_scid' function. */
> > +#undef HAVE_NGTCP2_CONN_GET_NUM_SCID
> > +
> > +/* Define to 1 if you have the 'ngtcp2_conn_in_closing_period' function=
> . */
> > +#undef HAVE_NGTCP2_CONN_IN_CLOSING_PERIOD
> > +
> > +/* Define to 1 if you have the 'ngtcp2_conn_in_draining_period' functio=
> n. */
> > +#undef HAVE_NGTCP2_CONN_IN_DRAINING_PERIOD
> > +
> > +/* Define if ngtcp2_conn_shutdown_stream has 4 arguments. */
> > +#undef HAVE_NGTCP2_CONN_SHUTDOWN_STREAM4
> > +
> > +/* Define to 1 if you have the 'ngtcp2_conn_tls_early_data_rejected' fu=
> nction.
> > + */
> > +#undef HAVE_NGTCP2_CONN_TLS_EARLY_DATA_REJECTED
> > +
> > +/* Define to 1 if you have the 'ngtcp2_crypto_encrypt_cb' function. */
> > +#undef HAVE_NGTCP2_CRYPTO_ENCRYPT_CB
> > +
> > +/* Define to 1 if you have the
> > + 'ngtcp2_crypto_quictls_configure_client_context' function. */
> > +#undef HAVE_NGTCP2_CRYPTO_QUICTLS_CONFIGURE_CLIENT_CONTEXT
> > +
> > +/* Define to 1 if you have the
> > + 'ngtcp2_crypto_quictls_configure_server_context' function. */
> > +#undef HAVE_NGTCP2_CRYPTO_QUICTLS_CONFIGURE_SERVER_CONTEXT
> > +
> > +/* Define to 1 if you have the
> > + 'ngtcp2_crypto_quictls_from_ossl_encryption_level' function. */
> > +#undef HAVE_NGTCP2_CRYPTO_QUICTLS_FROM_OSSL_ENCRYPTION_LEVEL
> > +
> > - /* Define to 1 if the system has the type 'ngtcp2_encryption_level'. */
> > ++/* Define to 1 if you have the `ngtcp2_crypto_quictls_init' function. *=
> /
> > ++#undef HAVE_NGTCP2_CRYPTO_QUICTLS_INIT
> > ++
> > ++/* Define to 1 if the system has the type `ngtcp2_encryption_level'. */
> > +#undef HAVE_NGTCP2_ENCRYPTION_LEVEL
> > +
> > +/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_openssl.h> header =
> file.
> > + */
> > +#undef HAVE_NGTCP2_NGTCP2_CRYPTO_OPENSSL_H
> > +
> > ++/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_ossl.h> header fil=
> e. */
> > ++#undef HAVE_NGTCP2_NGTCP2_CRYPTO_OSSL_H
> > ++
> > +/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_quictls.h> header =
> file.
> > + */
> > +#undef HAVE_NGTCP2_NGTCP2_CRYPTO_QUICTLS_H
> > +
> > +/* Define to 1 if you have the <ngtcp2/ngtcp2.h> header file. */
> > +#undef HAVE_NGTCP2_NGTCP2_H
> > +
> > +/* Use libnss for crypto */
> > +#undef HAVE_NSS
> > +
> > +/* Define to 1 if you have the 'OpenSSL_add_all_digests' function. */
> > +#undef HAVE_OPENSSL_ADD_ALL_DIGESTS
> > +
> > +/* Define to 1 if you have the <openssl/bn.h> header file. */
> > +#undef HAVE_OPENSSL_BN_H
> > +
> > +/* Define to 1 if you have the 'OPENSSL_config' function. */
> > +#undef HAVE_OPENSSL_CONFIG
> > +
> > +/* Define to 1 if you have the <openssl/conf.h> header file. */
> > +#undef HAVE_OPENSSL_CONF_H
> > +
> > +/* Define to 1 if you have the <openssl/core_names.h> header file. */
> > +#undef HAVE_OPENSSL_CORE_NAMES_H
> > +
> > +/* Define to 1 if you have the <openssl/dh.h> header file. */
> > +#undef HAVE_OPENSSL_DH_H
> > +
> > +/* Define to 1 if you have the <openssl/dsa.h> header file. */
> > +#undef HAVE_OPENSSL_DSA_H
> > +
> > +/* Define to 1 if you have the <openssl/engine.h> header file. */
> > +#undef HAVE_OPENSSL_ENGINE_H
> > +
> > +/* Define to 1 if you have the <openssl/err.h> header file. */
> > +#undef HAVE_OPENSSL_ERR_H
> > +
> > +/* Define to 1 if you have the 'OPENSSL_init_crypto' function. */
> > +#undef HAVE_OPENSSL_INIT_CRYPTO
> > +
> > +/* Define to 1 if you have the 'OPENSSL_init_ssl' function. */
> > +#undef HAVE_OPENSSL_INIT_SSL
> > +
> > +/* Define to 1 if you have the <openssl/param_build.h> header file. */
> > +#undef HAVE_OPENSSL_PARAM_BUILD_H
> > +
> > +/* Define to 1 if you have the <openssl/rand.h> header file. */
> > +#undef HAVE_OPENSSL_RAND_H
> > +
> > +/* Define to 1 if you have the <openssl/rsa.h> header file. */
> > +#undef HAVE_OPENSSL_RSA_H
> > +
> > +/* Define to 1 if you have the <openssl/ssl.h> header file. */
> > +#undef HAVE_OPENSSL_SSL_H
> > +
> > +/* Define to 1 if you have the 'OSSL_PARAM_BLD_new' function. */
> > +#undef HAVE_OSSL_PARAM_BLD_NEW
> > +
> > +/* Define to 1 if you have the 'poll' function. */
> > +#undef HAVE_POLL
> > +
> > +/* Define to 1 if you have the <poll.h> header file. */
> > +#undef HAVE_POLL_H
> > +
> > +/* Define if you have POSIX threads libraries and header files. */
> > +#undef HAVE_PTHREAD
> > +
> > +/* Have PTHREAD_PRIO_INHERIT. */
> > +#undef HAVE_PTHREAD_PRIO_INHERIT
> > +
> > +/* Define to 1 if the system has the type 'pthread_rwlock_t'. */
> > +#undef HAVE_PTHREAD_RWLOCK_T
> > +
> > +/* Define to 1 if the system has the type 'pthread_spinlock_t'. */
> > +#undef HAVE_PTHREAD_SPINLOCK_T
> > +
> > +/* Define to 1 if you have the <pwd.h> header file. */
> > +#undef HAVE_PWD_H
> > +
> > +/* Define if you have Python libraries and header files. */
> > +#undef HAVE_PYTHON
> > +
> > +/* Define to 1 if you have the 'random' function. */
> > +#undef HAVE_RANDOM
> > +
> > +/* Define to 1 if you have the 'RAND_cleanup' function. */
> > +#undef HAVE_RAND_CLEANUP
> > +
> > +/* If we have reallocarray(3) */
> > +#undef HAVE_REALLOCARRAY
> > +
> > +/* Define to 1 if you have the 'recvmsg' function. */
> > +#undef HAVE_RECVMSG
> > +
> > +/* Define to 1 if you have the 'sendmsg' function. */
> > +#undef HAVE_SENDMSG
> > +
> > +/* Define to 1 if you have the 'setregid' function. */
> > +#undef HAVE_SETREGID
> > +
> > +/* Define to 1 if you have the 'setresgid' function. */
> > +#undef HAVE_SETRESGID
> > +
> > +/* Define to 1 if you have the 'setresuid' function. */
> > +#undef HAVE_SETRESUID
> > +
> > +/* Define to 1 if you have the 'setreuid' function. */
> > +#undef HAVE_SETREUID
> > +
> > +/* Define to 1 if you have the 'setrlimit' function. */
> > +#undef HAVE_SETRLIMIT
> > +
> > +/* Define to 1 if you have the 'setsid' function. */
> > +#undef HAVE_SETSID
> > +
> > +/* Define to 1 if you have the 'setusercontext' function. */
> > +#undef HAVE_SETUSERCONTEXT
> > +
> > +/* Define to 1 if you have the 'SHA512_Update' function. */
> > +#undef HAVE_SHA512_UPDATE
> > +
> > +/* Define to 1 if you have the 'shmget' function. */
> > +#undef HAVE_SHMGET
> > +
> > +/* Define to 1 if you have the 'sigprocmask' function. */
> > +#undef HAVE_SIGPROCMASK
> > +
> > +/* Define to 1 if you have the 'sleep' function. */
> > +#undef HAVE_SLEEP
> > +
> > +/* Define to 1 if you have the 'snprintf' function. */
> > +#undef HAVE_SNPRINTF
> > +
> > +/* Define to 1 if you have the 'socketpair' function. */
> > +#undef HAVE_SOCKETPAIR
> > +
> > +/* Using Solaris threads */
> > +#undef HAVE_SOLARIS_THREADS
> > +
> > +/* Define to 1 if you have the 'srandom' function. */
> > +#undef HAVE_SRANDOM
> > +
> > +/* Define if you have the SSL libraries installed. */
> > +#undef HAVE_SSL
> > +
> > +/* Define to 1 if you have the 'SSL_CTX_set_alpn_protos' function. */
> > +#undef HAVE_SSL_CTX_SET_ALPN_PROTOS
> > +
> > +/* Define to 1 if you have the 'SSL_CTX_set_alpn_select_cb' function. *=
> /
> > +#undef HAVE_SSL_CTX_SET_ALPN_SELECT_CB
> > +
> > +/* Define to 1 if you have the 'SSL_CTX_set_ciphersuites' function. */
> > +#undef HAVE_SSL_CTX_SET_CIPHERSUITES
> > +
> > +/* Define to 1 if you have the 'SSL_CTX_set_security_level' function. *=
> /
> > +#undef HAVE_SSL_CTX_SET_SECURITY_LEVEL
> > +
> > +/* Define to 1 if you have the 'SSL_CTX_set_tlsext_ticket_key_evp_cb'
> > + function. */
> > +#undef HAVE_SSL_CTX_SET_TLSEXT_TICKET_KEY_EVP_CB
> > +
> > - /* Define to 1 if you have the 'SSL_CTX_set_tmp_ecdh' function. */
> > - #undef HAVE_SSL_CTX_SET_TMP_ECDH
> > -
> > - /* Define to 1 if you have the 'SSL_get0_alpn_selected' function. */
> > ++/* Define to 1 if you have the `SSL_get0_alpn_selected' function. */
> > +#undef HAVE_SSL_GET0_ALPN_SELECTED
> > +
> > +/* Define to 1 if you have the 'SSL_get0_peername' function. */
> > +#undef HAVE_SSL_GET0_PEERNAME
> > +
> > +/* Define to 1 if you have the 'SSL_get1_peer_certificate' function. */
> > +#undef HAVE_SSL_GET1_PEER_CERTIFICATE
> > +
> > +/* Define to 1 if you have the 'SSL_is_quic' function. */
> > +#undef HAVE_SSL_IS_QUIC
> > +
> > +/* Define to 1 if you have the 'SSL_set1_host' function. */
> > +#undef HAVE_SSL_SET1_HOST
> > +
> > +/* Define to 1 if you have the <stdarg.h> header file. */
> > +#undef HAVE_STDARG_H
> > +
> > +/* Define to 1 if you have the <stdatomic.h> header file. */
> > +#undef HAVE_STDATOMIC_H
> > +
> > +/* Define to 1 if you have the <stdbool.h> header file. */
> > +#undef HAVE_STDBOOL_H
> > +
> > +/* Define to 1 if you have the <stdint.h> header file. */
> > +#undef HAVE_STDINT_H
> > +
> > +/* Define to 1 if you have the <stdio.h> header file. */
> > +#undef HAVE_STDIO_H
> > +
> > +/* Define to 1 if you have the <stdlib.h> header file. */
> > +#undef HAVE_STDLIB_H
> > +
> > +/* Define to 1 if you have the 'strftime' function. */
> > +#undef HAVE_STRFTIME
> > +
> > +/* Define to 1 if you have the <strings.h> header file. */
> > +#undef HAVE_STRINGS_H
> > +
> > +/* Define to 1 if you have the <string.h> header file. */
> > +#undef HAVE_STRING_H
> > +
> > +/* Define to 1 if you have the 'strlcat' function. */
> > +#undef HAVE_STRLCAT
> > +
> > +/* Define to 1 if you have the 'strlcpy' function. */
> > +#undef HAVE_STRLCPY
> > +
> > +/* Define to 1 if you have the 'strptime' function. */
> > +#undef HAVE_STRPTIME
> > +
> > +/* Define to 1 if you have the 'strsep' function. */
> > +#undef HAVE_STRSEP
> > +
> > +/* Define to 1 if 'ipi_spec_dst' is a member of 'struct in_pktinfo'. */
> > +#undef HAVE_STRUCT_IN_PKTINFO_IPI_SPEC_DST
> > +
> > +/* Define to 1 if 'tokenlen' is a member of 'struct ngtcp2_pkt_hd'. */
> > +#undef HAVE_STRUCT_NGTCP2_PKT_HD_TOKENLEN
> > +
> > +/* Define to 1 if 'max_tx_udp_payload_size' is a member of 'struct
> > + ngtcp2_settings'. */
> > +#undef HAVE_STRUCT_NGTCP2_SETTINGS_MAX_TX_UDP_PAYLOAD_SIZE
> > +
> > +/* Define to 1 if 'tokenlen' is a member of 'struct ngtcp2_settings'. *=
> /
> > +#undef HAVE_STRUCT_NGTCP2_SETTINGS_TOKENLEN
> > +
> > +/* Define to 1 if 'original_dcid_present' is a member of 'struct
> > + ngtcp2_transport_params'. */
> > +#undef HAVE_STRUCT_NGTCP2_TRANSPORT_PARAMS_ORIGINAL_DCID_PRESENT
> > +
> > +/* Define to 1 if the system has the type 'struct ngtcp2_version_cid'. =
> */
> > +#undef HAVE_STRUCT_NGTCP2_VERSION_CID
> > +
> > +/* Define to 1 if 'sun_len' is a member of 'struct sockaddr_un'. */
> > +#undef HAVE_STRUCT_SOCKADDR_UN_SUN_LEN
> > +
> > +/* Define if you have Swig libraries and header files. */
> > +#undef HAVE_SWIG
> > +
> > +/* Define to 1 if you have the <syslog.h> header file. */
> > +#undef HAVE_SYSLOG_H
> > +
> > +/* Define to 1 if systemd should be used */
> > +#undef HAVE_SYSTEMD
> > +
> > +/* Define to 1 if you have the <sys/endian.h> header file. */
> > +#undef HAVE_SYS_ENDIAN_H
> > +
> > +/* Define to 1 if you have the <sys/ipc.h> header file. */
> > +#undef HAVE_SYS_IPC_H
> > +
> > +/* Define to 1 if you have the <sys/param.h> header file. */
> > +#undef HAVE_SYS_PARAM_H
> > +
> > +/* Define to 1 if you have the <sys/resource.h> header file. */
> > +#undef HAVE_SYS_RESOURCE_H
> > +
> > +/* Define to 1 if you have the <sys/select.h> header file. */
> > +#undef HAVE_SYS_SELECT_H
> > +
> > +/* Define to 1 if you have the <sys/sha2.h> header file. */
> > +#undef HAVE_SYS_SHA2_H
> > +
> > +/* Define to 1 if you have the <sys/shm.h> header file. */
> > +#undef HAVE_SYS_SHM_H
> > +
> > +/* Define to 1 if you have the <sys/socket.h> header file. */
> > +#undef HAVE_SYS_SOCKET_H
> > +
> > +/* Define to 1 if you have the <sys/stat.h> header file. */
> > +#undef HAVE_SYS_STAT_H
> > +
> > +/* Define to 1 if you have the <sys/sysctl.h> header file. */
> > +#undef HAVE_SYS_SYSCTL_H
> > +
> > +/* Define to 1 if you have the <sys/types.h> header file. */
> > +#undef HAVE_SYS_TYPES_H
> > +
> > +/* Define to 1 if you have the <sys/uio.h> header file. */
> > +#undef HAVE_SYS_UIO_H
> > +
> > +/* Define to 1 if you have the <sys/un.h> header file. */
> > +#undef HAVE_SYS_UN_H
> > +
> > +/* Define to 1 if you have the <sys/wait.h> header file. */
> > +#undef HAVE_SYS_WAIT_H
> > +
> > +/* Define to 1 if you have the <TargetConditionals.h> header file. */
> > +#undef HAVE_TARGETCONDITIONALS_H
> > +
> > +/* Define to 1 if you have the <time.h> header file. */
> > +#undef HAVE_TIME_H
> > +
> > +/* Define to 1 if you have the 'tzset' function. */
> > +#undef HAVE_TZSET
> > +
> > +/* Define to 1 if you have the <unistd.h> header file. */
> > +#undef HAVE_UNISTD_H
> > +
> > +/* Define to 1 if you have the 'usleep' function. */
> > +#undef HAVE_USLEEP
> > +
> > +/* Define to 1 if you have the 'vfork' function. */
> > +#undef HAVE_VFORK
> > +
> > +/* Define to 1 if you have the <vfork.h> header file. */
> > +#undef HAVE_VFORK_H
> > +
> > +/* Define to 1 if you have the <wchar.h> header file. */
> > +#undef HAVE_WCHAR_H
> > +
> > +/* Define to 1 if you have the <windows.h> header file. */
> > +#undef HAVE_WINDOWS_H
> > +
> > +/* Using Windows threads */
> > +#undef HAVE_WINDOWS_THREADS
> > +
> > +/* Define to 1 if you have the <winsock2.h> header file. */
> > +#undef HAVE_WINSOCK2_H
> > +
> > +/* Define to 1 if 'fork' works. */
> > +#undef HAVE_WORKING_FORK
> > +
> > +/* Define to 1 if 'vfork' works. */
> > +#undef HAVE_WORKING_VFORK
> > +
> > +/* Define to 1 if you have the 'writev' function. */
> > +#undef HAVE_WRITEV
> > +
> > +/* Define to 1 if you have the <ws2tcpip.h> header file. */
> > +#undef HAVE_WS2TCPIP_H
> > +
> > *** 33861 LINES SKIPPED ***