Date: Tue, 7 Oct 2025 18:50:05 -0300 From: Jose Luis Duran <jlduran+freebsd@gmail.com> To: Cy Schubert <cy@freebsd.org> Cc: src-committers@freebsd.org, dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org Subject: Re: git: b2efd602aea8 - main - unbound: Vendor import 1.24.0 Message-ID: <CAPwQLcep1-Pt4P1QHiJpnZrMXXicG5Bc_tpxa6MtjVZT%2BvpJmg@mail.gmail.com> In-Reply-To: <202510071524.597FOTr3063628@gitrepo.freebsd.org> References: <202510071524.597FOTr3063628@gitrepo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello Cy,
According to the changelog:
"The default value increase for so-sndbuf is to mitigate a cross-layer
issue where the UDP socket send buffers are exhausted waiting for
ARP/NDP resolution. Thanks to Reflyable for the report.
To help the server start more easily, the setsockopt for sndbuf buffer
size prints a warning instead of a failure to start the server if it
can not set the buffer size."
This means so-sndbuf is now 4m. Which triggers a warning, detailed in
upstream commit 713b5db5 ("- Fix to print warning for when so-sndbuf
setsockopt is not granted.").
I wonder if we should revert back to using "so-sndbuf: 0" as the
default for FreeBSD? Or is there a better solution/workaround?
Regards,
On Tue, Oct 7, 2025 at 12:24=E2=80=AFPM Cy Schubert <cy@freebsd.org> wrote:
>
> The branch main has been updated by cy:
>
> URL: https://cgit.FreeBSD.org/src/commit/?id=3Db2efd602aea8b3cbc3fb215b96=
11946d04fceb10
>
> commit b2efd602aea8b3cbc3fb215b9611946d04fceb10
> Merge: e770e32aa3a0 0064eb9cf1c8
> Author: Cy Schubert <cy@FreeBSD.org>
> AuthorDate: 2025-10-07 13:58:59 +0000
> Commit: Cy Schubert <cy@FreeBSD.org>
> CommitDate: 2025-10-07 15:16:21 +0000
>
> unbound: Vendor import 1.24.0
>
> Release notes at
> https://nlnetlabs.nl/news/2025/Sep/18/unbound-1.24.0-released=
/
>
> MFC after: 1 week
>
> Merge commit '0064eb9cf1c8d526e87d3149249445d4bc8d0248'
>
> contrib/unbound/Makefile.in | 1380 ++--
> contrib/unbound/cachedb/redis.c | 144 +-
> contrib/unbound/compat/fake-rfc2553.c | 6 +-
> contrib/unbound/config.h.in | 22 +-
> contrib/unbound/configure | 275 +-
> contrib/unbound/configure.ac | 31 +-
> contrib/unbound/contrib/aaaa-filter-iterator.patch | 98 +-
> contrib/unbound/contrib/unbound.service.in | 6 +
> contrib/unbound/daemon/cachedump.c | 339 +-
> contrib/unbound/daemon/remote.c | 769 +-
> contrib/unbound/daemon/stats.c | 2 +
> contrib/unbound/daemon/unbound.c | 9 +-
> contrib/unbound/daemon/worker.c | 19 +-
> contrib/unbound/dns64/dns64.c | 2 +-
> contrib/unbound/dnstap/dnstap.c | 4 +-
> contrib/unbound/dnstap/dnstap.m4 | 39 +-
> contrib/unbound/dnstap/dnstap.proto | 2 +-
> contrib/unbound/dnstap/dtstream.c | 2 +-
> contrib/unbound/doc/Changelog | 311 +-
> contrib/unbound/doc/README | 2 +-
> contrib/unbound/doc/README.man | 16 +
> contrib/unbound/doc/example.conf.in | 10 +-
> contrib/unbound/doc/libunbound.3.in | 675 +-
> contrib/unbound/doc/libunbound.rst | 491 ++
> contrib/unbound/doc/unbound-anchor.8.in | 383 +-
> contrib/unbound/doc/unbound-anchor.rst | 281 +
> contrib/unbound/doc/unbound-checkconf.8.in | 121 +-
> contrib/unbound/doc/unbound-checkconf.rst | 98 +
> contrib/unbound/doc/unbound-control.8.in | 2037 +++--
> contrib/unbound/doc/unbound-control.rst | 1374 ++++
> contrib/unbound/doc/unbound-host.1.in | 242 +-
> contrib/unbound/doc/unbound-host.rst | 176 +
> contrib/unbound/doc/unbound.8.in | 169 +-
> contrib/unbound/doc/unbound.conf.5.in | 8143 +++++++++++++-=
------
> contrib/unbound/doc/unbound.conf.rst | 4997 ++++++++++++
> contrib/unbound/doc/unbound.rst | 119 +
> contrib/unbound/edns-subnet/addrtree.h | 2 +-
> contrib/unbound/edns-subnet/subnetmod.c | 47 +-
> contrib/unbound/edns-subnet/subnetmod.h | 4 +
> contrib/unbound/iterator/iter_delegpt.h | 10 +
> contrib/unbound/iterator/iter_fwd.c | 32 +-
> contrib/unbound/iterator/iterator.c | 32 +-
> contrib/unbound/libunbound/libworker.c | 15 +-
> contrib/unbound/libunbound/unbound.h | 2 +
> contrib/unbound/respip/respip.h | 2 +-
> contrib/unbound/services/authzone.c | 90 +-
> contrib/unbound/services/authzone.h | 17 +-
> contrib/unbound/services/cache/rrset.c | 2 +
> contrib/unbound/services/listen_dnsport.c | 117 +-
> contrib/unbound/services/listen_dnsport.h | 9 +-
> contrib/unbound/services/mesh.c | 1 +
> contrib/unbound/services/mesh.h | 2 +
> contrib/unbound/services/modstack.c | 4 +-
> contrib/unbound/services/modstack.h | 2 +-
> contrib/unbound/services/outside_network.c | 6 +-
> contrib/unbound/services/rpz.c | 20 +-
> contrib/unbound/sldns/keyraw.c | 4 +-
> contrib/unbound/sldns/str2wire.c | 2 +-
> contrib/unbound/sldns/wire2str.h | 2 +-
> contrib/unbound/smallapp/unbound-anchor.c | 12 +-
> contrib/unbound/smallapp/unbound-checkconf.c | 51 +-
> contrib/unbound/smallapp/unbound-control.c | 3 +
> contrib/unbound/testcode/doqclient.c | 71 +-
> contrib/unbound/testcode/fake_event.c | 46 +-
> contrib/unbound/testcode/testbound.c | 150 +-
> contrib/unbound/testcode/unitdname.c | 277 +
> contrib/unbound/testcode/unitinfra.c | 1 +
> contrib/unbound/testcode/unitmain.c | 24 +
> contrib/unbound/testcode/unitverify.c | 133 +
> contrib/unbound/testcode/unitzonemd.c | 1 +
> .../auth_nsec3_ent_with_out_of_zone_data.rpl | 228 +
> .../auth_nsec3_wild_with_out_of_zone_data.rpl | 234 +
> contrib/unbound/testdata/iter_fwdfirstequaltcp.rpl | 163 +
> contrib/unbound/testdata/iter_minimise_chain.rpl | 623 ++
> .../redis_reconnect_interval.tdir/after.zone | 2 +
> .../redis_reconnect_interval.tdir/before.zone | 2 +
> .../redis_reconnect_interval.tdir/redis.conf | 583 ++
> .../redis_reconnect_interval.conf | 33 +
> .../redis_reconnect_interval.dsc | 16 +
> .../redis_reconnect_interval.post | 18 +
> .../redis_reconnect_interval.pre | 46 +
> .../redis_reconnect_interval.test | 121 +
> .../unbound_control.key | 39 +
> .../unbound_control.pem | 22 +
> .../unbound_server.key | 39 +
> .../unbound_server.pem | 22 +
> contrib/unbound/testdata/rpz_cname_wild.rpl | 190 +
> .../testdata/stat_values.tdir/stat_values.conf | 2 +-
> .../testdata/stat_values.tdir/stat_values.test | 3 +-
> .../testdata/stat_values.tdir/stat_values.testns | 5 +
> .../subnet_cache_lookup.conf | 36 +
> .../subnet_cache_lookup.dsc | 16 +
> .../subnet_cache_lookup.post | 15 +
> .../subnet_cache_lookup.pre | 42 +
> .../subnet_cache_lookup.test | 121 +
> .../subnet_cache_lookup.testns | 181 +
> .../unbound/testdata/subnet_cached_servfail.crpl | 2 +-
> contrib/unbound/testdata/subnet_noecs_mult.crpl | 334 +
> contrib/unbound/testdata/subnet_noecs_refused.crpl | 159 +
> contrib/unbound/testdata/subnet_noecs_support.crpl | 127 +
> .../unbound/testdata/subnet_scopezero_global.crpl | 280 +
> contrib/unbound/testdata/val_failure_dnskey.rpl | 2 +-
> contrib/unbound/util/config_file.c | 62 +-
> contrib/unbound/util/config_file.h | 11 +
> contrib/unbound/util/configparser.c | 1300 ++--
> contrib/unbound/util/configparser.y | 12 +-
> contrib/unbound/util/data/dname.c | 44 +-
> contrib/unbound/util/data/dname.h | 15 +-
> contrib/unbound/util/data/msgencode.c | 6 +-
> contrib/unbound/util/data/msgencode.h | 2 +-
> contrib/unbound/util/data/msgparse.h | 6 +-
> contrib/unbound/util/data/msgreply.c | 27 +-
> contrib/unbound/util/data/msgreply.h | 12 +-
> contrib/unbound/util/iana_ports.inc | 2 +
> contrib/unbound/util/mini_event.c | 4 +-
> contrib/unbound/util/net_help.c | 21 +-
> contrib/unbound/util/netevent.c | 82 +-
> contrib/unbound/util/netevent.h | 4 +
> contrib/unbound/util/random.c | 33 +
> contrib/unbound/validator/val_sigcrypt.c | 5 +
> contrib/unbound/validator/validator.c | 19 +-
> contrib/unbound/winrc/win_svc.c | 1 +
> lib/libunbound/config.h | 4 +-
> 123 files changed, 23206 insertions(+), 6159 deletions(-)
>
> diff --cc contrib/unbound/config.h.in
> index 584810398b91,000000000000..a2b3f33c32be
> mode 100644,000000..100644
> --- a/contrib/unbound/config.h.in
> +++ b/contrib/unbound/config.h.in
> @@@ -1,1640 -1,0 +1,1650 @@@
> +/* config.h.in. Generated from configure.ac by autoheader. */
> +
> +/* apply the fallthrough attribute. */
> +#undef ATTR_FALLTHROUGH
> +
> +/* apply the noreturn attribute to a function that exits the program */
> +#undef ATTR_NORETURN
> +
> +/* apply the weak attribute to a symbol */
> +#undef ATTR_WEAK
> +
> +/* Directory to chroot to */
> +#undef CHROOT_DIR
> +
> +/* Define this to enable client subnet option. */
> +#undef CLIENT_SUBNET
> +
> +/* Do sha512 definitions in config.h */
> +#undef COMPAT_SHA512
> +
> +/* Command line arguments used with configure */
> +#undef CONFCMDLINE
> +
> +/* Pathname to the Unbound configuration file */
> +#undef CONFIGFILE
> +
> +/* Define this if on macOSX10.4-darwin8 and setreuid and setregid do no=
t work
> + */
> +#undef DARWIN_BROKEN_SETREUID
> +
> +/* Whether daemon is deprecated */
> +#undef DEPRECATED_DAEMON
> +
> +/* Deprecate RSA 1024 bit length, makes that an unsupported key */
> +#undef DEPRECATE_RSA_1024
> +
> +/* Define this to enable kernel based UDP source port randomization. */
> +#undef DISABLE_EXPLICIT_PORT_RANDOMISATION
> +
> +/* default dnstap socket path */
> +#undef DNSTAP_SOCKET_PATH
> +
> +/* Define if you want to use debug lock checking (slow). */
> +#undef ENABLE_LOCK_CHECKS
> +
> +/* Define this if you enabled-allsymbols from libunbound to link binari=
es to
> + it for smaller install size, but the libunbound export table is poll=
uted by
> + internal symbols */
> +#undef EXPORT_ALL_SYMBOLS
> +
> +/* Define to 1 if you have the 'accept4' function. */
> +#undef HAVE_ACCEPT4
> +
> +/* Define to 1 if you have the 'arc4random' function. */
> +#undef HAVE_ARC4RANDOM
> +
> +/* Define to 1 if you have the 'arc4random_uniform' function. */
> +#undef HAVE_ARC4RANDOM_UNIFORM
> +
> +/* Define to 1 if you have the <arpa/inet.h> header file. */
> +#undef HAVE_ARPA_INET_H
> +
> +/* Whether the C compiler accepts the "fallthrough" attribute */
> +#undef HAVE_ATTR_FALLTHROUGH
> +
> +/* Whether the C compiler accepts the "format" attribute */
> +#undef HAVE_ATTR_FORMAT
> +
> +/* Whether the C compiler accepts the "noreturn" attribute */
> +#undef HAVE_ATTR_NORETURN
> +
> +/* Whether the C compiler accepts the "unused" attribute */
> +#undef HAVE_ATTR_UNUSED
> +
> +/* Whether the C compiler accepts the "weak" attribute */
> +#undef HAVE_ATTR_WEAK
> +
> +/* If we have be64toh */
> +#undef HAVE_BE64TOH
> +
> +/* Define to 1 if you have the 'BIO_set_callback_ex' function. */
> +#undef HAVE_BIO_SET_CALLBACK_EX
> +
> +/* Define to 1 if you have the <bsd/stdlib.h> header file. */
> +#undef HAVE_BSD_STDLIB_H
> +
> +/* Define to 1 if you have the <bsd/string.h> header file. */
> +#undef HAVE_BSD_STRING_H
> +
> +/* Define to 1 if you have the 'chown' function. */
> +#undef HAVE_CHOWN
> +
> +/* Define to 1 if you have the 'chroot' function. */
> +#undef HAVE_CHROOT
> +
> +/* Define to 1 if you have the 'CRYPTO_cleanup_all_ex_data' function. *=
/
> +#undef HAVE_CRYPTO_CLEANUP_ALL_EX_DATA
> +
> +/* Define to 1 if you have the 'CRYPTO_THREADID_set_callback' function.=
*/
> +#undef HAVE_CRYPTO_THREADID_SET_CALLBACK
> +
> +/* Define to 1 if you have the 'ctime_r' function. */
> +#undef HAVE_CTIME_R
> +
> +/* Define to 1 if you have the 'daemon' function. */
> +#undef HAVE_DAEMON
> +
> +/* Define to 1 if you have the declaration of 'arc4random', and to 0 if=
you
> + don't. */
> +#undef HAVE_DECL_ARC4RANDOM
> +
> +/* Define to 1 if you have the declaration of 'arc4random_uniform', and=
to 0
> + if you don't. */
> +#undef HAVE_DECL_ARC4RANDOM_UNIFORM
> +
> +/* Define to 1 if you have the declaration of 'evsignal_assign', and to=
0 if
> + you don't. */
> +#undef HAVE_DECL_EVSIGNAL_ASSIGN
> +
> +/* Define to 1 if you have the declaration of 'inet_ntop', and to 0 if =
you
> + don't. */
> +#undef HAVE_DECL_INET_NTOP
> +
> +/* Define to 1 if you have the declaration of 'inet_pton', and to 0 if =
you
> + don't. */
> +#undef HAVE_DECL_INET_PTON
> +
> +/* Define to 1 if you have the declaration of 'nghttp2_session_server_n=
ew',
> + and to 0 if you don't. */
> +#undef HAVE_DECL_NGHTTP2_SESSION_SERVER_NEW
> +
> +/* Define to 1 if you have the declaration of 'ngtcp2_conn_server_new',=
and to
> + 0 if you don't. */
> +#undef HAVE_DECL_NGTCP2_CONN_SERVER_NEW
> +
> +/* Define to 1 if you have the declaration of 'ngtcp2_crypto_encrypt_cb=
', and
> + to 0 if you don't. */
> +#undef HAVE_DECL_NGTCP2_CRYPTO_ENCRYPT_CB
> +
> +/* Define to 1 if you have the declaration of 'NID_ED25519', and to 0 i=
f you
> + don't. */
> +#undef HAVE_DECL_NID_ED25519
> +
> +/* Define to 1 if you have the declaration of 'NID_ED448', and to 0 if =
you
> + don't. */
> +#undef HAVE_DECL_NID_ED448
> +
> +/* Define to 1 if you have the declaration of 'NID_secp384r1', and to 0=
if you
> + don't. */
> +#undef HAVE_DECL_NID_SECP384R1
> +
> +/* Define to 1 if you have the declaration of 'NID_X9_62_prime256v1', a=
nd to 0
> + if you don't. */
> +#undef HAVE_DECL_NID_X9_62_PRIME256V1
> +
> +/* Define to 1 if you have the declaration of 'reallocarray', and to 0 =
if you
> + don't. */
> +#undef HAVE_DECL_REALLOCARRAY
> +
> +/* Define to 1 if you have the declaration of 'redisConnect', and to 0 =
if you
> + don't. */
> +#undef HAVE_DECL_REDISCONNECT
> +
> +/* Define to 1 if you have the declaration of 'sk_SSL_COMP_pop_free', a=
nd to 0
> + if you don't. */
> +#undef HAVE_DECL_SK_SSL_COMP_POP_FREE
> +
> +/* Define to 1 if you have the declaration of
> + 'SSL_COMP_get_compression_methods', and to 0 if you don't. */
> +#undef HAVE_DECL_SSL_COMP_GET_COMPRESSION_METHODS
> +
> +/* Define to 1 if you have the declaration of 'SSL_CTX_set_ecdh_auto', =
and to
> + 0 if you don't. */
> +#undef HAVE_DECL_SSL_CTX_SET_ECDH_AUTO
> +
> - /* Define to 1 if you have the declaration of 'strlcat', and to 0 if yo=
u
> ++/* Define to 1 if you have the declaration of `SSL_CTX_set_tmp_ecdh', a=
nd to 0
> ++ if you don't. */
> ++#undef HAVE_DECL_SSL_CTX_SET_TMP_ECDH
> ++
> ++/* Define to 1 if you have the declaration of `strlcat', and to 0 if yo=
u
> + don't. */
> +#undef HAVE_DECL_STRLCAT
> +
> +/* Define to 1 if you have the declaration of 'strlcpy', and to 0 if yo=
u
> + don't. */
> +#undef HAVE_DECL_STRLCPY
> +
> +/* Define to 1 if you have the declaration of 'XML_StopParser', and to =
0 if
> + you don't. */
> +#undef HAVE_DECL_XML_STOPPARSER
> +
> +/* Define to 1 if you have the <dlfcn.h> header file. */
> +#undef HAVE_DLFCN_H
> +
> +/* Define to 1 if you have the 'DSA_SIG_set0' function. */
> +#undef HAVE_DSA_SIG_SET0
> +
> +/* Define to 1 if you have the <endian.h> header file. */
> +#undef HAVE_ENDIAN_H
> +
> +/* Define to 1 if you have the 'endprotoent' function. */
> +#undef HAVE_ENDPROTOENT
> +
> +/* Define to 1 if you have the 'endpwent' function. */
> +#undef HAVE_ENDPWENT
> +
> +/* Define to 1 if you have the 'endservent' function. */
> +#undef HAVE_ENDSERVENT
> +
> +/* Define to 1 if you have the 'ENGINE_cleanup' function. */
> +#undef HAVE_ENGINE_CLEANUP
> +
> +/* Define to 1 if you have the 'ERR_free_strings' function. */
> +#undef HAVE_ERR_FREE_STRINGS
> +
> +/* Define to 1 if you have the 'ERR_load_crypto_strings' function. */
> +#undef HAVE_ERR_LOAD_CRYPTO_STRINGS
> +
> +/* Define to 1 if you have the 'event_assign' function. */
> +#undef HAVE_EVENT_ASSIGN
> +
> +/* Define to 1 if you have the 'event_base_free' function. */
> +#undef HAVE_EVENT_BASE_FREE
> +
> +/* Define to 1 if you have the 'event_base_get_method' function. */
> +#undef HAVE_EVENT_BASE_GET_METHOD
> +
> +/* Define to 1 if you have the 'event_base_new' function. */
> +#undef HAVE_EVENT_BASE_NEW
> +
> +/* Define to 1 if you have the 'event_base_once' function. */
> +#undef HAVE_EVENT_BASE_ONCE
> +
> +/* Define to 1 if you have the <event.h> header file. */
> +#undef HAVE_EVENT_H
> +
> +/* Define to 1 if you have the 'EVP_aes_256_cbc' function. */
> +#undef HAVE_EVP_AES_256_CBC
> +
> +/* Define to 1 if you have the 'EVP_cleanup' function. */
> +#undef HAVE_EVP_CLEANUP
> +
> +/* Define to 1 if you have the 'EVP_default_properties_is_fips_enabled'
> + function. */
> +#undef HAVE_EVP_DEFAULT_PROPERTIES_IS_FIPS_ENABLED
> +
> +/* Define to 1 if you have the 'EVP_DigestVerify' function. */
> +#undef HAVE_EVP_DIGESTVERIFY
> +
> +/* Define to 1 if you have the 'EVP_dss1' function. */
> +#undef HAVE_EVP_DSS1
> +
> +/* Define to 1 if you have the 'EVP_EncryptInit_ex' function. */
> +#undef HAVE_EVP_ENCRYPTINIT_EX
> +
> +/* Define to 1 if you have the 'EVP_MAC_CTX_set_params' function. */
> +#undef HAVE_EVP_MAC_CTX_SET_PARAMS
> +
> +/* Define to 1 if you have the 'EVP_MD_CTX_new' function. */
> +#undef HAVE_EVP_MD_CTX_NEW
> +
> +/* Define to 1 if you have the 'EVP_sha1' function. */
> +#undef HAVE_EVP_SHA1
> +
> +/* Define to 1 if you have the 'EVP_sha256' function. */
> +#undef HAVE_EVP_SHA256
> +
> +/* Define to 1 if you have the 'EVP_sha512' function. */
> +#undef HAVE_EVP_SHA512
> +
> +/* Define to 1 if you have the 'ev_default_loop' function. */
> +#undef HAVE_EV_DEFAULT_LOOP
> +
> +/* Define to 1 if you have the 'ev_loop' function. */
> +#undef HAVE_EV_LOOP
> +
> +/* Define to 1 if you have the <expat.h> header file. */
> +#undef HAVE_EXPAT_H
> +
> +/* Define to 1 if you have the 'explicit_bzero' function. */
> +#undef HAVE_EXPLICIT_BZERO
> +
> +/* Define to 1 if you have the 'fcntl' function. */
> +#undef HAVE_FCNTL
> +
> +/* Define to 1 if you have the 'FIPS_mode' function. */
> +#undef HAVE_FIPS_MODE
> +
> +/* Define to 1 if you have the 'fork' function. */
> +#undef HAVE_FORK
> +
> +/* Define to 1 if fseeko (and ftello) are declared in stdio.h. */
> +#undef HAVE_FSEEKO
> +
> +/* Define to 1 if you have the 'fsync' function. */
> +#undef HAVE_FSYNC
> +
> +/* Whether getaddrinfo is available */
> +#undef HAVE_GETADDRINFO
> +
> +/* Define to 1 if you have the 'getauxval' function. */
> +#undef HAVE_GETAUXVAL
> +
> +/* Define to 1 if you have the 'getentropy' function. */
> +#undef HAVE_GETENTROPY
> +
> +/* Define to 1 if you have the 'getifaddrs' function. */
> +#undef HAVE_GETIFADDRS
> +
> +/* Define to 1 if you have the <getopt.h> header file. */
> +#undef HAVE_GETOPT_H
> +
> +/* Define to 1 if you have the 'getpwnam' function. */
> +#undef HAVE_GETPWNAM
> +
> +/* Define to 1 if you have the 'getrlimit' function. */
> +#undef HAVE_GETRLIMIT
> +
> +/* Define to 1 if you have the 'gettid' function. */
> +#undef HAVE_GETTID
> +
> +/* Define to 1 if you have the 'glob' function. */
> +#undef HAVE_GLOB
> +
> +/* Define to 1 if you have the <glob.h> header file. */
> +#undef HAVE_GLOB_H
> +
> +/* Define to 1 if you have the 'gmtime_r' function. */
> +#undef HAVE_GMTIME_R
> +
> +/* Define to 1 if you have the <grp.h> header file. */
> +#undef HAVE_GRP_H
> +
> +/* Define to 1 if you have the <hiredis/hiredis.h> header file. */
> +#undef HAVE_HIREDIS_HIREDIS_H
> +
> +/* Define to 1 if you have the 'HMAC_Init_ex' function. */
> +#undef HAVE_HMAC_INIT_EX
> +
> +/* If we have htobe64 */
> +#undef HAVE_HTOBE64
> +
> +/* Define to 1 if you have the <ifaddrs.h> header file. */
> +#undef HAVE_IFADDRS_H
> +
> +/* Define to 1 if you have the 'if_nametoindex' function. */
> +#undef HAVE_IF_NAMETOINDEX
> +
> +/* Define to 1 if you have the 'inet_aton' function. */
> +#undef HAVE_INET_ATON
> +
> +/* Define to 1 if you have the 'inet_ntop' function. */
> +#undef HAVE_INET_NTOP
> +
> +/* Define to 1 if you have the 'inet_pton' function. */
> +#undef HAVE_INET_PTON
> +
> +/* Define to 1 if you have the 'initgroups' function. */
> +#undef HAVE_INITGROUPS
> +
> +/* Define to 1 if you have the <inttypes.h> header file. */
> +#undef HAVE_INTTYPES_H
> +
> +/* if the function 'ioctlsocket' is available */
> +#undef HAVE_IOCTLSOCKET
> +
> +/* Define to 1 if you have the <iphlpapi.h> header file. */
> +#undef HAVE_IPHLPAPI_H
> +
> +/* Define to 1 if you have the 'isblank' function. */
> +#undef HAVE_ISBLANK
> +
> +/* Define to 1 if you have the 'kill' function. */
> +#undef HAVE_KILL
> +
> +/* Use portable libbsd functions */
> +#undef HAVE_LIBBSD
> +
> +/* Define to 1 if you have the <libkern/OSByteOrder.h> header file. */
> +#undef HAVE_LIBKERN_OSBYTEORDER_H
> +
> +/* Define if we have LibreSSL */
> +#undef HAVE_LIBRESSL
> +
> +/* If we have atomic_store */
> +#undef HAVE_LINK_ATOMIC_STORE
> +
> +/* Define to 1 if you have the <linux/net_tstamp.h> header file. */
> +#undef HAVE_LINUX_NET_TSTAMP_H
> +
> +/* Define to 1 if you have the 'localtime_r' function. */
> +#undef HAVE_LOCALTIME_R
> +
> +/* Define to 1 if you have the <login_cap.h> header file. */
> +#undef HAVE_LOGIN_CAP_H
> +
> +/* If have GNU libc compatible malloc */
> +#undef HAVE_MALLOC
> +
> +/* Define to 1 if you have the 'memmove' function. */
> +#undef HAVE_MEMMOVE
> +
> +/* Define to 1 if you have the <minix/config.h> header file. */
> +#undef HAVE_MINIX_CONFIG_H
> +
> +/* Define to 1 if you have the <netdb.h> header file. */
> +#undef HAVE_NETDB_H
> +
> +/* Define to 1 if you have the <netinet/in.h> header file. */
> +#undef HAVE_NETINET_IN_H
> +
> +/* Define to 1 if you have the <netinet/tcp.h> header file. */
> +#undef HAVE_NETINET_TCP_H
> +
> +/* Define to 1 if you have the <netioapi.h> header file. */
> +#undef HAVE_NETIOAPI_H
> +
> +/* Use libnettle for crypto */
> +#undef HAVE_NETTLE
> +
> +/* Define to 1 if you have the <nettle/dsa-compat.h> header file. */
> +#undef HAVE_NETTLE_DSA_COMPAT_H
> +
> +/* Define to 1 if you have the <nettle/eddsa.h> header file. */
> +#undef HAVE_NETTLE_EDDSA_H
> +
> +/* Define to 1 if you have the <net/if.h> header file. */
> +#undef HAVE_NET_IF_H
> +
> +/* Define to 1 if you have the <net/pfvar.h> header file. */
> +#undef HAVE_NET_PFVAR_H
> +
> +/* Define this to use nghttp2 client. */
> +#undef HAVE_NGHTTP2
> +
> +/* Define to 1 if you have the <nghttp2/nghttp2.h> header file. */
> +#undef HAVE_NGHTTP2_NGHTTP2_H
> +
> +/* Define this to use ngtcp2. */
> +#undef HAVE_NGTCP2
> +
> +/* Define to 1 if you have the 'ngtcp2_ccerr_default' function. */
> +#undef HAVE_NGTCP2_CCERR_DEFAULT
> +
> +/* Define to 1 if you have the 'ngtcp2_conn_encode_0rtt_transport_param=
s'
> + function. */
> +#undef HAVE_NGTCP2_CONN_ENCODE_0RTT_TRANSPORT_PARAMS
> +
> +/* Define to 1 if you have the 'ngtcp2_conn_get_max_local_streams_uni'
> + function. */
> +#undef HAVE_NGTCP2_CONN_GET_MAX_LOCAL_STREAMS_UNI
> +
> +/* Define to 1 if you have the 'ngtcp2_conn_get_num_scid' function. */
> +#undef HAVE_NGTCP2_CONN_GET_NUM_SCID
> +
> +/* Define to 1 if you have the 'ngtcp2_conn_in_closing_period' function=
. */
> +#undef HAVE_NGTCP2_CONN_IN_CLOSING_PERIOD
> +
> +/* Define to 1 if you have the 'ngtcp2_conn_in_draining_period' functio=
n. */
> +#undef HAVE_NGTCP2_CONN_IN_DRAINING_PERIOD
> +
> +/* Define if ngtcp2_conn_shutdown_stream has 4 arguments. */
> +#undef HAVE_NGTCP2_CONN_SHUTDOWN_STREAM4
> +
> +/* Define to 1 if you have the 'ngtcp2_conn_tls_early_data_rejected' fu=
nction.
> + */
> +#undef HAVE_NGTCP2_CONN_TLS_EARLY_DATA_REJECTED
> +
> +/* Define to 1 if you have the 'ngtcp2_crypto_encrypt_cb' function. */
> +#undef HAVE_NGTCP2_CRYPTO_ENCRYPT_CB
> +
> +/* Define to 1 if you have the
> + 'ngtcp2_crypto_quictls_configure_client_context' function. */
> +#undef HAVE_NGTCP2_CRYPTO_QUICTLS_CONFIGURE_CLIENT_CONTEXT
> +
> +/* Define to 1 if you have the
> + 'ngtcp2_crypto_quictls_configure_server_context' function. */
> +#undef HAVE_NGTCP2_CRYPTO_QUICTLS_CONFIGURE_SERVER_CONTEXT
> +
> +/* Define to 1 if you have the
> + 'ngtcp2_crypto_quictls_from_ossl_encryption_level' function. */
> +#undef HAVE_NGTCP2_CRYPTO_QUICTLS_FROM_OSSL_ENCRYPTION_LEVEL
> +
> - /* Define to 1 if the system has the type 'ngtcp2_encryption_level'. */
> ++/* Define to 1 if you have the `ngtcp2_crypto_quictls_init' function. *=
/
> ++#undef HAVE_NGTCP2_CRYPTO_QUICTLS_INIT
> ++
> ++/* Define to 1 if the system has the type `ngtcp2_encryption_level'. */
> +#undef HAVE_NGTCP2_ENCRYPTION_LEVEL
> +
> +/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_openssl.h> header =
file.
> + */
> +#undef HAVE_NGTCP2_NGTCP2_CRYPTO_OPENSSL_H
> +
> ++/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_ossl.h> header fil=
e. */
> ++#undef HAVE_NGTCP2_NGTCP2_CRYPTO_OSSL_H
> ++
> +/* Define to 1 if you have the <ngtcp2/ngtcp2_crypto_quictls.h> header =
file.
> + */
> +#undef HAVE_NGTCP2_NGTCP2_CRYPTO_QUICTLS_H
> +
> +/* Define to 1 if you have the <ngtcp2/ngtcp2.h> header file. */
> +#undef HAVE_NGTCP2_NGTCP2_H
> +
> +/* Use libnss for crypto */
> +#undef HAVE_NSS
> +
> +/* Define to 1 if you have the 'OpenSSL_add_all_digests' function. */
> +#undef HAVE_OPENSSL_ADD_ALL_DIGESTS
> +
> +/* Define to 1 if you have the <openssl/bn.h> header file. */
> +#undef HAVE_OPENSSL_BN_H
> +
> +/* Define to 1 if you have the 'OPENSSL_config' function. */
> +#undef HAVE_OPENSSL_CONFIG
> +
> +/* Define to 1 if you have the <openssl/conf.h> header file. */
> +#undef HAVE_OPENSSL_CONF_H
> +
> +/* Define to 1 if you have the <openssl/core_names.h> header file. */
> +#undef HAVE_OPENSSL_CORE_NAMES_H
> +
> +/* Define to 1 if you have the <openssl/dh.h> header file. */
> +#undef HAVE_OPENSSL_DH_H
> +
> +/* Define to 1 if you have the <openssl/dsa.h> header file. */
> +#undef HAVE_OPENSSL_DSA_H
> +
> +/* Define to 1 if you have the <openssl/engine.h> header file. */
> +#undef HAVE_OPENSSL_ENGINE_H
> +
> +/* Define to 1 if you have the <openssl/err.h> header file. */
> +#undef HAVE_OPENSSL_ERR_H
> +
> +/* Define to 1 if you have the 'OPENSSL_init_crypto' function. */
> +#undef HAVE_OPENSSL_INIT_CRYPTO
> +
> +/* Define to 1 if you have the 'OPENSSL_init_ssl' function. */
> +#undef HAVE_OPENSSL_INIT_SSL
> +
> +/* Define to 1 if you have the <openssl/param_build.h> header file. */
> +#undef HAVE_OPENSSL_PARAM_BUILD_H
> +
> +/* Define to 1 if you have the <openssl/rand.h> header file. */
> +#undef HAVE_OPENSSL_RAND_H
> +
> +/* Define to 1 if you have the <openssl/rsa.h> header file. */
> +#undef HAVE_OPENSSL_RSA_H
> +
> +/* Define to 1 if you have the <openssl/ssl.h> header file. */
> +#undef HAVE_OPENSSL_SSL_H
> +
> +/* Define to 1 if you have the 'OSSL_PARAM_BLD_new' function. */
> +#undef HAVE_OSSL_PARAM_BLD_NEW
> +
> +/* Define to 1 if you have the 'poll' function. */
> +#undef HAVE_POLL
> +
> +/* Define to 1 if you have the <poll.h> header file. */
> +#undef HAVE_POLL_H
> +
> +/* Define if you have POSIX threads libraries and header files. */
> +#undef HAVE_PTHREAD
> +
> +/* Have PTHREAD_PRIO_INHERIT. */
> +#undef HAVE_PTHREAD_PRIO_INHERIT
> +
> +/* Define to 1 if the system has the type 'pthread_rwlock_t'. */
> +#undef HAVE_PTHREAD_RWLOCK_T
> +
> +/* Define to 1 if the system has the type 'pthread_spinlock_t'. */
> +#undef HAVE_PTHREAD_SPINLOCK_T
> +
> +/* Define to 1 if you have the <pwd.h> header file. */
> +#undef HAVE_PWD_H
> +
> +/* Define if you have Python libraries and header files. */
> +#undef HAVE_PYTHON
> +
> +/* Define to 1 if you have the 'random' function. */
> +#undef HAVE_RANDOM
> +
> +/* Define to 1 if you have the 'RAND_cleanup' function. */
> +#undef HAVE_RAND_CLEANUP
> +
> +/* If we have reallocarray(3) */
> +#undef HAVE_REALLOCARRAY
> +
> +/* Define to 1 if you have the 'recvmsg' function. */
> +#undef HAVE_RECVMSG
> +
> +/* Define to 1 if you have the 'sendmsg' function. */
> +#undef HAVE_SENDMSG
> +
> +/* Define to 1 if you have the 'setregid' function. */
> +#undef HAVE_SETREGID
> +
> +/* Define to 1 if you have the 'setresgid' function. */
> +#undef HAVE_SETRESGID
> +
> +/* Define to 1 if you have the 'setresuid' function. */
> +#undef HAVE_SETRESUID
> +
> +/* Define to 1 if you have the 'setreuid' function. */
> +#undef HAVE_SETREUID
> +
> +/* Define to 1 if you have the 'setrlimit' function. */
> +#undef HAVE_SETRLIMIT
> +
> +/* Define to 1 if you have the 'setsid' function. */
> +#undef HAVE_SETSID
> +
> +/* Define to 1 if you have the 'setusercontext' function. */
> +#undef HAVE_SETUSERCONTEXT
> +
> +/* Define to 1 if you have the 'SHA512_Update' function. */
> +#undef HAVE_SHA512_UPDATE
> +
> +/* Define to 1 if you have the 'shmget' function. */
> +#undef HAVE_SHMGET
> +
> +/* Define to 1 if you have the 'sigprocmask' function. */
> +#undef HAVE_SIGPROCMASK
> +
> +/* Define to 1 if you have the 'sleep' function. */
> +#undef HAVE_SLEEP
> +
> +/* Define to 1 if you have the 'snprintf' function. */
> +#undef HAVE_SNPRINTF
> +
> +/* Define to 1 if you have the 'socketpair' function. */
> +#undef HAVE_SOCKETPAIR
> +
> +/* Using Solaris threads */
> +#undef HAVE_SOLARIS_THREADS
> +
> +/* Define to 1 if you have the 'srandom' function. */
> +#undef HAVE_SRANDOM
> +
> +/* Define if you have the SSL libraries installed. */
> +#undef HAVE_SSL
> +
> +/* Define to 1 if you have the 'SSL_CTX_set_alpn_protos' function. */
> +#undef HAVE_SSL_CTX_SET_ALPN_PROTOS
> +
> +/* Define to 1 if you have the 'SSL_CTX_set_alpn_select_cb' function. *=
/
> +#undef HAVE_SSL_CTX_SET_ALPN_SELECT_CB
> +
> +/* Define to 1 if you have the 'SSL_CTX_set_ciphersuites' function. */
> +#undef HAVE_SSL_CTX_SET_CIPHERSUITES
> +
> +/* Define to 1 if you have the 'SSL_CTX_set_security_level' function. *=
/
> +#undef HAVE_SSL_CTX_SET_SECURITY_LEVEL
> +
> +/* Define to 1 if you have the 'SSL_CTX_set_tlsext_ticket_key_evp_cb'
> + function. */
> +#undef HAVE_SSL_CTX_SET_TLSEXT_TICKET_KEY_EVP_CB
> +
> - /* Define to 1 if you have the 'SSL_CTX_set_tmp_ecdh' function. */
> - #undef HAVE_SSL_CTX_SET_TMP_ECDH
> -
> - /* Define to 1 if you have the 'SSL_get0_alpn_selected' function. */
> ++/* Define to 1 if you have the `SSL_get0_alpn_selected' function. */
> +#undef HAVE_SSL_GET0_ALPN_SELECTED
> +
> +/* Define to 1 if you have the 'SSL_get0_peername' function. */
> +#undef HAVE_SSL_GET0_PEERNAME
> +
> +/* Define to 1 if you have the 'SSL_get1_peer_certificate' function. */
> +#undef HAVE_SSL_GET1_PEER_CERTIFICATE
> +
> +/* Define to 1 if you have the 'SSL_is_quic' function. */
> +#undef HAVE_SSL_IS_QUIC
> +
> +/* Define to 1 if you have the 'SSL_set1_host' function. */
> +#undef HAVE_SSL_SET1_HOST
> +
> +/* Define to 1 if you have the <stdarg.h> header file. */
> +#undef HAVE_STDARG_H
> +
> +/* Define to 1 if you have the <stdatomic.h> header file. */
> +#undef HAVE_STDATOMIC_H
> +
> +/* Define to 1 if you have the <stdbool.h> header file. */
> +#undef HAVE_STDBOOL_H
> +
> +/* Define to 1 if you have the <stdint.h> header file. */
> +#undef HAVE_STDINT_H
> +
> +/* Define to 1 if you have the <stdio.h> header file. */
> +#undef HAVE_STDIO_H
> +
> +/* Define to 1 if you have the <stdlib.h> header file. */
> +#undef HAVE_STDLIB_H
> +
> +/* Define to 1 if you have the 'strftime' function. */
> +#undef HAVE_STRFTIME
> +
> +/* Define to 1 if you have the <strings.h> header file. */
> +#undef HAVE_STRINGS_H
> +
> +/* Define to 1 if you have the <string.h> header file. */
> +#undef HAVE_STRING_H
> +
> +/* Define to 1 if you have the 'strlcat' function. */
> +#undef HAVE_STRLCAT
> +
> +/* Define to 1 if you have the 'strlcpy' function. */
> +#undef HAVE_STRLCPY
> +
> +/* Define to 1 if you have the 'strptime' function. */
> +#undef HAVE_STRPTIME
> +
> +/* Define to 1 if you have the 'strsep' function. */
> +#undef HAVE_STRSEP
> +
> +/* Define to 1 if 'ipi_spec_dst' is a member of 'struct in_pktinfo'. */
> +#undef HAVE_STRUCT_IN_PKTINFO_IPI_SPEC_DST
> +
> +/* Define to 1 if 'tokenlen' is a member of 'struct ngtcp2_pkt_hd'. */
> +#undef HAVE_STRUCT_NGTCP2_PKT_HD_TOKENLEN
> +
> +/* Define to 1 if 'max_tx_udp_payload_size' is a member of 'struct
> + ngtcp2_settings'. */
> +#undef HAVE_STRUCT_NGTCP2_SETTINGS_MAX_TX_UDP_PAYLOAD_SIZE
> +
> +/* Define to 1 if 'tokenlen' is a member of 'struct ngtcp2_settings'. *=
/
> +#undef HAVE_STRUCT_NGTCP2_SETTINGS_TOKENLEN
> +
> +/* Define to 1 if 'original_dcid_present' is a member of 'struct
> + ngtcp2_transport_params'. */
> +#undef HAVE_STRUCT_NGTCP2_TRANSPORT_PARAMS_ORIGINAL_DCID_PRESENT
> +
> +/* Define to 1 if the system has the type 'struct ngtcp2_version_cid'. =
*/
> +#undef HAVE_STRUCT_NGTCP2_VERSION_CID
> +
> +/* Define to 1 if 'sun_len' is a member of 'struct sockaddr_un'. */
> +#undef HAVE_STRUCT_SOCKADDR_UN_SUN_LEN
> +
> +/* Define if you have Swig libraries and header files. */
> +#undef HAVE_SWIG
> +
> +/* Define to 1 if you have the <syslog.h> header file. */
> +#undef HAVE_SYSLOG_H
> +
> +/* Define to 1 if systemd should be used */
> +#undef HAVE_SYSTEMD
> +
> +/* Define to 1 if you have the <sys/endian.h> header file. */
> +#undef HAVE_SYS_ENDIAN_H
> +
> +/* Define to 1 if you have the <sys/ipc.h> header file. */
> +#undef HAVE_SYS_IPC_H
> +
> +/* Define to 1 if you have the <sys/param.h> header file. */
> +#undef HAVE_SYS_PARAM_H
> +
> +/* Define to 1 if you have the <sys/resource.h> header file. */
> +#undef HAVE_SYS_RESOURCE_H
> +
> +/* Define to 1 if you have the <sys/select.h> header file. */
> +#undef HAVE_SYS_SELECT_H
> +
> +/* Define to 1 if you have the <sys/sha2.h> header file. */
> +#undef HAVE_SYS_SHA2_H
> +
> +/* Define to 1 if you have the <sys/shm.h> header file. */
> +#undef HAVE_SYS_SHM_H
> +
> +/* Define to 1 if you have the <sys/socket.h> header file. */
> +#undef HAVE_SYS_SOCKET_H
> +
> +/* Define to 1 if you have the <sys/stat.h> header file. */
> +#undef HAVE_SYS_STAT_H
> +
> +/* Define to 1 if you have the <sys/sysctl.h> header file. */
> +#undef HAVE_SYS_SYSCTL_H
> +
> +/* Define to 1 if you have the <sys/types.h> header file. */
> +#undef HAVE_SYS_TYPES_H
> +
> +/* Define to 1 if you have the <sys/uio.h> header file. */
> +#undef HAVE_SYS_UIO_H
> +
> +/* Define to 1 if you have the <sys/un.h> header file. */
> +#undef HAVE_SYS_UN_H
> +
> +/* Define to 1 if you have the <sys/wait.h> header file. */
> +#undef HAVE_SYS_WAIT_H
> +
> +/* Define to 1 if you have the <TargetConditionals.h> header file. */
> +#undef HAVE_TARGETCONDITIONALS_H
> +
> +/* Define to 1 if you have the <time.h> header file. */
> +#undef HAVE_TIME_H
> +
> +/* Define to 1 if you have the 'tzset' function. */
> +#undef HAVE_TZSET
> +
> +/* Define to 1 if you have the <unistd.h> header file. */
> +#undef HAVE_UNISTD_H
> +
> +/* Define to 1 if you have the 'usleep' function. */
> +#undef HAVE_USLEEP
> +
> +/* Define to 1 if you have the 'vfork' function. */
> +#undef HAVE_VFORK
> +
> +/* Define to 1 if you have the <vfork.h> header file. */
> +#undef HAVE_VFORK_H
> +
> +/* Define to 1 if you have the <wchar.h> header file. */
> +#undef HAVE_WCHAR_H
> +
> +/* Define to 1 if you have the <windows.h> header file. */
> +#undef HAVE_WINDOWS_H
> +
> +/* Using Windows threads */
> +#undef HAVE_WINDOWS_THREADS
> +
> +/* Define to 1 if you have the <winsock2.h> header file. */
> +#undef HAVE_WINSOCK2_H
> +
> +/* Define to 1 if 'fork' works. */
> +#undef HAVE_WORKING_FORK
> +
> +/* Define to 1 if 'vfork' works. */
> +#undef HAVE_WORKING_VFORK
> +
> +/* Define to 1 if you have the 'writev' function. */
> +#undef HAVE_WRITEV
> +
> +/* Define to 1 if you have the <ws2tcpip.h> header file. */
> +#undef HAVE_WS2TCPIP_H
> +
> *** 33861 LINES SKIPPED ***
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPwQLcep1-Pt4P1QHiJpnZrMXXicG5Bc_tpxa6MtjVZT%2BvpJmg>