* New upstream release (http://www.openssh.org/txt/release-5.9).

- Introduce sandboxing of the pre-auth privsep child using an optional sshd_config(5) "UsePrivilegeSeparation=sandbox" mode that enables mandatory restrictions on the syscalls the privsep child can perform. - Add new SHA256-based HMAC transport integrity modes from http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt. - The pre-authentication sshd(8) privilege separation slave process now logs via a socket shared with the master process, avoiding the need to maintain /dev/log inside the chroot (closes: #75043, #429243, #599240). - ssh(1) now warns when a server refuses X11 forwarding (closes: #504757). - sshd_config(5)'s AuthorizedKeysFile now accepts multiple paths, separated by whitespace (closes: #76312). The authorized_keys2 fallback is deprecated but documented (closes: #560156). - ssh(1) and sshd(8): set IPv6 traffic class from IPQoS, as well as IPv4 ToS/DSCP (closes: #498297). - ssh-add(1) now accepts keys piped from standard input. E.g. "ssh-add - < /path/to/key" (closes: #229124). - Clean up lost-passphrase text in ssh-keygen(1) (closes: #444691). - Say "required" rather than "recommended" in unprotected-private-key warning (LP: #663455).
author: Colin Watson <cjwatson@debian.org> 2011-09-06 14:56:29 +0100
committer: Colin Watson <cjwatson@debian.org> 2011-09-06 14:56:29 +0100
commit: 978e62d6f14c60747bddef2cc72d66a9c8b83b54 (patch)
tree: 89400a44e42d84937deba7864e4964d6c7734da5
parent: 87c685b8c6a49814fd782288097b3093f975aa72 (diff)
parent: 3a7e89697ca363de0f64e0d5704c57219294e41c (diff)
146 files changed, 11642 insertions, 25486 deletions
diff --git a/ChangeLog b/ChangeLog
index 993e0cb0b..f75aa5637 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,483 @@
+20110905
+ - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
+   [contrib/suse/openssh.spec] Update version numbers.
+ - (djm) Release OpenSSH-5.9
+20110904
+ - (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal
+   regress errors for the sandbox to warnings. ok tim dtucker
+ - (dtucker) [ssh-keygen.c ssh-pkcs11.c] Bug #1929: add null implementations
+   ofsh-pkcs11.cpkcs_init and pkcs_terminate for building without dlopen
+   support.
+20110829
+ - (djm) [openbsd-compat/port-linux.c] Suppress logging when attempting
+   to switch SELinux context away from unconfined_t, based on patch from
+   Jan Chadima; bz#1919 ok dtucker@
+20110827
+ - (dtucker) [auth-skey.c] Add log.h to fix build --with-skey.
+20110818
+ - (tim) [configure.ac] Typo in error message spotted by Andy Tsouladze
+20110817
+ - (tim) [mac.c myproposal.h] Wrap SHA256 and SHA512 in ifdefs for
+   OpenSSL 0.9.7. ok djm
+ - (djm) [ openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
+   binary_pipe is no longer required on Cygwin; patch from Corinna Vinschen
+ - (djm) [configure.ac] error out if the host lacks the necessary bits for
+   an explicitly requested sandbox type
+ - (djm) [contrib/ssh-copy-id] Missing backlslash; spotted by
+   bisson AT archlinux.org
+ - (djm) OpenBSD CVS Sync
+   - dtucker@cvs.openbsd.org 2011/06/03 05:35:10
+     [regress/cfgmatch.sh]
+     use OBJ to find test configs, patch from Tim Rice
+   - markus@cvs.openbsd.org 2011/06/30 22:44:43
+     [regress/connect-privsep.sh]
+     test with sandbox enabled; ok djm@
+   - djm@cvs.openbsd.org 2011/08/02 01:23:41
+     [regress/cipher-speed.sh regress/try-ciphers.sh]
+     add SHA256/SHA512 based HMAC modes
+ - (djm) [regress/cipher-speed.sh regress/try-ciphers.sh] disable HMAC-SHA2
+   MAC tests for platforms that hack EVP_SHA2 support
+20110812
+ - (dtucker) [openbsd-compat/port-linux.c] Bug 1924: Improve selinux context
+   change error by reporting old and new context names  Patch from
+   jchadima at redhat.
+ - (djm) [contrib/redhat/openssh.spec contrib/redhat/sshd.init]
+   [contrib/suse/openssh.spec contrib/suse/rc.sshd] Updated RHEL and SLES
+   init scrips from imorgan AT nas.nasa.gov; bz#1920
+ - (djm) [contrib/ssh-copy-id] Fix failure for cases where the path to the
+   identify file contained whitespace. bz#1828 patch from gwenael.lambrouin
+   AT gmail.com; ok dtucker@
+20110807
+ - (dtucker) OpenBSD CVS Sync
+   - jmc@cvs.openbsd.org 2008/06/26 06:59:39
+     [moduli.5]
+     tweak previous;
+   - sobrado@cvs.openbsd.org 2009/10/28 08:56:54
+     [moduli.5]
+     "Diffie-Hellman" is the usual spelling for the cryptographic protocol
+     first published by Whitfield Diffie and Martin Hellman in 1976.
+     ok jmc@
+   - jmc@cvs.openbsd.org 2010/10/14 20:41:28
+     [moduli.5]
+     probabalistic -> probabilistic; from naddy
+   - dtucker@cvs.openbsd.org 2011/08/07 12:55:30
+     [sftp.1]
+     typo, fix from Laurent Gautrot
+20110805
+ - OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/06/23 23:35:42
+     [monitor.c]
+     ignore EINTR errors from poll()
+   - tedu@cvs.openbsd.org 2011/07/06 18:09:21
+     [authfd.c]
+     bzero the agent address.  the kernel was for a while very cranky about
+     these things.  evne though that's fixed, always good to initialize
+     memory.  ok deraadt djm
+   - djm@cvs.openbsd.org 2011/07/29 14:42:45
+     [sandbox-systrace.c]
+     fail open(2) with EPERM rather than SIGKILLing the whole process. libc
+     will call open() to do strerror() when NLS is enabled;
+     feedback and ok markus@
+   - markus@cvs.openbsd.org 2011/08/01 19:18:15
+     [gss-serv.c]
+     prevent post-auth resource exhaustion (int overflow leading to 4GB malloc);
+     report Adam Zabrock; ok djm@, deraadt@
+   - djm@cvs.openbsd.org 2011/08/02 01:22:11
+     [mac.c myproposal.h ssh.1 ssh_config.5 sshd.8 sshd_config.5]
+     Add new SHA256 and SHA512 based HMAC modes from
+     http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt
+     Patch from mdb AT juniper.net; feedback and ok markus@
+   - djm@cvs.openbsd.org 2011/08/02 23:13:01
+     [version.h]
+     crank now, release later
+   - djm@cvs.openbsd.org 2011/08/02 23:15:03
+     [ssh.c]
+     typo in comment
+20110624
+ - (djm) [configure.ac Makefile.in sandbox-darwin.c] Add a sandbox for
+   Darwin/OS X using sandbox_init() + setrlimit(); feedback and testing
+   markus@
+20110623
+ - OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/06/22 21:47:28
+     [servconf.c]
+     reuse the multistate option arrays to pretty-print options for "sshd -T"
+   - djm@cvs.openbsd.org 2011/06/22 21:57:01
+     [servconf.c servconf.h sshd.c sshd_config.5]
+     [configure.ac Makefile.in]
+     introduce sandboxing of the pre-auth privsep child using systrace(4).
+     
+     This introduces a new "UsePrivilegeSeparation=sandbox" option for
+     sshd_config that applies mandatory restrictions on the syscalls the
+     privsep child can perform. This prevents a compromised privsep child
+     from being used to attack other hosts (by opening sockets and proxying)
+     or probing local kernel attack surface.
+     
+     The sandbox is implemented using systrace(4) in unsupervised "fast-path"
+     mode, where a list of permitted syscalls is supplied. Any syscall not
+     on the list results in SIGKILL being sent to the privsep child. Note
+     that this requires a kernel with the new SYSTR_POLICY_KILL option.
+     
+     UsePrivilegeSeparation=sandbox will become the default in the future
+     so please start testing it now.
+     
+     feedback dtucker@; ok markus@
+   - djm@cvs.openbsd.org 2011/06/22 22:08:42
+     [channels.c channels.h clientloop.c clientloop.h mux.c ssh.c]
+     hook up a channel confirm callback to warn the user then requested X11
+     forwarding was refused by the server; ok markus@
+   - djm@cvs.openbsd.org 2011/06/23 09:34:13
+     [sshd.c ssh-sandbox.h sandbox.h sandbox-rlimit.c sandbox-systrace.c]
+     [sandbox-null.c]
+     rename sandbox.h => ssh-sandbox.h to make things easier for portable
+ - (djm) [sandbox-null.c] Dummy sandbox for platforms that don't support
+   setrlimit(2)
+20110620
+ - OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/06/04 00:10:26
+     [ssh_config.5]
+     explain IdentifyFile's semantics a little better, prompted by bz#1898
+     ok dtucker jmc
+   - markus@cvs.openbsd.org 2011/06/14 22:49:18
+     [authfile.c]
+     make sure key_parse_public/private_rsa1() no longer consumes its input
+     buffer.  fixes ssh-add for passphrase-protected ssh1-keys;
+     noted by naddy@; ok djm@
+   - djm@cvs.openbsd.org 2011/06/17 21:44:31
+     [log.c log.h monitor.c monitor.h monitor_wrap.c monitor_wrap.h sshd.c]
+     make the pre-auth privsep slave log via a socketpair shared with the
+     monitor rather than /var/empty/dev/log; ok dtucker@ deraadt@ markus@
+   - djm@cvs.openbsd.org 2011/06/17 21:46:16
+     [sftp-server.c]
+     the protocol version should be unsigned; bz#1913 reported by mb AT
+     smartftp.com
+   - djm@cvs.openbsd.org 2011/06/17 21:47:35
+     [servconf.c]
+     factor out multi-choice option parsing into a parse_multistate label
+     and some support structures; ok dtucker@
+   - djm@cvs.openbsd.org 2011/06/17 21:57:25
+     [clientloop.c]
+     setproctitle for a mux master that has been gracefully stopped;
+     bz#1911 from Bert.Wesarg AT googlemail.com
+20110603
+ - (dtucker) [README version.h contrib/caldera/openssh.spec
+   contrib/redhat/openssh.spec contrib/suse/openssh.spec] Pull the version
+   bumps from the 5.8p2 branch into HEAD.  ok djm.
+ - (tim) [configure.ac defines.h] Run test program to detect system mail
+   directory. Add --with-maildir option to override. Fixed OpenServer 6
+   getting it wrong. Fixed many systems having MAIL=/var/mail//username
+   ok dtucker
+ - (dtucker) [monitor.c] Remove the !HAVE_SOCKETPAIR case.  We use socketpair
+   unconditionally in other places and the survey data we have does not show
+   any systems that use it.  "nuke it" djm@
+ - (djm) [configure.ac] enable setproctitle emulation for OS X
+ - (djm) OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/06/03 00:54:38
+     [ssh.c]
+     bz#1883 - setproctitle() to identify mux master; patch from Bert.Wesarg
+     AT googlemail.com; ok dtucker@
+     NB. includes additional portability code to enable setproctitle emulation
+     on platforms that don't support it.
+   - dtucker@cvs.openbsd.org 2011/06/03 01:37:40
+     [ssh-agent.c]
+     Check current parent process ID against saved one to determine if the parent
+     has exited, rather than attempting to send a zero signal, since the latter
+     won't work if the parent has changed privs.  bz#1905, patch from Daniel Kahn
+     Gillmor, ok djm@
+    - dtucker@cvs.openbsd.org 2011/05/31 02:01:58
+     [regress/dynamic-forward.sh]
+     back out revs 1.6 and 1.5 since it's not reliable
+   - dtucker@cvs.openbsd.org 2011/05/31 02:03:34
+     [regress/dynamic-forward.sh]
+     work around startup and teardown races; caught by deraadt
+   - dtucker@cvs.openbsd.org 2011/06/03 00:29:52
+     [regress/dynamic-forward.sh]
+     Retry establishing the port forwarding after a small delay, should make
+     the tests less flaky when the previous test is slow to shut down and free
+     up the port.
+ - (tim) [regress/cfgmatch.sh] Build/test out of tree fix.
+20110529
+ - (djm) OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/05/23 03:30:07
+     [auth-rsa.c auth.c auth.h auth2-pubkey.c monitor.c monitor_wrap.c]
+     [pathnames.h servconf.c servconf.h sshd.8 sshd_config sshd_config.5]
+     allow AuthorizedKeysFile to specify multiple files, separated by spaces.
+     Bring back authorized_keys2 as a default search path (to avoid breaking
+     existing users of this file), but override this in sshd_config so it will
+     be no longer used on fresh installs. Maybe in 2015 we can remove it
+     entierly :)
+     
+     feedback and ok markus@ dtucker@
+   - djm@cvs.openbsd.org 2011/05/23 03:33:38
+     [auth.c]
+     make secure_filename() spam debug logs less
+   - djm@cvs.openbsd.org 2011/05/23 03:52:55
+     [sshconnect.c]
+     remove extra newline
+   - jmc@cvs.openbsd.org 2011/05/23 07:10:21
+     [sshd.8 sshd_config.5]
+     tweak previous; ok djm
+   - djm@cvs.openbsd.org 2011/05/23 07:24:57
+     [authfile.c]
+     read in key comments for v.2 keys (though note that these are not
+     passed over the agent protocol); bz#439, based on patch from binder
+     AT arago.de; ok markus@
+   - djm@cvs.openbsd.org 2011/05/24 07:15:47
+     [readconf.c readconf.h ssh.c ssh_config.5 sshconnect.c sshconnect2.c]
+     Remove undocumented legacy options UserKnownHostsFile2 and
+     GlobalKnownHostsFile2 by making UserKnownHostsFile/GlobalKnownHostsFile
+     accept multiple paths per line and making their defaults include
+     known_hosts2; ok markus
+   - djm@cvs.openbsd.org 2011/05/23 03:31:31
+     [regress/cfgmatch.sh]
+     include testing of multiple/overridden AuthorizedKeysFiles
+     refactor to simply daemon start/stop and get rid of racy constructs
+20110520
+ - (djm) [session.c] call setexeccon() before executing passwd for pw
+   changes; bz#1891 reported by jchadima AT redhat.com; ok dtucker@
+ - (djm) [aclocal.m4 configure.ac] since gcc-4.x ignores all -Wno-options
+   options, we should corresponding -W-option when trying to determine
+   whether it is accepted.  Also includes a warning fix on the program
+   fragment uses (bad main() return type).
+   bz#1900 and bz#1901 reported by g.esp AT free.fr; ok dtucker@
+ - (djm) [servconf.c] remove leftover droppings of AuthorizedKeysFile2
+ - OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/05/15 08:09:01
+     [authfd.c monitor.c serverloop.c]
+     use FD_CLOEXEC consistently; patch from zion AT x96.org
+   - djm@cvs.openbsd.org 2011/05/17 07:13:31
+     [key.c]
+     fatal() if asked to generate a legacy ECDSA cert (these don't exist)
+     and fix the regress test that was trying to generate them :)
+   - djm@cvs.openbsd.org 2011/05/20 00:55:02
+     [servconf.c]
+     the options TrustedUserCAKeys, RevokedKeysFile, AuthorizedKeysFile
+     and AuthorizedPrincipalsFile were not being correctly applied in
+     Match blocks, despite being overridable there; ok dtucker@
+   - dtucker@cvs.openbsd.org 2011/05/20 02:00:19
+     [servconf.c]
+     Add comment documenting what should be after the preauth check.  ok djm
+   - djm@cvs.openbsd.org 2011/05/20 03:25:45
+     [monitor.c monitor_wrap.c servconf.c servconf.h]
+     use a macro to define which string options to copy between configs
+     for Match. This avoids problems caused by forgetting to keep three
+     code locations in perfect sync and ordering
+     
+     "this is at once beautiful and horrible" + ok dtucker@
+   - djm@cvs.openbsd.org 2011/05/17 07:13:31
+     [regress/cert-userkey.sh]
+     fatal() if asked to generate a legacy ECDSA cert (these don't exist)
+     and fix the regress test that was trying to generate them :)
+   - djm@cvs.openbsd.org 2011/05/20 02:43:36
+     [cert-hostkey.sh]
+     another attempt to generate a v00 ECDSA key that broke the test
+     ID sync only - portable already had this somehow
+   - dtucker@cvs.openbsd.org 2011/05/20 05:19:50
+     [dynamic-forward.sh]
+     Prevent races in dynamic forwarding test; ok djm
+   - dtucker@cvs.openbsd.org 2011/05/20 06:32:30
+     [dynamic-forward.sh]
+     fix dumb error in dynamic-forward test
+20110515
+ - (djm) OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/05/05 05:12:08
+     [mux.c]
+     gracefully fall back when ControlPath is too large for a
+     sockaddr_un. ok markus@ as part of a larger diff
+   - dtucker@cvs.openbsd.org 2011/05/06 01:03:35
+     [sshd_config]
+     clarify language about overriding defaults.  bz#1892, from Petr Cerny
+   - djm@cvs.openbsd.org 2011/05/06 01:09:53
+     [sftp.1]
+     mention that IPv6 addresses must be enclosed in square brackets;
+     bz#1845
+   - djm@cvs.openbsd.org 2011/05/06 02:05:41
+     [sshconnect2.c]
+     fix memory leak; bz#1849 ok dtucker@
+   - djm@cvs.openbsd.org 2011/05/06 21:14:05
+     [packet.c packet.h]
+     set traffic class for IPv6 traffic as we do for IPv4 TOS;
+     patch from lionel AT mamane.lu via Colin Watson in bz#1855;
+     ok markus@
+   - djm@cvs.openbsd.org 2011/05/06 21:18:02
+     [ssh.c ssh_config.5]
+     add a %L expansion (short-form of the local host name) for ControlPath;
+     sync some more expansions with LocalCommand; ok markus@
+   - djm@cvs.openbsd.org 2011/05/06 21:31:38
+     [readconf.c ssh_config.5]
+     support negated Host matching, e.g.
+     
+     Host *.example.org !c.example.org
+        User mekmitasdigoat
+     
+     Will match "a.example.org", "b.example.org", but not "c.example.org"
+     ok markus@
+   - djm@cvs.openbsd.org 2011/05/06 21:34:32
+     [clientloop.c mux.c readconf.c readconf.h ssh.c ssh_config.5]
+     Add a RequestTTY ssh_config option to allow configuration-based
+     control over tty allocation (like -t/-T); ok markus@
+   - djm@cvs.openbsd.org 2011/05/06 21:38:58
+     [ssh.c]
+     fix dropping from previous diff
+   - djm@cvs.openbsd.org 2011/05/06 22:20:10
+     [PROTOCOL.mux]
+     fix numbering; from bert.wesarg AT googlemail.com
+   - jmc@cvs.openbsd.org 2011/05/07 23:19:39
+     [ssh_config.5]
+     - tweak previous
+     - come consistency fixes
+     ok djm
+   - jmc@cvs.openbsd.org 2011/05/07 23:20:25
+     [ssh.1]
+     +.It RequestTTY
+   - djm@cvs.openbsd.org 2011/05/08 12:52:01
+     [PROTOCOL.mux clientloop.c clientloop.h mux.c]
+     improve our behaviour when TTY allocation fails: if we are in
+     RequestTTY=auto mode (the default), then do not treat at TTY
+     allocation error as fatal but rather just restore the local TTY
+     to cooked mode and continue. This is more graceful on devices that
+     never allocate TTYs.
+     
+     If RequestTTY is set to "yes" or "force", then failure to allocate
+     a TTY is fatal.
+     
+     ok markus@
+   - djm@cvs.openbsd.org 2011/05/10 05:46:46
+     [authfile.c]
+     despam debug() logs by detecting that we are trying to load a private key
+     in key_try_load_public() and returning early; ok markus@
+   - djm@cvs.openbsd.org 2011/05/11 04:47:06
+     [auth.c auth.h auth2-pubkey.c pathnames.h servconf.c servconf.h]
+     remove support for authorized_keys2; it is a relic from the early days
+     of protocol v.2 support and has been undocumented for many years;
+     ok markus@
+   - djm@cvs.openbsd.org 2011/05/13 00:05:36
+     [authfile.c]
+     warn on unexpected key type in key_parse_private_type()
+ - (djm) [packet.c] unbreak portability #endif
+20110510
+ - (dtucker) [openbsd-compat/openssl-compat.{c,h}] Bug #1882: fix
+   --with-ssl-engine which was broken with the change from deprecated
+   SSLeay_add_all_algorithms().  ok djm
+20110506
+ - (dtucker) [openbsd-compat/regress/closefromtest.c] Bug #1875: add prototype
+   for closefrom() in test code.  Report from Dan Wallis via Gentoo.
+20110505
+ - (djm) [defines.h] Move up include of netinet/ip.h for IPTOS
+   definitions. From des AT des.no
+ - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac]
+   [entropy.c ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c]
+   [ssh-keysign.c ssh-pkcs11-helper.c ssh-rand-helper.8 ssh-rand-helper.c]
+   [ssh.c ssh_prng_cmds.in sshd.c contrib/aix/buildbff.sh]
+   [regress/README.regress] Remove ssh-rand-helper and all its
+   tentacles. PRNGd seeding has been rolled into entropy.c directly.
+   Thanks to tim@ for testing on affected platforms.
+ - OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/03/10 02:52:57
+     [auth2-gss.c auth2.c auth.h]
+     allow GSSAPI authentication to detect when a server-side failure causes
+     authentication failure and don't count such failures against MaxAuthTries;
+     bz#1244 from simon AT sxw.org.uk; ok markus@ before lock
+   - okan@cvs.openbsd.org 2011/03/15 10:36:02
+     [ssh-keyscan.c]
+     use timerclear macro
+     ok djm@
+   - stevesk@cvs.openbsd.org 2011/03/23 15:16:22
+     [ssh-keygen.1 ssh-keygen.c]
+     Add -A option.  For each of the key types (rsa1, rsa, dsa and ecdsa)
+     for which host keys do not exist, generate the host keys with the
+     default key file path, an empty passphrase, default bits for the key
+     type, and default comment.  This will be used by /etc/rc to generate
+     new host keys.  Idea from deraadt.
+     ok deraadt
+   - stevesk@cvs.openbsd.org 2011/03/23 16:24:56
+     [ssh-keygen.1]
+     -q not used in /etc/rc now so remove statement.
+   - stevesk@cvs.openbsd.org 2011/03/23 16:50:04
+     [ssh-keygen.c]
+     remove -d, documentation removed >10 years ago; ok markus
+   - jmc@cvs.openbsd.org 2011/03/24 15:29:30
+     [ssh-keygen.1]
+     zap trailing whitespace;
+   - stevesk@cvs.openbsd.org 2011/03/24 22:14:54
+     [ssh-keygen.c]
+     use strcasecmp() for "clear" cert permission option also; ok djm
+   - stevesk@cvs.openbsd.org 2011/03/29 18:54:17
+     [misc.c misc.h servconf.c]
+     print ipqos friendly string for sshd -T; ok markus
+     # sshd -Tf sshd_config|grep ipqos
+     ipqos lowdelay throughput
+   - djm@cvs.openbsd.org 2011/04/12 04:23:50
+     [ssh-keygen.c]
+     fix -Wshadow
+   - djm@cvs.openbsd.org 2011/04/12 05:32:49
+     [sshd.c]
+     exit with 0 status on SIGTERM; bz#1879
+   - djm@cvs.openbsd.org 2011/04/13 04:02:48
+     [ssh-keygen.1]
+     improve wording; bz#1861
+   - djm@cvs.openbsd.org 2011/04/13 04:09:37
+     [ssh-keygen.1]
+     mention valid -b sizes for ECDSA keys; bz#1862
+   - djm@cvs.openbsd.org 2011/04/17 22:42:42
+     [PROTOCOL.mux clientloop.c clientloop.h mux.c ssh.1 ssh.c]
+     allow graceful shutdown of multiplexing: request that a mux server
+     removes its listener socket and refuse future multiplexing requests;
+     ok markus@
+   - djm@cvs.openbsd.org 2011/04/18 00:46:05
+     [ssh-keygen.c]
+     certificate options are supposed to be packed in lexical order of
+     option name (though we don't actually enforce this at present).
+     Move one up that was out of sequence
+   - djm@cvs.openbsd.org 2011/05/04 21:15:29
+     [authfile.c authfile.h ssh-add.c]
+     allow "ssh-add - < key"; feedback and ok markus@
+ - (tim) [configure.ac] Add AC_LANG_SOURCE to OPENSSH_CHECK_CFLAG_COMPILE
+   so autoreconf 2.68 is happy.
+ - (tim) [defines.h] Deal with platforms that do not have S_IFSOCK ok djm@
+20110221
+ - (dtucker) [contrib/cygwin/ssh-host-config] From Corinna: revamp of the
+   Cygwin-specific service installer script ssh-host-config.  The actual
+   functionality is the same, the revisited version is just more
+   exact when it comes to check for problems which disallow to run
+   certain aspects of the script.  So, part of this script and the also
+   rearranged service helper script library "csih" is to check if all
+   the tools required to run the script are available on the system.
+   The new script also is more thorough to inform the user why the
+   script failed.  Patch from vinschen at redhat com.
+20110218
+ - OpenBSD CVS Sync
+   - djm@cvs.openbsd.org 2011/02/16 00:31:14
+     [ssh-keysign.c]
+     make hostbased auth with ECDSA keys work correctly. Based on patch
+     by harvey.eneman AT oracle.com in bz#1858; ok markus@ (pre-lock)
+20110206
+ - (dtucker) [openbsd-compat/port-linux.c] Bug #1851: fix syntax error in
+   selinux code.  Patch from Leonardo Chiquitto 
+ - (dtucker) [contrib/cygwin/ssh-{host,user}-config]  Add ECDSA key
+   generation and simplify.  Patch from Corinna Vinschen.
 20110204
 - OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2011/01/31 21:42:15
@@ -19,6 +499,14 @@
   succeeded before using its result. Patch from cjwatson AT debian.org;
   bz#1851
+20110127
+ - (tim) [config.guess config.sub] Sync with upstream.
+ - (tim) [configure.ac] Consistent M4 quoting throughout, updated obsolete
+   AC_TRY_COMPILE with AC_COMPILE_IFELSE, updated obsolete AC_TRY_LINK with
+   AC_LINK_IFELSE, updated obsolete AC_TRY_RUN with AC_RUN_IFELSE, misc white
+   space changes for consistency/readability. Makes autoconf 2.68 happy.
+   "Nice work" djm
 20110125
 - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.c
   openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to
@@ -1229,4 +1717,3 @@
     (use "ssh-keygen -t v00 -s ca_key ..." to generate a v00 certificate)
     
     ok markus@
diff --git a/INSTALL b/INSTALL
index 09dfd666d..0031dea85 100644
--- a/INSTALL
+++ b/INSTALL
@@ -16,9 +16,7 @@ The remaining items are optional.
 NB. If you operating system supports /dev/random, you should configure
 OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of
-/dev/random, or failing that, either prngd or egd.  If you don't have
+/dev/random, or failing that, either prngd or egd
-any of these you will have to rely on ssh-rand-helper, which is inferior
-to a good kernel-based solution or prngd.
 PRNGD:
@@ -262,4 +260,4 @@ Please refer to the "reporting bugs" section of the webpage at
 http://www.openssh.com/
-$Id: INSTALL,v 1.85 2010/02/11 22:34:22 djm Exp $
+$Id: INSTALL,v 1.86 2011/05/05 03:48:37 djm Exp $
diff --git a/Makefile.in b/Makefile.in
index c18ba7099..7406aef6f 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -1,4 +1,4 @@
-# $Id: Makefile.in,v 1.320.4.1 2011/02/04 00:42:13 djm Exp $
+# $Id: Makefile.in,v 1.325 2011/08/05 20:15:18 djm Exp $
 # uncomment if you run a non bourne compatable shell. Ie. csh
 #SHELL = @SH@
@@ -26,7 +26,6 @@ ASKPASS_PROGRAM=$(libexecdir)/ssh-askpass
 SFTP_SERVER=$(libexecdir)/sftp-server
 SSH_KEYSIGN=$(libexecdir)/ssh-keysign
 SSH_PKCS11_HELPER=$(libexecdir)/ssh-pkcs11-helper
-RAND_HELPER=$(libexecdir)/ssh-rand-helper
 SSH_DATADIR=$(datadir)/ssh
 PRIVSEP_PATH=@PRIVSEP_PATH@
 SSH_PRIVSEP_USER=@SSH_PRIVSEP_USER@
@@ -40,8 +39,7 @@ PATHS= -DSSHDIR=\"$(sysconfdir)\" \
        -D_PATH_SSH_PKCS11_HELPER=\"$(SSH_PKCS11_HELPER)\" \
        -D_PATH_SSH_PIDDIR=\"$(piddir)\" \
        -D_PATH_PRIVSEP_CHROOT_DIR=\"$(PRIVSEP_PATH)\" \
-        -DSSH_RAND_HELPER=\"$(RAND_HELPER)\" \
+        -D_PATH_SSH_DATADIR=\"$(SSH_DATADIR)\" \
-        -D_PATH_SSH_DATADIR=\"$(SSH_DATADIR)\"
 CC=@CC@
 LD=@LD@
@@ -63,10 +61,7 @@ LDFLAGS=-L. -Lopenbsd-compat/ @LDFLAGS@
 EXEEXT=@EXEEXT@
 MANFMT=@MANFMT@
-INSTALL_SSH_PRNG_CMDS=@INSTALL_SSH_PRNG_CMDS@
+TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-pkcs11-helper$(EXEEXT) ssh-agent$(EXEEXT) scp$(EXEEXT) sftp-server$(EXEEXT) sftp$(EXEEXT) ssh-vulnkey$(EXEEXT)
-INSTALL_SSH_RAND_HELPER=@INSTALL_SSH_RAND_HELPER@
-TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-pkcs11-helper$(EXEEXT) ssh-agent$(EXEEXT) scp$(EXEEXT) ssh-rand-helper${EXEEXT} sftp-server$(EXEEXT) sftp$(EXEEXT) ssh-vulnkey$(EXEEXT)
 LIBSSH_OBJS=acss.o authfd.o authfile.o bufaux.o bufbn.o buffer.o \
        canohost.o channels.o cipher.o cipher-acss.o cipher-aes.o \
@@ -97,17 +92,17 @@ SSHDOBJS=sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o \
        auth2-gss.o gss-serv.o gss-serv-krb5.o kexgsss.o\
        loginrec.o auth-pam.o auth-shadow.o auth-sia.o md5crypt.o \
        sftp-server.o sftp-common.o \
-        roaming_common.o roaming_serv.o
+        roaming_common.o roaming_serv.o \
+        sandbox-null.o sandbox-rlimit.o sandbox-systrace.o sandbox-darwin.o
-MANPAGES        = moduli.5.out scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-rand-helper.8.out ssh-keysign.8.out ssh-pkcs11-helper.8.out ssh-vulnkey.1.out sshd_config.5.out ssh_config.5.out
+MANPAGES        = moduli.5.out scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-keysign.8.out ssh-pkcs11-helper.8.out ssh-vulnkey.1.out sshd_config.5.out ssh_config.5.out
-MANPAGES_IN     = moduli.5 scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-rand-helper.8 ssh-keysign.8 ssh-pkcs11-helper.8 ssh-vulnkey.1 sshd_config.5 ssh_config.5
+MANPAGES_IN     = moduli.5 scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-keysign.8 ssh-pkcs11-helper.8 ssh-vulnkey.1 sshd_config.5 ssh_config.5
 MANTYPE         = @MANTYPE@
 CONFIGFILES=sshd_config.out ssh_config.out moduli.out
 CONFIGFILES_IN=sshd_config ssh_config moduli
 PATHSUBS        = \
-        -e 's|/etc/ssh/ssh_prng_cmds|$(sysconfdir)/ssh_prng_cmds|g' \
        -e 's|/etc/ssh/ssh_config|$(sysconfdir)/ssh_config|g' \
        -e 's|/etc/ssh/ssh_known_hosts|$(sysconfdir)/ssh_known_hosts|g' \
        -e 's|/etc/ssh/sshd_config|$(sysconfdir)/sshd_config|g' \
@@ -127,7 +122,7 @@ PATHSUBS	= \
 FIXPATHSCMD     = $(SED) $(PATHSUBS)
-all: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS)
+all: $(CONFIGFILES) $(MANPAGES) $(TARGETS)
 $(LIBSSH_OBJS): Makefile.in config.h
 $(SSHOBJS): Makefile.in config.h
@@ -178,9 +173,6 @@ sftp-server$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-common.o sftp-server.o s
 sftp$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-client.o sftp-common.o sftp-glob.o progressmeter.o
        $(LD) -o $@ progressmeter.o sftp.o sftp-client.o sftp-common.o sftp-glob.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) $(LIBEDIT)
-ssh-rand-helper${EXEEXT}: $(LIBCOMPAT) libssh.a ssh-rand-helper.o
-        $(LD) -o $@ ssh-rand-helper.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS)
 ssh-vulnkey$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-vulnkey.o
        $(LD) -o $@ ssh-vulnkey.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS)
@@ -204,11 +196,6 @@ $(CONFIGFILES): $(CONFIGFILES_IN)
        conffile=`echo $@ | sed 's/.out$$//'`; \
        $(FIXPATHSCMD) $(srcdir)/$${conffile} > $@
-ssh_prng_cmds.out:      ssh_prng_cmds
-        if test ! -z "$(INSTALL_SSH_PRNG_CMDS)"; then \
-                $(PERL) $(srcdir)/fixprogs ssh_prng_cmds $(ENT); \
-        fi
 # fake rule to stop make trying to compile moduli.o into a binary "moduli.o"
 moduli:
        echo
@@ -221,7 +208,7 @@ clean:	regressclean
 distclean:      regressclean
        rm -f *.o *.a $(TARGETS) logintest config.cache config.log
        rm -f *.out core opensshd.init openssh.xml
-        rm -f Makefile buildpkg.sh config.h config.status ssh_prng_cmds
+        rm -f Makefile buildpkg.sh config.h config.status
        rm -f survey.sh openbsd-compat/regress/Makefile *~ 
        rm -rf autom4te.cache
        (cd openbsd-compat && $(MAKE) distclean)
@@ -232,6 +219,8 @@ distclean:	regressclean
 veryclean: distclean
        rm -f configure config.h.in *.0
+cleandir: veryclean
 mrproper: veryclean
 realclean: veryclean
@@ -248,9 +237,9 @@ distprep: catman-do
        $(AUTORECONF)
        -rm -rf autom4te.cache
-install: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) install-files install-sysconf host-key check-config
+install: $(CONFIGFILES) $(MANPAGES) $(TARGETS) install-files install-sysconf host-key check-config
-install-nokeys: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) install-files install-sysconf
+install-nokeys: $(CONFIGFILES) $(MANPAGES) $(TARGETS) install-files install-sysconf
-install-nosysconf: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) install-files
+install-nosysconf: $(CONFIGFILES) $(MANPAGES) $(TARGETS) install-files
 check-config:
        -$(DESTDIR)$(sbindir)/sshd -t -f $(DESTDIR)$(sysconfdir)/sshd_config
@@ -271,9 +260,6 @@ install-files:
        $(INSTALL) -m 0755 $(STRIP_OPT) ssh-keygen$(EXEEXT) $(DESTDIR)$(bindir)/ssh-keygen$(EXEEXT)
        $(INSTALL) -m 0755 $(STRIP_OPT) ssh-keyscan$(EXEEXT) $(DESTDIR)$(bindir)/ssh-keyscan$(EXEEXT)
        $(INSTALL) -m 0755 $(STRIP_OPT) sshd$(EXEEXT) $(DESTDIR)$(sbindir)/sshd$(EXEEXT)
-        if test ! -z "$(INSTALL_SSH_RAND_HELPER)" ; then \
-                $(INSTALL) -m 0755 $(STRIP_OPT) ssh-rand-helper$(EXEEXT) $(DESTDIR)$(libexecdir)/ssh-rand-helper$(EXEEXT) ; \
-        fi
        $(INSTALL) -m 4711 $(STRIP_OPT) ssh-keysign$(EXEEXT) $(DESTDIR)$(SSH_KEYSIGN)$(EXEEXT)
        $(INSTALL) -m 0755 $(STRIP_OPT) ssh-pkcs11-helper$(EXEEXT) $(DESTDIR)$(SSH_PKCS11_HELPER)$(EXEEXT)
        $(INSTALL) -m 0755 $(STRIP_OPT) sftp$(EXEEXT) $(DESTDIR)$(bindir)/sftp$(EXEEXT)
@@ -290,9 +276,6 @@ install-files:
        $(INSTALL) -m 644 ssh_config.5.out $(DESTDIR)$(mandir)/$(mansubdir)5/ssh_config.5
        $(INSTALL) -m 644 sshd.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sshd.8
        ln -s ../$(mansubdir)8/sshd.8 $(DESTDIR)$(mandir)/$(mansubdir)5/authorized_keys.5
-        if [ ! -z "$(INSTALL_SSH_RAND_HELPER)" ]; then \
-                $(INSTALL) -m 644 ssh-rand-helper.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-rand-helper.8 ; \
-        fi
        $(INSTALL) -m 644 sftp.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/sftp.1
        $(INSTALL) -m 644 sftp-server.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8
        $(INSTALL) -m 644 ssh-keysign.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8
@@ -317,13 +300,6 @@ install-sysconf:
        else \
                echo "$(DESTDIR)$(sysconfdir)/sshd_config already exists, install will not overwrite"; \
        fi
-        @if [ -f ssh_prng_cmds ] && [ ! -z "$(INSTALL_SSH_PRNG_CMDS)" ]; then \
-                if [ ! -f $(DESTDIR)$(sysconfdir)/ssh_prng_cmds ] ; then \
-                        $(INSTALL) -m 644 ssh_prng_cmds.out $(DESTDIR)$(sysconfdir)/ssh_prng_cmds; \
-                else \
-                        echo "$(DESTDIR)$(sysconfdir)/ssh_prng_cmds already exists, install will not overwrite"; \
-                fi ; \
-        fi
        @if [ ! -f $(DESTDIR)$(sysconfdir)/moduli ]; then \
                if [ -f $(DESTDIR)$(sysconfdir)/primes ]; then \
                        echo "moving $(DESTDIR)$(sysconfdir)/primes to $(DESTDIR)$(sysconfdir)/moduli"; \
@@ -370,7 +346,6 @@ host-key-force: ssh-keygen$(EXEEXT)
 uninstallall:   uninstall
        -rm -f $(DESTDIR)$(sysconfdir)/ssh_config
        -rm -f $(DESTDIR)$(sysconfdir)/sshd_config
-        -rm -f $(DESTDIR)$(sysconfdir)/ssh_prng_cmds
        -rmdir $(DESTDIR)$(sysconfdir)
        -rmdir $(DESTDIR)$(bindir)
        -rmdir $(DESTDIR)$(sbindir)
@@ -393,7 +368,6 @@ uninstall:
        -rm -r $(DESTDIR)$(SFTP_SERVER)$(EXEEXT)
        -rm -f $(DESTDIR)$(SSH_KEYSIGN)$(EXEEXT)
        -rm -f $(DESTDIR)$(SSH_PKCS11_HELPER)$(EXEEXT)
-        -rm -f $(DESTDIR)$(RAND_HELPER)$(EXEEXT)
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/scp.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-add.1
@@ -403,7 +377,6 @@ uninstall:
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keyscan.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-vulnkey.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/sshd.8
-        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-rand-helper.8
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-pkcs11-helper.8
@@ -473,7 +446,7 @@ survey: survey.sh ssh
 send-survey:    survey
        mail portable-survey@mindrot.org <survey
-package: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS)
+package: $(CONFIGFILES) $(MANPAGES) $(TARGETS)
        if [ "@MAKE_PACKAGE_SUPPORTED@" = yes ]; then \
                sh buildpkg.sh; \
        fi
diff --git a/PROTOCOL.mux b/PROTOCOL.mux
index 2a5817bd7..9ad256602 100644
--- a/PROTOCOL.mux
+++ b/PROTOCOL.mux
@@ -73,6 +73,13 @@ non-multiplexed ssh(1) connection. Two additional cases that the
 client must cope with are it receiving a signal itself and the
 server disconnecting without sending an exit message.
+A master may also send a MUX_S_TTY_ALLOC_FAIL before MUX_S_EXIT_MESSAGE
+if remote TTY allocation was unsuccessful. The client may use this to
+return its local tty to "cooked" mode.
+        uint32  MUX_S_TTY_ALLOC_FAIL
+        uint32  session id
 3. Health checks
 The client may request a health check/PID report from a server:
@@ -149,10 +156,21 @@ The client then sends its standard input and output file descriptors
 The contents of "reserved" are currently ignored.
-A server may reply with a MUX_S_SESSION_OPEED, a MUX_S_PERMISSION_DENIED
+A server may reply with a MUX_S_SESSION_OPENED, a MUX_S_PERMISSION_DENIED
 or a MUX_S_FAILURE.
-8. Status messages
+8. Requesting shutdown of mux listener
+A client may request the master to stop accepting new multiplexing requests
+and remove its listener socket.
+        uint32  MUX_C_STOP_LISTENING
+        uint32  request id
+A server may reply with a MUX_S_OK, a MUX_S_PERMISSION_DENIED or a
+MUX_S_FAILURE.
+9. Status messages
 The MUX_S_OK message is empty:
@@ -169,7 +187,7 @@ The MUX_S_PERMISSION_DENIED and MUX_S_FAILURE include a reason:
        uint32  client request id
        string  reason
-9. Protocol numbers
+10. Protocol numbers
 #define MUX_MSG_HELLO           0x00000001
 #define MUX_C_NEW_SESSION       0x10000002
@@ -178,6 +196,7 @@ The MUX_S_PERMISSION_DENIED and MUX_S_FAILURE include a reason:
 #define MUX_C_OPEN_FWD          0x10000006
 #define MUX_C_CLOSE_FWD         0x10000007
 #define MUX_C_NEW_STDIO_FWD     0x10000008
+#define MUX_C_STOP_LISTENING    0x10000009
 #define MUX_S_OK                0x80000001
 #define MUX_S_PERMISSION_DENIED 0x80000002
 #define MUX_S_FAILURE           0x80000003
@@ -185,6 +204,7 @@ The MUX_S_PERMISSION_DENIED and MUX_S_FAILURE include a reason:
 #define MUX_S_ALIVE             0x80000005
 #define MUX_S_SESSION_OPENED    0x80000006
 #define MUX_S_REMOTE_PORT       0x80000007
+#define MUX_S_TTY_ALLOC_FAIL    0x80000008
 #define MUX_FWD_LOCAL   1
 #define MUX_FWD_REMOTE  2
@@ -192,12 +212,10 @@ The MUX_S_PERMISSION_DENIED and MUX_S_FAILURE include a reason:
 XXX TODO
 XXX extended status (e.g. report open channels / forwards)
-XXX graceful close (delete listening socket, but keep existing sessions active)
 XXX lock (maybe)
 XXX watch in/out traffic (pre/post crypto)
 XXX inject packet (what about replies)
 XXX server->client error/warning notifications
-XXX port0 rfwd (need custom response message)
 XXX send signals via mux
-$OpenBSD: PROTOCOL.mux,v 1.4 2011/01/31 21:42:15 djm Exp $
+$OpenBSD: PROTOCOL.mux,v 1.7 2011/05/08 12:52:01 djm Exp $
diff --git a/README b/README
index 4f695066b..093a3849a 100644
--- a/README
+++ b/README
@@ -1,4 +1,4 @@
-See http://www.openssh.com/txt/release-5.8 for the release notes.
+See http://www.openssh.com/txt/release-5.9p1 for the release notes.
 - A Japanese translation of this document and of the OpenSSH FAQ is
 - available at http://www.unixuser.org/~haruyama/security/openssh/index.html
@@ -62,4 +62,4 @@ References -
 [6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9
 [7] http://www.openssh.com/faq.html
-$Id: README,v 1.75.4.1 2011/02/04 00:57:50 djm Exp $
+$Id: README,v 1.77.2.1 2011/09/05 00:27:58 djm Exp $
diff --git a/WARNING.RNG b/WARNING.RNG
deleted file mode 100644
index 97da74ff7..000000000
--- a/WARNING.RNG
+++ /dev/null
@@ -1,95 +0,0 @@
-This document contains a description of portable OpenSSH's random
-number collection code. An alternate reading of this text could
-well be titled "Why I should pressure my system vendor to supply
-/dev/random in their OS".
-Why is this important? OpenSSH depends on good, unpredictable numbers
-for generating keys, performing digital signatures and forming
-cryptographic challenges. If the random numbers that it uses are
-predictable, then the strength of the whole system is compromised.
-A particularly pernicious problem arises with DSA keys (used by the
-ssh2 protocol). Performing a DSA signature (which is required for
-authentication), entails the use of a 160 bit random number.  If an
-attacker can predict this number, then they can deduce your *private*
-key and impersonate you or your hosts.
-If you are using the builtin random number support (configure will
-tell you if this is the case), then read this document in its entirety.
-Alternately, you can use Lutz Jaenicke's PRNGd - a small daemon which
-collects random numbers and makes them available by a socket.
-Please also request that your OS vendor provides a kernel-based random
-number collector (/dev/random) in future versions of your operating
-systems by default.
-On to the description...
-The portable OpenSSH contains random number collection support for
-systems which lack a kernel entropy pool (/dev/random).
-This collector (as of 3.1 and beyond) comes as an external application
-that allows the local admin to decide on how to implement entropy
-collection.
-The default entropy collector operates by executing the programs listed
-in ($etcdir)/ssh_prng_cmds, reading their output and adding it to the
-PRNG supplied by OpenSSL (which is hash-based). It also stirs in the
-output of several system calls and timings from the execution of the
-programs that it runs.
-The ssh_prng_cmds file also specifies a 'rate' for each program. This
-represents the number of bits of randomness per byte of output from
-the specified program.
-The random number code will also read and save a seed file to
-~/.ssh/prng_seed. This contents of this file are added to the random
-number generator at startup. The goal here is to maintain as much
-randomness between sessions as possible.
-The default entropy collection code has two main problems:
-1. It is slow.
-Executing each program in the list can take a large amount of time,
-especially on slower machines. Additionally some program can take a
-disproportionate time to execute.
-Tuning the random helper can be done by running ./ssh-random-helper in
-very verbose mode ("-vvv") and identifying the commands that are taking
-excessive amounts of time or hanging altogher.  Any problem commands can
-be modified or removed from ssh_prng_cmds.
-The default entropy collector will timeout programs which take too long
-to execute, the actual timeout used can be adjusted with the
--with-entropy-timeout configure option. OpenSSH will not try to
-re-execute programs which have not been found, have had a non-zero
-exit status or have timed out more than a couple of times.
-2. Estimating the real 'rate' of program outputs is non-trivial
-The shear volume of the task is problematic: there are currently
-around 50 commands in the ssh_prng_cmds list, portable OpenSSH
-supports at least 12 different OSs. That is already 600 sets of data
-to be analysed, without taking into account the numerous differences
-between versions of each OS.
-On top of this, the different commands can produce varying amounts of
-usable data depending on how busy the machine is, how long it has been
-up and various other factors.
-To make matters even more complex, some of the commands are reporting
-largely the same data as other commands (eg. the various "ps" calls).
-How to avoid the default entropy code?
-The best way is to read the OpenSSL documentation and recompile OpenSSL
-to use prngd or egd.  Some platforms (like earily solaris) have 3rd
-party /dev/random devices that can be also used for this task.
-If you are forced to use ssh-rand-helper consider still downloading
-prngd/egd and configure OpenSSH using --with-prngd-port=xx or
--with-prngd-socket=xx (refer to INSTALL for more information).
-$Id: WARNING.RNG,v 1.8 2005/05/26 01:47:54 djm Exp $
diff --git a/aclocal.m4 b/aclocal.m4
index b68a47080..9bdea5ec2 100644
--- a/aclocal.m4
+++ b/aclocal.m4
@@ -1,8 +1,26 @@
-dnl $Id: aclocal.m4,v 1.6 2005/09/19 16:33:39 tim Exp $
+dnl $Id: aclocal.m4,v 1.8 2011/05/20 01:45:25 djm Exp $
 dnl
 dnl OpenSSH-specific autoconf macros
 dnl
+dnl OSSH_CHECK_CFLAG_COMPILE(check_flag[, define_flag])
+dnl Check that $CC accepts a flag 'check_flag'. If it is supported append
+dnl 'define_flag' to $CFLAGS. If 'define_flag' is not specified, then append
+dnl 'check_flag'.
+AC_DEFUN([OSSH_CHECK_CFLAG_COMPILE], [{
+        AC_MSG_CHECKING([if $CC supports $1])
+        saved_CFLAGS="$CFLAGS"
+        CFLAGS="$CFLAGS $1"
+        _define_flag="$2"
+        test "x$_define_flag" = "x" && _define_flag="$1"
+        AC_COMPILE_IFELSE([AC_LANG_SOURCE([[int main(void) { return 0; }]])],
+                [ AC_MSG_RESULT([yes])
+                  CFLAGS="$saved_CFLAGS $_define_flag"],
+                [ AC_MSG_RESULT([no])
+                  CFLAGS="$saved_CFLAGS" ]
+        )
+}])
 dnl OSSH_CHECK_HEADER_FOR_FIELD(field, header, symbol)
 dnl Does AC_EGREP_HEADER on 'header' for the string 'field'
@@ -33,16 +51,6 @@ AC_DEFUN(OSSH_CHECK_HEADER_FOR_FIELD, [
        fi
 ])
-dnl OSSH_PATH_ENTROPY_PROG(variablename, command):
-dnl Tidiness function, sets 'undef' if not found, and does the AC_SUBST
-AC_DEFUN(OSSH_PATH_ENTROPY_PROG, [
-        AC_PATH_PROG($1, $2)
-        if test -z "[$]$1" ; then
-                $1="undef"
-        fi
-        AC_SUBST($1)
-])
 dnl Check for socklen_t: historically on BSD it is an int, and in
 dnl POSIX 1g it is a type of its own, but some platforms use different
 dnl types for the argument to getsockopt, getpeername, etc.  So we
diff --git a/auth-rsa.c b/auth-rsa.c
index ec32c803f..99c4e882d 100644
--- a/auth-rsa.c
+++ b/auth-rsa.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth-rsa.c,v 1.79 2010/12/03 23:55:27 djm Exp $ */
+/* $OpenBSD: auth-rsa.c,v 1.80 2011/05/23 03:30:07 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -160,38 +160,20 @@ auth_rsa_challenge_dialog(Key *key)
        return (success);
 }
-/*
+static int
- * check if there's user key matching client_n,
+rsa_key_allowed_in_file(struct passwd *pw, char *file,
- * return key if login is allowed, NULL otherwise
+    const BIGNUM *client_n, Key **rkey)
- */
-int
-auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey)
 {
-        char line[SSH_MAX_PUBKEY_BYTES], *file;
+        char line[SSH_MAX_PUBKEY_BYTES];
        int allowed = 0;
        u_int bits;
        FILE *f;
        u_long linenum = 0;
        Key *key;
-        /* Temporarily use the user's uid. */
-        temporarily_use_uid(pw);
-        /* The authorized keys. */
-        file = authorized_keys_file(pw);
        debug("trying public RSA key file %s", file);
-        f = auth_openkeyfile(file, pw, options.strict_modes);
+        if ((f = auth_openkeyfile(file, pw, options.strict_modes)) == NULL)
-        if (!f) {
+                return 0;
-                xfree(file);
-                restore_uid();
-                return (0);
-        }
-        /* Flag indicating whether the key is allowed. */
-        allowed = 0;
-        key = key_new(KEY_RSA1);
        auth_start_parse_options();
@@ -200,6 +182,7 @@ auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey)
         * found, perform a challenge-response dialog to verify that the
         * user really has the corresponding private key.
         */
+        key = key_new(KEY_RSA1);
        while (read_keyfile_line(f, file, line, sizeof(line), &linenum) != -1) {
                char *cp;
                char *key_options;
@@ -237,7 +220,10 @@ auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey)
                }
                /* cp now points to the comment part. */
-                /* Check if the we have found the desired key (identified by its modulus). */
+                /*
+                 * Check if the we have found the desired key (identified
+                 * by its modulus).
+                 */
                if (BN_cmp(key->rsa->n, client_n) != 0)
                        continue;
@@ -266,11 +252,7 @@ auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey)
                break;
        }
-        /* Restore the privileged uid. */
-        restore_uid();
        /* Close the file. */
-        xfree(file);
        fclose(f);
        /* return key if allowed */
@@ -278,7 +260,33 @@ auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey)
                *rkey = key;
        else
                key_free(key);
-        return (allowed);
+        return allowed;
+}
+/*
+ * check if there's user key matching client_n,
+ * return key if login is allowed, NULL otherwise
+ */
+int
+auth_rsa_key_allowed(struct passwd *pw, BIGNUM *client_n, Key **rkey)
+{
+        char *file;
+        u_int i, allowed = 0;
+        temporarily_use_uid(pw);
+        for (i = 0; !allowed && i < options.num_authkeys_files; i++) {
+                file = expand_authorized_keys(
+                    options.authorized_keys_files[i], pw);
+                allowed = rsa_key_allowed_in_file(pw, file, client_n, rkey);
+                xfree(file);
+        }
+        restore_uid();
+        return allowed;
 }
 /*
diff --git a/auth-skey.c b/auth-skey.c
index cb43dba48..3536ec8fa 100644
--- a/auth-skey.c
+++ b/auth-skey.c
@@ -39,6 +39,7 @@
 #include "hostfile.h"
 #include "auth.h"
 #include "ssh-gss.h"
+#include "log.h"
 #include "monitor_wrap.h"
 static void *
diff --git a/auth.c b/auth.c
index 4f9b75334..3e8fe57b2 100644
--- a/auth.c
+++ b/auth.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth.c,v 1.91 2010/11/29 23:45:51 djm Exp $ */
+/* $OpenBSD: auth.c,v 1.94 2011/05/23 03:33:38 djm Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 *
@@ -332,7 +332,7 @@ auth_root_allowed(char *method)
 *
 * This returns a buffer allocated by xmalloc.
 */
-static char *
+char *
 expand_authorized_keys(const char *filename, struct passwd *pw)
 {
        char *file, ret[MAXPATHLEN];
@@ -356,18 +356,6 @@ expand_authorized_keys(const char *filename, struct passwd *pw)
 }
 char *
-authorized_keys_file(struct passwd *pw)
-{
-        return expand_authorized_keys(options.authorized_keys_file, pw);
-}
-char *
-authorized_keys_file2(struct passwd *pw)
-{
-        return expand_authorized_keys(options.authorized_keys_file2, pw);
-}
-char *
 authorized_principals_file(struct passwd *pw)
 {
        if (options.authorized_principals_file == NULL)
@@ -467,7 +455,6 @@ secure_filename(FILE *f, const char *file, struct passwd *pw,
                }
                strlcpy(buf, cp, sizeof(buf));
-                debug3("secure_filename: checking '%s'", buf);
                if (stat(buf, &st) < 0 ||
                    !secure_permissions(&st, uid)) {
                        snprintf(err, errlen,
@@ -476,11 +463,9 @@ secure_filename(FILE *f, const char *file, struct passwd *pw,
                }
                /* If are past the homedir then we can stop */
-                if (comparehome && strcmp(homedir, buf) == 0) {
+                if (comparehome && strcmp(homedir, buf) == 0)
-                        debug3("secure_filename: terminating check at '%s'",
-                            buf);
                        break;
-                }
                /*
                 * dirname should always complete with a "/" path,
                 * but we can be paranoid and check for "." too
diff --git a/auth.h b/auth.h
index 6e20cd446..568212f9d 100644
--- a/auth.h
+++ b/auth.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth.h,v 1.66 2010/05/07 11:30:29 djm Exp $ */
+/* $OpenBSD: auth.h,v 1.69 2011/05/23 03:30:07 djm Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
@@ -169,8 +169,7 @@ char	*get_challenge(Authctxt *);
 int     verify_response(Authctxt *, const char *);
 void    abandon_challenge_response(Authctxt *);
-char    *authorized_keys_file(struct passwd *);
+char    *expand_authorized_keys(const char *, struct passwd *pw);
-char    *authorized_keys_file2(struct passwd *);
 char    *authorized_principals_file(struct passwd *);
 FILE    *auth_openkeyfile(const char *, struct passwd *, int);
diff --git a/auth2-gss.c b/auth2-gss.c
index a192d282f..7dc87dba4 100644
--- a/auth2-gss.c
+++ b/auth2-gss.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth2-gss.c,v 1.16 2007/10/29 00:52:45 dtucker Exp $ */
+/* $OpenBSD: auth2-gss.c,v 1.17 2011/03/10 02:52:57 djm Exp $ */
 /*
 * Copyright (c) 2001-2007 Simon Wilkinson. All rights reserved.
diff --git a/auth2-pubkey.c b/auth2-pubkey.c
index dbf0d0d22..a1d31e930 100644
--- a/auth2-pubkey.c
+++ b/auth2-pubkey.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth2-pubkey.c,v 1.27 2010/11/20 05:12:38 deraadt Exp $ */
+/* $OpenBSD: auth2-pubkey.c,v 1.29 2011/05/23 03:30:07 djm Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 *
@@ -440,7 +440,7 @@ user_cert_trusted_ca(struct passwd *pw, Key *key)
 int
 user_key_allowed(struct passwd *pw, Key *key)
 {
-        int success;
+        u_int success, i;
        char *file;
        if (auth_key_is_revoked(key, 0))
@@ -453,16 +453,13 @@ user_key_allowed(struct passwd *pw, Key *key)
        if (success)
                return success;
-        file = authorized_keys_file(pw);
+        for (i = 0; !success && i < options.num_authkeys_files; i++) {
-        success = user_key_allowed2(pw, key, file);
+                file = expand_authorized_keys(
-        xfree(file);
+                    options.authorized_keys_files[i], pw);
-        if (success)
+                success = user_key_allowed2(pw, key, file);
-                return success;
+                xfree(file);
+        }
-        /* try suffix "2" for backward compat, too */
-        file = authorized_keys_file2(pw);
-        success = user_key_allowed2(pw, key, file);
-        xfree(file);
        return success;
 }
diff --git a/auth2.c b/auth2.c
index 1255b1fcd..52acf4606 100644
--- a/auth2.c
+++ b/auth2.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth2.c,v 1.122 2010/08/31 09:58:37 djm Exp $ */
+/* $OpenBSD: auth2.c,v 1.123 2011/03/10 02:52:57 djm Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 *
diff --git a/authfd.c b/authfd.c
index c11c3f5a8..f037e838b 100644
--- a/authfd.c
+++ b/authfd.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: authfd.c,v 1.84 2010/08/31 11:54:45 djm Exp $ */
+/* $OpenBSD: authfd.c,v 1.86 2011/07/06 18:09:21 tedu Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -102,6 +102,7 @@ ssh_get_authentication_socket(void)
        if (!authsocket)
                return -1;
+        bzero(&sunaddr, sizeof(sunaddr));
        sunaddr.sun_family = AF_UNIX;
        strlcpy(sunaddr.sun_path, authsocket, sizeof(sunaddr.sun_path));
@@ -110,7 +111,7 @@ ssh_get_authentication_socket(void)
                return -1;
        /* close on exec */
-        if (fcntl(sock, F_SETFD, 1) == -1) {
+        if (fcntl(sock, F_SETFD, FD_CLOEXEC) == -1) {
                close(sock);
                return -1;
        }
diff --git a/authfile.c b/authfile.c
index 2ed250232..e5fe0b801 100644
--- a/authfile.c
+++ b/authfile.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: authfile.c,v 1.87 2010/11/29 18:57:04 markus Exp $ */
+/* $OpenBSD: authfile.c,v 1.92 2011/06/14 22:49:18 markus Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -70,6 +70,8 @@
 #include "atomicio.h"
 #include "pathnames.h"
+#define MAX_KEY_FILE_SIZE       (1024 * 1024)
 /* Version identification string for SSH v1 identity files. */
 static const char authfile_id_string[] =
    "SSH PRIVATE KEY FILE FORMAT 1.1\n";
@@ -278,6 +280,7 @@ static Key *
 key_parse_public_rsa1(Buffer *blob, char **commentp)
 {
        Key *pub;
+        Buffer copy;
        /* Check that it is at least big enough to contain the ID string. */
        if (buffer_len(blob) < sizeof(authfile_id_string)) {
@@ -294,31 +297,33 @@ key_parse_public_rsa1(Buffer *blob, char **commentp)
                debug3("Incorrect RSA1 identifier");
                return NULL;
        }
-        buffer_consume(blob, sizeof(authfile_id_string));
+        buffer_init(&copy);
+        buffer_append(&copy, buffer_ptr(blob), buffer_len(blob));
+        buffer_consume(&copy, sizeof(authfile_id_string));
        /* Skip cipher type and reserved data. */
-        (void) buffer_get_char(blob);   /* cipher type */
+        (void) buffer_get_char(&copy);          /* cipher type */
-        (void) buffer_get_int(blob);            /* reserved */
+        (void) buffer_get_int(&copy);           /* reserved */
        /* Read the public key from the buffer. */
-        (void) buffer_get_int(blob);
+        (void) buffer_get_int(&copy);
        pub = key_new(KEY_RSA1);
-        buffer_get_bignum(blob, pub->rsa->n);
+        buffer_get_bignum(&copy, pub->rsa->n);
-        buffer_get_bignum(blob, pub->rsa->e);
+        buffer_get_bignum(&copy, pub->rsa->e);
        if (commentp)
-                *commentp = buffer_get_string(blob, NULL);
+                *commentp = buffer_get_string(&copy, NULL);
        /* The encrypted private part is not parsed by this function. */
-        buffer_clear(blob);
+        buffer_free(&copy);
        return pub;
 }
-/* Load the contents of a key file into a buffer */
+/* Load a key from a fd into a buffer */
-static int
+int
 key_load_file(int fd, const char *filename, Buffer *blob)
 {
-        size_t len, readcount;
+        u_char buf[1024];
-        u_char *cp;
+        size_t len;
        struct stat st;
        if (fstat(fd, &st) < 0) {
@@ -326,33 +331,45 @@ key_load_file(int fd, const char *filename, Buffer *blob)
                    filename == NULL ? "" : filename,
                    filename == NULL ? "" : " ",
                    strerror(errno));
-                close(fd);
                return 0;
        }
-        if (st.st_size > 1*1024*1024) {
+        if ((st.st_mode & (S_IFSOCK|S_IFCHR|S_IFIFO)) == 0 &&
+            st.st_size > MAX_KEY_FILE_SIZE) {
+ toobig:
                error("%s: key file %.200s%stoo large", __func__,
                    filename == NULL ? "" : filename,
                    filename == NULL ? "" : " ");
-                close(fd);
                return 0;
        }
-        len = (size_t)st.st_size;               /* truncated */
-        if (0 == len && S_ISFIFO(st.st_mode))
-                len = 8192; /* we will try reading up to 8KiB from a FIFO */
        buffer_init(blob);
-        cp = buffer_append_space(blob, len);
+        for (;;) {
+                if ((len = atomicio(read, fd, buf, sizeof(buf))) == 0) {
-        readcount = atomicio(read, fd, cp, len);
+                        if (errno == EPIPE)
-        if (readcount != len && !(readcount > 0 && S_ISFIFO(st.st_mode))) {
+                                break;
-                debug("%s: read from key file %.200s%sfailed: %.100s", __func__,
+                        debug("%s: read from key file %.200s%sfailed: %.100s",
-                    filename == NULL ? "" : filename,
+                            __func__, filename == NULL ? "" : filename,
-                    filename == NULL ? "" : " ",
+                            filename == NULL ? "" : " ", strerror(errno));
-                    strerror(errno));
+                        buffer_clear(blob);
+                        bzero(buf, sizeof(buf));
+                        return 0;
+                }
+                buffer_append(blob, buf, len);
+                if (buffer_len(blob) > MAX_KEY_FILE_SIZE) {
+                        buffer_clear(blob);
+                        bzero(buf, sizeof(buf));
+                        goto toobig;
+                }
+        }
+        bzero(buf, sizeof(buf));
+        if ((st.st_mode & (S_IFSOCK|S_IFCHR|S_IFIFO)) == 0 &&
+            st.st_size != buffer_len(blob)) {
+                debug("%s: key file %.200s%schanged size while reading",
+                    __func__, filename == NULL ? "" : filename,
+                    filename == NULL ? "" : " ");
                buffer_clear(blob);
-                close(fd);
                return 0;
        }
        return 1;
 }
@@ -407,6 +424,7 @@ key_parse_private_rsa1(Buffer *blob, const char *passphrase, char **commentp)
        CipherContext ciphercontext;
        Cipher *cipher;
        Key *prv = NULL;
+        Buffer copy;
        /* Check that it is at least big enough to contain the ID string. */
        if (buffer_len(blob) < sizeof(authfile_id_string)) {
@@ -423,41 +441,44 @@ key_parse_private_rsa1(Buffer *blob, const char *passphrase, char **commentp)
                debug3("Incorrect RSA1 identifier");
                return NULL;
        }
-        buffer_consume(blob, sizeof(authfile_id_string));
+        buffer_init(&copy);
+        buffer_append(&copy, buffer_ptr(blob), buffer_len(blob));
+        buffer_consume(&copy, sizeof(authfile_id_string));
        /* Read cipher type. */
-        cipher_type = buffer_get_char(blob);
+        cipher_type = buffer_get_char(&copy);
-        (void) buffer_get_int(blob);    /* Reserved data. */
+        (void) buffer_get_int(&copy);   /* Reserved data. */
        /* Read the public key from the buffer. */
-        (void) buffer_get_int(blob);
+        (void) buffer_get_int(&copy);
        prv = key_new_private(KEY_RSA1);
-        buffer_get_bignum(blob, prv->rsa->n);
+        buffer_get_bignum(&copy, prv->rsa->n);
-        buffer_get_bignum(blob, prv->rsa->e);
+        buffer_get_bignum(&copy, prv->rsa->e);
        if (commentp)
-                *commentp = buffer_get_string(blob, NULL);
+                *commentp = buffer_get_string(&copy, NULL);
        else
-                (void)buffer_get_string_ptr(blob, NULL);
+                (void)buffer_get_string_ptr(&copy, NULL);
        /* Check that it is a supported cipher. */
        cipher = cipher_by_number(cipher_type);
        if (cipher == NULL) {
                debug("Unsupported RSA1 cipher %d", cipher_type);
+                buffer_free(&copy);
                goto fail;
        }
        /* Initialize space for decrypted data. */
        buffer_init(&decrypted);
-        cp = buffer_append_space(&decrypted, buffer_len(blob));
+        cp = buffer_append_space(&decrypted, buffer_len(&copy));
        /* Rest of the buffer is encrypted.  Decrypt it using the passphrase. */
        cipher_set_key_string(&ciphercontext, cipher, passphrase,
            CIPHER_DECRYPT);
        cipher_crypt(&ciphercontext, cp,
-            buffer_ptr(blob), buffer_len(blob));
+            buffer_ptr(&copy), buffer_len(&copy));
        cipher_cleanup(&ciphercontext);
        memset(&ciphercontext, 0, sizeof(ciphercontext));
-        buffer_clear(blob);
+        buffer_free(&copy);
        check1 = buffer_get_char(&decrypted);
        check2 = buffer_get_char(&decrypted);
@@ -610,7 +631,7 @@ key_perm_ok(int fd, const char *filename)
                error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
                error("Permissions 0%3.3o for '%s' are too open.",
                    (u_int)st.st_mode & 0777, filename);
-                error("It is recommended that your private key files are NOT accessible by others.");
+                error("It is required that your private key files are NOT accessible by others.");
                error("This private key will be ignored.");
                return 0;
        }
@@ -630,6 +651,7 @@ key_parse_private_type(Buffer *blob, int type, const char *passphrase,
        case KEY_UNSPEC:
                return key_parse_private_pem(blob, type, passphrase, commentp);
        default:
+                error("%s: cannot parse key type %d", __func__, type);
                break;
        }
        return NULL;
@@ -674,11 +696,34 @@ key_load_private_type(int type, const char *filename, const char *passphrase,
 }
 Key *
+key_parse_private(Buffer *buffer, const char *filename,
+    const char *passphrase, char **commentp)
+{
+        Key *pub, *prv;
+        /* it's a SSH v1 key if the public key part is readable */
+        pub = key_parse_public_rsa1(buffer, commentp);
+        if (pub == NULL) {
+                prv = key_parse_private_type(buffer, KEY_UNSPEC,
+                    passphrase, NULL);
+                /* use the filename as a comment for PEM */
+                if (commentp && prv)
+                        *commentp = xstrdup(filename);
+        } else {
+                key_free(pub);
+                /* key_parse_public_rsa1() has already loaded the comment */
+                prv = key_parse_private_type(buffer, KEY_RSA1, passphrase,
+                    NULL);
+        }
+        return prv;
+}
+Key *
 key_load_private(const char *filename, const char *passphrase,
    char **commentp)
 {
-        Key *pub, *prv;
+        Key *prv;
-        Buffer buffer, pubcopy;
+        Buffer buffer;
        int fd;
        fd = open(filename, O_RDONLY);
@@ -701,23 +746,7 @@ key_load_private(const char *filename, const char *passphrase,
        }
        close(fd);
-        buffer_init(&pubcopy);
+        prv = key_parse_private(&buffer, filename, passphrase, commentp);
-        buffer_append(&pubcopy, buffer_ptr(&buffer), buffer_len(&buffer));
-        /* it's a SSH v1 key if the public key part is readable */
-        pub = key_parse_public_rsa1(&pubcopy, commentp);
-        buffer_free(&pubcopy);
-        if (pub == NULL) {
-                prv = key_parse_private_type(&buffer, KEY_UNSPEC,
-                    passphrase, NULL);
-                /* use the filename as a comment for PEM */
-                if (commentp && prv)
-                        *commentp = xstrdup(filename);
-        } else {
-                key_free(pub);
-                /* key_parse_public_rsa1() has already loaded the comment */
-                prv = key_parse_private_type(&buffer, KEY_RSA1, passphrase,
-                    NULL);
-        }
        buffer_free(&buffer);
        return prv;
 }
@@ -741,13 +770,19 @@ key_try_load_public(Key *k, const char *filename, char **commentp)
                        case '\0':
                                continue;
                        }
+                        /* Abort loading if this looks like a private key */
+                        if (strncmp(cp, "-----BEGIN", 10) == 0)
+                                break;
                        /* Skip leading whitespace. */
                        for (; *cp && (*cp == ' ' || *cp == '\t'); cp++)
                                ;
                        if (*cp) {
                                if (key_read(k, &cp) == 1) {
-                                        if (commentp)
+                                        cp[strcspn(cp, "\r\n")] = '\0';
-                                                *commentp=xstrdup(filename);
+                                        if (commentp) {
+                                                *commentp = xstrdup(*cp ?
+                                                    cp : filename);
+                                        }
                                        fclose(f);
                                        return 1;
                                }
diff --git a/authfile.h b/authfile.h
index e66d1f573..3f2bdcb06 100644
--- a/authfile.h
+++ b/authfile.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: authfile.h,v 1.15 2010/08/04 05:42:47 djm Exp $ */
+/* $OpenBSD: authfile.h,v 1.16 2011/05/04 21:15:29 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -16,9 +16,11 @@
 #define AUTHFILE_H
 int      key_save_private(Key *, const char *, const char *, const char *);
+int      key_load_file(int, const char *, Buffer *);
 Key     *key_load_cert(const char *);
 Key     *key_load_public(const char *, char **);
 Key     *key_load_public_type(int, const char *, char **);
+Key     *key_parse_private(Buffer *, const char *, const char *, char **);
 Key     *key_load_private(const char *, const char *, char **);
 Key     *key_load_private_cert(int, const char *, const char *, int *);
 Key     *key_load_private_type(int, const char *, const char *, char **, int *);
diff --git a/buildpkg.sh.in b/buildpkg.sh.in
index 22c66fbd4..4de9d42e4 100644
--- a/buildpkg.sh.in
+++ b/buildpkg.sh.in
@@ -229,8 +229,6 @@ perl -p -i -e "s/#PrintMotd yes/PrintMotd no/" \
 # We don't want to overwrite config files on multiple installs
 mv $FAKE_ROOT${sysconfdir}/ssh_config $FAKE_ROOT${sysconfdir}/ssh_config.default
 mv $FAKE_ROOT${sysconfdir}/sshd_config $FAKE_ROOT${sysconfdir}/sshd_config.default
-[ -f $FAKE_ROOT${sysconfdir}/ssh_prng_cmds ]  &&  \
-mv $FAKE_ROOT${sysconfdir}/ssh_prng_cmds $FAKE_ROOT${sysconfdir}/ssh_prng_cmds.default
 # local tweeks here
 [ -s "${POST_MAKE_INSTALL_FIXES}" ]  &&  . ${POST_MAKE_INSTALL_FIXES}
@@ -317,11 +315,6 @@ cat > postinstall << _EOF
 [ -f \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config ]  ||  \\
        cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config.default \\
                \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config
-[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds.default ]  &&  {
-        [ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds ]  ||  \\
-        cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds.default \\
-                \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds
-}
 # make rc?.d dirs only if we are doing a test install
 [ -n "${TEST_DIR}" ]  &&  [ $DO_SMF -ne 1 ] && {
diff --git a/channels.c b/channels.c
index 6abe2d012..24d4a9f42 100644
--- a/channels.c
+++ b/channels.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: channels.c,v 1.310 2010/11/24 01:24:14 djm Exp $ */
+/* $OpenBSD: channels.c,v 1.311 2011/06/22 22:08:42 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -3562,7 +3562,7 @@ deny_input_open(int type, u_int32_t seq, void *ctxt)
 */
 void
 x11_request_forwarding_with_spoofing(int client_session_id, const char *disp,
-    const char *proto, const char *data)
+    const char *proto, const char *data, int want_reply)
 {
        u_int data_len = (u_int) strlen(data) / 2;
        u_int i, value;
@@ -3615,7 +3615,7 @@ x11_request_forwarding_with_spoofing(int client_session_id, const char *disp,
        /* Send the request packet. */
        if (compat20) {
-                channel_request_start(client_session_id, "x11-req", 0);
+                channel_request_start(client_session_id, "x11-req", want_reply);
                packet_put_char(0);     /* XXX bool single connection */
        } else {
                packet_start(SSH_CMSG_X11_REQUEST_FORWARDING);
diff --git a/channels.h b/channels.h
index 0680ed00e..e2941c85a 100644
--- a/channels.h
+++ b/channels.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: channels.h,v 1.104 2010/05/14 23:29:23 djm Exp $ */
+/* $OpenBSD: channels.h,v 1.105 2011/06/22 22:08:42 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -271,7 +271,7 @@ int	 x11_connect_display(void);
 int      x11_create_display_inet(int, int, int, u_int *, int **);
 void     x11_input_open(int, u_int32_t, void *);
 void     x11_request_forwarding_with_spoofing(int, const char *, const char *,
-             const char *);
+             const char *, int);
 void     deny_input_open(int, u_int32_t, void *);
 /* agent forwarding */
diff --git a/clientloop.c b/clientloop.c
index 97032e6a8..18a85c56c 100644
--- a/clientloop.c
+++ b/clientloop.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: clientloop.c,v 1.231 2011/01/16 12:05:59 djm Exp $ */
+/* $OpenBSD: clientloop.c,v 1.236 2011/06/22 22:08:42 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -134,9 +134,6 @@ extern int muxserver_sock; /* XXX use mux_client_cleanup() instead */
 */
 extern char *host;
-/* Force TTY allocation */
-extern int force_tty_flag;
 /*
 * Flag to indicate that we have received a window change signal which has
 * not yet been processed.  This will cause a message indicating the new
@@ -183,7 +180,8 @@ struct escape_filter_ctx {
 /* Context for channel confirmation replies */
 struct channel_reply_ctx {
        const char *request_type;
-        int id, do_close;
+        int id;
+        enum confirm_action action;
 };
 /* Global request success/failure callbacks */
@@ -269,10 +267,10 @@ static void
 set_control_persist_exit_time(void)
 {
        if (muxserver_sock == -1 || !options.control_persist
-            || options.control_persist_timeout == 0)
+            || options.control_persist_timeout == 0) {
                /* not using a ControlPersist timeout */
                control_persist_exit_time = 0;
-        else if (channel_still_open()) {
+        } else if (channel_still_open()) {
                /* some client connections are still open */
                if (control_persist_exit_time > 0)
                        debug2("%s: cancel scheduled exit", __func__);
@@ -671,7 +669,7 @@ client_suspend_self(Buffer *bin, Buffer *bout, Buffer *berr)
                atomicio(vwrite, fileno(stderr), buffer_ptr(berr),
                    buffer_len(berr));
-        leave_raw_mode(force_tty_flag);
+        leave_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        /*
         * Free (and clear) the buffer to reduce the amount of data that gets
@@ -692,7 +690,7 @@ client_suspend_self(Buffer *bin, Buffer *bout, Buffer *berr)
        buffer_init(bout);
        buffer_init(berr);
-        enter_raw_mode(force_tty_flag);
+        enter_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
 }
 static void
@@ -751,6 +749,15 @@ client_status_confirm(int type, Channel *c, void *ctx)
        char errmsg[256];
        int tochan;
+        /*
+         * If a TTY was explicitly requested, then a failure to allocate
+         * one is fatal.
+         */
+        if (cr->action == CONFIRM_TTY &&
+            (options.request_tty == REQUEST_TTY_FORCE ||
+            options.request_tty == REQUEST_TTY_YES))
+                cr->action = CONFIRM_CLOSE;
        /* XXX supress on mux _client_ quietmode */
        tochan = options.log_level >= SYSLOG_LEVEL_ERROR &&
            c->ctl_chan != -1 && c->extended_usage == CHAN_EXTENDED_WRITE;
@@ -768,14 +775,27 @@ client_status_confirm(int type, Channel *c, void *ctx)
                            cr->request_type, c->self);
                }
                /* If error occurred on primary session channel, then exit */
-                if (cr->do_close && c->self == session_ident)
+                if (cr->action == CONFIRM_CLOSE && c->self == session_ident)
                        fatal("%s", errmsg);
-                /* If error occurred on mux client, append to their stderr */
+                /*
-                if (tochan)
+                 * If error occurred on mux client, append to
-                        buffer_append(&c->extended, errmsg, strlen(errmsg));
+                 * their stderr.
-                else
+                 */
+                if (tochan) {
+                        buffer_append(&c->extended, errmsg,
+                            strlen(errmsg));
+                } else
                        error("%s", errmsg);
-                if (cr->do_close) {
+                if (cr->action == CONFIRM_TTY) {
+                        /*
+                         * If a TTY allocation error occurred, then arrange
+                         * for the correct TTY to leave raw mode.
+                         */
+                        if (c->self == session_ident)
+                                leave_raw_mode(0);
+                        else
+                                mux_tty_alloc_failed(c);
+                } else if (cr->action == CONFIRM_CLOSE) {
                        chan_read_failed(c);
                        chan_write_failed(c);
                }
@@ -789,13 +809,14 @@ client_abandon_status_confirm(Channel *c, void *ctx)
        xfree(ctx);
 }
-static void
+void
-client_expect_confirm(int id, const char *request, int do_close)
+client_expect_confirm(int id, const char *request,
+    enum confirm_action action)
 {
        struct channel_reply_ctx *cr = xmalloc(sizeof(*cr));
        cr->request_type = request;
-        cr->do_close = do_close;
+        cr->action = action;
        channel_register_status_confirm(id, client_status_confirm,
            client_abandon_status_confirm, cr);
@@ -835,7 +856,7 @@ process_cmdline(void)
        bzero(&fwd, sizeof(fwd));
        fwd.listen_host = fwd.connect_host = NULL;
-        leave_raw_mode(force_tty_flag);
+        leave_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        handler = signal(SIGINT, SIG_IGN);
        cmd = s = read_passphrase("\r\nssh> ", RP_ECHO);
        if (s == NULL)
@@ -939,7 +960,7 @@ process_cmdline(void)
 out:
        signal(SIGINT, handler);
-        enter_raw_mode(force_tty_flag);
+        enter_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        if (cmd)
                xfree(cmd);
        if (fwd.listen_host != NULL)
@@ -1058,7 +1079,8 @@ process_escapes(Channel *c, Buffer *bin, Buffer *bout, Buffer *berr,
                                 * more new connections).
                                 */
                                /* Restore tty modes. */
-                                leave_raw_mode(force_tty_flag);
+                                leave_raw_mode(
+                                    options.request_tty == REQUEST_TTY_FORCE);
                                /* Stop listening for new connections. */
                                channel_stop_listening();
@@ -1353,7 +1375,7 @@ client_channel_closed(int id, void *arg)
 {
        channel_cancel_cleanup(id);
        session_closed = 1;
-        leave_raw_mode(force_tty_flag);
+        leave_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
 }
 /*
@@ -1424,18 +1446,21 @@ client_loop(int have_pty, int escape_char_arg, int ssh2_chan_id)
        signal(SIGWINCH, window_change_handler);
        if (have_pty)
-                enter_raw_mode(force_tty_flag);
+                enter_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        if (compat20) {
                session_ident = ssh2_chan_id;
-                if (escape_char_arg != SSH_ESCAPECHAR_NONE)
+                if (session_ident != -1) {
-                        channel_register_filter(session_ident,
+                        if (escape_char_arg != SSH_ESCAPECHAR_NONE) {
-                            client_simple_escape_filter, NULL,
+                                channel_register_filter(session_ident,
-                            client_filter_cleanup,
+                                    client_simple_escape_filter, NULL,
-                            client_new_escape_filter_ctx(escape_char_arg));
+                                    client_filter_cleanup,
-                if (session_ident != -1)
+                                    client_new_escape_filter_ctx(
+                                    escape_char_arg));
+                        }
                        channel_register_cleanup(session_ident,
                            client_channel_closed, 0);
+                }
        } else {
                /* Check if we should immediately send eof on stdin. */
                client_check_initial_eof_on_stdin();
@@ -1574,7 +1599,7 @@ client_loop(int have_pty, int escape_char_arg, int ssh2_chan_id)
        channel_free_all();
        if (have_pty)
-                leave_raw_mode(force_tty_flag);
+                leave_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        /* restore blocking io */
        if (!isatty(fileno(stdin)))
@@ -2002,7 +2027,7 @@ client_session2_setup(int id, int want_tty, int want_subsystem,
                        memset(&ws, 0, sizeof(ws));
                channel_request_start(id, "pty-req", 1);
-                client_expect_confirm(id, "PTY allocation", 1);
+                client_expect_confirm(id, "PTY allocation", CONFIRM_TTY);
                packet_put_cstring(term != NULL ? term : "");
                packet_put_int((u_int)ws.ws_col);
                packet_put_int((u_int)ws.ws_row);
@@ -2061,18 +2086,18 @@ client_session2_setup(int id, int want_tty, int want_subsystem,
                        debug("Sending subsystem: %.*s",
                            len, (u_char*)buffer_ptr(cmd));
                        channel_request_start(id, "subsystem", 1);
-                        client_expect_confirm(id, "subsystem", 1);
+                        client_expect_confirm(id, "subsystem", CONFIRM_CLOSE);
                } else {
                        debug("Sending command: %.*s",
                            len, (u_char*)buffer_ptr(cmd));
                        channel_request_start(id, "exec", 1);
-                        client_expect_confirm(id, "exec", 1);
+                        client_expect_confirm(id, "exec", CONFIRM_CLOSE);
                }
                packet_put_string(buffer_ptr(cmd), buffer_len(cmd));
                packet_send();
        } else {
                channel_request_start(id, "shell", 1);
-                client_expect_confirm(id, "shell", 1);
+                client_expect_confirm(id, "shell", CONFIRM_CLOSE);
                packet_send();
        }
 }
@@ -2142,11 +2167,26 @@ client_init_dispatch(void)
                client_init_dispatch_15();
 }
+void
+client_stop_mux(void)
+{
+        if (options.control_path != NULL && muxserver_sock != -1)
+                unlink(options.control_path);
+        /*
+         * If we are in persist mode, signal that we should close when all
+         * active channels are closed.
+         */
+        if (options.control_persist) {
+                session_closed = 1;
+                setproctitle("[stopped mux]");
+        }
+}
 /* client specific fatal cleanup */
 void
 cleanup_exit(int i)
 {
-        leave_raw_mode(force_tty_flag);
+        leave_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        leave_non_blocking();
        if (options.control_path != NULL && muxserver_sock != -1)
                unlink(options.control_path);
diff --git a/clientloop.h b/clientloop.h
index 52115db6e..a259b5e14 100644
--- a/clientloop.h
+++ b/clientloop.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: clientloop.h,v 1.25 2010/06/25 23:15:36 djm Exp $ */
+/* $OpenBSD: clientloop.h,v 1.28 2011/06/22 22:08:42 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -45,6 +45,7 @@ void	 client_global_request_reply_fwd(int, u_int32_t, void *);
 void     client_session2_setup(int, int, int, const char *, struct termios *,
            int, Buffer *, char **);
 int      client_request_tun_fwd(int, int, int);
+void     client_stop_mux(void);
 /* Escape filter for protocol 2 sessions */
 void    *client_new_escape_filter_ctx(int);
@@ -55,6 +56,10 @@ int	 client_simple_escape_filter(Channel *, char *, int);
 typedef void global_confirm_cb(int, u_int32_t seq, void *);
 void     client_register_global_confirm(global_confirm_cb *, void *);
+/* Channel request confirmation callbacks */
+enum confirm_action { CONFIRM_WARN = 0, CONFIRM_CLOSE, CONFIRM_TTY };
+void client_expect_confirm(int, const char *, enum confirm_action);
 /* Multiplexing protocol version */
 #define SSHMUX_VER                      4
@@ -64,7 +69,10 @@ void	 client_register_global_confirm(global_confirm_cb *, void *);
 #define SSHMUX_COMMAND_TERMINATE        3       /* Ask master to exit */
 #define SSHMUX_COMMAND_STDIO_FWD        4       /* Open stdio fwd (ssh -W) */
 #define SSHMUX_COMMAND_FORWARD          5       /* Forward only, no command */
+#define SSHMUX_COMMAND_STOP             6       /* Disable mux but not conn */
 void    muxserver_listen(void);
 void    muxclient(const char *);
 void    mux_exit_message(Channel *, int);
+void    mux_tty_alloc_failed(Channel *);
diff --git a/config.guess b/config.guess
index c2246a4f7..78553c4ea 100755
--- a/config.guess
+++ b/config.guess
@@ -1,10 +1,10 @@
 #! /bin/sh
 # Attempt to guess a canonical system name.
 #   Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999,
-#   2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010
+#   2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010,
-#   Free Software Foundation, Inc.
+#   2011 Free Software Foundation, Inc.
-timestamp='2009-12-30'
+timestamp='2011-01-23'
 # This file is free software; you can redistribute it and/or modify it
 # under the terms of the GNU General Public License as published by
@@ -57,7 +57,7 @@ GNU config.guess ($timestamp)
 Originally written by Per Bothner.
 Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000,
-2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free
+2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 Free
 Software Foundation, Inc.
 This is free software; see the source for copying conditions.  There is NO
@@ -270,7 +270,10 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
        # A Xn.n version is an unreleased experimental baselevel.
        # 1.2 uses "1.2" for uname -r.
        echo ${UNAME_MACHINE}-dec-osf`echo ${UNAME_RELEASE} | sed -e 's/^[PVTX]//' | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz'`
-        exit ;;
+        # Reset EXIT trap before exiting to avoid spurious non-zero exit code.
+        exitcode=$?
+        trap '' 0
+        exit $exitcode ;;
    Alpha\ *:Windows_NT*:*)
        # How do we know it's Interix rather than the generic POSIX subsystem?
        # Should we change UNAME_MACHINE based on the output of uname instead
@@ -552,7 +555,7 @@ EOF
                echo rs6000-ibm-aix3.2
        fi
        exit ;;
-    *:AIX:*:[456])
+    *:AIX:*:[4567])
        IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'`
        if /usr/sbin/lsattr -El ${IBM_CPU_ID} | grep ' POWER' >/dev/null 2>&1; then
                IBM_ARCH=rs6000
@@ -968,6 +971,9 @@ EOF
    sparc:Linux:*:* | sparc64:Linux:*:*)
        echo ${UNAME_MACHINE}-unknown-linux-gnu
        exit ;;
+    tile*:Linux:*:*)
+        echo ${UNAME_MACHINE}-tilera-linux-gnu
+        exit ;;
    vax:Linux:*:*)
        echo ${UNAME_MACHINE}-dec-linux-gnu
        exit ;;
@@ -1231,6 +1237,9 @@ EOF
    *:QNX:*:4*)
        echo i386-pc-qnx
        exit ;;
+    NEO-?:NONSTOP_KERNEL:*:*)
+        echo neo-tandem-nsk${UNAME_RELEASE}
+        exit ;;
    NSE-?:NONSTOP_KERNEL:*:*)
        echo nse-tandem-nsk${UNAME_RELEASE}
        exit ;;
diff --git a/config.h.in b/config.h.in
index ae1758c58..ff651cc4a 100644
--- a/config.h.in
+++ b/config.h.in
@@ -1,5 +1,8 @@
 /* config.h.in.  Generated from configure.ac by autoheader.  */
+/* Define if building universal (internal helper macro) */
+#undef AC_APPLE_UNIVERSAL_BUILD
 /* Define if you have a getaddrinfo that fails for the all-zeros IPv6 address
   */
 #undef AIX_GETNAMEINFO_HACK
@@ -122,9 +125,6 @@
 /* Enable for PKCS#11 support */
 #undef ENABLE_PKCS11
-/* Builtin PRNG command timeout */
-#undef ENTROPY_TIMEOUT_MSEC
 /* File names may not contain backslash characters */
 #undef FILESYSTEM_NO_BACKSLASH
@@ -750,6 +750,9 @@
 /* Define to 1 if you have the `recvmsg' function. */
 #undef HAVE_RECVMSG
+/* sys/resource.h has RLIMIT_NPROC */
+#undef HAVE_RLIMIT_NPROC
 /* Define to 1 if you have the <rpc/types.h> header file. */
 #undef HAVE_RPC_TYPES_H
@@ -762,6 +765,12 @@
 /* Define to 1 if you have the `RSA_get_default_method' function. */
 #undef HAVE_RSA_GET_DEFAULT_METHOD
+/* Define to 1 if you have the <sandbox.h> header file. */
+#undef HAVE_SANDBOX_H
+/* Define to 1 if you have the `sandbox_init' function. */
+#undef HAVE_SANDBOX_INIT
 /* define if you have sa_family_t data type */
 #undef HAVE_SA_FAMILY_T
@@ -948,13 +957,13 @@
 /* define if you have struct sockaddr_in6 data type */
 #undef HAVE_STRUCT_SOCKADDR_IN6
-/* Define to 1 if `sin6_scope_id' is member of `struct sockaddr_in6'. */
+/* Define to 1 if `sin6_scope_id' is a member of `struct sockaddr_in6'. */
 #undef HAVE_STRUCT_SOCKADDR_IN6_SIN6_SCOPE_ID
 /* define if you have struct sockaddr_storage data type */
 #undef HAVE_STRUCT_SOCKADDR_STORAGE
-/* Define to 1 if `st_blksize' is member of `struct stat'. */
+/* Define to 1 if `st_blksize' is a member of `struct stat'. */
 #undef HAVE_STRUCT_STAT_ST_BLKSIZE
 /* Define to 1 if the system has the type `struct timespec'. */
@@ -1259,7 +1268,7 @@
   from environment and PATH */
 #undef LOGIN_PROGRAM_FALLBACK
-/* Set this to your mail directory if you don't have maillock.h */
+/* Set this to your mail directory if you do not have _PATH_MAILDIR */
 #undef MAIL_DIRECTORY
 /* Define on *nto-qnx systems */
@@ -1307,6 +1316,9 @@
 /* Define to the one symbol short name of this package. */
 #undef PACKAGE_TARNAME
+/* Define to the home page for this package. */
+#undef PACKAGE_URL
 /* Define to the version of this package. */
 #undef PACKAGE_VERSION
@@ -1329,6 +1341,18 @@
 /* read(1) can return 0 for a non-closed fd */
 #undef PTY_ZEROREAD
+/* Sandbox using Darwin sandbox_init(3) */
+#undef SANDBOX_DARWIN
+/* no privsep sandboxing */
+#undef SANDBOX_NULL
+/* Sandbox using setrlimit(2) */
+#undef SANDBOX_RLIMIT
+/* Sandbox using systrace(4) */
+#undef SANDBOX_SYSTRACE
 /* Define if your platform breaks doing a seteuid before a setuid */
 #undef SETEUID_BREAKS_SETUID
@@ -1466,9 +1490,17 @@
 /* Define if you want SELinux support. */
 #undef WITH_SELINUX
-/* Define to 1 if your processor stores words with the most significant byte
+/* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most
-   first (like Motorola and SPARC, unlike Intel and VAX). */
+   significant byte first (like Motorola and SPARC, unlike Intel). */
-#undef WORDS_BIGENDIAN
+#if defined AC_APPLE_UNIVERSAL_BUILD
+# if defined __BIG_ENDIAN__
+#  define WORDS_BIGENDIAN 1
+# endif
+#else
+# ifndef WORDS_BIGENDIAN
+#  undef WORDS_BIGENDIAN
+# endif
+#endif
 /* Define if xauth is found in your path */
 #undef XAUTH_PATH
diff --git a/config.sub b/config.sub
index c2d125724..2d8169626 100755
--- a/config.sub
+++ b/config.sub
@@ -1,10 +1,10 @@
 #! /bin/sh
 # Configuration validation subroutine script.
 #   Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999,
-#   2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010
+#   2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010,
-#   Free Software Foundation, Inc.
+#   2011 Free Software Foundation, Inc.
-timestamp='2010-01-22'
+timestamp='2011-01-01'
 # This file is (in principle) common to ALL GNU software.
 # The presence of a machine in this file suggests that SOME GNU software
@@ -124,8 +124,9 @@ esac
 # Here we must recognize all the valid KERNEL-OS combinations.
 maybe_os=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\2/'`
 case $maybe_os in
-  nto-qnx* | linux-gnu* | linux-dietlibc | linux-newlib* | linux-uclibc* | \
+  nto-qnx* | linux-gnu* | linux-android* | linux-dietlibc | linux-newlib* | \
-  uclinux-uclibc* | uclinux-gnu* | kfreebsd*-gnu* | knetbsd*-gnu* | netbsd*-gnu* | \
+  linux-uclibc* | uclinux-uclibc* | uclinux-gnu* | kfreebsd*-gnu* | \
+  knetbsd*-gnu* | netbsd*-gnu* | \
  kopensolaris*-gnu* | \
  storm-chaos* | os2-emx* | rtmk-nova*)
    os=-$maybe_os
@@ -282,6 +283,7 @@ case $basic_machine in
        | moxie \
        | mt \
        | msp430 \
+        | nds32 | nds32le | nds32be \
        | nios | nios2 \
        | ns16k | ns32k \
        | or32 \
@@ -295,7 +297,7 @@ case $basic_machine in
        | sparc | sparc64 | sparc64b | sparc64v | sparc86x | sparclet | sparclite \
        | sparcv8 | sparcv9 | sparcv9b | sparcv9v \
        | spu | strongarm \
-        | tahoe | thumb | tic4x | tic80 | tron \
+        | tahoe | thumb | tic4x | tic54x | tic55x | tic6x | tic80 | tron \
        | ubicom32 \
        | v850 | v850e \
        | we32k \
@@ -303,6 +305,15 @@ case $basic_machine in
        | z8k | z80)
                basic_machine=$basic_machine-unknown
                ;;
+        c54x)
+                basic_machine=tic54x-unknown
+                ;;
+        c55x)
+                basic_machine=tic55x-unknown
+                ;;
+        c6x)
+                basic_machine=tic6x-unknown
+                ;;
        m6811 | m68hc11 | m6812 | m68hc12 | picochip)
                # Motorola 68HC11/12.
                basic_machine=$basic_machine-unknown
@@ -334,7 +345,7 @@ case $basic_machine in
        | arm-*  | armbe-* | armle-* | armeb-* | armv*-* \
        | avr-* | avr32-* \
        | bfin-* | bs2000-* \
-        | c[123]* | c30-* | [cjt]90-* | c4x-* | c54x-* | c55x-* | c6x-* \
+        | c[123]* | c30-* | [cjt]90-* | c4x-* \
        | clipper-* | craynv-* | cydra-* \
        | d10v-* | d30v-* | dlx-* \
        | elxsi-* \
@@ -368,6 +379,7 @@ case $basic_machine in
        | mmix-* \
        | mt-* \
        | msp430-* \
+        | nds32-* | nds32le-* | nds32be-* \
        | nios-* | nios2-* \
        | none-* | np1-* | ns16k-* | ns32k-* \
        | orion-* \
@@ -482,6 +494,15 @@ case $basic_machine in
                basic_machine=powerpc-ibm
                os=-cnk
                ;;
+        c54x-*)
+                basic_machine=tic54x-`echo $basic_machine | sed 's/^[^-]*-//'`
+                ;;
+        c55x-*)
+                basic_machine=tic55x-`echo $basic_machine | sed 's/^[^-]*-//'`
+                ;;
+        c6x-*)
+                basic_machine=tic6x-`echo $basic_machine | sed 's/^[^-]*-//'`
+                ;;
        c90)
                basic_machine=c90-cray
                os=-unicos
@@ -518,7 +539,7 @@ case $basic_machine in
                basic_machine=craynv-cray
                os=-unicosmp
                ;;
-        cr16)
+        cr16 | cr16-*)
                basic_machine=cr16-unknown
                os=-elf
                ;;
@@ -841,6 +862,12 @@ case $basic_machine in
        np1)
                basic_machine=np1-gould
                ;;
+        neo-tandem)
+                basic_machine=neo-tandem
+                ;;
+        nse-tandem)
+                basic_machine=nse-tandem
+                ;;
        nsr-tandem)
                basic_machine=nsr-tandem
                ;;
@@ -1075,18 +1102,6 @@ case $basic_machine in
                basic_machine=t90-cray
                os=-unicos
                ;;
-        tic54x | c54x*)
-                basic_machine=tic54x-unknown
-                os=-coff
-                ;;
-        tic55x | c55x*)
-                basic_machine=tic55x-unknown
-                os=-coff
-                ;;
-        tic6x | c6x*)
-                basic_machine=tic6x-unknown
-                os=-coff
-                ;;
        # This must be matched before tile*.
        tilegx*)
                basic_machine=tilegx-unknown
@@ -1301,7 +1316,8 @@ case $os in
              | -udi* | -eabi* | -lites* | -ieee* | -go32* | -aux* \
              | -chorusos* | -chorusrdb* | -cegcc* \
              | -cygwin* | -pe* | -psos* | -moss* | -proelf* | -rtems* \
-              | -mingw32* | -linux-gnu* | -linux-newlib* | -linux-uclibc* \
+              | -mingw32* | -linux-gnu* | -linux-android* \
+              | -linux-newlib* | -linux-uclibc* \
              | -uxpv* | -beos* | -mpeix* | -udk* \
              | -interix* | -uwin* | -mks* | -rhapsody* | -darwin* | -opened* \
              | -openstep* | -oskit* | -conix* | -pw32* | -nonstopux* \
@@ -1484,6 +1500,15 @@ case $basic_machine in
        c4x-* | tic4x-*)
                os=-coff
                ;;
+        tic54x-*)
+                os=-coff
+                ;;
+        tic55x-*)
+                os=-coff
+                ;;
+        tic6x-*)
+                os=-coff
+                ;;
        # This must come before the *-dec entry.
        pdp10-*)
                os=-tops20
diff --git a/configure b/configure
index 73040c5d3..c15fdc3cf 100755
--- a/configure
+++ b/configure
@@ -1,63 +1,86 @@
 #! /bin/sh
-# From configure.ac Revision: 1.469.4.1 .
+# From configure.ac Revision: 1.480 .
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.61 for OpenSSH Portable.
+# Generated by GNU Autoconf 2.68 for OpenSSH Portable.
 #
 # Report bugs to <openssh-unix-dev@mindrot.org>.
 #
+#
 # Copyright (C) 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001,
-# 2002, 2003, 2004, 2005, 2006 Free Software Foundation, Inc.
+# 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free Software
+# Foundation, Inc.
+#
+#
 # This configure script is free software; the Free Software Foundation
 # gives unlimited permission to copy, distribute and modify it.
-## --------------------- ##
+## -------------------- ##
-## M4sh Initialization.  ##
+## M4sh Initialization. ##
-## --------------------- ##
+## -------------------- ##
 # Be more Bourne compatible
 DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then
+if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
  emulate sh
  NULLCMD=:
-  # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which
+  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
  # is contrary to our usage.  Disable this feature.
  alias -g '${1+"$@"}'='"$@"'
  setopt NO_GLOB_SUBST
 else
-  case `(set -o) 2>/dev/null` in
+  case `(set -o) 2>/dev/null` in #(
-  *posix*) set -o posix ;;
+  *posix*) :
+    set -o posix ;; #(
+  *) :
+     ;;
 esac
 fi
+as_nl='
+'
-# PATH needs CR
+export as_nl
-# Avoid depending upon Character Ranges.
+# Printing a long string crashes Solaris 7 /usr/bin/printf.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
+as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
-as_cr_digits='0123456789'
+# Prefer a ksh shell builtin over an external printf program on Solaris,
-as_cr_alnum=$as_cr_Letters$as_cr_digits
+# but without wasting forks for bash or zsh.
+if test -z "$BASH_VERSION$ZSH_VERSION" \
-# The user is always right.
+    && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
-if test "${PATH_SEPARATOR+set}" != set; then
+  as_echo='print -r --'
-  echo "#! /bin/sh" >conf$$.sh
+  as_echo_n='print -rn --'
-  echo  "exit 0"   >>conf$$.sh
+elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
-  chmod +x conf$$.sh
+  as_echo='printf %s\n'
-  if (PATH="/nonexistent;."; conf$$.sh) >/dev/null 2>&1; then
+  as_echo_n='printf %s'
-    PATH_SEPARATOR=';'
+else
+  if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
+    as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
+    as_echo_n='/usr/ucb/echo -n'
  else
-    PATH_SEPARATOR=:
+    as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
+    as_echo_n_body='eval
+      arg=$1;
+      case $arg in #(
+      *"$as_nl"*)
+        expr "X$arg" : "X\\(.*\\)$as_nl";
+        arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
+      esac;
+      expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
+    '
+    export as_echo_n_body
+    as_echo_n='sh -c $as_echo_n_body as_echo'
  fi
-  rm -f conf$$.sh
+  export as_echo_body
+  as_echo='sh -c $as_echo_body as_echo'
 fi
-# Support unset when possible.
+# The user is always right.
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
+if test "${PATH_SEPARATOR+set}" != set; then
-  as_unset=unset
+  PATH_SEPARATOR=:
-else
+  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-  as_unset=false
+    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
+      PATH_SEPARATOR=';'
+  }
 fi
@@ -66,20 +89,19 @@ fi
 # there to prevent editors from complaining about space-tab.
 # (If _AS_PATH_WALK were called with IFS unset, it would disable word
 # splitting by setting IFS to empty value.)
-as_nl='
-'
 IFS=" ""        $as_nl"
 # Find who we are.  Look in the path if we contain no directory separator.
-case $0 in
+as_myself=
+case $0 in #((
  *[\\/]* ) as_myself=$0 ;;
  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
+    test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
-done
+  done
 IFS=$as_save_IFS
     ;;
@@ -90,354 +112,329 @@ if test "x$as_myself" = x; then
  as_myself=$0
 fi
 if test ! -f "$as_myself"; then
-  echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
+  $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  { (exit 1); exit 1; }
+  exit 1
 fi
-# Work around bugs in pre-3.0 UWIN ksh.
+# Unset variables that we do not need and which cause bugs (e.g. in
-for as_var in ENV MAIL MAILPATH
+# pre-3.0 UWIN ksh).  But do not cause bugs in bash 2.01; the "|| exit 1"
-do ($as_unset $as_var) >/dev/null 2>&1 && $as_unset $as_var
+# suppresses any "Segmentation fault" message there.  '((' could
+# trigger a bug in pdksh 5.2.14.
+for as_var in BASH_ENV ENV MAIL MAILPATH
+do eval test x\${$as_var+set} = xset \
+  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
 done
 PS1='$ '
 PS2='> '
 PS4='+ '
 # NLS nuisances.
-for as_var in \
+LC_ALL=C
-  LANG LANGUAGE LC_ADDRESS LC_ALL LC_COLLATE LC_CTYPE LC_IDENTIFICATION \
+export LC_ALL
-  LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER \
+LANGUAGE=C
-  LC_TELEPHONE LC_TIME
+export LANGUAGE
-do
-  if (set +x; test -z "`(eval $as_var=C; export $as_var) 2>&1`"); then
-    eval $as_var=C; export $as_var
-  else
-    ($as_unset $as_var) >/dev/null 2>&1 && $as_unset $as_var
-  fi
-done
-# Required to use basename.
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-# Name of the executable.
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-         X"$0" : 'X\(//\)$' \| \
-         X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-echo X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-            s//\1/
-            q
-          }
-          /^X\/\(\/\/\)$/{
-            s//\1/
-            q
-          }
-          /^X\/\(\/\).*/{
-            s//\1/
-            q
-          }
-          s/.*/./; q'`
 # CDPATH.
-$as_unset CDPATH
+(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
 if test "x$CONFIG_SHELL" = x; then
-  if (eval ":") 2>/dev/null; then
+  as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then :
-  as_have_required=yes
+  emulate sh
+  NULLCMD=:
+  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
+  # is contrary to our usage.  Disable this feature.
+  alias -g '\${1+\"\$@\"}'='\"\$@\"'
+  setopt NO_GLOB_SUBST
 else
-  as_have_required=no
+  case \`(set -o) 2>/dev/null\` in #(
+  *posix*) :
+    set -o posix ;; #(
+  *) :
+     ;;
+esac
 fi
+"
-  if test $as_have_required = yes &&     (eval ":
+  as_required="as_fn_return () { (exit \$1); }
-(as_func_return () {
+as_fn_success () { as_fn_return 0; }
-  (exit \$1)
+as_fn_failure () { as_fn_return 1; }
-}
+as_fn_ret_success () { return 0; }
-as_func_success () {
+as_fn_ret_failure () { return 1; }
-  as_func_return 0
-}
-as_func_failure () {
-  as_func_return 1
-}
-as_func_ret_success () {
-  return 0
-}
-as_func_ret_failure () {
-  return 1
-}
 exitcode=0
-if as_func_success; then
+as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-  :
+as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-else
+as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-  exitcode=1
+as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-  echo as_func_success failed.
+if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then :
-fi
+else
-if as_func_failure; then
+  exitcode=1; echo positional parameters were not saved.
-  exitcode=1
+fi
-  echo as_func_failure succeeded.
+test x\$exitcode = x0 || exit 1"
-fi
+  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
+  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-if as_func_ret_success; then
+  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  :
+  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-else
+test \$(( 1 + 1 )) = 2 || exit 1"
-  exitcode=1
+  if (eval "$as_required") 2>/dev/null; then :
-  echo as_func_ret_success failed.
+  as_have_required=yes
-fi
-if as_func_ret_failure; then
-  exitcode=1
-  echo as_func_ret_failure succeeded.
-fi
-if ( set x; as_func_ret_success y && test x = \"\$1\" ); then
-  :
 else
-  exitcode=1
+  as_have_required=no
-  echo positional parameters were not saved.
 fi
+  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then :
-test \$exitcode = 0) || { (exit 1); exit 1; }
-(
-  as_lineno_1=\$LINENO
-  as_lineno_2=\$LINENO
-  test \"x\$as_lineno_1\" != \"x\$as_lineno_2\" &&
-  test \"x\`expr \$as_lineno_1 + 1\`\" = \"x\$as_lineno_2\") || { (exit 1); exit 1; }
-") 2> /dev/null; then
-  :
 else
-  as_candidate_shells=
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-    as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+as_found=false
 for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  case $as_dir in
+  as_found=:
+  case $as_dir in #(
         /*)
           for as_base in sh bash ksh sh5; do
-             as_candidate_shells="$as_candidate_shells $as_dir/$as_base"
+             # Try only shells that exist, to save several forks.
+             as_shell=$as_dir/$as_base
+             if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
+                    { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then :
+  CONFIG_SHELL=$as_shell as_have_required=yes
+                   if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then :
+  break 2
+fi
+fi
           done;;
       esac
+  as_found=false
 done
+$as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
+              { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then :
+  CONFIG_SHELL=$SHELL as_have_required=yes
+fi; }
 IFS=$as_save_IFS
-      for as_shell in $as_candidate_shells $SHELL; do
+      if test "x$CONFIG_SHELL" != x; then :
-         # Try only shells that exist, to save several forks.
+  # We cannot yet assume a decent shell, so we have to provide a
-         if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
+        # neutralization value for shells without unset; and this also
-                { ("$as_shell") 2> /dev/null <<\_ASEOF
+        # works around shells that cannot unset nonexistent variables.
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then
+        # Preserve -v and -x to the replacement shell.
-  emulate sh
+        BASH_ENV=/dev/null
-  NULLCMD=:
+        ENV=/dev/null
-  # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which
+        (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-  # is contrary to our usage.  Disable this feature.
+        export CONFIG_SHELL
-  alias -g '${1+"$@"}'='"$@"'
+        case $- in # ((((
-  setopt NO_GLOB_SUBST
+          *v*x* | *x*v* ) as_opts=-vx ;;
-else
+          *v* ) as_opts=-v ;;
-  case `(set -o) 2>/dev/null` in
+          *x* ) as_opts=-x ;;
-  *posix*) set -o posix ;;
+          * ) as_opts= ;;
-esac
+        esac
+        exec "$CONFIG_SHELL" $as_opts "$as_myself" ${1+"$@"}
 fi
+    if test x$as_have_required = xno; then :
-:
+  $as_echo "$0: This script requires a shell more modern than all"
-_ASEOF
+  $as_echo "$0: the shells that I found on your system."
-}; then
+  if test x${ZSH_VERSION+set} = xset ; then
-  CONFIG_SHELL=$as_shell
+    $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-               as_have_required=yes
+    $as_echo "$0: be upgraded to zsh 4.3.4 or later."
-               if { "$as_shell" 2> /dev/null <<\_ASEOF
+  else
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then
+    $as_echo "$0: Please tell bug-autoconf@gnu.org and
-  emulate sh
+$0: openssh-unix-dev@mindrot.org about your system,
-  NULLCMD=:
+$0: including any error possibly output before this
-  # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which
+$0: message. Then install a modern shell, or manually run
-  # is contrary to our usage.  Disable this feature.
+$0: the script under such a shell if you do have one."
-  alias -g '${1+"$@"}'='"$@"'
+  fi
-  setopt NO_GLOB_SUBST
+  exit 1
-else
-  case `(set -o) 2>/dev/null` in
-  *posix*) set -o posix ;;
-esac
 fi
+fi
+fi
+SHELL=${CONFIG_SHELL-/bin/sh}
+export SHELL
+# Unset more variables known to interfere with behavior of common tools.
+CLICOLOR_FORCE= GREP_OPTIONS=
+unset CLICOLOR_FORCE GREP_OPTIONS
+## --------------------- ##
-:
+## M4sh Shell Functions. ##
-(as_func_return () {
+## --------------------- ##
-  (exit $1)
+# as_fn_unset VAR
-}
+# ---------------
-as_func_success () {
+# Portably unset VAR.
-  as_func_return 0
+as_fn_unset ()
-}
+{
-as_func_failure () {
+  { eval $1=; unset $1;}
-  as_func_return 1
-}
-as_func_ret_success () {
-  return 0
-}
-as_func_ret_failure () {
-  return 1
 }
+as_unset=as_fn_unset
-exitcode=0
+# as_fn_set_status STATUS
-if as_func_success; then
+# -----------------------
-  :
+# Set $? to STATUS, without forking.
-else
+as_fn_set_status ()
-  exitcode=1
+{
-  echo as_func_success failed.
+  return $1
-fi
+} # as_fn_set_status
-if as_func_failure; then
+# as_fn_exit STATUS
-  exitcode=1
+# -----------------
-  echo as_func_failure succeeded.
+# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-fi
+as_fn_exit ()
+{
+  set +e
+  as_fn_set_status $1
+  exit $1
+} # as_fn_exit
+# as_fn_mkdir_p
+# -------------
+# Create "$as_dir" as a directory, including parents if necessary.
+as_fn_mkdir_p ()
+{
-if as_func_ret_success; then
+  case $as_dir in #(
-  :
+  -*) as_dir=./$as_dir;;
+  esac
+  test -d "$as_dir" || eval $as_mkdir_p || {
+    as_dirs=
+    while :; do
+      case $as_dir in #(
+      *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
+      *) as_qdir=$as_dir;;
+      esac
+      as_dirs="'$as_qdir' $as_dirs"
+      as_dir=`$as_dirname -- "$as_dir" ||
+$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+         X"$as_dir" : 'X\(//\)[^/]' \| \
+         X"$as_dir" : 'X\(//\)$' \| \
+         X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$as_dir" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+            s//\1/
+            q
+          }
+          /^X\(\/\/\)[^/].*/{
+            s//\1/
+            q
+          }
+          /^X\(\/\/\)$/{
+            s//\1/
+            q
+          }
+          /^X\(\/\).*/{
+            s//\1/
+            q
+          }
+          s/.*/./; q'`
+      test -d "$as_dir" && break
+    done
+    test -z "$as_dirs" || eval "mkdir $as_dirs"
+  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
+} # as_fn_mkdir_p
+# as_fn_append VAR VALUE
+# ----------------------
+# Append the text in VALUE to the end of the definition contained in VAR. Take
+# advantage of any shell optimizations that allow amortized linear growth over
+# repeated appends, instead of the typical quadratic growth present in naive
+# implementations.
+if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
+  eval 'as_fn_append ()
+  {
+    eval $1+=\$2
+  }'
 else
-  exitcode=1
+  as_fn_append ()
-  echo as_func_ret_success failed.
+  {
-fi
+    eval $1=\$$1\$2
+  }
-if as_func_ret_failure; then
+fi # as_fn_append
-  exitcode=1
-  echo as_func_ret_failure succeeded.
+# as_fn_arith ARG...
-fi
+# ------------------
+# Perform arithmetic evaluation on the ARGs, and store the result in the
-if ( set x; as_func_ret_success y && test x = "$1" ); then
+# global $as_val. Take advantage of shells that can avoid forks. The arguments
-  :
+# must be portable across $(()) and expr.
+if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
+  eval 'as_fn_arith ()
+  {
+    as_val=$(( $* ))
+  }'
 else
-  exitcode=1
+  as_fn_arith ()
-  echo positional parameters were not saved.
+  {
-fi
+    as_val=`expr "$@" || test $? -eq 1`
+  }
-test $exitcode = 0) || { (exit 1); exit 1; }
+fi # as_fn_arith
-(
-  as_lineno_1=$LINENO
-  as_lineno_2=$LINENO
-  test "x$as_lineno_1" != "x$as_lineno_2" &&
-  test "x`expr $as_lineno_1 + 1`" = "x$as_lineno_2") || { (exit 1); exit 1; }
-_ASEOF
-}; then
-  break
-fi
-fi
-      done
-      if test "x$CONFIG_SHELL" != x; then
-  for as_var in BASH_ENV ENV
-        do ($as_unset $as_var) >/dev/null 2>&1 && $as_unset $as_var
-        done
-        export CONFIG_SHELL
-        exec "$CONFIG_SHELL" "$as_myself" ${1+"$@"}
-fi
-    if test $as_have_required = no; then
-  echo This script requires a shell more modern than all the
-      echo shells that I found on your system.  Please install a
-      echo modern shell, or manually run the script under such a
-      echo shell if you do have one.
-      { (exit 1); exit 1; }
-fi
-fi
-fi
-(eval "as_func_return () {
+# as_fn_error STATUS ERROR [LINENO LOG_FD]
-  (exit \$1)
+# ----------------------------------------
-}
+# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-as_func_success () {
+# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-  as_func_return 0
+# script with STATUS, using 1 if that was 0.
-}
+as_fn_error ()
-as_func_failure () {
+{
-  as_func_return 1
+  as_status=$1; test $as_status -eq 0 && as_status=1
-}
+  if test "$4"; then
-as_func_ret_success () {
+    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  return 0
+    $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-}
+  fi
-as_func_ret_failure () {
+  $as_echo "$as_me: error: $2" >&2
-  return 1
+  as_fn_exit $as_status
-}
+} # as_fn_error
-exitcode=0
+if expr a : '\(a\)' >/dev/null 2>&1 &&
-if as_func_success; then
+   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  :
+  as_expr=expr
 else
-  exitcode=1
+  as_expr=false
-  echo as_func_success failed.
-fi
-if as_func_failure; then
-  exitcode=1
-  echo as_func_failure succeeded.
 fi
-if as_func_ret_success; then
+if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  :
+  as_basename=basename
 else
-  exitcode=1
+  as_basename=false
-  echo as_func_ret_success failed.
-fi
-if as_func_ret_failure; then
-  exitcode=1
-  echo as_func_ret_failure succeeded.
 fi
-if ( set x; as_func_ret_success y && test x = \"\$1\" ); then
+if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  :
+  as_dirname=dirname
 else
-  exitcode=1
+  as_dirname=false
-  echo positional parameters were not saved.
 fi
-test \$exitcode = 0") || {
+as_me=`$as_basename -- "$0" ||
-  echo No shell found that supports shell functions.
+$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-  echo Please tell autoconf@gnu.org about your system,
+         X"$0" : 'X\(//\)$' \| \
-  echo including any error possibly output before this
+         X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-  echo message
+$as_echo X/"$0" |
-}
+    sed '/^.*\/\([^/][^/]*\)\/*$/{
+            s//\1/
+            q
+          }
+          /^X\/\(\/\/\)$/{
+            s//\1/
+            q
+          }
+          /^X\/\(\/\).*/{
+            s//\1/
+            q
+          }
+          s/.*/./; q'`
+# Avoid depending upon Character Ranges.
+as_cr_letters='abcdefghijklmnopqrstuvwxyz'
+as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+as_cr_Letters=$as_cr_letters$as_cr_LETTERS
+as_cr_digits='0123456789'
+as_cr_alnum=$as_cr_Letters$as_cr_digits
-  as_lineno_1=$LINENO
-  as_lineno_2=$LINENO
-  test "x$as_lineno_1" != "x$as_lineno_2" &&
-  test "x`expr $as_lineno_1 + 1`" = "x$as_lineno_2" || {
-  # Create $as_me.lineno as a copy of $as_myself, but with $LINENO
+  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  # uniformly replaced by the line number.  The first 'sed' inserts a
+  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  # line-number line after each line using $LINENO; the second 'sed'
+  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  # does the real work.  The second script uses 'N' to pair each
+  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # line-number line with the line containing $LINENO, and appends
+  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  # trailing '-' during substitution so that $LINENO is not a special
-  # case at line end.
-  # (Raja R Harinath suggested sed '=', and Paul Eggert wrote the
-  # scripts with optimization help from Paolo Bonzini.  Blame Lee
-  # E. McMahon (1931-1989) for sed's syntax.  :-)
  sed -n '
    p
    /[$]LINENO/=
@@ -454,8 +451,7 @@ test \$exitcode = 0") || {
      s/-\n.*//
    ' >$as_me.lineno &&
  chmod +x "$as_me.lineno" ||
-    { echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2
+    { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-   { (exit 1); exit 1; }; }
  # Don't try to exec as it changes $[0], causing all sort of problems
  # (the dirname of $[0] is not the place where we might find the
@@ -465,49 +461,40 @@ test \$exitcode = 0") || {
  exit
 }
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
 ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in
+case `echo -n x` in #(((((
 -n*)
-  case `echo 'x\c'` in
+  case `echo 'xy\c'` in
  *c*) ECHO_T=' ';;     # ECHO_T is single tab character.
-  *)   ECHO_C='\c';;
+  xy)  ECHO_C='\c';;
+  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
+       ECHO_T=' ';;
  esac;;
 *)
  ECHO_N='-n';;
 esac
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
 rm -f conf$$ conf$$.exe conf$$.file
 if test -d conf$$.dir; then
  rm -f conf$$.dir/conf$$.file
 else
  rm -f conf$$.dir
-  mkdir conf$$.dir
+  mkdir conf$$.dir 2>/dev/null
-fi
+fi
-echo >conf$$.file
+if (echo >conf$$.file) 2>/dev/null; then
-if ln -s conf$$.file conf$$ 2>/dev/null; then
+  if ln -s conf$$.file conf$$ 2>/dev/null; then
-  as_ln_s='ln -s'
+    as_ln_s='ln -s'
-  # ... but there are two gotchas:
+    # ... but there are two gotchas:
-  # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
+    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
-  # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
+    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
-  # In both cases, we have to default to `cp -p'.
+    # In both cases, we have to default to `cp -p'.
-  ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
+    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
+      as_ln_s='cp -p'
+  elif ln conf$$.file conf$$ 2>/dev/null; then
+    as_ln_s=ln
+  else
    as_ln_s='cp -p'
-elif ln conf$$.file conf$$ 2>/dev/null; then
+  fi
-  as_ln_s=ln
 else
  as_ln_s='cp -p'
 fi
@@ -515,7 +502,7 @@ rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
 rmdir conf$$.dir 2>/dev/null
 if mkdir -p . 2>/dev/null; then
-  as_mkdir_p=:
+  as_mkdir_p='mkdir -p "$as_dir"'
 else
  test -d ./-p && rmdir ./-p
  as_mkdir_p=false
@@ -532,12 +519,12 @@ else
  as_test_x='
    eval sh -c '\''
      if test -d "$1"; then
-        test -d "$1/.";
+        test -d "$1/.";
      else
-        case $1 in
+        case $1 in #(
-        -*)set "./$1";;
+        -*)set "./$1";;
        esac;
-        case `ls -ld'$as_ls_L_option' "$1" 2>/dev/null` in
+        case `ls -ld'$as_ls_L_option' "$1" 2>/dev/null` in #((
        ???[sx]*):;;*)false;;esac;fi
    '\'' sh
  '
@@ -551,11 +538,11 @@ as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
 as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
+test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 7<&0 </dev/null 6>&1
+exec 6>&1
 # Name of the host.
-# hostname on some systems (SVR3.2, Linux) returns a bogus exit status,
+# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
 # so uname gets run too.
 ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
@@ -570,7 +557,6 @@ cross_compiling=no
 subdirs=
 MFLAGS=
 MAKEFLAGS=
-SHELL=${CONFIG_SHELL-/bin/sh}
 # Identity of this package.
 PACKAGE_NAME='OpenSSH'
@@ -578,6 +564,7 @@ PACKAGE_TARNAME='openssh'
 PACKAGE_VERSION='Portable'
 PACKAGE_STRING='OpenSSH Portable'
 PACKAGE_BUGREPORT='openssh-unix-dev@mindrot.org'
+PACKAGE_URL=''
 ac_unique_file="ssh.c"
 # Factoring default headers for most tests.
@@ -616,125 +603,161 @@ ac_includes_default="\
 # include <unistd.h>
 #endif"
-ac_subst_vars='SHELL
+ac_subst_vars='LTLIBOBJS
-PATH_SEPARATOR
-PACKAGE_NAME
-PACKAGE_TARNAME
-PACKAGE_VERSION
-PACKAGE_STRING
-PACKAGE_BUGREPORT
-exec_prefix
-prefix
-program_transform_name
-bindir
-sbindir
-libexecdir
-datarootdir
-datadir
-sysconfdir
-sharedstatedir
-localstatedir
-includedir
-oldincludedir
-docdir
-infodir
-htmldir
-dvidir
-pdfdir
-psdir
-libdir
-localedir
-mandir
-DEFS
-ECHO_C
-ECHO_N
-ECHO_T
-LIBS
-build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-CPPFLAGS
-ac_ct_CC
-EXEEXT
-OBJEXT
-build
-build_cpu
-build_vendor
-build_os
-host
-host_cpu
-host_vendor
-host_os
-CPP
-GREP
-EGREP
-AWK
-RANLIB
-INSTALL_PROGRAM
-INSTALL_SCRIPT
-INSTALL_DATA
-AR
-CAT
-KILL
-PERL
-SED
-ENT
-TEST_MINUS_S_SH
-SH
-GROFF
-NROFF
-MANDOC
-TEST_SHELL
-MANFMT
-PATH_GROUPADD_PROG
-PATH_USERADD_PROG
-MAKE_PACKAGE_SUPPORTED
-STARTUP_SCRIPT_SHELL
-LOGIN_PROGRAM_FALLBACK
-PATH_PASSWD_PROG
-LD
-PKGCONFIG
-LIBEDIT
-TEST_SSH_SHA256
-TEST_SSH_ECC
-COMMENT_OUT_ECC
-INSTALL_SSH_RAND_HELPER
-SSH_PRIVSEP_USER
-PROG_LS
-PROG_NETSTAT
-PROG_ARP
-PROG_IFCONFIG
-PROG_JSTAT
-PROG_PS
-PROG_SAR
-PROG_W
-PROG_WHO
-PROG_LAST
-PROG_LASTLOG
-PROG_DF
-PROG_VMSTAT
-PROG_UPTIME
-PROG_IPCS
-PROG_TAIL
-INSTALL_SSH_PRNG_CMDS
-SSHLIBS
-SSHDLIBS
-KRB5CONF
-PRIVSEP_PATH
-xauth_path
-STRIP_OPT
-XAUTH_PATH
-MANTYPE
-mansubdir
-user_path
-piddir
-TEST_SSH_IPV6
 LIBOBJS
-LTLIBOBJS'
+TEST_SSH_IPV6
+piddir
+user_path
+mansubdir
+MANTYPE
+XAUTH_PATH
+STRIP_OPT
+xauth_path
+PRIVSEP_PATH
+KRB5CONF
+SSHDLIBS
+SSHLIBS
+SSH_PRIVSEP_USER
+COMMENT_OUT_ECC
+TEST_SSH_ECC
+TEST_SSH_SHA256
+LIBEDIT
+PKGCONFIG
+LD
+PATH_PASSWD_PROG
+LOGIN_PROGRAM_FALLBACK
+STARTUP_SCRIPT_SHELL
+MAKE_PACKAGE_SUPPORTED
+PATH_USERADD_PROG
+PATH_GROUPADD_PROG
+MANFMT
+TEST_SHELL
+MANDOC
+NROFF
+GROFF
+SH
+TEST_MINUS_S_SH
+ENT
+SED
+PERL
+KILL
+CAT
+AR
+INSTALL_DATA
+INSTALL_SCRIPT
+INSTALL_PROGRAM
+RANLIB
+AWK
+EGREP
+GREP
+CPP
+host_os
+host_vendor
+host_cpu
+host
+build_os
+build_vendor
+build_cpu
+build
+OBJEXT
+EXEEXT
+ac_ct_CC
+CPPFLAGS
+LDFLAGS
+CFLAGS
+CC
+target_alias
+host_alias
+build_alias
+LIBS
+ECHO_T
+ECHO_N
+ECHO_C
+DEFS
+mandir
+localedir
+libdir
+psdir
+pdfdir
+dvidir
+htmldir
+infodir
+docdir
+oldincludedir
+includedir
+localstatedir
+sharedstatedir
+sysconfdir
+datadir
+datarootdir
+libexecdir
+sbindir
+bindir
+program_transform_name
+prefix
+exec_prefix
+PACKAGE_URL
+PACKAGE_BUGREPORT
+PACKAGE_STRING
+PACKAGE_VERSION
+PACKAGE_TARNAME
+PACKAGE_NAME
+PATH_SEPARATOR
+SHELL'
 ac_subst_files=''
+ac_user_opts='
+enable_option_checking
+enable_largefile
+with_stackprotect
+with_rpath
+with_cflags
+with_cppflags
+with_ldflags
+with_libs
+with_Werror
+with_solaris_contracts
+with_solaris_projects
+with_osfsia
+with_zlib
+with_zlib_version_check
+with_skey
+with_tcp_wrappers
+with_libedit
+with_audit
+with_ssl_dir
+with_openssl_header_check
+with_ssl_engine
+with_prngd_port
+with_prngd_socket
+with_pam
+with_privsep_user
+with_sandbox
+with_selinux
+with_kerberos5
+with_privsep_path
+with_xauth
+enable_strip
+with_maildir
+with_mantype
+with_md5_passwords
+with_shadow
+with_ipaddr_display
+enable_etc_default_login
+with_default_path
+with_superuser_path
+with_4in6
+with_bsd_auth
+with_pid_dir
+enable_lastlog
+enable_utmp
+enable_utmpx
+enable_wtmp
+enable_wtmpx
+enable_libutil
+enable_pututline
+enable_pututxline
+with_lastlog
+'
      ac_precious_vars='build_alias
 host_alias
 target_alias
@@ -749,6 +772,8 @@ CPP'
 # Initialize some variables set by options.
 ac_init_help=
 ac_init_version=false
+ac_unrecognized_opts=
+ac_unrecognized_sep=
 # The variables have the same names as the options, with
 # dashes changed to underlines.
 cache_file=/dev/null
@@ -804,8 +829,9 @@ do
  fi
  case $ac_option in
-  *=*)  ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
+  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *)    ac_optarg=yes ;;
+  *=)   ac_optarg= ;;
+  *)    ac_optarg=yes ;;
  esac
  # Accept the important Cygnus configure options, so we can diagnose typos.
@@ -847,13 +873,20 @@ do
    datarootdir=$ac_optarg ;;
  -disable-* | --disable-*)
-    ac_feature=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
+    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
    # Reject names that are not valid shell variable names.
-    expr "x$ac_feature" : ".*[^-._$as_cr_alnum]" >/dev/null &&
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      { echo "$as_me: error: invalid feature name: $ac_feature" >&2
+      as_fn_error $? "invalid feature name: $ac_useropt"
-   { (exit 1); exit 1; }; }
+    ac_useropt_orig=$ac_useropt
-    ac_feature=`echo $ac_feature | sed 's/[-.]/_/g'`
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    eval enable_$ac_feature=no ;;
+    case $ac_user_opts in
+      *"
+"enable_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
+         ac_unrecognized_sep=', ';;
+    esac
+    eval enable_$ac_useropt=no ;;
  -docdir | --docdir | --docdi | --doc | --do)
    ac_prev=docdir ;;
@@ -866,13 +899,20 @@ do
    dvidir=$ac_optarg ;;
  -enable-* | --enable-*)
-    ac_feature=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
+    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
    # Reject names that are not valid shell variable names.
-    expr "x$ac_feature" : ".*[^-._$as_cr_alnum]" >/dev/null &&
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      { echo "$as_me: error: invalid feature name: $ac_feature" >&2
+      as_fn_error $? "invalid feature name: $ac_useropt"
-   { (exit 1); exit 1; }; }
+    ac_useropt_orig=$ac_useropt
-    ac_feature=`echo $ac_feature | sed 's/[-.]/_/g'`
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    eval enable_$ac_feature=\$ac_optarg ;;
+    case $ac_user_opts in
+      *"
+"enable_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
+         ac_unrecognized_sep=', ';;
+    esac
+    eval enable_$ac_useropt=\$ac_optarg ;;
  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
@@ -1063,22 +1103,36 @@ do
    ac_init_version=: ;;
  -with-* | --with-*)
-    ac_package=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
+    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
    # Reject names that are not valid shell variable names.
-    expr "x$ac_package" : ".*[^-._$as_cr_alnum]" >/dev/null &&
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      { echo "$as_me: error: invalid package name: $ac_package" >&2
+      as_fn_error $? "invalid package name: $ac_useropt"
-   { (exit 1); exit 1; }; }
+    ac_useropt_orig=$ac_useropt
-    ac_package=`echo $ac_package | sed 's/[-.]/_/g'`
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    eval with_$ac_package=\$ac_optarg ;;
+    case $ac_user_opts in
+      *"
+"with_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
+         ac_unrecognized_sep=', ';;
+    esac
+    eval with_$ac_useropt=\$ac_optarg ;;
  -without-* | --without-*)
-    ac_package=`expr "x$ac_option" : 'x-*without-\(.*\)'`
+    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
    # Reject names that are not valid shell variable names.
-    expr "x$ac_package" : ".*[^-._$as_cr_alnum]" >/dev/null &&
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      { echo "$as_me: error: invalid package name: $ac_package" >&2
+      as_fn_error $? "invalid package name: $ac_useropt"
-   { (exit 1); exit 1; }; }
+    ac_useropt_orig=$ac_useropt
-    ac_package=`echo $ac_package | sed 's/[-.]/_/g'`
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    eval with_$ac_package=no ;;
+    case $ac_user_opts in
+      *"
+"with_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
+         ac_unrecognized_sep=', ';;
+    esac
+    eval with_$ac_useropt=no ;;
  --x)
    # Obsolete; use --with-x.
@@ -1098,26 +1152,26 @@ do
  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
    x_libraries=$ac_optarg ;;
-  -*) { echo "$as_me: error: unrecognized option: $ac_option
+  -*) as_fn_error $? "unrecognized option: \`$ac_option'
-Try \`$0 --help' for more information." >&2
+Try \`$0 --help' for more information"
-   { (exit 1); exit 1; }; }
    ;;
  *=*)
    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
    # Reject names that are not valid shell variable names.
-    expr "x$ac_envvar" : ".*[^_$as_cr_alnum]" >/dev/null &&
+    case $ac_envvar in #(
-      { echo "$as_me: error: invalid variable name: $ac_envvar" >&2
+      '' | [0-9]* | *[!_$as_cr_alnum]* )
-   { (exit 1); exit 1; }; }
+      as_fn_error $? "invalid variable name: \`$ac_envvar'" ;;
+    esac
    eval $ac_envvar=\$ac_optarg
    export $ac_envvar ;;
  *)
    # FIXME: should be removed in autoconf 3.0.
-    echo "$as_me: WARNING: you should use --build, --host, --target" >&2
+    $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2
    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      echo "$as_me: WARNING: invalid host type: $ac_option" >&2
+      $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : ${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}
+    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
    ;;
  esac
@@ -1125,23 +1179,36 @@ done
 if test -n "$ac_prev"; then
  ac_option=--`echo $ac_prev | sed 's/_/-/g'`
-  { echo "$as_me: error: missing argument to $ac_option" >&2
+  as_fn_error $? "missing argument to $ac_option"
-   { (exit 1); exit 1; }; }
 fi
-# Be sure to have absolute directory names.
+if test -n "$ac_unrecognized_opts"; then
+  case $enable_option_checking in
+    no) ;;
+    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
+    *)     $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
+  esac
+fi
+# Check all directory arguments for consistency.
 for ac_var in   exec_prefix prefix bindir sbindir libexecdir datarootdir \
                datadir sysconfdir sharedstatedir localstatedir includedir \
                oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
                libdir localedir mandir
 do
  eval ac_val=\$$ac_var
+  # Remove trailing slashes.
+  case $ac_val in
+    */ )
+      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
+      eval $ac_var=\$ac_val;;
+  esac
+  # Be sure to have absolute directory names.
  case $ac_val in
    [\\/$]* | ?:[\\/]* )  continue;;
    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
  esac
-  { echo "$as_me: error: expected an absolute directory name for --$ac_var: $ac_val" >&2
+  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-   { (exit 1); exit 1; }; }
 done
 # There might be people who depend on the old broken behavior: `$host'
@@ -1155,8 +1222,8 @@ target=$target_alias
 if test "x$host_alias" != x; then
  if test "x$build_alias" = x; then
    cross_compiling=maybe
-    echo "$as_me: WARNING: If you wanted to set the --build type, don't use --host.
+    $as_echo "$as_me: WARNING: if you wanted to set the --build type, don't use --host.
-    If a cross compiler is detected then cross compile mode will be used." >&2
+    If a cross compiler is detected then cross compile mode will be used" >&2
  elif test "x$build_alias" != "x$host_alias"; then
    cross_compiling=yes
  fi
@@ -1171,23 +1238,21 @@ test "$silent" = yes && exec 6>/dev/null
 ac_pwd=`pwd` && test -n "$ac_pwd" &&
 ac_ls_di=`ls -di .` &&
 ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  { echo "$as_me: error: Working directory cannot be determined" >&2
+  as_fn_error $? "working directory cannot be determined"
-   { (exit 1); exit 1; }; }
 test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  { echo "$as_me: error: pwd does not report name of working directory" >&2
+  as_fn_error $? "pwd does not report name of working directory"
-   { (exit 1); exit 1; }; }
 # Find the source files, if location was not specified.
 if test -z "$srcdir"; then
  ac_srcdir_defaulted=yes
  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$0" ||
+  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$0" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-         X"$0" : 'X\(//\)[^/]' \| \
+         X"$as_myself" : 'X\(//\)[^/]' \| \
-         X"$0" : 'X\(//\)$' \| \
+         X"$as_myself" : 'X\(//\)$' \| \
-         X"$0" : 'X\(/\)' \| . 2>/dev/null ||
+         X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-echo X"$0" |
+$as_echo X"$as_myself" |
    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
            s//\1/
            q
@@ -1214,13 +1279,11 @@ else
 fi
 if test ! -r "$srcdir/$ac_unique_file"; then
  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  { echo "$as_me: error: cannot find sources ($ac_unique_file) in $srcdir" >&2
+  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-   { (exit 1); exit 1; }; }
 fi
 ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work"
 ac_abs_confdir=`(
-        cd "$srcdir" && test -r "./$ac_unique_file" || { echo "$as_me: error: $ac_msg" >&2
+        cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-   { (exit 1); exit 1; }; }
        pwd)`
 # When building in place, set srcdir=.
 if test "$ac_abs_confdir" = "$ac_pwd"; then
@@ -1260,7 +1323,7 @@ Configuration:
      --help=short        display options specific to this package
      --help=recursive    display the short help of all the included packages
  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print \`checking...' messages
+  -q, --quiet, --silent   do not print \`checking ...' messages
      --cache-file=FILE   cache test results in FILE [disabled]
  -C, --config-cache      alias for \`--cache-file=config.cache'
  -n, --no-create         do not create output files
@@ -1268,9 +1331,9 @@ Configuration:
 Installation directories:
  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          [$ac_default_prefix]
+                          [$ac_default_prefix]
  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          [PREFIX]
+                          [PREFIX]
 By default, \`make install' will install all the files in
 \`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc.  You can specify
@@ -1280,25 +1343,25 @@ for instance \`--prefix=\$HOME'.
 For better control, use the options below.
 Fine tuning of the installation directories:
-  --bindir=DIR           user executables [EPREFIX/bin]
+  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR          system admin executables [EPREFIX/sbin]
+  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR       program executables [EPREFIX/libexec]
+  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR       read-only single-machine data [PREFIX/etc]
+  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR   modifiable architecture-independent data [PREFIX/com]
+  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR    modifiable single-machine data [PREFIX/var]
+  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --libdir=DIR           object code libraries [EPREFIX/lib]
+  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR       C header files [PREFIX/include]
+  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR    C header files for non-gcc [/usr/include]
+  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR      read-only arch.-independent data root [PREFIX/share]
+  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR          read-only architecture-independent data [DATAROOTDIR]
+  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR          info documentation [DATAROOTDIR/info]
+  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR        locale-dependent data [DATAROOTDIR/locale]
+  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR           man documentation [DATAROOTDIR/man]
+  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR           documentation root [DATAROOTDIR/doc/openssh]
+  --docdir=DIR            documentation root [DATAROOTDIR/doc/openssh]
-  --htmldir=DIR          html documentation [DOCDIR]
+  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR           dvi documentation [DOCDIR]
+  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR           pdf documentation [DOCDIR]
+  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR            ps documentation [DOCDIR]
+  --psdir=DIR             ps documentation [DOCDIR]
 _ACEOF
  cat <<\_ACEOF
@@ -1316,6 +1379,7 @@ if test -n "$ac_init_help"; then
  cat <<\_ACEOF
 Optional Features:
+  --disable-option-checking  ignore unrecognized --enable/--with options
  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
  --disable-largefile     omit support for large files
@@ -1352,16 +1416,16 @@ Optional Packages:
  --with-ssl-dir=PATH     Specify path to OpenSSL installation
  --without-openssl-header-check Disable OpenSSL version consistency check
  --with-ssl-engine       Enable OpenSSL (hardware) ENGINE support
-  --with-pam              Enable PAM support
-  --with-rand-helper      Use subprocess to gather strong randomness
  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT
  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)
-  --with-entropy-timeout  Specify entropy gathering command timeout (msec)
+  --with-pam              Enable PAM support
  --with-privsep-user=user Specify non-privileged user for privilege separation
+  --with-sandbox=style    Specify privilege separation sandbox (no, darwin, rlimit, systrace)
  --with-selinux          Enable SELinux support
  --with-kerberos5=PATH   Enable Kerberos 5 support
  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)
  --with-xauth=PATH       Specify path to xauth program
+  --with-maildir=/path/to/mail    Specify your system mail directory
  --with-mantype=man|cat|doc  Set man page type
  --with-md5-passwords    Enable use of MD5 passwords
  --without-shadow        Disable shadow password support
@@ -1379,7 +1443,7 @@ Some influential environment variables:
  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
              nonstandard directory <lib dir>
  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    C/C++/Objective C preprocessor flags, e.g. -I<include dir> if
+  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
              you have headers in a nonstandard directory <include dir>
  CPP         C preprocessor
@@ -1394,15 +1458,17 @@ fi
 if test "$ac_init_help" = "recursive"; then
  # If there are subdirs, report their specific --help.
  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" || continue
+    test -d "$ac_dir" ||
+      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
+      continue
    ac_builddir=.
 case "$ac_dir" in
 .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
 *)
-  ac_dir_suffix=/`echo "$ac_dir" | sed 's,^\.[\\/],,'`
+  ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`echo "$ac_dir_suffix" | sed 's,/[^\\/]*,/..,g;s,/,,'`
+  ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
  case $ac_top_builddir_sub in
  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
@@ -1438,7 +1504,7 @@ ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
      echo &&
      $SHELL "$ac_srcdir/configure" --help=recursive
    else
-      echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2
+      $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2
    fi || ac_status=$?
    cd "$ac_pwd" || { ac_status=$?; break; }
  done
@@ -1448,21 +1514,711 @@ test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
  cat <<\_ACEOF
 OpenSSH configure Portable
-generated by GNU Autoconf 2.61
+generated by GNU Autoconf 2.68
-Copyright (C) 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001,
+Copyright (C) 2010 Free Software Foundation, Inc.
-2002, 2003, 2004, 2005, 2006 Free Software Foundation, Inc.
 This configure script is free software; the Free Software Foundation
 gives unlimited permission to copy, distribute and modify it.
 _ACEOF
  exit
 fi
+## ------------------------ ##
+## Autoconf initialization. ##
+## ------------------------ ##
+# ac_fn_c_try_compile LINENO
+# --------------------------
+# Try to compile conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_compile ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  rm -f conftest.$ac_objext
+  if { { ac_try="$ac_compile"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compile") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && {
+         test -z "$ac_c_werror_flag" ||
+         test ! -s conftest.err
+       } && test -s conftest.$ac_objext; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+        ac_retval=1
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+} # ac_fn_c_try_compile
+# ac_fn_c_try_run LINENO
+# ----------------------
+# Try to link conftest.$ac_ext, and return whether this succeeded. Assumes
+# that executables *can* be run.
+ac_fn_c_try_run ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && { ac_try='./conftest$ac_exeext'
+  { { case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_try") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: program exited with status $ac_status" >&5
+       $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+       ac_retval=$ac_status
+fi
+  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+} # ac_fn_c_try_run
+# ac_fn_c_try_cpp LINENO
+# ----------------------
+# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_cpp ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if { { ac_try="$ac_cpp conftest.$ac_ext"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } > conftest.i && {
+         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
+         test ! -s conftest.err
+       }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+    ac_retval=1
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+} # ac_fn_c_try_cpp
+# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
+# -------------------------------------------------------
+# Tests whether HEADER exists and can be compiled using the include files in
+# INCLUDES, setting the cache variable VAR accordingly.
+ac_fn_c_check_header_compile ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+#include <$2>
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+} # ac_fn_c_check_header_compile
+# ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES
+# ---------------------------------------------
+# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
+# accordingly.
+ac_fn_c_check_decl ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  as_decl_name=`echo $2|sed 's/ *(.*//'`
+  as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
+$as_echo_n "checking whether $as_decl_name is declared... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+#ifndef $as_decl_name
+#ifdef __cplusplus
+  (void) $as_decl_use;
+#else
+  (void) $as_decl_name;
+#endif
+#endif
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+} # ac_fn_c_check_decl
+# ac_fn_c_try_link LINENO
+# -----------------------
+# Try to link conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_link ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  rm -f conftest.$ac_objext conftest$ac_exeext
+  if { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && {
+         test -z "$ac_c_werror_flag" ||
+         test ! -s conftest.err
+       } && test -s conftest$ac_exeext && {
+         test "$cross_compiling" = yes ||
+         $as_test_x conftest$ac_exeext
+       }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+        ac_retval=1
+fi
+  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
+  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
+  # interfere with the next link command; also delete a directory that is
+  # left behind by Apple's compiler.  We do this before executing the actions.
+  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+} # ac_fn_c_try_link
+# ac_fn_c_check_header_mongrel LINENO HEADER VAR INCLUDES
+# -------------------------------------------------------
+# Tests whether HEADER exists, giving a warning if it cannot be compiled using
+# the include files in INCLUDES and setting the cache variable VAR
+# accordingly.
+ac_fn_c_check_header_mongrel ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if eval \${$3+:} false; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+else
+  # Is the header compilable?
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 usability" >&5
+$as_echo_n "checking $2 usability... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+#include <$2>
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_header_compiler=yes
+else
+  ac_header_compiler=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_compiler" >&5
+$as_echo "$ac_header_compiler" >&6; }
+# Is the header present?
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 presence" >&5
+$as_echo_n "checking $2 presence... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <$2>
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+  ac_header_preproc=yes
+else
+  ac_header_preproc=no
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_preproc" >&5
+$as_echo "$ac_header_preproc" >&6; }
+# So?  What about this header?
+case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in #((
+  yes:no: )
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&5
+$as_echo "$as_me: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&2;}
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
+$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
+    ;;
+  no:yes:* )
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: present but cannot be compiled" >&5
+$as_echo "$as_me: WARNING: $2: present but cannot be compiled" >&2;}
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2:     check for missing prerequisite headers?" >&5
+$as_echo "$as_me: WARNING: $2:     check for missing prerequisite headers?" >&2;}
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: see the Autoconf documentation" >&5
+$as_echo "$as_me: WARNING: $2: see the Autoconf documentation" >&2;}
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2:     section \"Present But Cannot Be Compiled\"" >&5
+$as_echo "$as_me: WARNING: $2:     section \"Present But Cannot Be Compiled\"" >&2;}
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
+$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
+( $as_echo "## ------------------------------------------- ##
+## Report this to openssh-unix-dev@mindrot.org ##
+## ------------------------------------------- ##"
+     ) | sed "s/^/$as_me: WARNING:     /" >&2
+    ;;
+esac
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  eval "$3=\$ac_header_compiler"
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+} # ac_fn_c_check_header_mongrel
+# ac_fn_c_check_func LINENO FUNC VAR
+# ----------------------------------
+# Tests whether FUNC exists, setting the cache variable VAR accordingly
+ac_fn_c_check_func ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
+   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
+#define $2 innocuous_$2
+/* System header to define __stub macros and hopefully few prototypes,
+    which can conflict with char $2 (); below.
+    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+    <limits.h> exists even on freestanding compilers.  */
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+#undef $2
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char $2 ();
+/* The GNU C library defines this for functions which it implements
+    to always fail with ENOSYS.  Some functions are actually named
+    something starting with __ and the normal name is an alias.  */
+#if defined __stub_$2 || defined __stub___$2
+choke me
+#endif
+int
+main ()
+{
+return $2 ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+} # ac_fn_c_check_func
+# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
+# -------------------------------------------
+# Tests whether TYPE exists after having included INCLUDES, setting cache
+# variable VAR accordingly.
+ac_fn_c_check_type ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  eval "$3=no"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof ($2))
+         return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof (($2)))
+            return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+else
+  eval "$3=yes"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+} # ac_fn_c_check_type
+# ac_fn_c_compute_int LINENO EXPR VAR INCLUDES
+# --------------------------------------------
+# Tries to find the compile-time value of EXPR in a program that includes
+# INCLUDES, setting VAR accordingly. Returns whether the value could be
+# computed
+ac_fn_c_compute_int ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if test "$cross_compiling" = yes; then
+    # Depending upon the size, compute the lo and hi bounds.
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) >= 0)];
+test_array [0] = 0
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_lo=0 ac_mid=0
+  while :; do
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) <= $ac_mid)];
+test_array [0] = 0
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_hi=$ac_mid; break
+else
+  as_fn_arith $ac_mid + 1 && ac_lo=$as_val
+                        if test $ac_lo -le $ac_mid; then
+                          ac_lo= ac_hi=
+                          break
+                        fi
+                        as_fn_arith 2 '*' $ac_mid + 1 && ac_mid=$as_val
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  done
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) < 0)];
+test_array [0] = 0
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_hi=-1 ac_mid=-1
+  while :; do
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) >= $ac_mid)];
+test_array [0] = 0
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_lo=$ac_mid; break
+else
+  as_fn_arith '(' $ac_mid ')' - 1 && ac_hi=$as_val
+                        if test $ac_mid -le $ac_hi; then
+                          ac_lo= ac_hi=
+                          break
+                        fi
+                        as_fn_arith 2 '*' $ac_mid && ac_mid=$as_val
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  done
+else
+  ac_lo= ac_hi=
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+# Binary search between lo and hi bounds.
+while test "x$ac_lo" != "x$ac_hi"; do
+  as_fn_arith '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo && ac_mid=$as_val
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) <= $ac_mid)];
+test_array [0] = 0
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_hi=$ac_mid
+else
+  as_fn_arith '(' $ac_mid ')' + 1 && ac_lo=$as_val
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+done
+case $ac_lo in #((
+?*) eval "$3=\$ac_lo"; ac_retval=0 ;;
+'') ac_retval=1 ;;
+esac
+  else
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+static long int longval () { return $2; }
+static unsigned long int ulongval () { return $2; }
+#include <stdio.h>
+#include <stdlib.h>
+int
+main ()
+{
+  FILE *f = fopen ("conftest.val", "w");
+  if (! f)
+    return 1;
+  if (($2) < 0)
+    {
+      long int i = longval ();
+      if (i != ($2))
+        return 1;
+      fprintf (f, "%ld", i);
+    }
+  else
+    {
+      unsigned long int i = ulongval ();
+      if (i != ($2))
+        return 1;
+      fprintf (f, "%lu", i);
+    }
+  /* Do not output a trailing newline, as this causes \r\n confusion
+     on some platforms.  */
+  return ferror (f) || fclose (f) != 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  echo >>conftest.val; read $3 <conftest.val; ac_retval=0
+else
+  ac_retval=1
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+rm -f conftest.val
+  fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+} # ac_fn_c_compute_int
+# ac_fn_c_check_member LINENO AGGR MEMBER VAR INCLUDES
+# ----------------------------------------------------
+# Tries to find if the field MEMBER exists in type AGGR, after including
+# INCLUDES, setting cache variable VAR accordingly.
+ac_fn_c_check_member ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2.$3" >&5
+$as_echo_n "checking for $2.$3... " >&6; }
+if eval \${$4+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$5
+int
+main ()
+{
+static $2 ac_aggr;
+if (ac_aggr.$3)
+return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$4=yes"
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$5
+int
+main ()
+{
+static $2 ac_aggr;
+if (sizeof ac_aggr.$3)
+return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$4=yes"
+else
+  eval "$4=no"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$4
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+} # ac_fn_c_check_member
 cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 It was created by OpenSSH $as_me Portable, which was
-generated by GNU Autoconf 2.61.  Invocation command line was
+generated by GNU Autoconf 2.68.  Invocation command line was
  $ $0 $@
@@ -1498,8 +2254,8 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  echo "PATH: $as_dir"
+    $as_echo "PATH: $as_dir"
-done
+  done
 IFS=$as_save_IFS
 } >&5
@@ -1533,12 +2289,12 @@ do
    | -silent | --silent | --silen | --sile | --sil)
      continue ;;
    *\'*)
-      ac_arg=`echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
+      ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
    esac
    case $ac_pass in
-    1) ac_configure_args0="$ac_configure_args0 '$ac_arg'" ;;
+    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
    2)
-      ac_configure_args1="$ac_configure_args1 '$ac_arg'"
+      as_fn_append ac_configure_args1 " '$ac_arg'"
      if test $ac_must_keep_next = true; then
        ac_must_keep_next=false # Got value, back to normal.
      else
@@ -1554,13 +2310,13 @@ do
          -* ) ac_must_keep_next=true ;;
        esac
      fi
-      ac_configure_args="$ac_configure_args '$ac_arg'"
+      as_fn_append ac_configure_args " '$ac_arg'"
      ;;
    esac
  done
 done
-$as_unset ac_configure_args0 || test "${ac_configure_args0+set}" != set || { ac_configure_args0=; export ac_configure_args0; }
+{ ac_configure_args0=; unset ac_configure_args0;}
-$as_unset ac_configure_args1 || test "${ac_configure_args1+set}" != set || { ac_configure_args1=; export ac_configure_args1; }
+{ ac_configure_args1=; unset ac_configure_args1;}
 # When interrupted or exit'd, cleanup temporary files, and complete
 # config.log.  We remove comments because anyway the quotes in there
@@ -1572,11 +2328,9 @@ trap 'exit_status=$?
  {
    echo
-    cat <<\_ASBOX
+    $as_echo "## ---------------- ##
-## ---------------- ##
 ## Cache variables. ##
-## ---------------- ##
+## ---------------- ##"
-_ASBOX
    echo
    # The following way of writing the cache mishandles newlines in values,
 (
@@ -1585,12 +2339,13 @@ _ASBOX
    case $ac_val in #(
    *${as_nl}*)
      case $ac_var in #(
-      *_cv_*) { echo "$as_me:$LINENO: WARNING: Cache variable $ac_var contains a newline." >&5
+      *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-echo "$as_me: WARNING: Cache variable $ac_var contains a newline." >&2;} ;;
+$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
      esac
      case $ac_var in #(
      _ | IFS | as_nl) ;; #(
-      *) $as_unset $ac_var ;;
+      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
+      *) { eval $ac_var=; unset $ac_var;} ;;
      esac ;;
    esac
  done
@@ -1609,128 +2364,136 @@ echo "$as_me: WARNING: Cache variable $ac_var contains a newline." >&2;} ;;
 )
    echo
-    cat <<\_ASBOX
+    $as_echo "## ----------------- ##
-## ----------------- ##
 ## Output variables. ##
-## ----------------- ##
+## ----------------- ##"
-_ASBOX
    echo
    for ac_var in $ac_subst_vars
    do
      eval ac_val=\$$ac_var
      case $ac_val in
-      *\'\''*) ac_val=`echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
+      *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
      esac
-      echo "$ac_var='\''$ac_val'\''"
+      $as_echo "$ac_var='\''$ac_val'\''"
    done | sort
    echo
    if test -n "$ac_subst_files"; then
-      cat <<\_ASBOX
+      $as_echo "## ------------------- ##
-## ------------------- ##
 ## File substitutions. ##
-## ------------------- ##
+## ------------------- ##"
-_ASBOX
      echo
      for ac_var in $ac_subst_files
      do
        eval ac_val=\$$ac_var
        case $ac_val in
-        *\'\''*) ac_val=`echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
+        *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
        esac
-        echo "$ac_var='\''$ac_val'\''"
+        $as_echo "$ac_var='\''$ac_val'\''"
      done | sort
      echo
    fi
    if test -s confdefs.h; then
-      cat <<\_ASBOX
+      $as_echo "## ----------- ##
-## ----------- ##
 ## confdefs.h. ##
-## ----------- ##
+## ----------- ##"
-_ASBOX
      echo
      cat confdefs.h
      echo
    fi
    test "$ac_signal" != 0 &&
-      echo "$as_me: caught signal $ac_signal"
+      $as_echo "$as_me: caught signal $ac_signal"
-    echo "$as_me: exit $exit_status"
+    $as_echo "$as_me: exit $exit_status"
  } >&5
  rm -f core *.core core.conftest.* &&
    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
    exit $exit_status
 ' 0
 for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; { (exit 1); exit 1; }' $ac_signal
+  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
 done
 ac_signal=0
 # confdefs.h avoids OS command line length limits that DEFS can exceed.
 rm -f -r conftest* confdefs.h
+$as_echo "/* confdefs.h */" > confdefs.h
 # Predefined preprocessor variables.
 cat >>confdefs.h <<_ACEOF
 #define PACKAGE_NAME "$PACKAGE_NAME"
 _ACEOF
 cat >>confdefs.h <<_ACEOF
 #define PACKAGE_TARNAME "$PACKAGE_TARNAME"
 _ACEOF
 cat >>confdefs.h <<_ACEOF
 #define PACKAGE_VERSION "$PACKAGE_VERSION"
 _ACEOF
 cat >>confdefs.h <<_ACEOF
 #define PACKAGE_STRING "$PACKAGE_STRING"
 _ACEOF
 cat >>confdefs.h <<_ACEOF
 #define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT"
 _ACEOF
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_URL "$PACKAGE_URL"
+_ACEOF
 # Let the site file select an alternate cache file if it wants to.
-# Prefer explicitly selected file to automatically selected ones.
+# Prefer an explicitly selected file to automatically selected ones.
+ac_site_file1=NONE
+ac_site_file2=NONE
 if test -n "$CONFIG_SITE"; then
-  set x "$CONFIG_SITE"
+  # We do not want a PATH search for config.site.
+  case $CONFIG_SITE in #((
+    -*)  ac_site_file1=./$CONFIG_SITE;;
+    */*) ac_site_file1=$CONFIG_SITE;;
+    *)   ac_site_file1=./$CONFIG_SITE;;
+  esac
 elif test "x$prefix" != xNONE; then
-  set x "$prefix/share/config.site" "$prefix/etc/config.site"
+  ac_site_file1=$prefix/share/config.site
+  ac_site_file2=$prefix/etc/config.site
 else
-  set x "$ac_default_prefix/share/config.site" \
+  ac_site_file1=$ac_default_prefix/share/config.site
-        "$ac_default_prefix/etc/config.site"
+  ac_site_file2=$ac_default_prefix/etc/config.site
 fi
-shift
+for ac_site_file in "$ac_site_file1" "$ac_site_file2"
-for ac_site_file
 do
-  if test -r "$ac_site_file"; then
+  test "x$ac_site_file" = xNONE && continue
-    { echo "$as_me:$LINENO: loading site script $ac_site_file" >&5
+  if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then
-echo "$as_me: loading site script $ac_site_file" >&6;}
+    { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
+$as_echo "$as_me: loading site script $ac_site_file" >&6;}
    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file"
+    . "$ac_site_file" \
+      || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "failed to load site script $ac_site_file
+See \`config.log' for more details" "$LINENO" 5; }
  fi
 done
 if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special
+  # Some versions of bash will fail to source /dev/null (special files
-  # files actually), so we avoid doing that.
+  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test -f "$cache_file"; then
+  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { echo "$as_me:$LINENO: loading cache $cache_file" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-echo "$as_me: loading cache $cache_file" >&6;}
+$as_echo "$as_me: loading cache $cache_file" >&6;}
    case $cache_file in
      [\\/]* | ?:[\\/]* ) . "$cache_file";;
      *)                      . "./$cache_file";;
    esac
  fi
 else
-  { echo "$as_me:$LINENO: creating cache $cache_file" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-echo "$as_me: creating cache $cache_file" >&6;}
+$as_echo "$as_me: creating cache $cache_file" >&6;}
  >$cache_file
 fi
@@ -1744,68 +2507,56 @@ for ac_var in $ac_precious_vars; do
  eval ac_new_val=\$ac_env_${ac_var}_value
  case $ac_old_set,$ac_new_set in
    set,)
-      { echo "$as_me:$LINENO: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
+      { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
-echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
+$as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
      ac_cache_corrupted=: ;;
    ,set)
-      { echo "$as_me:$LINENO: error: \`$ac_var' was not set in the previous run" >&5
+      { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5
-echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
+$as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
      ac_cache_corrupted=: ;;
    ,);;
    *)
      if test "x$ac_old_val" != "x$ac_new_val"; then
-        { echo "$as_me:$LINENO: error: \`$ac_var' has changed since the previous run:" >&5
+        # differences in whitespace do not lead to failure.
-echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
+        ac_old_val_w=`echo x $ac_old_val`
-        { echo "$as_me:$LINENO:   former value:  $ac_old_val" >&5
+        ac_new_val_w=`echo x $ac_new_val`
-echo "$as_me:   former value:  $ac_old_val" >&2;}
+        if test "$ac_old_val_w" != "$ac_new_val_w"; then
-        { echo "$as_me:$LINENO:   current value: $ac_new_val" >&5
+          { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5
-echo "$as_me:   current value: $ac_new_val" >&2;}
+$as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
-        ac_cache_corrupted=:
+          ac_cache_corrupted=:
+        else
+          { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5
+$as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;}
+          eval $ac_var=\$ac_old_val
+        fi
+        { $as_echo "$as_me:${as_lineno-$LINENO}:   former value:  \`$ac_old_val'" >&5
+$as_echo "$as_me:   former value:  \`$ac_old_val'" >&2;}
+        { $as_echo "$as_me:${as_lineno-$LINENO}:   current value: \`$ac_new_val'" >&5
+$as_echo "$as_me:   current value: \`$ac_new_val'" >&2;}
      fi;;
  esac
  # Pass precious variables to config.status.
  if test "$ac_new_set" = set; then
    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
+    *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
    *) ac_arg=$ac_var=$ac_new_val ;;
    esac
    case " $ac_configure_args " in
      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) ac_configure_args="$ac_configure_args '$ac_arg'" ;;
+      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
    esac
  fi
 done
 if $ac_cache_corrupted; then
-  { echo "$as_me:$LINENO: error: changes in the environment can compromise the build" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-echo "$as_me: error: changes in the environment can compromise the build" >&2;}
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-  { { echo "$as_me:$LINENO: error: run \`make distclean' and/or \`rm $cache_file' and start over" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-echo "$as_me: error: run \`make distclean' and/or \`rm $cache_file' and start over" >&2;}
+$as_echo "$as_me: error: changes in the environment can compromise the build" >&2;}
-   { (exit 1); exit 1; }; }
+  as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5
 fi
+## -------------------- ##
+## Main body of script. ##
+## -------------------- ##
 ac_ext=c
 ac_cpp='$CPP $CPPFLAGS'
@@ -1816,8 +2567,11 @@ ac_compiler_gnu=$ac_cv_c_compiler_gnu
+ac_ext=c
-# local macros
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
 ac_config_headers="$ac_config_headers config.h"
@@ -1830,10 +2584,10 @@ ac_compiler_gnu=$ac_cv_c_compiler_gnu
 if test -n "$ac_tool_prefix"; then
  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
 set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_CC+set}" = set; then
+if ${ac_cv_prog_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$CC"; then
  ac_cv_prog_CC="$CC" # Let the user override the test.
@@ -1843,25 +2597,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 CC=$ac_cv_prog_CC
 if test -n "$CC"; then
-  { echo "$as_me:$LINENO: result: $CC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-echo "${ECHO_T}$CC" >&6; }
+$as_echo "$CC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -1870,10 +2624,10 @@ if test -z "$ac_cv_prog_CC"; then
  ac_ct_CC=$CC
  # Extract the first word of "gcc", so it can be a program name with args.
 set dummy gcc; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_ac_ct_CC+set}" = set; then
+if ${ac_cv_prog_ac_ct_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$ac_ct_CC"; then
  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
@@ -1883,25 +2637,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_ac_ct_CC="gcc"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 ac_ct_CC=$ac_cv_prog_ac_ct_CC
 if test -n "$ac_ct_CC"; then
-  { echo "$as_me:$LINENO: result: $ac_ct_CC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-echo "${ECHO_T}$ac_ct_CC" >&6; }
+$as_echo "$ac_ct_CC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
  if test "x$ac_ct_CC" = x; then
@@ -1909,12 +2663,8 @@ fi
  else
    case $cross_compiling:$ac_tool_warned in
 yes:)
-{ echo "$as_me:$LINENO: WARNING: In the future, Autoconf will not detect cross-tools
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-whose name does not start with the host triplet.  If you think this
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-configuration is useful to you, please write to autoconf@gnu.org." >&5
-echo "$as_me: WARNING: In the future, Autoconf will not detect cross-tools
-whose name does not start with the host triplet.  If you think this
-configuration is useful to you, please write to autoconf@gnu.org." >&2;}
 ac_tool_warned=yes ;;
 esac
    CC=$ac_ct_CC
@@ -1927,10 +2677,10 @@ if test -z "$CC"; then
          if test -n "$ac_tool_prefix"; then
    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
 set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_CC+set}" = set; then
+if ${ac_cv_prog_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$CC"; then
  ac_cv_prog_CC="$CC" # Let the user override the test.
@@ -1940,25 +2690,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 CC=$ac_cv_prog_CC
 if test -n "$CC"; then
-  { echo "$as_me:$LINENO: result: $CC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-echo "${ECHO_T}$CC" >&6; }
+$as_echo "$CC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -1967,10 +2717,10 @@ fi
 if test -z "$CC"; then
  # Extract the first word of "cc", so it can be a program name with args.
 set dummy cc; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_CC+set}" = set; then
+if ${ac_cv_prog_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$CC"; then
  ac_cv_prog_CC="$CC" # Let the user override the test.
@@ -1981,18 +2731,18 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
       ac_prog_rejected=yes
       continue
     fi
    ac_cv_prog_CC="cc"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 if test $ac_prog_rejected = yes; then
@@ -2011,11 +2761,11 @@ fi
 fi
 CC=$ac_cv_prog_CC
 if test -n "$CC"; then
-  { echo "$as_me:$LINENO: result: $CC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-echo "${ECHO_T}$CC" >&6; }
+$as_echo "$CC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -2026,10 +2776,10 @@ if test -z "$CC"; then
  do
    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
 set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_CC+set}" = set; then
+if ${ac_cv_prog_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$CC"; then
  ac_cv_prog_CC="$CC" # Let the user override the test.
@@ -2039,25 +2789,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 CC=$ac_cv_prog_CC
 if test -n "$CC"; then
-  { echo "$as_me:$LINENO: result: $CC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-echo "${ECHO_T}$CC" >&6; }
+$as_echo "$CC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -2070,10 +2820,10 @@ if test -z "$CC"; then
 do
  # Extract the first word of "$ac_prog", so it can be a program name with args.
 set dummy $ac_prog; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_ac_ct_CC+set}" = set; then
+if ${ac_cv_prog_ac_ct_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$ac_ct_CC"; then
  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
@@ -2083,25 +2833,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_ac_ct_CC="$ac_prog"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 ac_ct_CC=$ac_cv_prog_ac_ct_CC
 if test -n "$ac_ct_CC"; then
-  { echo "$as_me:$LINENO: result: $ac_ct_CC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-echo "${ECHO_T}$ac_ct_CC" >&6; }
+$as_echo "$ac_ct_CC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -2113,12 +2863,8 @@ done
  else
    case $cross_compiling:$ac_tool_warned in
 yes:)
-{ echo "$as_me:$LINENO: WARNING: In the future, Autoconf will not detect cross-tools
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-whose name does not start with the host triplet.  If you think this
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-configuration is useful to you, please write to autoconf@gnu.org." >&5
-echo "$as_me: WARNING: In the future, Autoconf will not detect cross-tools
-whose name does not start with the host triplet.  If you think this
-configuration is useful to you, please write to autoconf@gnu.org." >&2;}
 ac_tool_warned=yes ;;
 esac
    CC=$ac_ct_CC
@@ -2128,51 +2874,37 @@ fi
 fi
-test -z "$CC" && { { echo "$as_me:$LINENO: error: no acceptable C compiler found in \$PATH
+test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-See \`config.log' for more details." >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-echo "$as_me: error: no acceptable C compiler found in \$PATH
+as_fn_error $? "no acceptable C compiler found in \$PATH
-See \`config.log' for more details." >&2;}
+See \`config.log' for more details" "$LINENO" 5; }
-   { (exit 1); exit 1; }; }
 # Provide some information about the compiler.
-echo "$as_me:$LINENO: checking for C compiler version" >&5
+$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-ac_compiler=`set X $ac_compile; echo $2`
+set X $ac_compile
-{ (ac_try="$ac_compiler --version >&5"
+ac_compiler=$2
-case "(($ac_try" in
+for ac_option in --version -v -V -qversion; do
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  { { ac_try="$ac_compiler $ac_option >&5"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compiler --version >&5") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }
-{ (ac_try="$ac_compiler -v >&5"
 case "(($ac_try" in
  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
  *) ac_try_echo=$ac_try;;
 esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-  (eval "$ac_compiler -v >&5") 2>&5
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  if test -s conftest.err; then
-  (exit $ac_status); }
+    sed '10a\
-{ (ac_try="$ac_compiler -V >&5"
+... rest of stderr output deleted ...
-case "(($ac_try" in
+         10q' conftest.err >conftest.er1
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+    cat conftest.er1 >&5
-  *) ac_try_echo=$ac_try;;
+  fi
-esac
+  rm -f conftest.er1 conftest.err
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  (eval "$ac_compiler -V >&5") 2>&5
+  test $ac_status = 0; }
-  ac_status=$?
+done
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -2184,42 +2916,38 @@ main ()
 }
 _ACEOF
 ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.exe b.out"
+ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
 # Try to create an executable without -o first, disregard a.out.
 # It will help us diagnose broken compilers, and finding out an intuition
 # of exeext.
-{ echo "$as_me:$LINENO: checking for C compiler default output file name" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-echo $ECHO_N "checking for C compiler default output file name... $ECHO_C" >&6; }
+$as_echo_n "checking whether the C compiler works... " >&6; }
-ac_link_default=`echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
+ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-#
-# List of possible output files, starting from the most likely.
+# The possible output files:
-# The algorithm is not robust to junk in `.', hence go to wildcards (a.*)
+ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-# only as a last resort.  b.out is created by i960 compilers.
-ac_files='a_out.exe a.exe conftest.exe a.out conftest a.* conftest.* b.out'
-#
-# The IRIX 6 linker writes into existing files which may not be
-# executable, retaining their permissions.  Remove them first so a
-# subsequent execution test works.
 ac_rmfiles=
 for ac_file in $ac_files
 do
  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.o | *.obj ) ;;
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
  esac
 done
 rm -f $ac_rmfiles
-if { (ac_try="$ac_link_default"
+if { { ac_try="$ac_link_default"
 case "(($ac_try" in
  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
  *) ac_try_echo=$ac_try;;
 esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
  (eval "$ac_link_default") 2>&5
  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  (exit $ac_status); }; then
+  test $ac_status = 0; }; then :
  # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
 # So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
 # in a Makefile.  We should not override ac_cv_exeext if it was cached,
@@ -2229,14 +2957,14 @@ for ac_file in $ac_files ''
 do
  test -f "$ac_file" || continue
  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.o | *.obj )
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
        ;;
    [ab].out )
        # We found the default executable, but exeext='' is most
        # certainly right.
        break;;
    *.* )
-        if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
+        if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
        then :; else
           ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
        fi
@@ -2255,78 +2983,41 @@ test "$ac_cv_exeext" = no && ac_cv_exeext=
 else
  ac_file=''
 fi
+if test -z "$ac_file"; then :
-{ echo "$as_me:$LINENO: result: $ac_file" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}$ac_file" >&6; }
+$as_echo "no" >&6; }
-if test -z "$ac_file"; then
+$as_echo "$as_me: failed program was:" >&5
-  echo "$as_me: failed program was:" >&5
 sed 's/^/| /' conftest.$ac_ext >&5
-{ { echo "$as_me:$LINENO: error: C compiler cannot create executables
+{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-See \`config.log' for more details." >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-echo "$as_me: error: C compiler cannot create executables
+as_fn_error 77 "C compiler cannot create executables
-See \`config.log' for more details." >&2;}
+See \`config.log' for more details" "$LINENO" 5; }
-   { (exit 77); exit 77; }; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
 fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
+$as_echo_n "checking for C compiler default output file name... " >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
+$as_echo "$ac_file" >&6; }
 ac_exeext=$ac_cv_exeext
-# Check that the compiler produces executables we can run.  If not, either
+rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-# the compiler is broken, or we cross compile.
-{ echo "$as_me:$LINENO: checking whether the C compiler works" >&5
-echo $ECHO_N "checking whether the C compiler works... $ECHO_C" >&6; }
-# FIXME: These cross compiler hacks should be removed for Autoconf 3.0
-# If not cross compiling, check that we can run a simple program.
-if test "$cross_compiling" != yes; then
-  if { ac_try='./$ac_file'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-        cross_compiling=yes
-    else
-        { { echo "$as_me:$LINENO: error: cannot run C compiled programs.
-If you meant to cross compile, use \`--host'.
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot run C compiled programs.
-If you meant to cross compile, use \`--host'.
-See \`config.log' for more details." >&2;}
-   { (exit 1); exit 1; }; }
-    fi
-  fi
-fi
-{ echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-rm -f a.out a.exe conftest$ac_cv_exeext b.out
 ac_clean_files=$ac_clean_files_save
-# Check that the compiler produces executables we can run.  If not, either
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-# the compiler is broken, or we cross compile.
+$as_echo_n "checking for suffix of executables... " >&6; }
-{ echo "$as_me:$LINENO: checking whether we are cross compiling" >&5
+if { { ac_try="$ac_link"
-echo $ECHO_N "checking whether we are cross compiling... $ECHO_C" >&6; }
-{ echo "$as_me:$LINENO: result: $cross_compiling" >&5
-echo "${ECHO_T}$cross_compiling" >&6; }
-{ echo "$as_me:$LINENO: checking for suffix of executables" >&5
-echo $ECHO_N "checking for suffix of executables... $ECHO_C" >&6; }
-if { (ac_try="$ac_link"
 case "(($ac_try" in
  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
  *) ac_try_echo=$ac_try;;
 esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
  (eval "$ac_link") 2>&5
  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  (exit $ac_status); }; then
+  test $ac_status = 0; }; then :
  # If both `conftest.exe' and `conftest' are `present' (well, observable)
 # catch `conftest.exe'.  For instance with Cygwin, `ls conftest' will
 # work properly (i.e., refer to `conftest.exe'), while it won't with
@@ -2334,37 +3025,90 @@ eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
 for ac_file in conftest.exe conftest conftest.*; do
  test -f "$ac_file" || continue
  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.o | *.obj ) ;;
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
          break;;
    * ) break;;
  esac
 done
 else
-  { { echo "$as_me:$LINENO: error: cannot compute suffix of executables: cannot compile and link
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-See \`config.log' for more details." >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-echo "$as_me: error: cannot compute suffix of executables: cannot compile and link
+as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See \`config.log' for more details." >&2;}
+See \`config.log' for more details" "$LINENO" 5; }
-   { (exit 1); exit 1; }; }
 fi
+rm -f conftest conftest$ac_cv_exeext
-rm -f conftest$ac_cv_exeext
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-{ echo "$as_me:$LINENO: result: $ac_cv_exeext" >&5
+$as_echo "$ac_cv_exeext" >&6; }
-echo "${ECHO_T}$ac_cv_exeext" >&6; }
 rm -f conftest.$ac_ext
 EXEEXT=$ac_cv_exeext
 ac_exeext=$EXEEXT
-{ echo "$as_me:$LINENO: checking for suffix of object files" >&5
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-echo $ECHO_N "checking for suffix of object files... $ECHO_C" >&6; }
+/* end confdefs.h.  */
-if test "${ac_cv_objext+set}" = set; then
+#include <stdio.h>
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+int
-else
+main ()
-  cat >conftest.$ac_ext <<_ACEOF
+{
-/* confdefs.h.  */
+FILE *f = fopen ("conftest.out", "w");
+ return ferror (f) || fclose (f) != 0;
+  ;
+  return 0;
+}
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
+ac_clean_files="$ac_clean_files conftest.out"
-cat >>conftest.$ac_ext <<_ACEOF
+# Check that the compiler produces executables we can run.  If not, either
+# the compiler is broken, or we cross compile.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
+$as_echo_n "checking whether we are cross compiling... " >&6; }
+if test "$cross_compiling" != yes; then
+  { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+  if { ac_try='./conftest$ac_cv_exeext'
+  { { case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_try") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; }; then
+    cross_compiling=no
+  else
+    if test "$cross_compiling" = maybe; then
+        cross_compiling=yes
+    else
+        { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot run C compiled programs.
+If you meant to cross compile, use \`--host'.
+See \`config.log' for more details" "$LINENO" 5; }
+    fi
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
+$as_echo "$cross_compiling" >&6; }
+rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
+ac_clean_files=$ac_clean_files_save
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
+$as_echo_n "checking for suffix of object files... " >&6; }
+if ${ac_cv_objext+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 int
@@ -2376,51 +3120,46 @@ main ()
 }
 _ACEOF
 rm -f conftest.o conftest.obj
-if { (ac_try="$ac_compile"
+if { { ac_try="$ac_compile"
 case "(($ac_try" in
  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
  *) ac_try_echo=$ac_try;;
 esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
  (eval "$ac_compile") 2>&5
  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  (exit $ac_status); }; then
+  test $ac_status = 0; }; then :
  for ac_file in conftest.o conftest.obj conftest.*; do
  test -f "$ac_file" || continue;
  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf ) ;;
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
       break;;
  esac
 done
 else
-  echo "$as_me: failed program was:" >&5
+  $as_echo "$as_me: failed program was:" >&5
 sed 's/^/| /' conftest.$ac_ext >&5
-{ { echo "$as_me:$LINENO: error: cannot compute suffix of object files: cannot compile
+{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-See \`config.log' for more details." >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-echo "$as_me: error: cannot compute suffix of object files: cannot compile
+as_fn_error $? "cannot compute suffix of object files: cannot compile
-See \`config.log' for more details." >&2;}
+See \`config.log' for more details" "$LINENO" 5; }
-   { (exit 1); exit 1; }; }
 fi
 rm -f conftest.$ac_cv_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_objext" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-echo "${ECHO_T}$ac_cv_objext" >&6; }
+$as_echo "$ac_cv_objext" >&6; }
 OBJEXT=$ac_cv_objext
 ac_objext=$OBJEXT
-{ echo "$as_me:$LINENO: checking whether we are using the GNU C compiler" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
-echo $ECHO_N "checking whether we are using the GNU C compiler... $ECHO_C" >&6; }
+$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
-if test "${ac_cv_c_compiler_gnu+set}" = set; then
+if ${ac_cv_c_compiler_gnu+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -2434,54 +3173,34 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_compiler_gnu=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_compiler_gnu=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_compiler_gnu=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 ac_cv_c_compiler_gnu=$ac_compiler_gnu
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_c_compiler_gnu" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-echo "${ECHO_T}$ac_cv_c_compiler_gnu" >&6; }
+$as_echo "$ac_cv_c_compiler_gnu" >&6; }
-GCC=`test $ac_compiler_gnu = yes && echo yes`
+if test $ac_compiler_gnu = yes; then
+  GCC=yes
+else
+  GCC=
+fi
 ac_test_CFLAGS=${CFLAGS+set}
 ac_save_CFLAGS=$CFLAGS
-{ echo "$as_me:$LINENO: checking whether $CC accepts -g" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-echo $ECHO_N "checking whether $CC accepts -g... $ECHO_C" >&6; }
+$as_echo_n "checking whether $CC accepts -g... " >&6; }
-if test "${ac_cv_prog_cc_g+set}" = set; then
+if ${ac_cv_prog_cc_g+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_save_c_werror_flag=$ac_c_werror_flag
   ac_c_werror_flag=yes
   ac_cv_prog_cc_g=no
   CFLAGS="-g"
-   cat >conftest.$ac_ext <<_ACEOF
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -2492,34 +3211,11 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_prog_cc_g=yes
 else
-  echo "$as_me: failed program was:" >&5
+  CFLAGS=""
-sed 's/^/| /' conftest.$ac_ext >&5
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-        CFLAGS=""
-      cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -2530,35 +3226,12 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  :
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_c_werror_flag=$ac_save_c_werror_flag
+else
+  ac_c_werror_flag=$ac_save_c_werror_flag
         CFLAGS="-g"
-         cat >conftest.$ac_ext <<_ACEOF
+         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -2569,42 +3242,18 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_prog_cc_g=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
   ac_c_werror_flag=$ac_save_c_werror_flag
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_prog_cc_g" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-echo "${ECHO_T}$ac_cv_prog_cc_g" >&6; }
+$as_echo "$ac_cv_prog_cc_g" >&6; }
 if test "$ac_test_CFLAGS" = set; then
  CFLAGS=$ac_save_CFLAGS
 elif test $ac_cv_prog_cc_g = yes; then
@@ -2620,18 +3269,14 @@ else
    CFLAGS=
  fi
 fi
-{ echo "$as_me:$LINENO: checking for $CC option to accept ISO C89" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
-echo $ECHO_N "checking for $CC option to accept ISO C89... $ECHO_C" >&6; }
+$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
-if test "${ac_cv_prog_cc_c89+set}" = set; then
+if ${ac_cv_prog_cc_c89+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_cv_prog_cc_c89=no
 ac_save_CC=$CC
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdarg.h>
 #include <stdio.h>
@@ -2688,31 +3333,9 @@ for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
        -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
 do
  CC="$ac_save_CC $ac_arg"
-  rm -f conftest.$ac_objext
+  if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_prog_cc_c89=$ac_arg
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext
  test "x$ac_cv_prog_cc_c89" != "xno" && break
 done
@@ -2723,17 +3346,19 @@ fi
 # AC_CACHE_VAL
 case "x$ac_cv_prog_cc_c89" in
  x)
-    { echo "$as_me:$LINENO: result: none needed" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-echo "${ECHO_T}none needed" >&6; } ;;
+$as_echo "none needed" >&6; } ;;
  xno)
-    { echo "$as_me:$LINENO: result: unsupported" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-echo "${ECHO_T}unsupported" >&6; } ;;
+$as_echo "unsupported" >&6; } ;;
  *)
    CC="$CC $ac_cv_prog_cc_c89"
-    { echo "$as_me:$LINENO: result: $ac_cv_prog_cc_c89" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-echo "${ECHO_T}$ac_cv_prog_cc_c89" >&6; } ;;
+$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
 esac
+if test "x$ac_cv_prog_cc_c89" != xno; then :
+fi
 ac_ext=c
 ac_cpp='$CPP $CPPFLAGS'
@@ -2758,9 +3383,7 @@ for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do
  fi
 done
 if test -z "$ac_aux_dir"; then
-  { { echo "$as_me:$LINENO: error: cannot find install-sh or install.sh in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" >&5
+  as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5
-echo "$as_me: error: cannot find install-sh or install.sh in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 # These three variables are undocumented and unsupported,
@@ -2774,35 +3397,27 @@ ac_configure="$SHELL $ac_aux_dir/configure"  # Please don't use this var.
 # Make sure we can run config.sub.
 $SHELL "$ac_aux_dir/config.sub" sun4 >/dev/null 2>&1 ||
-  { { echo "$as_me:$LINENO: error: cannot run $SHELL $ac_aux_dir/config.sub" >&5
+  as_fn_error $? "cannot run $SHELL $ac_aux_dir/config.sub" "$LINENO" 5
-echo "$as_me: error: cannot run $SHELL $ac_aux_dir/config.sub" >&2;}
-   { (exit 1); exit 1; }; }
-{ echo "$as_me:$LINENO: checking build system type" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-echo $ECHO_N "checking build system type... $ECHO_C" >&6; }
+$as_echo_n "checking build system type... " >&6; }
-if test "${ac_cv_build+set}" = set; then
+if ${ac_cv_build+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_build_alias=$build_alias
 test "x$ac_build_alias" = x &&
  ac_build_alias=`$SHELL "$ac_aux_dir/config.guess"`
 test "x$ac_build_alias" = x &&
-  { { echo "$as_me:$LINENO: error: cannot guess build type; you must specify one" >&5
+  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-echo "$as_me: error: cannot guess build type; you must specify one" >&2;}
-   { (exit 1); exit 1; }; }
 ac_cv_build=`$SHELL "$ac_aux_dir/config.sub" $ac_build_alias` ||
-  { { echo "$as_me:$LINENO: error: $SHELL $ac_aux_dir/config.sub $ac_build_alias failed" >&5
+  as_fn_error $? "$SHELL $ac_aux_dir/config.sub $ac_build_alias failed" "$LINENO" 5
-echo "$as_me: error: $SHELL $ac_aux_dir/config.sub $ac_build_alias failed" >&2;}
-   { (exit 1); exit 1; }; }
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_build" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-echo "${ECHO_T}$ac_cv_build" >&6; }
+$as_echo "$ac_cv_build" >&6; }
 case $ac_cv_build in
 *-*-*) ;;
-*) { { echo "$as_me:$LINENO: error: invalid value of canonical build" >&5
+*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-echo "$as_me: error: invalid value of canonical build" >&2;}
-   { (exit 1); exit 1; }; };;
 esac
 build=$ac_cv_build
 ac_save_IFS=$IFS; IFS='-'
@@ -2818,28 +3433,24 @@ IFS=$ac_save_IFS
 case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac
-{ echo "$as_me:$LINENO: checking host system type" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-echo $ECHO_N "checking host system type... $ECHO_C" >&6; }
+$as_echo_n "checking host system type... " >&6; }
-if test "${ac_cv_host+set}" = set; then
+if ${ac_cv_host+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test "x$host_alias" = x; then
  ac_cv_host=$ac_cv_build
 else
  ac_cv_host=`$SHELL "$ac_aux_dir/config.sub" $host_alias` ||
-    { { echo "$as_me:$LINENO: error: $SHELL $ac_aux_dir/config.sub $host_alias failed" >&5
+    as_fn_error $? "$SHELL $ac_aux_dir/config.sub $host_alias failed" "$LINENO" 5
-echo "$as_me: error: $SHELL $ac_aux_dir/config.sub $host_alias failed" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_host" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-echo "${ECHO_T}$ac_cv_host" >&6; }
+$as_echo "$ac_cv_host" >&6; }
 case $ac_cv_host in
 *-*-*) ;;
-*) { { echo "$as_me:$LINENO: error: invalid value of canonical host" >&5
+*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-echo "$as_me: error: invalid value of canonical host" >&2;}
-   { (exit 1); exit 1; }; };;
 esac
 host=$ac_cv_host
 ac_save_IFS=$IFS; IFS='-'
@@ -2861,15 +3472,15 @@ ac_cpp='$CPP $CPPFLAGS'
 ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
 ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
 ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ echo "$as_me:$LINENO: checking how to run the C preprocessor" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
-echo $ECHO_N "checking how to run the C preprocessor... $ECHO_C" >&6; }
+$as_echo_n "checking how to run the C preprocessor... " >&6; }
 # On Suns, sometimes $CPP names a directory.
 if test -n "$CPP" && test -d "$CPP"; then
  CPP=
 fi
 if test -z "$CPP"; then
-  if test "${ac_cv_prog_CPP+set}" = set; then
+  if ${ac_cv_prog_CPP+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
      # Double quotes because CPP needs to be expanded
    for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
@@ -2883,11 +3494,7 @@ do
  # <limits.h> exists even on freestanding compilers.
  # On the NeXT, cc -E runs the code through the compiler's parser,
  # not just through cpp. "Syntax error" is here to catch this case.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #ifdef __STDC__
 # include <limits.h>
@@ -2896,76 +3503,34 @@ cat >>conftest.$ac_ext <<_ACEOF
 #endif
                     Syntax error
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  :
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+else
  # Broken: fails on valid input.
 continue
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
  # OK, works on sane cases.  Now check whether nonexistent headers
  # can be detected and how.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <ac_nonexistent.h>
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
  # Broken: success on invalid input.
 continue
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
  # Passes both tests.
 ac_preproc_ok=:
 break
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
 done
 # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.err conftest.$ac_ext
+rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then
+if $ac_preproc_ok; then :
  break
 fi
@@ -2977,8 +3542,8 @@ fi
 else
  ac_cv_prog_CPP=$CPP
 fi
-{ echo "$as_me:$LINENO: result: $CPP" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
-echo "${ECHO_T}$CPP" >&6; }
+$as_echo "$CPP" >&6; }
 ac_preproc_ok=false
 for ac_c_preproc_warn_flag in '' yes
 do
@@ -2988,11 +3553,7 @@ do
  # <limits.h> exists even on freestanding compilers.
  # On the NeXT, cc -E runs the code through the compiler's parser,
  # not just through cpp. "Syntax error" is here to catch this case.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #ifdef __STDC__
 # include <limits.h>
@@ -3001,83 +3562,40 @@ cat >>conftest.$ac_ext <<_ACEOF
 #endif
                     Syntax error
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  :
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+else
  # Broken: fails on valid input.
 continue
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
  # OK, works on sane cases.  Now check whether nonexistent headers
  # can be detected and how.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <ac_nonexistent.h>
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
  # Broken: success on invalid input.
 continue
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
  # Passes both tests.
 ac_preproc_ok=:
 break
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
 done
 # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.err conftest.$ac_ext
+rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then
+if $ac_preproc_ok; then :
-  :
 else
-  { { echo "$as_me:$LINENO: error: C preprocessor \"$CPP\" fails sanity check
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-See \`config.log' for more details." >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-echo "$as_me: error: C preprocessor \"$CPP\" fails sanity check
+as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
-See \`config.log' for more details." >&2;}
+See \`config.log' for more details" "$LINENO" 5; }
-   { (exit 1); exit 1; }; }
 fi
 ac_ext=c
@@ -3087,45 +3605,40 @@ ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $
 ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ echo "$as_me:$LINENO: checking for grep that handles long lines and -e" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-echo $ECHO_N "checking for grep that handles long lines and -e... $ECHO_C" >&6; }
+$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
-if test "${ac_cv_path_GREP+set}" = set; then
+if ${ac_cv_path_GREP+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
-else
-  # Extract the first word of "grep ggrep" to use in msg output
-if test -z "$GREP"; then
-set dummy grep ggrep; ac_prog_name=$2
-if test "${ac_cv_path_GREP+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
+  if test -z "$GREP"; then
  ac_path_GREP_found=false
-# Loop through the user's path and test for each of PROGNAME-LIST
+  # Loop through the user's path and test for each of PROGNAME-LIST
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_prog in grep ggrep; do
+    for ac_prog in grep ggrep; do
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
-    ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
+      ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
-    { test -f "$ac_path_GREP" && $as_test_x "$ac_path_GREP"; } || continue
+      { test -f "$ac_path_GREP" && $as_test_x "$ac_path_GREP"; } || continue
-    # Check for GNU ac_path_GREP and select it if it is found.
+# Check for GNU ac_path_GREP and select it if it is found.
  # Check for GNU $ac_path_GREP
 case `"$ac_path_GREP" --version 2>&1` in
 *GNU*)
  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
 *)
  ac_count=0
-  echo $ECHO_N "0123456789$ECHO_C" >"conftest.in"
+  $as_echo_n 0123456789 >"conftest.in"
  while :
  do
    cat "conftest.in" "conftest.in" >"conftest.tmp"
    mv "conftest.tmp" "conftest.in"
    cp "conftest.in" "conftest.nl"
-    echo 'GREP' >> "conftest.nl"
+    $as_echo 'GREP' >> "conftest.nl"
    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    ac_count=`expr $ac_count + 1`
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
    if test $ac_count -gt ${ac_path_GREP_max-0}; then
      # Best one so far, save it but keep looking for a better one
      ac_cv_path_GREP="$ac_path_GREP"
@@ -3137,77 +3650,61 @@ case `"$ac_path_GREP" --version 2>&1` in
  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
 esac
+      $ac_path_GREP_found && break 3
-    $ac_path_GREP_found && break 3
+    done
+  done
  done
-done
-done
 IFS=$as_save_IFS
+  if test -z "$ac_cv_path_GREP"; then
+    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-fi
+  fi
-GREP="$ac_cv_path_GREP"
-if test -z "$GREP"; then
-  { { echo "$as_me:$LINENO: error: no acceptable $ac_prog_name could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" >&5
-echo "$as_me: error: no acceptable $ac_prog_name could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" >&2;}
-   { (exit 1); exit 1; }; }
-fi
 else
  ac_cv_path_GREP=$GREP
 fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_path_GREP" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-echo "${ECHO_T}$ac_cv_path_GREP" >&6; }
+$as_echo "$ac_cv_path_GREP" >&6; }
 GREP="$ac_cv_path_GREP"
-{ echo "$as_me:$LINENO: checking for egrep" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-echo $ECHO_N "checking for egrep... $ECHO_C" >&6; }
+$as_echo_n "checking for egrep... " >&6; }
-if test "${ac_cv_path_EGREP+set}" = set; then
+if ${ac_cv_path_EGREP+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
   then ac_cv_path_EGREP="$GREP -E"
   else
-     # Extract the first word of "egrep" to use in msg output
+     if test -z "$EGREP"; then
-if test -z "$EGREP"; then
-set dummy egrep; ac_prog_name=$2
-if test "${ac_cv_path_EGREP+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
  ac_path_EGREP_found=false
-# Loop through the user's path and test for each of PROGNAME-LIST
+  # Loop through the user's path and test for each of PROGNAME-LIST
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_prog in egrep; do
+    for ac_prog in egrep; do
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
-    ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
+      ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
-    { test -f "$ac_path_EGREP" && $as_test_x "$ac_path_EGREP"; } || continue
+      { test -f "$ac_path_EGREP" && $as_test_x "$ac_path_EGREP"; } || continue
-    # Check for GNU ac_path_EGREP and select it if it is found.
+# Check for GNU ac_path_EGREP and select it if it is found.
  # Check for GNU $ac_path_EGREP
 case `"$ac_path_EGREP" --version 2>&1` in
 *GNU*)
  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
 *)
  ac_count=0
-  echo $ECHO_N "0123456789$ECHO_C" >"conftest.in"
+  $as_echo_n 0123456789 >"conftest.in"
  while :
  do
    cat "conftest.in" "conftest.in" >"conftest.tmp"
    mv "conftest.tmp" "conftest.in"
    cp "conftest.in" "conftest.nl"
-    echo 'EGREP' >> "conftest.nl"
+    $as_echo 'EGREP' >> "conftest.nl"
    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    ac_count=`expr $ac_count + 1`
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
      # Best one so far, save it but keep looking for a better one
      ac_cv_path_EGREP="$ac_path_EGREP"
@@ -3219,46 +3716,31 @@ case `"$ac_path_EGREP" --version 2>&1` in
  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
 esac
+      $ac_path_EGREP_found && break 3
-    $ac_path_EGREP_found && break 3
+    done
+  done
  done
-done
-done
 IFS=$as_save_IFS
+  if test -z "$ac_cv_path_EGREP"; then
+    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-fi
+  fi
-EGREP="$ac_cv_path_EGREP"
-if test -z "$EGREP"; then
-  { { echo "$as_me:$LINENO: error: no acceptable $ac_prog_name could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" >&5
-echo "$as_me: error: no acceptable $ac_prog_name could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" >&2;}
-   { (exit 1); exit 1; }; }
-fi
 else
  ac_cv_path_EGREP=$EGREP
 fi
   fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_path_EGREP" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-echo "${ECHO_T}$ac_cv_path_EGREP" >&6; }
+$as_echo "$ac_cv_path_EGREP" >&6; }
 EGREP="$ac_cv_path_EGREP"
-{ echo "$as_me:$LINENO: checking for ANSI C header files" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
-echo $ECHO_N "checking for ANSI C header files... $ECHO_C" >&6; }
+$as_echo_n "checking for ANSI C header files... " >&6; }
-if test "${ac_cv_header_stdc+set}" = set; then
+if ${ac_cv_header_stdc+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdlib.h>
 #include <stdarg.h>
@@ -3273,47 +3755,23 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_header_stdc=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_header_stdc=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_header_stdc=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 if test $ac_cv_header_stdc = yes; then
  # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <string.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "memchr" >/dev/null 2>&1; then
+  $EGREP "memchr" >/dev/null 2>&1; then :
-  :
 else
  ac_cv_header_stdc=no
 fi
@@ -3323,18 +3781,14 @@ fi
 if test $ac_cv_header_stdc = yes; then
  # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdlib.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "free" >/dev/null 2>&1; then
+  $EGREP "free" >/dev/null 2>&1; then :
-  :
 else
  ac_cv_header_stdc=no
 fi
@@ -3344,14 +3798,10 @@ fi
 if test $ac_cv_header_stdc = yes; then
  # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
-  if test "$cross_compiling" = yes; then
+  if test "$cross_compiling" = yes; then :
  :
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <ctype.h>
 #include <stdlib.h>
@@ -3378,113 +3828,35 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  :
-else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+else
-ac_cv_header_stdc=no
+  ac_cv_header_stdc=no
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_stdc" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
-echo "${ECHO_T}$ac_cv_header_stdc" >&6; }
+$as_echo "$ac_cv_header_stdc" >&6; }
 if test $ac_cv_header_stdc = yes; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define STDC_HEADERS 1" >>confdefs.h
-#define STDC_HEADERS 1
-_ACEOF
 fi
 # On IRIX 5.3, sys/types and inttypes.h are conflicting.
 for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
                  inttypes.h stdint.h unistd.h
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
+"
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  eval "$as_ac_Header=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
 _ACEOF
 fi
@@ -3492,241 +3864,229 @@ fi
 done
-{ echo "$as_me:$LINENO: checking whether byte ordering is bigendian" >&5
+ { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether byte ordering is bigendian" >&5
-echo $ECHO_N "checking whether byte ordering is bigendian... $ECHO_C" >&6; }
+$as_echo_n "checking whether byte ordering is bigendian... " >&6; }
-if test "${ac_cv_c_bigendian+set}" = set; then
+if ${ac_cv_c_bigendian+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-  # See if sys/param.h defines the BYTE_ORDER macro.
+  ac_cv_c_bigendian=unknown
-cat >conftest.$ac_ext <<_ACEOF
+    # See if we're dealing with a universal compiler.
-/* confdefs.h.  */
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-_ACEOF
+/* end confdefs.h.  */
-cat confdefs.h >>conftest.$ac_ext
+#ifndef __APPLE_CC__
-cat >>conftest.$ac_ext <<_ACEOF
+               not a universal capable compiler
+             #endif
+             typedef int dummy;
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+        # Check for potential -arch flags.  It is not universal unless
+        # there are at least two -arch flags with different values.
+        ac_arch=
+        ac_prev=
+        for ac_word in $CC $CFLAGS $CPPFLAGS $LDFLAGS; do
+         if test -n "$ac_prev"; then
+           case $ac_word in
+             i?86 | x86_64 | ppc | ppc64)
+               if test -z "$ac_arch" || test "$ac_arch" = "$ac_word"; then
+                 ac_arch=$ac_word
+               else
+                 ac_cv_c_bigendian=universal
+                 break
+               fi
+               ;;
+           esac
+           ac_prev=
+         elif test "x$ac_word" = "x-arch"; then
+           ac_prev=arch
+         fi
+       done
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+    if test $ac_cv_c_bigendian = unknown; then
+      # See if sys/param.h defines the BYTE_ORDER macro.
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 #include <sys/types.h>
-#include <sys/param.h>
+             #include <sys/param.h>
 int
 main ()
 {
-#if  ! (defined BYTE_ORDER && defined BIG_ENDIAN && defined LITTLE_ENDIAN \
+#if ! (defined BYTE_ORDER && defined BIG_ENDIAN \
-        && BYTE_ORDER && BIG_ENDIAN && LITTLE_ENDIAN)
+                     && defined LITTLE_ENDIAN && BYTE_ORDER && BIG_ENDIAN \
- bogus endian macros
+                     && LITTLE_ENDIAN)
-#endif
+              bogus endian macros
+             #endif
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  # It does; now see whether it defined to BIG_ENDIAN or not.
-cat >conftest.$ac_ext <<_ACEOF
+         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
-#include <sys/param.h>
+                #include <sys/param.h>
 int
 main ()
 {
 #if BYTE_ORDER != BIG_ENDIAN
- not big endian
+                 not big endian
-#endif
+                #endif
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_c_bigendian=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_c_bigendian=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_c_bigendian=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-else
+fi
-  echo "$as_me: failed program was:" >&5
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-sed 's/^/| /' conftest.$ac_ext >&5
+    fi
+    if test $ac_cv_c_bigendian = unknown; then
+      # See if <limits.h> defines _LITTLE_ENDIAN or _BIG_ENDIAN (e.g., Solaris).
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <limits.h>
-        # It does not; compile a test program.
+int
-if test "$cross_compiling" = yes; then
+main ()
-  # try to guess the endianness by grepping values into an object file
+{
-  ac_cv_c_bigendian=unknown
+#if ! (defined _LITTLE_ENDIAN || defined _BIG_ENDIAN)
-  cat >conftest.$ac_ext <<_ACEOF
+              bogus endian macros
-/* confdefs.h.  */
+             #endif
+  ;
+  return 0;
+}
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
+if ac_fn_c_try_compile "$LINENO"; then :
-cat >>conftest.$ac_ext <<_ACEOF
+  # It does; now see whether it defined to _BIG_ENDIAN or not.
+         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-short int ascii_mm[] = { 0x4249, 0x4765, 0x6E44, 0x6961, 0x6E53, 0x7953, 0 };
+#include <limits.h>
-short int ascii_ii[] = { 0x694C, 0x5454, 0x656C, 0x6E45, 0x6944, 0x6E61, 0 };
-void _ascii () { char *s = (char *) ascii_mm; s = (char *) ascii_ii; }
-short int ebcdic_ii[] = { 0x89D3, 0xE3E3, 0x8593, 0x95C5, 0x89C4, 0x9581, 0 };
-short int ebcdic_mm[] = { 0xC2C9, 0xC785, 0x95C4, 0x8981, 0x95E2, 0xA8E2, 0 };
-void _ebcdic () { char *s = (char *) ebcdic_mm; s = (char *) ebcdic_ii; }
 int
 main ()
 {
- _ascii (); _ebcdic ();
+#ifndef _BIG_ENDIAN
+                 not big endian
+                #endif
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  if grep BIGenDianSyS conftest.$ac_objext >/dev/null ; then
  ac_cv_c_bigendian=yes
+else
+  ac_cv_c_bigendian=no
 fi
-if grep LiTTleEnDian conftest.$ac_objext >/dev/null ; then
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  if test "$ac_cv_c_bigendian" = unknown; then
-    ac_cv_c_bigendian=no
-  else
-    # finding both strings is unlikely to happen, but who knows?
-    ac_cv_c_bigendian=unknown
-  fi
 fi
-else
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  echo "$as_me: failed program was:" >&5
+    fi
-sed 's/^/| /' conftest.$ac_ext >&5
+    if test $ac_cv_c_bigendian = unknown; then
+      # Compile a test program.
+      if test "$cross_compiling" = yes; then :
+  # Try to guess by grepping values from an object file.
+         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+short int ascii_mm[] =
+                  { 0x4249, 0x4765, 0x6E44, 0x6961, 0x6E53, 0x7953, 0 };
+                short int ascii_ii[] =
+                  { 0x694C, 0x5454, 0x656C, 0x6E45, 0x6944, 0x6E61, 0 };
+                int use_ascii (int i) {
+                  return ascii_mm[i] + ascii_ii[i];
+                }
+                short int ebcdic_ii[] =
+                  { 0x89D3, 0xE3E3, 0x8593, 0x95C5, 0x89C4, 0x9581, 0 };
+                short int ebcdic_mm[] =
+                  { 0xC2C9, 0xC785, 0x95C4, 0x8981, 0x95E2, 0xA8E2, 0 };
+                int use_ebcdic (int i) {
+                  return ebcdic_mm[i] + ebcdic_ii[i];
+                }
+                extern int foo;
+int
+main ()
+{
+return use_ascii (foo) == use_ebcdic (foo);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if grep BIGenDianSyS conftest.$ac_objext >/dev/null; then
+              ac_cv_c_bigendian=yes
+            fi
+            if grep LiTTleEnDian conftest.$ac_objext >/dev/null ; then
+              if test "$ac_cv_c_bigendian" = unknown; then
+                ac_cv_c_bigendian=no
+              else
+                # finding both strings is unlikely to happen, but who knows?
+                ac_cv_c_bigendian=unknown
+              fi
+            fi
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 $ac_includes_default
 int
 main ()
 {
-  /* Are we little or big endian?  From Harbison&Steele.  */
+             /* Are we little or big endian?  From Harbison&Steele.  */
-  union
+             union
-  {
+             {
-    long int l;
+               long int l;
-    char c[sizeof (long int)];
+               char c[sizeof (long int)];
-  } u;
+             } u;
-  u.l = 1;
+             u.l = 1;
-  return u.c[sizeof (long int) - 1] == 1;
+             return u.c[sizeof (long int) - 1] == 1;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
  ac_cv_c_bigendian=no
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+  ac_cv_c_bigendian=yes
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-ac_cv_c_bigendian=yes
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
+    fi
 fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_bigendian" >&5
+$as_echo "$ac_cv_c_bigendian" >&6; }
+ case $ac_cv_c_bigendian in #(
+   yes)
+     $as_echo "#define WORDS_BIGENDIAN 1" >>confdefs.h
+;; #(
+   no)
+      ;; #(
+   universal)
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+$as_echo "#define AC_APPLE_UNIVERSAL_BUILD 1" >>confdefs.h
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_c_bigendian" >&5
-echo "${ECHO_T}$ac_cv_c_bigendian" >&6; }
-case $ac_cv_c_bigendian in
-  yes)
-cat >>confdefs.h <<\_ACEOF
+     ;; #(
-#define WORDS_BIGENDIAN 1
+   *)
-_ACEOF
+     as_fn_error $? "unknown endianness
- ;;
+ presetting ac_cv_c_bigendian=no (or yes) will help" "$LINENO" 5 ;;
-  no)
+ esac
-     ;;
-  *)
-    { { echo "$as_me:$LINENO: error: unknown endianness
-presetting ac_cv_c_bigendian=no (or yes) will help" >&5
-echo "$as_me: error: unknown endianness
-presetting ac_cv_c_bigendian=no (or yes) will help" >&2;}
-   { (exit 1); exit 1; }; } ;;
-esac
 # Checks for programs.
@@ -3734,10 +4094,10 @@ for ac_prog in gawk mawk nawk awk
 do
  # Extract the first word of "$ac_prog", so it can be a program name with args.
 set dummy $ac_prog; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_AWK+set}" = set; then
+if ${ac_cv_prog_AWK+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$AWK"; then
  ac_cv_prog_AWK="$AWK" # Let the user override the test.
@@ -3747,25 +4107,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_AWK="$ac_prog"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 AWK=$ac_cv_prog_AWK
 if test -n "$AWK"; then
-  { echo "$as_me:$LINENO: result: $AWK" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-echo "${ECHO_T}$AWK" >&6; }
+$as_echo "$AWK" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -3777,15 +4137,15 @@ ac_cpp='$CPP $CPPFLAGS'
 ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
 ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
 ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ echo "$as_me:$LINENO: checking how to run the C preprocessor" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
-echo $ECHO_N "checking how to run the C preprocessor... $ECHO_C" >&6; }
+$as_echo_n "checking how to run the C preprocessor... " >&6; }
 # On Suns, sometimes $CPP names a directory.
 if test -n "$CPP" && test -d "$CPP"; then
  CPP=
 fi
 if test -z "$CPP"; then
-  if test "${ac_cv_prog_CPP+set}" = set; then
+  if ${ac_cv_prog_CPP+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
      # Double quotes because CPP needs to be expanded
    for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
@@ -3799,11 +4159,7 @@ do
  # <limits.h> exists even on freestanding compilers.
  # On the NeXT, cc -E runs the code through the compiler's parser,
  # not just through cpp. "Syntax error" is here to catch this case.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #ifdef __STDC__
 # include <limits.h>
@@ -3812,76 +4168,34 @@ cat >>conftest.$ac_ext <<_ACEOF
 #endif
                     Syntax error
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  :
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+else
  # Broken: fails on valid input.
 continue
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
  # OK, works on sane cases.  Now check whether nonexistent headers
  # can be detected and how.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <ac_nonexistent.h>
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
  # Broken: success on invalid input.
 continue
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
  # Passes both tests.
 ac_preproc_ok=:
 break
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
 done
 # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.err conftest.$ac_ext
+rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then
+if $ac_preproc_ok; then :
  break
 fi
@@ -3893,8 +4207,8 @@ fi
 else
  ac_cv_prog_CPP=$CPP
 fi
-{ echo "$as_me:$LINENO: result: $CPP" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
-echo "${ECHO_T}$CPP" >&6; }
+$as_echo "$CPP" >&6; }
 ac_preproc_ok=false
 for ac_c_preproc_warn_flag in '' yes
 do
@@ -3904,11 +4218,7 @@ do
  # <limits.h> exists even on freestanding compilers.
  # On the NeXT, cc -E runs the code through the compiler's parser,
  # not just through cpp. "Syntax error" is here to catch this case.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #ifdef __STDC__
 # include <limits.h>
@@ -3917,83 +4227,40 @@ cat >>conftest.$ac_ext <<_ACEOF
 #endif
                     Syntax error
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  :
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+else
  # Broken: fails on valid input.
 continue
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
  # OK, works on sane cases.  Now check whether nonexistent headers
  # can be detected and how.
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <ac_nonexistent.h>
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+if ac_fn_c_try_cpp "$LINENO"; then :
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
  # Broken: success on invalid input.
 continue
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
  # Passes both tests.
 ac_preproc_ok=:
 break
 fi
+rm -f conftest.err conftest.i conftest.$ac_ext
-rm -f conftest.err conftest.$ac_ext
 done
 # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.err conftest.$ac_ext
+rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then
+if $ac_preproc_ok; then :
-  :
 else
-  { { echo "$as_me:$LINENO: error: C preprocessor \"$CPP\" fails sanity check
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-See \`config.log' for more details." >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-echo "$as_me: error: C preprocessor \"$CPP\" fails sanity check
+as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
-See \`config.log' for more details." >&2;}
+See \`config.log' for more details" "$LINENO" 5; }
-   { (exit 1); exit 1; }; }
 fi
 ac_ext=c
@@ -4005,10 +4272,10 @@ ac_compiler_gnu=$ac_cv_c_compiler_gnu
 if test -n "$ac_tool_prefix"; then
  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
 set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_RANLIB+set}" = set; then
+if ${ac_cv_prog_RANLIB+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$RANLIB"; then
  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
@@ -4018,25 +4285,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 RANLIB=$ac_cv_prog_RANLIB
 if test -n "$RANLIB"; then
-  { echo "$as_me:$LINENO: result: $RANLIB" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-echo "${ECHO_T}$RANLIB" >&6; }
+$as_echo "$RANLIB" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -4045,10 +4312,10 @@ if test -z "$ac_cv_prog_RANLIB"; then
  ac_ct_RANLIB=$RANLIB
  # Extract the first word of "ranlib", so it can be a program name with args.
 set dummy ranlib; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_ac_ct_RANLIB+set}" = set; then
+if ${ac_cv_prog_ac_ct_RANLIB+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$ac_ct_RANLIB"; then
  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
@@ -4058,25 +4325,25 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
 fi
 fi
 ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
 if test -n "$ac_ct_RANLIB"; then
-  { echo "$as_me:$LINENO: result: $ac_ct_RANLIB" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-echo "${ECHO_T}$ac_ct_RANLIB" >&6; }
+$as_echo "$ac_ct_RANLIB" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
  if test "x$ac_ct_RANLIB" = x; then
@@ -4084,12 +4351,8 @@ fi
  else
    case $cross_compiling:$ac_tool_warned in
 yes:)
-{ echo "$as_me:$LINENO: WARNING: In the future, Autoconf will not detect cross-tools
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-whose name does not start with the host triplet.  If you think this
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-configuration is useful to you, please write to autoconf@gnu.org." >&5
-echo "$as_me: WARNING: In the future, Autoconf will not detect cross-tools
-whose name does not start with the host triplet.  If you think this
-configuration is useful to you, please write to autoconf@gnu.org." >&2;}
 ac_tool_warned=yes ;;
 esac
    RANLIB=$ac_ct_RANLIB
@@ -4111,22 +4374,23 @@ fi
 # SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
 # OS/2's system install, which has a completely different semantic
 # ./install, which can be erroneously created by make from ./install.sh.
-{ echo "$as_me:$LINENO: checking for a BSD-compatible install" >&5
+# Reject install programs that cannot install multiple files.
-echo $ECHO_N "checking for a BSD-compatible install... $ECHO_C" >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
+$as_echo_n "checking for a BSD-compatible install... " >&6; }
 if test -z "$INSTALL"; then
-if test "${ac_cv_path_install+set}" = set; then
+if ${ac_cv_path_install+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  # Account for people who put trailing slashes in PATH elements.
+    # Account for people who put trailing slashes in PATH elements.
-case $as_dir/ in
+case $as_dir/ in #((
-  ./ | .// | /cC/* | \
+  ./ | .// | /[cC]/* | \
  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:\\/os2\\/install\\/* | ?:\\/OS2\\/INSTALL\\/* | \
+  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
  /usr/ucb/* ) ;;
  *)
    # OSF1 and SCO ODT 3.0 have their own names for install.
@@ -4144,17 +4408,29 @@ case $as_dir/ in
            # program-specific install script used by HP pwplus--don't use.
            :
          else
-            ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
+            rm -rf conftest.one conftest.two conftest.dir
-            break 3
+            echo one > conftest.one
+            echo two > conftest.two
+            mkdir conftest.dir
+            if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
+              test -s conftest.one && test -s conftest.two &&
+              test -s conftest.dir/conftest.one &&
+              test -s conftest.dir/conftest.two
+            then
+              ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
+              break 3
+            fi
          fi
        fi
      done
    done
    ;;
 esac
-done
+  done
 IFS=$as_save_IFS
+rm -rf conftest.one conftest.two conftest.dir
 fi
  if test "${ac_cv_path_install+set}" = set; then
@@ -4167,8 +4443,8 @@ fi
    INSTALL=$ac_install_sh
  fi
 fi
-{ echo "$as_me:$LINENO: result: $INSTALL" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-echo "${ECHO_T}$INSTALL" >&6; }
+$as_echo "$INSTALL" >&6; }
 # Use test -z because SunOS4 sh mishandles braces in ${var-val}.
 # It thinks the first close brace ends the variable substitution.
@@ -4178,48 +4454,43 @@ test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
 test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-{ echo "$as_me:$LINENO: checking for egrep" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-echo $ECHO_N "checking for egrep... $ECHO_C" >&6; }
+$as_echo_n "checking for egrep... " >&6; }
-if test "${ac_cv_path_EGREP+set}" = set; then
+if ${ac_cv_path_EGREP+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
   then ac_cv_path_EGREP="$GREP -E"
   else
-     # Extract the first word of "egrep" to use in msg output
+     if test -z "$EGREP"; then
-if test -z "$EGREP"; then
-set dummy egrep; ac_prog_name=$2
-if test "${ac_cv_path_EGREP+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
  ac_path_EGREP_found=false
-# Loop through the user's path and test for each of PROGNAME-LIST
+  # Loop through the user's path and test for each of PROGNAME-LIST
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_prog in egrep; do
+    for ac_prog in egrep; do
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
-    ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
+      ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
-    { test -f "$ac_path_EGREP" && $as_test_x "$ac_path_EGREP"; } || continue
+      { test -f "$ac_path_EGREP" && $as_test_x "$ac_path_EGREP"; } || continue
-    # Check for GNU ac_path_EGREP and select it if it is found.
+# Check for GNU ac_path_EGREP and select it if it is found.
  # Check for GNU $ac_path_EGREP
 case `"$ac_path_EGREP" --version 2>&1` in
 *GNU*)
  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
 *)
  ac_count=0
-  echo $ECHO_N "0123456789$ECHO_C" >"conftest.in"
+  $as_echo_n 0123456789 >"conftest.in"
  while :
  do
    cat "conftest.in" "conftest.in" >"conftest.tmp"
    mv "conftest.tmp" "conftest.in"
    cp "conftest.in" "conftest.nl"
-    echo 'EGREP' >> "conftest.nl"
+    $as_echo 'EGREP' >> "conftest.nl"
    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    ac_count=`expr $ac_count + 1`
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
      # Best one so far, save it but keep looking for a better one
      ac_cv_path_EGREP="$ac_path_EGREP"
@@ -4231,42 +4502,31 @@ case `"$ac_path_EGREP" --version 2>&1` in
  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
 esac
+      $ac_path_EGREP_found && break 3
-    $ac_path_EGREP_found && break 3
+    done
+  done
  done
-done
-done
 IFS=$as_save_IFS
+  if test -z "$ac_cv_path_EGREP"; then
+    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-fi
+  fi
-EGREP="$ac_cv_path_EGREP"
-if test -z "$EGREP"; then
-  { { echo "$as_me:$LINENO: error: no acceptable $ac_prog_name could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" >&5
-echo "$as_me: error: no acceptable $ac_prog_name could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" >&2;}
-   { (exit 1); exit 1; }; }
-fi
 else
  ac_cv_path_EGREP=$EGREP
 fi
   fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_path_EGREP" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-echo "${ECHO_T}$ac_cv_path_EGREP" >&6; }
+$as_echo "$ac_cv_path_EGREP" >&6; }
 EGREP="$ac_cv_path_EGREP"
 # Extract the first word of "ar", so it can be a program name with args.
 set dummy ar; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_AR+set}" = set; then
+if ${ac_cv_path_AR+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $AR in
  [\\/]* | ?:[\\/]*)
@@ -4278,14 +4538,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_AR="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4293,20 +4553,20 @@ esac
 fi
 AR=$ac_cv_path_AR
 if test -n "$AR"; then
-  { echo "$as_me:$LINENO: result: $AR" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-echo "${ECHO_T}$AR" >&6; }
+$as_echo "$AR" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "cat", so it can be a program name with args.
 set dummy cat; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_CAT+set}" = set; then
+if ${ac_cv_path_CAT+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $CAT in
  [\\/]* | ?:[\\/]*)
@@ -4318,14 +4578,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_CAT="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4333,20 +4593,20 @@ esac
 fi
 CAT=$ac_cv_path_CAT
 if test -n "$CAT"; then
-  { echo "$as_me:$LINENO: result: $CAT" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CAT" >&5
-echo "${ECHO_T}$CAT" >&6; }
+$as_echo "$CAT" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "kill", so it can be a program name with args.
 set dummy kill; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_KILL+set}" = set; then
+if ${ac_cv_path_KILL+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $KILL in
  [\\/]* | ?:[\\/]*)
@@ -4358,14 +4618,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_KILL="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4373,11 +4633,11 @@ esac
 fi
 KILL=$ac_cv_path_KILL
 if test -n "$KILL"; then
-  { echo "$as_me:$LINENO: result: $KILL" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $KILL" >&5
-echo "${ECHO_T}$KILL" >&6; }
+$as_echo "$KILL" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -4385,10 +4645,10 @@ for ac_prog in perl5 perl
 do
  # Extract the first word of "$ac_prog", so it can be a program name with args.
 set dummy $ac_prog; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_PERL+set}" = set; then
+if ${ac_cv_path_PERL+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $PERL in
  [\\/]* | ?:[\\/]*)
@@ -4400,14 +4660,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_PERL="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4415,11 +4675,11 @@ esac
 fi
 PERL=$ac_cv_path_PERL
 if test -n "$PERL"; then
-  { echo "$as_me:$LINENO: result: $PERL" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PERL" >&5
-echo "${ECHO_T}$PERL" >&6; }
+$as_echo "$PERL" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -4428,10 +4688,10 @@ done
 # Extract the first word of "sed", so it can be a program name with args.
 set dummy sed; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_SED+set}" = set; then
+if ${ac_cv_path_SED+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $SED in
  [\\/]* | ?:[\\/]*)
@@ -4443,14 +4703,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_SED="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4458,21 +4718,21 @@ esac
 fi
 SED=$ac_cv_path_SED
 if test -n "$SED"; then
-  { echo "$as_me:$LINENO: result: $SED" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SED" >&5
-echo "${ECHO_T}$SED" >&6; }
+$as_echo "$SED" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "ent", so it can be a program name with args.
 set dummy ent; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_ENT+set}" = set; then
+if ${ac_cv_path_ENT+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $ENT in
  [\\/]* | ?:[\\/]*)
@@ -4484,14 +4744,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_ENT="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4499,21 +4759,21 @@ esac
 fi
 ENT=$ac_cv_path_ENT
 if test -n "$ENT"; then
-  { echo "$as_me:$LINENO: result: $ENT" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ENT" >&5
-echo "${ECHO_T}$ENT" >&6; }
+$as_echo "$ENT" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "bash", so it can be a program name with args.
 set dummy bash; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_TEST_MINUS_S_SH+set}" = set; then
+if ${ac_cv_path_TEST_MINUS_S_SH+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $TEST_MINUS_S_SH in
  [\\/]* | ?:[\\/]*)
@@ -4525,14 +4785,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_TEST_MINUS_S_SH="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4540,20 +4800,20 @@ esac
 fi
 TEST_MINUS_S_SH=$ac_cv_path_TEST_MINUS_S_SH
 if test -n "$TEST_MINUS_S_SH"; then
-  { echo "$as_me:$LINENO: result: $TEST_MINUS_S_SH" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $TEST_MINUS_S_SH" >&5
-echo "${ECHO_T}$TEST_MINUS_S_SH" >&6; }
+$as_echo "$TEST_MINUS_S_SH" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "ksh", so it can be a program name with args.
 set dummy ksh; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_TEST_MINUS_S_SH+set}" = set; then
+if ${ac_cv_path_TEST_MINUS_S_SH+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $TEST_MINUS_S_SH in
  [\\/]* | ?:[\\/]*)
@@ -4565,14 +4825,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_TEST_MINUS_S_SH="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4580,20 +4840,20 @@ esac
 fi
 TEST_MINUS_S_SH=$ac_cv_path_TEST_MINUS_S_SH
 if test -n "$TEST_MINUS_S_SH"; then
-  { echo "$as_me:$LINENO: result: $TEST_MINUS_S_SH" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $TEST_MINUS_S_SH" >&5
-echo "${ECHO_T}$TEST_MINUS_S_SH" >&6; }
+$as_echo "$TEST_MINUS_S_SH" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "sh", so it can be a program name with args.
 set dummy sh; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_TEST_MINUS_S_SH+set}" = set; then
+if ${ac_cv_path_TEST_MINUS_S_SH+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $TEST_MINUS_S_SH in
  [\\/]* | ?:[\\/]*)
@@ -4605,14 +4865,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_TEST_MINUS_S_SH="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4620,20 +4880,20 @@ esac
 fi
 TEST_MINUS_S_SH=$ac_cv_path_TEST_MINUS_S_SH
 if test -n "$TEST_MINUS_S_SH"; then
-  { echo "$as_me:$LINENO: result: $TEST_MINUS_S_SH" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $TEST_MINUS_S_SH" >&5
-echo "${ECHO_T}$TEST_MINUS_S_SH" >&6; }
+$as_echo "$TEST_MINUS_S_SH" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "sh", so it can be a program name with args.
 set dummy sh; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_SH+set}" = set; then
+if ${ac_cv_path_SH+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $SH in
  [\\/]* | ?:[\\/]*)
@@ -4645,14 +4905,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_SH="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4660,20 +4920,20 @@ esac
 fi
 SH=$ac_cv_path_SH
 if test -n "$SH"; then
-  { echo "$as_me:$LINENO: result: $SH" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SH" >&5
-echo "${ECHO_T}$SH" >&6; }
+$as_echo "$SH" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "groff", so it can be a program name with args.
 set dummy groff; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_GROFF+set}" = set; then
+if ${ac_cv_path_GROFF+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $GROFF in
  [\\/]* | ?:[\\/]*)
@@ -4685,14 +4945,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_GROFF="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4700,20 +4960,20 @@ esac
 fi
 GROFF=$ac_cv_path_GROFF
 if test -n "$GROFF"; then
-  { echo "$as_me:$LINENO: result: $GROFF" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GROFF" >&5
-echo "${ECHO_T}$GROFF" >&6; }
+$as_echo "$GROFF" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "nroff", so it can be a program name with args.
 set dummy nroff; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_NROFF+set}" = set; then
+if ${ac_cv_path_NROFF+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $NROFF in
  [\\/]* | ?:[\\/]*)
@@ -4725,14 +4985,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_NROFF="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4740,20 +5000,20 @@ esac
 fi
 NROFF=$ac_cv_path_NROFF
 if test -n "$NROFF"; then
-  { echo "$as_me:$LINENO: result: $NROFF" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NROFF" >&5
-echo "${ECHO_T}$NROFF" >&6; }
+$as_echo "$NROFF" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "mandoc", so it can be a program name with args.
 set dummy mandoc; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_MANDOC+set}" = set; then
+if ${ac_cv_path_MANDOC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $MANDOC in
  [\\/]* | ?:[\\/]*)
@@ -4765,14 +5025,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_MANDOC="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -4780,11 +5040,11 @@ esac
 fi
 MANDOC=$ac_cv_path_MANDOC
 if test -n "$MANDOC"; then
-  { echo "$as_me:$LINENO: result: $MANDOC" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MANDOC" >&5
-echo "${ECHO_T}$MANDOC" >&6; }
+$as_echo "$MANDOC" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -4798,18 +5058,18 @@ elif test "x$NROFF" != "x" ; then
 elif test "x$GROFF" != "x" ; then
        MANFMT="$GROFF -mandoc -Tascii"
 else
-        { echo "$as_me:$LINENO: WARNING: no manpage formatted found" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: no manpage formatted found" >&5
-echo "$as_me: WARNING: no manpage formatted found" >&2;}
+$as_echo "$as_me: WARNING: no manpage formatted found" >&2;}
        MANFMT="false"
 fi
 # Extract the first word of "groupadd", so it can be a program name with args.
 set dummy groupadd; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_PATH_GROUPADD_PROG+set}" = set; then
+if ${ac_cv_path_PATH_GROUPADD_PROG+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $PATH_GROUPADD_PROG in
  [\\/]* | ?:[\\/]*)
@@ -4821,14 +5081,14 @@ for as_dir in /usr/sbin${PATH_SEPARATOR}/etc
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_PATH_GROUPADD_PROG="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  test -z "$ac_cv_path_PATH_GROUPADD_PROG" && ac_cv_path_PATH_GROUPADD_PROG="groupadd"
@@ -4837,20 +5097,20 @@ esac
 fi
 PATH_GROUPADD_PROG=$ac_cv_path_PATH_GROUPADD_PROG
 if test -n "$PATH_GROUPADD_PROG"; then
-  { echo "$as_me:$LINENO: result: $PATH_GROUPADD_PROG" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PATH_GROUPADD_PROG" >&5
-echo "${ECHO_T}$PATH_GROUPADD_PROG" >&6; }
+$as_echo "$PATH_GROUPADD_PROG" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "useradd", so it can be a program name with args.
 set dummy useradd; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_PATH_USERADD_PROG+set}" = set; then
+if ${ac_cv_path_PATH_USERADD_PROG+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $PATH_USERADD_PROG in
  [\\/]* | ?:[\\/]*)
@@ -4862,14 +5122,14 @@ for as_dir in /usr/sbin${PATH_SEPARATOR}/etc
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_PATH_USERADD_PROG="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  test -z "$ac_cv_path_PATH_USERADD_PROG" && ac_cv_path_PATH_USERADD_PROG="useradd"
@@ -4878,20 +5138,20 @@ esac
 fi
 PATH_USERADD_PROG=$ac_cv_path_PATH_USERADD_PROG
 if test -n "$PATH_USERADD_PROG"; then
-  { echo "$as_me:$LINENO: result: $PATH_USERADD_PROG" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PATH_USERADD_PROG" >&5
-echo "${ECHO_T}$PATH_USERADD_PROG" >&6; }
+$as_echo "$PATH_USERADD_PROG" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Extract the first word of "pkgmk", so it can be a program name with args.
 set dummy pkgmk; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_prog_MAKE_PACKAGE_SUPPORTED+set}" = set; then
+if ${ac_cv_prog_MAKE_PACKAGE_SUPPORTED+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  if test -n "$MAKE_PACKAGE_SUPPORTED"; then
  ac_cv_prog_MAKE_PACKAGE_SUPPORTED="$MAKE_PACKAGE_SUPPORTED" # Let the user override the test.
@@ -4901,14 +5161,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_prog_MAKE_PACKAGE_SUPPORTED="yes"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  test -z "$ac_cv_prog_MAKE_PACKAGE_SUPPORTED" && ac_cv_prog_MAKE_PACKAGE_SUPPORTED="no"
@@ -4916,11 +5176,11 @@ fi
 fi
 MAKE_PACKAGE_SUPPORTED=$ac_cv_prog_MAKE_PACKAGE_SUPPORTED
 if test -n "$MAKE_PACKAGE_SUPPORTED"; then
-  { echo "$as_me:$LINENO: result: $MAKE_PACKAGE_SUPPORTED" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MAKE_PACKAGE_SUPPORTED" >&5
-echo "${ECHO_T}$MAKE_PACKAGE_SUPPORTED" >&6; }
+$as_echo "$MAKE_PACKAGE_SUPPORTED" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -4934,16 +5194,16 @@ fi
 # System features
 # Check whether --enable-largefile was given.
-if test "${enable_largefile+set}" = set; then
+if test "${enable_largefile+set}" = set; then :
  enableval=$enable_largefile;
 fi
 if test "$enable_largefile" != no; then
-  { echo "$as_me:$LINENO: checking for special C compiler options needed for large files" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for special C compiler options needed for large files" >&5
-echo $ECHO_N "checking for special C compiler options needed for large files... $ECHO_C" >&6; }
+$as_echo_n "checking for special C compiler options needed for large files... " >&6; }
-if test "${ac_cv_sys_largefile_CC+set}" = set; then
+if ${ac_cv_sys_largefile_CC+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_cv_sys_largefile_CC=no
     if test "$GCC" != yes; then
@@ -4951,11 +5211,7 @@ else
       while :; do
         # IRIX 6.2 and later do not support large files by default,
         # so use the C compiler's -n32 option if that helps.
-         cat >conftest.$ac_ext <<_ACEOF
+         cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 /* Check that off_t can represent 2**63 - 1 correctly.
@@ -4974,58 +5230,14 @@ main ()
  return 0;
 }
 _ACEOF
-         rm -f conftest.$ac_objext
+         if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext
         CC="$CC -n32"
-         rm -f conftest.$ac_objext
+         if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_sys_largefile_CC=' -n32'; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext
         break
       done
@@ -5033,23 +5245,19 @@ rm -f core conftest.err conftest.$ac_objext
       rm -f conftest.$ac_ext
    fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sys_largefile_CC" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sys_largefile_CC" >&5
-echo "${ECHO_T}$ac_cv_sys_largefile_CC" >&6; }
+$as_echo "$ac_cv_sys_largefile_CC" >&6; }
  if test "$ac_cv_sys_largefile_CC" != no; then
    CC=$CC$ac_cv_sys_largefile_CC
  fi
-  { echo "$as_me:$LINENO: checking for _FILE_OFFSET_BITS value needed for large files" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for _FILE_OFFSET_BITS value needed for large files" >&5
-echo $ECHO_N "checking for _FILE_OFFSET_BITS value needed for large files... $ECHO_C" >&6; }
+$as_echo_n "checking for _FILE_OFFSET_BITS value needed for large files... " >&6; }
-if test "${ac_cv_sys_file_offset_bits+set}" = set; then
+if ${ac_cv_sys_file_offset_bits+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  while :; do
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 /* Check that off_t can represent 2**63 - 1 correctly.
@@ -5068,37 +5276,11 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_sys_file_offset_bits=no; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #define _FILE_OFFSET_BITS 64
 #include <sys/types.h>
@@ -5118,38 +5300,16 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_sys_file_offset_bits=64; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
  ac_cv_sys_file_offset_bits=unknown
  break
 done
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sys_file_offset_bits" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sys_file_offset_bits" >&5
-echo "${ECHO_T}$ac_cv_sys_file_offset_bits" >&6; }
+$as_echo "$ac_cv_sys_file_offset_bits" >&6; }
 case $ac_cv_sys_file_offset_bits in #(
  no | unknown) ;;
  *)
@@ -5158,19 +5318,15 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
 ;;
 esac
-rm -f conftest*
+rm -rf conftest*
  if test $ac_cv_sys_file_offset_bits = unknown; then
-    { echo "$as_me:$LINENO: checking for _LARGE_FILES value needed for large files" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for _LARGE_FILES value needed for large files" >&5
-echo $ECHO_N "checking for _LARGE_FILES value needed for large files... $ECHO_C" >&6; }
+$as_echo_n "checking for _LARGE_FILES value needed for large files... " >&6; }
-if test "${ac_cv_sys_large_files+set}" = set; then
+if ${ac_cv_sys_large_files+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  while :; do
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 /* Check that off_t can represent 2**63 - 1 correctly.
@@ -5189,37 +5345,11 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_sys_large_files=no; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #define _LARGE_FILES 1
 #include <sys/types.h>
@@ -5239,38 +5369,16 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_sys_large_files=1; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
  ac_cv_sys_large_files=unknown
  break
 done
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sys_large_files" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sys_large_files" >&5
-echo "${ECHO_T}$ac_cv_sys_large_files" >&6; }
+$as_echo "$ac_cv_sys_large_files" >&6; }
 case $ac_cv_sys_large_files in #(
  no | unknown) ;;
  *)
@@ -5279,15 +5387,13 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
 ;;
 esac
-rm -f conftest*
+rm -rf conftest*
  fi
 fi
 if test -z "$AR" ; then
-        { { echo "$as_me:$LINENO: error: *** 'ar' missing, please install or fix your \$PATH ***" >&5
+        as_fn_error $? "*** 'ar' missing, please install or fix your \$PATH ***" "$LINENO" 5
-echo "$as_me: error: *** 'ar' missing, please install or fix your \$PATH ***" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 # Use LOGIN_PROGRAM from environment if possible
@@ -5301,10 +5407,10 @@ else
        # Search for login
        # Extract the first word of "login", so it can be a program name with args.
 set dummy login; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_LOGIN_PROGRAM_FALLBACK+set}" = set; then
+if ${ac_cv_path_LOGIN_PROGRAM_FALLBACK+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $LOGIN_PROGRAM_FALLBACK in
  [\\/]* | ?:[\\/]*)
@@ -5316,14 +5422,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_LOGIN_PROGRAM_FALLBACK="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -5331,11 +5437,11 @@ esac
 fi
 LOGIN_PROGRAM_FALLBACK=$ac_cv_path_LOGIN_PROGRAM_FALLBACK
 if test -n "$LOGIN_PROGRAM_FALLBACK"; then
-  { echo "$as_me:$LINENO: result: $LOGIN_PROGRAM_FALLBACK" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LOGIN_PROGRAM_FALLBACK" >&5
-echo "${ECHO_T}$LOGIN_PROGRAM_FALLBACK" >&6; }
+$as_echo "$LOGIN_PROGRAM_FALLBACK" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -5349,10 +5455,10 @@ fi
 # Extract the first word of "passwd", so it can be a program name with args.
 set dummy passwd; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_PATH_PASSWD_PROG+set}" = set; then
+if ${ac_cv_path_PATH_PASSWD_PROG+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $PATH_PASSWD_PROG in
  [\\/]* | ?:[\\/]*)
@@ -5364,14 +5470,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_PATH_PASSWD_PROG="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -5379,11 +5485,11 @@ esac
 fi
 PATH_PASSWD_PROG=$ac_cv_path_PATH_PASSWD_PROG
 if test -n "$PATH_PASSWD_PROG"; then
-  { echo "$as_me:$LINENO: result: $PATH_PASSWD_PROG" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PATH_PASSWD_PROG" >&5
-echo "${ECHO_T}$PATH_PASSWD_PROG" >&6; }
+$as_echo "$PATH_PASSWD_PROG" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -5400,18 +5506,14 @@ if test -z "$LD" ; then
 fi
-{ echo "$as_me:$LINENO: checking for inline" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inline" >&5
-echo $ECHO_N "checking for inline... $ECHO_C" >&6; }
+$as_echo_n "checking for inline... " >&6; }
-if test "${ac_cv_c_inline+set}" = set; then
+if ${ac_cv_c_inline+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_cv_c_inline=no
 for ac_kw in inline __inline__ __inline; do
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #ifndef __cplusplus
 typedef int foo_t;
@@ -5420,39 +5522,16 @@ $ac_kw foo_t foo () {return 0; }
 #endif
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_c_inline=$ac_kw
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
  test "$ac_cv_c_inline" != no && break
 done
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_c_inline" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_inline" >&5
-echo "${ECHO_T}$ac_cv_c_inline" >&6; }
+$as_echo "$ac_cv_c_inline" >&6; }
 case $ac_cv_c_inline in
  inline | yes) ;;
@@ -5470,68 +5549,38 @@ _ACEOF
 esac
-{ echo "$as_me:$LINENO: checking whether LLONG_MAX is declared" >&5
+ac_fn_c_check_decl "$LINENO" "LLONG_MAX" "ac_cv_have_decl_LLONG_MAX" "#include <limits.h>
-echo $ECHO_N "checking whether LLONG_MAX is declared... $ECHO_C" >&6; }
+"
-if test "${ac_cv_have_decl_LLONG_MAX+set}" = set; then
+if test "x$ac_cv_have_decl_LLONG_MAX" = xyes; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  have_llong_max=1
-else
+fi
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <limits.h>
-int
-main ()
-{
-#ifndef LLONG_MAX
-  (void) LLONG_MAX;
-#endif
-  ;
+ac_fn_c_check_decl "$LINENO" "SYSTR_POLICY_KILL" "ac_cv_have_decl_SYSTR_POLICY_KILL" "
-  return 0;
+        #include <sys/types.h>
-}
+        #include <sys/param.h>
-_ACEOF
+        #include <dev/systrace.h>
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_LLONG_MAX=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_LLONG_MAX=no
+"
+if test "x$ac_cv_have_decl_SYSTR_POLICY_KILL" = xyes; then :
+  have_systr_policy_kill=1
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+ac_fn_c_check_decl "$LINENO" "RLIMIT_NPROC" "ac_cv_have_decl_RLIMIT_NPROC" "
-fi
+        #include <sys/types.h>
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_LLONG_MAX" >&5
+        #include <sys/resource.h>
-echo "${ECHO_T}$ac_cv_have_decl_LLONG_MAX" >&6; }
-if test $ac_cv_have_decl_LLONG_MAX = yes; then
+"
-  have_llong_max=1
+if test "x$ac_cv_have_decl_RLIMIT_NPROC" = xyes; then :
+$as_echo "#define HAVE_RLIMIT_NPROC /**/" >>confdefs.h
 fi
 use_stack_protector=1
 # Check whether --with-stackprotect was given.
-if test "${with_stackprotect+set}" = set; then
+if test "${with_stackprotect+set}" = set; then :
  withval=$with_stackprotect;
    if test "x$withval" = "xno"; then
        use_stack_protector=0
@@ -5542,319 +5591,191 @@ fi
 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wall" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-echo $ECHO_N "checking if $CC supports -Wall... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wall... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -Wall"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag=""
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wall"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wpointer-arith" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-echo $ECHO_N "checking if $CC supports -Wpointer-arith... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wpointer-arith... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -Wpointer-arith"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag=""
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wpointer-arith"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wuninitialized" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-echo $ECHO_N "checking if $CC supports -Wuninitialized... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wuninitialized... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -Wuninitialized"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag=""
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wuninitialized"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wsign-compare" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsign-compare" >&5
-echo $ECHO_N "checking if $CC supports -Wsign-compare... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wsign-compare... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -Wsign-compare"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag=""
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wsign-compare"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wformat-security" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat-security" >&5
-echo $ECHO_N "checking if $CC supports -Wformat-security... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wformat-security... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -Wformat-security"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag=""
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wformat-security"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wno-pointer-sign" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-sign" >&5
-echo $ECHO_N "checking if $CC supports -Wno-pointer-sign... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wpointer-sign... " >&6; }
        saved_CFLAGS="$CFLAGS"
-        CFLAGS="$CFLAGS -Wno-pointer-sign"
+        CFLAGS="$CFLAGS -Wpointer-sign"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag="-Wno-pointer-sign"
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wpointer-sign"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -Wno-unused-result" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused-result" >&5
-echo $ECHO_N "checking if $CC supports -Wno-unused-result... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -Wunused-result... " >&6; }
        saved_CFLAGS="$CFLAGS"
-        CFLAGS="$CFLAGS -Wno-unused-result"
+        CFLAGS="$CFLAGS -Wunused-result"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag="-Wno-unused-result"
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-Wunused-result"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
        {
-        { echo "$as_me:$LINENO: checking if $CC supports -fno-strict-aliasing" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fno-strict-aliasing" >&5
-echo $ECHO_N "checking if $CC supports -fno-strict-aliasing... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports -fno-strict-aliasing... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -fno-strict-aliasing"
-        cat >conftest.$ac_ext <<_ACEOF
+        _define_flag=""
-void main(void) { return 0; }
+        test "x$_define_flag" = "x" && _define_flag="-fno-strict-aliasing"
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                  CFLAGS="$saved_CFLAGS $_define_flag"
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 }
-        { echo "$as_me:$LINENO: checking gcc version" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking gcc version" >&5
-echo $ECHO_N "checking gcc version... $ECHO_C" >&6; }
+$as_echo_n "checking gcc version... " >&6; }
        GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
        case $GCC_VER in
                1.*) no_attrib_nonnull=1 ;;
@@ -5864,168 +5785,108 @@ echo $ECHO_N "checking gcc version... $ECHO_C" >&6; }
                2.*) no_attrib_nonnull=1 ;;
                *) ;;
        esac
-        { echo "$as_me:$LINENO: result: $GCC_VER" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GCC_VER" >&5
-echo "${ECHO_T}$GCC_VER" >&6; }
+$as_echo "$GCC_VER" >&6; }
-        { echo "$as_me:$LINENO: checking if $CC accepts -fno-builtin-memset" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC accepts -fno-builtin-memset" >&5
-echo $ECHO_N "checking if $CC accepts -fno-builtin-memset... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC accepts -fno-builtin-memset... " >&6; }
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -fno-builtin-memset"
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <string.h>
-#include <string.h>
+int
-int main(void){char b[10]; memset(b, 0, sizeof(b));}
+main ()
+{
+ char b[10]; memset(b, 0, sizeof(b));
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                  CFLAGS="$saved_CFLAGS"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
        # -fstack-protector-all doesn't always work for some GCC versions
        # and/or platforms, so we test if we can.  If it's not supported
        # on a given platform gcc will emit a warning so we use -Werror.
        if test "x$use_stack_protector" = "x1"; then
            for t in -fstack-protector-all -fstack-protector; do
-                { echo "$as_me:$LINENO: checking if $CC supports $t" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports $t" >&5
-echo $ECHO_N "checking if $CC supports $t... $ECHO_C" >&6; }
+$as_echo_n "checking if $CC supports $t... " >&6; }
                saved_CFLAGS="$CFLAGS"
                saved_LDFLAGS="$LDFLAGS"
                CFLAGS="$CFLAGS $t -Werror"
                LDFLAGS="$LDFLAGS $t -Werror"
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <stdio.h>
+int
+main ()
+{
-#include <stdio.h>
+        char x[256];
-int main(void){char x[256]; snprintf(x, sizeof(x), "XXX"); return 0;}
+        snprintf(x, sizeof(x), "XXX");
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
                      CFLAGS="$saved_CFLAGS $t"
                      LDFLAGS="$saved_LDFLAGS $t"
-                      { echo "$as_me:$LINENO: checking if $t works" >&5
+                      { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $t works" >&5
-echo $ECHO_N "checking if $t works... $ECHO_C" >&6; }
+$as_echo_n "checking if $t works... " >&6; }
-                      if test "$cross_compiling" = yes; then
+                      if test "$cross_compiling" = yes; then :
-   { echo "$as_me:$LINENO: WARNING: cross compiling: cannot test" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: cannot test" >&5
-echo "$as_me: WARNING: cross compiling: cannot test" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: cannot test" >&2;}
                          break
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <stdio.h>
+int
+main ()
+{
-#include <stdio.h>
+        char x[256];
-int main(void){char x[256]; snprintf(x, sizeof(x), "XXX"); return 0;}
+        snprintf(x, sizeof(x), "XXX");
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
                          break
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "$as_me: failed program was:" >&5
+$as_echo "no" >&6; }
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
- { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
                CFLAGS="$saved_CFLAGS"
                LDFLAGS="$saved_LDFLAGS"
            done
@@ -6036,61 +5897,10 @@ rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
                unset ac_cv_have_decl_LLONG_MAX
                saved_CFLAGS="$CFLAGS"
                CFLAGS="$CFLAGS -std=gnu99"
-                { echo "$as_me:$LINENO: checking whether LLONG_MAX is declared" >&5
+                ac_fn_c_check_decl "$LINENO" "LLONG_MAX" "ac_cv_have_decl_LLONG_MAX" "#include <limits.h>
-echo $ECHO_N "checking whether LLONG_MAX is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_LLONG_MAX+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <limits.h>
+"
-int
+if test "x$ac_cv_have_decl_LLONG_MAX" = xyes; then :
-main ()
-{
-#ifndef LLONG_MAX
-  (void) LLONG_MAX;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_LLONG_MAX=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_LLONG_MAX=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_LLONG_MAX" >&5
-echo "${ECHO_T}$ac_cv_have_decl_LLONG_MAX" >&6; }
-if test $ac_cv_have_decl_LLONG_MAX = yes; then
  have_llong_max=1
 else
  CFLAGS="$saved_CFLAGS"
@@ -6101,15 +5911,13 @@ fi
 if test "x$no_attrib_nonnull" != "x1" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ATTRIBUTE__NONNULL__ 1" >>confdefs.h
-#define HAVE_ATTRIBUTE__NONNULL__ 1
-_ACEOF
 fi
 # Check whether --with-rpath was given.
-if test "${with_rpath+set}" = set; then
+if test "${with_rpath+set}" = set; then :
  withval=$with_rpath;
                if test "x$withval" = "xno" ; then
                        need_dash_r=""
@@ -6125,7 +5933,7 @@ fi
 # Allow user to specify flags
 # Check whether --with-cflags was given.
-if test "${with_cflags+set}" = set; then
+if test "${with_cflags+set}" = set; then :
  withval=$with_cflags;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -6137,7 +5945,7 @@ fi
 # Check whether --with-cppflags was given.
-if test "${with_cppflags+set}" = set; then
+if test "${with_cppflags+set}" = set; then :
  withval=$with_cppflags;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -6149,7 +5957,7 @@ fi
 # Check whether --with-ldflags was given.
-if test "${with_ldflags+set}" = set; then
+if test "${with_ldflags+set}" = set; then :
  withval=$with_ldflags;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -6161,7 +5969,7 @@ fi
 # Check whether --with-libs was given.
-if test "${with_libs+set}" = set; then
+if test "${with_libs+set}" = set; then :
  withval=$with_libs;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -6173,7 +5981,7 @@ fi
 # Check whether --with-Werror was given.
-if test "${with_Werror+set}" = set; then
+if test "${with_Werror+set}" = set; then :
  withval=$with_Werror;
                if test -n "$withval"  &&  test "x$withval" != "xno"; then
                        werror_flags="-Werror"
@@ -6186,70 +5994,7 @@ if test "${with_Werror+set}" = set; then
 fi
+for ac_header in  \
-for ac_header in \
        bstring.h \
        crypt.h \
        crypto/sha2.h \
@@ -6314,143 +6059,12 @@ for ac_header in \
        utmpx.h \
        vis.h \
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
 _ACEOF
 fi
@@ -6459,62 +6073,17 @@ done
 # lastlog.h requires sys/time.h to be included first on Solaris
 for ac_header in lastlog.h
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  ac_fn_c_check_header_compile "$LINENO" "lastlog.h" "ac_cv_header_lastlog_h" "
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #ifdef HAVE_SYS_TIME_H
 # include <sys/time.h>
 #endif
+"
-#include <$ac_header>
+if test "x$ac_cv_header_lastlog_h" = xyes; then :
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  eval "$as_ac_Header=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LASTLOG_H 1
 _ACEOF
 fi
@@ -6523,62 +6092,17 @@ done
 # sys/ptms.h requires sys/stream.h to be included first on Solaris
 for ac_header in sys/ptms.h
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  ac_fn_c_check_header_compile "$LINENO" "sys/ptms.h" "ac_cv_header_sys_ptms_h" "
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #ifdef HAVE_SYS_STREAM_H
 # include <sys/stream.h>
 #endif
+"
-#include <$ac_header>
+if test "x$ac_cv_header_sys_ptms_h" = xyes; then :
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  eval "$as_ac_Header=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_SYS_PTMS_H 1
 _ACEOF
 fi
@@ -6587,60 +6111,15 @@ done
 # login_cap.h requires sys/types.h on NetBSD
 for ac_header in login_cap.h
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  ac_fn_c_check_header_compile "$LINENO" "login_cap.h" "ac_cv_header_login_cap_h" "
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/types.h>
+"
-#include <$ac_header>
+if test "x$ac_cv_header_login_cap_h" = xyes; then :
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  eval "$as_ac_Header=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LOGIN_CAP_H 1
 _ACEOF
 fi
@@ -6649,60 +6128,15 @@ done
 # older BSDs need sys/param.h before sys/mount.h
 for ac_header in sys/mount.h
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  ac_fn_c_check_header_compile "$LINENO" "sys/mount.h" "ac_cv_header_sys_mount_h" "
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/param.h>
+"
-#include <$ac_header>
+if test "x$ac_cv_header_sys_mount_h" = xyes; then :
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  eval "$as_ac_Header=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_SYS_MOUNT_H 1
 _ACEOF
 fi
@@ -6723,45 +6157,27 @@ case "$host" in
        # particularly with older versions of vac or xlc.
        # It also throws errors about null macro argments, but these are
        # not fatal.
-        { echo "$as_me:$LINENO: checking if compiler allows macro redefinitions" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if compiler allows macro redefinitions" >&5
-echo $ECHO_N "checking if compiler allows macro redefinitions... $ECHO_C" >&6; }
+$as_echo_n "checking if compiler allows macro redefinitions... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #define testmacro foo
 #define testmacro bar
-int main(void) { exit(0); }
+int
+main ()
+{
+ exit(0);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
              CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
              LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
              CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
@@ -6769,11 +6185,10 @@ echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-        { echo "$as_me:$LINENO: checking how to specify blibpath for linker ($LD)" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking how to specify blibpath for linker ($LD)" >&5
-echo $ECHO_N "checking how to specify blibpath for linker ($LD)... $ECHO_C" >&6; }
+$as_echo_n "checking how to specify blibpath for linker ($LD)... " >&6; }
        if (test -z "$blibpath"); then
                blibpath="/usr/lib:/lib"
        fi
@@ -6786,11 +6201,7 @@ echo $ECHO_N "checking how to specify blibpath for linker ($LD)... $ECHO_C" >&6;
        for tryflags in $flags ;do
                if (test -z "$blibflags"); then
                        LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
-                        cat >conftest.$ac_ext <<_ACEOF
+                        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -6801,147 +6212,36 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  blibflags=$tryflags
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
                fi
        done
        if (test -z "$blibflags"); then
-                { echo "$as_me:$LINENO: result: not found" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
-echo "${ECHO_T}not found" >&6; }
+$as_echo "not found" >&6; }
-                { { echo "$as_me:$LINENO: error: *** must be able to specify blibpath on AIX - check config.log" >&5
+                as_fn_error $? "*** must be able to specify blibpath on AIX - check config.log" "$LINENO" 5
-echo "$as_me: error: *** must be able to specify blibpath on AIX - check config.log" >&2;}
-   { (exit 1); exit 1; }; }
        else
-                { echo "$as_me:$LINENO: result: $blibflags" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $blibflags" >&5
-echo "${ECHO_T}$blibflags" >&6; }
+$as_echo "$blibflags" >&6; }
        fi
        LDFLAGS="$saved_LDFLAGS"
-                { echo "$as_me:$LINENO: checking for authenticate" >&5
+                ac_fn_c_check_func "$LINENO" "authenticate" "ac_cv_func_authenticate"
-echo $ECHO_N "checking for authenticate... $ECHO_C" >&6; }
+if test "x$ac_cv_func_authenticate" = xyes; then :
-if test "${ac_cv_func_authenticate+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define authenticate to an innocuous variant, in case <limits.h> declares authenticate.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define authenticate innocuous_authenticate
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char authenticate (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef authenticate
+$as_echo "#define WITH_AIXAUTHENTICATE 1" >>confdefs.h
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char authenticate ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_authenticate || defined __stub___authenticate
-choke me
-#endif
-int
-main ()
-{
-return authenticate ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_authenticate=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_authenticate=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_authenticate" >&5
-echo "${ECHO_T}$ac_cv_func_authenticate" >&6; }
-if test $ac_cv_func_authenticate = yes; then
-cat >>confdefs.h <<\_ACEOF
-#define WITH_AIXAUTHENTICATE 1
-_ACEOF
 else
-  { echo "$as_me:$LINENO: checking for authenticate in -ls" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for authenticate in -ls" >&5
-echo $ECHO_N "checking for authenticate in -ls... $ECHO_C" >&6; }
+$as_echo_n "checking for authenticate in -ls... " >&6; }
-if test "${ac_cv_lib_s_authenticate+set}" = set; then
+if ${ac_cv_lib_s_authenticate+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-ls  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -6959,42 +6259,19 @@ return authenticate ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_s_authenticate=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_s_authenticate=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_s_authenticate=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_s_authenticate" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_s_authenticate" >&5
-echo "${ECHO_T}$ac_cv_lib_s_authenticate" >&6; }
+$as_echo "$ac_cv_lib_s_authenticate" >&6; }
-if test $ac_cv_lib_s_authenticate = yes; then
+if test "x$ac_cv_lib_s_authenticate" = xyes; then :
-   cat >>confdefs.h <<\_ACEOF
+   $as_echo "#define WITH_AIXAUTHENTICATE 1" >>confdefs.h
-#define WITH_AIXAUTHENTICATE 1
-_ACEOF
                                LIBS="$LIBS -ls"
@@ -7003,807 +6280,232 @@ fi
 fi
-                { echo "$as_me:$LINENO: checking whether authenticate is declared" >&5
+                ac_fn_c_check_decl "$LINENO" "authenticate" "ac_cv_have_decl_authenticate" "#include <usersec.h>
-echo $ECHO_N "checking whether authenticate is declared... $ECHO_C" >&6; }
+"
-if test "${ac_cv_have_decl_authenticate+set}" = set; then
+if test "x$ac_cv_have_decl_authenticate" = xyes; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  ac_have_decl=1
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <usersec.h>
-int
-main ()
-{
-#ifndef authenticate
-  (void) authenticate;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_authenticate=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_authenticate=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_authenticate" >&5
-echo "${ECHO_T}$ac_cv_have_decl_authenticate" >&6; }
-if test $ac_cv_have_decl_authenticate = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_AUTHENTICATE 1
+#define HAVE_DECL_AUTHENTICATE $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_AUTHENTICATE 0
-_ACEOF
-fi
-{ echo "$as_me:$LINENO: checking whether loginrestrictions is declared" >&5
-echo $ECHO_N "checking whether loginrestrictions is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_loginrestrictions+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
+ac_fn_c_check_decl "$LINENO" "loginrestrictions" "ac_cv_have_decl_loginrestrictions" "#include <usersec.h>
-cat >>conftest.$ac_ext <<_ACEOF
+"
-/* end confdefs.h.  */
+if test "x$ac_cv_have_decl_loginrestrictions" = xyes; then :
-#include <usersec.h>
+  ac_have_decl=1
-int
-main ()
-{
-#ifndef loginrestrictions
-  (void) loginrestrictions;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_loginrestrictions=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_loginrestrictions=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_loginrestrictions" >&5
-echo "${ECHO_T}$ac_cv_have_decl_loginrestrictions" >&6; }
-if test $ac_cv_have_decl_loginrestrictions = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LOGINRESTRICTIONS 1
+#define HAVE_DECL_LOGINRESTRICTIONS $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LOGINRESTRICTIONS 0
-_ACEOF
-fi
-{ echo "$as_me:$LINENO: checking whether loginsuccess is declared" >&5
-echo $ECHO_N "checking whether loginsuccess is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_loginsuccess+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <usersec.h>
-int
-main ()
-{
-#ifndef loginsuccess
-  (void) loginsuccess;
-#endif
-  ;
-  return 0;
-}
 _ACEOF
-rm -f conftest.$ac_objext
+ac_fn_c_check_decl "$LINENO" "loginsuccess" "ac_cv_have_decl_loginsuccess" "#include <usersec.h>
-if { (ac_try="$ac_compile"
+"
-case "(($ac_try" in
+if test "x$ac_cv_have_decl_loginsuccess" = xyes; then :
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  ac_have_decl=1
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_loginsuccess=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_loginsuccess=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_loginsuccess" >&5
-echo "${ECHO_T}$ac_cv_have_decl_loginsuccess" >&6; }
-if test $ac_cv_have_decl_loginsuccess = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LOGINSUCCESS 1
+#define HAVE_DECL_LOGINSUCCESS $ac_have_decl
 _ACEOF
+ac_fn_c_check_decl "$LINENO" "passwdexpired" "ac_cv_have_decl_passwdexpired" "#include <usersec.h>
+"
-else
+if test "x$ac_cv_have_decl_passwdexpired" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
+  ac_have_decl=1
-#define HAVE_DECL_LOGINSUCCESS 0
-_ACEOF
-fi
-{ echo "$as_me:$LINENO: checking whether passwdexpired is declared" >&5
-echo $ECHO_N "checking whether passwdexpired is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_passwdexpired+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <usersec.h>
-int
-main ()
-{
-#ifndef passwdexpired
-  (void) passwdexpired;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_passwdexpired=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_passwdexpired=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_passwdexpired" >&5
-echo "${ECHO_T}$ac_cv_have_decl_passwdexpired" >&6; }
-if test $ac_cv_have_decl_passwdexpired = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_PASSWDEXPIRED 1
+#define HAVE_DECL_PASSWDEXPIRED $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_PASSWDEXPIRED 0
 _ACEOF
+ac_fn_c_check_decl "$LINENO" "setauthdb" "ac_cv_have_decl_setauthdb" "#include <usersec.h>
+"
-fi
+if test "x$ac_cv_have_decl_setauthdb" = xyes; then :
-{ echo "$as_me:$LINENO: checking whether setauthdb is declared" >&5
+  ac_have_decl=1
-echo $ECHO_N "checking whether setauthdb is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_setauthdb+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <usersec.h>
-int
-main ()
-{
-#ifndef setauthdb
-  (void) setauthdb;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_setauthdb=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_setauthdb=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_setauthdb" >&5
-echo "${ECHO_T}$ac_cv_have_decl_setauthdb" >&6; }
-if test $ac_cv_have_decl_setauthdb = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SETAUTHDB 1
+#define HAVE_DECL_SETAUTHDB $ac_have_decl
 _ACEOF
+                ac_fn_c_check_decl "$LINENO" "loginfailed" "ac_cv_have_decl_loginfailed" "#include <usersec.h>
+"
+if test "x$ac_cv_have_decl_loginfailed" = xyes; then :
+  ac_have_decl=1
 else
-  cat >>confdefs.h <<_ACEOF
+  ac_have_decl=0
-#define HAVE_DECL_SETAUTHDB 0
-_ACEOF
-fi
-                { echo "$as_me:$LINENO: checking whether loginfailed is declared" >&5
-echo $ECHO_N "checking whether loginfailed is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_loginfailed+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <usersec.h>
-int
-main ()
-{
-#ifndef loginfailed
-  (void) loginfailed;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_loginfailed=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_loginfailed=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_loginfailed" >&5
-echo "${ECHO_T}$ac_cv_have_decl_loginfailed" >&6; }
-if test $ac_cv_have_decl_loginfailed = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LOGINFAILED 1
+#define HAVE_DECL_LOGINFAILED $ac_have_decl
-_ACEOF
-{ echo "$as_me:$LINENO: checking if loginfailed takes 4 arguments" >&5
-echo $ECHO_N "checking if loginfailed takes 4 arguments... $ECHO_C" >&6; }
-                  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
+if test $ac_have_decl = 1; then :
-cat >>conftest.$ac_ext <<_ACEOF
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking if loginfailed takes 4 arguments" >&5
+$as_echo_n "checking if loginfailed takes 4 arguments... " >&6; }
+            cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-#include <usersec.h>
+ #include <usersec.h>
 int
 main ()
 {
-(void)loginfailed("user","host","tty",0);
+ (void)loginfailed("user","host","tty",0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define AIX_LOGINFAILED_4ARG 1" >>confdefs.h
-#define AIX_LOGINFAILED_4ARG 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-        { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LOGINFAILED 0
-_ACEOF
 fi
+        for ac_func in getgrset setauthdb
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-for ac_func in getgrset setauthdb
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-do
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
-        { echo "$as_me:$LINENO: checking whether F_CLOSEM is declared" >&5
+        ac_fn_c_check_decl "$LINENO" "F_CLOSEM" "ac_cv_have_decl_F_CLOSEM" " #include <limits.h>
-echo $ECHO_N "checking whether F_CLOSEM is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_F_CLOSEM+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
- #include <limits.h>
              #include <fcntl.h>
+"
+if test "x$ac_cv_have_decl_F_CLOSEM" = xyes; then :
-int
+$as_echo "#define HAVE_FCNTL_CLOSEM 1" >>confdefs.h
-main ()
-{
-#ifndef F_CLOSEM
-  (void) F_CLOSEM;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_F_CLOSEM=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_F_CLOSEM=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_F_CLOSEM" >&5
-echo "${ECHO_T}$ac_cv_have_decl_F_CLOSEM" >&6; }
-if test $ac_cv_have_decl_F_CLOSEM = yes; then
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_FCNTL_CLOSEM 1
-_ACEOF
 fi
        check_for_aix_broken_getaddrinfo=1
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_REALPATH 1" >>confdefs.h
-#define BROKEN_REALPATH 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
-#define DISABLE_LASTLOG 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOGIN_NEEDS_UTMPX 1" >>confdefs.h
-#define LOGIN_NEEDS_UTMPX 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
-#define SPT_TYPE SPT_REUSEARGV
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSHPAM_CHAUTHTOK_NEEDS_RUID 1" >>confdefs.h
-#define SSHPAM_CHAUTHTOK_NEEDS_RUID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define PTY_ZEROREAD 1" >>confdefs.h
-#define PTY_ZEROREAD 1
-_ACEOF
        ;;
 *-*-cygwin*)
        check_for_libcrypt_later=1
        LIBS="$LIBS /usr/lib/textreadmode.o"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_CYGWIN 1" >>confdefs.h
-#define HAVE_CYGWIN 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
-#define DISABLE_SHADOW 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define NO_X11_UNIX_SOCKETS 1" >>confdefs.h
-#define NO_X11_UNIX_SOCKETS 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define NO_IPPORT_RESERVED_CONCEPT 1" >>confdefs.h
-#define NO_IPPORT_RESERVED_CONCEPT 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define DISABLE_FD_PASSING 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_IOBUFSZ 65535" >>confdefs.h
-#define SSH_IOBUFSZ 65535
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define FILESYSTEM_NO_BACKSLASH 1" >>confdefs.h
-#define FILESYSTEM_NO_BACKSLASH 1
-_ACEOF
        ;;
 *-*-dgux*)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define IP_TOS_IS_BROKEN 1" >>confdefs.h
-#define IP_TOS_IS_BROKEN 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
        ;;
 *-*-darwin*)
-        { echo "$as_me:$LINENO: checking if we have working getaddrinfo" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we have working getaddrinfo" >&5
-echo $ECHO_N "checking if we have working getaddrinfo... $ECHO_C" >&6; }
+$as_echo_n "checking if we have working getaddrinfo... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-  { echo "$as_me:$LINENO: result: assume it is working" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: assume it is working" >&5
-echo "${ECHO_T}assume it is working" >&6; }
+$as_echo "assume it is working" >&6; }
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
-#include <mach-o/dyld.h>
+ #include <mach-o/dyld.h>
 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
                exit(0);
        else
                exit(1);
 }
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: working" >&5
-case "(($ac_try" in
+$as_echo "working" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: working" >&5
-echo "${ECHO_T}working" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: buggy" >&5
-echo "$as_me: failed program was:" >&5
+$as_echo "buggy" >&6; }
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+$as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
-{ echo "$as_me:$LINENO: result: buggy" >&5
-echo "${ECHO_T}buggy" >&6; }
-cat >>confdefs.h <<\_ACEOF
-#define BROKEN_GETADDRINFO 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_GLOB 1" >>confdefs.h
-#define BROKEN_GLOB 1
-_ACEOF
 cat >>confdefs.h <<_ACEOF
@@ -7811,109 +6513,126 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_FREEBSD 1" >>confdefs.h
-#define SSH_TUN_FREEBSD 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_COMPAT_AF 1" >>confdefs.h
-#define SSH_TUN_COMPAT_AF 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
-#define SSH_TUN_PREPEND_AF 1
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we have the Security Authorization Session API" >&5
+$as_echo_n "checking if we have the Security Authorization Session API... " >&6; }
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <Security/AuthSession.h>
+int
+main ()
+{
+SessionCreate(0, 0);
+  ;
+  return 0;
+}
 _ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_use_security_session_api="yes"
+$as_echo "#define USE_SECURITY_SESSION_API 1" >>confdefs.h
-        { echo "$as_me:$LINENO: checking whether AU_IPv4 is declared" >&5
+                 LIBS="$LIBS -framework Security"
-echo $ECHO_N "checking whether AU_IPv4 is declared... $ECHO_C" >&6; }
+                 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-if test "${ac_cv_have_decl_AU_IPv4+set}" = set; then
+$as_echo "yes" >&6; }
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  ac_cv_use_security_session_api="no"
-/* confdefs.h.  */
+                 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-_ACEOF
+$as_echo "no" >&6; }
-cat confdefs.h >>conftest.$ac_ext
+fi
-cat >>conftest.$ac_ext <<_ACEOF
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we have an in-memory credentials cache" >&5
+$as_echo_n "checking if we have an in-memory credentials cache... " >&6; }
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-$ac_includes_default
+#include <Kerberos/Kerberos.h>
 int
 main ()
 {
-#ifndef AU_IPv4
+cc_context_t c;
-  (void) AU_IPv4;
+                 (void) cc_initialize (&c, 0, NULL, NULL);
-#endif
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
+$as_echo "#define USE_CCAPI 1" >>confdefs.h
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
+                 LIBS="$LIBS -framework Security"
-esac
+                 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
+$as_echo "yes" >&6; }
-  (eval "$ac_compile") 2>conftest.er1
+                 if test "x$ac_cv_use_security_session_api" = "xno"; then
-  ac_status=$?
+                        as_fn_error $? "*** Need a security framework to use the credentials cache API ***" "$LINENO" 5
-  grep -v '^ *+' conftest.er1 >conftest.err
+                fi
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_AU_IPv4=yes
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-        ac_cv_have_decl_AU_IPv4=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_AU_IPv4" >&5
+        ac_fn_c_check_decl "$LINENO" "AU_IPv4" "ac_cv_have_decl_AU_IPv4" "$ac_includes_default"
-echo "${ECHO_T}$ac_cv_have_decl_AU_IPv4" >&6; }
+if test "x$ac_cv_have_decl_AU_IPv4" = xyes; then :
-if test $ac_cv_have_decl_AU_IPv4 = yes; then
-  :
 else
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define AU_IPv4 0" >>confdefs.h
-#define AU_IPv4 0
-_ACEOF
            #include <bsm/audit.h>
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LASTLOG_WRITE_PUTUTXLINE 1" >>confdefs.h
-#define LASTLOG_WRITE_PUTUTXLINE 1
+fi
+$as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
+        for ac_func in sandbox_init
+do :
+  ac_fn_c_check_func "$LINENO" "sandbox_init" "ac_cv_func_sandbox_init"
+if test "x$ac_cv_func_sandbox_init" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_SANDBOX_INIT 1
 _ACEOF
+fi
+done
+        for ac_header in sandbox.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "sandbox.h" "ac_cv_header_sandbox_h" "$ac_includes_default"
+if test "x$ac_cv_header_sandbox_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_SANDBOX_H 1
+_ACEOF
 fi
+done
        ;;
 *-*-dragonfly*)
        SSHDLIBS="$SSHDLIBS -lcrypt"
        ;;
 *-*-haiku*)
    LIBS="$LIBS -lbsd "
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socket in -lnetwork" >&5
-{ echo "$as_me:$LINENO: checking for socket in -lnetwork" >&5
+$as_echo_n "checking for socket in -lnetwork... " >&6; }
-echo $ECHO_N "checking for socket in -lnetwork... $ECHO_C" >&6; }
+if ${ac_cv_lib_network_socket+:} false; then :
-if test "${ac_cv_lib_network_socket+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lnetwork  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -7931,39 +6650,18 @@ return socket ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_network_socket=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_network_socket=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_network_socket=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_network_socket" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_network_socket" >&5
-echo "${ECHO_T}$ac_cv_lib_network_socket" >&6; }
+$as_echo "$ac_cv_lib_network_socket" >&6; }
-if test $ac_cv_lib_network_socket = yes; then
+if test "x$ac_cv_lib_network_socket" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBNETWORK 1
 _ACEOF
@@ -7972,9 +6670,7 @@ _ACEOF
 fi
-    cat >>confdefs.h <<\_ACEOF
+    $as_echo "#define HAVE_U_INT64_T 1" >>confdefs.h
-#define HAVE_U_INT64_T 1
-_ACEOF
    MANTYPE=man
    ;;
@@ -7982,43 +6678,28 @@ _ACEOF
        # first we define all of the options common to all HP-UX releases
        CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
        IPADDR_IN_DISPLAY=yes
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOGIN_NO_ENDOPT 1" >>confdefs.h
-#define LOGIN_NO_ENDOPT 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOGIN_NEEDS_UTMPX 1" >>confdefs.h
-#define LOGIN_NEEDS_UTMPX 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOCKED_PASSWD_STRING \"*\"" >>confdefs.h
-#define LOCKED_PASSWD_STRING "*"
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SPT_TYPE SPT_PSTAT" >>confdefs.h
-#define SPT_TYPE SPT_PSTAT
-_ACEOF
-        MAIL="/var/mail/username"
+        maildir="/var/mail"
        LIBS="$LIBS -lsec"
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for t_error in -lxnet" >&5
-{ echo "$as_me:$LINENO: checking for t_error in -lxnet" >&5
+$as_echo_n "checking for t_error in -lxnet... " >&6; }
-echo $ECHO_N "checking for t_error in -lxnet... $ECHO_C" >&6; }
+if ${ac_cv_lib_xnet_t_error+:} false; then :
-if test "${ac_cv_lib_xnet_t_error+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lxnet  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -8036,39 +6717,18 @@ return t_error ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_xnet_t_error=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_xnet_t_error=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_xnet_t_error=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_xnet_t_error" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_xnet_t_error" >&5
-echo "${ECHO_T}$ac_cv_lib_xnet_t_error" >&6; }
+$as_echo "$ac_cv_lib_xnet_t_error" >&6; }
-if test $ac_cv_lib_xnet_t_error = yes; then
+if test "x$ac_cv_lib_xnet_t_error" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBXNET 1
 _ACEOF
@@ -8076,9 +6736,7 @@ _ACEOF
  LIBS="-lxnet $LIBS"
 else
-  { { echo "$as_me:$LINENO: error: *** -lxnet needed on HP-UX - check config.log ***" >&5
+  as_fn_error $? "*** -lxnet needed on HP-UX - check config.log ***" "$LINENO" 5
-echo "$as_me: error: *** -lxnet needed on HP-UX - check config.log ***" >&2;}
-   { (exit 1); exit 1; }; }
 fi
@@ -8091,19 +6749,13 @@ fi
                ;;
        *-*-hpux11*)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define PAM_SUN_CODEBASE 1" >>confdefs.h
-#define PAM_SUN_CODEBASE 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_UTMP 1" >>confdefs.h
-#define DISABLE_UTMP 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_BTMP 1" >>confdefs.h
-#define USE_BTMP 1
-_ACEOF
                check_for_hpux_broken_getaddrinfo=1
                check_for_conflicting_getspnam=1
@@ -8114,9 +6766,7 @@ _ACEOF
        case "$host" in
        *-*-hpux10.26)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SECUREWARE 1" >>confdefs.h
-#define HAVE_SECUREWARE 1
-_ACEOF
                disable_ptmx_check=yes
                LIBS="$LIBS -lsecpw"
@@ -8126,191 +6776,67 @@ _ACEOF
 *-*-irix5*)
        PATH="$PATH:/usr/etc"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_INET_NTOA 1" >>confdefs.h
-#define BROKEN_INET_NTOA 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
-#define WITH_ABBREV_NO_TTY 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
-#define LOCKED_PASSWD_STRING "*LK*"
-_ACEOF
        ;;
 *-*-irix6*)
        PATH="$PATH:/usr/etc"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define WITH_IRIX_ARRAY 1" >>confdefs.h
-#define WITH_IRIX_ARRAY 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
-#define WITH_IRIX_PROJECT 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define WITH_IRIX_PROJECT 1" >>confdefs.h
-#define WITH_IRIX_AUDIT 1
-_ACEOF
-        { echo "$as_me:$LINENO: checking for jlimit_startjob" >&5
-echo $ECHO_N "checking for jlimit_startjob... $ECHO_C" >&6; }
-if test "${ac_cv_func_jlimit_startjob+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define jlimit_startjob to an innocuous variant, in case <limits.h> declares jlimit_startjob.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define jlimit_startjob innocuous_jlimit_startjob
-/* System header to define __stub macros and hopefully few prototypes,
+$as_echo "#define WITH_IRIX_AUDIT 1" >>confdefs.h
-    which can conflict with char jlimit_startjob (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
+        ac_fn_c_check_func "$LINENO" "jlimit_startjob" "ac_cv_func_jlimit_startjob"
-# include <limits.h>
+if test "x$ac_cv_func_jlimit_startjob" = xyes; then :
-#else
-# include <assert.h>
-#endif
-#undef jlimit_startjob
+$as_echo "#define WITH_IRIX_JOBS 1" >>confdefs.h
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char jlimit_startjob ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_jlimit_startjob || defined __stub___jlimit_startjob
-choke me
-#endif
-int
-main ()
-{
-return jlimit_startjob ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_jlimit_startjob=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_jlimit_startjob=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_jlimit_startjob" >&5
-echo "${ECHO_T}$ac_cv_func_jlimit_startjob" >&6; }
-if test $ac_cv_func_jlimit_startjob = yes; then
-cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_INET_NTOA 1" >>confdefs.h
-#define WITH_IRIX_JOBS 1
-_ACEOF
-fi
-        cat >>confdefs.h <<\_ACEOF
-#define BROKEN_INET_NTOA 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_UPDWTMPX 1" >>confdefs.h
-#define BROKEN_UPDWTMPX 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
-#define WITH_ABBREV_NO_TTY 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
-#define LOCKED_PASSWD_STRING "*LK*"
-_ACEOF
        ;;
 *-*-k*bsd*-gnu | *-*-kopensolaris*-gnu)
        check_for_libcrypt_later=1
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define PAM_TTY_KLUDGE 1" >>confdefs.h
-#define PAM_TTY_KLUDGE 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOCKED_PASSWD_PREFIX \"!\"" >>confdefs.h
-#define LOCKED_PASSWD_PREFIX "!"
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
-#define SPT_TYPE SPT_REUSEARGV
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define _PATH_BTMP \"/var/log/btmp\"" >>confdefs.h
-#define _PATH_BTMP "/var/log/btmp"
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_BTMP 1" >>confdefs.h
-#define USE_BTMP 1
-_ACEOF
        ;;
 *-*-linux*)
@@ -8318,188 +6844,39 @@ _ACEOF
        check_for_libcrypt_later=1
        check_for_openpty_ctty_bug=1
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define PAM_TTY_KLUDGE 1" >>confdefs.h
-#define PAM_TTY_KLUDGE 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOCKED_PASSWD_PREFIX \"!\"" >>confdefs.h
-#define LOCKED_PASSWD_PREFIX "!"
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SPT_TYPE SPT_REUSEARGV" >>confdefs.h
-#define SPT_TYPE SPT_REUSEARGV
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LINK_OPNOTSUPP_ERRNO EPERM" >>confdefs.h
-#define LINK_OPNOTSUPP_ERRNO EPERM
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define _PATH_BTMP \"/var/log/btmp\"" >>confdefs.h
-#define _PATH_BTMP "/var/log/btmp"
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_BTMP 1" >>confdefs.h
-#define USE_BTMP 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LINUX_OOM_ADJUST 1" >>confdefs.h
-#define LINUX_OOM_ADJUST 1
-_ACEOF
        inet6_default_4in6=yes
        case `uname -r` in
        1.*|2.0.*)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_CMSG_TYPE 1" >>confdefs.h
-#define BROKEN_CMSG_TYPE 1
-_ACEOF
                ;;
        esac
        # tun(4) forwarding compat code
+        for ac_header in linux/if_tun.h
-for ac_header in linux/if_tun.h
+do :
-do
+  ac_fn_c_check_header_mongrel "$LINENO" "linux/if_tun.h" "ac_cv_header_linux_if_tun_h" "$ac_includes_default"
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+if test "x$ac_cv_header_linux_if_tun_h" = xyes; then :
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LINUX_IF_TUN_H 1
 _ACEOF
 fi
@@ -8508,27 +6885,19 @@ done
        if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_LINUX 1" >>confdefs.h
-#define SSH_TUN_LINUX 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_COMPAT_AF 1" >>confdefs.h
-#define SSH_TUN_COMPAT_AF 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
-#define SSH_TUN_PREPEND_AF 1
-_ACEOF
        fi
        ;;
 mips-sony-bsd|mips-sony-newsos4)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define NEED_SETPGRP 1" >>confdefs.h
-#define NEED_SETPGRP 1
-_ACEOF
        SONY=1
        ;;
@@ -8538,460 +6907,140 @@ _ACEOF
                need_dash_r=1
        fi
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_FREEBSD 1" >>confdefs.h
-#define SSH_TUN_FREEBSD 1
-_ACEOF
-        if test "${ac_cv_header_net_if_tap_h+set}" = set; then
+        ac_fn_c_check_header_mongrel "$LINENO" "net/if_tap.h" "ac_cv_header_net_if_tap_h" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for net/if_tap.h" >&5
+if test "x$ac_cv_header_net_if_tap_h" = xyes; then :
-echo $ECHO_N "checking for net/if_tap.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_net_if_tap_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_net_if_tap_h" >&5
-echo "${ECHO_T}$ac_cv_header_net_if_tap_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking net/if_tap.h usability" >&5
-echo $ECHO_N "checking net/if_tap.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <net/if_tap.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking net/if_tap.h presence" >&5
-echo $ECHO_N "checking net/if_tap.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <net/if_tap.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: net/if_tap.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: net/if_tap.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: net/if_tap.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: net/if_tap.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: net/if_tap.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: net/if_tap.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: net/if_tap.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: net/if_tap.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for net/if_tap.h" >&5
-echo $ECHO_N "checking for net/if_tap.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_net_if_tap_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_net_if_tap_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_net_if_tap_h" >&5
-echo "${ECHO_T}$ac_cv_header_net_if_tap_h" >&6; }
-fi
-if test $ac_cv_header_net_if_tap_h = yes; then
-  :
 else
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_NO_L2 1" >>confdefs.h
-#define SSH_TUN_NO_L2 1
-_ACEOF
 fi
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
-#define SSH_TUN_PREPEND_AF 1
-_ACEOF
        ;;
 *-*-freebsd*)
        check_for_libcrypt_later=1
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOCKED_PASSWD_PREFIX \"*LOCKED*\"" >>confdefs.h
-#define LOCKED_PASSWD_PREFIX "*LOCKED*"
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
-#define SSH_TUN_FREEBSD 1
-_ACEOF
-        if test "${ac_cv_header_net_if_tap_h+set}" = set; then
-  { echo "$as_me:$LINENO: checking for net/if_tap.h" >&5
-echo $ECHO_N "checking for net/if_tap.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_net_if_tap_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_net_if_tap_h" >&5
-echo "${ECHO_T}$ac_cv_header_net_if_tap_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking net/if_tap.h usability" >&5
-echo $ECHO_N "checking net/if_tap.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <net/if_tap.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking net/if_tap.h presence" >&5
-echo $ECHO_N "checking net/if_tap.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <net/if_tap.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
+$as_echo "#define SSH_TUN_FREEBSD 1" >>confdefs.h
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
+        ac_fn_c_check_header_mongrel "$LINENO" "net/if_tap.h" "ac_cv_header_net_if_tap_h" "$ac_includes_default"
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
+if test "x$ac_cv_header_net_if_tap_h" = xyes; then :
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: net/if_tap.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: net/if_tap.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: net/if_tap.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: net/if_tap.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: net/if_tap.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: net/if_tap.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: net/if_tap.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: net/if_tap.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: net/if_tap.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for net/if_tap.h" >&5
-echo $ECHO_N "checking for net/if_tap.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_net_if_tap_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_net_if_tap_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_net_if_tap_h" >&5
-echo "${ECHO_T}$ac_cv_header_net_if_tap_h" >&6; }
-fi
-if test $ac_cv_header_net_if_tap_h = yes; then
-  :
 else
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_NO_L2 1" >>confdefs.h
-#define SSH_TUN_NO_L2 1
-_ACEOF
 fi
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_GLOB 1" >>confdefs.h
-#define BROKEN_GLOB 1
-_ACEOF
        ;;
 *-*-bsdi*)
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
        ;;
 *-next-*)
        conf_lastlog_location="/usr/adm/lastlog"
        conf_utmp_location=/etc/utmp
        conf_wtmp_location=/usr/adm/wtmp
-        MAIL=/usr/spool/mail
+        maildir=/usr/spool/mail
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_NEXT 1" >>confdefs.h
-#define HAVE_NEXT 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_REALPATH 1" >>confdefs.h
-#define BROKEN_REALPATH 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_SAVED_UIDS 1" >>confdefs.h
-#define BROKEN_SAVED_UIDS 1
-_ACEOF
        ;;
 *-*-openbsd*)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ATTRIBUTE__SENTINEL__ 1" >>confdefs.h
-#define HAVE_ATTRIBUTE__SENTINEL__ 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ATTRIBUTE__BOUNDED__ 1" >>confdefs.h
-#define HAVE_ATTRIBUTE__BOUNDED__ 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_TUN_OPENBSD 1" >>confdefs.h
-#define SSH_TUN_OPENBSD 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SYSLOG_R_SAFE_IN_SIGHAND 1" >>confdefs.h
-#define SYSLOG_R_SAFE_IN_SIGHAND 1
-_ACEOF
        ;;
 *-*-solaris*)
        if test "x$withval" != "xno" ; then
                need_dash_r=1
        fi
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define PAM_SUN_CODEBASE 1" >>confdefs.h
-#define PAM_SUN_CODEBASE 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOGIN_NEEDS_UTMPX 1" >>confdefs.h
-#define LOGIN_NEEDS_UTMPX 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOGIN_NEEDS_TERM 1" >>confdefs.h
-#define LOGIN_NEEDS_TERM 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define PAM_TTY_KLUDGE 1" >>confdefs.h
-#define PAM_TTY_KLUDGE 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSHPAM_CHAUTHTOK_NEEDS_RUID 1" >>confdefs.h
-#define SSHPAM_CHAUTHTOK_NEEDS_RUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
-#define LOCKED_PASSWD_STRING "*LK*"
-_ACEOF
        # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
-#define SSHD_ACQUIRES_CTTY 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
-#define PASSWD_NEEDS_USERNAME 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_TCGETATTR_ICANON 1" >>confdefs.h
-#define BROKEN_TCGETATTR_ICANON 1
-_ACEOF
        external_path_file=/etc/default/login
        # hardwire lastlog location (can't detect it on some versions)
        conf_lastlog_location="/var/adm/lastlog"
-        { echo "$as_me:$LINENO: checking for obsolete utmp and wtmp in solaris2.x" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for obsolete utmp and wtmp in solaris2.x" >&5
-echo $ECHO_N "checking for obsolete utmp and wtmp in solaris2.x... $ECHO_C" >&6; }
+$as_echo_n "checking for obsolete utmp and wtmp in solaris2.x... " >&6; }
        sol2ver=`echo "$host"| sed -e 's/.*[0-9]\.//'`
        if test "$sol2ver" -ge 8; then
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-                cat >>confdefs.h <<\_ACEOF
+                $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
-#define DISABLE_UTMP 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_WTMP 1" >>confdefs.h
-#define DISABLE_WTMP 1
-_ACEOF
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # Check whether --with-solaris-contracts was given.
-if test "${with_solaris_contracts+set}" = set; then
+if test "${with_solaris_contracts+set}" = set; then :
  withval=$with_solaris_contracts;
-                { echo "$as_me:$LINENO: checking for ct_tmpl_activate in -lcontract" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ct_tmpl_activate in -lcontract" >&5
-echo $ECHO_N "checking for ct_tmpl_activate in -lcontract... $ECHO_C" >&6; }
+$as_echo_n "checking for ct_tmpl_activate in -lcontract... " >&6; }
-if test "${ac_cv_lib_contract_ct_tmpl_activate+set}" = set; then
+if ${ac_cv_lib_contract_ct_tmpl_activate+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lcontract  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -9009,43 +7058,20 @@ return ct_tmpl_activate ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_contract_ct_tmpl_activate=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_contract_ct_tmpl_activate=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_contract_ct_tmpl_activate=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_contract_ct_tmpl_activate" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_contract_ct_tmpl_activate" >&5
-echo "${ECHO_T}$ac_cv_lib_contract_ct_tmpl_activate" >&6; }
+$as_echo "$ac_cv_lib_contract_ct_tmpl_activate" >&6; }
-if test $ac_cv_lib_contract_ct_tmpl_activate = yes; then
+if test "x$ac_cv_lib_contract_ct_tmpl_activate" = xyes; then :
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_SOLARIS_PROCESS_CONTRACTS 1" >>confdefs.h
-#define USE_SOLARIS_PROCESS_CONTRACTS 1
-_ACEOF
                          SSHDLIBS="$SSHDLIBS -lcontract"
                          SPC_MSG="yes"
@@ -9056,20 +7082,16 @@ fi
 # Check whether --with-solaris-projects was given.
-if test "${with_solaris_projects+set}" = set; then
+if test "${with_solaris_projects+set}" = set; then :
  withval=$with_solaris_projects;
-                { echo "$as_me:$LINENO: checking for setproject in -lproject" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setproject in -lproject" >&5
-echo $ECHO_N "checking for setproject in -lproject... $ECHO_C" >&6; }
+$as_echo_n "checking for setproject in -lproject... " >&6; }
-if test "${ac_cv_lib_project_setproject+set}" = set; then
+if ${ac_cv_lib_project_setproject+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lproject  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -9087,43 +7109,20 @@ return setproject ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_project_setproject=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_project_setproject=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_project_setproject=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_project_setproject" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_project_setproject" >&5
-echo "${ECHO_T}$ac_cv_lib_project_setproject" >&6; }
+$as_echo "$ac_cv_lib_project_setproject" >&6; }
-if test $ac_cv_lib_project_setproject = yes; then
+if test "x$ac_cv_lib_project_setproject" = xyes; then :
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_SOLARIS_PROJECTS 1" >>confdefs.h
-#define USE_SOLARIS_PROJECTS 1
-_ACEOF
                        SSHDLIBS="$SSHDLIBS -lproject"
                        SP_MSG="yes"
@@ -9135,150 +7134,48 @@ fi
        ;;
 *-*-sunos4*)
        CPPFLAGS="$CPPFLAGS -DSUNOS4"
+        for ac_func in getpwanam
-for ac_func in getpwanam
+do :
-do
+  ac_fn_c_check_func "$LINENO" "getpwanam" "ac_cv_func_getpwanam"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if test "x$ac_cv_func_getpwanam" = xyes; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_GETPWANAM 1
 _ACEOF
 fi
 done
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define PAM_SUN_CODEBASE 1" >>confdefs.h
-#define PAM_SUN_CODEBASE 1
-_ACEOF
        conf_utmp_location=/etc/utmp
        conf_wtmp_location=/var/adm/wtmp
        conf_lastlog_location=/var/adm/lastlog
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
        ;;
 *-ncr-sysv*)
        LIBS="$LIBS -lc89"
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
-#define SSHD_ACQUIRES_CTTY 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
        ;;
 *-sni-sysv*)
        # /usr/ucblib MUST NOT be searched on ReliantUNIX
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlsym in -ldl" >&5
-{ echo "$as_me:$LINENO: checking for dlsym in -ldl" >&5
+$as_echo_n "checking for dlsym in -ldl... " >&6; }
-echo $ECHO_N "checking for dlsym in -ldl... $ECHO_C" >&6; }
+if ${ac_cv_lib_dl_dlsym+:} false; then :
-if test "${ac_cv_lib_dl_dlsym+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-ldl  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -9296,39 +7193,18 @@ return dlsym ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_dl_dlsym=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_dl_dlsym=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_dl_dlsym=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_dl_dlsym" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlsym" >&5
-echo "${ECHO_T}$ac_cv_lib_dl_dlsym" >&6; }
+$as_echo "$ac_cv_lib_dl_dlsym" >&6; }
-if test $ac_cv_lib_dl_dlsym = yes; then
+if test "x$ac_cv_lib_dl_dlsym" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBDL 1
 _ACEOF
@@ -9338,18 +7214,14 @@ _ACEOF
 fi
        # -lresolv needs to be at the end of LIBS or DNS lookups break
-        { echo "$as_me:$LINENO: checking for res_query in -lresolv" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for res_query in -lresolv" >&5
-echo $ECHO_N "checking for res_query in -lresolv... $ECHO_C" >&6; }
+$as_echo_n "checking for res_query in -lresolv... " >&6; }
-if test "${ac_cv_lib_resolv_res_query+set}" = set; then
+if ${ac_cv_lib_resolv_res_query+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lresolv  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -9367,66 +7239,33 @@ return res_query ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_resolv_res_query=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_resolv_res_query=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_resolv_res_query=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_resolv_res_query" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_res_query" >&5
-echo "${ECHO_T}$ac_cv_lib_resolv_res_query" >&6; }
+$as_echo "$ac_cv_lib_resolv_res_query" >&6; }
-if test $ac_cv_lib_resolv_res_query = yes; then
+if test "x$ac_cv_lib_resolv_res_query" = xyes; then :
   LIBS="$LIBS -lresolv"
 fi
        IPADDR_IN_DISPLAY=yes
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define IP_TOS_IS_BROKEN 1" >>confdefs.h
-#define IP_TOS_IS_BROKEN 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
-#define SSHD_ACQUIRES_CTTY 1
-_ACEOF
        external_path_file=/etc/default/login
        # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
@@ -9435,88 +7274,55 @@ _ACEOF
        ;;
 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 *-*-sysv4.2*)
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
-#define PASSWD_NEEDS_USERNAME 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
-#define LOCKED_PASSWD_STRING "*LK*"
-_ACEOF
        ;;
 # UnixWare 7.x, OpenUNIX 8
 *-*-sysv5*)
        CPPFLAGS="$CPPFLAGS -Dvsnprintf=_xvsnprintf -Dsnprintf=_xsnprintf"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define UNIXWARE_LONG_PASSWORDS 1" >>confdefs.h
-#define UNIXWARE_LONG_PASSWORDS 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
-#define BROKEN_GETADDRINFO 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
-#define PASSWD_NEEDS_USERNAME 1
-_ACEOF
        case "$host" in
        *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
+                maildir=/var/spool/mail
                TEST_SHELL=/u95/bin/sh
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_LIBIAF 1" >>confdefs.h
-#define BROKEN_LIBIAF 1
-_ACEOF
-                cat >>confdefs.h <<\_ACEOF
+                $as_echo "#define BROKEN_UPDWTMPX 1" >>confdefs.h
-#define BROKEN_UPDWTMPX 1
-_ACEOF
-                { echo "$as_me:$LINENO: checking for getluid in -lprot" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getluid in -lprot" >&5
-echo $ECHO_N "checking for getluid in -lprot... $ECHO_C" >&6; }
+$as_echo_n "checking for getluid in -lprot... " >&6; }
-if test "${ac_cv_lib_prot_getluid+set}" = set; then
+if ${ac_cv_lib_prot_getluid+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lprot  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -9534,150 +7340,40 @@ return getluid ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_prot_getluid=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_prot_getluid=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_prot_getluid=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_prot_getluid" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_prot_getluid" >&5
-echo "${ECHO_T}$ac_cv_lib_prot_getluid" >&6; }
+$as_echo "$ac_cv_lib_prot_getluid" >&6; }
-if test $ac_cv_lib_prot_getluid = yes; then
+if test "x$ac_cv_lib_prot_getluid" = xyes; then :
   LIBS="$LIBS -lprot"
+                        for ac_func in getluid setluid
+do :
-for ac_func in getluid setluid
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-do
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_SECUREWARE 1" >>confdefs.h
-#define HAVE_SECUREWARE 1
-_ACEOF
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
-#define DISABLE_SHADOW 1
-_ACEOF
 fi
                ;;
-        *)      cat >>confdefs.h <<\_ACEOF
+        *)      $as_echo "#define LOCKED_PASSWD_STRING \"*LK*\"" >>confdefs.h
-#define LOCKED_PASSWD_STRING "*LK*"
-_ACEOF
                check_for_libcrypt_later=1
                ;;
@@ -9687,9 +7383,7 @@ _ACEOF
        ;;
 # SCO UNIX and OEM versions of SCO UNIX
 *-*-sco3.2v4*)
-        { { echo "$as_me:$LINENO: error: \"This Platform is no longer supported.\"" >&5
+        as_fn_error $? "\"This Platform is no longer supported.\"" "$LINENO" 5
-echo "$as_me: error: \"This Platform is no longer supported.\"" >&2;}
-   { (exit 1); exit 1; }; }
        ;;
 # SCO OpenServer 5.x
 *-*-sco3.2v5*)
@@ -9698,140 +7392,35 @@ echo "$as_me: error: \"This Platform is no longer supported.\"" >&2;}
        fi
        LIBS="$LIBS -lprot -lx -ltinfo -lm"
        no_dev_ptmx=1
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
-#define HAVE_SECUREWARE 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
-#define DISABLE_SHADOW 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
-#define DISABLE_FD_PASSING 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define HAVE_SECUREWARE 1" >>confdefs.h
-#define BROKEN_GETADDRINFO 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define WITH_ABBREV_NO_TTY 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
-#define BROKEN_UPDWTMPX 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define PASSWD_NEEDS_USERNAME 1
-_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
+        $as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
-for ac_func in getluid setluid
+        $as_echo "#define BROKEN_UPDWTMPX 1" >>confdefs.h
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
+        $as_echo "#define PASSWD_NEEDS_USERNAME 1" >>confdefs.h
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
+        for ac_func in getluid setluid
+do :
-/* Override any GCC internal prototype to avoid an error.
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-   Use char because int might match the return type of a GCC
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-   builtin and then its argument prototype would still apply.  */
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
@@ -9842,103 +7431,67 @@ done
        ;;
 *-*-unicosmk*)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define NO_SSH_LASTLOG 1" >>confdefs.h
-#define NO_SSH_LASTLOG 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define DISABLE_FD_PASSING 1
-_ACEOF
        LDFLAGS="$LDFLAGS"
        LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
        MANTYPE=cat
        ;;
 *-*-unicosmp*)
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define WITH_ABBREV_NO_TTY 1" >>confdefs.h
-#define WITH_ABBREV_NO_TTY 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define DISABLE_FD_PASSING 1
-_ACEOF
        LDFLAGS="$LDFLAGS"
        LIBS="$LIBS -lgen -lacid -ldb"
        MANTYPE=cat
        ;;
 *-*-unicos*)
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define DISABLE_FD_PASSING 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define NO_SSH_LASTLOG 1" >>confdefs.h
-#define NO_SSH_LASTLOG 1
-_ACEOF
        LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
        LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
        MANTYPE=cat
        ;;
 *-dec-osf*)
-        { echo "$as_me:$LINENO: checking for Digital Unix SIA" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for Digital Unix SIA" >&5
-echo $ECHO_N "checking for Digital Unix SIA... $ECHO_C" >&6; }
+$as_echo_n "checking for Digital Unix SIA... " >&6; }
        no_osfsia=""
 # Check whether --with-osfsia was given.
-if test "${with_osfsia+set}" = set; then
+if test "${with_osfsia+set}" = set; then :
  withval=$with_osfsia;
                        if test "x$withval" = "xno" ; then
-                                { echo "$as_me:$LINENO: result: disabled" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: disabled" >&5
-echo "${ECHO_T}disabled" >&6; }
+$as_echo "disabled" >&6; }
                                no_osfsia=1
                        fi
@@ -9946,100 +7499,64 @@ fi
        if test -z "$no_osfsia" ; then
                if test -f /etc/sia/matrix.conf; then
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_OSF_SIA 1" >>confdefs.h
-#define HAVE_OSF_SIA 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_LOGIN 1" >>confdefs.h
-#define DISABLE_LOGIN 1
-_ACEOF
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define DISABLE_FD_PASSING 1
-_ACEOF
                        LIBS="$LIBS -lsecurity -ldb -lm -laud"
                        SIA_MSG="yes"
                else
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LOCKED_PASSWD_SUBSTR \"Nologin\"" >>confdefs.h
-#define LOCKED_PASSWD_SUBSTR "Nologin"
-_ACEOF
                fi
        fi
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
-#define BROKEN_GETADDRINFO 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SETEUID_BREAKS_SETUID 1" >>confdefs.h
-#define SETEUID_BREAKS_SETUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREUID 1" >>confdefs.h
-#define BROKEN_SETREUID 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define BROKEN_SETREGID 1" >>confdefs.h
-#define BROKEN_SETREGID 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_READV_COMPARISON 1" >>confdefs.h
-#define BROKEN_READV_COMPARISON 1
-_ACEOF
        ;;
 *-*-nto-qnx*)
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define USE_PIPES 1" >>confdefs.h
-#define USE_PIPES 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define NO_X11_UNIX_SOCKETS 1" >>confdefs.h
-#define NO_X11_UNIX_SOCKETS 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define MISSING_NFDBITS 1" >>confdefs.h
-#define MISSING_NFDBITS 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define MISSING_HOWMANY 1" >>confdefs.h
-#define MISSING_HOWMANY 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define MISSING_FD_MASK 1" >>confdefs.h
-#define MISSING_FD_MASK 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
-#define DISABLE_LASTLOG 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
-#define SSHD_ACQUIRES_CTTY 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_SHADOW_EXPIRE 1" >>confdefs.h
-#define BROKEN_SHADOW_EXPIRE 1
-_ACEOF
        enable_etc_default_login=no     # has incompatible /etc/default/login
        case "$host" in
        *-*-nto-qnx6*)
-                cat >>confdefs.h <<\_ACEOF
+                $as_echo "#define DISABLE_FD_PASSING 1" >>confdefs.h
-#define DISABLE_FD_PASSING 1
-_ACEOF
                ;;
        esac
@@ -10047,197 +7564,74 @@ _ACEOF
 *-*-ultrix*)
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_GETGROUPS 1" >>confdefs.h
-#define BROKEN_GETGROUPS 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_MMAP 1" >>confdefs.h
-#define BROKEN_MMAP 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define NEED_SETPGRP 1" >>confdefs.h
-#define NEED_SETPGRP 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SYS_SYSLOG_H 1" >>confdefs.h
-#define HAVE_SYS_SYSLOG_H 1
-_ACEOF
        ;;
 *-*-lynxos)
        CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
-        cat >>confdefs.h <<\_ACEOF
+        $as_echo "#define MISSING_HOWMANY 1" >>confdefs.h
-#define MISSING_HOWMANY 1
-_ACEOF
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_SETVBUF 1" >>confdefs.h
-#define BROKEN_SETVBUF 1
-_ACEOF
        ;;
 esac
-{ echo "$as_me:$LINENO: checking compiler and flags for sanity" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking compiler and flags for sanity" >&5
-echo $ECHO_N "checking compiler and flags for sanity... $ECHO_C" >&6; }
+$as_echo_n "checking compiler and flags for sanity... " >&6; }
-if test "$cross_compiling" = yes; then
+if test "$cross_compiling" = yes; then :
-        { echo "$as_me:$LINENO: WARNING: cross compiling: not checking compiler sanity" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking compiler sanity" >&5
-echo "$as_me: WARNING: cross compiling: not checking compiler sanity" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking compiler sanity" >&2;}
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <stdio.h>
-int main(){exit(0);}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-        { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-                { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-                { { echo "$as_me:$LINENO: error: *** compiler cannot create working executables, check config.log ***" >&5
-echo "$as_me: error: *** compiler cannot create working executables, check config.log ***" >&2;}
-   { (exit 1); exit 1; }; }
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
-# Checks for libraries.
-{ echo "$as_me:$LINENO: checking for yp_match" >&5
-echo $ECHO_N "checking for yp_match... $ECHO_C" >&6; }
-if test "${ac_cv_func_yp_match+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
-/* Define yp_match to an innocuous variant, in case <limits.h> declares yp_match.
+ #include <stdio.h>
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define yp_match innocuous_yp_match
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char yp_match (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef yp_match
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char yp_match ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_yp_match || defined __stub___yp_match
-choke me
-#endif
 int
 main ()
 {
-return yp_match ();
+ exit(0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_yp_match=yes
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_yp_match=no
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-fi
+$as_echo "no" >&6; }
+                as_fn_error $? "*** compiler cannot create working executables, check config.log ***" "$LINENO" 5
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_yp_match" >&5
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-echo "${ECHO_T}$ac_cv_func_yp_match" >&6; }
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
-if test $ac_cv_func_yp_match = yes; then
+fi
-  :
-else
+# Checks for libraries.
+ac_fn_c_check_func "$LINENO" "yp_match" "ac_cv_func_yp_match"
+if test "x$ac_cv_func_yp_match" = xyes; then :
-{ echo "$as_me:$LINENO: checking for yp_match in -lnsl" >&5
+else
-echo $ECHO_N "checking for yp_match in -lnsl... $ECHO_C" >&6; }
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for yp_match in -lnsl" >&5
-if test "${ac_cv_lib_nsl_yp_match+set}" = set; then
+$as_echo_n "checking for yp_match in -lnsl... " >&6; }
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+if ${ac_cv_lib_nsl_yp_match+:} false; then :
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lnsl  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -10255,39 +7649,18 @@ return yp_match ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_nsl_yp_match=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_nsl_yp_match=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_nsl_yp_match=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_nsl_yp_match" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nsl_yp_match" >&5
-echo "${ECHO_T}$ac_cv_lib_nsl_yp_match" >&6; }
+$as_echo "$ac_cv_lib_nsl_yp_match" >&6; }
-if test $ac_cv_lib_nsl_yp_match = yes; then
+if test "x$ac_cv_lib_nsl_yp_match" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBNSL 1
 _ACEOF
@@ -10298,103 +7671,18 @@ fi
 fi
-{ echo "$as_me:$LINENO: checking for setsockopt" >&5
+ac_fn_c_check_func "$LINENO" "setsockopt" "ac_cv_func_setsockopt"
-echo $ECHO_N "checking for setsockopt... $ECHO_C" >&6; }
+if test "x$ac_cv_func_setsockopt" = xyes; then :
-if test "${ac_cv_func_setsockopt+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define setsockopt to an innocuous variant, in case <limits.h> declares setsockopt.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define setsockopt innocuous_setsockopt
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char setsockopt (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef setsockopt
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char setsockopt ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_setsockopt || defined __stub___setsockopt
-choke me
-#endif
-int
-main ()
-{
-return setsockopt ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_setsockopt=yes
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setsockopt in -lsocket" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo_n "checking for setsockopt in -lsocket... " >&6; }
+if ${ac_cv_lib_socket_setsockopt+:} false; then :
-        ac_cv_func_setsockopt=no
+  $as_echo_n "(cached) " >&6
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_setsockopt" >&5
-echo "${ECHO_T}$ac_cv_func_setsockopt" >&6; }
-if test $ac_cv_func_setsockopt = yes; then
-  :
-else
-{ echo "$as_me:$LINENO: checking for setsockopt in -lsocket" >&5
-echo $ECHO_N "checking for setsockopt in -lsocket... $ECHO_C" >&6; }
-if test "${ac_cv_lib_socket_setsockopt+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lsocket  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -10412,39 +7700,18 @@ return setsockopt ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_socket_setsockopt=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_socket_setsockopt=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_socket_setsockopt=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_socket_setsockopt" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_setsockopt" >&5
-echo "${ECHO_T}$ac_cv_lib_socket_setsockopt" >&6; }
+$as_echo "$ac_cv_lib_socket_setsockopt" >&6; }
-if test $ac_cv_lib_socket_setsockopt = yes; then
+if test "x$ac_cv_lib_socket_setsockopt" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBSOCKET 1
 _ACEOF
@@ -10456,235 +7723,19 @@ fi
 fi
 for ac_func in dirname
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "dirname" "ac_cv_func_dirname"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_dirname" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_DIRNAME 1
-_ACEOF
-for ac_header in libgen.h
-do
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
 _ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
+ for ac_header in libgen.h
-case "(($ac_try" in
+do :
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  ac_fn_c_check_header_mongrel "$LINENO" "libgen.h" "ac_cv_header_libgen_h" "$ac_includes_default"
-  *) ac_try_echo=$ac_try;;
+if test "x$ac_cv_header_libgen_h" = xyes; then :
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LIBGEN_H 1
 _ACEOF
 fi
@@ -10693,18 +7744,14 @@ done
 else
-        { echo "$as_me:$LINENO: checking for dirname in -lgen" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dirname in -lgen" >&5
-echo $ECHO_N "checking for dirname in -lgen... $ECHO_C" >&6; }
+$as_echo_n "checking for dirname in -lgen... " >&6; }
-if test "${ac_cv_lib_gen_dirname+set}" = set; then
+if ${ac_cv_lib_gen_dirname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lgen  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -10722,56 +7769,31 @@ return dirname ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_gen_dirname=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_gen_dirname=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_gen_dirname=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_gen_dirname" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gen_dirname" >&5
-echo "${ECHO_T}$ac_cv_lib_gen_dirname" >&6; }
+$as_echo "$ac_cv_lib_gen_dirname" >&6; }
-if test $ac_cv_lib_gen_dirname = yes; then
+if test "x$ac_cv_lib_gen_dirname" = xyes; then :
-                { echo "$as_me:$LINENO: checking for broken dirname" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for broken dirname" >&5
-echo $ECHO_N "checking for broken dirname... $ECHO_C" >&6; }
+$as_echo_n "checking for broken dirname... " >&6; }
-if test "${ac_cv_have_broken_dirname+set}" = set; then
+if ${ac_cv_have_broken_dirname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
                        save_LIBS="$LIBS"
                        LIBS="$LIBS -lgen"
-                        if test "$cross_compiling" = yes; then
+                        if test "$cross_compiling" = yes; then :
   ac_cv_have_broken_dirname="no"
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <libgen.h>
@@ -10790,189 +7812,30 @@ int main(int argc, char **argv) {
 }
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
   ac_cv_have_broken_dirname="no"
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+   ac_cv_have_broken_dirname="yes"
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
- ac_cv_have_broken_dirname="yes"
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
                        LIBS="$save_LIBS"
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_broken_dirname" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_broken_dirname" >&5
-echo "${ECHO_T}$ac_cv_have_broken_dirname" >&6; }
+$as_echo "$ac_cv_have_broken_dirname" >&6; }
                if test "x$ac_cv_have_broken_dirname" = "xno" ; then
                        LIBS="$LIBS -lgen"
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_DIRNAME 1" >>confdefs.h
-#define HAVE_DIRNAME 1
-_ACEOF
-for ac_header in libgen.h
-do
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
+                        for ac_header in libgen.h
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
+do :
-  yes:no: )
+  ac_fn_c_check_header_mongrel "$LINENO" "libgen.h" "ac_cv_header_libgen_h" "$ac_includes_default"
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
+if test "x$ac_cv_header_libgen_h" = xyes; then :
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LIBGEN_H 1
 _ACEOF
 fi
@@ -10988,102 +7851,18 @@ fi
 done
-{ echo "$as_me:$LINENO: checking for getspnam" >&5
+ac_fn_c_check_func "$LINENO" "getspnam" "ac_cv_func_getspnam"
-echo $ECHO_N "checking for getspnam... $ECHO_C" >&6; }
+if test "x$ac_cv_func_getspnam" = xyes; then :
-if test "${ac_cv_func_getspnam+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define getspnam to an innocuous variant, in case <limits.h> declares getspnam.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define getspnam innocuous_getspnam
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char getspnam (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef getspnam
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char getspnam ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_getspnam || defined __stub___getspnam
-choke me
-#endif
-int
-main ()
-{
-return getspnam ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_getspnam=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_getspnam=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_getspnam" >&5
-echo "${ECHO_T}$ac_cv_func_getspnam" >&6; }
-if test $ac_cv_func_getspnam = yes; then
-  :
 else
-  { echo "$as_me:$LINENO: checking for getspnam in -lgen" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getspnam in -lgen" >&5
-echo $ECHO_N "checking for getspnam in -lgen... $ECHO_C" >&6; }
+$as_echo_n "checking for getspnam in -lgen... " >&6; }
-if test "${ac_cv_lib_gen_getspnam+set}" = set; then
+if ${ac_cv_lib_gen_getspnam+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lgen  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -11101,55 +7880,30 @@ return getspnam ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_gen_getspnam=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_gen_getspnam=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_gen_getspnam=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_gen_getspnam" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gen_getspnam" >&5
-echo "${ECHO_T}$ac_cv_lib_gen_getspnam" >&6; }
+$as_echo "$ac_cv_lib_gen_getspnam" >&6; }
-if test $ac_cv_lib_gen_getspnam = yes; then
+if test "x$ac_cv_lib_gen_getspnam" = xyes; then :
  LIBS="$LIBS -lgen"
 fi
 fi
-{ echo "$as_me:$LINENO: checking for library containing basename" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing basename" >&5
-echo $ECHO_N "checking for library containing basename... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing basename... " >&6; }
-if test "${ac_cv_search_basename+set}" = set; then
+if ${ac_cv_search_basename+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -11174,66 +7928,39 @@ for ac_lib in '' gen; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_basename=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_basename+:} false; then :
-  if test "${ac_cv_search_basename+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_basename+set}" = set; then
+if ${ac_cv_search_basename+:} false; then :
-  :
 else
  ac_cv_search_basename=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_basename" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_basename" >&5
-echo "${ECHO_T}$ac_cv_search_basename" >&6; }
+$as_echo "$ac_cv_search_basename" >&6; }
 ac_res=$ac_cv_search_basename
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_BASENAME 1" >>confdefs.h
-#define HAVE_BASENAME 1
-_ACEOF
 fi
 # Check whether --with-zlib was given.
-if test "${with_zlib+set}" = set; then
+if test "${with_zlib+set}" = set; then :
  withval=$with_zlib;  if test "x$withval" = "xno" ; then
-                { { echo "$as_me:$LINENO: error: *** zlib is required ***" >&5
+                as_fn_error $? "*** zlib is required ***" "$LINENO" 5
-echo "$as_me: error: *** zlib is required ***" >&2;}
-   { (exit 1); exit 1; }; }
          elif test "x$withval" != "xyes"; then
                if test -d "$withval/lib"; then
                        if test -n "${need_dash_r}"; then
@@ -11258,158 +7985,22 @@ echo "$as_me: error: *** zlib is required ***" >&2;}
 fi
-if test "${ac_cv_header_zlib_h+set}" = set; then
+ac_fn_c_check_header_mongrel "$LINENO" "zlib.h" "ac_cv_header_zlib_h" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for zlib.h" >&5
+if test "x$ac_cv_header_zlib_h" = xyes; then :
-echo $ECHO_N "checking for zlib.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_zlib_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_zlib_h" >&5
-echo "${ECHO_T}$ac_cv_header_zlib_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking zlib.h usability" >&5
-echo $ECHO_N "checking zlib.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <zlib.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking zlib.h presence" >&5
-echo $ECHO_N "checking zlib.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <zlib.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
 else
-  echo "$as_me: failed program was:" >&5
+  as_fn_error $? "*** zlib.h missing - please install first or check config.log ***" "$LINENO" 5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
 fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for deflate in -lz" >&5
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
+$as_echo_n "checking for deflate in -lz... " >&6; }
-  yes:no: )
+if ${ac_cv_lib_z_deflate+:} false; then :
-    { echo "$as_me:$LINENO: WARNING: zlib.h: accepted by the compiler, rejected by the preprocessor!" >&5
+  $as_echo_n "(cached) " >&6
-echo "$as_me: WARNING: zlib.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: zlib.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: zlib.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: zlib.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: zlib.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: zlib.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: zlib.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: zlib.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: zlib.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: zlib.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: zlib.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: zlib.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: zlib.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: zlib.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: zlib.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for zlib.h" >&5
-echo $ECHO_N "checking for zlib.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_zlib_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_zlib_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_zlib_h" >&5
-echo "${ECHO_T}$ac_cv_header_zlib_h" >&6; }
-fi
-if test $ac_cv_header_zlib_h = yes; then
-  :
-else
-  { { echo "$as_me:$LINENO: error: *** zlib.h missing - please install first or check config.log ***" >&5
-echo "$as_me: error: *** zlib.h missing - please install first or check config.log ***" >&2;}
-   { (exit 1); exit 1; }; }
-fi
-{ echo "$as_me:$LINENO: checking for deflate in -lz" >&5
-echo $ECHO_N "checking for deflate in -lz... $ECHO_C" >&6; }
-if test "${ac_cv_lib_z_deflate+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lz  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -11427,39 +8018,18 @@ return deflate ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_z_deflate=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_z_deflate=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_z_deflate=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_z_deflate" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_z_deflate" >&5
-echo "${ECHO_T}$ac_cv_lib_z_deflate" >&6; }
+$as_echo "$ac_cv_lib_z_deflate" >&6; }
-if test $ac_cv_lib_z_deflate = yes; then
+if test "x$ac_cv_lib_z_deflate" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBZ 1
 _ACEOF
@@ -11478,11 +8048,7 @@ else
                fi
                CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
                LIBS="$LIBS -lz"
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -11500,42 +8066,17 @@ return deflate ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+  $as_echo "#define HAVE_LIBZ 1" >>confdefs.h
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  cat >>confdefs.h <<\_ACEOF
-#define HAVE_LIBZ 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-                                { { echo "$as_me:$LINENO: error: *** zlib missing - please install first or check config.log ***" >&5
+                                as_fn_error $? "*** zlib missing - please install first or check config.log ***" "$LINENO" 5
-echo "$as_me: error: *** zlib missing - please install first or check config.log ***" >&2;}
-   { (exit 1); exit 1; }; }
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
@@ -11543,7 +8084,7 @@ fi
 # Check whether --with-zlib-version-check was given.
-if test "${with_zlib_version_check+set}" = set; then
+if test "${with_zlib_version_check+set}" = set; then :
  withval=$with_zlib_version_check;   if test "x$withval" = "xno" ; then
                zlib_check_nonfatal=1
           fi
@@ -11552,24 +8093,23 @@ if test "${with_zlib_version_check+set}" = set; then
 fi
-{ echo "$as_me:$LINENO: checking for possibly buggy zlib" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for possibly buggy zlib" >&5
-echo $ECHO_N "checking for possibly buggy zlib... $ECHO_C" >&6; }
+$as_echo_n "checking for possibly buggy zlib... " >&6; }
-if test "$cross_compiling" = yes; then
+if test "$cross_compiling" = yes; then :
-        { echo "$as_me:$LINENO: WARNING: cross compiling: not checking zlib version" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking zlib version" >&5
-echo "$as_me: WARNING: cross compiling: not checking zlib version" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking zlib version" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
 #include <zlib.h>
-int main()
+int
+main ()
 {
        int a=0, b=0, c=0, d=0, n, v;
        n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
        if (n != 3 && n != 4)
@@ -11586,162 +8126,48 @@ int main()
                exit(0);
        exit(2);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-case "(($ac_try" in
+$as_echo "no" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "$as_me: failed program was:" >&5
+$as_echo "yes" >&6; }
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
- { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
          if test -z "$zlib_check_nonfatal" ; then
-                { { echo "$as_me:$LINENO: error: *** zlib too old - check config.log ***
+                as_fn_error $? "*** zlib too old - check config.log ***
 Your reported zlib version has known security problems.  It's possible your
 vendor has fixed these problems without changing the version number.  If you
 are sure this is the case, you can disable the check by running
 \"./configure --without-zlib-version-check\".
 If you are in doubt, upgrade zlib to version 1.2.3 or greater.
-See http://www.gzip.org/zlib/ for details." >&5
+See http://www.gzip.org/zlib/ for details." "$LINENO" 5
-echo "$as_me: error: *** zlib too old - check config.log ***
-Your reported zlib version has known security problems.  It's possible your
-vendor has fixed these problems without changing the version number.  If you
-are sure this is the case, you can disable the check by running
-\"./configure --without-zlib-version-check\".
-If you are in doubt, upgrade zlib to version 1.2.3 or greater.
-See http://www.gzip.org/zlib/ for details." >&2;}
-   { (exit 1); exit 1; }; }
          else
-                { echo "$as_me:$LINENO: WARNING: zlib version may have security problems" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: zlib version may have security problems" >&5
-echo "$as_me: WARNING: zlib version may have security problems" >&2;}
+$as_echo "$as_me: WARNING: zlib version may have security problems" >&2;}
          fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
+ac_fn_c_check_func "$LINENO" "strcasecmp" "ac_cv_func_strcasecmp"
+if test "x$ac_cv_func_strcasecmp" = xyes; then :
-{ echo "$as_me:$LINENO: checking for strcasecmp" >&5
-echo $ECHO_N "checking for strcasecmp... $ECHO_C" >&6; }
-if test "${ac_cv_func_strcasecmp+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
-  cat >conftest.$ac_ext <<_ACEOF
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for strcasecmp in -lresolv" >&5
-/* confdefs.h.  */
+$as_echo_n "checking for strcasecmp in -lresolv... " >&6; }
-_ACEOF
+if ${ac_cv_lib_resolv_strcasecmp+:} false; then :
-cat confdefs.h >>conftest.$ac_ext
+  $as_echo_n "(cached) " >&6
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define strcasecmp to an innocuous variant, in case <limits.h> declares strcasecmp.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define strcasecmp innocuous_strcasecmp
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char strcasecmp (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef strcasecmp
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char strcasecmp ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_strcasecmp || defined __stub___strcasecmp
-choke me
-#endif
-int
-main ()
-{
-return strcasecmp ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_strcasecmp=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_strcasecmp=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_strcasecmp" >&5
-echo "${ECHO_T}$ac_cv_func_strcasecmp" >&6; }
-if test $ac_cv_func_strcasecmp = yes; then
-  :
-else
-   { echo "$as_me:$LINENO: checking for strcasecmp in -lresolv" >&5
-echo $ECHO_N "checking for strcasecmp in -lresolv... $ECHO_C" >&6; }
-if test "${ac_cv_lib_resolv_strcasecmp+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lresolv  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -11759,149 +8185,41 @@ return strcasecmp ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_resolv_strcasecmp=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_resolv_strcasecmp=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_resolv_strcasecmp=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_resolv_strcasecmp" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_strcasecmp" >&5
-echo "${ECHO_T}$ac_cv_lib_resolv_strcasecmp" >&6; }
+$as_echo "$ac_cv_lib_resolv_strcasecmp" >&6; }
-if test $ac_cv_lib_resolv_strcasecmp = yes; then
+if test "x$ac_cv_lib_resolv_strcasecmp" = xyes; then :
  LIBS="$LIBS -lresolv"
 fi
 fi
 for ac_func in utimes
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "utimes" "ac_cv_func_utimes"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_utimes" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_UTIMES 1
 _ACEOF
 else
-   { echo "$as_me:$LINENO: checking for utimes in -lc89" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for utimes in -lc89" >&5
-echo $ECHO_N "checking for utimes in -lc89... $ECHO_C" >&6; }
+$as_echo_n "checking for utimes in -lc89... " >&6; }
-if test "${ac_cv_lib_c89_utimes+set}" = set; then
+if ${ac_cv_lib_c89_utimes+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lc89  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -11919,42 +8237,19 @@ return utimes ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_c89_utimes=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_c89_utimes=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_c89_utimes=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_c89_utimes" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_c89_utimes" >&5
-echo "${ECHO_T}$ac_cv_lib_c89_utimes" >&6; }
+$as_echo "$ac_cv_lib_c89_utimes" >&6; }
-if test $ac_cv_lib_c89_utimes = yes; then
+if test "x$ac_cv_lib_c89_utimes" = xyes; then :
-  cat >>confdefs.h <<\_ACEOF
+  $as_echo "#define HAVE_UTIMES 1" >>confdefs.h
-#define HAVE_UTIMES 1
-_ACEOF
                                        LIBS="$LIBS -lc89"
 fi
@@ -11964,162 +8259,25 @@ fi
 done
 for ac_header in libutil.h
-do
+do :
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+  ac_fn_c_check_header_mongrel "$LINENO" "libutil.h" "ac_cv_header_libutil_h" "$ac_includes_default"
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
+if test "x$ac_cv_header_libutil_h" = xyes; then :
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LIBUTIL_H 1
 _ACEOF
 fi
 done
-{ echo "$as_me:$LINENO: checking for library containing login" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing login" >&5
-echo $ECHO_N "checking for library containing login... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing login... " >&6; }
-if test "${ac_cv_search_login+set}" = set; then
+if ${ac_cv_search_login+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -12144,261 +8302,64 @@ for ac_lib in '' util bsd; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_login=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_login+:} false; then :
-  if test "${ac_cv_search_login+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_login+set}" = set; then
+if ${ac_cv_search_login+:} false; then :
-  :
 else
  ac_cv_search_login=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_login" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_login" >&5
-echo "${ECHO_T}$ac_cv_search_login" >&6; }
+$as_echo "$ac_cv_search_login" >&6; }
 ac_res=$ac_cv_search_login
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_LOGIN 1" >>confdefs.h
-#define HAVE_LOGIN 1
-_ACEOF
 fi
 for ac_func in fmt_scaled logout updwtmp logwtmp
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
 for ac_func in strftime
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "strftime" "ac_cv_func_strftime"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_strftime" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_STRFTIME 1
 _ACEOF
 else
  # strftime is in -lintl on SCO UNIX.
-{ echo "$as_me:$LINENO: checking for strftime in -lintl" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for strftime in -lintl" >&5
-echo $ECHO_N "checking for strftime in -lintl... $ECHO_C" >&6; }
+$as_echo_n "checking for strftime in -lintl... " >&6; }
-if test "${ac_cv_lib_intl_strftime+set}" = set; then
+if ${ac_cv_lib_intl_strftime+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lintl  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -12416,42 +8377,19 @@ return strftime ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_intl_strftime=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_intl_strftime=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_intl_strftime=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_intl_strftime" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_intl_strftime" >&5
-echo "${ECHO_T}$ac_cv_lib_intl_strftime" >&6; }
+$as_echo "$ac_cv_lib_intl_strftime" >&6; }
-if test $ac_cv_lib_intl_strftime = yes; then
+if test "x$ac_cv_lib_intl_strftime" = xyes; then :
-  cat >>confdefs.h <<\_ACEOF
+  $as_echo "#define HAVE_STRFTIME 1" >>confdefs.h
-#define HAVE_STRFTIME 1
-_ACEOF
 LIBS="-lintl $LIBS"
 fi
@@ -12461,13 +8399,9 @@ done
 # Check for ALTDIRFUNC glob() extension
-{ echo "$as_me:$LINENO: checking for GLOB_ALTDIRFUNC support" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GLOB_ALTDIRFUNC support" >&5
-echo $ECHO_N "checking for GLOB_ALTDIRFUNC support... $ECHO_C" >&6; }
+$as_echo_n "checking for GLOB_ALTDIRFUNC support... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
                #include <glob.h>
@@ -12477,20 +8411,18 @@ cat >>conftest.$ac_ext <<_ACEOF
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "FOUNDIT" >/dev/null 2>&1; then
+  $EGREP "FOUNDIT" >/dev/null 2>&1; then :
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define GLOB_HAS_ALTDIRFUNC 1" >>confdefs.h
-#define GLOB_HAS_ALTDIRFUNC 1
-_ACEOF
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -12498,70 +8430,39 @@ rm -f conftest*
 # Check for g.gl_matchc glob() extension
-{ echo "$as_me:$LINENO: checking for gl_matchc field in glob_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for gl_matchc field in glob_t" >&5
-echo $ECHO_N "checking for gl_matchc field in glob_t... $ECHO_C" >&6; }
+$as_echo_n "checking for gl_matchc field in glob_t... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <glob.h>
 int
 main ()
 {
-glob_t g; g.gl_matchc = 1;
+ glob_t g; g.gl_matchc = 1;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define GLOB_HAS_GL_MATCHC 1" >>confdefs.h
-#define GLOB_HAS_GL_MATCHC 1
-_ACEOF
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-                { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 # Check for g.gl_statv glob() extension
-{ echo "$as_me:$LINENO: checking for gl_statv and GLOB_KEEPSTAT extensions for glob" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for gl_statv and GLOB_KEEPSTAT extensions for glob" >&5
-echo $ECHO_N "checking for gl_statv and GLOB_KEEPSTAT extensions for glob... $ECHO_C" >&6; }
+$as_echo_n "checking for gl_statv and GLOB_KEEPSTAT extensions for glob... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <glob.h>
 int
@@ -12578,203 +8479,98 @@ g.gl_statv = NULL;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define GLOB_HAS_GL_STATV 1" >>confdefs.h
-#define GLOB_HAS_GL_STATV 1
-_ACEOF
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-                { echo "$as_me:$LINENO: result: no" >&5
+$as_echo "no" >&6; }
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: checking whether GLOB_NOMATCH is declared" >&5
+ac_fn_c_check_decl "$LINENO" "GLOB_NOMATCH" "ac_cv_have_decl_GLOB_NOMATCH" "#include <glob.h>
-echo $ECHO_N "checking whether GLOB_NOMATCH is declared... $ECHO_C" >&6; }
+"
-if test "${ac_cv_have_decl_GLOB_NOMATCH+set}" = set; then
+if test "x$ac_cv_have_decl_GLOB_NOMATCH" = xyes; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  ac_have_decl=1
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <glob.h>
-int
-main ()
-{
-#ifndef GLOB_NOMATCH
-  (void) GLOB_NOMATCH;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_GLOB_NOMATCH=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_GLOB_NOMATCH=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_GLOB_NOMATCH" >&5
-echo "${ECHO_T}$ac_cv_have_decl_GLOB_NOMATCH" >&6; }
-if test $ac_cv_have_decl_GLOB_NOMATCH = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_GLOB_NOMATCH 1
+#define HAVE_DECL_GLOB_NOMATCH $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_GLOB_NOMATCH 0
 _ACEOF
-fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether struct dirent allocates space for d_name" >&5
+$as_echo_n "checking whether struct dirent allocates space for d_name... " >&6; }
+if test "$cross_compiling" = yes; then :
-{ echo "$as_me:$LINENO: checking whether struct dirent allocates space for d_name" >&5
-echo $ECHO_N "checking whether struct dirent allocates space for d_name... $ECHO_C" >&6; }
-if test "$cross_compiling" = yes; then
-                { echo "$as_me:$LINENO: WARNING: cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME" >&5
-echo "$as_me: WARNING: cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME" >&2;}
-                cat >>confdefs.h <<\_ACEOF
+                $as_echo "#define BROKEN_ONE_BYTE_DIRENT_D_NAME 1" >>confdefs.h
-#define BROKEN_ONE_BYTE_DIRENT_D_NAME 1
-_ACEOF
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 #include <dirent.h>
-int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
+int
+main ()
+{
+        struct dirent d;
+        exit(sizeof(d.d_name)<=sizeof(char));
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BROKEN_ONE_BYTE_DIRENT_D_NAME 1" >>confdefs.h
-#define BROKEN_ONE_BYTE_DIRENT_D_NAME 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for /proc/pid/fd directory" >&5
-{ echo "$as_me:$LINENO: checking for /proc/pid/fd directory" >&5
+$as_echo_n "checking for /proc/pid/fd directory... " >&6; }
-echo $ECHO_N "checking for /proc/pid/fd directory... $ECHO_C" >&6; }
 if test -d "/proc/$$/fd" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_PROC_PID 1" >>confdefs.h
-#define HAVE_PROC_PID 1
-_ACEOF
-        { echo "$as_me:$LINENO: result: yes" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-        { echo "$as_me:$LINENO: result: no" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 # Check whether user wants S/Key support
 SKEY_MSG="no"
 # Check whether --with-skey was given.
-if test "${with_skey+set}" = set; then
+if test "${with_skey+set}" = set; then :
  withval=$with_skey;
                if test "x$withval" != "xno" ; then
@@ -12784,113 +8580,73 @@ if test "${with_skey+set}" = set; then
                        fi
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SKEY 1" >>confdefs.h
-#define SKEY 1
-_ACEOF
                        LIBS="-lskey $LIBS"
                        SKEY_MSG="yes"
-                        { echo "$as_me:$LINENO: checking for s/key support" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for s/key support" >&5
-echo $ECHO_N "checking for s/key support... $ECHO_C" >&6; }
+$as_echo_n "checking for s/key support... " >&6; }
-                        cat >conftest.$ac_ext <<_ACEOF
+                        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
 #include <skey.h>
-int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
+int
+main ()
+{
+        char *ff = skey_keyinfo(""); ff="";
+        exit(0);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-                                        { echo "$as_me:$LINENO: result: no" >&5
+$as_echo "no" >&6; }
-echo "${ECHO_T}no" >&6; }
+                                        as_fn_error $? "** Incomplete or missing s/key libraries." "$LINENO" 5
-                                        { { echo "$as_me:$LINENO: error: ** Incomplete or missing s/key libraries." >&5
-echo "$as_me: error: ** Incomplete or missing s/key libraries." >&2;}
-   { (exit 1); exit 1; }; }
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if skeychallenge takes 4 arguments" >&5
-                        { echo "$as_me:$LINENO: checking if skeychallenge takes 4 arguments" >&5
+$as_echo_n "checking if skeychallenge takes 4 arguments... " >&6; }
-echo $ECHO_N "checking if skeychallenge takes 4 arguments... $ECHO_C" >&6; }
+                        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-                        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
-                                 #include <skey.h>
+#include <skey.h>
 int
 main ()
 {
-(void)skeychallenge(NULL,"name","",0);
+        (void)skeychallenge(NULL,"name","",0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-#define SKEYCHALLENGE_4ARG 1
+$as_echo "yes" >&6; }
-_ACEOF
+$as_echo "#define SKEYCHALLENGE_4ARG 1" >>confdefs.h
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        { echo "$as_me:$LINENO: result: no" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
                fi
@@ -12902,7 +8658,7 @@ fi
 TCPW_MSG="no"
 # Check whether --with-tcp-wrappers was given.
-if test "${with_tcp_wrappers+set}" = set; then
+if test "${with_tcp_wrappers+set}" = set; then :
  withval=$with_tcp_wrappers;
                if test "x$withval" != "xno" ; then
                        saved_LIBS="$LIBS"
@@ -12930,72 +8686,45 @@ if test "${with_tcp_wrappers+set}" = set; then
                                fi
                        fi
                        LIBS="-lwrap $LIBS"
-                        { echo "$as_me:$LINENO: checking for libwrap" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libwrap" >&5
-echo $ECHO_N "checking for libwrap... $ECHO_C" >&6; }
+$as_echo_n "checking for libwrap... " >&6; }
-                        cat >conftest.$ac_ext <<_ACEOF
+                        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <netinet/in.h>
 #include <tcpd.h>
-                                        int deny_severity = 0, allow_severity = 0;
+int deny_severity = 0, allow_severity = 0;
 int
 main ()
 {
-hosts_access(0);
+        hosts_access(0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-                                        { echo "$as_me:$LINENO: result: yes" >&5
+                                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define LIBWRAP 1" >>confdefs.h
-#define LIBWRAP 1
-_ACEOF
                                        SSHDLIBS="$SSHDLIBS -lwrap"
                                        TCPW_MSG="yes"
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                                        as_fn_error $? "*** libwrap missing" "$LINENO" 5
-                                        { { echo "$as_me:$LINENO: error: *** libwrap missing" >&5
-echo "$as_me: error: *** libwrap missing" >&2;}
-   { (exit 1); exit 1; }; }
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
                        LIBS="$saved_LIBS"
                fi
@@ -13007,15 +8736,15 @@ fi
 LIBEDIT_MSG="no"
 # Check whether --with-libedit was given.
-if test "${with_libedit+set}" = set; then
+if test "${with_libedit+set}" = set; then :
  withval=$with_libedit;  if test "x$withval" != "xno" ; then
                if test "x$withval" = "xyes" ; then
                        # Extract the first word of "pkg-config", so it can be a program name with args.
 set dummy pkg-config; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_PKGCONFIG+set}" = set; then
+if ${ac_cv_path_PKGCONFIG+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $PKGCONFIG in
  [\\/]* | ?:[\\/]*)
@@ -13027,14 +8756,14 @@ for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_PKGCONFIG="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  test -z "$ac_cv_path_PKGCONFIG" && ac_cv_path_PKGCONFIG="no"
@@ -13043,24 +8772,24 @@ esac
 fi
 PKGCONFIG=$ac_cv_path_PKGCONFIG
 if test -n "$PKGCONFIG"; then
-  { echo "$as_me:$LINENO: result: $PKGCONFIG" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKGCONFIG" >&5
-echo "${ECHO_T}$PKGCONFIG" >&6; }
+$as_echo "$PKGCONFIG" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
                        if test "x$PKGCONFIG" != "xno"; then
-                                { echo "$as_me:$LINENO: checking if $PKGCONFIG knows about libedit" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $PKGCONFIG knows about libedit" >&5
-echo $ECHO_N "checking if $PKGCONFIG knows about libedit... $ECHO_C" >&6; }
+$as_echo_n "checking if $PKGCONFIG knows about libedit... " >&6; }
                                if "$PKGCONFIG" libedit; then
-                                        { echo "$as_me:$LINENO: result: yes" >&5
+                                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
                                        use_pkgconfig_for_libedit=yes
                                else
-                                        { echo "$as_me:$LINENO: result: no" >&5
+                                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                                fi
                        fi
                else
@@ -13078,19 +8807,15 @@ echo "${ECHO_T}no" >&6; }
                        LIBEDIT="-ledit -lcurses"
                fi
                OTHERLIBS=`echo $LIBEDIT | sed 's/-ledit//'`
-                { echo "$as_me:$LINENO: checking for el_init in -ledit" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for el_init in -ledit" >&5
-echo $ECHO_N "checking for el_init in -ledit... $ECHO_C" >&6; }
+$as_echo_n "checking for el_init in -ledit... " >&6; }
-if test "${ac_cv_lib_edit_el_init+set}" = set; then
+if ${ac_cv_lib_edit_el_init+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-ledit  $OTHERLIBS
                 $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -13108,102 +8833,54 @@ return el_init ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_edit_el_init=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_edit_el_init=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_edit_el_init=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_edit_el_init" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_edit_el_init" >&5
-echo "${ECHO_T}$ac_cv_lib_edit_el_init" >&6; }
+$as_echo "$ac_cv_lib_edit_el_init" >&6; }
-if test $ac_cv_lib_edit_el_init = yes; then
+if test "x$ac_cv_lib_edit_el_init" = xyes; then :
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_LIBEDIT 1" >>confdefs.h
-#define USE_LIBEDIT 1
-_ACEOF
                          LIBEDIT_MSG="yes"
 else
-   { { echo "$as_me:$LINENO: error: libedit not found" >&5
+   as_fn_error $? "libedit not found" "$LINENO" 5
-echo "$as_me: error: libedit not found" >&2;}
-   { (exit 1); exit 1; }; }
 fi
-                { echo "$as_me:$LINENO: checking if libedit version is compatible" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if libedit version is compatible" >&5
-echo $ECHO_N "checking if libedit version is compatible... $ECHO_C" >&6; }
+$as_echo_n "checking if libedit version is compatible... " >&6; }
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <histedit.h>
-#include <histedit.h>
+int
-int main(void)
+main ()
 {
        int i = H_SETSIZE;
        el_init("", NULL, NULL, NULL);
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
+                      as_fn_error $? "libedit version is not compatible" "$LINENO" 5
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-                      { { echo "$as_me:$LINENO: error: libedit version is not compatible" >&5
-echo "$as_me: error: libedit version is not compatible" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
        fi
@@ -13213,95 +8890,43 @@ fi
 AUDIT_MODULE=none
 # Check whether --with-audit was given.
-if test "${with_audit+set}" = set; then
+if test "${with_audit+set}" = set; then :
  withval=$with_audit;
-          { echo "$as_me:$LINENO: checking for supported audit module" >&5
+          { $as_echo "$as_me:${as_lineno-$LINENO}: checking for supported audit module" >&5
-echo $ECHO_N "checking for supported audit module... $ECHO_C" >&6; }
+$as_echo_n "checking for supported audit module... " >&6; }
          case "$withval" in
          bsm)
-                { echo "$as_me:$LINENO: result: bsm" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: bsm" >&5
-echo "${ECHO_T}bsm" >&6; }
+$as_echo "bsm" >&6; }
                AUDIT_MODULE=bsm
+                                for ac_header in bsm/audit.h
-for ac_header in bsm/audit.h
+do :
-do
+  ac_fn_c_check_header_compile "$LINENO" "bsm/audit.h" "ac_cv_header_bsm_audit_h" "
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #ifdef HAVE_TIME_H
 # include <time.h>
 #endif
+"
-#include <$ac_header>
+if test "x$ac_cv_header_bsm_audit_h" = xyes; then :
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  eval "$as_ac_Header=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_BSM_AUDIT_H 1
 _ACEOF
 else
-  { { echo "$as_me:$LINENO: error: BSM enabled and bsm/audit.h not found" >&5
+  as_fn_error $? "BSM enabled and bsm/audit.h not found" "$LINENO" 5
-echo "$as_me: error: BSM enabled and bsm/audit.h not found" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 done
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getaudit in -lbsm" >&5
-{ echo "$as_me:$LINENO: checking for getaudit in -lbsm" >&5
+$as_echo_n "checking for getaudit in -lbsm... " >&6; }
-echo $ECHO_N "checking for getaudit in -lbsm... $ECHO_C" >&6; }
+if ${ac_cv_lib_bsm_getaudit+:} false; then :
-if test "${ac_cv_lib_bsm_getaudit+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lbsm  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -13319,39 +8944,18 @@ return getaudit ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_bsm_getaudit=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_bsm_getaudit=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_bsm_getaudit=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_bsm_getaudit" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_bsm_getaudit" >&5
-echo "${ECHO_T}$ac_cv_lib_bsm_getaudit" >&6; }
+$as_echo "$ac_cv_lib_bsm_getaudit" >&6; }
-if test $ac_cv_lib_bsm_getaudit = yes; then
+if test "x$ac_cv_lib_bsm_getaudit" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBBSM 1
 _ACEOF
@@ -13359,354 +8963,49 @@ _ACEOF
  LIBS="-lbsm $LIBS"
 else
-  { { echo "$as_me:$LINENO: error: BSM enabled and required library not found" >&5
+  as_fn_error $? "BSM enabled and required library not found" "$LINENO" 5
-echo "$as_me: error: BSM enabled and required library not found" >&2;}
-   { (exit 1); exit 1; }; }
 fi
+                for ac_func in getaudit
-for ac_func in getaudit
+do :
-do
+  ac_fn_c_check_func "$LINENO" "getaudit" "ac_cv_func_getaudit"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if test "x$ac_cv_func_getaudit" = xyes; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_GETAUDIT 1
 _ACEOF
 else
-  { { echo "$as_me:$LINENO: error: BSM enabled and required function not found" >&5
+  as_fn_error $? "BSM enabled and required function not found" "$LINENO" 5
-echo "$as_me: error: BSM enabled and required function not found" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 done
                # These are optional
+                for ac_func in getaudit_addr aug_get_machine
+do :
-for ac_func in getaudit_addr aug_get_machine
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-do
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_BSM_AUDIT 1" >>confdefs.h
-#define USE_BSM_AUDIT 1
-_ACEOF
                ;;
          linux)
-                { echo "$as_me:$LINENO: result: linux" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: linux" >&5
-echo "${ECHO_T}linux" >&6; }
+$as_echo "linux" >&6; }
                AUDIT_MODULE=linux
+                                for ac_header in libaudit.h
-for ac_header in libaudit.h
+do :
-do
+  ac_fn_c_check_header_mongrel "$LINENO" "libaudit.h" "ac_cv_header_libaudit_h" "$ac_includes_default"
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+if test "x$ac_cv_header_libaudit_h" = xyes; then :
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_LIBAUDIT_H 1
 _ACEOF
 fi
@@ -13715,131 +9014,30 @@ done
                SSHDLIBS="$SSHDLIBS -laudit"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_LINUX_AUDIT 1" >>confdefs.h
-#define USE_LINUX_AUDIT 1
-_ACEOF
                ;;
          debug)
                AUDIT_MODULE=debug
-                { echo "$as_me:$LINENO: result: debug" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: debug" >&5
-echo "${ECHO_T}debug" >&6; }
+$as_echo "debug" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define SSH_AUDIT_EVENTS 1" >>confdefs.h
-#define SSH_AUDIT_EVENTS 1
-_ACEOF
                ;;
          no)
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                ;;
          *)
-                { { echo "$as_me:$LINENO: error: Unknown audit module $withval" >&5
+                as_fn_error $? "Unknown audit module $withval" "$LINENO" 5
-echo "$as_me: error: Unknown audit module $withval" >&2;}
-   { (exit 1); exit 1; }; }
                ;;
        esac
 fi
+for ac_func in  \
-for ac_func in \
        arc4random \
        arc4random_buf \
        arc4random_uniform \
@@ -13936,154 +9134,46 @@ for ac_func in \
        vsnprintf \
        waitpid \
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
+  cat >>confdefs.h <<_ACEOF
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
+fi
-# include <limits.h>
+done
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+ #include <ctype.h>
 int
 main ()
 {
-return $ac_func ();
+ return (isblank('a'));
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
-  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-fi
-done
-cat >conftest.$ac_ext <<_ACEOF
-#include <ctype.h>
-int main(void)
-{
-        return (isblank('a'));
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_ISBLANK 1
-_ACEOF
-else
+$as_echo "#define HAVE_ISBLANK 1" >>confdefs.h
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 # PKCS#11 support requires dlopen() and co
-{ echo "$as_me:$LINENO: checking for library containing dlopen" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dlopen" >&5
-echo $ECHO_N "checking for library containing dlopen... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing dlopen... " >&6; }
-if test "${ac_cv_search_dlopen+set}" = set; then
+if ${ac_cv_search_dlopen+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -14108,161 +9198,47 @@ for ac_lib in '' dl; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_dlopen=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_dlopen+:} false; then :
-  if test "${ac_cv_search_dlopen+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_dlopen+set}" = set; then
+if ${ac_cv_search_dlopen+:} false; then :
-  :
 else
  ac_cv_search_dlopen=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_dlopen" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dlopen" >&5
-echo "${ECHO_T}$ac_cv_search_dlopen" >&6; }
+$as_echo "$ac_cv_search_dlopen" >&6; }
 ac_res=$ac_cv_search_dlopen
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define ENABLE_PKCS11 /**/" >>confdefs.h
-#define ENABLE_PKCS11
-_ACEOF
 fi
 # IRIX has a const char return value for gai_strerror()
 for ac_func in gai_strerror
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "gai_strerror" "ac_cv_func_gai_strerror"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_gai_strerror" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-        cat >>confdefs.h <<\_ACEOF
 #define HAVE_GAI_STRERROR 1
 _ACEOF
-        cat >conftest.$ac_ext <<_ACEOF
+        $as_echo "#define HAVE_GAI_STRERROR 1" >>confdefs.h
-/* confdefs.h.  */
-_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -14270,63 +9246,36 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <netdb.h>
 const char *gai_strerror(int);
 int
 main ()
 {
-char *str;
+        char *str;
+        str = gai_strerror(0);
-str = gai_strerror(0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_CONST_GAI_STRERROR_PROTO 1
-_ACEOF
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "#define HAVE_CONST_GAI_STRERROR_PROTO 1" >>confdefs.h
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 done
-{ echo "$as_me:$LINENO: checking for library containing nanosleep" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing nanosleep" >&5
-echo $ECHO_N "checking for library containing nanosleep... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing nanosleep... " >&6; }
-if test "${ac_cv_search_nanosleep+set}" = set; then
+if ${ac_cv_search_nanosleep+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -14351,201 +9300,42 @@ for ac_lib in '' rt posix4; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_nanosleep=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_nanosleep+:} false; then :
-  if test "${ac_cv_search_nanosleep+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_nanosleep+set}" = set; then
+if ${ac_cv_search_nanosleep+:} false; then :
-  :
 else
  ac_cv_search_nanosleep=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_nanosleep" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_nanosleep" >&5
-echo "${ECHO_T}$ac_cv_search_nanosleep" >&6; }
+$as_echo "$ac_cv_search_nanosleep" >&6; }
 ac_res=$ac_cv_search_nanosleep
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_NANOSLEEP 1" >>confdefs.h
-#define HAVE_NANOSLEEP 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking whether getrusage is declared" >&5
+ac_fn_c_check_decl "$LINENO" "getrusage" "ac_cv_have_decl_getrusage" "$ac_includes_default"
-echo $ECHO_N "checking whether getrusage is declared... $ECHO_C" >&6; }
+if test "x$ac_cv_have_decl_getrusage" = xyes; then :
-if test "${ac_cv_have_decl_getrusage+set}" = set; then
+  for ac_func in getrusage
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+do :
-else
+  ac_fn_c_check_func "$LINENO" "getrusage" "ac_cv_func_getrusage"
-  cat >conftest.$ac_ext <<_ACEOF
+if test "x$ac_cv_func_getrusage" = xyes; then :
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
-#ifndef getrusage
-  (void) getrusage;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_getrusage=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_getrusage=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_getrusage" >&5
-echo "${ECHO_T}$ac_cv_have_decl_getrusage" >&6; }
-if test $ac_cv_have_decl_getrusage = yes; then
-for ac_func in getrusage
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_GETRUSAGE 1
 _ACEOF
 fi
@@ -14553,153 +9343,19 @@ done
 fi
-{ echo "$as_me:$LINENO: checking whether strsep is declared" >&5
+ac_fn_c_check_decl "$LINENO" "strsep" "ac_cv_have_decl_strsep" "
-echo $ECHO_N "checking whether strsep is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_strsep+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #ifdef HAVE_STRING_H
 # include <string.h>
 #endif
+"
-int
+if test "x$ac_cv_have_decl_strsep" = xyes; then :
-main ()
+  for ac_func in strsep
-{
+do :
-#ifndef strsep
+  ac_fn_c_check_func "$LINENO" "strsep" "ac_cv_func_strsep"
-  (void) strsep;
+if test "x$ac_cv_func_strsep" = xyes; then :
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_strsep=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_strsep=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_strsep" >&5
-echo "${ECHO_T}$ac_cv_have_decl_strsep" >&6; }
-if test $ac_cv_have_decl_strsep = yes; then
-for ac_func in strsep
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_STRSEP 1
 _ACEOF
 fi
@@ -14708,155 +9364,19 @@ done
 fi
-{ echo "$as_me:$LINENO: checking whether tcsendbreak is declared" >&5
+ac_fn_c_check_decl "$LINENO" "tcsendbreak" "ac_cv_have_decl_tcsendbreak" "#include <termios.h>
-echo $ECHO_N "checking whether tcsendbreak is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_tcsendbreak+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <termios.h>
-int
-main ()
-{
-#ifndef tcsendbreak
-  (void) tcsendbreak;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_tcsendbreak=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_tcsendbreak=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_tcsendbreak" >&5
-echo "${ECHO_T}$ac_cv_have_decl_tcsendbreak" >&6; }
-if test $ac_cv_have_decl_tcsendbreak = yes; then
-  cat >>confdefs.h <<\_ACEOF
-#define HAVE_TCSENDBREAK 1
-_ACEOF
-else
-for ac_func in tcsendbreak
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
+"
-   Use char because int might match the return type of a GCC
+if test "x$ac_cv_have_decl_tcsendbreak" = xyes; then :
-   builtin and then its argument prototype would still apply.  */
+  $as_echo "#define HAVE_TCSENDBREAK 1" >>confdefs.h
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
 else
-  echo "$as_me: failed program was:" >&5
+  for ac_func in tcsendbreak
-sed 's/^/| /' conftest.$ac_ext >&5
+do :
+  ac_fn_c_check_func "$LINENO" "tcsendbreak" "ac_cv_func_tcsendbreak"
-        eval "$as_ac_var=no"
+if test "x$ac_cv_func_tcsendbreak" = xyes; then :
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_TCSENDBREAK 1
 _ACEOF
 fi
@@ -14865,161 +9385,36 @@ done
 fi
-{ echo "$as_me:$LINENO: checking whether h_errno is declared" >&5
+ac_fn_c_check_decl "$LINENO" "h_errno" "ac_cv_have_decl_h_errno" "#include <netdb.h>
-echo $ECHO_N "checking whether h_errno is declared... $ECHO_C" >&6; }
+"
-if test "${ac_cv_have_decl_h_errno+set}" = set; then
+if test "x$ac_cv_have_decl_h_errno" = xyes; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  ac_have_decl=1
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <netdb.h>
-int
-main ()
-{
-#ifndef h_errno
-  (void) h_errno;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_h_errno=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_h_errno=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_h_errno" >&5
-echo "${ECHO_T}$ac_cv_have_decl_h_errno" >&6; }
-if test $ac_cv_have_decl_h_errno = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_H_ERRNO 1
+#define HAVE_DECL_H_ERRNO $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_H_ERRNO 0
 _ACEOF
-fi
+ac_fn_c_check_decl "$LINENO" "SHUT_RD" "ac_cv_have_decl_SHUT_RD" "
-{ echo "$as_me:$LINENO: checking whether SHUT_RD is declared" >&5
-echo $ECHO_N "checking whether SHUT_RD is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_SHUT_RD+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/socket.h>
+"
-int
+if test "x$ac_cv_have_decl_SHUT_RD" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef SHUT_RD
-  (void) SHUT_RD;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_SHUT_RD=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_SHUT_RD=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_SHUT_RD" >&5
-echo "${ECHO_T}$ac_cv_have_decl_SHUT_RD" >&6; }
-if test $ac_cv_have_decl_SHUT_RD = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SHUT_RD 1
+#define HAVE_DECL_SHUT_RD $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SHUT_RD 0
 _ACEOF
-fi
+ac_fn_c_check_decl "$LINENO" "O_NONBLOCK" "ac_cv_have_decl_O_NONBLOCK" "
-{ echo "$as_me:$LINENO: checking whether O_NONBLOCK is declared" >&5
-echo $ECHO_N "checking whether O_NONBLOCK is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_O_NONBLOCK+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/types.h>
 #ifdef HAVE_SYS_STAT_H
 # include <sys/stat.h>
@@ -15028,1270 +9423,260 @@ cat >>conftest.$ac_ext <<_ACEOF
 # include <fcntl.h>
 #endif
+"
-int
+if test "x$ac_cv_have_decl_O_NONBLOCK" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef O_NONBLOCK
-  (void) O_NONBLOCK;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_O_NONBLOCK=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_O_NONBLOCK=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_O_NONBLOCK" >&5
-echo "${ECHO_T}$ac_cv_have_decl_O_NONBLOCK" >&6; }
-if test $ac_cv_have_decl_O_NONBLOCK = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_O_NONBLOCK 1
+#define HAVE_DECL_O_NONBLOCK $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_O_NONBLOCK 0
 _ACEOF
-fi
+ac_fn_c_check_decl "$LINENO" "writev" "ac_cv_have_decl_writev" "
-{ echo "$as_me:$LINENO: checking whether writev is declared" >&5
-echo $ECHO_N "checking whether writev is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_writev+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/uio.h>
 #include <unistd.h>
+"
-int
+if test "x$ac_cv_have_decl_writev" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef writev
-  (void) writev;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_writev=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_writev=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_writev" >&5
-echo "${ECHO_T}$ac_cv_have_decl_writev" >&6; }
-if test $ac_cv_have_decl_writev = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_WRITEV 1
+#define HAVE_DECL_WRITEV $ac_have_decl
 _ACEOF
-else
+ac_fn_c_check_decl "$LINENO" "MAXSYMLINKS" "ac_cv_have_decl_MAXSYMLINKS" "
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_WRITEV 0
-_ACEOF
-fi
-{ echo "$as_me:$LINENO: checking whether MAXSYMLINKS is declared" >&5
-echo $ECHO_N "checking whether MAXSYMLINKS is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_MAXSYMLINKS+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/param.h>
+"
-int
+if test "x$ac_cv_have_decl_MAXSYMLINKS" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef MAXSYMLINKS
-  (void) MAXSYMLINKS;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_MAXSYMLINKS=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_MAXSYMLINKS=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_MAXSYMLINKS" >&5
-echo "${ECHO_T}$ac_cv_have_decl_MAXSYMLINKS" >&6; }
-if test $ac_cv_have_decl_MAXSYMLINKS = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_MAXSYMLINKS 1
+#define HAVE_DECL_MAXSYMLINKS $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_MAXSYMLINKS 0
 _ACEOF
-fi
+ac_fn_c_check_decl "$LINENO" "offsetof" "ac_cv_have_decl_offsetof" "
-{ echo "$as_me:$LINENO: checking whether offsetof is declared" >&5
-echo $ECHO_N "checking whether offsetof is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl_offsetof+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <stddef.h>
+"
-int
+if test "x$ac_cv_have_decl_offsetof" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef offsetof
-  (void) offsetof;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_offsetof=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_offsetof=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_offsetof" >&5
-echo "${ECHO_T}$ac_cv_have_decl_offsetof" >&6; }
-if test $ac_cv_have_decl_offsetof = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_OFFSETOF 1
+#define HAVE_DECL_OFFSETOF $ac_have_decl
 _ACEOF
-else
+for ac_func in setresuid
+do :
+  ac_fn_c_check_func "$LINENO" "setresuid" "ac_cv_func_setresuid"
+if test "x$ac_cv_func_setresuid" = xyes; then :
  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_OFFSETOF 0
+#define HAVE_SETRESUID 1
 _ACEOF
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if setresuid seems to work" >&5
+$as_echo_n "checking if setresuid seems to work... " >&6; }
+        if test "$cross_compiling" = yes; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking setresuid" >&5
+$as_echo "$as_me: WARNING: cross compiling: not checking setresuid" >&2;}
-fi
-for ac_func in setresuid
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
+#include <stdlib.h>
-    which can conflict with char $ac_func (); below.
+#include <errno.h>
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
 int
 main ()
 {
-return $ac_func ();
+        errno=0;
+        setresuid(0,0,0);
+        if (errno==ENOSYS)
+                exit(1);
+        else
+                exit(0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
-  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-                { echo "$as_me:$LINENO: checking if setresuid seems to work" >&5
-echo $ECHO_N "checking if setresuid seems to work... $ECHO_C" >&6; }
-        if test "$cross_compiling" = yes; then
-  { echo "$as_me:$LINENO: WARNING: cross compiling: not checking setresuid" >&5
-echo "$as_me: WARNING: cross compiling: not checking setresuid" >&2;}
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <stdlib.h>
-#include <errno.h>
-int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+$as_echo "#define BROKEN_SETRESUID 1" >>confdefs.h
-cat >>confdefs.h <<\_ACEOF
+                 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not implemented" >&5
-#define BROKEN_SETRESUID 1
+$as_echo "not implemented" >&6; }
-_ACEOF
-                 { echo "$as_me:$LINENO: result: not implemented" >&5
-echo "${ECHO_T}not implemented" >&6; }
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 done
 for ac_func in setresgid
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "setresgid" "ac_cv_func_setresgid"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_setresgid" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+  cat >>confdefs.h <<_ACEOF
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
+#define HAVE_SETRESGID 1
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if setresgid seems to work" >&5
-# include <limits.h>
+$as_echo_n "checking if setresgid seems to work... " >&6; }
-#else
+        if test "$cross_compiling" = yes; then :
-# include <assert.h>
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking setresuid" >&5
-#endif
+$as_echo "$as_me: WARNING: cross compiling: not checking setresuid" >&2;}
-#undef $ac_func
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
-/* Override any GCC internal prototype to avoid an error.
+#include <stdlib.h>
-   Use char because int might match the return type of a GCC
+#include <errno.h>
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
 int
 main ()
 {
-return $ac_func ();
+        errno=0;
+        setresgid(0,0,0);
+        if (errno==ENOSYS)
+                exit(1);
+        else
+                exit(0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
+$as_echo "#define BROKEN_SETRESGID 1" >>confdefs.h
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+                 { $as_echo "$as_me:${as_lineno-$LINENO}: result: not implemented" >&5
-      conftest$ac_exeext conftest.$ac_ext
+$as_echo "not implemented" >&6; }
 fi
-ac_res=`eval echo '${'$as_ac_var'}'`
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
-  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-                { echo "$as_me:$LINENO: checking if setresgid seems to work" >&5
-echo $ECHO_N "checking if setresgid seems to work... $ECHO_C" >&6; }
-        if test "$cross_compiling" = yes; then
-  { echo "$as_me:$LINENO: WARNING: cross compiling: not checking setresuid" >&5
-echo "$as_me: WARNING: cross compiling: not checking setresuid" >&2;}
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <stdlib.h>
-#include <errno.h>
-int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-cat >>confdefs.h <<\_ACEOF
-#define BROKEN_SETRESGID 1
-_ACEOF
-                 { echo "$as_me:$LINENO: result: not implemented" >&5
-echo "${ECHO_T}not implemented" >&6; }
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
 fi
 fi
 done
 for ac_func in gettimeofday time
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
 for ac_func in endutent getutent getutid getutline pututline setutent
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
 for ac_func in utmpname
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "utmpname" "ac_cv_func_utmpname"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_utmpname" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_UTMPNAME 1
 _ACEOF
 fi
 done
 for ac_func in endutxent getutxent getutxid getutxline getutxuser pututxline
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
 for ac_func in setutxdb setutxent utmpxname
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
 for ac_func in getlastlogxbyname
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  ac_fn_c_check_func "$LINENO" "getlastlogxbyname" "ac_cv_func_getlastlogxbyname"
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+if test "x$ac_cv_func_getlastlogxbyname" = xyes; then :
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_GETLASTLOGXBYNAME 1
 _ACEOF
 fi
 done
-{ echo "$as_me:$LINENO: checking for daemon" >&5
+ac_fn_c_check_func "$LINENO" "daemon" "ac_cv_func_daemon"
-echo $ECHO_N "checking for daemon... $ECHO_C" >&6; }
+if test "x$ac_cv_func_daemon" = xyes; then :
-if test "${ac_cv_func_daemon+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define daemon to an innocuous variant, in case <limits.h> declares daemon.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define daemon innocuous_daemon
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char daemon (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef daemon
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char daemon ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_daemon || defined __stub___daemon
-choke me
-#endif
-int
+$as_echo "#define HAVE_DAEMON 1" >>confdefs.h
-main ()
-{
-return daemon ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_daemon=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_daemon=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_daemon" >&5
-echo "${ECHO_T}$ac_cv_func_daemon" >&6; }
-if test $ac_cv_func_daemon = yes; then
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_DAEMON 1
-_ACEOF
 else
-  { echo "$as_me:$LINENO: checking for daemon in -lbsd" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for daemon in -lbsd" >&5
-echo $ECHO_N "checking for daemon in -lbsd... $ECHO_C" >&6; }
+$as_echo_n "checking for daemon in -lbsd... " >&6; }
-if test "${ac_cv_lib_bsd_daemon+set}" = set; then
+if ${ac_cv_lib_bsd_daemon+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lbsd  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -16309,42 +9694,19 @@ return daemon ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_bsd_daemon=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_bsd_daemon=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_bsd_daemon=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_bsd_daemon" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_bsd_daemon" >&5
-echo "${ECHO_T}$ac_cv_lib_bsd_daemon" >&6; }
+$as_echo "$ac_cv_lib_bsd_daemon" >&6; }
-if test $ac_cv_lib_bsd_daemon = yes; then
+if test "x$ac_cv_lib_bsd_daemon" = xyes; then :
-  LIBS="$LIBS -lbsd"; cat >>confdefs.h <<\_ACEOF
+  LIBS="$LIBS -lbsd"; $as_echo "#define HAVE_DAEMON 1" >>confdefs.h
-#define HAVE_DAEMON 1
-_ACEOF
 fi
@@ -16352,106 +9714,20 @@ fi
 fi
-{ echo "$as_me:$LINENO: checking for getpagesize" >&5
+ac_fn_c_check_func "$LINENO" "getpagesize" "ac_cv_func_getpagesize"
-echo $ECHO_N "checking for getpagesize... $ECHO_C" >&6; }
+if test "x$ac_cv_func_getpagesize" = xyes; then :
-if test "${ac_cv_func_getpagesize+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define getpagesize to an innocuous variant, in case <limits.h> declares getpagesize.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define getpagesize innocuous_getpagesize
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char getpagesize (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef getpagesize
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char getpagesize ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_getpagesize || defined __stub___getpagesize
-choke me
-#endif
-int
-main ()
-{
-return getpagesize ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  ac_cv_func_getpagesize=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_getpagesize=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_getpagesize" >&5
-echo "${ECHO_T}$ac_cv_func_getpagesize" >&6; }
-if test $ac_cv_func_getpagesize = yes; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_GETPAGESIZE 1" >>confdefs.h
-#define HAVE_GETPAGESIZE 1
-_ACEOF
 else
-  { echo "$as_me:$LINENO: checking for getpagesize in -lucb" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for getpagesize in -lucb" >&5
-echo $ECHO_N "checking for getpagesize in -lucb... $ECHO_C" >&6; }
+$as_echo_n "checking for getpagesize in -lucb... " >&6; }
-if test "${ac_cv_lib_ucb_getpagesize+set}" = set; then
+if ${ac_cv_lib_ucb_getpagesize+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lucb  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -16469,42 +9745,19 @@ return getpagesize ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_ucb_getpagesize=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_ucb_getpagesize=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_ucb_getpagesize=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_ucb_getpagesize" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ucb_getpagesize" >&5
-echo "${ECHO_T}$ac_cv_lib_ucb_getpagesize" >&6; }
+$as_echo "$ac_cv_lib_ucb_getpagesize" >&6; }
-if test $ac_cv_lib_ucb_getpagesize = yes; then
+if test "x$ac_cv_lib_ucb_getpagesize" = xyes; then :
-  LIBS="$LIBS -lucb"; cat >>confdefs.h <<\_ACEOF
+  LIBS="$LIBS -lucb"; $as_echo "#define HAVE_GETPAGESIZE 1" >>confdefs.h
-#define HAVE_GETPAGESIZE 1
-_ACEOF
 fi
@@ -16514,68 +9767,46 @@ fi
 # Check for broken snprintf
 if test "x$ac_cv_func_snprintf" = "xyes" ; then
-        { echo "$as_me:$LINENO: checking whether snprintf correctly terminates long strings" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether snprintf correctly terminates long strings" >&5
-echo $ECHO_N "checking whether snprintf correctly terminates long strings... $ECHO_C" >&6; }
+$as_echo_n "checking whether snprintf correctly terminates long strings... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-   { echo "$as_me:$LINENO: WARNING: cross compiling: Assuming working snprintf()" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Assuming working snprintf()" >&5
-echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <stdio.h>
+int
+main ()
+{
-#include <stdio.h>
+        char b[5];
-int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
+        snprintf(b,5,"123456789");
+        exit(b[4]!='\0');
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
-                        { echo "$as_me:$LINENO: result: no" >&5
+$as_echo "#define BROKEN_SNPRINTF 1" >>confdefs.h
-echo "${ECHO_T}no" >&6; }
-cat >>confdefs.h <<\_ACEOF
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&5
-#define BROKEN_SNPRINTF 1
+$as_echo "$as_me: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&2;}
-_ACEOF
-                        { echo "$as_me:$LINENO: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&5
-echo "$as_me: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&2;}
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 # If we don't have a working asprintf, then we strongly depend on vsnprintf
@@ -16583,18 +9814,14 @@ fi
 # create (as per SUSv3)
 if test "x$ac_cv_func_asprintf" != "xyes" && \
   test "x$ac_cv_func_vsnprintf" = "xyes" ; then
-        { echo "$as_me:$LINENO: checking whether vsnprintf returns correct values on overflow" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether vsnprintf returns correct values on overflow" >&5
-echo $ECHO_N "checking whether vsnprintf returns correct values on overflow... $ECHO_C" >&6; }
+$as_echo_n "checking whether vsnprintf returns correct values on overflow... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-   { echo "$as_me:$LINENO: WARNING: cross compiling: Assuming working vsnprintf()" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Assuming working vsnprintf()" >&5
-echo "$as_me: WARNING: cross compiling: Assuming working vsnprintf()" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: Assuming working vsnprintf()" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -16607,125 +9834,83 @@ int x_snprintf(char *str,size_t count,const char *fmt,...)
        va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
        return ret;
 }
-int main(void)
+int
+main ()
 {
        char x[1];
        exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
+  ;
+  return 0;
 }
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
-                        { echo "$as_me:$LINENO: result: no" >&5
+$as_echo "#define BROKEN_SNPRINTF 1" >>confdefs.h
-echo "${ECHO_T}no" >&6; }
-cat >>confdefs.h <<\_ACEOF
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ****** Your vsnprintf() function is broken, complain to your vendor" >&5
-#define BROKEN_SNPRINTF 1
+$as_echo "$as_me: WARNING: ****** Your vsnprintf() function is broken, complain to your vendor" >&2;}
-_ACEOF
-                        { echo "$as_me:$LINENO: WARNING: ****** Your vsnprintf() function is broken, complain to your vendor" >&5
-echo "$as_me: WARNING: ****** Your vsnprintf() function is broken, complain to your vendor" >&2;}
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 # On systems where [v]snprintf is broken, but is declared in stdio,
 # check that the fmt argument is const char * or just char *.
 # This is only useful for when BROKEN_SNPRINTF
-{ echo "$as_me:$LINENO: checking whether snprintf can declare const char *fmt" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether snprintf can declare const char *fmt" >&5
-echo $ECHO_N "checking whether snprintf can declare const char *fmt... $ECHO_C" >&6; }
+$as_echo_n "checking whether snprintf can declare const char *fmt... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
-           int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
+int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
-           int main(void) { snprintf(0, 0, 0); }
-_ACEOF
+int
-rm -f conftest.$ac_objext
+main ()
-if { (ac_try="$ac_compile"
+{
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+        snprintf(0, 0, 0);
-#define SNPRINTF_CONST const
+  ;
+  return 0;
+}
 _ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
-else
+$as_echo "#define SNPRINTF_CONST const" >>confdefs.h
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        { echo "$as_me:$LINENO: result: no" >&5
+else
-echo "${ECHO_T}no" >&6; }
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-    cat >>confdefs.h <<\_ACEOF
+$as_echo "no" >&6; }
-#define SNPRINTF_CONST /* not const */
+    $as_echo "#define SNPRINTF_CONST /* not const */" >>confdefs.h
-_ACEOF
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 # Check for missing getpeereid (or equiv) support
 NO_PEERCHECK=""
 if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
-        { echo "$as_me:$LINENO: checking whether system supports SO_PEERCRED getsockopt" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether system supports SO_PEERCRED getsockopt" >&5
-echo $ECHO_N "checking whether system supports SO_PEERCRED getsockopt... $ECHO_C" >&6; }
+$as_echo_n "checking whether system supports SO_PEERCRED getsockopt... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
-                 #include <sys/socket.h>
+#include <sys/socket.h>
 int
 main ()
 {
@@ -16734,134 +9919,84 @@ int i = SO_PEERCRED;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SO_PEERCRED 1" >>confdefs.h
-#define HAVE_SO_PEERCRED 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-        { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                NO_PEERCHECK=1
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
-{ echo "$as_me:$LINENO: checking for (overly) strict mkstemp" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for (overly) strict mkstemp" >&5
-echo $ECHO_N "checking for (overly) strict mkstemp... $ECHO_C" >&6; }
+$as_echo_n "checking for (overly) strict mkstemp... " >&6; }
-if test "$cross_compiling" = yes; then
+if test "$cross_compiling" = yes; then :
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-                cat >>confdefs.h <<\_ACEOF
+                $as_echo "#define HAVE_STRICT_MKSTEMP 1" >>confdefs.h
-#define HAVE_STRICT_MKSTEMP 1
-_ACEOF
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdlib.h>
-main() { char template[]="conftest.mkstemp-test";
-if (mkstemp(template) == -1)
-        exit(1);
-unlink(template); exit(0);
-}
+int
+main ()
+{
+        char template[]="conftest.mkstemp-test";
+        if (mkstemp(template) == -1)
+                exit(1);
+        unlink(template);
+        exit(0);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
-                { echo "$as_me:$LINENO: result: yes" >&5
+$as_echo "#define HAVE_STRICT_MKSTEMP 1" >>confdefs.h
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_STRICT_MKSTEMP 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 if test ! -z "$check_for_openpty_ctty_bug"; then
-        { echo "$as_me:$LINENO: checking if openpty correctly handles controlling tty" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if openpty correctly handles controlling tty" >&5
-echo $ECHO_N "checking if openpty correctly handles controlling tty... $ECHO_C" >&6; }
+$as_echo_n "checking if openpty correctly handles controlling tty... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-                        { echo "$as_me:$LINENO: result: cross-compiling" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming yes" >&5
-echo "${ECHO_T}cross-compiling" >&6; }
+$as_echo "cross-compiling, assuming yes" >&6; }
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
@@ -16870,8 +10005,9 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <sys/wait.h>
 int
-main()
+main ()
 {
        pid_t pid;
        int fd, ptyfd, ttyfd, status;
@@ -16894,70 +10030,42 @@ main()
                else
                        exit(0);        /* Did not acquire ctty: OK */
        }
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define SSHD_ACQUIRES_CTTY 1" >>confdefs.h
-#define SSHD_ACQUIRES_CTTY 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
    test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
-        { echo "$as_me:$LINENO: checking if getaddrinfo seems to work" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if getaddrinfo seems to work" >&5
-echo $ECHO_N "checking if getaddrinfo seems to work... $ECHO_C" >&6; }
+$as_echo_n "checking if getaddrinfo seems to work... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-                        { echo "$as_me:$LINENO: result: cross-compiling" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming yes" >&5
-echo "${ECHO_T}cross-compiling" >&6; }
+$as_echo "cross-compiling, assuming yes" >&6; }
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
@@ -16969,8 +10077,9 @@ cat >>conftest.$ac_ext <<_ACEOF
 #define TEST_PORT "2222"
 int
-main(void)
+main ()
 {
        int err, sock;
        struct addrinfo *gai_ai, *ai, hints;
        char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
@@ -17012,70 +10121,42 @@ main(void)
                }
        }
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
-echo "${ECHO_T}no" >&6; }
-                        cat >>confdefs.h <<\_ACEOF
-#define BROKEN_GETADDRINFO 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
    test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
-        { echo "$as_me:$LINENO: checking if getaddrinfo seems to work" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if getaddrinfo seems to work" >&5
-echo $ECHO_N "checking if getaddrinfo seems to work... $ECHO_C" >&6; }
+$as_echo_n "checking if getaddrinfo seems to work... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-                        { echo "$as_me:$LINENO: result: cross-compiling" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming no" >&5
-echo "${ECHO_T}cross-compiling" >&6; }
+$as_echo "cross-compiling, assuming no" >&6; }
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
@@ -17087,8 +10168,9 @@ cat >>conftest.$ac_ext <<_ACEOF
 #define TEST_PORT "2222"
 int
-main(void)
+main ()
 {
        int err, sock;
        struct addrinfo *gai_ai, *ai, hints;
        char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
@@ -17118,119 +10200,72 @@ main(void)
                }
        }
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define AIX_GETNAMEINFO_HACK 1" >>confdefs.h
-#define AIX_GETNAMEINFO_HACK 1
-_ACEOF
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        $as_echo "#define BROKEN_GETADDRINFO 1" >>confdefs.h
-echo "${ECHO_T}no" >&6; }
-                        cat >>confdefs.h <<\_ACEOF
-#define BROKEN_GETADDRINFO 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 if test "x$check_for_conflicting_getspnam" = "x1"; then
-        { echo "$as_me:$LINENO: checking for conflicting getspnam in shadow.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for conflicting getspnam in shadow.h" >&5
-echo $ECHO_N "checking for conflicting getspnam in shadow.h... $ECHO_C" >&6; }
+$as_echo_n "checking for conflicting getspnam in shadow.h... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
-#include <shadow.h>
+ #include <shadow.h>
-int main(void) {exit(0);}
+int
+main ()
+{
+ exit(0);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
-                        { echo "$as_me:$LINENO: result: yes" >&5
+$as_echo "#define GETSPNAM_CONFLICTING_DEFS 1" >>confdefs.h
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
-#define GETSPNAM_CONFLICTING_DEFS 1
-_ACEOF
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: checking whether getpgrp requires zero arguments" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether getpgrp requires zero arguments" >&5
-echo $ECHO_N "checking whether getpgrp requires zero arguments... $ECHO_C" >&6; }
+$as_echo_n "checking whether getpgrp requires zero arguments... " >&6; }
-if test "${ac_cv_func_getpgrp_void+set}" = set; then
+if ${ac_cv_func_getpgrp_void+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  # Use it with a single arg.
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 $ac_includes_default
 int
@@ -17241,41 +10276,19 @@ getpgrp (0);
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
  ac_cv_func_getpgrp_void=no
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_func_getpgrp_void=yes
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_func_getpgrp_void=yes
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_func_getpgrp_void" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_getpgrp_void" >&5
-echo "${ECHO_T}$ac_cv_func_getpgrp_void" >&6; }
+$as_echo "$ac_cv_func_getpgrp_void" >&6; }
 if test $ac_cv_func_getpgrp_void = yes; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define GETPGRP_VOID 1" >>confdefs.h
-#define GETPGRP_VOID 1
-_ACEOF
 fi
@@ -17285,7 +10298,7 @@ saved_CPPFLAGS="$CPPFLAGS"
 saved_LDFLAGS="$LDFLAGS"
 # Check whether --with-ssl-dir was given.
-if test "${with_ssl_dir+set}" = set; then
+if test "${with_ssl_dir+set}" = set; then :
  withval=$with_ssl_dir;
                if test "x$withval" != "xno" ; then
                        case "$withval" in
@@ -17322,11 +10335,7 @@ if test "${with_ssl_dir+set}" = set; then
 fi
 LIBS="-lcrypto $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -17344,33 +10353,11 @@ return RAND_add ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_OPENSSL 1" >>confdefs.h
-#define HAVE_OPENSSL 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
                                if test -n "${need_dash_r}"; then
                        LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
@@ -17378,150 +10365,15 @@ sed 's/^/| /' conftest.$ac_ext >&5
                        LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
                fi
                CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
-                if test "${ac_cv_header_openssl_opensslv_h+set}" = set; then
+                ac_fn_c_check_header_mongrel "$LINENO" "openssl/opensslv.h" "ac_cv_header_openssl_opensslv_h" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for openssl/opensslv.h" >&5
+if test "x$ac_cv_header_openssl_opensslv_h" = xyes; then :
-echo $ECHO_N "checking for openssl/opensslv.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_openssl_opensslv_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_openssl_opensslv_h" >&5
-echo "${ECHO_T}$ac_cv_header_openssl_opensslv_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking openssl/opensslv.h usability" >&5
-echo $ECHO_N "checking openssl/opensslv.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <openssl/opensslv.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking openssl/opensslv.h presence" >&5
-echo $ECHO_N "checking openssl/opensslv.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <openssl/opensslv.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: openssl/opensslv.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: openssl/opensslv.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: openssl/opensslv.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: openssl/opensslv.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: openssl/opensslv.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: openssl/opensslv.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: openssl/opensslv.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: openssl/opensslv.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: openssl/opensslv.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for openssl/opensslv.h" >&5
-echo $ECHO_N "checking for openssl/opensslv.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_openssl_opensslv_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_openssl_opensslv_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_openssl_opensslv_h" >&5
-echo "${ECHO_T}$ac_cv_header_openssl_opensslv_h" >&6; }
-fi
-if test $ac_cv_header_openssl_opensslv_h = yes; then
-  :
 else
-  { { echo "$as_me:$LINENO: error: *** OpenSSL headers missing - please install first or check config.log ***" >&5
+  as_fn_error $? "*** OpenSSL headers missing - please install first or check config.log ***" "$LINENO" 5
-echo "$as_me: error: *** OpenSSL headers missing - please install first or check config.log ***" >&2;}
-   { (exit 1); exit 1; }; }
 fi
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -17539,71 +10391,45 @@ return RAND_add ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+  $as_echo "#define HAVE_OPENSSL 1" >>confdefs.h
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  cat >>confdefs.h <<\_ACEOF
-#define HAVE_OPENSSL 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                                as_fn_error $? "*** Can't find recent OpenSSL libcrypto (see config.log for details) ***" "$LINENO" 5
-                                { { echo "$as_me:$LINENO: error: *** Can't find recent OpenSSL libcrypto (see config.log for details) ***" >&5
-echo "$as_me: error: *** Can't find recent OpenSSL libcrypto (see config.log for details) ***" >&2;}
-   { (exit 1); exit 1; }; }
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 # Determine OpenSSL header version
-{ echo "$as_me:$LINENO: checking OpenSSL header version" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking OpenSSL header version" >&5
-echo $ECHO_N "checking OpenSSL header version... $ECHO_C" >&6; }
+$as_echo_n "checking OpenSSL header version... " >&6; }
-if test "$cross_compiling" = yes; then
+if test "$cross_compiling" = yes; then :
-                { echo "$as_me:$LINENO: WARNING: cross compiling: not checking" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
-echo "$as_me: WARNING: cross compiling: not checking" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
 #include <string.h>
 #include <openssl/opensslv.h>
 #define DATA "conftest.sslincver"
-int main(void) {
+int
+main ()
+{
        FILE *fd;
        int rc;
@@ -17615,68 +10441,40 @@ int main(void) {
                exit(1);
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
                ssl_header_ver=`cat conftest.sslincver`
-                { echo "$as_me:$LINENO: result: $ssl_header_ver" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ssl_header_ver" >&5
-echo "${ECHO_T}$ssl_header_ver" >&6; }
+$as_echo "$ssl_header_ver" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-                { echo "$as_me:$LINENO: result: not found" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
-echo "${ECHO_T}not found" >&6; }
+$as_echo "not found" >&6; }
-                { { echo "$as_me:$LINENO: error: OpenSSL version header not found." >&5
+                as_fn_error $? "OpenSSL version header not found." "$LINENO" 5
-echo "$as_me: error: OpenSSL version header not found." >&2;}
-   { (exit 1); exit 1; }; }
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 # Determine OpenSSL library version
-{ echo "$as_me:$LINENO: checking OpenSSL library version" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking OpenSSL library version" >&5
-echo $ECHO_N "checking OpenSSL library version... $ECHO_C" >&6; }
+$as_echo_n "checking OpenSSL library version... " >&6; }
-if test "$cross_compiling" = yes; then
+if test "$cross_compiling" = yes; then :
-                { echo "$as_me:$LINENO: WARNING: cross compiling: not checking" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
-echo "$as_me: WARNING: cross compiling: not checking" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
@@ -17684,7 +10482,11 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <openssl/opensslv.h>
 #include <openssl/crypto.h>
 #define DATA "conftest.ssllibver"
-int main(void) {
+int
+main ()
+{
        FILE *fd;
        int rc;
@@ -17696,56 +10498,32 @@ int main(void) {
                exit(1);
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
                ssl_library_ver=`cat conftest.ssllibver`
-                { echo "$as_me:$LINENO: result: $ssl_library_ver" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ssl_library_ver" >&5
-echo "${ECHO_T}$ssl_library_ver" >&6; }
+$as_echo "$ssl_library_ver" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
+$as_echo "not found" >&6; }
-                { echo "$as_me:$LINENO: result: not found" >&5
+                as_fn_error $? "OpenSSL library not found." "$LINENO" 5
-echo "${ECHO_T}not found" >&6; }
-                { { echo "$as_me:$LINENO: error: OpenSSL library not found." >&5
-echo "$as_me: error: OpenSSL library not found." >&2;}
-   { (exit 1); exit 1; }; }
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 # Check whether --with-openssl-header-check was given.
-if test "${with_openssl_header_check+set}" = set; then
+if test "${with_openssl_header_check+set}" = set; then :
  withval=$with_openssl_header_check;   if test "x$withval" = "xno" ; then
                openssl_check_nonfatal=1
           fi
@@ -17755,281 +10533,127 @@ fi
 # Sanity check OpenSSL headers
-{ echo "$as_me:$LINENO: checking whether OpenSSL's headers match the library" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL's headers match the library" >&5
-echo $ECHO_N "checking whether OpenSSL's headers match the library... $ECHO_C" >&6; }
+$as_echo_n "checking whether OpenSSL's headers match the library... " >&6; }
-if test "$cross_compiling" = yes; then
+if test "$cross_compiling" = yes; then :
-                { echo "$as_me:$LINENO: WARNING: cross compiling: not checking" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
-echo "$as_me: WARNING: cross compiling: not checking" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <string.h>
 #include <openssl/opensslv.h>
-int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
+int
+main ()
+{
+        exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                if test "x$openssl_check_nonfatal" = "x"; then
-                        { { echo "$as_me:$LINENO: error: Your OpenSSL headers do not match your
+                        as_fn_error $? "Your OpenSSL headers do not match your
-library. Check config.log for details.
-If you are sure your installation is consistent, you can disable the check
-by running \"./configure --without-openssl-header-check\".
-Also see contrib/findssl.sh for help identifying header/library mismatches.
-" >&5
-echo "$as_me: error: Your OpenSSL headers do not match your
 library. Check config.log for details.
 If you are sure your installation is consistent, you can disable the check
 by running \"./configure --without-openssl-header-check\".
 Also see contrib/findssl.sh for help identifying header/library mismatches.
-" >&2;}
+" "$LINENO" 5
-   { (exit 1); exit 1; }; }
                else
-                        { echo "$as_me:$LINENO: WARNING: Your OpenSSL headers do not match your
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Your OpenSSL headers do not match your
 library. Check config.log for details.
 Also see contrib/findssl.sh for help identifying header/library mismatches." >&5
-echo "$as_me: WARNING: Your OpenSSL headers do not match your
+$as_echo "$as_me: WARNING: Your OpenSSL headers do not match your
 library. Check config.log for details.
 Also see contrib/findssl.sh for help identifying header/library mismatches." >&2;}
                fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if programs using OpenSSL functions will link" >&5
-{ echo "$as_me:$LINENO: checking if programs using OpenSSL functions will link" >&5
+$as_echo_n "checking if programs using OpenSSL functions will link... " >&6; }
-echo $ECHO_N "checking if programs using OpenSSL functions will link... $ECHO_C" >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <openssl/evp.h>
-#include <openssl/evp.h>
+int
-int main(void) { SSLeay_add_all_algorithms(); }
+main ()
+{
+ SSLeay_add_all_algorithms();
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                saved_LIBS="$LIBS"
                LIBS="$LIBS -ldl"
-                { echo "$as_me:$LINENO: checking if programs using OpenSSL need -ldl" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if programs using OpenSSL need -ldl" >&5
-echo $ECHO_N "checking if programs using OpenSSL need -ldl... $ECHO_C" >&6; }
+$as_echo_n "checking if programs using OpenSSL need -ldl... " >&6; }
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <openssl/evp.h>
-#include <openssl/evp.h>
+int
-int main(void) { SSLeay_add_all_algorithms(); }
+main ()
+{
+ SSLeay_add_all_algorithms();
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-                                { echo "$as_me:$LINENO: result: yes" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-                                { echo "$as_me:$LINENO: result: no" >&5
+$as_echo "no" >&6; }
-echo "${ECHO_T}no" >&6; }
                                LIBS="$saved_LIBS"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 for ac_func in RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
@@ -18038,62 +10662,37 @@ done
 # Check whether --with-ssl-engine was given.
-if test "${with_ssl_engine+set}" = set; then
+if test "${with_ssl_engine+set}" = set; then :
  withval=$with_ssl_engine;  if test "x$withval" != "xno" ; then
-                { echo "$as_me:$LINENO: checking for OpenSSL ENGINE support" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL ENGINE support" >&5
-echo $ECHO_N "checking for OpenSSL ENGINE support... $ECHO_C" >&6; }
+$as_echo_n "checking for OpenSSL ENGINE support... " >&6; }
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
- #include <openssl/engine.h>
+#include <openssl/engine.h>
 int
 main ()
 {
-ENGINE_load_builtin_engines();ENGINE_register_all_complete();
+        ENGINE_load_builtin_engines();
+        ENGINE_register_all_complete();
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_OPENSSL_ENGINE 1" >>confdefs.h
-#define USE_OPENSSL_ENGINE 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
+   as_fn_error $? "OpenSSL ENGINE support not found" "$LINENO" 5
-sed 's/^/| /' conftest.$ac_ext >&5
-         { { echo "$as_me:$LINENO: error: OpenSSL ENGINE support not found" >&5
-echo "$as_me: error: OpenSSL ENGINE support not found" >&2;}
-   { (exit 1); exit 1; }; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
          fi
@@ -18101,132 +10700,90 @@ fi
 # Check for OpenSSL without EVP_aes_{192,256}_cbc
-{ echo "$as_me:$LINENO: checking whether OpenSSL has crippled AES support" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL has crippled AES support" >&5
-echo $ECHO_N "checking whether OpenSSL has crippled AES support... $ECHO_C" >&6; }
+$as_echo_n "checking whether OpenSSL has crippled AES support... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <string.h>
 #include <openssl/evp.h>
-int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
+int
+main ()
+{
+        exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
-                { echo "$as_me:$LINENO: result: yes" >&5
+$as_echo "#define OPENSSL_LOBOTOMISED_AES 1" >>confdefs.h
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
-#define OPENSSL_LOBOTOMISED_AES 1
-_ACEOF
 fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if EVP_DigestUpdate returns an int" >&5
-      conftest$ac_exeext conftest.$ac_ext
+$as_echo_n "checking if EVP_DigestUpdate returns an int... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-{ echo "$as_me:$LINENO: checking if EVP_DigestUpdate returns an int" >&5
-echo $ECHO_N "checking if EVP_DigestUpdate returns an int... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <string.h>
 #include <openssl/evp.h>
-int main(void) { if(EVP_DigestUpdate(NULL, NULL,0)) exit(0); }
+int
+main ()
+{
+        if(EVP_DigestUpdate(NULL, NULL,0))
+                exit(0);
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
-                { echo "$as_me:$LINENO: result: no" >&5
+$as_echo "#define OPENSSL_EVP_DIGESTUPDATE_VOID 1" >>confdefs.h
-echo "${ECHO_T}no" >&6; }
-cat >>confdefs.h <<\_ACEOF
-#define OPENSSL_EVP_DIGESTUPDATE_VOID 1
-_ACEOF
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
 # because the system crypt() is more featureful.
 if test "x$check_for_libcrypt_before" = "x1"; then
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for crypt in -lcrypt" >&5
-{ echo "$as_me:$LINENO: checking for crypt in -lcrypt" >&5
+$as_echo_n "checking for crypt in -lcrypt... " >&6; }
-echo $ECHO_N "checking for crypt in -lcrypt... $ECHO_C" >&6; }
+if ${ac_cv_lib_crypt_crypt+:} false; then :
-if test "${ac_cv_lib_crypt_crypt+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lcrypt  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -18244,39 +10801,18 @@ return crypt ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_crypt_crypt=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_crypt_crypt=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_crypt_crypt=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_crypt_crypt" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypt_crypt" >&5
-echo "${ECHO_T}$ac_cv_lib_crypt_crypt" >&6; }
+$as_echo "$ac_cv_lib_crypt_crypt" >&6; }
-if test $ac_cv_lib_crypt_crypt = yes; then
+if test "x$ac_cv_lib_crypt_crypt" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBCRYPT 1
 _ACEOF
@@ -18290,18 +10826,14 @@ fi
 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
 # version in OpenSSL.
 if test "x$check_for_libcrypt_later" = "x1"; then
-        { echo "$as_me:$LINENO: checking for crypt in -lcrypt" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for crypt in -lcrypt" >&5
-echo $ECHO_N "checking for crypt in -lcrypt... $ECHO_C" >&6; }
+$as_echo_n "checking for crypt in -lcrypt... " >&6; }
-if test "${ac_cv_lib_crypt_crypt+set}" = set; then
+if ${ac_cv_lib_crypt_crypt+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lcrypt  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -18319,135 +10851,31 @@ return crypt ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_crypt_crypt=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_crypt_crypt=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_crypt_crypt=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_crypt_crypt" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypt_crypt" >&5
-echo "${ECHO_T}$ac_cv_lib_crypt_crypt" >&6; }
+$as_echo "$ac_cv_lib_crypt_crypt" >&6; }
-if test $ac_cv_lib_crypt_crypt = yes; then
+if test "x$ac_cv_lib_crypt_crypt" = xyes; then :
  LIBS="$LIBS -lcrypt"
 fi
 fi
 # Search for SHA256 support in libc and/or OpenSSL
 for ac_func in SHA256_Update EVP_sha256
-do
+do :
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 TEST_SSH_SHA256=yes
 else
@@ -18458,13 +10886,9 @@ done
 # Check complete ECC support in OpenSSL
-{ echo "$as_me:$LINENO: checking whether OpenSSL has complete ECC support" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL has complete ECC support" >&5
-echo $ECHO_N "checking whether OpenSSL has complete ECC support... $ECHO_C" >&6; }
+$as_echo_n "checking whether OpenSSL has complete ECC support... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <openssl/ec.h>
@@ -18476,72 +10900,51 @@ cat >>conftest.$ac_ext <<_ACEOF
 #if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
 # error "OpenSSL < 0.9.8g has unreliable ECC code"
 #endif
-int main(void) {
+int
+main ()
+{
        EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp521r1);
        const EVP_MD *m = EVP_sha512(); /* We need this too */
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define OPENSSL_HAS_ECC 1" >>confdefs.h
-#define OPENSSL_HAS_ECC 1
-_ACEOF
                TEST_SSH_ECC=yes
                COMMENT_OUT_ECC=""
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                TEST_SSH_ECC=no
                COMMENT_OUT_ECC="#no ecc#"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 saved_LIBS="$LIBS"
-{ echo "$as_me:$LINENO: checking for ia_openinfo in -liaf" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ia_openinfo in -liaf" >&5
-echo $ECHO_N "checking for ia_openinfo in -liaf... $ECHO_C" >&6; }
+$as_echo_n "checking for ia_openinfo in -liaf... " >&6; }
-if test "${ac_cv_lib_iaf_ia_openinfo+set}" = set; then
+if ${ac_cv_lib_iaf_ia_openinfo+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-liaf  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -18559,245 +10962,216 @@ return ia_openinfo ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_iaf_ia_openinfo=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_iaf_ia_openinfo=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_iaf_ia_openinfo=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_iaf_ia_openinfo" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_iaf_ia_openinfo" >&5
-echo "${ECHO_T}$ac_cv_lib_iaf_ia_openinfo" >&6; }
+$as_echo "$ac_cv_lib_iaf_ia_openinfo" >&6; }
-if test $ac_cv_lib_iaf_ia_openinfo = yes; then
+if test "x$ac_cv_lib_iaf_ia_openinfo" = xyes; then :
        LIBS="$LIBS -liaf"
+        for ac_func in set_id
-for ac_func in set_id
+do :
-do
+  ac_fn_c_check_func "$LINENO" "set_id" "ac_cv_func_set_id"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if test "x$ac_cv_func_set_id" = xyes; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
+  cat >>confdefs.h <<_ACEOF
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
+#define HAVE_SET_ID 1
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
+ SSHDLIBS="$SSHDLIBS -liaf"
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
+$as_echo "#define HAVE_LIBIAF 1" >>confdefs.h
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
+fi
+done
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
+fi
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
+LIBS="$saved_LIBS"
-extern "C"
-#endif
+### Configure cryptographic random number support
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
+# Check wheter OpenSSL seeds itself
-    to always fail with ENOSYS.  Some functions are actually named
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether OpenSSL's PRNG is internally seeded" >&5
-    something starting with __ and the normal name is an alias.  */
+$as_echo_n "checking whether OpenSSL's PRNG is internally seeded... " >&6; }
-#if defined __stub_$ac_func || defined __stub___$ac_func
+if test "$cross_compiling" = yes; then :
-choke me
-#endif
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: assuming yes" >&5
+$as_echo "$as_me: WARNING: cross compiling: assuming yes" >&2;}
+                # This is safe, since we will fatal() at runtime if
+                # OpenSSL is not seeded correctly.
+                OPENSSL_SEEDS_ITSELF=yes
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <string.h>
+#include <openssl/rand.h>
 int
 main ()
 {
-return $ac_func ();
+        exit(RAND_status() == 1 ? 0 : 1);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
+                OPENSSL_SEEDS_ITSELF=yes
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-  *) ac_try_echo=$ac_try;;
+$as_echo "yes" >&6; }
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-fi
+$as_echo "no" >&6; }
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
 fi
-ac_res=`eval echo '${'$as_ac_var'}'`
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
-echo "${ECHO_T}$ac_res" >&6; }
+fi
-if test `eval echo '${'$as_ac_var'}'` = yes; then
-  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
- SSHDLIBS="$SSHDLIBS -liaf"
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_LIBIAF 1
-_ACEOF
+# PRNGD TCP socket
-fi
+# Check whether --with-prngd-port was given.
-done
+if test "${with_prngd_port+set}" = set; then :
+  withval=$with_prngd_port;
+                case "$withval" in
+                no)
+                        withval=""
+                        ;;
+                [0-9]*)
+                        ;;
+                *)
+                        as_fn_error $? "You must specify a numeric port number for --with-prngd-port" "$LINENO" 5
+                        ;;
+                esac
+                if test ! -z "$withval" ; then
+                        PRNGD_PORT="$withval"
+cat >>confdefs.h <<_ACEOF
+#define PRNGD_PORT $PRNGD_PORT
+_ACEOF
-fi
+                fi
-LIBS="$saved_LIBS"
-### Configure cryptographic random number support
+fi
-# Check wheter OpenSSL seeds itself
-{ echo "$as_me:$LINENO: checking whether OpenSSL's PRNG is internally seeded" >&5
-echo $ECHO_N "checking whether OpenSSL's PRNG is internally seeded... $ECHO_C" >&6; }
-if test "$cross_compiling" = yes; then
-                { echo "$as_me:$LINENO: WARNING: cross compiling: assuming yes" >&5
-echo "$as_me: WARNING: cross compiling: assuming yes" >&2;}
-                # This is safe, since all recent OpenSSL versions will
-                # complain at runtime if not seeded correctly.
-                OPENSSL_SEEDS_ITSELF=yes
+# PRNGD Unix domain socket
-else
+# Check whether --with-prngd-socket was given.
-  cat >conftest.$ac_ext <<_ACEOF
+if test "${with_prngd_socket+set}" = set; then :
-/* confdefs.h.  */
+  withval=$with_prngd_socket;
-_ACEOF
+                case "$withval" in
-cat confdefs.h >>conftest.$ac_ext
+                yes)
-cat >>conftest.$ac_ext <<_ACEOF
+                        withval="/var/run/egd-pool"
-/* end confdefs.h.  */
+                        ;;
+                no)
+                        withval=""
+                        ;;
+                /*)
+                        ;;
+                *)
+                        as_fn_error $? "You must specify an absolute path to the entropy socket" "$LINENO" 5
+                        ;;
+                esac
-#include <string.h>
+                if test ! -z "$withval" ; then
-#include <openssl/rand.h>
+                        if test ! -z "$PRNGD_PORT" ; then
-int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
+                                as_fn_error $? "You may not specify both a PRNGD/EGD port and socket" "$LINENO" 5
+                        fi
+                        if test ! -r "$withval" ; then
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Entropy socket is not readable" >&5
+$as_echo "$as_me: WARNING: Entropy socket is not readable" >&2;}
+                        fi
+                        PRNGD_SOCKET="$withval"
+cat >>confdefs.h <<_ACEOF
+#define PRNGD_SOCKET "$PRNGD_SOCKET"
 _ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-                OPENSSL_SEEDS_ITSELF=yes
+                fi
-                { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
+                # Check for existing socket only if we don't have a random device already
+                if test "x$OPENSSL_SEEDS_ITSELF" != "xyes" ; then
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PRNGD/EGD socket" >&5
+$as_echo_n "checking for PRNGD/EGD socket... " >&6; }
+                        # Insert other locations here
+                        for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
+                                if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
+                                        PRNGD_SOCKET="$sock"
+                                        cat >>confdefs.h <<_ACEOF
+#define PRNGD_SOCKET "$PRNGD_SOCKET"
+_ACEOF
+                                        break;
+                                fi
+                        done
+                        if test ! -z "$PRNGD_SOCKET" ; then
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PRNGD_SOCKET" >&5
+$as_echo "$PRNGD_SOCKET" >&6; }
+                        else
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
+$as_echo "not found" >&6; }
+                        fi
+                fi
-                { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-                # Default to use of the rand helper if OpenSSL doesn't
-                # seed itself
-                USE_RAND_HELPER=yes
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
+# Which randomness source do we use?
+if test ! -z "$PRNGD_PORT" ; then
+        RAND_MSG="PRNGd port $PRNGD_PORT"
+elif test ! -z "$PRNGD_SOCKET" ; then
+        RAND_MSG="PRNGd socket $PRNGD_SOCKET"
+elif test ! -z "$OPENSSL_SEEDS_ITSELF" ; then
+$as_echo "#define OPENSSL_PRNG_ONLY 1" >>confdefs.h
+        RAND_MSG="OpenSSL internal ONLY"
+else
+        as_fn_error $? "OpenSSH has no source of random numbers. Please configure OpenSSL with an entropy source or re-run configure using one of the --with-prngd-port or --with-prngd-socket options" "$LINENO" 5
+fi
 # Check for PAM libs
 PAM_MSG="no"
 # Check whether --with-pam was given.
-if test "${with_pam+set}" = set; then
+if test "${with_pam+set}" = set; then :
  withval=$with_pam;
                if test "x$withval" != "xno" ; then
                        if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
                           test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
-                                { { echo "$as_me:$LINENO: error: PAM headers not found" >&5
+                                as_fn_error $? "PAM headers not found" "$LINENO" 5
-echo "$as_me: error: PAM headers not found" >&2;}
-   { (exit 1); exit 1; }; }
                        fi
                        saved_LIBS="$LIBS"
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-{ echo "$as_me:$LINENO: checking for dlopen in -ldl" >&5
+$as_echo_n "checking for dlopen in -ldl... " >&6; }
-echo $ECHO_N "checking for dlopen in -ldl... $ECHO_C" >&6; }
+if ${ac_cv_lib_dl_dlopen+:} false; then :
-if test "${ac_cv_lib_dl_dlopen+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-ldl  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -18815,39 +11189,18 @@ return dlopen ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_dl_dlopen=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_dl_dlopen=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_dl_dlopen=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_dl_dlopen" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-echo "${ECHO_T}$ac_cv_lib_dl_dlopen" >&6; }
+$as_echo "$ac_cv_lib_dl_dlopen" >&6; }
-if test $ac_cv_lib_dl_dlopen = yes; then
+if test "x$ac_cv_lib_dl_dlopen" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBDL 1
 _ACEOF
@@ -18856,19 +11209,14 @@ _ACEOF
 fi
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pam_set_item in -lpam" >&5
-{ echo "$as_me:$LINENO: checking for pam_set_item in -lpam" >&5
+$as_echo_n "checking for pam_set_item in -lpam... " >&6; }
-echo $ECHO_N "checking for pam_set_item in -lpam... $ECHO_C" >&6; }
+if ${ac_cv_lib_pam_pam_set_item+:} false; then :
-if test "${ac_cv_lib_pam_pam_set_item+set}" = set; then
+  $as_echo_n "(cached) " >&6
-  echo $ECHO_N "(cached) $ECHO_C" >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lpam  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -18886,39 +11234,18 @@ return pam_set_item ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_pam_pam_set_item=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_pam_pam_set_item=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_pam_pam_set_item=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_pam_pam_set_item" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_pam_pam_set_item" >&5
-echo "${ECHO_T}$ac_cv_lib_pam_pam_set_item" >&6; }
+$as_echo "$ac_cv_lib_pam_pam_set_item" >&6; }
-if test $ac_cv_lib_pam_pam_set_item = yes; then
+if test "x$ac_cv_lib_pam_pam_set_item" = xyes; then :
  cat >>confdefs.h <<_ACEOF
 #define HAVE_LIBPAM 1
 _ACEOF
@@ -18926,194 +11253,26 @@ _ACEOF
  LIBS="-lpam $LIBS"
 else
-  { { echo "$as_me:$LINENO: error: *** libpam missing" >&5
+  as_fn_error $? "*** libpam missing" "$LINENO" 5
-echo "$as_me: error: *** libpam missing" >&2;}
-   { (exit 1); exit 1; }; }
-fi
-for ac_func in pam_getenvlist
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
 fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+                        for ac_func in pam_getenvlist
-      conftest$ac_exeext conftest.$ac_ext
+do :
-fi
+  ac_fn_c_check_func "$LINENO" "pam_getenvlist" "ac_cv_func_pam_getenvlist"
-ac_res=`eval echo '${'$as_ac_var'}'`
+if test "x$ac_cv_func_pam_getenvlist" = xyes; then :
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_PAM_GETENVLIST 1
 _ACEOF
 fi
 done
+                        for ac_func in pam_putenv
-for ac_func in pam_putenv
+do :
-do
+  ac_fn_c_check_func "$LINENO" "pam_putenv" "ac_cv_func_pam_putenv"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if test "x$ac_cv_func_pam_putenv" = xyes; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define HAVE_PAM_PUTENV 1
 _ACEOF
 fi
@@ -19125,9 +11284,7 @@ done
                        SSHDLIBS="$SSHDLIBS -lpam"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_PAM 1" >>confdefs.h
-#define USE_PAM 1
-_ACEOF
                        if test $ac_cv_lib_dl_dlopen = yes; then
@@ -19149,13 +11306,9 @@ fi
 # Check for older PAM
 if test "x$PAM_MSG" = "xyes" ; then
        # Check PAM strerror arguments (old PAM)
-        { echo "$as_me:$LINENO: checking whether pam_strerror takes only one argument" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pam_strerror takes only one argument" >&5
-echo $ECHO_N "checking whether pam_strerror takes only one argument... $ECHO_C" >&6; }
+$as_echo_n "checking whether pam_strerror takes only one argument... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdlib.h>
@@ -19168,213 +11321,34 @@ cat >>conftest.$ac_ext <<_ACEOF
 int
 main ()
 {
 (void)pam_strerror((pam_handle_t *)NULL, -1);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-case "(($ac_try" in
+$as_echo "no" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_OLD_PAM 1" >>confdefs.h
-#define HAVE_OLD_PAM 1
-_ACEOF
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
                        PAM_MSG="yes (old library)"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-# Do we want to force the use of the rand helper?
-# Check whether --with-rand-helper was given.
-if test "${with_rand_helper+set}" = set; then
-  withval=$with_rand_helper;
-                if test "x$withval" = "xno" ; then
-                        # Force use of OpenSSL's internal RNG, even if
-                        # the previous test showed it to be unseeded.
-                        if test -z "$OPENSSL_SEEDS_ITSELF" ; then
-                                { echo "$as_me:$LINENO: WARNING: *** Forcing use of OpenSSL's non-self-seeding PRNG" >&5
-echo "$as_me: WARNING: *** Forcing use of OpenSSL's non-self-seeding PRNG" >&2;}
-                                OPENSSL_SEEDS_ITSELF=yes
-                                USE_RAND_HELPER=""
-                        fi
-                else
-                        USE_RAND_HELPER=yes
-                fi
-fi
-# Which randomness source do we use?
-if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
-        # OpenSSL only
-cat >>confdefs.h <<\_ACEOF
-#define OPENSSL_PRNG_ONLY 1
-_ACEOF
-        RAND_MSG="OpenSSL internal ONLY"
-        INSTALL_SSH_RAND_HELPER=""
-elif test ! -z "$USE_RAND_HELPER" ; then
-        # install rand helper
-        RAND_MSG="ssh-rand-helper"
-        INSTALL_SSH_RAND_HELPER="yes"
-fi
-### Configuration of ssh-rand-helper
-# PRNGD TCP socket
-# Check whether --with-prngd-port was given.
-if test "${with_prngd_port+set}" = set; then
-  withval=$with_prngd_port;
-                case "$withval" in
-                no)
-                        withval=""
-                        ;;
-                [0-9]*)
-                        ;;
-                *)
-                        { { echo "$as_me:$LINENO: error: You must specify a numeric port number for --with-prngd-port" >&5
-echo "$as_me: error: You must specify a numeric port number for --with-prngd-port" >&2;}
-   { (exit 1); exit 1; }; }
-                        ;;
-                esac
-                if test ! -z "$withval" ; then
-                        PRNGD_PORT="$withval"
-cat >>confdefs.h <<_ACEOF
-#define PRNGD_PORT $PRNGD_PORT
-_ACEOF
-                fi
-fi
-# PRNGD Unix domain socket
-# Check whether --with-prngd-socket was given.
-if test "${with_prngd_socket+set}" = set; then
-  withval=$with_prngd_socket;
-                case "$withval" in
-                yes)
-                        withval="/var/run/egd-pool"
-                        ;;
-                no)
-                        withval=""
-                        ;;
-                /*)
-                        ;;
-                *)
-                        { { echo "$as_me:$LINENO: error: You must specify an absolute path to the entropy socket" >&5
-echo "$as_me: error: You must specify an absolute path to the entropy socket" >&2;}
-   { (exit 1); exit 1; }; }
-                        ;;
-                esac
-                if test ! -z "$withval" ; then
-                        if test ! -z "$PRNGD_PORT" ; then
-                                { { echo "$as_me:$LINENO: error: You may not specify both a PRNGD/EGD port and socket" >&5
-echo "$as_me: error: You may not specify both a PRNGD/EGD port and socket" >&2;}
-   { (exit 1); exit 1; }; }
-                        fi
-                        if test ! -r "$withval" ; then
-                                { echo "$as_me:$LINENO: WARNING: Entropy socket is not readable" >&5
-echo "$as_me: WARNING: Entropy socket is not readable" >&2;}
-                        fi
-                        PRNGD_SOCKET="$withval"
-cat >>confdefs.h <<_ACEOF
-#define PRNGD_SOCKET "$PRNGD_SOCKET"
-_ACEOF
-                fi
-else
-                # Check for existing socket only if we don't have a random device already
-                if test "$USE_RAND_HELPER" = yes ; then
-                        { echo "$as_me:$LINENO: checking for PRNGD/EGD socket" >&5
-echo $ECHO_N "checking for PRNGD/EGD socket... $ECHO_C" >&6; }
-                        # Insert other locations here
-                        for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
-                                if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
-                                        PRNGD_SOCKET="$sock"
-                                        cat >>confdefs.h <<_ACEOF
-#define PRNGD_SOCKET "$PRNGD_SOCKET"
-_ACEOF
-                                        break;
-                                fi
-                        done
-                        if test ! -z "$PRNGD_SOCKET" ; then
-                                { echo "$as_me:$LINENO: result: $PRNGD_SOCKET" >&5
-echo "${ECHO_T}$PRNGD_SOCKET" >&6; }
-                        else
-                                { echo "$as_me:$LINENO: result: not found" >&5
-echo "${ECHO_T}not found" >&6; }
-                        fi
-                fi
-fi
-# Change default command timeout for hashing entropy source
-entropy_timeout=200
-# Check whether --with-entropy-timeout was given.
-if test "${with_entropy_timeout+set}" = set; then
-  withval=$with_entropy_timeout;
-                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
-                    test "x${withval}" != "xyes"; then
-                        entropy_timeout=$withval
-                fi
-fi
-cat >>confdefs.h <<_ACEOF
-#define ENTROPY_TIMEOUT_MSEC $entropy_timeout
-_ACEOF
 SSH_PRIVSEP_USER=sshd
 # Check whether --with-privsep-user was given.
-if test "${with_privsep_user+set}" = set; then
+if test "${with_privsep_user+set}" = set; then :
  withval=$with_privsep_user;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -19391,836 +11365,65 @@ _ACEOF
-# We do this little dance with the search path to insure
+# Decide which sandbox style to use
-# that programs that we select for use by installed programs
+sandbox_arg=""
-# (which may be run by the super-user) come from trusted
-# locations before they come from the user's private area.
-# This should help avoid accidentally configuring some
-# random version of a program in someone's personal bin.
-OPATH=$PATH
-PATH=/bin:/usr/bin
-test -h /bin 2> /dev/null && PATH=/usr/bin
-test -d /sbin && PATH=$PATH:/sbin
-test -d /usr/sbin && PATH=$PATH:/usr/sbin
-PATH=$PATH:/etc:$OPATH
-# These programs are used by the command hashing source to gather entropy
-        # Extract the first word of "ls", so it can be a program name with args.
-set dummy ls; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_LS+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_LS in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_LS="$PROG_LS" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_LS="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_LS=$ac_cv_path_PROG_LS
-if test -n "$PROG_LS"; then
-  { echo "$as_me:$LINENO: result: $PROG_LS" >&5
-echo "${ECHO_T}$PROG_LS" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_LS" ; then
-                PROG_LS="undef"
-        fi
-        # Extract the first word of "netstat", so it can be a program name with args.
-set dummy netstat; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_NETSTAT+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_NETSTAT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_NETSTAT="$PROG_NETSTAT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_NETSTAT="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_NETSTAT=$ac_cv_path_PROG_NETSTAT
-if test -n "$PROG_NETSTAT"; then
-  { echo "$as_me:$LINENO: result: $PROG_NETSTAT" >&5
-echo "${ECHO_T}$PROG_NETSTAT" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_NETSTAT" ; then
-                PROG_NETSTAT="undef"
-        fi
-        # Extract the first word of "arp", so it can be a program name with args.
-set dummy arp; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_ARP+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_ARP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_ARP="$PROG_ARP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_ARP="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_ARP=$ac_cv_path_PROG_ARP
-if test -n "$PROG_ARP"; then
-  { echo "$as_me:$LINENO: result: $PROG_ARP" >&5
-echo "${ECHO_T}$PROG_ARP" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_ARP" ; then
-                PROG_ARP="undef"
-        fi
-        # Extract the first word of "ifconfig", so it can be a program name with args.
-set dummy ifconfig; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_IFCONFIG+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_IFCONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_IFCONFIG="$PROG_IFCONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_IFCONFIG="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_IFCONFIG=$ac_cv_path_PROG_IFCONFIG
-if test -n "$PROG_IFCONFIG"; then
-  { echo "$as_me:$LINENO: result: $PROG_IFCONFIG" >&5
-echo "${ECHO_T}$PROG_IFCONFIG" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_IFCONFIG" ; then
-                PROG_IFCONFIG="undef"
-        fi
-        # Extract the first word of "jstat", so it can be a program name with args.
-set dummy jstat; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_JSTAT+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_JSTAT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_JSTAT="$PROG_JSTAT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_JSTAT="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_JSTAT=$ac_cv_path_PROG_JSTAT
-if test -n "$PROG_JSTAT"; then
-  { echo "$as_me:$LINENO: result: $PROG_JSTAT" >&5
-echo "${ECHO_T}$PROG_JSTAT" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_JSTAT" ; then
-                PROG_JSTAT="undef"
-        fi
-        # Extract the first word of "ps", so it can be a program name with args.
-set dummy ps; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_PS+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_PS in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_PS="$PROG_PS" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_PS="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_PS=$ac_cv_path_PROG_PS
-if test -n "$PROG_PS"; then
-  { echo "$as_me:$LINENO: result: $PROG_PS" >&5
-echo "${ECHO_T}$PROG_PS" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_PS" ; then
-                PROG_PS="undef"
-        fi
-        # Extract the first word of "sar", so it can be a program name with args.
-set dummy sar; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_SAR+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_SAR in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_SAR="$PROG_SAR" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_SAR="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_SAR=$ac_cv_path_PROG_SAR
-if test -n "$PROG_SAR"; then
-  { echo "$as_me:$LINENO: result: $PROG_SAR" >&5
-echo "${ECHO_T}$PROG_SAR" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_SAR" ; then
-                PROG_SAR="undef"
-        fi
-        # Extract the first word of "w", so it can be a program name with args.
-set dummy w; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_W+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_W in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_W="$PROG_W" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_W="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_W=$ac_cv_path_PROG_W
-if test -n "$PROG_W"; then
-  { echo "$as_me:$LINENO: result: $PROG_W" >&5
-echo "${ECHO_T}$PROG_W" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_W" ; then
-                PROG_W="undef"
-        fi
-        # Extract the first word of "who", so it can be a program name with args.
-set dummy who; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_WHO+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_WHO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_WHO="$PROG_WHO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_WHO="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_WHO=$ac_cv_path_PROG_WHO
-if test -n "$PROG_WHO"; then
-  { echo "$as_me:$LINENO: result: $PROG_WHO" >&5
-echo "${ECHO_T}$PROG_WHO" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_WHO" ; then
-                PROG_WHO="undef"
-        fi
-        # Extract the first word of "last", so it can be a program name with args.
-set dummy last; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_LAST+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_LAST in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_LAST="$PROG_LAST" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_LAST="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_LAST=$ac_cv_path_PROG_LAST
-if test -n "$PROG_LAST"; then
-  { echo "$as_me:$LINENO: result: $PROG_LAST" >&5
-echo "${ECHO_T}$PROG_LAST" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_LAST" ; then
-                PROG_LAST="undef"
-        fi
-        # Extract the first word of "lastlog", so it can be a program name with args.
-set dummy lastlog; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_LASTLOG+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_LASTLOG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_LASTLOG="$PROG_LASTLOG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_LASTLOG="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_LASTLOG=$ac_cv_path_PROG_LASTLOG
-if test -n "$PROG_LASTLOG"; then
-  { echo "$as_me:$LINENO: result: $PROG_LASTLOG" >&5
-echo "${ECHO_T}$PROG_LASTLOG" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_LASTLOG" ; then
-                PROG_LASTLOG="undef"
-        fi
-        # Extract the first word of "df", so it can be a program name with args.
-set dummy df; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_DF+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_DF in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_DF="$PROG_DF" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_DF="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_DF=$ac_cv_path_PROG_DF
-if test -n "$PROG_DF"; then
-  { echo "$as_me:$LINENO: result: $PROG_DF" >&5
-echo "${ECHO_T}$PROG_DF" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_DF" ; then
-                PROG_DF="undef"
-        fi
-        # Extract the first word of "vmstat", so it can be a program name with args.
-set dummy vmstat; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_VMSTAT+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_VMSTAT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_VMSTAT="$PROG_VMSTAT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_VMSTAT="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_VMSTAT=$ac_cv_path_PROG_VMSTAT
-if test -n "$PROG_VMSTAT"; then
-  { echo "$as_me:$LINENO: result: $PROG_VMSTAT" >&5
-echo "${ECHO_T}$PROG_VMSTAT" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_VMSTAT" ; then
-                PROG_VMSTAT="undef"
-        fi
+# Check whether --with-sandbox was given.
+if test "${with_sandbox+set}" = set; then :
+  withval=$with_sandbox;
+                if test "x$withval" = "xyes" ; then
+                        sandbox_arg=""
+                else
+                        sandbox_arg="$withval"
+                fi
-        # Extract the first word of "uptime", so it can be a program name with args.
-set dummy uptime; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_UPTIME+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_UPTIME in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_UPTIME="$PROG_UPTIME" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_UPTIME="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_UPTIME=$ac_cv_path_PROG_UPTIME
-if test -n "$PROG_UPTIME"; then
-  { echo "$as_me:$LINENO: result: $PROG_UPTIME" >&5
-echo "${ECHO_T}$PROG_UPTIME" >&6; }
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
+if test "x$sandbox_arg" = "xsystrace" || \
+   ( test -z "$sandbox_arg" && test "x$have_systr_policy_kill" = "x1" ) ; then
+        test "x$have_systr_policy_kill" != "x1" && \
+                as_fn_error $? "systrace sandbox requires systrace headers and SYSTR_POLICY_KILL support" "$LINENO" 5
+        SANDBOX_STYLE="systrace"
-        if test -z "$PROG_UPTIME" ; then
+$as_echo "#define SANDBOX_SYSTRACE 1" >>confdefs.h
-                PROG_UPTIME="undef"
-        fi
-        # Extract the first word of "ipcs", so it can be a program name with args.
-set dummy ipcs; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_IPCS+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_IPCS in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_IPCS="$PROG_IPCS" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_IPCS="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
+elif test "x$sandbox_arg" = "xdarwin" || \
-esac
+     ( test -z "$sandbox_arg" && test "x$ac_cv_func_sandbox_init" = "xyes" && \
-fi
+       test "x$ac_cv_header_sandbox_h" = "xyes") ; then
-PROG_IPCS=$ac_cv_path_PROG_IPCS
+        test "x$ac_cv_func_sandbox_init" != "xyes" -o \
-if test -n "$PROG_IPCS"; then
+             "x$ac_cv_header_sandbox_h" != "xyes" && \
-  { echo "$as_me:$LINENO: result: $PROG_IPCS" >&5
+                as_fn_error $? "Darwin seatbelt sandbox requires sandbox.h and sandbox_init function" "$LINENO" 5
-echo "${ECHO_T}$PROG_IPCS" >&6; }
+        SANDBOX_STYLE="darwin"
-else
-  { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
+$as_echo "#define SANDBOX_DARWIN 1" >>confdefs.h
-        if test -z "$PROG_IPCS" ; then
+elif test "x$sandbox_arg" = "xrlimit" || \
-                PROG_IPCS="undef"
+     ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" ) ; then
-        fi
+        test "x$ac_cv_func_setrlimit" != "xyes" && \
+                as_fn_error $? "rlimit sandbox requires setrlimit function" "$LINENO" 5
+        SANDBOX_STYLE="rlimit"
+$as_echo "#define SANDBOX_RLIMIT 1" >>confdefs.h
+elif test -z "$sandbox_arg" || test "x$sandbox_arg" = "xno" || \
+     test "x$sandbox_arg" = "xnone" || test "x$sandbox_arg" = "xnull" ; then
+        SANDBOX_STYLE="none"
-        # Extract the first word of "tail", so it can be a program name with args.
+$as_echo "#define SANDBOX_NULL 1" >>confdefs.h
-set dummy tail; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
-if test "${ac_cv_path_PROG_TAIL+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  case $PROG_TAIL in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PROG_TAIL="$PROG_TAIL" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
-  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
-    ac_cv_path_PROG_TAIL="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-done
-IFS=$as_save_IFS
-  ;;
-esac
-fi
-PROG_TAIL=$ac_cv_path_PROG_TAIL
-if test -n "$PROG_TAIL"; then
-  { echo "$as_me:$LINENO: result: $PROG_TAIL" >&5
-echo "${ECHO_T}$PROG_TAIL" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+        as_fn_error $? "unsupported --with-sandbox" "$LINENO" 5
-echo "${ECHO_T}no" >&6; }
-fi
-        if test -z "$PROG_TAIL" ; then
-                PROG_TAIL="undef"
-        fi
-# restore PATH
-PATH=$OPATH
-# Where does ssh-rand-helper get its randomness from?
-INSTALL_SSH_PRNG_CMDS=""
-if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
-        if test ! -z "$PRNGD_PORT" ; then
-                RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
-        elif test ! -z "$PRNGD_SOCKET" ; then
-                RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
-        else
-                RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
-                RAND_HELPER_CMDHASH=yes
-                INSTALL_SSH_PRNG_CMDS="yes"
-        fi
 fi
 # Cheap hack to ensure NEWS-OS libraries are arranged right.
 if test ! -z "$SONY" ; then
  LIBS="$LIBS -liberty";
 fi
 # Check for  long long datatypes
-{ echo "$as_me:$LINENO: checking for long long" >&5
+ac_fn_c_check_type "$LINENO" "long long" "ac_cv_type_long_long" "$ac_includes_default"
-echo $ECHO_N "checking for long long... $ECHO_C" >&6; }
+if test "x$ac_cv_type_long_long" = xyes; then :
-if test "${ac_cv_type_long_long+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef long long ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_long_long=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_long_long=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_long_long" >&5
-echo "${ECHO_T}$ac_cv_type_long_long" >&6; }
-if test $ac_cv_type_long_long = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_LONG_LONG 1
@@ -20228,60 +11431,8 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for unsigned long long" >&5
+ac_fn_c_check_type "$LINENO" "unsigned long long" "ac_cv_type_unsigned_long_long" "$ac_includes_default"
-echo $ECHO_N "checking for unsigned long long... $ECHO_C" >&6; }
+if test "x$ac_cv_type_unsigned_long_long" = xyes; then :
-if test "${ac_cv_type_unsigned_long_long+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef unsigned long long ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_unsigned_long_long=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_unsigned_long_long=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_unsigned_long_long" >&5
-echo "${ECHO_T}$ac_cv_type_unsigned_long_long" >&6; }
-if test $ac_cv_type_unsigned_long_long = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_UNSIGNED_LONG_LONG 1
@@ -20289,60 +11440,8 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for long double" >&5
+ac_fn_c_check_type "$LINENO" "long double" "ac_cv_type_long_double" "$ac_includes_default"
-echo $ECHO_N "checking for long double... $ECHO_C" >&6; }
+if test "x$ac_cv_type_long_double" = xyes; then :
-if test "${ac_cv_type_long_double+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef long double ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_long_double=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_long_double=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_long_double" >&5
-echo "${ECHO_T}$ac_cv_type_long_double" >&6; }
-if test $ac_cv_type_long_double = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_LONG_DOUBLE 1
@@ -20353,403 +11452,31 @@ fi
 # Check datatype sizes
-{ echo "$as_me:$LINENO: checking for char" >&5
-echo $ECHO_N "checking for char... $ECHO_C" >&6; }
-if test "${ac_cv_type_char+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef char ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_char=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_char=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_char" >&5
-echo "${ECHO_T}$ac_cv_type_char" >&6; }
 # The cast to long int works around a bug in the HP C Compiler
 # version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
 # declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
 # This bug is HP SR number 8606223364.
-{ echo "$as_me:$LINENO: checking size of char" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of char" >&5
-echo $ECHO_N "checking size of char... $ECHO_C" >&6; }
+$as_echo_n "checking size of char... " >&6; }
-if test "${ac_cv_sizeof_char+set}" = set; then
+if ${ac_cv_sizeof_char+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then
-  # Depending upon the size, compute the lo and hi bounds.
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef char ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=0 ac_mid=0
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef char ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr $ac_mid + 1`
-                        if test $ac_lo -le $ac_mid; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef char ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) < 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=-1 ac_mid=-1
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef char ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_hi=`expr '(' $ac_mid ')' - 1`
-                        if test $ac_mid -le $ac_hi; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo= ac_hi=
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-# Binary search between lo and hi bounds.
-while test "x$ac_lo" != "x$ac_hi"; do
-  ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo`
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef char ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid
 else
-  echo "$as_me: failed program was:" >&5
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (char))" "ac_cv_sizeof_char"        "$ac_includes_default"; then :
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr '(' $ac_mid ')' + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-case $ac_lo in
-?*) ac_cv_sizeof_char=$ac_lo;;
-'') if test "$ac_cv_type_char" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (char)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (char)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
-   else
-     ac_cv_sizeof_char=0
-   fi ;;
-esac
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef char ac__type_sizeof_;
-static long int longval () { return (long int) (sizeof (ac__type_sizeof_)); }
-static unsigned long int ulongval () { return (long int) (sizeof (ac__type_sizeof_)); }
-#include <stdio.h>
-#include <stdlib.h>
-int
-main ()
-{
-  FILE *f = fopen ("conftest.val", "w");
-  if (! f)
-    return 1;
-  if (((long int) (sizeof (ac__type_sizeof_))) < 0)
-    {
-      long int i = longval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%ld\n", i);
-    }
-  else
-    {
-      unsigned long int i = ulongval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%lu\n", i);
-    }
-  return ferror (f) || fclose (f) != 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  ac_cv_sizeof_char=`cat conftest.val`
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+  if test "$ac_cv_type_char" = yes; then
-echo "$as_me: failed program was:" >&5
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "cannot compute sizeof (char)
-( exit $ac_status )
+See \`config.log' for more details" "$LINENO" 5; }
-if test "$ac_cv_type_char" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (char)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (char)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
   else
     ac_cv_sizeof_char=0
   fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f conftest.val
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sizeof_char" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_char" >&5
-echo "${ECHO_T}$ac_cv_sizeof_char" >&6; }
+$as_echo "$ac_cv_sizeof_char" >&6; }
@@ -20758,403 +11485,31 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
-{ echo "$as_me:$LINENO: checking for short int" >&5
-echo $ECHO_N "checking for short int... $ECHO_C" >&6; }
-if test "${ac_cv_type_short_int+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef short int ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_short_int=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_short_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_short_int" >&5
-echo "${ECHO_T}$ac_cv_type_short_int" >&6; }
 # The cast to long int works around a bug in the HP C Compiler
 # version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
 # declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
 # This bug is HP SR number 8606223364.
-{ echo "$as_me:$LINENO: checking size of short int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of short int" >&5
-echo $ECHO_N "checking size of short int... $ECHO_C" >&6; }
+$as_echo_n "checking size of short int... " >&6; }
-if test "${ac_cv_sizeof_short_int+set}" = set; then
+if ${ac_cv_sizeof_short_int+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then
-  # Depending upon the size, compute the lo and hi bounds.
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef short int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=0 ac_mid=0
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef short int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid; break
 else
-  echo "$as_me: failed program was:" >&5
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (short int))" "ac_cv_sizeof_short_int"        "$ac_includes_default"; then :
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr $ac_mid + 1`
-                        if test $ac_lo -le $ac_mid; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
 else
-  echo "$as_me: failed program was:" >&5
+  if test "$ac_cv_type_short_int" = yes; then
-sed 's/^/| /' conftest.$ac_ext >&5
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-        cat >conftest.$ac_ext <<_ACEOF
+as_fn_error 77 "cannot compute sizeof (short int)
-/* confdefs.h.  */
+See \`config.log' for more details" "$LINENO" 5; }
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef short int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) < 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=-1 ac_mid=-1
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef short int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_hi=`expr '(' $ac_mid ')' - 1`
-                        if test $ac_mid -le $ac_hi; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo= ac_hi=
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-# Binary search between lo and hi bounds.
-while test "x$ac_lo" != "x$ac_hi"; do
-  ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo`
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef short int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr '(' $ac_mid ')' + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-case $ac_lo in
-?*) ac_cv_sizeof_short_int=$ac_lo;;
-'') if test "$ac_cv_type_short_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (short int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (short int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
-   else
-     ac_cv_sizeof_short_int=0
-   fi ;;
-esac
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef short int ac__type_sizeof_;
-static long int longval () { return (long int) (sizeof (ac__type_sizeof_)); }
-static unsigned long int ulongval () { return (long int) (sizeof (ac__type_sizeof_)); }
-#include <stdio.h>
-#include <stdlib.h>
-int
-main ()
-{
-  FILE *f = fopen ("conftest.val", "w");
-  if (! f)
-    return 1;
-  if (((long int) (sizeof (ac__type_sizeof_))) < 0)
-    {
-      long int i = longval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%ld\n", i);
-    }
-  else
-    {
-      unsigned long int i = ulongval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%lu\n", i);
-    }
-  return ferror (f) || fclose (f) != 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  ac_cv_sizeof_short_int=`cat conftest.val`
-else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-if test "$ac_cv_type_short_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (short int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (short int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
   else
     ac_cv_sizeof_short_int=0
   fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f conftest.val
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sizeof_short_int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_short_int" >&5
-echo "${ECHO_T}$ac_cv_sizeof_short_int" >&6; }
+$as_echo "$ac_cv_sizeof_short_int" >&6; }
@@ -21163,403 +11518,31 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
-{ echo "$as_me:$LINENO: checking for int" >&5
-echo $ECHO_N "checking for int... $ECHO_C" >&6; }
-if test "${ac_cv_type_int+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef int ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_int=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_int" >&5
-echo "${ECHO_T}$ac_cv_type_int" >&6; }
 # The cast to long int works around a bug in the HP C Compiler
 # version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
 # declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
 # This bug is HP SR number 8606223364.
-{ echo "$as_me:$LINENO: checking size of int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of int" >&5
-echo $ECHO_N "checking size of int... $ECHO_C" >&6; }
+$as_echo_n "checking size of int... " >&6; }
-if test "${ac_cv_sizeof_int+set}" = set; then
+if ${ac_cv_sizeof_int+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then
-  # Depending upon the size, compute the lo and hi bounds.
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=0 ac_mid=0
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr $ac_mid + 1`
-                        if test $ac_lo -le $ac_mid; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) < 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=-1 ac_mid=-1
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=$ac_mid; break
 else
-  echo "$as_me: failed program was:" >&5
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (int))" "ac_cv_sizeof_int"        "$ac_includes_default"; then :
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_hi=`expr '(' $ac_mid ')' - 1`
-                        if test $ac_mid -le $ac_hi; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo= ac_hi=
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-# Binary search between lo and hi bounds.
-while test "x$ac_lo" != "x$ac_hi"; do
-  ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo`
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid
 else
-  echo "$as_me: failed program was:" >&5
+  if test "$ac_cv_type_int" = yes; then
-sed 's/^/| /' conftest.$ac_ext >&5
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-        ac_lo=`expr '(' $ac_mid ')' + 1`
+as_fn_error 77 "cannot compute sizeof (int)
-fi
+See \`config.log' for more details" "$LINENO" 5; }
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-case $ac_lo in
-?*) ac_cv_sizeof_int=$ac_lo;;
-'') if test "$ac_cv_type_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
-   else
-     ac_cv_sizeof_int=0
-   fi ;;
-esac
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef int ac__type_sizeof_;
-static long int longval () { return (long int) (sizeof (ac__type_sizeof_)); }
-static unsigned long int ulongval () { return (long int) (sizeof (ac__type_sizeof_)); }
-#include <stdio.h>
-#include <stdlib.h>
-int
-main ()
-{
-  FILE *f = fopen ("conftest.val", "w");
-  if (! f)
-    return 1;
-  if (((long int) (sizeof (ac__type_sizeof_))) < 0)
-    {
-      long int i = longval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%ld\n", i);
-    }
-  else
-    {
-      unsigned long int i = ulongval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%lu\n", i);
-    }
-  return ferror (f) || fclose (f) != 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  ac_cv_sizeof_int=`cat conftest.val`
-else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-if test "$ac_cv_type_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
   else
     ac_cv_sizeof_int=0
   fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f conftest.val
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sizeof_int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_int" >&5
-echo "${ECHO_T}$ac_cv_sizeof_int" >&6; }
+$as_echo "$ac_cv_sizeof_int" >&6; }
@@ -21568,403 +11551,31 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
-{ echo "$as_me:$LINENO: checking for long int" >&5
-echo $ECHO_N "checking for long int... $ECHO_C" >&6; }
-if test "${ac_cv_type_long_int+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef long int ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_long_int=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_long_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_long_int" >&5
-echo "${ECHO_T}$ac_cv_type_long_int" >&6; }
 # The cast to long int works around a bug in the HP C Compiler
 # version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
 # declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
 # This bug is HP SR number 8606223364.
-{ echo "$as_me:$LINENO: checking size of long int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of long int" >&5
-echo $ECHO_N "checking size of long int... $ECHO_C" >&6; }
+$as_echo_n "checking size of long int... " >&6; }
-if test "${ac_cv_sizeof_long_int+set}" = set; then
+if ${ac_cv_sizeof_long_int+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then
-  # Depending upon the size, compute the lo and hi bounds.
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=0 ac_mid=0
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr $ac_mid + 1`
-                        if test $ac_lo -le $ac_mid; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) < 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=-1 ac_mid=-1
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_hi=`expr '(' $ac_mid ')' - 1`
-                        if test $ac_mid -le $ac_hi; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo= ac_hi=
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-# Binary search between lo and hi bounds.
-while test "x$ac_lo" != "x$ac_hi"; do
-  ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo`
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid
 else
-  echo "$as_me: failed program was:" >&5
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (long int))" "ac_cv_sizeof_long_int"        "$ac_includes_default"; then :
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr '(' $ac_mid ')' + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-case $ac_lo in
-?*) ac_cv_sizeof_long_int=$ac_lo;;
-'') if test "$ac_cv_type_long_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (long int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (long int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
-   else
-     ac_cv_sizeof_long_int=0
-   fi ;;
-esac
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long int ac__type_sizeof_;
-static long int longval () { return (long int) (sizeof (ac__type_sizeof_)); }
-static unsigned long int ulongval () { return (long int) (sizeof (ac__type_sizeof_)); }
-#include <stdio.h>
-#include <stdlib.h>
-int
-main ()
-{
-  FILE *f = fopen ("conftest.val", "w");
-  if (! f)
-    return 1;
-  if (((long int) (sizeof (ac__type_sizeof_))) < 0)
-    {
-      long int i = longval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%ld\n", i);
-    }
-  else
-    {
-      unsigned long int i = ulongval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%lu\n", i);
-    }
-  return ferror (f) || fclose (f) != 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  ac_cv_sizeof_long_int=`cat conftest.val`
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+  if test "$ac_cv_type_long_int" = yes; then
-echo "$as_me: failed program was:" >&5
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "cannot compute sizeof (long int)
-( exit $ac_status )
+See \`config.log' for more details" "$LINENO" 5; }
-if test "$ac_cv_type_long_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (long int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (long int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
   else
     ac_cv_sizeof_long_int=0
   fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f conftest.val
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sizeof_long_int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_long_int" >&5
-echo "${ECHO_T}$ac_cv_sizeof_long_int" >&6; }
+$as_echo "$ac_cv_sizeof_long_int" >&6; }
@@ -21973,403 +11584,31 @@ cat >>confdefs.h <<_ACEOF
 _ACEOF
-{ echo "$as_me:$LINENO: checking for long long int" >&5
-echo $ECHO_N "checking for long long int... $ECHO_C" >&6; }
-if test "${ac_cv_type_long_long_int+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef long long int ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_long_long_int=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_long_long_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_long_long_int" >&5
-echo "${ECHO_T}$ac_cv_type_long_long_int" >&6; }
 # The cast to long int works around a bug in the HP C Compiler
 # version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
 # declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
 # This bug is HP SR number 8606223364.
-{ echo "$as_me:$LINENO: checking size of long long int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of long long int" >&5
-echo $ECHO_N "checking size of long long int... $ECHO_C" >&6; }
+$as_echo_n "checking size of long long int... " >&6; }
-if test "${ac_cv_sizeof_long_long_int+set}" = set; then
+if ${ac_cv_sizeof_long_long_int+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then
-  # Depending upon the size, compute the lo and hi bounds.
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=0 ac_mid=0
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr $ac_mid + 1`
-                        if test $ac_lo -le $ac_mid; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) < 0)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=-1 ac_mid=-1
-  while :; do
-    cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) >= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_lo=$ac_mid; break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_hi=`expr '(' $ac_mid ')' - 1`
-                        if test $ac_mid -le $ac_hi; then
-                          ac_lo= ac_hi=
-                          break
-                        fi
-                        ac_mid=`expr 2 '*' $ac_mid`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  done
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo= ac_hi=
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-# Binary search between lo and hi bounds.
-while test "x$ac_lo" != "x$ac_hi"; do
-  ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo`
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long long int ac__type_sizeof_;
-int
-main ()
-{
-static int test_array [1 - 2 * !(((long int) (sizeof (ac__type_sizeof_))) <= $ac_mid)];
-test_array [0] = 0
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_hi=$ac_mid
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_lo=`expr '(' $ac_mid ')' + 1`
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-case $ac_lo in
-?*) ac_cv_sizeof_long_long_int=$ac_lo;;
-'') if test "$ac_cv_type_long_long_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (long long int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (long long int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
-   else
-     ac_cv_sizeof_long_long_int=0
-   fi ;;
-esac
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (long long int))" "ac_cv_sizeof_long_long_int"        "$ac_includes_default"; then :
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-   typedef long long int ac__type_sizeof_;
-static long int longval () { return (long int) (sizeof (ac__type_sizeof_)); }
-static unsigned long int ulongval () { return (long int) (sizeof (ac__type_sizeof_)); }
-#include <stdio.h>
-#include <stdlib.h>
-int
-main ()
-{
-  FILE *f = fopen ("conftest.val", "w");
-  if (! f)
-    return 1;
-  if (((long int) (sizeof (ac__type_sizeof_))) < 0)
-    {
-      long int i = longval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%ld\n", i);
-    }
-  else
-    {
-      unsigned long int i = ulongval ();
-      if (i != ((long int) (sizeof (ac__type_sizeof_))))
-        return 1;
-      fprintf (f, "%lu\n", i);
-    }
-  return ferror (f) || fclose (f) != 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
-  ac_cv_sizeof_long_long_int=`cat conftest.val`
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+  if test "$ac_cv_type_long_long_int" = yes; then
-echo "$as_me: failed program was:" >&5
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "cannot compute sizeof (long long int)
-( exit $ac_status )
+See \`config.log' for more details" "$LINENO" 5; }
-if test "$ac_cv_type_long_long_int" = yes; then
-     { { echo "$as_me:$LINENO: error: cannot compute sizeof (long long int)
-See \`config.log' for more details." >&5
-echo "$as_me: error: cannot compute sizeof (long long int)
-See \`config.log' for more details." >&2;}
-   { (exit 77); exit 77; }; }
   else
     ac_cv_sizeof_long_long_int=0
   fi
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f conftest.val
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_sizeof_long_long_int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_long_long_int" >&5
-echo "${ECHO_T}$ac_cv_sizeof_long_long_int" >&6; }
+$as_echo "$ac_cv_sizeof_long_long_int" >&6; }
@@ -22386,20 +11625,16 @@ fi
 # compute LLONG_MIN and LLONG_MAX if we don't know them.
 if test -z "$have_llong_max"; then
-        { echo "$as_me:$LINENO: checking for max value of long long" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for max value of long long" >&5
-echo $ECHO_N "checking for max value of long long... $ECHO_C" >&6; }
+$as_echo_n "checking for max value of long long... " >&6; }
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-                        { echo "$as_me:$LINENO: WARNING: cross compiling: not checking" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking" >&5
-echo "$as_me: WARNING: cross compiling: not checking" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
@@ -22438,7 +11673,10 @@ fprint_ll(FILE *f, long long n)
        return 0;
 }
-int main(void) {
+int
+main ()
+{
        FILE *f;
        long long i, llmin, llmax = 0;
@@ -22472,44 +11710,27 @@ int main(void) {
        if (fclose(f) < 0)
                exit(5);
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
                        llong_min=`$AWK '{print $1}' conftest.llminmax`
                        llong_max=`$AWK '{print $2}' conftest.llminmax`
-                        { echo "$as_me:$LINENO: result: $llong_max" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: $llong_max" >&5
-echo "${ECHO_T}$llong_max" >&6; }
+$as_echo "$llong_max" >&6; }
 cat >>confdefs.h <<_ACEOF
 #define LLONG_MAX ${llong_max}LL
 _ACEOF
-                        { echo "$as_me:$LINENO: checking for min value of long long" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for min value of long long" >&5
-echo $ECHO_N "checking for min value of long long... $ECHO_C" >&6; }
+$as_echo_n "checking for min value of long long... " >&6; }
-                        { echo "$as_me:$LINENO: result: $llong_min" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: $llong_min" >&5
-echo "${ECHO_T}$llong_min" >&6; }
+$as_echo "$llong_min" >&6; }
 cat >>confdefs.h <<_ACEOF
 #define LLONG_MIN ${llong_min}LL
@@ -22517,35 +11738,26 @@ _ACEOF
 else
-  echo "$as_me: program exited with status $ac_status" >&5
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
-                        { echo "$as_me:$LINENO: result: not found" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: not found" >&5
-echo "${ECHO_T}not found" >&6; }
+$as_echo "not found" >&6; }
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 # More checks for data types
-{ echo "$as_me:$LINENO: checking for u_int type" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_int type" >&5
-echo $ECHO_N "checking for u_int type... $ECHO_C" >&6; }
+$as_echo_n "checking for u_int type... " >&6; }
-if test "${ac_cv_have_u_int+set}" = set; then
+if ${ac_cv_have_u_int+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 int
@@ -22556,57 +11768,31 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_u_int="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_u_int="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_u_int="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_u_int" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_int" >&5
-echo "${ECHO_T}$ac_cv_have_u_int" >&6; }
+$as_echo "$ac_cv_have_u_int" >&6; }
 if test "x$ac_cv_have_u_int" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_U_INT 1" >>confdefs.h
-#define HAVE_U_INT 1
-_ACEOF
        have_u_int=1
 fi
-{ echo "$as_me:$LINENO: checking for intXX_t types" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for intXX_t types" >&5
-echo $ECHO_N "checking for intXX_t types... $ECHO_C" >&6; }
+$as_echo_n "checking for intXX_t types... " >&6; }
-if test "${ac_cv_have_intxx_t+set}" = set; then
+if ${ac_cv_have_intxx_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 int
@@ -22617,42 +11803,20 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_intxx_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_intxx_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_intxx_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_intxx_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_intxx_t" >&5
-echo "${ECHO_T}$ac_cv_have_intxx_t" >&6; }
+$as_echo "$ac_cv_have_intxx_t" >&6; }
 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_INTXX_T 1" >>confdefs.h
-#define HAVE_INTXX_T 1
-_ACEOF
        have_intxx_t=1
 fi
@@ -22660,13 +11824,9 @@ fi
 if (test -z "$have_intxx_t" && \
           test "x$ac_cv_header_stdint_h" = "xyes")
 then
-    { echo "$as_me:$LINENO: checking for intXX_t types in stdint.h" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for intXX_t types in stdint.h" >&5
-echo $ECHO_N "checking for intXX_t types in stdint.h... $ECHO_C" >&6; }
+$as_echo_n "checking for intXX_t types in stdint.h... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdint.h>
 int
@@ -22677,54 +11837,28 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_INTXX_T 1" >>confdefs.h
-#define HAVE_INTXX_T 1
-_ACEOF
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: checking for int64_t type" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for int64_t type" >&5
-echo $ECHO_N "checking for int64_t type... $ECHO_C" >&6; }
+$as_echo_n "checking for int64_t type... " >&6; }
-if test "${ac_cv_have_int64_t+set}" = set; then
+if ${ac_cv_have_int64_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -22739,61 +11873,37 @@ cat >>conftest.$ac_ext <<_ACEOF
 int
 main ()
 {
- int64_t a; a = 1;
+int64_t a; a = 1;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_int64_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_int64_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_int64_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_int64_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_int64_t" >&5
-echo "${ECHO_T}$ac_cv_have_int64_t" >&6; }
+$as_echo "$ac_cv_have_int64_t" >&6; }
 if test "x$ac_cv_have_int64_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_INT64_T 1" >>confdefs.h
-#define HAVE_INT64_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for u_intXX_t types" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_intXX_t types" >&5
-echo $ECHO_N "checking for u_intXX_t types... $ECHO_C" >&6; }
+$as_echo_n "checking for u_intXX_t types... " >&6; }
-if test "${ac_cv_have_u_intxx_t+set}" = set; then
+if ${ac_cv_have_u_intxx_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 int
@@ -22804,54 +11914,28 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_u_intxx_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_u_intxx_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_u_intxx_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_u_intxx_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_intxx_t" >&5
-echo "${ECHO_T}$ac_cv_have_u_intxx_t" >&6; }
+$as_echo "$ac_cv_have_u_intxx_t" >&6; }
 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_U_INTXX_T 1" >>confdefs.h
-#define HAVE_U_INTXX_T 1
-_ACEOF
        have_u_intxx_t=1
 fi
 if test -z "$have_u_intxx_t" ; then
-    { echo "$as_me:$LINENO: checking for u_intXX_t types in sys/socket.h" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_intXX_t types in sys/socket.h" >&5
-echo $ECHO_N "checking for u_intXX_t types in sys/socket.h... $ECHO_C" >&6; }
+$as_echo_n "checking for u_intXX_t types in sys/socket.h... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/socket.h>
 int
@@ -22862,54 +11946,28 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_U_INTXX_T 1" >>confdefs.h
-#define HAVE_U_INTXX_T 1
-_ACEOF
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: checking for u_int64_t types" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_int64_t types" >&5
-echo $ECHO_N "checking for u_int64_t types... $ECHO_C" >&6; }
+$as_echo_n "checking for u_int64_t types... " >&6; }
-if test "${ac_cv_have_u_int64_t+set}" = set; then
+if ${ac_cv_have_u_int64_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 int
@@ -22920,54 +11978,28 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_u_int64_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_u_int64_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_u_int64_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_u_int64_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_int64_t" >&5
-echo "${ECHO_T}$ac_cv_have_u_int64_t" >&6; }
+$as_echo "$ac_cv_have_u_int64_t" >&6; }
 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_U_INT64_T 1" >>confdefs.h
-#define HAVE_U_INT64_T 1
-_ACEOF
        have_u_int64_t=1
 fi
 if test -z "$have_u_int64_t" ; then
-    { echo "$as_me:$LINENO: checking for u_int64_t type in sys/bitypes.h" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_int64_t type in sys/bitypes.h" >&5
-echo $ECHO_N "checking for u_int64_t type in sys/bitypes.h... $ECHO_C" >&6; }
+$as_echo_n "checking for u_int64_t type in sys/bitypes.h... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/bitypes.h>
 int
@@ -22978,55 +12010,29 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_U_INT64_T 1" >>confdefs.h
-#define HAVE_U_INT64_T 1
-_ACEOF
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 if test -z "$have_u_intxx_t" ; then
-        { echo "$as_me:$LINENO: checking for uintXX_t types" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for uintXX_t types" >&5
-echo $ECHO_N "checking for uintXX_t types... $ECHO_C" >&6; }
+$as_echo_n "checking for uintXX_t types... " >&6; }
-if test "${ac_cv_have_uintxx_t+set}" = set; then
+if ${ac_cv_have_uintxx_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -23034,59 +12040,38 @@ cat >>conftest.$ac_ext <<_ACEOF
 int
 main ()
 {
- uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;
+        uint8_t a;
+        uint16_t b;
+        uint32_t c;
+        a = b = c = 1;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_uintxx_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_uintxx_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_uintxx_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_uintxx_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_uintxx_t" >&5
-echo "${ECHO_T}$ac_cv_have_uintxx_t" >&6; }
+$as_echo "$ac_cv_have_uintxx_t" >&6; }
        if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_UINTXX_T 1" >>confdefs.h
-#define HAVE_UINTXX_T 1
-_ACEOF
        fi
 fi
 if test -z "$have_uintxx_t" ; then
-    { echo "$as_me:$LINENO: checking for uintXX_t types in stdint.h" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for uintXX_t types in stdint.h" >&5
-echo $ECHO_N "checking for uintXX_t types in stdint.h... $ECHO_C" >&6; }
+$as_echo_n "checking for uintXX_t types in stdint.h... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdint.h>
 int
@@ -23097,53 +12082,27 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_UINTXX_T 1" >>confdefs.h
-#define HAVE_UINTXX_T 1
-_ACEOF
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
           test "x$ac_cv_header_sys_bitypes_h" = "xyes")
 then
-        { echo "$as_me:$LINENO: checking for intXX_t and u_intXX_t types in sys/bitypes.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for intXX_t and u_intXX_t types in sys/bitypes.h" >&5
-echo $ECHO_N "checking for intXX_t and u_intXX_t types in sys/bitypes.h... $ECHO_C" >&6; }
+$as_echo_n "checking for intXX_t and u_intXX_t types in sys/bitypes.h... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/bitypes.h>
@@ -23160,63 +12119,33 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_U_INTXX_T 1" >>confdefs.h
-#define HAVE_U_INTXX_T 1
-_ACEOF
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define HAVE_INTXX_T 1" >>confdefs.h
-#define HAVE_INTXX_T 1
-_ACEOF
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-        { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: checking for u_char" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for u_char" >&5
-echo $ECHO_N "checking for u_char... $ECHO_C" >&6; }
+$as_echo_n "checking for u_char... " >&6; }
-if test "${ac_cv_have_u_char+set}" = set; then
+if ${ac_cv_have_u_char+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <sys/types.h>
-#include <sys/types.h>
 int
 main ()
 {
@@ -23225,109 +12154,35 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_u_char="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_u_char="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_u_char="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_u_char" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_u_char" >&5
-echo "${ECHO_T}$ac_cv_have_u_char" >&6; }
+$as_echo "$ac_cv_have_u_char" >&6; }
 if test "x$ac_cv_have_u_char" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_U_CHAR 1" >>confdefs.h
-#define HAVE_U_CHAR 1
-_ACEOF
 fi
-   { echo "$as_me:$LINENO: checking for socklen_t" >&5
+   ac_fn_c_check_type "$LINENO" "socklen_t" "ac_cv_type_socklen_t" "#include <sys/types.h>
-echo $ECHO_N "checking for socklen_t... $ECHO_C" >&6; }
-if test "${ac_cv_type_socklen_t+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <sys/types.h>
 #include <sys/socket.h>
+"
+if test "x$ac_cv_type_socklen_t" = xyes; then :
-typedef socklen_t ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_socklen_t=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_socklen_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_socklen_t" >&5
-echo "${ECHO_T}$ac_cv_type_socklen_t" >&6; }
-if test $ac_cv_type_socklen_t = yes; then
-  :
 else
-      { echo "$as_me:$LINENO: checking for socklen_t equivalent" >&5
+      { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socklen_t equivalent" >&5
-echo $ECHO_N "checking for socklen_t equivalent... $ECHO_C" >&6; }
+$as_echo_n "checking for socklen_t equivalent... " >&6; }
-      if test "${curl_cv_socklen_t_equiv+set}" = set; then
+      if ${curl_cv_socklen_t_equiv+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
         # Systems have either "struct sockaddr *" or
@@ -23335,11 +12190,7 @@ else
         curl_cv_socklen_t_equiv=
         for arg2 in "struct sockaddr" void; do
            for t in int size_t unsigned long "unsigned long"; do
-               cat >conftest.$ac_ext <<_ACEOF
+               cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
                  #include <sys/types.h>
@@ -23358,48 +12209,24 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
                  curl_cv_socklen_t_equiv="$t"
                  break
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
            done
         done
         if test "x$curl_cv_socklen_t_equiv" = x; then
-            { { echo "$as_me:$LINENO: error: Cannot find a type to use in place of socklen_t" >&5
+            as_fn_error $? "Cannot find a type to use in place of socklen_t" "$LINENO" 5
-echo "$as_me: error: Cannot find a type to use in place of socklen_t" >&2;}
-   { (exit 1); exit 1; }; }
         fi
 fi
-      { echo "$as_me:$LINENO: result: $curl_cv_socklen_t_equiv" >&5
+      { $as_echo "$as_me:${as_lineno-$LINENO}: result: $curl_cv_socklen_t_equiv" >&5
-echo "${ECHO_T}$curl_cv_socklen_t_equiv" >&6; }
+$as_echo "$curl_cv_socklen_t_equiv" >&6; }
 cat >>confdefs.h <<_ACEOF
 #define socklen_t $curl_cv_socklen_t_equiv
@@ -23409,61 +12236,9 @@ fi
-{ echo "$as_me:$LINENO: checking for sig_atomic_t" >&5
+ac_fn_c_check_type "$LINENO" "sig_atomic_t" "ac_cv_type_sig_atomic_t" "#include <signal.h>
-echo $ECHO_N "checking for sig_atomic_t... $ECHO_C" >&6; }
+"
-if test "${ac_cv_type_sig_atomic_t+set}" = set; then
+if test "x$ac_cv_type_sig_atomic_t" = xyes; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <signal.h>
-typedef sig_atomic_t ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_sig_atomic_t=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_sig_atomic_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_sig_atomic_t" >&5
-echo "${ECHO_T}$ac_cv_type_sig_atomic_t" >&6; }
-if test $ac_cv_type_sig_atomic_t = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_SIG_ATOMIC_T 1
@@ -23472,18 +12247,7 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for fsblkcnt_t" >&5
+ac_fn_c_check_type "$LINENO" "fsblkcnt_t" "ac_cv_type_fsblkcnt_t" "
-echo $ECHO_N "checking for fsblkcnt_t... $ECHO_C" >&6; }
-if test "${ac_cv_type_fsblkcnt_t+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/types.h>
 #ifdef HAVE_SYS_BITYPES_H
 #include <sys/bitypes.h>
@@ -23495,49 +12259,8 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <sys/statvfs.h>
 #endif
+"
-typedef fsblkcnt_t ac__type_new_;
+if test "x$ac_cv_type_fsblkcnt_t" = xyes; then :
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_fsblkcnt_t=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_fsblkcnt_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_fsblkcnt_t" >&5
-echo "${ECHO_T}$ac_cv_type_fsblkcnt_t" >&6; }
-if test $ac_cv_type_fsblkcnt_t = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_FSBLKCNT_T 1
@@ -23545,18 +12268,7 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for fsfilcnt_t" >&5
+ac_fn_c_check_type "$LINENO" "fsfilcnt_t" "ac_cv_type_fsfilcnt_t" "
-echo $ECHO_N "checking for fsfilcnt_t... $ECHO_C" >&6; }
-if test "${ac_cv_type_fsfilcnt_t+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <sys/types.h>
 #ifdef HAVE_SYS_BITYPES_H
 #include <sys/bitypes.h>
@@ -23568,49 +12280,8 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <sys/statvfs.h>
 #endif
+"
-typedef fsfilcnt_t ac__type_new_;
+if test "x$ac_cv_type_fsfilcnt_t" = xyes; then :
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_fsfilcnt_t=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_fsfilcnt_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_fsfilcnt_t" >&5
-echo "${ECHO_T}$ac_cv_type_fsfilcnt_t" >&6; }
-if test $ac_cv_type_fsfilcnt_t = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_FSFILCNT_T 1
@@ -23620,62 +12291,10 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for in_addr_t" >&5
+ac_fn_c_check_type "$LINENO" "in_addr_t" "ac_cv_type_in_addr_t" "#include <sys/types.h>
-echo $ECHO_N "checking for in_addr_t... $ECHO_C" >&6; }
-if test "${ac_cv_type_in_addr_t+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <sys/types.h>
 #include <netinet/in.h>
+"
-typedef in_addr_t ac__type_new_;
+if test "x$ac_cv_type_in_addr_t" = xyes; then :
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_in_addr_t=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_in_addr_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_in_addr_t" >&5
-echo "${ECHO_T}$ac_cv_type_in_addr_t" >&6; }
-if test $ac_cv_type_in_addr_t = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_IN_ADDR_T 1
@@ -23683,62 +12302,10 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for in_port_t" >&5
+ac_fn_c_check_type "$LINENO" "in_port_t" "ac_cv_type_in_port_t" "#include <sys/types.h>
-echo $ECHO_N "checking for in_port_t... $ECHO_C" >&6; }
-if test "${ac_cv_type_in_port_t+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <sys/types.h>
 #include <netinet/in.h>
+"
-typedef in_port_t ac__type_new_;
+if test "x$ac_cv_type_in_port_t" = xyes; then :
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_in_port_t=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_in_port_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_in_port_t" >&5
-echo "${ECHO_T}$ac_cv_type_in_port_t" >&6; }
-if test $ac_cv_type_in_port_t = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_IN_PORT_T 1
@@ -23748,21 +12315,15 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for size_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for size_t" >&5
-echo $ECHO_N "checking for size_t... $ECHO_C" >&6; }
+$as_echo_n "checking for size_t... " >&6; }
-if test "${ac_cv_have_size_t+set}" = set; then
+if ${ac_cv_have_size_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <sys/types.h>
-#include <sys/types.h>
 int
 main ()
 {
@@ -23771,60 +12332,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_size_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_size_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_size_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_size_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_size_t" >&5
-echo "${ECHO_T}$ac_cv_have_size_t" >&6; }
+$as_echo "$ac_cv_have_size_t" >&6; }
 if test "x$ac_cv_have_size_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SIZE_T 1" >>confdefs.h
-#define HAVE_SIZE_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for ssize_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ssize_t" >&5
-echo $ECHO_N "checking for ssize_t... $ECHO_C" >&6; }
+$as_echo_n "checking for ssize_t... " >&6; }
-if test "${ac_cv_have_ssize_t+set}" = set; then
+if ${ac_cv_have_ssize_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <sys/types.h>
-#include <sys/types.h>
 int
 main ()
 {
@@ -23833,60 +12366,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_ssize_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_ssize_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_ssize_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_ssize_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_ssize_t" >&5
-echo "${ECHO_T}$ac_cv_have_ssize_t" >&6; }
+$as_echo "$ac_cv_have_ssize_t" >&6; }
 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SSIZE_T 1" >>confdefs.h
-#define HAVE_SSIZE_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for clock_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for clock_t" >&5
-echo $ECHO_N "checking for clock_t... $ECHO_C" >&6; }
+$as_echo_n "checking for clock_t... " >&6; }
-if test "${ac_cv_have_clock_t+set}" = set; then
+if ${ac_cv_have_clock_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <time.h>
-#include <time.h>
 int
 main ()
 {
@@ -23895,56 +12400,30 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_clock_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_clock_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_clock_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_clock_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_clock_t" >&5
-echo "${ECHO_T}$ac_cv_have_clock_t" >&6; }
+$as_echo "$ac_cv_have_clock_t" >&6; }
 if test "x$ac_cv_have_clock_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_CLOCK_T 1" >>confdefs.h
-#define HAVE_CLOCK_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for sa_family_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for sa_family_t" >&5
-echo $ECHO_N "checking for sa_family_t... $ECHO_C" >&6; }
+$as_echo_n "checking for sa_family_t... " >&6; }
-if test "${ac_cv_have_sa_family_t+set}" = set; then
+if ${ac_cv_have_sa_family_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -23958,33 +12437,10 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_sa_family_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-sed 's/^/| /' conftest.$ac_ext >&5
-         cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -23999,64 +12455,35 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_sa_family_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_sa_family_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_sa_family_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_sa_family_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_sa_family_t" >&5
-echo "${ECHO_T}$ac_cv_have_sa_family_t" >&6; }
+$as_echo "$ac_cv_have_sa_family_t" >&6; }
 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SA_FAMILY_T 1" >>confdefs.h
-#define HAVE_SA_FAMILY_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for pid_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pid_t" >&5
-echo $ECHO_N "checking for pid_t... $ECHO_C" >&6; }
+$as_echo_n "checking for pid_t... " >&6; }
-if test "${ac_cv_have_pid_t+set}" = set; then
+if ${ac_cv_have_pid_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <sys/types.h>
-#include <sys/types.h>
 int
 main ()
 {
@@ -24065,60 +12492,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_pid_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_pid_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_pid_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_pid_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pid_t" >&5
-echo "${ECHO_T}$ac_cv_have_pid_t" >&6; }
+$as_echo "$ac_cv_have_pid_t" >&6; }
 if test "x$ac_cv_have_pid_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_PID_T 1" >>confdefs.h
-#define HAVE_PID_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for mode_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for mode_t" >&5
-echo $ECHO_N "checking for mode_t... $ECHO_C" >&6; }
+$as_echo_n "checking for mode_t... " >&6; }
-if test "${ac_cv_have_mode_t+set}" = set; then
+if ${ac_cv_have_mode_t+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <sys/types.h>
-#include <sys/types.h>
 int
 main ()
 {
@@ -24127,57 +12526,31 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_mode_t="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_mode_t="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_mode_t="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_mode_t" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_mode_t" >&5
-echo "${ECHO_T}$ac_cv_have_mode_t" >&6; }
+$as_echo "$ac_cv_have_mode_t" >&6; }
 if test "x$ac_cv_have_mode_t" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_MODE_T 1" >>confdefs.h
-#define HAVE_MODE_T 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for struct sockaddr_storage" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct sockaddr_storage" >&5
-echo $ECHO_N "checking for struct sockaddr_storage... $ECHO_C" >&6; }
+$as_echo_n "checking for struct sockaddr_storage... " >&6; }
-if test "${ac_cv_have_struct_sockaddr_storage+set}" = set; then
+if ${ac_cv_have_struct_sockaddr_storage+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -24191,56 +12564,30 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_struct_sockaddr_storage="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_struct_sockaddr_storage="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_struct_sockaddr_storage="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_struct_sockaddr_storage" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_sockaddr_storage" >&5
-echo "${ECHO_T}$ac_cv_have_struct_sockaddr_storage" >&6; }
+$as_echo "$ac_cv_have_struct_sockaddr_storage" >&6; }
 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_STRUCT_SOCKADDR_STORAGE 1" >>confdefs.h
-#define HAVE_STRUCT_SOCKADDR_STORAGE 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for struct sockaddr_in6" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct sockaddr_in6" >&5
-echo $ECHO_N "checking for struct sockaddr_in6... $ECHO_C" >&6; }
+$as_echo_n "checking for struct sockaddr_in6... " >&6; }
-if test "${ac_cv_have_struct_sockaddr_in6+set}" = set; then
+if ${ac_cv_have_struct_sockaddr_in6+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -24254,56 +12601,30 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_struct_sockaddr_in6="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_struct_sockaddr_in6="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_struct_sockaddr_in6="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_struct_sockaddr_in6" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_sockaddr_in6" >&5
-echo "${ECHO_T}$ac_cv_have_struct_sockaddr_in6" >&6; }
+$as_echo "$ac_cv_have_struct_sockaddr_in6" >&6; }
 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_STRUCT_SOCKADDR_IN6 1" >>confdefs.h
-#define HAVE_STRUCT_SOCKADDR_IN6 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for struct in6_addr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct in6_addr" >&5
-echo $ECHO_N "checking for struct in6_addr... $ECHO_C" >&6; }
+$as_echo_n "checking for struct in6_addr... " >&6; }
-if test "${ac_cv_have_struct_in6_addr+set}" = set; then
+if ${ac_cv_have_struct_in6_addr+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -24317,150 +12638,30 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_struct_in6_addr="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_struct_in6_addr="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_struct_in6_addr="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_struct_in6_addr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_in6_addr" >&5
-echo "${ECHO_T}$ac_cv_have_struct_in6_addr" >&6; }
+$as_echo "$ac_cv_have_struct_in6_addr" >&6; }
 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_STRUCT_IN6_ADDR 1" >>confdefs.h
-#define HAVE_STRUCT_IN6_ADDR 1
-_ACEOF
-        { echo "$as_me:$LINENO: checking for struct sockaddr_in6.sin6_scope_id" >&5
-echo $ECHO_N "checking for struct sockaddr_in6.sin6_scope_id... $ECHO_C" >&6; }
-if test "${ac_cv_member_struct_sockaddr_in6_sin6_scope_id+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
+        ac_fn_c_check_member "$LINENO" "struct sockaddr_in6" "sin6_scope_id" "ac_cv_member_struct_sockaddr_in6_sin6_scope_id" "
 #ifdef HAVE_SYS_TYPES_H
 #include <sys/types.h>
 #endif
 #include <netinet/in.h>
+"
-int
+if test "x$ac_cv_member_struct_sockaddr_in6_sin6_scope_id" = xyes; then :
-main ()
-{
-static struct sockaddr_in6 ac_aggr;
-if (ac_aggr.sin6_scope_id)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_struct_sockaddr_in6_sin6_scope_id=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#ifdef HAVE_SYS_TYPES_H
-#include <sys/types.h>
-#endif
-#include <netinet/in.h>
-int
-main ()
-{
-static struct sockaddr_in6 ac_aggr;
-if (sizeof ac_aggr.sin6_scope_id)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_struct_sockaddr_in6_sin6_scope_id=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_member_struct_sockaddr_in6_sin6_scope_id=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_member_struct_sockaddr_in6_sin6_scope_id" >&5
-echo "${ECHO_T}$ac_cv_member_struct_sockaddr_in6_sin6_scope_id" >&6; }
-if test $ac_cv_member_struct_sockaddr_in6_sin6_scope_id = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_STRUCT_SOCKADDR_IN6_SIN6_SCOPE_ID 1
@@ -24471,17 +12672,13 @@ fi
 fi
-{ echo "$as_me:$LINENO: checking for struct addrinfo" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct addrinfo" >&5
-echo $ECHO_N "checking for struct addrinfo... $ECHO_C" >&6; }
+$as_echo_n "checking for struct addrinfo... " >&6; }
-if test "${ac_cv_have_struct_addrinfo+set}" = set; then
+if ${ac_cv_have_struct_addrinfo+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -24496,56 +12693,30 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_struct_addrinfo="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_struct_addrinfo="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_struct_addrinfo="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_struct_addrinfo" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_addrinfo" >&5
-echo "${ECHO_T}$ac_cv_have_struct_addrinfo" >&6; }
+$as_echo "$ac_cv_have_struct_addrinfo" >&6; }
 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_STRUCT_ADDRINFO 1" >>confdefs.h
-#define HAVE_STRUCT_ADDRINFO 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for struct timeval" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct timeval" >&5
-echo $ECHO_N "checking for struct timeval... $ECHO_C" >&6; }
+$as_echo_n "checking for struct timeval... " >&6; }
-if test "${ac_cv_have_struct_timeval+set}" = set; then
+if ${ac_cv_have_struct_timeval+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/time.h>
 int
@@ -24556,100 +12727,26 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_struct_timeval="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_struct_timeval="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_struct_timeval="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_struct_timeval" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_struct_timeval" >&5
-echo "${ECHO_T}$ac_cv_have_struct_timeval" >&6; }
+$as_echo "$ac_cv_have_struct_timeval" >&6; }
 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_STRUCT_TIMEVAL 1" >>confdefs.h
-#define HAVE_STRUCT_TIMEVAL 1
-_ACEOF
        have_struct_timeval=1
 fi
-{ echo "$as_me:$LINENO: checking for struct timespec" >&5
+ac_fn_c_check_type "$LINENO" "struct timespec" "ac_cv_type_struct_timespec" "$ac_includes_default"
-echo $ECHO_N "checking for struct timespec... $ECHO_C" >&6; }
+if test "x$ac_cv_type_struct_timespec" = xyes; then :
-if test "${ac_cv_type_struct_timespec+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-typedef struct timespec ac__type_new_;
-int
-main ()
-{
-if ((ac__type_new_ *) 0)
-  return 0;
-if (sizeof (ac__type_new_))
-  return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_type_struct_timespec=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_type_struct_timespec=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_type_struct_timespec" >&5
-echo "${ECHO_T}$ac_cv_type_struct_timespec" >&6; }
-if test $ac_cv_type_struct_timespec = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_STRUCT_TIMESPEC 1
@@ -24668,16 +12765,12 @@ if test "x$ac_cv_have_int64_t" = "xno" && \
        echo ""
        exit 1;
 else
-        if test "$cross_compiling" = yes; then
+        if test "$cross_compiling" = yes; then :
-  { echo "$as_me:$LINENO: WARNING: cross compiling: Assuming working snprintf()" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Assuming working snprintf()" >&5
-echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: Assuming working snprintf()" >&2;}
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdio.h>
@@ -24704,65 +12797,35 @@ main() { exit(0); }
 #endif
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
   true
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+   $as_echo "#define BROKEN_SNPRINTF 1" >>confdefs.h
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
- cat >>confdefs.h <<\_ACEOF
-#define BROKEN_SNPRINTF 1
-_ACEOF
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 fi
 # look for field 'ut_host' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_host
-        { echo "$as_me:$LINENO: checking for ut_host field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_host field in utmp.h" >&5
-echo $ECHO_N "checking for ut_host field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_host field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_host" >/dev/null 2>&1; then
+  $EGREP "ut_host" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -24773,41 +12836,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_HOST_IN_UTMP 1" >>confdefs.h
-#define HAVE_HOST_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_host' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_host
-        { echo "$as_me:$LINENO: checking for ut_host field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_host field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_host field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_host field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_host" >/dev/null 2>&1; then
+  $EGREP "ut_host" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -24818,41 +12875,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_HOST_IN_UTMPX 1" >>confdefs.h
-#define HAVE_HOST_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'syslen' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"syslen
-        { echo "$as_me:$LINENO: checking for syslen field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for syslen field in utmpx.h" >&5
-echo $ECHO_N "checking for syslen field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for syslen field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "syslen" >/dev/null 2>&1; then
+  $EGREP "syslen" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -24863,41 +12914,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SYSLEN_IN_UTMPX 1" >>confdefs.h
-#define HAVE_SYSLEN_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_pid' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_pid
-        { echo "$as_me:$LINENO: checking for ut_pid field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_pid field in utmp.h" >&5
-echo $ECHO_N "checking for ut_pid field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_pid field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_pid" >/dev/null 2>&1; then
+  $EGREP "ut_pid" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -24908,41 +12953,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_PID_IN_UTMP 1" >>confdefs.h
-#define HAVE_PID_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_type' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_type
-        { echo "$as_me:$LINENO: checking for ut_type field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_type field in utmp.h" >&5
-echo $ECHO_N "checking for ut_type field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_type field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_type" >/dev/null 2>&1; then
+  $EGREP "ut_type" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -24953,41 +12992,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_TYPE_IN_UTMP 1" >>confdefs.h
-#define HAVE_TYPE_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_type' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_type
-        { echo "$as_me:$LINENO: checking for ut_type field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_type field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_type field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_type field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_type" >/dev/null 2>&1; then
+  $EGREP "ut_type" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -24998,41 +13031,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_TYPE_IN_UTMPX 1" >>confdefs.h
-#define HAVE_TYPE_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_tv' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_tv
-        { echo "$as_me:$LINENO: checking for ut_tv field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_tv field in utmp.h" >&5
-echo $ECHO_N "checking for ut_tv field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_tv field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_tv" >/dev/null 2>&1; then
+  $EGREP "ut_tv" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25043,41 +13070,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_TV_IN_UTMP 1" >>confdefs.h
-#define HAVE_TV_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_id' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_id
-        { echo "$as_me:$LINENO: checking for ut_id field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_id field in utmp.h" >&5
-echo $ECHO_N "checking for ut_id field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_id field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_id" >/dev/null 2>&1; then
+  $EGREP "ut_id" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25088,41 +13109,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ID_IN_UTMP 1" >>confdefs.h
-#define HAVE_ID_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_id' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_id
-        { echo "$as_me:$LINENO: checking for ut_id field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_id field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_id field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_id field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_id" >/dev/null 2>&1; then
+  $EGREP "ut_id" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25133,41 +13148,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ID_IN_UTMPX 1" >>confdefs.h
-#define HAVE_ID_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_addr' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr
-        { echo "$as_me:$LINENO: checking for ut_addr field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr field in utmp.h" >&5
-echo $ECHO_N "checking for ut_addr field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_addr field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_addr" >/dev/null 2>&1; then
+  $EGREP "ut_addr" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25178,41 +13187,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ADDR_IN_UTMP 1" >>confdefs.h
-#define HAVE_ADDR_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_addr' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr
-        { echo "$as_me:$LINENO: checking for ut_addr field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_addr field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_addr field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_addr" >/dev/null 2>&1; then
+  $EGREP "ut_addr" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25223,41 +13226,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ADDR_IN_UTMPX 1" >>confdefs.h
-#define HAVE_ADDR_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_addr_v6' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr_v6
-        { echo "$as_me:$LINENO: checking for ut_addr_v6 field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr_v6 field in utmp.h" >&5
-echo $ECHO_N "checking for ut_addr_v6 field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_addr_v6 field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_addr_v6" >/dev/null 2>&1; then
+  $EGREP "ut_addr_v6" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25268,41 +13265,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ADDR_V6_IN_UTMP 1" >>confdefs.h
-#define HAVE_ADDR_V6_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_addr_v6' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr_v6
-        { echo "$as_me:$LINENO: checking for ut_addr_v6 field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_addr_v6 field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_addr_v6 field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_addr_v6 field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_addr_v6" >/dev/null 2>&1; then
+  $EGREP "ut_addr_v6" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25313,41 +13304,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ADDR_V6_IN_UTMPX 1" >>confdefs.h
-#define HAVE_ADDR_V6_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_exit' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_exit
-        { echo "$as_me:$LINENO: checking for ut_exit field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_exit field in utmp.h" >&5
-echo $ECHO_N "checking for ut_exit field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_exit field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_exit" >/dev/null 2>&1; then
+  $EGREP "ut_exit" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25358,41 +13343,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_EXIT_IN_UTMP 1" >>confdefs.h
-#define HAVE_EXIT_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_time' in header 'utmp.h'
                ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_time
-        { echo "$as_me:$LINENO: checking for ut_time field in utmp.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_time field in utmp.h" >&5
-echo $ECHO_N "checking for ut_time field in utmp.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_time field in utmp.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmp.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_time" >/dev/null 2>&1; then
+  $EGREP "ut_time" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25403,41 +13382,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_TIME_IN_UTMP 1" >>confdefs.h
-#define HAVE_TIME_IN_UTMP 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_time' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_time
-        { echo "$as_me:$LINENO: checking for ut_time field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_time field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_time field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_time field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_time" >/dev/null 2>&1; then
+  $EGREP "ut_time" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25448,41 +13421,35 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_TIME_IN_UTMPX 1" >>confdefs.h
-#define HAVE_TIME_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 # look for field 'ut_tv' in header 'utmpx.h'
                ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'`
                ossh_varname="ossh_cv_$ossh_safe""_has_"ut_tv
-        { echo "$as_me:$LINENO: checking for ut_tv field in utmpx.h" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ut_tv field in utmpx.h" >&5
-echo $ECHO_N "checking for ut_tv field in utmpx.h... $ECHO_C" >&6; }
+$as_echo_n "checking for ut_tv field in utmpx.h... " >&6; }
-        if { as_var=$ossh_varname; eval "test \"\${$as_var+set}\" = set"; }; then
+        if eval \${$ossh_varname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <utmpx.h>
 _ACEOF
 if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "ut_tv" >/dev/null 2>&1; then
+  $EGREP "ut_tv" >/dev/null 2>&1; then :
                        eval "$ossh_varname=yes"
 else
                        eval "$ossh_varname=no"
@@ -25493,115 +13460,21 @@ fi
        ossh_result=`eval 'echo $'"$ossh_varname"`
        if test -n "`echo $ossh_varname`"; then
-                { echo "$as_me:$LINENO: result: $ossh_result" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ossh_result" >&5
-echo "${ECHO_T}$ossh_result" >&6; }
+$as_echo "$ossh_result" >&6; }
                if test "x$ossh_result" = "xyes"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_TV_IN_UTMPX 1" >>confdefs.h
-#define HAVE_TV_IN_UTMPX 1
-_ACEOF
                fi
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
-{ echo "$as_me:$LINENO: checking for struct stat.st_blksize" >&5
+ac_fn_c_check_member "$LINENO" "struct stat" "st_blksize" "ac_cv_member_struct_stat_st_blksize" "$ac_includes_default"
-echo $ECHO_N "checking for struct stat.st_blksize... $ECHO_C" >&6; }
+if test "x$ac_cv_member_struct_stat_st_blksize" = xyes; then :
-if test "${ac_cv_member_struct_stat_st_blksize+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
-static struct stat ac_aggr;
-if (ac_aggr.st_blksize)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_struct_stat_st_blksize=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
-static struct stat ac_aggr;
-if (sizeof ac_aggr.st_blksize)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_struct_stat_st_blksize=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_member_struct_stat_st_blksize=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_member_struct_stat_st_blksize" >&5
-echo "${ECHO_T}$ac_cv_member_struct_stat_st_blksize" >&6; }
-if test $ac_cv_member_struct_stat_st_blksize = yes; then
 cat >>confdefs.h <<_ACEOF
 #define HAVE_STRUCT_STAT_ST_BLKSIZE 1
@@ -25610,66 +13483,7 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for struct __res_state.retrans" >&5
+ac_fn_c_check_member "$LINENO" "struct __res_state" "retrans" "ac_cv_member_struct___res_state_retrans" "
-echo $ECHO_N "checking for struct __res_state.retrans... $ECHO_C" >&6; }
-if test "${ac_cv_member_struct___res_state_retrans+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <stdio.h>
-#if HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#include <netinet/in.h>
-#include <arpa/nameser.h>
-#include <resolv.h>
-int
-main ()
-{
-static struct __res_state ac_aggr;
-if (ac_aggr.retrans)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_struct___res_state_retrans=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
 #include <stdio.h>
 #if HAVE_SYS_TYPES_H
 # include <sys/types.h>
@@ -25678,71 +13492,23 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <arpa/nameser.h>
 #include <resolv.h>
+"
+if test "x$ac_cv_member_struct___res_state_retrans" = xyes; then :
-int
-main ()
-{
-static struct __res_state ac_aggr;
-if (sizeof ac_aggr.retrans)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_struct___res_state_retrans=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_member_struct___res_state_retrans=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_member_struct___res_state_retrans" >&5
-echo "${ECHO_T}$ac_cv_member_struct___res_state_retrans" >&6; }
-if test $ac_cv_member_struct___res_state_retrans = yes; then
-  :
 else
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define __res_state state" >>confdefs.h
-#define __res_state state
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for ss_family field in struct sockaddr_storage" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ss_family field in struct sockaddr_storage" >&5
-echo $ECHO_N "checking for ss_family field in struct sockaddr_storage... $ECHO_C" >&6; }
+$as_echo_n "checking for ss_family field in struct sockaddr_storage... " >&6; }
-if test "${ac_cv_have_ss_family_in_struct_ss+set}" = set; then
+if ${ac_cv_have_ss_family_in_struct_ss+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -25756,55 +13522,29 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_ss_family_in_struct_ss="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_ss_family_in_struct_ss="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_ss_family_in_struct_ss="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_ss_family_in_struct_ss" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_ss_family_in_struct_ss" >&5
-echo "${ECHO_T}$ac_cv_have_ss_family_in_struct_ss" >&6; }
+$as_echo "$ac_cv_have_ss_family_in_struct_ss" >&6; }
 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SS_FAMILY_IN_SS 1" >>confdefs.h
-#define HAVE_SS_FAMILY_IN_SS 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for __ss_family field in struct sockaddr_storage" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for __ss_family field in struct sockaddr_storage" >&5
-echo $ECHO_N "checking for __ss_family field in struct sockaddr_storage... $ECHO_C" >&6; }
+$as_echo_n "checking for __ss_family field in struct sockaddr_storage... " >&6; }
-if test "${ac_cv_have___ss_family_in_struct_ss+set}" = set; then
+if ${ac_cv_have___ss_family_in_struct_ss+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -25818,60 +13558,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have___ss_family_in_struct_ss="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have___ss_family_in_struct_ss="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have___ss_family_in_struct_ss="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have___ss_family_in_struct_ss" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have___ss_family_in_struct_ss" >&5
-echo "${ECHO_T}$ac_cv_have___ss_family_in_struct_ss" >&6; }
+$as_echo "$ac_cv_have___ss_family_in_struct_ss" >&6; }
 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE___SS_FAMILY_IN_SS 1" >>confdefs.h
-#define HAVE___SS_FAMILY_IN_SS 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for pw_class field in struct passwd" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pw_class field in struct passwd" >&5
-echo $ECHO_N "checking for pw_class field in struct passwd... $ECHO_C" >&6; }
+$as_echo_n "checking for pw_class field in struct passwd... " >&6; }
-if test "${ac_cv_have_pw_class_in_struct_passwd+set}" = set; then
+if ${ac_cv_have_pw_class_in_struct_passwd+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <pwd.h>
-#include <pwd.h>
 int
 main ()
 {
@@ -25880,60 +13592,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_pw_class_in_struct_passwd="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_pw_class_in_struct_passwd="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_pw_class_in_struct_passwd="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_pw_class_in_struct_passwd" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pw_class_in_struct_passwd" >&5
-echo "${ECHO_T}$ac_cv_have_pw_class_in_struct_passwd" >&6; }
+$as_echo "$ac_cv_have_pw_class_in_struct_passwd" >&6; }
 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_PW_CLASS_IN_PASSWD 1" >>confdefs.h
-#define HAVE_PW_CLASS_IN_PASSWD 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for pw_expire field in struct passwd" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pw_expire field in struct passwd" >&5
-echo $ECHO_N "checking for pw_expire field in struct passwd... $ECHO_C" >&6; }
+$as_echo_n "checking for pw_expire field in struct passwd... " >&6; }
-if test "${ac_cv_have_pw_expire_in_struct_passwd+set}" = set; then
+if ${ac_cv_have_pw_expire_in_struct_passwd+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <pwd.h>
-#include <pwd.h>
 int
 main ()
 {
@@ -25942,60 +13626,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_pw_expire_in_struct_passwd="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_pw_expire_in_struct_passwd="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_pw_expire_in_struct_passwd="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_pw_expire_in_struct_passwd" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pw_expire_in_struct_passwd" >&5
-echo "${ECHO_T}$ac_cv_have_pw_expire_in_struct_passwd" >&6; }
+$as_echo "$ac_cv_have_pw_expire_in_struct_passwd" >&6; }
 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_PW_EXPIRE_IN_PASSWD 1" >>confdefs.h
-#define HAVE_PW_EXPIRE_IN_PASSWD 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for pw_change field in struct passwd" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pw_change field in struct passwd" >&5
-echo $ECHO_N "checking for pw_change field in struct passwd... $ECHO_C" >&6; }
+$as_echo_n "checking for pw_change field in struct passwd... " >&6; }
-if test "${ac_cv_have_pw_change_in_struct_passwd+set}" = set; then
+if ${ac_cv_have_pw_change_in_struct_passwd+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <pwd.h>
-#include <pwd.h>
 int
 main ()
 {
@@ -26004,57 +13660,40 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_pw_change_in_struct_passwd="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_pw_change_in_struct_passwd="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_pw_change_in_struct_passwd="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_pw_change_in_struct_passwd" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_pw_change_in_struct_passwd" >&5
-echo "${ECHO_T}$ac_cv_have_pw_change_in_struct_passwd" >&6; }
+$as_echo "$ac_cv_have_pw_change_in_struct_passwd" >&6; }
 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_PW_CHANGE_IN_PASSWD 1" >>confdefs.h
-#define HAVE_PW_CHANGE_IN_PASSWD 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking for msg_accrights field in struct msghdr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for msg_accrights field in struct msghdr" >&5
-echo $ECHO_N "checking for msg_accrights field in struct msghdr... $ECHO_C" >&6; }
+$as_echo_n "checking for msg_accrights field in struct msghdr... " >&6; }
-if test "${ac_cv_have_accrights_in_msghdr+set}" = set; then
+if ${ac_cv_have_accrights_in_msghdr+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/uio.h>
-int main() {
+int
+main ()
+{
 #ifdef msg_accrights
 #error "msg_accrights is a macro"
 exit(1);
@@ -26062,55 +13701,31 @@ exit(1);
 struct msghdr m;
 m.msg_accrights = 0;
 exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_accrights_in_msghdr="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_accrights_in_msghdr="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_accrights_in_msghdr="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_accrights_in_msghdr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_accrights_in_msghdr" >&5
-echo "${ECHO_T}$ac_cv_have_accrights_in_msghdr" >&6; }
+$as_echo "$ac_cv_have_accrights_in_msghdr" >&6; }
 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ACCRIGHTS_IN_MSGHDR 1" >>confdefs.h
-#define HAVE_ACCRIGHTS_IN_MSGHDR 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if struct statvfs.f_fsid is integral type" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if struct statvfs.f_fsid is integral type" >&5
-echo $ECHO_N "checking if struct statvfs.f_fsid is integral type... $ECHO_C" >&6; }
+$as_echo_n "checking if struct statvfs.f_fsid is integral type... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -26128,159 +13743,94 @@ cat >>conftest.$ac_ext <<_ACEOF
 int
 main ()
 {
-struct statvfs s; s.f_fsid = 0;
+ struct statvfs s; s.f_fsid = 0;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-        { echo "$as_me:$LINENO: checking if fsid_t has member val" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if fsid_t has member val" >&5
-echo $ECHO_N "checking if fsid_t has member val... $ECHO_C" >&6; }
+$as_echo_n "checking if fsid_t has member val... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/statvfs.h>
 int
 main ()
 {
-fsid_t t; t.val[0] = 0;
+ fsid_t t; t.val[0] = 0;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define FSID_HAS_VAL 1" >>confdefs.h
-#define FSID_HAS_VAL 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-        { echo "$as_me:$LINENO: checking if f_fsid has member __val" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if f_fsid has member __val" >&5
-echo $ECHO_N "checking if f_fsid has member __val... $ECHO_C" >&6; }
+$as_echo_n "checking if f_fsid has member __val... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/statvfs.h>
 int
 main ()
 {
-fsid_t t; t.__val[0] = 0;
+ fsid_t t; t.__val[0] = 0;
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define FSID_HAS___VAL 1" >>confdefs.h
-#define FSID_HAS___VAL 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: checking for msg_control field in struct msghdr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for msg_control field in struct msghdr" >&5
-echo $ECHO_N "checking for msg_control field in struct msghdr... $ECHO_C" >&6; }
+$as_echo_n "checking for msg_control field in struct msghdr... " >&6; }
-if test "${ac_cv_have_control_in_msghdr+set}" = set; then
+if ${ac_cv_have_control_in_msghdr+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/uio.h>
-int main() {
+int
+main ()
+{
 #ifdef msg_control
 #error "msg_control is a macro"
 exit(1);
@@ -26288,59 +13838,35 @@ exit(1);
 struct msghdr m;
 m.msg_control = 0;
 exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   ac_cv_have_control_in_msghdr="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_control_in_msghdr="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_control_in_msghdr="no"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_control_in_msghdr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_control_in_msghdr" >&5
-echo "${ECHO_T}$ac_cv_have_control_in_msghdr" >&6; }
+$as_echo "$ac_cv_have_control_in_msghdr" >&6; }
 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_CONTROL_IN_MSGHDR 1" >>confdefs.h
-#define HAVE_CONTROL_IN_MSGHDR 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if libc defines __progname" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if libc defines __progname" >&5
-echo $ECHO_N "checking if libc defines __progname... $ECHO_C" >&6; }
+$as_echo_n "checking if libc defines __progname... " >&6; }
-if test "${ac_cv_libc_defines___progname+set}" = set; then
+if ${ac_cv_libc_defines___progname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -26351,62 +13877,33 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_libc_defines___progname="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_libc_defines___progname="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_libc_defines___progname="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_libc_defines___progname" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libc_defines___progname" >&5
-echo "${ECHO_T}$ac_cv_libc_defines___progname" >&6; }
+$as_echo "$ac_cv_libc_defines___progname" >&6; }
 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE___PROGNAME 1" >>confdefs.h
-#define HAVE___PROGNAME 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking whether $CC implements __FUNCTION__" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC implements __FUNCTION__" >&5
-echo $ECHO_N "checking whether $CC implements __FUNCTION__... $ECHO_C" >&6; }
+$as_echo_n "checking whether $CC implements __FUNCTION__... " >&6; }
-if test "${ac_cv_cc_implements___FUNCTION__+set}" = set; then
+if ${ac_cv_cc_implements___FUNCTION__+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <stdio.h>
-#include <stdio.h>
 int
 main ()
 {
@@ -26415,62 +13912,33 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_cc_implements___FUNCTION__="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_cc_implements___FUNCTION__="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_cc_implements___FUNCTION__="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_cc_implements___FUNCTION__" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_cc_implements___FUNCTION__" >&5
-echo "${ECHO_T}$ac_cv_cc_implements___FUNCTION__" >&6; }
+$as_echo "$ac_cv_cc_implements___FUNCTION__" >&6; }
 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE___FUNCTION__ 1" >>confdefs.h
-#define HAVE___FUNCTION__ 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking whether $CC implements __func__" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC implements __func__" >&5
-echo $ECHO_N "checking whether $CC implements __func__... $ECHO_C" >&6; }
+$as_echo_n "checking whether $CC implements __func__... " >&6; }
-if test "${ac_cv_cc_implements___func__+set}" = set; then
+if ${ac_cv_cc_implements___func__+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <stdio.h>
-#include <stdio.h>
 int
 main ()
 {
@@ -26479,188 +13947,109 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_cc_implements___func__="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_cc_implements___func__="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_cc_implements___func__="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_cc_implements___func__" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_cc_implements___func__" >&5
-echo "${ECHO_T}$ac_cv_cc_implements___func__" >&6; }
+$as_echo "$ac_cv_cc_implements___func__" >&6; }
 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE___func__ 1" >>confdefs.h
-#define HAVE___func__ 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking whether va_copy exists" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether va_copy exists" >&5
-echo $ECHO_N "checking whether va_copy exists... $ECHO_C" >&6; }
+$as_echo_n "checking whether va_copy exists... " >&6; }
-if test "${ac_cv_have_va_copy+set}" = set; then
+if ${ac_cv_have_va_copy+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdarg.h>
-                 va_list x,y;
+va_list x,y;
 int
 main ()
 {
-va_copy(x,y);
+ va_copy(x,y);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_have_va_copy="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_va_copy="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_va_copy="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_va_copy" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_va_copy" >&5
-echo "${ECHO_T}$ac_cv_have_va_copy" >&6; }
+$as_echo "$ac_cv_have_va_copy" >&6; }
 if test "x$ac_cv_have_va_copy" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_VA_COPY 1" >>confdefs.h
-#define HAVE_VA_COPY 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking whether __va_copy exists" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether __va_copy exists" >&5
-echo $ECHO_N "checking whether __va_copy exists... $ECHO_C" >&6; }
+$as_echo_n "checking whether __va_copy exists... " >&6; }
-if test "${ac_cv_have___va_copy+set}" = set; then
+if ${ac_cv_have___va_copy+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <stdarg.h>
-                 va_list x,y;
+va_list x,y;
 int
 main ()
 {
-__va_copy(x,y);
+ __va_copy(x,y);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_have___va_copy="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have___va_copy="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have___va_copy="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have___va_copy" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have___va_copy" >&5
-echo "${ECHO_T}$ac_cv_have___va_copy" >&6; }
+$as_echo "$ac_cv_have___va_copy" >&6; }
 if test "x$ac_cv_have___va_copy" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE___VA_COPY 1" >>confdefs.h
-#define HAVE___VA_COPY 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking whether getopt has optreset support" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether getopt has optreset support" >&5
-echo $ECHO_N "checking whether getopt has optreset support... $ECHO_C" >&6; }
+$as_echo_n "checking whether getopt has optreset support... " >&6; }
-if test "${ac_cv_have_getopt_optreset+set}" = set; then
+if ${ac_cv_have_getopt_optreset+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
+ #include <getopt.h>
-#include <getopt.h>
 int
 main ()
 {
@@ -26669,58 +14058,31 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_have_getopt_optreset="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_have_getopt_optreset="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_have_getopt_optreset="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_getopt_optreset" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_getopt_optreset" >&5
-echo "${ECHO_T}$ac_cv_have_getopt_optreset" >&6; }
+$as_echo "$ac_cv_have_getopt_optreset" >&6; }
 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_GETOPT_OPTRESET 1" >>confdefs.h
-#define HAVE_GETOPT_OPTRESET 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if libc defines sys_errlist" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if libc defines sys_errlist" >&5
-echo $ECHO_N "checking if libc defines sys_errlist... $ECHO_C" >&6; }
+$as_echo_n "checking if libc defines sys_errlist... " >&6; }
-if test "${ac_cv_libc_defines_sys_errlist+set}" = set; then
+if ${ac_cv_libc_defines_sys_errlist+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -26731,59 +14093,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_libc_defines_sys_errlist="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_libc_defines_sys_errlist="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_libc_defines_sys_errlist="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_libc_defines_sys_errlist" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libc_defines_sys_errlist" >&5
-echo "${ECHO_T}$ac_cv_libc_defines_sys_errlist" >&6; }
+$as_echo "$ac_cv_libc_defines_sys_errlist" >&6; }
 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SYS_ERRLIST 1" >>confdefs.h
-#define HAVE_SYS_ERRLIST 1
-_ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if libc defines sys_nerr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if libc defines sys_nerr" >&5
-echo $ECHO_N "checking if libc defines sys_nerr... $ECHO_C" >&6; }
+$as_echo_n "checking if libc defines sys_nerr... " >&6; }
-if test "${ac_cv_libc_defines_sys_nerr+set}" = set; then
+if ${ac_cv_libc_defines_sys_nerr+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 int
@@ -26794,59 +14129,32 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
   ac_cv_libc_defines_sys_nerr="yes"
 else
-  echo "$as_me: failed program was:" >&5
+   ac_cv_libc_defines_sys_nerr="no"
-sed 's/^/| /' conftest.$ac_ext >&5
-         ac_cv_libc_defines_sys_nerr="no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_libc_defines_sys_nerr" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libc_defines_sys_nerr" >&5
-echo "${ECHO_T}$ac_cv_libc_defines_sys_nerr" >&6; }
+$as_echo "$ac_cv_libc_defines_sys_nerr" >&6; }
 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_SYS_NERR 1" >>confdefs.h
-#define HAVE_SYS_NERR 1
-_ACEOF
 fi
 # Check libraries needed by DNS fingerprint support
-{ echo "$as_me:$LINENO: checking for library containing getrrsetbyname" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing getrrsetbyname" >&5
-echo $ECHO_N "checking for library containing getrrsetbyname... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing getrrsetbyname... " >&6; }
-if test "${ac_cv_search_getrrsetbyname+set}" = set; then
+if ${ac_cv_search_getrrsetbyname+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -26871,70 +14179,41 @@ for ac_lib in '' resolv; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_getrrsetbyname=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_getrrsetbyname+:} false; then :
-  if test "${ac_cv_search_getrrsetbyname+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_getrrsetbyname+set}" = set; then
+if ${ac_cv_search_getrrsetbyname+:} false; then :
-  :
 else
  ac_cv_search_getrrsetbyname=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_getrrsetbyname" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_getrrsetbyname" >&5
-echo "${ECHO_T}$ac_cv_search_getrrsetbyname" >&6; }
+$as_echo "$ac_cv_search_getrrsetbyname" >&6; }
 ac_res=$ac_cv_search_getrrsetbyname
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_GETRRSETBYNAME 1" >>confdefs.h
-#define HAVE_GETRRSETBYNAME 1
-_ACEOF
 else
                # Needed by our getrrsetbyname()
-                { echo "$as_me:$LINENO: checking for library containing res_query" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing res_query" >&5
-echo $ECHO_N "checking for library containing res_query... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing res_query... " >&6; }
-if test "${ac_cv_search_res_query+set}" = set; then
+if ${ac_cv_search_res_query+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -26959,65 +14238,38 @@ for ac_lib in '' resolv; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_res_query=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_res_query+:} false; then :
-  if test "${ac_cv_search_res_query+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_res_query+set}" = set; then
+if ${ac_cv_search_res_query+:} false; then :
-  :
 else
  ac_cv_search_res_query=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_res_query" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_res_query" >&5
-echo "${ECHO_T}$ac_cv_search_res_query" >&6; }
+$as_echo "$ac_cv_search_res_query" >&6; }
 ac_res=$ac_cv_search_res_query
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
 fi
-                { echo "$as_me:$LINENO: checking for library containing dn_expand" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dn_expand" >&5
-echo $ECHO_N "checking for library containing dn_expand... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing dn_expand... " >&6; }
-if test "${ac_cv_search_dn_expand+set}" = set; then
+if ${ac_cv_search_dn_expand+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -27042,485 +14294,137 @@ for ac_lib in '' resolv; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_dn_expand=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_dn_expand+:} false; then :
-  if test "${ac_cv_search_dn_expand+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_dn_expand+set}" = set; then
+if ${ac_cv_search_dn_expand+:} false; then :
-  :
 else
  ac_cv_search_dn_expand=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_dn_expand" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dn_expand" >&5
-echo "${ECHO_T}$ac_cv_search_dn_expand" >&6; }
+$as_echo "$ac_cv_search_dn_expand" >&6; }
 ac_res=$ac_cv_search_dn_expand
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
 fi
-                { echo "$as_me:$LINENO: checking if res_query will link" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if res_query will link" >&5
-echo $ECHO_N "checking if res_query will link... $ECHO_C" >&6; }
+$as_echo_n "checking if res_query will link... " >&6; }
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
-#include "confdefs.h"
 #include <sys/types.h>
 #include <netinet/in.h>
 #include <arpa/nameser.h>
 #include <netdb.h>
 #include <resolv.h>
-int main()
+int
+main ()
 {
        res_query (0, 0, 0, 0, 0);
-        return 0;
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-        { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                    saved_LIBS="$LIBS"
                    LIBS="$LIBS -lresolv"
-                    { echo "$as_me:$LINENO: checking for res_query in -lresolv" >&5
+                    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for res_query in -lresolv" >&5
-echo $ECHO_N "checking for res_query in -lresolv... $ECHO_C" >&6; }
+$as_echo_n "checking for res_query in -lresolv... " >&6; }
-                    cat >conftest.$ac_ext <<_ACEOF
+                    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
-#include "confdefs.h"
 #include <sys/types.h>
 #include <netinet/in.h>
 #include <arpa/nameser.h>
 #include <netdb.h>
 #include <resolv.h>
-int main()
-{
-        res_query (0, 0, 0, 0, 0);
-        return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        LIBS="$saved_LIBS"
-                         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-for ac_func in _getshort _getlong
-do
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
 int
 main ()
 {
-return $ac_func ();
+        res_query (0, 0, 0, 0, 0);
  ;
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
 else
-  echo "$as_me: failed program was:" >&5
+  LIBS="$saved_LIBS"
-sed 's/^/| /' conftest.$ac_ext >&5
+                         { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
-        eval "$as_ac_var=no"
 fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
 fi
-ac_res=`eval echo '${'$as_ac_var'}'`
+rm -f core conftest.err conftest.$ac_objext \
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
+    conftest$ac_exeext conftest.$ac_ext
-echo "${ECHO_T}$ac_res" >&6; }
+                for ac_func in _getshort _getlong
-if test `eval echo '${'$as_ac_var'}'` = yes; then
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
-                { echo "$as_me:$LINENO: checking whether _getshort is declared" >&5
+                ac_fn_c_check_decl "$LINENO" "_getshort" "ac_cv_have_decl__getshort" "#include <sys/types.h>
-echo $ECHO_N "checking whether _getshort is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl__getshort+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <sys/types.h>
                    #include <arpa/nameser.h>
+"
-int
+if test "x$ac_cv_have_decl__getshort" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef _getshort
-  (void) _getshort;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl__getshort=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl__getshort=no
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl__getshort" >&5
-echo "${ECHO_T}$ac_cv_have_decl__getshort" >&6; }
-if test $ac_cv_have_decl__getshort = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL__GETSHORT 1
+#define HAVE_DECL__GETSHORT $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL__GETSHORT 0
-_ACEOF
-fi
-{ echo "$as_me:$LINENO: checking whether _getlong is declared" >&5
-echo $ECHO_N "checking whether _getlong is declared... $ECHO_C" >&6; }
-if test "${ac_cv_have_decl__getlong+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
 _ACEOF
-cat confdefs.h >>conftest.$ac_ext
+ac_fn_c_check_decl "$LINENO" "_getlong" "ac_cv_have_decl__getlong" "#include <sys/types.h>
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <sys/types.h>
                    #include <arpa/nameser.h>
+"
-int
+if test "x$ac_cv_have_decl__getlong" = xyes; then :
-main ()
+  ac_have_decl=1
-{
-#ifndef _getlong
-  (void) _getlong;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl__getlong=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_have_decl=0
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl__getlong=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl__getlong" >&5
-echo "${ECHO_T}$ac_cv_have_decl__getlong" >&6; }
-if test $ac_cv_have_decl__getlong = yes; then
 cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL__GETLONG 1
+#define HAVE_DECL__GETLONG $ac_have_decl
-_ACEOF
-else
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL__GETLONG 0
 _ACEOF
+                ac_fn_c_check_member "$LINENO" "HEADER" "ad" "ac_cv_member_HEADER_ad" "#include <arpa/nameser.h>
+"
+if test "x$ac_cv_member_HEADER_ad" = xyes; then :
-fi
+$as_echo "#define HAVE_HEADER_AD 1" >>confdefs.h
-                { echo "$as_me:$LINENO: checking for HEADER.ad" >&5
-echo $ECHO_N "checking for HEADER.ad... $ECHO_C" >&6; }
-if test "${ac_cv_member_HEADER_ad+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <arpa/nameser.h>
-int
-main ()
-{
-static HEADER ac_aggr;
-if (ac_aggr.ad)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_HEADER_ad=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <arpa/nameser.h>
-int
-main ()
-{
-static HEADER ac_aggr;
-if (sizeof ac_aggr.ad)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_member_HEADER_ad=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_member_HEADER_ad=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_member_HEADER_ad" >&5
-echo "${ECHO_T}$ac_cv_member_HEADER_ad" >&6; }
-if test $ac_cv_member_HEADER_ad = yes; then
-cat >>confdefs.h <<\_ACEOF
-#define HAVE_HEADER_AD 1
-_ACEOF
 fi
@@ -27528,9 +14432,10 @@ fi
 fi
-{ echo "$as_me:$LINENO: checking if struct __res_state _res is an extern" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if struct __res_state _res is an extern" >&5
-echo $ECHO_N "checking if struct __res_state _res is an extern... $ECHO_C" >&6; }
+$as_echo_n "checking if struct __res_state _res is an extern... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
 #include <stdio.h>
 #if HAVE_SYS_TYPES_H
@@ -27540,212 +14445,58 @@ cat >conftest.$ac_ext <<_ACEOF
 #include <arpa/nameser.h>
 #include <resolv.h>
 extern struct __res_state _res;
-int main() { return 0; }
-_ACEOF
+int
-rm -f conftest.$ac_objext conftest$ac_exeext
+main ()
-if { (ac_try="$ac_link"
+{
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+  ;
-#define HAVE__RES_EXTERN 1
+  return 0;
+}
 _ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+$as_echo "#define HAVE__RES_EXTERN 1" >>confdefs.h
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-         { echo "$as_me:$LINENO: result: no" >&5
+else
-echo "${ECHO_T}no" >&6; }
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 # Check whether user wants SELinux support
 SELINUX_MSG="no"
 LIBSELINUX=""
 # Check whether --with-selinux was given.
-if test "${with_selinux+set}" = set; then
+if test "${with_selinux+set}" = set; then :
  withval=$with_selinux;  if test "x$withval" != "xno" ; then
                save_LIBS="$LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define WITH_SELINUX 1" >>confdefs.h
-#define WITH_SELINUX 1
-_ACEOF
                SELINUX_MSG="yes"
-                if test "${ac_cv_header_selinux_selinux_h+set}" = set; then
+                ac_fn_c_check_header_mongrel "$LINENO" "selinux/selinux.h" "ac_cv_header_selinux_selinux_h" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for selinux/selinux.h" >&5
+if test "x$ac_cv_header_selinux_selinux_h" = xyes; then :
-echo $ECHO_N "checking for selinux/selinux.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_selinux_selinux_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_selinux_selinux_h" >&5
-echo "${ECHO_T}$ac_cv_header_selinux_selinux_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking selinux/selinux.h usability" >&5
-echo $ECHO_N "checking selinux/selinux.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <selinux/selinux.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking selinux/selinux.h presence" >&5
-echo $ECHO_N "checking selinux/selinux.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <selinux/selinux.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: selinux/selinux.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: selinux/selinux.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: selinux/selinux.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: selinux/selinux.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: selinux/selinux.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: selinux/selinux.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: selinux/selinux.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: selinux/selinux.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: selinux/selinux.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for selinux/selinux.h" >&5
-echo $ECHO_N "checking for selinux/selinux.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_selinux_selinux_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_selinux_selinux_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_selinux_selinux_h" >&5
-echo "${ECHO_T}$ac_cv_header_selinux_selinux_h" >&6; }
-fi
-if test $ac_cv_header_selinux_selinux_h = yes; then
-  :
 else
-  { { echo "$as_me:$LINENO: error: SELinux support requires selinux.h header" >&5
+  as_fn_error $? "SELinux support requires selinux.h header" "$LINENO" 5
-echo "$as_me: error: SELinux support requires selinux.h header" >&2;}
-   { (exit 1); exit 1; }; }
 fi
-                { echo "$as_me:$LINENO: checking for setexeccon in -lselinux" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setexeccon in -lselinux" >&5
-echo $ECHO_N "checking for setexeccon in -lselinux... $ECHO_C" >&6; }
+$as_echo_n "checking for setexeccon in -lselinux... " >&6; }
-if test "${ac_cv_lib_selinux_setexeccon+set}" = set; then
+if ${ac_cv_lib_selinux_setexeccon+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lselinux  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -27763,140 +14514,34 @@ return setexeccon ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_selinux_setexeccon=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_selinux_setexeccon=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_selinux_setexeccon=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_selinux_setexeccon" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_selinux_setexeccon" >&5
-echo "${ECHO_T}$ac_cv_lib_selinux_setexeccon" >&6; }
+$as_echo "$ac_cv_lib_selinux_setexeccon" >&6; }
-if test $ac_cv_lib_selinux_setexeccon = yes; then
+if test "x$ac_cv_lib_selinux_setexeccon" = xyes; then :
   LIBSELINUX="-lselinux"
                          LIBS="$LIBS -lselinux"
 else
-  { { echo "$as_me:$LINENO: error: SELinux support requires libselinux library" >&5
+  as_fn_error $? "SELinux support requires libselinux library" "$LINENO" 5
-echo "$as_me: error: SELinux support requires libselinux library" >&2;}
-   { (exit 1); exit 1; }; }
 fi
                SSHLIBS="$SSHLIBS $LIBSELINUX"
                SSHDLIBS="$SSHDLIBS $LIBSELINUX"
+                for ac_func in getseuserbyname get_default_context_with_level
+do :
-for ac_func in getseuserbyname get_default_context_with_level
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-do
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-{ echo "$as_me:$LINENO: checking for $ac_func" >&5
-echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; }
-if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-/* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $ac_func innocuous_$ac_func
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $ac_func (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-#undef $ac_func
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $ac_func ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$ac_func || defined __stub___$ac_func
-choke me
-#endif
-int
-main ()
-{
-return $ac_func ();
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
-  eval "$as_ac_var=yes"
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        eval "$as_ac_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
-      conftest$ac_exeext conftest.$ac_ext
-fi
-ac_res=`eval echo '${'$as_ac_var'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-if test `eval echo '${'$as_ac_var'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_func" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
 _ACEOF
 fi
@@ -27914,7 +14559,7 @@ fi
 KRB5_MSG="no"
 # Check whether --with-kerberos5 was given.
-if test "${with_kerberos5+set}" = set; then
+if test "${with_kerberos5+set}" = set; then :
  withval=$with_kerberos5;  if test "x$withval" != "xno" ; then
                if test "x$withval" = "xyes" ; then
                        KRB5ROOT="/usr/local"
@@ -27923,18 +14568,16 @@ if test "${with_kerberos5+set}" = set; then
                fi
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define KRB5 1" >>confdefs.h
-#define KRB5 1
-_ACEOF
                KRB5_MSG="yes"
                # Extract the first word of "krb5-config", so it can be a program name with args.
 set dummy krb5-config; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_KRB5CONF+set}" = set; then
+if ${ac_cv_path_KRB5CONF+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $KRB5CONF in
  [\\/]* | ?:[\\/]*)
@@ -27947,14 +14590,14 @@ for as_dir in $as_dummy
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_KRB5CONF="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  test -z "$ac_cv_path_KRB5CONF" && ac_cv_path_KRB5CONF="$KRB5ROOT/bin/krb5-config"
@@ -27963,44 +14606,39 @@ esac
 fi
 KRB5CONF=$ac_cv_path_KRB5CONF
 if test -n "$KRB5CONF"; then
-  { echo "$as_me:$LINENO: result: $KRB5CONF" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $KRB5CONF" >&5
-echo "${ECHO_T}$KRB5CONF" >&6; }
+$as_echo "$KRB5CONF" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
                if test -x $KRB5CONF ; then
-                        { echo "$as_me:$LINENO: checking for gssapi support" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gssapi support" >&5
-echo $ECHO_N "checking for gssapi support... $ECHO_C" >&6; }
+$as_echo_n "checking for gssapi support... " >&6; }
                        if $KRB5CONF | grep gssapi >/dev/null ; then
-                                { echo "$as_me:$LINENO: result: yes" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define GSSAPI 1" >>confdefs.h
-#define GSSAPI 1
-_ACEOF
                                k5confopts=gssapi
                        else
-                                { echo "$as_me:$LINENO: result: no" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                                k5confopts=""
                        fi
                        K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
                        K5LIBS="`$KRB5CONF --libs $k5confopts`"
                        CPPFLAGS="$CPPFLAGS $K5CFLAGS"
-                        { echo "$as_me:$LINENO: checking whether we are using Heimdal" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using Heimdal" >&5
-echo $ECHO_N "checking whether we are using Heimdal... $ECHO_C" >&6; }
+$as_echo_n "checking whether we are using Heimdal... " >&6; }
-                        cat >conftest.$ac_ext <<_ACEOF
+                        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <krb5.h>
 int
 main ()
 {
@@ -28009,52 +14647,27 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HEIMDAL 1" >>confdefs.h
-#define HEIMDAL 1
-_ACEOF
 else
-  echo "$as_me: failed program was:" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-        { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
                else
                        CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
                        LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
-                        { echo "$as_me:$LINENO: checking whether we are using Heimdal" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using Heimdal" >&5
-echo $ECHO_N "checking whether we are using Heimdal... $ECHO_C" >&6; }
+$as_echo_n "checking whether we are using Heimdal... " >&6; }
-                        cat >conftest.$ac_ext <<_ACEOF
+                        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <krb5.h>
 int
 main ()
 {
@@ -28063,43 +14676,21 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+                                         $as_echo "#define HEIMDAL 1" >>confdefs.h
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
-                                         cat >>confdefs.h <<\_ACEOF
-#define HEIMDAL 1
-_ACEOF
                                         K5LIBS="-lkrb5"
                                         K5LIBS="$K5LIBS -lcom_err -lasn1"
-                                         { echo "$as_me:$LINENO: checking for net_write in -lroken" >&5
+                                         { $as_echo "$as_me:${as_lineno-$LINENO}: checking for net_write in -lroken" >&5
-echo $ECHO_N "checking for net_write in -lroken... $ECHO_C" >&6; }
+$as_echo_n "checking for net_write in -lroken... " >&6; }
-if test "${ac_cv_lib_roken_net_write+set}" = set; then
+if ${ac_cv_lib_roken_net_write+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lroken  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -28117,54 +14708,29 @@ return net_write ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_roken_net_write=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_roken_net_write=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_roken_net_write=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_roken_net_write" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_roken_net_write" >&5
-echo "${ECHO_T}$ac_cv_lib_roken_net_write" >&6; }
+$as_echo "$ac_cv_lib_roken_net_write" >&6; }
-if test $ac_cv_lib_roken_net_write = yes; then
+if test "x$ac_cv_lib_roken_net_write" = xyes; then :
  K5LIBS="$K5LIBS -lroken"
 fi
-                                         { echo "$as_me:$LINENO: checking for des_cbc_encrypt in -ldes" >&5
+                                         { $as_echo "$as_me:${as_lineno-$LINENO}: checking for des_cbc_encrypt in -ldes" >&5
-echo $ECHO_N "checking for des_cbc_encrypt in -ldes... $ECHO_C" >&6; }
+$as_echo_n "checking for des_cbc_encrypt in -ldes... " >&6; }
-if test "${ac_cv_lib_des_des_cbc_encrypt+set}" = set; then
+if ${ac_cv_lib_des_des_cbc_encrypt+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-ldes  $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -28182,66 +14748,37 @@ return des_cbc_encrypt ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_des_des_cbc_encrypt=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_des_des_cbc_encrypt=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_des_des_cbc_encrypt=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_des_des_cbc_encrypt" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_des_des_cbc_encrypt" >&5
-echo "${ECHO_T}$ac_cv_lib_des_des_cbc_encrypt" >&6; }
+$as_echo "$ac_cv_lib_des_des_cbc_encrypt" >&6; }
-if test $ac_cv_lib_des_des_cbc_encrypt = yes; then
+if test "x$ac_cv_lib_des_des_cbc_encrypt" = xyes; then :
  K5LIBS="$K5LIBS -ldes"
 fi
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
                                         K5LIBS="-lkrb5 -lk5crypto -lcom_err"
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-                        { echo "$as_me:$LINENO: checking for library containing dn_expand" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dn_expand" >&5
-echo $ECHO_N "checking for library containing dn_expand... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing dn_expand... " >&6; }
-if test "${ac_cv_search_dn_expand+set}" = set; then
+if ${ac_cv_search_dn_expand+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -28266,67 +14803,40 @@ for ac_lib in '' resolv; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_dn_expand=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_dn_expand+:} false; then :
-  if test "${ac_cv_search_dn_expand+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_dn_expand+set}" = set; then
+if ${ac_cv_search_dn_expand+:} false; then :
-  :
 else
  ac_cv_search_dn_expand=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_dn_expand" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dn_expand" >&5
-echo "${ECHO_T}$ac_cv_search_dn_expand" >&6; }
+$as_echo "$ac_cv_search_dn_expand" >&6; }
 ac_res=$ac_cv_search_dn_expand
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
 fi
-                        { echo "$as_me:$LINENO: checking for gss_init_sec_context in -lgssapi_krb5" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gss_init_sec_context in -lgssapi_krb5" >&5
-echo $ECHO_N "checking for gss_init_sec_context in -lgssapi_krb5... $ECHO_C" >&6; }
+$as_echo_n "checking for gss_init_sec_context in -lgssapi_krb5... " >&6; }
-if test "${ac_cv_lib_gssapi_krb5_gss_init_sec_context+set}" = set; then
+if ${ac_cv_lib_gssapi_krb5_gss_init_sec_context+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lgssapi_krb5 $K5LIBS $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -28344,57 +14854,30 @@ return gss_init_sec_context ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_gssapi_krb5_gss_init_sec_context=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_gssapi_krb5_gss_init_sec_context=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_gssapi_krb5_gss_init_sec_context=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&5
-echo "${ECHO_T}$ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&6; }
+$as_echo "$ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&6; }
-if test $ac_cv_lib_gssapi_krb5_gss_init_sec_context = yes; then
+if test "x$ac_cv_lib_gssapi_krb5_gss_init_sec_context" = xyes; then :
-   cat >>confdefs.h <<\_ACEOF
+   $as_echo "#define GSSAPI 1" >>confdefs.h
-#define GSSAPI 1
-_ACEOF
                                  K5LIBS="-lgssapi_krb5 $K5LIBS"
 else
-   { echo "$as_me:$LINENO: checking for gss_init_sec_context in -lgssapi" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gss_init_sec_context in -lgssapi" >&5
-echo $ECHO_N "checking for gss_init_sec_context in -lgssapi... $ECHO_C" >&6; }
+$as_echo_n "checking for gss_init_sec_context in -lgssapi... " >&6; }
-if test "${ac_cv_lib_gssapi_gss_init_sec_context+set}" = set; then
+if ${ac_cv_lib_gssapi_gss_init_sec_context+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_check_lib_save_LIBS=$LIBS
 LIBS="-lgssapi $K5LIBS $LIBS"
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -28412,332 +14895,47 @@ return gss_init_sec_context ();
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext conftest$ac_exeext
+if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_lib_gssapi_gss_init_sec_context=yes
 else
-  echo "$as_me: failed program was:" >&5
+  ac_cv_lib_gssapi_gss_init_sec_context=no
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_lib_gssapi_gss_init_sec_context=no
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext conftest.$ac_ext
-      conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_lib_gssapi_gss_init_sec_context" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gssapi_gss_init_sec_context" >&5
-echo "${ECHO_T}$ac_cv_lib_gssapi_gss_init_sec_context" >&6; }
+$as_echo "$ac_cv_lib_gssapi_gss_init_sec_context" >&6; }
-if test $ac_cv_lib_gssapi_gss_init_sec_context = yes; then
+if test "x$ac_cv_lib_gssapi_gss_init_sec_context" = xyes; then :
-   cat >>confdefs.h <<\_ACEOF
+   $as_echo "#define GSSAPI 1" >>confdefs.h
-#define GSSAPI 1
-_ACEOF
                                          K5LIBS="-lgssapi $K5LIBS"
 else
-  { echo "$as_me:$LINENO: WARNING: Cannot find any suitable gss-api library - build may fail" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot find any suitable gss-api library - build may fail" >&5
-echo "$as_me: WARNING: Cannot find any suitable gss-api library - build may fail" >&2;}
+$as_echo "$as_me: WARNING: Cannot find any suitable gss-api library - build may fail" >&2;}
 fi
 fi
-                        if test "${ac_cv_header_gssapi_h+set}" = set; then
+                        ac_fn_c_check_header_mongrel "$LINENO" "gssapi.h" "ac_cv_header_gssapi_h" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for gssapi.h" >&5
+if test "x$ac_cv_header_gssapi_h" = xyes; then :
-echo $ECHO_N "checking for gssapi.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_gssapi_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_gssapi_h" >&5
-echo "${ECHO_T}$ac_cv_header_gssapi_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking gssapi.h usability" >&5
-echo $ECHO_N "checking gssapi.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <gssapi.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking gssapi.h presence" >&5
-echo $ECHO_N "checking gssapi.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <gssapi.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: gssapi.h: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: gssapi.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: gssapi.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: gssapi.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: gssapi.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: gssapi.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: gssapi.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: gssapi.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: gssapi.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: gssapi.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for gssapi.h" >&5
-echo $ECHO_N "checking for gssapi.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_gssapi_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_gssapi_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_gssapi_h" >&5
-echo "${ECHO_T}$ac_cv_header_gssapi_h" >&6; }
-fi
-if test $ac_cv_header_gssapi_h = yes; then
-  :
 else
   unset ac_cv_header_gssapi_h
                                  CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
+                                  for ac_header in gssapi.h
-for ac_header in gssapi.h
+do :
-do
+  ac_fn_c_check_header_mongrel "$LINENO" "gssapi.h" "ac_cv_header_gssapi_h" "$ac_includes_default"
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+if test "x$ac_cv_header_gssapi_h" = xyes; then :
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define HAVE_GSSAPI_H 1
 _ACEOF
 else
-  { echo "$as_me:$LINENO: WARNING: Cannot find any suitable gss-api header - build may fail" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot find any suitable gss-api header - build may fail" >&5
-echo "$as_me: WARNING: Cannot find any suitable gss-api header - build may fail" >&2;}
+$as_echo "$as_me: WARNING: Cannot find any suitable gss-api header - build may fail" >&2;}
 fi
@@ -28751,138 +14949,9 @@ fi
                        oldCPP="$CPPFLAGS"
                        CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
-                        if test "${ac_cv_header_gssapi_krb5_h+set}" = set; then
+                        ac_fn_c_check_header_mongrel "$LINENO" "gssapi_krb5.h" "ac_cv_header_gssapi_krb5_h" "$ac_includes_default"
-  { echo "$as_me:$LINENO: checking for gssapi_krb5.h" >&5
+if test "x$ac_cv_header_gssapi_krb5_h" = xyes; then :
-echo $ECHO_N "checking for gssapi_krb5.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_gssapi_krb5_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_gssapi_krb5_h" >&5
-echo "${ECHO_T}$ac_cv_header_gssapi_krb5_h" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking gssapi_krb5.h usability" >&5
-echo $ECHO_N "checking gssapi_krb5.h usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <gssapi_krb5.h>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking gssapi_krb5.h presence" >&5
-echo $ECHO_N "checking gssapi_krb5.h presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <gssapi_krb5.h>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: gssapi_krb5.h: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: gssapi_krb5.h: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h: present but cannot be compiled" >&5
-echo "$as_me: WARNING: gssapi_krb5.h: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: gssapi_krb5.h:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: gssapi_krb5.h: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: gssapi_krb5.h:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: gssapi_krb5.h: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: gssapi_krb5.h: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: gssapi_krb5.h: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for gssapi_krb5.h" >&5
-echo $ECHO_N "checking for gssapi_krb5.h... $ECHO_C" >&6; }
-if test "${ac_cv_header_gssapi_krb5_h+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  ac_cv_header_gssapi_krb5_h=$ac_header_preproc
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_header_gssapi_krb5_h" >&5
-echo "${ECHO_T}$ac_cv_header_gssapi_krb5_h" >&6; }
-fi
-if test $ac_cv_header_gssapi_krb5_h = yes; then
-  :
 else
   CPPFLAGS="$oldCPP"
 fi
@@ -28897,438 +14966,39 @@ fi
                        blibpath="$blibpath:${KRB5ROOT}/lib"
                fi
+                for ac_header in gssapi.h gssapi/gssapi.h
+do :
-for ac_header in gssapi.h gssapi/gssapi.h
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-do
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
+                for ac_header in gssapi_krb5.h gssapi/gssapi_krb5.h
+do :
-for ac_header in gssapi_krb5.h gssapi/gssapi_krb5.h
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-do
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
 _ACEOF
 fi
 done
+                for ac_header in gssapi_generic.h gssapi/gssapi_generic.h
+do :
-for ac_header in gssapi_generic.h gssapi/gssapi_generic.h
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-do
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh`
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  { echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ echo "$as_me:$LINENO: checking $ac_header usability" >&5
-echo $ECHO_N "checking $ac_header usability... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-#include <$ac_header>
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_header_compiler=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_compiler" >&5
-echo "${ECHO_T}$ac_header_compiler" >&6; }
-# Is the header present?
-{ echo "$as_me:$LINENO: checking $ac_header presence" >&5
-echo $ECHO_N "checking $ac_header presence... $ECHO_C" >&6; }
-cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-#include <$ac_header>
-_ACEOF
-if { (ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } >/dev/null && {
-         test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       }; then
-  ac_header_preproc=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.$ac_ext
-{ echo "$as_me:$LINENO: result: $ac_header_preproc" >&5
-echo "${ECHO_T}$ac_header_preproc" >&6; }
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in
-  yes:no: )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&5
-echo "$as_me: WARNING: $ac_header: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the compiler's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the compiler's result" >&2;}
-    ac_header_preproc=yes
-    ;;
-  no:yes:* )
-    { echo "$as_me:$LINENO: WARNING: $ac_header: present but cannot be compiled" >&5
-echo "$as_me: WARNING: $ac_header: present but cannot be compiled" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     check for missing prerequisite headers?" >&5
-echo "$as_me: WARNING: $ac_header:     check for missing prerequisite headers?" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: see the Autoconf documentation" >&5
-echo "$as_me: WARNING: $ac_header: see the Autoconf documentation" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&5
-echo "$as_me: WARNING: $ac_header:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: proceeding with the preprocessor's result" >&5
-echo "$as_me: WARNING: $ac_header: proceeding with the preprocessor's result" >&2;}
-    { echo "$as_me:$LINENO: WARNING: $ac_header: in the future, the compiler will take precedence" >&5
-echo "$as_me: WARNING: $ac_header: in the future, the compiler will take precedence" >&2;}
-    ( cat <<\_ASBOX
-## ------------------------------------------- ##
-## Report this to openssh-unix-dev@mindrot.org ##
-## ------------------------------------------- ##
-_ASBOX
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-{ echo "$as_me:$LINENO: checking for $ac_header" >&5
-echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6; }
-if { as_var=$as_ac_Header; eval "test \"\${$as_var+set}\" = set"; }; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  eval "$as_ac_Header=\$ac_header_preproc"
-fi
-ac_res=`eval echo '${'$as_ac_Header'}'`
-               { echo "$as_me:$LINENO: result: $ac_res" >&5
-echo "${ECHO_T}$ac_res" >&6; }
-fi
-if test `eval echo '${'$as_ac_Header'}'` = yes; then
  cat >>confdefs.h <<_ACEOF
-#define `echo "HAVE_$ac_header" | $as_tr_cpp` 1
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
 _ACEOF
 fi
@@ -29337,17 +15007,13 @@ done
                LIBS="$LIBS $K5LIBS"
-                { echo "$as_me:$LINENO: checking for library containing k_hasafs" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing k_hasafs" >&5
-echo $ECHO_N "checking for library containing k_hasafs... $ECHO_C" >&6; }
+$as_echo_n "checking for library containing k_hasafs... " >&6; }
-if test "${ac_cv_search_k_hasafs+set}" = set; then
+if ${ac_cv_search_k_hasafs+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  ac_func_search_save_LIBS=$LIBS
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* Override any GCC internal prototype to avoid an error.
@@ -29372,55 +15038,30 @@ for ac_lib in '' kafs; do
    ac_res=-l$ac_lib
    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
  fi
-  rm -f conftest.$ac_objext conftest$ac_exeext
+  if ac_fn_c_try_link "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest$ac_exeext &&
-       $as_test_x conftest$ac_exeext; then
  ac_cv_search_k_hasafs=$ac_res
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
+rm -f core conftest.err conftest.$ac_objext \
-rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \
+    conftest$ac_exeext
-      conftest$ac_exeext
+  if ${ac_cv_search_k_hasafs+:} false; then :
-  if test "${ac_cv_search_k_hasafs+set}" = set; then
  break
 fi
 done
-if test "${ac_cv_search_k_hasafs+set}" = set; then
+if ${ac_cv_search_k_hasafs+:} false; then :
-  :
 else
  ac_cv_search_k_hasafs=no
 fi
 rm conftest.$ac_ext
 LIBS=$ac_func_search_save_LIBS
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_search_k_hasafs" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_k_hasafs" >&5
-echo "${ECHO_T}$ac_cv_search_k_hasafs" >&6; }
+$as_echo "$ac_cv_search_k_hasafs" >&6; }
 ac_res=$ac_cv_search_k_hasafs
-if test "$ac_res" != no; then
+if test "$ac_res" != no; then :
  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define USE_AFS 1" >>confdefs.h
-#define USE_AFS 1
-_ACEOF
 fi
@@ -29435,7 +15076,7 @@ fi
 PRIVSEP_PATH=/var/empty
 # Check whether --with-privsep-path was given.
-if test "${with_privsep_path+set}" = set; then
+if test "${with_privsep_path+set}" = set; then :
  withval=$with_privsep_path;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -29449,7 +15090,7 @@ fi
 # Check whether --with-xauth was given.
-if test "${with_xauth+set}" = set; then
+if test "${with_xauth+set}" = set; then :
  withval=$with_xauth;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -29465,10 +15106,10 @@ else
                TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
                # Extract the first word of "xauth", so it can be a program name with args.
 set dummy xauth; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_xauth_path+set}" = set; then
+if ${ac_cv_path_xauth_path+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $xauth_path in
  [\\/]* | ?:[\\/]*)
@@ -29480,14 +15121,14 @@ for as_dir in $TestPath
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_xauth_path="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -29495,11 +15136,11 @@ esac
 fi
 xauth_path=$ac_cv_path_xauth_path
 if test -n "$xauth_path"; then
-  { echo "$as_me:$LINENO: result: $xauth_path" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $xauth_path" >&5
-echo "${ECHO_T}$xauth_path" >&6; }
+$as_echo "$xauth_path" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -29513,7 +15154,7 @@ fi
 STRIP_OPT=-s
 # Check whether --enable-strip was given.
-if test "${enable_strip+set}" = set; then
+if test "${enable_strip+set}" = set; then :
  enableval=$enable_strip;
                if test "x$enableval" = "xno" ; then
                        STRIP_OPT=
@@ -29537,41 +15178,145 @@ _ACEOF
 fi
-# Check for mail directory (last resort if we cannot get it from headers)
+# Check for mail directory
-if test ! -z "$MAIL" ; then
-        maildir=`dirname $MAIL`
+# Check whether --with-maildir was given.
+if test "${with_maildir+set}" = set; then :
+  withval=$with_maildir;
+        if test "X$withval" != X  &&  test "x$withval" != xno  &&  \
+            test "x${withval}" != xyes; then
 cat >>confdefs.h <<_ACEOF
+#define MAIL_DIRECTORY "$withval"
+_ACEOF
+            fi
+else
+        if test "X$maildir" != "X"; then
+            cat >>confdefs.h <<_ACEOF
+#define MAIL_DIRECTORY "$maildir"
+_ACEOF
+        else
+            { $as_echo "$as_me:${as_lineno-$LINENO}: checking Discovering system mail directory" >&5
+$as_echo_n "checking Discovering system mail directory... " >&6; }
+            if test "$cross_compiling" = yes; then :
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: use --with-maildir=/path/to/mail" >&5
+$as_echo "$as_me: WARNING: cross compiling: use --with-maildir=/path/to/mail" >&2;}
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdio.h>
+#include <string.h>
+#ifdef HAVE_PATHS_H
+#include <paths.h>
+#endif
+#ifdef HAVE_MAILLOCK_H
+#include <maillock.h>
+#endif
+#define DATA "conftest.maildir"
+int
+main ()
+{
+        FILE *fd;
+        int rc;
+        fd = fopen(DATA,"w");
+        if(fd == NULL)
+                exit(1);
+#if defined (_PATH_MAILDIR)
+        if ((rc = fprintf(fd ,"_PATH_MAILDIR:%s\n", _PATH_MAILDIR)) <0)
+                exit(1);
+#elif defined (MAILDIR)
+        if ((rc = fprintf(fd ,"MAILDIR:%s\n", MAILDIR)) <0)
+                exit(1);
+#elif defined (_PATH_MAIL)
+        if ((rc = fprintf(fd ,"_PATH_MAIL:%s\n", _PATH_MAIL)) <0)
+                exit(1);
+#else
+        exit (2);
+#endif
+        exit(0);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+                    maildir_what=`awk -F: '{print $1}' conftest.maildir`
+                    maildir=`awk -F: '{print $2}' conftest.maildir \
+                        | sed 's|/$||'`
+                    { $as_echo "$as_me:${as_lineno-$LINENO}: result: Using: $maildir from $maildir_what" >&5
+$as_echo "Using: $maildir from $maildir_what" >&6; }
+                    if test "x$maildir_what" != "x_PATH_MAILDIR"; then
+                        cat >>confdefs.h <<_ACEOF
 #define MAIL_DIRECTORY "$maildir"
 _ACEOF
+                    fi
+else
+                    if test "X$ac_status" = "X2";then
+# our test program didn't find it. Default to /var/spool/mail
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: Using: default value of /var/spool/mail" >&5
+$as_echo "Using: default value of /var/spool/mail" >&6; }
+                        cat >>confdefs.h <<_ACEOF
+#define MAIL_DIRECTORY "/var/spool/mail"
+_ACEOF
+                     else
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: *** not found ***" >&5
+$as_echo "*** not found ***" >&6; }
+                     fi
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
+        fi
+fi
+ # maildir
 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
-        { echo "$as_me:$LINENO: WARNING: cross compiling: Disabling /dev/ptmx test" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Disabling /dev/ptmx test" >&5
-echo "$as_me: WARNING: cross compiling: Disabling /dev/ptmx test" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: Disabling /dev/ptmx test" >&2;}
        disable_ptmx_check=yes
 fi
 if test -z "$no_dev_ptmx" ; then
        if test "x$disable_ptmx_check" != "xyes" ; then
-                { echo "$as_me:$LINENO: checking for \"/dev/ptmx\"" >&5
+                as_ac_File=`$as_echo "ac_cv_file_"/dev/ptmx"" | $as_tr_sh`
-echo $ECHO_N "checking for \"/dev/ptmx\"... $ECHO_C" >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for \"/dev/ptmx\"" >&5
-if test "${ac_cv_file___dev_ptmx_+set}" = set; then
+$as_echo_n "checking for \"/dev/ptmx\"... " >&6; }
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+if eval \${$as_ac_File+:} false; then :
+  $as_echo_n "(cached) " >&6
 else
  test "$cross_compiling" = yes &&
-  { { echo "$as_me:$LINENO: error: cannot check for file existence when cross compiling" >&5
+  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-echo "$as_me: error: cannot check for file existence when cross compiling" >&2;}
-   { (exit 1); exit 1; }; }
 if test -r ""/dev/ptmx""; then
-  ac_cv_file___dev_ptmx_=yes
+  eval "$as_ac_File=yes"
 else
-  ac_cv_file___dev_ptmx_=no
+  eval "$as_ac_File=no"
 fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_file___dev_ptmx_" >&5
+eval ac_res=\$$as_ac_File
-echo "${ECHO_T}$ac_cv_file___dev_ptmx_" >&6; }
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-if test $ac_cv_file___dev_ptmx_ = yes; then
+$as_echo "$ac_res" >&6; }
+if eval test \"x\$"$as_ac_File"\" = x"yes"; then :
 cat >>confdefs.h <<_ACEOF
@@ -29587,24 +15332,24 @@ fi
 fi
 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
-        { echo "$as_me:$LINENO: checking for \"/dev/ptc\"" >&5
+        as_ac_File=`$as_echo "ac_cv_file_"/dev/ptc"" | $as_tr_sh`
-echo $ECHO_N "checking for \"/dev/ptc\"... $ECHO_C" >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for \"/dev/ptc\"" >&5
-if test "${ac_cv_file___dev_ptc_+set}" = set; then
+$as_echo_n "checking for \"/dev/ptc\"... " >&6; }
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+if eval \${$as_ac_File+:} false; then :
+  $as_echo_n "(cached) " >&6
 else
  test "$cross_compiling" = yes &&
-  { { echo "$as_me:$LINENO: error: cannot check for file existence when cross compiling" >&5
+  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-echo "$as_me: error: cannot check for file existence when cross compiling" >&2;}
-   { (exit 1); exit 1; }; }
 if test -r ""/dev/ptc""; then
-  ac_cv_file___dev_ptc_=yes
+  eval "$as_ac_File=yes"
 else
-  ac_cv_file___dev_ptc_=no
+  eval "$as_ac_File=no"
 fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_file___dev_ptc_" >&5
+eval ac_res=\$$as_ac_File
-echo "${ECHO_T}$ac_cv_file___dev_ptc_" >&6; }
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-if test $ac_cv_file___dev_ptc_ = yes; then
+$as_echo "$ac_res" >&6; }
+if eval test \"x\$"$as_ac_File"\" = x"yes"; then :
 cat >>confdefs.h <<_ACEOF
@@ -29617,23 +15362,21 @@ _ACEOF
 fi
 else
-        { echo "$as_me:$LINENO: WARNING: cross compiling: Disabling /dev/ptc test" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: Disabling /dev/ptc test" >&5
-echo "$as_me: WARNING: cross compiling: Disabling /dev/ptc test" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: Disabling /dev/ptc test" >&2;}
 fi
 # Options from here on. Some of these are preset by platform above
 # Check whether --with-mantype was given.
-if test "${with_mantype+set}" = set; then
+if test "${with_mantype+set}" = set; then :
  withval=$with_mantype;
                case "$withval" in
                man|cat|doc)
                        MANTYPE=$withval
                        ;;
                *)
-                        { { echo "$as_me:$LINENO: error: invalid man type: $withval" >&5
+                        as_fn_error $? "invalid man type: $withval" "$LINENO" 5
-echo "$as_me: error: invalid man type: $withval" >&2;}
-   { (exit 1); exit 1; }; }
                        ;;
                esac
@@ -29646,10 +15389,10 @@ if test -z "$MANTYPE"; then
 do
  # Extract the first word of "$ac_prog", so it can be a program name with args.
 set dummy $ac_prog; ac_word=$2
-{ echo "$as_me:$LINENO: checking for $ac_word" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6; }
+$as_echo_n "checking for $ac_word... " >&6; }
-if test "${ac_cv_path_NROFF+set}" = set; then
+if ${ac_cv_path_NROFF+:} false; then :
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+  $as_echo_n "(cached) " >&6
 else
  case $NROFF in
  [\\/]* | ?:[\\/]*)
@@ -29661,14 +15404,14 @@ for as_dir in $TestPath
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  for ac_exec_ext in '' $ac_executable_extensions; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
  if { test -f "$as_dir/$ac_word$ac_exec_ext" && $as_test_x "$as_dir/$ac_word$ac_exec_ext"; }; then
    ac_cv_path_NROFF="$as_dir/$ac_word$ac_exec_ext"
-    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
    break 2
  fi
 done
-done
+  done
 IFS=$as_save_IFS
  ;;
@@ -29676,11 +15419,11 @@ esac
 fi
 NROFF=$ac_cv_path_NROFF
 if test -n "$NROFF"; then
-  { echo "$as_me:$LINENO: result: $NROFF" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NROFF" >&5
-echo "${ECHO_T}$NROFF" >&6; }
+$as_echo "$NROFF" >&6; }
 else
-  { echo "$as_me:$LINENO: result: no" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
 fi
@@ -29708,13 +15451,11 @@ fi
 MD5_MSG="no"
 # Check whether --with-md5-passwords was given.
-if test "${with_md5_passwords+set}" = set; then
+if test "${with_md5_passwords+set}" = set; then :
  withval=$with_md5_passwords;
                if test "x$withval" != "xno" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_MD5_PASSWORDS 1" >>confdefs.h
-#define HAVE_MD5_PASSWORDS 1
-_ACEOF
                        MD5_MSG="yes"
                fi
@@ -29726,12 +15467,10 @@ fi
 # Whether to disable shadow password support
 # Check whether --with-shadow was given.
-if test "${with_shadow+set}" = set; then
+if test "${with_shadow+set}" = set; then :
  withval=$with_shadow;
                if test "x$withval" = "xno" ; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_SHADOW 1" >>confdefs.h
-#define DISABLE_SHADOW 1
-_ACEOF
                        disable_shadow=yes
                fi
@@ -29741,18 +15480,14 @@ fi
 if test -z "$disable_shadow" ; then
-        { echo "$as_me:$LINENO: checking if the systems has expire shadow information" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: checking if the systems has expire shadow information" >&5
-echo $ECHO_N "checking if the systems has expire shadow information... $ECHO_C" >&6; }
+$as_echo_n "checking if the systems has expire shadow information... " >&6; }
-        cat >conftest.$ac_ext <<_ACEOF
+        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
 #include <shadow.h>
-        struct spwd sp;
+struct spwd sp;
 int
 main ()
@@ -29762,45 +15497,20 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
   sp_expire_available=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
        if test "x$sp_expire_available" = "xyes" ; then
-                { echo "$as_me:$LINENO: result: yes" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAS_SHADOW_EXPIRE 1" >>confdefs.h
-#define HAS_SHADOW_EXPIRE 1
-_ACEOF
        else
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
        fi
 fi
@@ -29808,20 +15518,16 @@ fi
 if test ! -z "$IPADDR_IN_DISPLAY" ; then
        DISPLAY_HACK_MSG="yes"
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define IPADDR_IN_DISPLAY 1" >>confdefs.h
-#define IPADDR_IN_DISPLAY 1
-_ACEOF
 else
        DISPLAY_HACK_MSG="no"
 # Check whether --with-ipaddr-display was given.
-if test "${with_ipaddr_display+set}" = set; then
+if test "${with_ipaddr_display+set}" = set; then :
  withval=$with_ipaddr_display;
                        if test "x$withval" != "xno" ; then
-                                cat >>confdefs.h <<\_ACEOF
+                                $as_echo "#define IPADDR_IN_DISPLAY 1" >>confdefs.h
-#define IPADDR_IN_DISPLAY 1
-_ACEOF
                                DISPLAY_HACK_MSG="yes"
                        fi
@@ -29833,10 +15539,10 @@ fi
 # check for /etc/default/login and use it if present.
 # Check whether --enable-etc-default-login was given.
-if test "${enable_etc_default_login+set}" = set; then
+if test "${enable_etc_default_login+set}" = set; then :
  enableval=$enable_etc_default_login;  if test "x$enableval" = "xno"; then
-                { echo "$as_me:$LINENO: /etc/default/login handling disabled" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: /etc/default/login handling disabled" >&5
-echo "$as_me: /etc/default/login handling disabled" >&6;}
+$as_echo "$as_me: /etc/default/login handling disabled" >&6;}
                etc_default_login=no
          else
                etc_default_login=yes
@@ -29844,8 +15550,8 @@ echo "$as_me: /etc/default/login handling disabled" >&6;}
 else
   if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
          then
-                { echo "$as_me:$LINENO: WARNING: cross compiling: not checking /etc/default/login" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cross compiling: not checking /etc/default/login" >&5
-echo "$as_me: WARNING: cross compiling: not checking /etc/default/login" >&2;}
+$as_echo "$as_me: WARNING: cross compiling: not checking /etc/default/login" >&2;}
                etc_default_login=no
          else
                etc_default_login=yes
@@ -29855,32 +15561,30 @@ fi
 if test "x$etc_default_login" != "xno"; then
-        { echo "$as_me:$LINENO: checking for \"/etc/default/login\"" >&5
+        as_ac_File=`$as_echo "ac_cv_file_"/etc/default/login"" | $as_tr_sh`
-echo $ECHO_N "checking for \"/etc/default/login\"... $ECHO_C" >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for \"/etc/default/login\"" >&5
-if test "${ac_cv_file___etc_default_login_+set}" = set; then
+$as_echo_n "checking for \"/etc/default/login\"... " >&6; }
-  echo $ECHO_N "(cached) $ECHO_C" >&6
+if eval \${$as_ac_File+:} false; then :
+  $as_echo_n "(cached) " >&6
 else
  test "$cross_compiling" = yes &&
-  { { echo "$as_me:$LINENO: error: cannot check for file existence when cross compiling" >&5
+  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-echo "$as_me: error: cannot check for file existence when cross compiling" >&2;}
-   { (exit 1); exit 1; }; }
 if test -r ""/etc/default/login""; then
-  ac_cv_file___etc_default_login_=yes
+  eval "$as_ac_File=yes"
 else
-  ac_cv_file___etc_default_login_=no
+  eval "$as_ac_File=no"
 fi
 fi
-{ echo "$as_me:$LINENO: result: $ac_cv_file___etc_default_login_" >&5
+eval ac_res=\$$as_ac_File
-echo "${ECHO_T}$ac_cv_file___etc_default_login_" >&6; }
+               { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-if test $ac_cv_file___etc_default_login_ = yes; then
+$as_echo "$ac_res" >&6; }
+if eval test \"x\$"$as_ac_File"\" = x"yes"; then :
   external_path_file=/etc/default/login
 fi
        if test "x$external_path_file" = "x/etc/default/login"; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define HAVE_ETC_DEFAULT_LOGIN 1" >>confdefs.h
-#define HAVE_ETC_DEFAULT_LOGIN 1
-_ACEOF
        fi
 fi
@@ -29894,21 +15598,21 @@ fi
 SERVER_PATH_MSG="(default)"
 # Check whether --with-default-path was given.
-if test "${with_default_path+set}" = set; then
+if test "${with_default_path+set}" = set; then :
  withval=$with_default_path;
                if test "x$external_path_file" = "x/etc/login.conf" ; then
-                        { echo "$as_me:$LINENO: WARNING:
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:
 --with-default-path=PATH has no effect on this system.
 Edit /etc/login.conf instead." >&5
-echo "$as_me: WARNING:
+$as_echo "$as_me: WARNING:
 --with-default-path=PATH has no effect on this system.
 Edit /etc/login.conf instead." >&2;}
                elif test "x$withval" != "xno" ; then
                        if test ! -z "$external_path_file" ; then
-                                { echo "$as_me:$LINENO: WARNING:
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:
 --with-default-path=PATH will only be used if PATH is not defined in
 $external_path_file ." >&5
-echo "$as_me: WARNING:
+$as_echo "$as_me: WARNING:
 --with-default-path=PATH will only be used if PATH is not defined in
 $external_path_file ." >&2;}
                        fi
@@ -29918,26 +15622,22 @@ $external_path_file ." >&2;}
 else
   if test "x$external_path_file" = "x/etc/login.conf" ; then
-                { echo "$as_me:$LINENO: WARNING: Make sure the path to scp is in /etc/login.conf" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Make sure the path to scp is in /etc/login.conf" >&5
-echo "$as_me: WARNING: Make sure the path to scp is in /etc/login.conf" >&2;}
+$as_echo "$as_me: WARNING: Make sure the path to scp is in /etc/login.conf" >&2;}
        else
                if test ! -z "$external_path_file" ; then
-                        { echo "$as_me:$LINENO: WARNING:
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:
 If PATH is defined in $external_path_file, ensure the path to scp is included,
 otherwise scp will not work." >&5
-echo "$as_me: WARNING:
+$as_echo "$as_me: WARNING:
 If PATH is defined in $external_path_file, ensure the path to scp is included,
 otherwise scp will not work." >&2;}
                fi
-                if test "$cross_compiling" = yes; then
+                if test "$cross_compiling" = yes; then :
   user_path="/usr/bin:/bin:/usr/sbin:/sbin"
 else
-  cat >conftest.$ac_ext <<_ACEOF
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 /* find out what STDPATH is */
@@ -29957,8 +15657,10 @@ cat >>conftest.$ac_ext <<_ACEOF
 #include <fcntl.h>
 #define DATA "conftest.stdpath"
-main()
+int
+main ()
 {
        FILE *fd;
        int rc;
@@ -29970,42 +15672,20 @@ main()
                exit(1);
        exit(0);
-}
+  ;
+  return 0;
+}
 _ACEOF
-rm -f conftest$ac_exeext
+if ac_fn_c_try_run "$LINENO"; then :
-if { (ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && { ac_try='./conftest$ac_exeext'
-  { (case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); }; }; then
   user_path=`cat conftest.stdpath`
 else
-  echo "$as_me: program exited with status $ac_status" >&5
+   user_path="/usr/bin:/bin:/usr/sbin:/sbin"
-echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-( exit $ac_status )
- user_path="/usr/bin:/bin:/usr/sbin:/sbin"
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
 # make sure $bindir is in USER_PATH so scp will work
                t_bindir=`eval echo ${bindir}`
                case $t_bindir in
@@ -30019,8 +15699,8 @@ fi
                        echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
                        if test $? -ne 0  ; then
                                user_path=$user_path:$t_bindir
-                                { echo "$as_me:$LINENO: result: Adding $t_bindir to USER_PATH so scp will work" >&5
+                                { $as_echo "$as_me:${as_lineno-$LINENO}: result: Adding $t_bindir to USER_PATH so scp will work" >&5
-echo "${ECHO_T}Adding $t_bindir to USER_PATH so scp will work" >&6; }
+$as_echo "Adding $t_bindir to USER_PATH so scp will work" >&6; }
                        fi
                fi
        fi
@@ -30039,7 +15719,7 @@ fi
 # Set superuser path separately to user path
 # Check whether --with-superuser-path was given.
-if test "${with_superuser_path+set}" = set; then
+if test "${with_superuser_path+set}" = set; then :
  withval=$with_superuser_path;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
@@ -30056,40 +15736,36 @@ fi
-{ echo "$as_me:$LINENO: checking if we need to convert IPv4 in IPv6-mapped addresses" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if we need to convert IPv4 in IPv6-mapped addresses" >&5
-echo $ECHO_N "checking if we need to convert IPv4 in IPv6-mapped addresses... $ECHO_C" >&6; }
+$as_echo_n "checking if we need to convert IPv4 in IPv6-mapped addresses... " >&6; }
 IPV4_IN6_HACK_MSG="no"
 # Check whether --with-4in6 was given.
-if test "${with_4in6+set}" = set; then
+if test "${with_4in6+set}" = set; then :
  withval=$with_4in6;
                if test "x$withval" != "xno" ; then
-                        { echo "$as_me:$LINENO: result: yes" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
+$as_echo "yes" >&6; }
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define IPV4_IN_IPV6 1" >>confdefs.h
-#define IPV4_IN_IPV6 1
-_ACEOF
                        IPV4_IN6_HACK_MSG="yes"
                else
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                fi
 else
                if test "x$inet6_default_4in6" = "xyes"; then
-                        { echo "$as_me:$LINENO: result: yes (default)" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes (default)" >&5
-echo "${ECHO_T}yes (default)" >&6; }
+$as_echo "yes (default)" >&6; }
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define IPV4_IN_IPV6 1" >>confdefs.h
-#define IPV4_IN_IPV6 1
-_ACEOF
                        IPV4_IN6_HACK_MSG="yes"
                else
-                        { echo "$as_me:$LINENO: result: no (default)" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no (default)" >&5
-echo "${ECHO_T}no (default)" >&6; }
+$as_echo "no (default)" >&6; }
                fi
@@ -30100,13 +15776,11 @@ fi
 BSD_AUTH_MSG=no
 # Check whether --with-bsd-auth was given.
-if test "${with_bsd_auth+set}" = set; then
+if test "${with_bsd_auth+set}" = set; then :
  withval=$with_bsd_auth;
                if test "x$withval" != "xno" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define BSD_AUTH 1" >>confdefs.h
-#define BSD_AUTH 1
-_ACEOF
                        BSD_AUTH_MSG=yes
                fi
@@ -30127,14 +15801,14 @@ fi
 # Check whether --with-pid-dir was given.
-if test "${with_pid_dir+set}" = set; then
+if test "${with_pid_dir+set}" = set; then :
  withval=$with_pid_dir;
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
                        piddir=$withval
                        if test ! -d $piddir ; then
-                        { echo "$as_me:$LINENO: WARNING: ** no $piddir directory on this system **" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ** no $piddir directory on this system **" >&5
-echo "$as_me: WARNING: ** no $piddir directory on this system **" >&2;}
+$as_echo "$as_me: WARNING: ** no $piddir directory on this system **" >&2;}
                        fi
                fi
@@ -30150,12 +15824,10 @@ _ACEOF
 # Check whether --enable-lastlog was given.
-if test "${enable_lastlog+set}" = set; then
+if test "${enable_lastlog+set}" = set; then :
  enableval=$enable_lastlog;
                if test "x$enableval" = "xno" ; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
-#define DISABLE_LASTLOG 1
-_ACEOF
                fi
@@ -30163,12 +15835,10 @@ _ACEOF
 fi
 # Check whether --enable-utmp was given.
-if test "${enable_utmp+set}" = set; then
+if test "${enable_utmp+set}" = set; then :
  enableval=$enable_utmp;
                if test "x$enableval" = "xno" ; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
-#define DISABLE_UTMP 1
-_ACEOF
                fi
@@ -30176,13 +15846,11 @@ _ACEOF
 fi
 # Check whether --enable-utmpx was given.
-if test "${enable_utmpx+set}" = set; then
+if test "${enable_utmpx+set}" = set; then :
  enableval=$enable_utmpx;
                if test "x$enableval" = "xno" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_UTMPX 1" >>confdefs.h
-#define DISABLE_UTMPX 1
-_ACEOF
                fi
@@ -30190,12 +15858,10 @@ _ACEOF
 fi
 # Check whether --enable-wtmp was given.
-if test "${enable_wtmp+set}" = set; then
+if test "${enable_wtmp+set}" = set; then :
  enableval=$enable_wtmp;
                if test "x$enableval" = "xno" ; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_WTMP 1" >>confdefs.h
-#define DISABLE_WTMP 1
-_ACEOF
                fi
@@ -30203,13 +15869,11 @@ _ACEOF
 fi
 # Check whether --enable-wtmpx was given.
-if test "${enable_wtmpx+set}" = set; then
+if test "${enable_wtmpx+set}" = set; then :
  enableval=$enable_wtmpx;
                if test "x$enableval" = "xno" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_WTMPX 1" >>confdefs.h
-#define DISABLE_WTMPX 1
-_ACEOF
                fi
@@ -30217,12 +15881,10 @@ _ACEOF
 fi
 # Check whether --enable-libutil was given.
-if test "${enable_libutil+set}" = set; then
+if test "${enable_libutil+set}" = set; then :
  enableval=$enable_libutil;
                if test "x$enableval" = "xno" ; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_LOGIN 1" >>confdefs.h
-#define DISABLE_LOGIN 1
-_ACEOF
                fi
@@ -30230,13 +15892,11 @@ _ACEOF
 fi
 # Check whether --enable-pututline was given.
-if test "${enable_pututline+set}" = set; then
+if test "${enable_pututline+set}" = set; then :
  enableval=$enable_pututline;
                if test "x$enableval" = "xno" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_PUTUTLINE 1" >>confdefs.h
-#define DISABLE_PUTUTLINE 1
-_ACEOF
                fi
@@ -30244,13 +15904,11 @@ _ACEOF
 fi
 # Check whether --enable-pututxline was given.
-if test "${enable_pututxline+set}" = set; then
+if test "${enable_pututxline+set}" = set; then :
  enableval=$enable_pututxline;
                if test "x$enableval" = "xno" ; then
-cat >>confdefs.h <<\_ACEOF
+$as_echo "#define DISABLE_PUTUTXLINE 1" >>confdefs.h
-#define DISABLE_PUTUTXLINE 1
-_ACEOF
                fi
@@ -30259,12 +15917,10 @@ fi
 # Check whether --with-lastlog was given.
-if test "${with_lastlog+set}" = set; then
+if test "${with_lastlog+set}" = set; then :
  withval=$with_lastlog;
                if test "x$withval" = "xno" ; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_LASTLOG 1" >>confdefs.h
-#define DISABLE_LASTLOG 1
-_ACEOF
                elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
                        conf_lastlog_location=$withval
@@ -30275,13 +15931,9 @@ fi
-{ echo "$as_me:$LINENO: checking if your system defines LASTLOG_FILE" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines LASTLOG_FILE" >&5
-echo $ECHO_N "checking if your system defines LASTLOG_FILE... $ECHO_C" >&6; }
+$as_echo_n "checking if your system defines LASTLOG_FILE... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -30304,39 +15956,16 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-                { echo "$as_me:$LINENO: result: no" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
-                { echo "$as_me:$LINENO: checking if your system defines _PATH_LASTLOG" >&5
+                { $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines _PATH_LASTLOG" >&5
-echo $ECHO_N "checking if your system defines _PATH_LASTLOG... $ECHO_C" >&6; }
+$as_echo_n "checking if your system defines _PATH_LASTLOG... " >&6; }
-                cat >conftest.$ac_ext <<_ACEOF
+                cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -30356,41 +15985,19 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-                        { echo "$as_me:$LINENO: result: no" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-echo "${ECHO_T}no" >&6; }
+$as_echo "no" >&6; }
                        system_lastlog_path=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 if test -z "$conf_lastlog_location"; then
@@ -30401,8 +16008,8 @@ if test -z "$conf_lastlog_location"; then
                                fi
                done
                if test -z "$conf_lastlog_location"; then
-                        { echo "$as_me:$LINENO: WARNING: ** Cannot find lastlog **" >&5
+                        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: ** Cannot find lastlog **" >&5
-echo "$as_me: WARNING: ** Cannot find lastlog **" >&2;}
+$as_echo "$as_me: WARNING: ** Cannot find lastlog **" >&2;}
                                        fi
        fi
 fi
@@ -30415,13 +16022,9 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if your system defines UTMP_FILE" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines UTMP_FILE" >&5
-echo $ECHO_N "checking if your system defines UTMP_FILE... $ECHO_C" >&6; }
+$as_echo_n "checking if your system defines UTMP_FILE... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -30438,35 +16041,15 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
          system_utmp_path=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 if test -z "$conf_utmp_location"; then
        if test x"$system_utmp_path" = x"no" ; then
@@ -30476,9 +16059,7 @@ if test -z "$conf_utmp_location"; then
                        fi
                done
                if test -z "$conf_utmp_location"; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_UTMP 1" >>confdefs.h
-#define DISABLE_UTMP 1
-_ACEOF
                fi
        fi
@@ -30491,13 +16072,9 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if your system defines WTMP_FILE" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines WTMP_FILE" >&5
-echo $ECHO_N "checking if your system defines WTMP_FILE... $ECHO_C" >&6; }
+$as_echo_n "checking if your system defines WTMP_FILE... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -30514,35 +16091,15 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
          system_wtmp_path=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 if test -z "$conf_wtmp_location"; then
        if test x"$system_wtmp_path" = x"no" ; then
@@ -30552,9 +16109,7 @@ if test -z "$conf_wtmp_location"; then
                        fi
                done
                if test -z "$conf_wtmp_location"; then
-                        cat >>confdefs.h <<\_ACEOF
+                        $as_echo "#define DISABLE_WTMP 1" >>confdefs.h
-#define DISABLE_WTMP 1
-_ACEOF
                fi
        fi
@@ -30568,13 +16123,9 @@ _ACEOF
 fi
-{ echo "$as_me:$LINENO: checking if your system defines WTMPX_FILE" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if your system defines WTMPX_FILE" >&5
-echo $ECHO_N "checking if your system defines WTMPX_FILE... $ECHO_C" >&6; }
+$as_echo_n "checking if your system defines WTMPX_FILE... " >&6; }
-cat >conftest.$ac_ext <<_ACEOF
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
 /* end confdefs.h.  */
 #include <sys/types.h>
@@ -30594,41 +16145,19 @@ main ()
  return 0;
 }
 _ACEOF
-rm -f conftest.$ac_objext
+if ac_fn_c_try_compile "$LINENO"; then :
-if { (ac_try="$ac_compile"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-case "(($ac_try" in
+$as_echo "yes" >&6; }
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-   { echo "$as_me:$LINENO: result: yes" >&5
-echo "${ECHO_T}yes" >&6; }
 else
-  echo "$as_me: failed program was:" >&5
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
+$as_echo "no" >&6; }
-         { echo "$as_me:$LINENO: result: no" >&5
-echo "${ECHO_T}no" >&6; }
          system_wtmpx_path=no
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 if test -z "$conf_wtmpx_location"; then
        if test x"$system_wtmpx_path" = x"no" ; then
-                cat >>confdefs.h <<\_ACEOF
+                $as_echo "#define DISABLE_WTMPX 1" >>confdefs.h
-#define DISABLE_WTMPX 1
-_ACEOF
        fi
 else
@@ -30642,8 +16171,8 @@ fi
 if test ! -z "$blibpath" ; then
        LDFLAGS="$LDFLAGS $blibflags$blibpath"
-        { echo "$as_me:$LINENO: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&5
+        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&5
-echo "$as_me: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&2;}
+$as_echo "$as_me: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&2;}
 fi
 CFLAGS="$CFLAGS $werror_flags"
@@ -30653,59 +16182,8 @@ if test "x$ac_cv_func_getaddrinfo" != "xyes" ; then
 else
        TEST_SSH_IPV6=yes
 fi
-{ echo "$as_me:$LINENO: checking whether BROKEN_GETADDRINFO is declared" >&5
+ac_fn_c_check_decl "$LINENO" "BROKEN_GETADDRINFO" "ac_cv_have_decl_BROKEN_GETADDRINFO" "$ac_includes_default"
-echo $ECHO_N "checking whether BROKEN_GETADDRINFO is declared... $ECHO_C" >&6; }
+if test "x$ac_cv_have_decl_BROKEN_GETADDRINFO" = xyes; then :
-if test "${ac_cv_have_decl_BROKEN_GETADDRINFO+set}" = set; then
-  echo $ECHO_N "(cached) $ECHO_C" >&6
-else
-  cat >conftest.$ac_ext <<_ACEOF
-/* confdefs.h.  */
-_ACEOF
-cat confdefs.h >>conftest.$ac_ext
-cat >>conftest.$ac_ext <<_ACEOF
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
-#ifndef BROKEN_GETADDRINFO
-  (void) BROKEN_GETADDRINFO;
-#endif
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.$ac_objext
-if { (ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5
-  (eval "$ac_compile") 2>conftest.er1
-  ac_status=$?
-  grep -v '^ *+' conftest.er1 >conftest.err
-  rm -f conftest.er1
-  cat conftest.err >&5
-  echo "$as_me:$LINENO: \$? = $ac_status" >&5
-  (exit $ac_status); } && {
-         test -z "$ac_c_werror_flag" ||
-         test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then
-  ac_cv_have_decl_BROKEN_GETADDRINFO=yes
-else
-  echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-        ac_cv_have_decl_BROKEN_GETADDRINFO=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ echo "$as_me:$LINENO: result: $ac_cv_have_decl_BROKEN_GETADDRINFO" >&5
-echo "${ECHO_T}$ac_cv_have_decl_BROKEN_GETADDRINFO" >&6; }
-if test $ac_cv_have_decl_BROKEN_GETADDRINFO = yes; then
  TEST_SSH_IPV6=no
 fi
@@ -30713,7 +16191,7 @@ TEST_SSH_IPV6=$TEST_SSH_IPV6
-ac_config_files="$ac_config_files Makefile buildpkg.sh opensshd.init openssh.xml openbsd-compat/Makefile openbsd-compat/regress/Makefile ssh_prng_cmds survey.sh"
+ac_config_files="$ac_config_files Makefile buildpkg.sh opensshd.init openssh.xml openbsd-compat/Makefile openbsd-compat/regress/Makefile survey.sh"
 cat >confcache <<\_ACEOF
 # This file is a shell script that caches the results of configure
@@ -30742,12 +16220,13 @@ _ACEOF
    case $ac_val in #(
    *${as_nl}*)
      case $ac_var in #(
-      *_cv_*) { echo "$as_me:$LINENO: WARNING: Cache variable $ac_var contains a newline." >&5
+      *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-echo "$as_me: WARNING: Cache variable $ac_var contains a newline." >&2;} ;;
+$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
      esac
      case $ac_var in #(
      _ | IFS | as_nl) ;; #(
-      *) $as_unset $ac_var ;;
+      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
+      *) { eval $ac_var=; unset $ac_var;} ;;
      esac ;;
    esac
  done
@@ -30755,8 +16234,8 @@ echo "$as_me: WARNING: Cache variable $ac_var contains a newline." >&2;} ;;
  (set) 2>&1 |
    case $as_nl`(ac_space=' '; set) 2>&1` in #(
    *${as_nl}ac_space=\ *)
-      # `set' does not quote correctly, so add quotes (double-quote
+      # `set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \).
+      # substitution turns \\\\ into \\, and sed turns \\ into \.
      sed -n \
        "s/'/'\\\\''/g;
          s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
@@ -30778,13 +16257,24 @@ echo "$as_me: WARNING: Cache variable $ac_var contains a newline." >&2;} ;;
     :end' >>confcache
 if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
  if test -w "$cache_file"; then
-    test "x$cache_file" != "x/dev/null" &&
+    if test "x$cache_file" != "x/dev/null"; then
-      { echo "$as_me:$LINENO: updating cache $cache_file" >&5
+      { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-echo "$as_me: updating cache $cache_file" >&6;}
+$as_echo "$as_me: updating cache $cache_file" >&6;}
-    cat confcache >$cache_file
+      if test ! -f "$cache_file" || test -h "$cache_file"; then
+        cat confcache >"$cache_file"
+      else
+        case $cache_file in #(
+        */* | ?:*)
+          mv -f confcache "$cache_file"$$ &&
+          mv -f "$cache_file"$$ "$cache_file" ;; #(
+        *)
+          mv -f confcache "$cache_file" ;;
+        esac
+      fi
+    fi
  else
-    { echo "$as_me:$LINENO: not updating unwritable cache $cache_file" >&5
+    { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-echo "$as_me: not updating unwritable cache $cache_file" >&6;}
+$as_echo "$as_me: not updating unwritable cache $cache_file" >&6;}
  fi
 fi
 rm -f confcache
@@ -30797,14 +16287,15 @@ DEFS=-DHAVE_CONFIG_H
 ac_libobjs=
 ac_ltlibobjs=
+U=
 for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
  # 1. Remove the extension, and $U if already installed.
  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`echo "$ac_i" | sed "$ac_script"`
+  ac_i=`$as_echo "$ac_i" | sed "$ac_script"`
  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
  #    will be set to the directory where LIBOBJS objects are built.
-  ac_libobjs="$ac_libobjs \${LIBOBJDIR}$ac_i\$U.$ac_objext"
+  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  ac_ltlibobjs="$ac_ltlibobjs \${LIBOBJDIR}$ac_i"'$U.lo'
+  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
 done
 LIBOBJS=$ac_libobjs
@@ -30812,12 +16303,15 @@ LTLIBOBJS=$ac_ltlibobjs
-: ${CONFIG_STATUS=./config.status}
+: "${CONFIG_STATUS=./config.status}"
+ac_write_fail=0
 ac_clean_files_save=$ac_clean_files
 ac_clean_files="$ac_clean_files $CONFIG_STATUS"
-{ echo "$as_me:$LINENO: creating $CONFIG_STATUS" >&5
+{ $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-echo "$as_me: creating $CONFIG_STATUS" >&6;}
+$as_echo "$as_me: creating $CONFIG_STATUS" >&6;}
-cat >$CONFIG_STATUS <<_ACEOF
+as_write_fail=0
+cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1
 #! $SHELL
 # Generated by $as_me.
 # Run this file to recreate the current configuration.
@@ -30827,59 +16321,79 @@ cat >$CONFIG_STATUS <<_ACEOF
 debug=false
 ac_cs_recheck=false
 ac_cs_silent=false
-SHELL=\${CONFIG_SHELL-$SHELL}
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+SHELL=\${CONFIG_SHELL-$SHELL}
-## --------------------- ##
+export SHELL
-## M4sh Initialization.  ##
+_ASEOF
-## --------------------- ##
+cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1
+## -------------------- ##
+## M4sh Initialization. ##
+## -------------------- ##
 # Be more Bourne compatible
 DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then
+if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
  emulate sh
  NULLCMD=:
-  # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which
+  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
  # is contrary to our usage.  Disable this feature.
  alias -g '${1+"$@"}'='"$@"'
  setopt NO_GLOB_SUBST
 else
-  case `(set -o) 2>/dev/null` in
+  case `(set -o) 2>/dev/null` in #(
-  *posix*) set -o posix ;;
+  *posix*) :
+    set -o posix ;; #(
+  *) :
+     ;;
 esac
 fi
+as_nl='
+'
-# PATH needs CR
+export as_nl
-# Avoid depending upon Character Ranges.
+# Printing a long string crashes Solaris 7 /usr/bin/printf.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
+as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
-as_cr_digits='0123456789'
+# Prefer a ksh shell builtin over an external printf program on Solaris,
-as_cr_alnum=$as_cr_Letters$as_cr_digits
+# but without wasting forks for bash or zsh.
+if test -z "$BASH_VERSION$ZSH_VERSION" \
-# The user is always right.
+    && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
-if test "${PATH_SEPARATOR+set}" != set; then
+  as_echo='print -r --'
-  echo "#! /bin/sh" >conf$$.sh
+  as_echo_n='print -rn --'
-  echo  "exit 0"   >>conf$$.sh
+elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
-  chmod +x conf$$.sh
+  as_echo='printf %s\n'
-  if (PATH="/nonexistent;."; conf$$.sh) >/dev/null 2>&1; then
+  as_echo_n='printf %s'
-    PATH_SEPARATOR=';'
+else
+  if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
+    as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
+    as_echo_n='/usr/ucb/echo -n'
  else
-    PATH_SEPARATOR=:
+    as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
+    as_echo_n_body='eval
+      arg=$1;
+      case $arg in #(
+      *"$as_nl"*)
+        expr "X$arg" : "X\\(.*\\)$as_nl";
+        arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
+      esac;
+      expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
+    '
+    export as_echo_n_body
+    as_echo_n='sh -c $as_echo_n_body as_echo'
  fi
-  rm -f conf$$.sh
+  export as_echo_body
+  as_echo='sh -c $as_echo_body as_echo'
 fi
-# Support unset when possible.
+# The user is always right.
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
+if test "${PATH_SEPARATOR+set}" != set; then
-  as_unset=unset
+  PATH_SEPARATOR=:
-else
+  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-  as_unset=false
+    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
+      PATH_SEPARATOR=';'
+  }
 fi
@@ -30888,20 +16402,19 @@ fi
 # there to prevent editors from complaining about space-tab.
 # (If _AS_PATH_WALK were called with IFS unset, it would disable word
 # splitting by setting IFS to empty value.)
-as_nl='
-'
 IFS=" ""        $as_nl"
 # Find who we are.  Look in the path if we contain no directory separator.
-case $0 in
+as_myself=
+case $0 in #((
  *[\\/]* ) as_myself=$0 ;;
  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
-  test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
+    test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
-done
+  done
 IFS=$as_save_IFS
     ;;
@@ -30912,32 +16425,111 @@ if test "x$as_myself" = x; then
  as_myself=$0
 fi
 if test ! -f "$as_myself"; then
-  echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
+  $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  { (exit 1); exit 1; }
+  exit 1
 fi
-# Work around bugs in pre-3.0 UWIN ksh.
+# Unset variables that we do not need and which cause bugs (e.g. in
-for as_var in ENV MAIL MAILPATH
+# pre-3.0 UWIN ksh).  But do not cause bugs in bash 2.01; the "|| exit 1"
-do ($as_unset $as_var) >/dev/null 2>&1 && $as_unset $as_var
+# suppresses any "Segmentation fault" message there.  '((' could
+# trigger a bug in pdksh 5.2.14.
+for as_var in BASH_ENV ENV MAIL MAILPATH
+do eval test x\${$as_var+set} = xset \
+  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
 done
 PS1='$ '
 PS2='> '
 PS4='+ '
 # NLS nuisances.
-for as_var in \
+LC_ALL=C
-  LANG LANGUAGE LC_ADDRESS LC_ALL LC_COLLATE LC_CTYPE LC_IDENTIFICATION \
+export LC_ALL
-  LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER \
+LANGUAGE=C
-  LC_TELEPHONE LC_TIME
+export LANGUAGE
-do
-  if (set +x; test -z "`(eval $as_var=C; export $as_var) 2>&1`"); then
+# CDPATH.
-    eval $as_var=C; export $as_var
+(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-  else
-    ($as_unset $as_var) >/dev/null 2>&1 && $as_unset $as_var
+# as_fn_error STATUS ERROR [LINENO LOG_FD]
+# ----------------------------------------
+# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
+# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
+# script with STATUS, using 1 if that was 0.
+as_fn_error ()
+{
+  as_status=$1; test $as_status -eq 0 && as_status=1
+  if test "$4"; then
+    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+    $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
  fi
-done
+  $as_echo "$as_me: error: $2" >&2
+  as_fn_exit $as_status
+} # as_fn_error
+# as_fn_set_status STATUS
+# -----------------------
+# Set $? to STATUS, without forking.
+as_fn_set_status ()
+{
+  return $1
+} # as_fn_set_status
+# as_fn_exit STATUS
+# -----------------
+# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
+as_fn_exit ()
+{
+  set +e
+  as_fn_set_status $1
+  exit $1
+} # as_fn_exit
+# as_fn_unset VAR
+# ---------------
+# Portably unset VAR.
+as_fn_unset ()
+{
+  { eval $1=; unset $1;}
+}
+as_unset=as_fn_unset
+# as_fn_append VAR VALUE
+# ----------------------
+# Append the text in VALUE to the end of the definition contained in VAR. Take
+# advantage of any shell optimizations that allow amortized linear growth over
+# repeated appends, instead of the typical quadratic growth present in naive
+# implementations.
+if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
+  eval 'as_fn_append ()
+  {
+    eval $1+=\$2
+  }'
+else
+  as_fn_append ()
+  {
+    eval $1=\$$1\$2
+  }
+fi # as_fn_append
+# as_fn_arith ARG...
+# ------------------
+# Perform arithmetic evaluation on the ARGs, and store the result in the
+# global $as_val. Take advantage of shells that can avoid forks. The arguments
+# must be portable across $(()) and expr.
+if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
+  eval 'as_fn_arith ()
+  {
+    as_val=$(( $* ))
+  }'
+else
+  as_fn_arith ()
+  {
+    as_val=`expr "$@" || test $? -eq 1`
+  }
+fi # as_fn_arith
-# Required to use basename.
 if expr a : '\(a\)' >/dev/null 2>&1 &&
   test "X`expr 00001 : '.*\(...\)'`" = X001; then
  as_expr=expr
@@ -30951,13 +16543,17 @@ else
  as_basename=false
 fi
+if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
+  as_dirname=dirname
+else
+  as_dirname=false
+fi
-# Name of the executable.
 as_me=`$as_basename -- "$0" ||
 $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
         X"$0" : 'X\(//\)$' \| \
         X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-echo X/"$0" |
+$as_echo X/"$0" |
    sed '/^.*\/\([^/][^/]*\)\/*$/{
            s//\1/
            q
@@ -30972,104 +16568,103 @@ echo X/"$0" |
          }
          s/.*/./; q'`
-# CDPATH.
+# Avoid depending upon Character Ranges.
-$as_unset CDPATH
+as_cr_letters='abcdefghijklmnopqrstuvwxyz'
+as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+as_cr_Letters=$as_cr_letters$as_cr_LETTERS
+as_cr_digits='0123456789'
-  as_lineno_1=$LINENO
+as_cr_alnum=$as_cr_Letters$as_cr_digits
-  as_lineno_2=$LINENO
-  test "x$as_lineno_1" != "x$as_lineno_2" &&
-  test "x`expr $as_lineno_1 + 1`" = "x$as_lineno_2" || {
-  # Create $as_me.lineno as a copy of $as_myself, but with $LINENO
-  # uniformly replaced by the line number.  The first 'sed' inserts a
-  # line-number line after each line using $LINENO; the second 'sed'
-  # does the real work.  The second script uses 'N' to pair each
-  # line-number line with the line containing $LINENO, and appends
-  # trailing '-' during substitution so that $LINENO is not a special
-  # case at line end.
-  # (Raja R Harinath suggested sed '=', and Paul Eggert wrote the
-  # scripts with optimization help from Paolo Bonzini.  Blame Lee
-  # E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2
-   { (exit 1); exit 1; }; }
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
 ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in
+case `echo -n x` in #(((((
 -n*)
-  case `echo 'x\c'` in
+  case `echo 'xy\c'` in
  *c*) ECHO_T=' ';;     # ECHO_T is single tab character.
-  *)   ECHO_C='\c';;
+  xy)  ECHO_C='\c';;
+  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
+       ECHO_T=' ';;
  esac;;
 *)
  ECHO_N='-n';;
 esac
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
 rm -f conf$$ conf$$.exe conf$$.file
 if test -d conf$$.dir; then
  rm -f conf$$.dir/conf$$.file
 else
  rm -f conf$$.dir
-  mkdir conf$$.dir
+  mkdir conf$$.dir 2>/dev/null
-fi
+fi
-echo >conf$$.file
+if (echo >conf$$.file) 2>/dev/null; then
-if ln -s conf$$.file conf$$ 2>/dev/null; then
+  if ln -s conf$$.file conf$$ 2>/dev/null; then
-  as_ln_s='ln -s'
+    as_ln_s='ln -s'
-  # ... but there are two gotchas:
+    # ... but there are two gotchas:
-  # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
+    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
-  # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
+    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
-  # In both cases, we have to default to `cp -p'.
+    # In both cases, we have to default to `cp -p'.
-  ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
+    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
+      as_ln_s='cp -p'
+  elif ln conf$$.file conf$$ 2>/dev/null; then
+    as_ln_s=ln
+  else
    as_ln_s='cp -p'
-elif ln conf$$.file conf$$ 2>/dev/null; then
+  fi
-  as_ln_s=ln
 else
  as_ln_s='cp -p'
 fi
 rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
 rmdir conf$$.dir 2>/dev/null
+# as_fn_mkdir_p
+# -------------
+# Create "$as_dir" as a directory, including parents if necessary.
+as_fn_mkdir_p ()
+{
+  case $as_dir in #(
+  -*) as_dir=./$as_dir;;
+  esac
+  test -d "$as_dir" || eval $as_mkdir_p || {
+    as_dirs=
+    while :; do
+      case $as_dir in #(
+      *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
+      *) as_qdir=$as_dir;;
+      esac
+      as_dirs="'$as_qdir' $as_dirs"
+      as_dir=`$as_dirname -- "$as_dir" ||
+$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+         X"$as_dir" : 'X\(//\)[^/]' \| \
+         X"$as_dir" : 'X\(//\)$' \| \
+         X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$as_dir" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+            s//\1/
+            q
+          }
+          /^X\(\/\/\)[^/].*/{
+            s//\1/
+            q
+          }
+          /^X\(\/\/\)$/{
+            s//\1/
+            q
+          }
+          /^X\(\/\).*/{
+            s//\1/
+            q
+          }
+          s/.*/./; q'`
+      test -d "$as_dir" && break
+    done
+    test -z "$as_dirs" || eval "mkdir $as_dirs"
+  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
+} # as_fn_mkdir_p
 if mkdir -p . 2>/dev/null; then
-  as_mkdir_p=:
+  as_mkdir_p='mkdir -p "$as_dir"'
 else
  test -d ./-p && rmdir ./-p
  as_mkdir_p=false
@@ -31086,12 +16681,12 @@ else
  as_test_x='
    eval sh -c '\''
      if test -d "$1"; then
-        test -d "$1/.";
+        test -d "$1/.";
      else
-        case $1 in
+        case $1 in #(
-        -*)set "./$1";;
+        -*)set "./$1";;
        esac;
-        case `ls -ld'$as_ls_L_option' "$1" 2>/dev/null` in
+        case `ls -ld'$as_ls_L_option' "$1" 2>/dev/null` in #((
        ???[sx]*):;;*)false;;esac;fi
    '\'' sh
  '
@@ -31106,13 +16701,19 @@ as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
 exec 6>&1
+## ----------------------------------- ##
+## Main body of $CONFIG_STATUS script. ##
+## ----------------------------------- ##
+_ASEOF
+test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1
-# Save the log message, to keep $[0] and so on meaningful, and to
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+# Save the log message, to keep $0 and so on meaningful, and to
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
 This file was extended by OpenSSH $as_me Portable, which was
-generated by GNU Autoconf 2.61.  Invocation command line was
+generated by GNU Autoconf 2.68.  Invocation command line was
  CONFIG_FILES    = $CONFIG_FILES
  CONFIG_HEADERS  = $CONFIG_HEADERS
@@ -31125,29 +16726,41 @@ on `(hostname || uname -n) 2>/dev/null | sed 1q`
 _ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF
+case $ac_config_files in *"
+"*) set x $ac_config_files; shift; ac_config_files=$*;;
+esac
+case $ac_config_headers in *"
+"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
+esac
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 # Files that config.status was made for.
 config_files="$ac_config_files"
 config_headers="$ac_config_headers"
 _ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 ac_cs_usage="\
-\`$as_me' instantiates files from templates according to the
+\`$as_me' instantiates files and other configuration actions
-current configuration.
+from templates according to the current configuration.  Unless the files
+and actions are specified as TAGs, all are instantiated by default.
-Usage: $0 [OPTIONS] [FILE]...
+Usage: $0 [OPTION]... [TAG]...
  -h, --help       print this help, then exit
  -V, --version    print version number and configuration settings, then exit
-  -q, --quiet      do not print progress messages
+      --config     print configuration, then exit
+  -q, --quiet, --silent
+                   do not print progress messages
  -d, --debug      don't remove temporary files
      --recheck    update $as_me by reconfiguring in the same conditions
-  --file=FILE[:TEMPLATE]
+      --file=FILE[:TEMPLATE]
-                   instantiate the configuration file FILE
+                   instantiate the configuration file FILE
-  --header=FILE[:TEMPLATE]
+      --header=FILE[:TEMPLATE]
-                   instantiate the configuration header FILE
+                   instantiate the configuration header FILE
 Configuration files:
 $config_files
@@ -31155,36 +16768,43 @@ $config_files
 Configuration headers:
 $config_headers
-Report bugs to <bug-autoconf@gnu.org>."
+Report bugs to <openssh-unix-dev@mindrot.org>."
 _ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
 OpenSSH config.status Portable
-configured by $0, generated by GNU Autoconf 2.61,
+configured by $0, generated by GNU Autoconf 2.68,
-  with options \\"`echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`\\"
+  with options \\"\$ac_cs_config\\"
-Copyright (C) 2006 Free Software Foundation, Inc.
+Copyright (C) 2010 Free Software Foundation, Inc.
 This config.status script is free software; the Free Software Foundation
 gives unlimited permission to copy, distribute and modify it."
 ac_pwd='$ac_pwd'
 srcdir='$srcdir'
 INSTALL='$INSTALL'
+AWK='$AWK'
+test -n "\$AWK" || AWK=awk
 _ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# If no file are specified by the user, then we need to provide default
+# The default lists apply if the user does not specify any file.
-# value.  By we need to know if files were specified by the user.
 ac_need_defaults=:
 while test $# != 0
 do
  case $1 in
-  --*=*)
+  --*=?*)
    ac_option=`expr "X$1" : 'X\([^=]*\)='`
    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
    ac_shift=:
    ;;
+  --*=)
+    ac_option=`expr "X$1" : 'X\([^=]*\)='`
+    ac_optarg=
+    ac_shift=:
+    ;;
  *)
    ac_option=$1
    ac_optarg=$2
@@ -31197,34 +16817,41 @@ do
  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
    ac_cs_recheck=: ;;
  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    echo "$ac_cs_version"; exit ;;
+    $as_echo "$ac_cs_version"; exit ;;
+  --config | --confi | --conf | --con | --co | --c )
+    $as_echo "$ac_cs_config"; exit ;;
  --debug | --debu | --deb | --de | --d | -d )
    debug=: ;;
  --file | --fil | --fi | --f )
    $ac_shift
-    CONFIG_FILES="$CONFIG_FILES $ac_optarg"
+    case $ac_optarg in
+    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
+    '') as_fn_error $? "missing file argument" ;;
+    esac
+    as_fn_append CONFIG_FILES " '$ac_optarg'"
    ac_need_defaults=false;;
  --header | --heade | --head | --hea )
    $ac_shift
-    CONFIG_HEADERS="$CONFIG_HEADERS $ac_optarg"
+    case $ac_optarg in
+    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
+    esac
+    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
    ac_need_defaults=false;;
  --he | --h)
    # Conflict between --help and --header
-    { echo "$as_me: error: ambiguous option: $1
+    as_fn_error $? "ambiguous option: \`$1'
-Try \`$0 --help' for more information." >&2
+Try \`$0 --help' for more information.";;
-   { (exit 1); exit 1; }; };;
  --help | --hel | -h )
-    echo "$ac_cs_usage"; exit ;;
+    $as_echo "$ac_cs_usage"; exit ;;
  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
  | -silent | --silent | --silen | --sile | --sil | --si | --s)
    ac_cs_silent=: ;;
  # This is an error.
-  -*) { echo "$as_me: error: unrecognized option: $1
+  -*) as_fn_error $? "unrecognized option: \`$1'
-Try \`$0 --help' for more information." >&2
+Try \`$0 --help' for more information." ;;
-   { (exit 1); exit 1; }; } ;;
-  *) ac_config_targets="$ac_config_targets $1"
+  *) as_fn_append ac_config_targets " $1"
     ac_need_defaults=false ;;
  esac
@@ -31239,30 +16866,32 @@ if $ac_cs_silent; then
 fi
 _ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 if \$ac_cs_recheck; then
-  echo "running CONFIG_SHELL=$SHELL $SHELL $0 "$ac_configure_args \$ac_configure_extra_args " --no-create --no-recursion" >&6
+  set X '$SHELL' '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  CONFIG_SHELL=$SHELL
+  shift
+  \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6
+  CONFIG_SHELL='$SHELL'
  export CONFIG_SHELL
-  exec $SHELL "$0"$ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
+  exec "\$@"
 fi
 _ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 exec 5>>config.log
 {
  echo
  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
 ## Running $as_me. ##
 _ASBOX
-  echo "$ac_log"
+  $as_echo "$ac_log"
 } >&5
 _ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 _ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # Handling of arguments.
 for ac_config_target in $ac_config_targets
@@ -31275,12 +16904,9 @@ do
    "openssh.xml") CONFIG_FILES="$CONFIG_FILES openssh.xml" ;;
    "openbsd-compat/Makefile") CONFIG_FILES="$CONFIG_FILES openbsd-compat/Makefile" ;;
    "openbsd-compat/regress/Makefile") CONFIG_FILES="$CONFIG_FILES openbsd-compat/regress/Makefile" ;;
-    "ssh_prng_cmds") CONFIG_FILES="$CONFIG_FILES ssh_prng_cmds" ;;
    "survey.sh") CONFIG_FILES="$CONFIG_FILES survey.sh" ;;
-  *) { { echo "$as_me:$LINENO: error: invalid argument: $ac_config_target" >&5
+  *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
-echo "$as_me: error: invalid argument: $ac_config_target" >&2;}
-   { (exit 1); exit 1; }; };;
  esac
 done
@@ -31302,270 +16928,302 @@ fi
 # after its creation but before its name has been assigned to `$tmp'.
 $debug ||
 {
-  tmp=
+  tmp= ac_tmp=
  trap 'exit_status=$?
-  { test -z "$tmp" || test ! -d "$tmp" || rm -fr "$tmp"; } && exit $exit_status
+  : "${ac_tmp:=$tmp}"
+  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
 ' 0
-  trap '{ (exit 1); exit 1; }' 1 2 13 15
+  trap 'as_fn_exit 1' 1 2 13 15
 }
 # Create a (secure) tmp directory for tmp files.
 {
  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -n "$tmp" && test -d "$tmp"
+  test -d "$tmp"
 }  ||
 {
  tmp=./conf$$-$RANDOM
  (umask 077 && mkdir "$tmp")
-} ||
+} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-{
+ac_tmp=$tmp
-   echo "$me: cannot create a temporary directory in ." >&2
-   { (exit 1); exit 1; }
-}
-#
-# Set up the sed scripts for CONFIG_FILES section.
-#
-# No need to generate the scripts if there are no CONFIG_FILES.
+# Set up the scripts for CONFIG_FILES section.
-# This happens for instance when ./config.status config.h
+# No need to generate them if there are no CONFIG_FILES.
+# This happens for instance with `./config.status config.h'.
 if test -n "$CONFIG_FILES"; then
-_ACEOF
+ac_cr=`echo X | tr X '\015'`
+# On cygwin, bash can eat \r inside `` if the user requested igncr.
+# But we know of no other shell where ac_cr would be empty at this
+# point, so we can use a bashism as a fallback.
+if test "x$ac_cr" = x; then
+  eval ac_cr=\$\'\\r\'
+fi
+ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
+if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
+  ac_cs_awk_cr='\\r'
+else
+  ac_cs_awk_cr=$ac_cr
+fi
+echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
+_ACEOF
+{
+  echo "cat >conf$$subs.awk <<_ACEOF" &&
+  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
+  echo "_ACEOF"
+} >conf$$subs.sh ||
+  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
+ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'`
 ac_delim='%!_!# '
 for ac_last_try in false false false false false :; do
-  cat >conf$$subs.sed <<_ACEOF
+  . ./conf$$subs.sh ||
-SHELL!$SHELL$ac_delim
+    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-PATH_SEPARATOR!$PATH_SEPARATOR$ac_delim
-PACKAGE_NAME!$PACKAGE_NAME$ac_delim
+  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X`
-PACKAGE_TARNAME!$PACKAGE_TARNAME$ac_delim
+  if test $ac_delim_n = $ac_delim_num; then
-PACKAGE_VERSION!$PACKAGE_VERSION$ac_delim
-PACKAGE_STRING!$PACKAGE_STRING$ac_delim
-PACKAGE_BUGREPORT!$PACKAGE_BUGREPORT$ac_delim
-exec_prefix!$exec_prefix$ac_delim
-prefix!$prefix$ac_delim
-program_transform_name!$program_transform_name$ac_delim
-bindir!$bindir$ac_delim
-sbindir!$sbindir$ac_delim
-libexecdir!$libexecdir$ac_delim
-datarootdir!$datarootdir$ac_delim
-datadir!$datadir$ac_delim
-sysconfdir!$sysconfdir$ac_delim
-sharedstatedir!$sharedstatedir$ac_delim
-localstatedir!$localstatedir$ac_delim
-includedir!$includedir$ac_delim
-oldincludedir!$oldincludedir$ac_delim
-docdir!$docdir$ac_delim
-infodir!$infodir$ac_delim
-htmldir!$htmldir$ac_delim
-dvidir!$dvidir$ac_delim
-pdfdir!$pdfdir$ac_delim
-psdir!$psdir$ac_delim
-libdir!$libdir$ac_delim
-localedir!$localedir$ac_delim
-mandir!$mandir$ac_delim
-DEFS!$DEFS$ac_delim
-ECHO_C!$ECHO_C$ac_delim
-ECHO_N!$ECHO_N$ac_delim
-ECHO_T!$ECHO_T$ac_delim
-LIBS!$LIBS$ac_delim
-build_alias!$build_alias$ac_delim
-host_alias!$host_alias$ac_delim
-target_alias!$target_alias$ac_delim
-CC!$CC$ac_delim
-CFLAGS!$CFLAGS$ac_delim
-LDFLAGS!$LDFLAGS$ac_delim
-CPPFLAGS!$CPPFLAGS$ac_delim
-ac_ct_CC!$ac_ct_CC$ac_delim
-EXEEXT!$EXEEXT$ac_delim
-OBJEXT!$OBJEXT$ac_delim
-build!$build$ac_delim
-build_cpu!$build_cpu$ac_delim
-build_vendor!$build_vendor$ac_delim
-build_os!$build_os$ac_delim
-host!$host$ac_delim
-host_cpu!$host_cpu$ac_delim
-host_vendor!$host_vendor$ac_delim
-host_os!$host_os$ac_delim
-CPP!$CPP$ac_delim
-GREP!$GREP$ac_delim
-EGREP!$EGREP$ac_delim
-AWK!$AWK$ac_delim
-RANLIB!$RANLIB$ac_delim
-INSTALL_PROGRAM!$INSTALL_PROGRAM$ac_delim
-INSTALL_SCRIPT!$INSTALL_SCRIPT$ac_delim
-INSTALL_DATA!$INSTALL_DATA$ac_delim
-AR!$AR$ac_delim
-CAT!$CAT$ac_delim
-KILL!$KILL$ac_delim
-PERL!$PERL$ac_delim
-SED!$SED$ac_delim
-ENT!$ENT$ac_delim
-TEST_MINUS_S_SH!$TEST_MINUS_S_SH$ac_delim
-SH!$SH$ac_delim
-GROFF!$GROFF$ac_delim
-NROFF!$NROFF$ac_delim
-MANDOC!$MANDOC$ac_delim
-TEST_SHELL!$TEST_SHELL$ac_delim
-MANFMT!$MANFMT$ac_delim
-PATH_GROUPADD_PROG!$PATH_GROUPADD_PROG$ac_delim
-PATH_USERADD_PROG!$PATH_USERADD_PROG$ac_delim
-MAKE_PACKAGE_SUPPORTED!$MAKE_PACKAGE_SUPPORTED$ac_delim
-STARTUP_SCRIPT_SHELL!$STARTUP_SCRIPT_SHELL$ac_delim
-LOGIN_PROGRAM_FALLBACK!$LOGIN_PROGRAM_FALLBACK$ac_delim
-PATH_PASSWD_PROG!$PATH_PASSWD_PROG$ac_delim
-LD!$LD$ac_delim
-PKGCONFIG!$PKGCONFIG$ac_delim
-LIBEDIT!$LIBEDIT$ac_delim
-TEST_SSH_SHA256!$TEST_SSH_SHA256$ac_delim
-TEST_SSH_ECC!$TEST_SSH_ECC$ac_delim
-COMMENT_OUT_ECC!$COMMENT_OUT_ECC$ac_delim
-INSTALL_SSH_RAND_HELPER!$INSTALL_SSH_RAND_HELPER$ac_delim
-SSH_PRIVSEP_USER!$SSH_PRIVSEP_USER$ac_delim
-PROG_LS!$PROG_LS$ac_delim
-PROG_NETSTAT!$PROG_NETSTAT$ac_delim
-PROG_ARP!$PROG_ARP$ac_delim
-PROG_IFCONFIG!$PROG_IFCONFIG$ac_delim
-PROG_JSTAT!$PROG_JSTAT$ac_delim
-PROG_PS!$PROG_PS$ac_delim
-PROG_SAR!$PROG_SAR$ac_delim
-PROG_W!$PROG_W$ac_delim
-PROG_WHO!$PROG_WHO$ac_delim
-PROG_LAST!$PROG_LAST$ac_delim
-_ACEOF
-  if test `sed -n "s/.*$ac_delim\$/X/p" conf$$subs.sed | grep -c X` = 97; then
    break
  elif $ac_last_try; then
-    { { echo "$as_me:$LINENO: error: could not make $CONFIG_STATUS" >&5
+    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-echo "$as_me: error: could not make $CONFIG_STATUS" >&2;}
-   { (exit 1); exit 1; }; }
  else
    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
  fi
 done
+rm -f conf$$subs.sh
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
+_ACEOF
+sed -n '
+h
+s/^/S["/; s/!.*/"]=/
+p
+g
+s/^[^!]*!//
+:repl
+t repl
+s/'"$ac_delim"'$//
+t delim
+:nl
+h
+s/\(.\{148\}\)..*/\1/
+t more1
+s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
+p
+n
+b repl
+:more1
+s/["\\]/\\&/g; s/^/"/; s/$/"\\/
+p
+g
+s/.\{148\}//
+t nl
+:delim
+h
+s/\(.\{148\}\)..*/\1/
+t more2
+s/["\\]/\\&/g; s/^/"/; s/$/"/
+p
+b
+:more2
+s/["\\]/\\&/g; s/^/"/; s/$/"\\/
+p
+g
+s/.\{148\}//
+t delim
+' <conf$$subs.awk | sed '
+/^[^""]/{
+  N
+  s/\n//
+}
+' >>$CONFIG_STATUS || ac_write_fail=1
+rm -f conf$$subs.awk
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+_ACAWK
+cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
+  for (key in S) S_is_set[key] = 1
+  FS = ""
-ac_eof=`sed -n '/^CEOF[0-9]*$/s/CEOF/0/p' conf$$subs.sed`
+}
-if test -n "$ac_eof"; then
+{
-  ac_eof=`echo "$ac_eof" | sort -nru | sed 1q`
+  line = $ 0
-  ac_eof=`expr $ac_eof + 1`
+  nfields = split(line, field, "@")
+  substed = 0
+  len = length(field[1])
+  for (i = 2; i < nfields; i++) {
+    key = field[i]
+    keylen = length(key)
+    if (S_is_set[key]) {
+      value = S[key]
+      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
+      len += length(value) + length(field[++i])
+      substed = 1
+    } else
+      len += 1 + keylen
+  }
+  print line
+}
+_ACAWK
+_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
+  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
+else
+  cat
+fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
+  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
+_ACEOF
+# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
+# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
+# trailing colons and then remove the whole line if VPATH becomes empty
+# (actually we leave an empty line to preserve line numbers).
+if test "x$srcdir" = x.; then
+  ac_vpsub='/^[  ]*VPATH[        ]*=[    ]*/{
+h
+s///
+s/^/:/
+s/[      ]*$/:/
+s/:\$(srcdir):/:/g
+s/:\${srcdir}:/:/g
+s/:@srcdir@:/:/g
+s/^:*//
+s/:*$//
+x
+s/\(=[   ]*\).*/\1/
+G
+s/\n//
+s/^[^=]*=[       ]*$//
+}'
 fi
-cat >>$CONFIG_STATUS <<_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-cat >"\$tmp/subs-1.sed" <<\CEOF$ac_eof
+fi # test -n "$CONFIG_FILES"
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-_ACEOF
+# Set up the scripts for CONFIG_HEADERS section.
-sed '
+# No need to generate them if there are no CONFIG_HEADERS.
-s/[,\\&]/\\&/g; s/@/@|#_!!_#|/g
+# This happens for instance with `./config.status Makefile'.
-s/^/s,@/; s/!/@,|#_!!_#|/
+if test -n "$CONFIG_HEADERS"; then
-:n
+cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-t n
+BEGIN {
-s/'"$ac_delim"'$/,g/; t
-s/$/\\/; p
-N; s/^.*\n//; s/[,\\&]/\\&/g; s/@/@|#_!!_#|/g; b n
-' >>$CONFIG_STATUS <conf$$subs.sed
-rm -f conf$$subs.sed
-cat >>$CONFIG_STATUS <<_ACEOF
-CEOF$ac_eof
 _ACEOF
+# Transform confdefs.h into an awk script `defines.awk', embedded as
+# here-document in config.status, that substitutes the proper values into
+# config.h.in to produce config.h.
+# Create a delimiter string that does not exist in confdefs.h, to ease
+# handling of long lines.
 ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
+for ac_last_try in false false :; do
-  cat >conf$$subs.sed <<_ACEOF
+  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-PROG_LASTLOG!$PROG_LASTLOG$ac_delim
+  if test -z "$ac_tt"; then
-PROG_DF!$PROG_DF$ac_delim
-PROG_VMSTAT!$PROG_VMSTAT$ac_delim
-PROG_UPTIME!$PROG_UPTIME$ac_delim
-PROG_IPCS!$PROG_IPCS$ac_delim
-PROG_TAIL!$PROG_TAIL$ac_delim
-INSTALL_SSH_PRNG_CMDS!$INSTALL_SSH_PRNG_CMDS$ac_delim
-SSHLIBS!$SSHLIBS$ac_delim
-SSHDLIBS!$SSHDLIBS$ac_delim
-KRB5CONF!$KRB5CONF$ac_delim
-PRIVSEP_PATH!$PRIVSEP_PATH$ac_delim
-xauth_path!$xauth_path$ac_delim
-STRIP_OPT!$STRIP_OPT$ac_delim
-XAUTH_PATH!$XAUTH_PATH$ac_delim
-MANTYPE!$MANTYPE$ac_delim
-mansubdir!$mansubdir$ac_delim
-user_path!$user_path$ac_delim
-piddir!$piddir$ac_delim
-TEST_SSH_IPV6!$TEST_SSH_IPV6$ac_delim
-LIBOBJS!$LIBOBJS$ac_delim
-LTLIBOBJS!$LTLIBOBJS$ac_delim
-_ACEOF
-  if test `sed -n "s/.*$ac_delim\$/X/p" conf$$subs.sed | grep -c X` = 21; then
    break
  elif $ac_last_try; then
-    { { echo "$as_me:$LINENO: error: could not make $CONFIG_STATUS" >&5
+    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-echo "$as_me: error: could not make $CONFIG_STATUS" >&2;}
-   { (exit 1); exit 1; }; }
  else
    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
  fi
 done
-ac_eof=`sed -n '/^CEOF[0-9]*$/s/CEOF/0/p' conf$$subs.sed`
+# For the awk script, D is an array of macro values keyed by name,
-if test -n "$ac_eof"; then
+# likewise P contains macro parameters if any.  Preserve backslash
-  ac_eof=`echo "$ac_eof" | sort -nru | sed 1q`
+# newline sequences.
-  ac_eof=`expr $ac_eof + 1`
-fi
-cat >>$CONFIG_STATUS <<_ACEOF
+ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-cat >"\$tmp/subs-2.sed" <<\CEOF$ac_eof
+sed -n '
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b end
+s/.\{148\}/&'"$ac_delim"'/g
-_ACEOF
+t rset
-sed '
+:rset
-s/[,\\&]/\\&/g; s/@/@|#_!!_#|/g
+s/^[     ]*#[    ]*define[       ][      ]*/ /
-s/^/s,@/; s/!/@,|#_!!_#|/
+t def
-:n
+d
-t n
+:def
-s/'"$ac_delim"'$/,g/; t
+s/\\$//
-s/$/\\/; p
+t bsnl
-N; s/^.*\n//; s/[,\\&]/\\&/g; s/@/@|#_!!_#|/g; b n
+s/["\\]/\\&/g
-' >>$CONFIG_STATUS <conf$$subs.sed
+s/^ \('"$ac_word_re"'\)\(([^()]*)\)[     ]*\(.*\)/P["\1"]="\2"\
-rm -f conf$$subs.sed
+D["\1"]=" \3"/p
-cat >>$CONFIG_STATUS <<_ACEOF
+s/^ \('"$ac_word_re"'\)[         ]*\(.*\)/D["\1"]=" \2"/p
-:end
+d
-s/|#_!!_#|//g
+:bsnl
-CEOF$ac_eof
+s/["\\]/\\&/g
+s/^ \('"$ac_word_re"'\)\(([^()]*)\)[     ]*\(.*\)/P["\1"]="\2"\
+D["\1"]=" \3\\\\\\n"\\/p
+t cont
+s/^ \('"$ac_word_re"'\)[         ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
+t cont
+d
+:cont
+n
+s/.\{148\}/&'"$ac_delim"'/g
+t clear
+:clear
+s/\\$//
+t bsnlc
+s/["\\]/\\&/g; s/^/"/; s/$/"/p
+d
+:bsnlc
+s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
+b cont
+' <confdefs.h | sed '
+s/'"$ac_delim"'/"\\\
+"/g' >>$CONFIG_STATUS || ac_write_fail=1
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+  for (key in D) D_is_set[key] = 1
+  FS = ""
+}
+/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
+  line = \$ 0
+  split(line, arg, " ")
+  if (arg[1] == "#") {
+    defundef = arg[2]
+    mac1 = arg[3]
+  } else {
+    defundef = substr(arg[1], 2)
+    mac1 = arg[2]
+  }
+  split(mac1, mac2, "(") #)
+  macro = mac2[1]
+  prefix = substr(line, 1, index(line, defundef) - 1)
+  if (D_is_set[macro]) {
+    # Preserve the white space surrounding the "#".
+    print prefix "define", macro P[macro] D[macro]
+    next
+  } else {
+    # Replace #undef with comments.  This is necessary, for example,
+    # in the case of _POSIX_SOURCE, which is predefined and required
+    # on some systems where configure will not decide to define it.
+    if (defundef == "undef") {
+      print "/*", prefix defundef, macro, "*/"
+      next
+    }
+  }
+}
+{ print }
+_ACAWK
 _ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
+fi # test -n "$CONFIG_HEADERS"
-# VPATH may cause trouble with some makes, so we remove $(srcdir),
+eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    "
-# ${srcdir} and @srcdir@ from VPATH if srcdir is ".", strip leading and
+shift
-# trailing colons and then remove the whole line if VPATH becomes empty
+for ac_tag
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[  ]*VPATH[        ]*=/{
-s/:*\$(srcdir):*/:/
-s/:*\${srcdir}:*/:/
-s/:*@srcdir@:*/:/
-s/^\([^=]*=[     ]*\):*/\1/
-s/:*$//
-s/^[^=]*=[       ]*$//
-}'
-fi
-cat >>$CONFIG_STATUS <<\_ACEOF
-fi # test -n "$CONFIG_FILES"
-for ac_tag in  :F $CONFIG_FILES  :H $CONFIG_HEADERS
 do
  case $ac_tag in
  :[FHLC]) ac_mode=$ac_tag; continue;;
  esac
  case $ac_mode$ac_tag in
  :[FHL]*:*);;
-  :L* | :C*:*) { { echo "$as_me:$LINENO: error: Invalid tag $ac_tag." >&5
+  :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;;
-echo "$as_me: error: Invalid tag $ac_tag." >&2;}
-   { (exit 1); exit 1; }; };;
  :[FH]-) ac_tag=-:-;;
  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
  esac
@@ -31584,7 +17242,7 @@ echo "$as_me: error: Invalid tag $ac_tag." >&2;}
    for ac_f
    do
      case $ac_f in
-      -) ac_f="$tmp/stdin";;
+      -) ac_f="$ac_tmp/stdin";;
      *) # Look for the file first in the build tree, then in the source tree
         # (if the path is not absolute).  The absolute path cannot be DOS-style,
         # because $ac_f cannot contain `:'.
@@ -31593,26 +17251,34 @@ echo "$as_me: error: Invalid tag $ac_tag." >&2;}
           [\\/$]*) false;;
           *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
           esac ||
-           { { echo "$as_me:$LINENO: error: cannot find input file: $ac_f" >&5
+           as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;;
-echo "$as_me: error: cannot find input file: $ac_f" >&2;}
-   { (exit 1); exit 1; }; };;
      esac
-      ac_file_inputs="$ac_file_inputs $ac_f"
+      case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
+      as_fn_append ac_file_inputs " '$ac_f'"
    done
    # Let's still pretend it is `configure' which instantiates (i.e., don't
    # use $as_me), people would be surprised to read:
    #    /* config.h.  Generated by config.status.  */
-    configure_input="Generated from "`IFS=:
+    configure_input='Generated from '`
-          echo $* | sed 's|^[^:]*/||;s|:[^:]*/|, |g'`" by configure."
+          $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
+        `' by configure.'
    if test x"$ac_file" != x-; then
      configure_input="$ac_file.  $configure_input"
-      { echo "$as_me:$LINENO: creating $ac_file" >&5
+      { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-echo "$as_me: creating $ac_file" >&6;}
+$as_echo "$as_me: creating $ac_file" >&6;}
    fi
+    # Neutralize special characters interpreted by sed in replacement strings.
+    case $configure_input in #(
+    *\&* | *\|* | *\\* )
+       ac_sed_conf_input=`$as_echo "$configure_input" |
+       sed 's/[\\\\&|]/\\\\&/g'`;; #(
+    *) ac_sed_conf_input=$configure_input;;
+    esac
    case $ac_tag in
-    *:-:* | *:-) cat >"$tmp/stdin";;
+    *:-:* | *:-) cat >"$ac_tmp/stdin" \
+      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
    esac
    ;;
  esac
@@ -31622,7 +17288,7 @@ $as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
         X"$ac_file" : 'X\(//\)[^/]' \| \
         X"$ac_file" : 'X\(//\)$' \| \
         X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-echo X"$ac_file" |
+$as_echo X"$ac_file" |
    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
            s//\1/
            q
@@ -31640,55 +17306,15 @@ echo X"$ac_file" |
            q
          }
          s/.*/./; q'`
-  { as_dir="$ac_dir"
+  as_dir="$ac_dir"; as_fn_mkdir_p
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || { $as_mkdir_p && mkdir -p "$as_dir"; } || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-         X"$as_dir" : 'X\(//\)[^/]' \| \
-         X"$as_dir" : 'X\(//\)$' \| \
-         X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-echo X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-            s//\1/
-            q
-          }
-          /^X\(\/\/\)[^/].*/{
-            s//\1/
-            q
-          }
-          /^X\(\/\/\)$/{
-            s//\1/
-            q
-          }
-          /^X\(\/\).*/{
-            s//\1/
-            q
-          }
-          s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || { { echo "$as_me:$LINENO: error: cannot create directory $as_dir" >&5
-echo "$as_me: error: cannot create directory $as_dir" >&2;}
-   { (exit 1); exit 1; }; }; }
  ac_builddir=.
 case "$ac_dir" in
 .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
 *)
-  ac_dir_suffix=/`echo "$ac_dir" | sed 's,^\.[\\/],,'`
+  ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`echo "$ac_dir_suffix" | sed 's,/[^\\/]*,/..,g;s,/,,'`
+  ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
  case $ac_top_builddir_sub in
  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
@@ -31728,12 +17354,12 @@ ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
  esac
 _ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # If the template does not know about datarootdir, expand it.
 # FIXME: This hack should be removed a few years after 2.60.
 ac_datarootdir_hack=; ac_datarootdir_seen=
+ac_sed_dataroot='
-case `sed -n '/datarootdir/ {
+/datarootdir/ {
  p
  q
 }
@@ -31741,36 +17367,37 @@ case `sed -n '/datarootdir/ {
 /@docdir@/p
 /@infodir@/p
 /@localedir@/p
-/@mandir@/p
+/@mandir@/p'
-' $ac_file_inputs` in
+case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
 *datarootdir*) ac_datarootdir_seen=yes;;
 *@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { echo "$as_me:$LINENO: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
+$as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
 _ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
  ac_datarootdir_hack='
  s&@datadir@&$datadir&g
  s&@docdir@&$docdir&g
  s&@infodir@&$infodir&g
  s&@localedir@&$localedir&g
  s&@mandir@&$mandir&g
-    s&\\\${datarootdir}&$datarootdir&g' ;;
+  s&\\\${datarootdir}&$datarootdir&g' ;;
 esac
 _ACEOF
 # Neutralize VPATH when `$srcdir' = `.'.
 # Shell code in configure.ac might set extrasub.
 # FIXME: do we really want to maintain this feature?
-cat >>$CONFIG_STATUS <<_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-  sed "$ac_vpsub
+ac_sed_extra="$ac_vpsub
 $extrasub
 _ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 :t
 /@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s&@configure_input@&$configure_input&;t t
+s|@configure_input@|$ac_sed_conf_input|;t t
 s&@top_builddir@&$ac_top_builddir_sub&;t t
+s&@top_build_prefix@&$ac_top_build_prefix&;t t
 s&@srcdir@&$ac_srcdir&;t t
 s&@abs_srcdir@&$ac_abs_srcdir&;t t
 s&@top_srcdir@&$ac_top_srcdir&;t t
@@ -31780,119 +17407,49 @@ s&@abs_builddir@&$ac_abs_builddir&;t t
 s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
 s&@INSTALL@&$ac_INSTALL&;t t
 $ac_datarootdir_hack
-" $ac_file_inputs | sed -f "$tmp/subs-1.sed" | sed -f "$tmp/subs-2.sed" >$tmp/out
+"
+eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
+  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
 test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$tmp/out"`; test -n "$ac_out"; } &&
+  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[  ]*datarootdir[  ]*:*=/p' "$tmp/out"`; test -z "$ac_out"; } &&
+  { ac_out=`sed -n '/^[  ]*datarootdir[  ]*:*=/p' \
-  { echo "$as_me:$LINENO: WARNING: $ac_file contains a reference to the variable \`datarootdir'
+      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-which seems to be undefined.  Please make sure it is defined." >&5
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
+which seems to be undefined.  Please make sure it is defined" >&5
-which seems to be undefined.  Please make sure it is defined." >&2;}
+$as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
+which seems to be undefined.  Please make sure it is defined" >&2;}
-  rm -f "$tmp/stdin"
+  rm -f "$ac_tmp/stdin"
  case $ac_file in
-  -) cat "$tmp/out"; rm -f "$tmp/out";;
+  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file"; mv "$tmp/out" $ac_file;;
+  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac
+  esac \
+  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
 ;;
  :H)
  #
  # CONFIG_HEADER
  #
-_ACEOF
-# Transform confdefs.h into a sed script `conftest.defines', that
-# substitutes the proper values into config.h.in to produce config.h.
-rm -f conftest.defines conftest.tail
-# First, append a space to every undef/define line, to ease matching.
-echo 's/$/ /' >conftest.defines
-# Then, protect against being on the right side of a sed subst, or in
-# an unquoted here document, in config.status.  If some macros were
-# called several times there might be several #defines for the same
-# symbol, which is useless.  But do not sort them, since the last
-# AC_DEFINE must be honored.
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-# These sed commands are passed to sed as "A NAME B PARAMS C VALUE D", where
-# NAME is the cpp macro being defined, VALUE is the value it is being given.
-# PARAMS is the parameter list in the macro definition--in most cases, it's
-# just an empty string.
-ac_dA='s,^\\([   #]*\\)[^        ]*\\([  ]*'
-ac_dB='\\)[      (].*,\\1define\\2'
-ac_dC=' '
-ac_dD=' ,'
-uniq confdefs.h |
-  sed -n '
-        t rset
-        :rset
-        s/^[     ]*#[    ]*define[       ][      ]*//
-        t ok
-        d
-        :ok
-        s/[\\&,]/\\&/g
-        s/^\('"$ac_word_re"'\)\(([^()]*)\)[      ]*\(.*\)/ '"$ac_dA"'\1'"$ac_dB"'\2'"${ac_dC}"'\3'"$ac_dD"'/p
-        s/^\('"$ac_word_re"'\)[  ]*\(.*\)/'"$ac_dA"'\1'"$ac_dB$ac_dC"'\2'"$ac_dD"'/p
-  ' >>conftest.defines
-# Remove the space that was appended to ease matching.
-# Then replace #undef with comments.  This is necessary, for
-# example, in the case of _POSIX_SOURCE, which is predefined and required
-# on some systems where configure will not decide to define it.
-# (The regexp can be short, since the line contains either #define or #undef.)
-echo 's/ $//
-s,^[     #]*u.*,/* & */,' >>conftest.defines
-# Break up conftest.defines:
-ac_max_sed_lines=50
-# First sed command is:  sed -f defines.sed $ac_file_inputs >"$tmp/out1"
-# Second one is:         sed -f defines.sed "$tmp/out1" >"$tmp/out2"
-# Third one will be:     sed -f defines.sed "$tmp/out2" >"$tmp/out1"
-# et cetera.
-ac_in='$ac_file_inputs'
-ac_out='"$tmp/out1"'
-ac_nxt='"$tmp/out2"'
-while :
-do
-  # Write a here document:
-    cat >>$CONFIG_STATUS <<_ACEOF
-    # First, check the format of the line:
-    cat >"\$tmp/defines.sed" <<\\CEOF
-/^[      ]*#[    ]*undef[        ][      ]*$ac_word_re[  ]*\$/b def
-/^[      ]*#[    ]*define[       ][      ]*$ac_word_re[(         ]/b def
-b
-:def
-_ACEOF
-  sed ${ac_max_sed_lines}q conftest.defines >>$CONFIG_STATUS
-  echo 'CEOF
-    sed -f "$tmp/defines.sed"' "$ac_in >$ac_out" >>$CONFIG_STATUS
-  ac_in=$ac_out; ac_out=$ac_nxt; ac_nxt=$ac_in
-  sed 1,${ac_max_sed_lines}d conftest.defines >conftest.tail
-  grep . conftest.tail >/dev/null || break
-  rm -f conftest.defines
-  mv conftest.tail conftest.defines
-done
-rm -f conftest.defines conftest.tail
-echo "ac_result=$ac_in" >>$CONFIG_STATUS
-cat >>$CONFIG_STATUS <<\_ACEOF
  if test x"$ac_file" != x-; then
-    echo "/* $configure_input  */" >"$tmp/config.h"
+    {
-    cat "$ac_result" >>"$tmp/config.h"
+      $as_echo "/* $configure_input  */" \
-    if diff $ac_file "$tmp/config.h" >/dev/null 2>&1; then
+      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-      { echo "$as_me:$LINENO: $ac_file is unchanged" >&5
+    } >"$ac_tmp/config.h" \
-echo "$as_me: $ac_file is unchanged" >&6;}
+      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
+    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
+      { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
+$as_echo "$as_me: $ac_file is unchanged" >&6;}
    else
-      rm -f $ac_file
+      rm -f "$ac_file"
-      mv "$tmp/config.h" $ac_file
+      mv "$ac_tmp/config.h" "$ac_file" \
+        || as_fn_error $? "could not create $ac_file" "$LINENO" 5
    fi
  else
-    echo "/* $configure_input  */"
+    $as_echo "/* $configure_input  */" \
-    cat "$ac_result"
+      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
+      || as_fn_error $? "could not create -" "$LINENO" 5
  fi
-  rm -f "$tmp/out12"
 ;;
@@ -31901,11 +17458,13 @@ echo "$as_me: $ac_file is unchanged" >&6;}
 done # for ac_tag
-{ (exit 0); exit 0; }
+as_fn_exit 0
 _ACEOF
-chmod +x $CONFIG_STATUS
 ac_clean_files=$ac_clean_files_save
+test $ac_write_fail = 0 ||
+  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
 # configure is writing to config.log, and then calls config.status.
 # config.status does its own redirection, appending to config.log.
@@ -31925,7 +17484,11 @@ if test "$no_create" != yes; then
  exec 5>>config.log
  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
  # would make configure fail if this is the last instruction.
-  $ac_cs_success || { (exit 1); exit 1; }
+  $ac_cs_success || as_fn_exit 1
+fi
+if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
+$as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
 fi
@@ -31981,9 +17544,7 @@ echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
 echo "                  BSD Auth support: $BSD_AUTH_MSG"
 echo "              Random number source: $RAND_MSG"
-if test ! -z "$USE_RAND_HELPER" ; then
+echo "             Privsep sandbox style: $SANDBOX_STYLE"
-echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
-fi
 echo ""
@@ -32015,14 +17576,6 @@ if test "x$PAM_MSG" = "xyes" ; then
        echo ""
 fi
-if test ! -z "$RAND_HELPER_CMDHASH" ; then
-        echo "WARNING: you are using the builtin random number collection "
-        echo "service. Please read WARNING.RNG and request that your OS "
-        echo "vendor includes kernel-based random number collection in "
-        echo "future versions of your OS."
-        echo ""
-fi
 if test ! -z "$NO_PEERCHECK" ; then
        echo "WARNING: the operating system that you are using does not"
        echo "appear to support getpeereid(), getpeerucred() or the"
diff --git a/configure.ac b/configure.ac
index ad3c4ab0f..58da1f167 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-# $Id: configure.ac,v 1.469.4.1 2011/02/04 00:42:14 djm Exp $
+# $Id: configure.ac,v 1.480 2011/08/18 04:48:24 tim Exp $
 #
 # Copyright (c) 1999-2004 Damien Miller
 #
@@ -14,23 +14,12 @@
 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-AC_INIT(OpenSSH, Portable, openssh-unix-dev@mindrot.org)
+AC_INIT([OpenSSH], [Portable], [openssh-unix-dev@mindrot.org])
-AC_REVISION($Revision: 1.469.4.1 $)
+AC_REVISION($Revision: 1.480 $)
 AC_CONFIG_SRCDIR([ssh.c])
+AC_LANG([C])
-# local macros
+AC_CONFIG_HEADER([config.h])
-AC_DEFUN([OPENSSH_CHECK_CFLAG_COMPILE], [{
-        AC_MSG_CHECKING([if $CC supports $1])
-        saved_CFLAGS="$CFLAGS"
-        CFLAGS="$CFLAGS $1"
-        AC_COMPILE_IFELSE([void main(void) { return 0; }],
-                [ AC_MSG_RESULT(yes) ],
-                [ AC_MSG_RESULT(no)
-                  CFLAGS="$saved_CFLAGS" ]
-        )
-}])
-AC_CONFIG_HEADER(config.h)
 AC_PROG_CC
 AC_CANONICAL_HOST
 AC_C_BIGENDIAN
@@ -41,22 +30,22 @@ AC_PROG_CPP
 AC_PROG_RANLIB
 AC_PROG_INSTALL
 AC_PROG_EGREP
-AC_PATH_PROG(AR, ar)
+AC_PATH_PROG([AR], [ar])
-AC_PATH_PROG(CAT, cat)
+AC_PATH_PROG([CAT], [cat])
-AC_PATH_PROG(KILL, kill)
+AC_PATH_PROG([KILL], [kill])
-AC_PATH_PROGS(PERL, perl5 perl)
+AC_PATH_PROGS([PERL], [perl5 perl])
-AC_PATH_PROG(SED, sed)
+AC_PATH_PROG([SED], [sed])
-AC_SUBST(PERL)
+AC_SUBST([PERL])
-AC_PATH_PROG(ENT, ent)
+AC_PATH_PROG([ENT], [ent])
-AC_SUBST(ENT)
+AC_SUBST([ENT])
-AC_PATH_PROG(TEST_MINUS_S_SH, bash)
+AC_PATH_PROG([TEST_MINUS_S_SH], [bash])
-AC_PATH_PROG(TEST_MINUS_S_SH, ksh)
+AC_PATH_PROG([TEST_MINUS_S_SH], [ksh])
-AC_PATH_PROG(TEST_MINUS_S_SH, sh)
+AC_PATH_PROG([TEST_MINUS_S_SH], [sh])
-AC_PATH_PROG(SH, sh)
+AC_PATH_PROG([SH], [sh])
-AC_PATH_PROG(GROFF, groff)
+AC_PATH_PROG([GROFF], [groff])
-AC_PATH_PROG(NROFF, nroff)
+AC_PATH_PROG([NROFF], [nroff])
-AC_PATH_PROG(MANDOC, mandoc)
+AC_PATH_PROG([MANDOC], [mandoc])
-AC_SUBST(TEST_SHELL,sh)
+AC_SUBST([TEST_SHELL], [sh])
 dnl select manpage formatter
 if test "x$MANDOC" != "x" ; then
@@ -69,18 +58,18 @@ else
        AC_MSG_WARN([no manpage formatted found])
        MANFMT="false"
 fi
-AC_SUBST(MANFMT)
+AC_SUBST([MANFMT])
 dnl for buildpkg.sh
-AC_PATH_PROG(PATH_GROUPADD_PROG, groupadd, groupadd,
+AC_PATH_PROG([PATH_GROUPADD_PROG], [groupadd], [groupadd],
        [/usr/sbin${PATH_SEPARATOR}/etc])
-AC_PATH_PROG(PATH_USERADD_PROG, useradd, useradd,
+AC_PATH_PROG([PATH_USERADD_PROG], [useradd], [useradd],
        [/usr/sbin${PATH_SEPARATOR}/etc])
-AC_CHECK_PROG(MAKE_PACKAGE_SUPPORTED, pkgmk, yes, no)
+AC_CHECK_PROG([MAKE_PACKAGE_SUPPORTED], [pkgmk], [yes], [no])
 if test -x /sbin/sh; then
-        AC_SUBST(STARTUP_SCRIPT_SHELL,/sbin/sh)
+        AC_SUBST([STARTUP_SCRIPT_SHELL], [/sbin/sh])
 else
-        AC_SUBST(STARTUP_SCRIPT_SHELL,/bin/sh)
+        AC_SUBST([STARTUP_SCRIPT_SHELL], [/bin/sh])
 fi
 # System features
@@ -92,34 +81,44 @@ fi
 # Use LOGIN_PROGRAM from environment if possible
 if test ! -z "$LOGIN_PROGRAM" ; then
-        AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM",
+        AC_DEFINE_UNQUOTED([LOGIN_PROGRAM_FALLBACK], ["$LOGIN_PROGRAM"],
                [If your header files don't define LOGIN_PROGRAM,
                then use this (detected) from environment and PATH])
 else
        # Search for login
-        AC_PATH_PROG(LOGIN_PROGRAM_FALLBACK, login)
+        AC_PATH_PROG([LOGIN_PROGRAM_FALLBACK], [login])
        if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
-                AC_DEFINE_UNQUOTED(LOGIN_PROGRAM_FALLBACK, "$LOGIN_PROGRAM_FALLBACK")
+                AC_DEFINE_UNQUOTED([LOGIN_PROGRAM_FALLBACK], ["$LOGIN_PROGRAM_FALLBACK"])
        fi
 fi
-AC_PATH_PROG(PATH_PASSWD_PROG, passwd)
+AC_PATH_PROG([PATH_PASSWD_PROG], [passwd])
 if test ! -z "$PATH_PASSWD_PROG" ; then
-        AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG",
+        AC_DEFINE_UNQUOTED([_PATH_PASSWD_PROG], ["$PATH_PASSWD_PROG"],
                [Full path of your "passwd" program])
 fi
 if test -z "$LD" ; then
        LD=$CC
 fi
-AC_SUBST(LD)
+AC_SUBST([LD])
 AC_C_INLINE
-AC_CHECK_DECL(LLONG_MAX, have_llong_max=1, , [#include <limits.h>])
+AC_CHECK_DECL([LLONG_MAX], [have_llong_max=1], , [#include <limits.h>])
+AC_CHECK_DECL([SYSTR_POLICY_KILL], [have_systr_policy_kill=1], , [
+        #include <sys/types.h>
+        #include <sys/param.h>
+        #include <dev/systrace.h>
+])
+AC_CHECK_DECL([RLIMIT_NPROC],
+    [AC_DEFINE([HAVE_RLIMIT_NPROC], [], [sys/resource.h has RLIMIT_NPROC])], , [
+        #include <sys/types.h>
+        #include <sys/resource.h>
+])
 use_stack_protector=1
-AC_ARG_WITH(stackprotect,
+AC_ARG_WITH([stackprotect],
    [  --without-stackprotect  Don't use compiler's stack protection], [
    if test "x$withval" = "xno"; then
        use_stack_protector=0
@@ -127,15 +126,15 @@ AC_ARG_WITH(stackprotect,
 if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wall])
+        OSSH_CHECK_CFLAG_COMPILE([-Wall])
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wpointer-arith])
+        OSSH_CHECK_CFLAG_COMPILE([-Wpointer-arith])
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wuninitialized])
+        OSSH_CHECK_CFLAG_COMPILE([-Wuninitialized])
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wsign-compare])
+        OSSH_CHECK_CFLAG_COMPILE([-Wsign-compare])
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wformat-security])
+        OSSH_CHECK_CFLAG_COMPILE([-Wformat-security])
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wno-pointer-sign])
+        OSSH_CHECK_CFLAG_COMPILE([-Wpointer-sign], [-Wno-pointer-sign])
-        OPENSSH_CHECK_CFLAG_COMPILE([-Wno-unused-result])
+        OSSH_CHECK_CFLAG_COMPILE([-Wunused-result], [-Wno-unused-result])
-        OPENSSH_CHECK_CFLAG_COMPILE([-fno-strict-aliasing])
+        OSSH_CHECK_CFLAG_COMPILE([-fno-strict-aliasing])
-        AC_MSG_CHECKING(gcc version)
+        AC_MSG_CHECKING([gcc version])
        GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
        case $GCC_VER in
                1.*) no_attrib_nonnull=1 ;;
@@ -145,52 +144,52 @@ if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
                2.*) no_attrib_nonnull=1 ;;
                *) ;;
        esac
-        AC_MSG_RESULT($GCC_VER)
+        AC_MSG_RESULT([$GCC_VER])
-        AC_MSG_CHECKING(if $CC accepts -fno-builtin-memset)
+        AC_MSG_CHECKING([if $CC accepts -fno-builtin-memset])
        saved_CFLAGS="$CFLAGS"
        CFLAGS="$CFLAGS -fno-builtin-memset"
-        AC_LINK_IFELSE( [AC_LANG_SOURCE([[
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <string.h> ]],
-#include <string.h>
+                        [[ char b[10]; memset(b, 0, sizeof(b)); ]])],
-int main(void){char b[10]; memset(b, 0, sizeof(b));}
+                [ AC_MSG_RESULT([yes]) ],
-                ]])],
+                [ AC_MSG_RESULT([no])
-                [ AC_MSG_RESULT(yes) ],
-                [ AC_MSG_RESULT(no)
                  CFLAGS="$saved_CFLAGS" ]
-)
+        )
        # -fstack-protector-all doesn't always work for some GCC versions
        # and/or platforms, so we test if we can.  If it's not supported
        # on a given platform gcc will emit a warning so we use -Werror.
        if test "x$use_stack_protector" = "x1"; then
            for t in -fstack-protector-all -fstack-protector; do
-                AC_MSG_CHECKING(if $CC supports $t)
+                AC_MSG_CHECKING([if $CC supports $t])
                saved_CFLAGS="$CFLAGS"
                saved_LDFLAGS="$LDFLAGS"
                CFLAGS="$CFLAGS $t -Werror"
                LDFLAGS="$LDFLAGS $t -Werror"
                AC_LINK_IFELSE(
-                        [AC_LANG_SOURCE([
+                        [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
-#include <stdio.h>
+                        [[
-int main(void){char x[[256]]; snprintf(x, sizeof(x), "XXX"); return 0;}
+        char x[256];
-                         ])],
+        snprintf(x, sizeof(x), "XXX");
-                    [ AC_MSG_RESULT(yes)
+                         ]])],
+                    [ AC_MSG_RESULT([yes])
                      CFLAGS="$saved_CFLAGS $t"
                      LDFLAGS="$saved_LDFLAGS $t"
-                      AC_MSG_CHECKING(if $t works)
+                      AC_MSG_CHECKING([if $t works])
                      AC_RUN_IFELSE(
-                        [AC_LANG_SOURCE([
+                        [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
-#include <stdio.h>
+                        [[
-int main(void){char x[[256]]; snprintf(x, sizeof(x), "XXX"); return 0;}
+        char x[256];
-                        ])],
+        snprintf(x, sizeof(x), "XXX");
-                        [ AC_MSG_RESULT(yes)
+                        ]])],
+                        [ AC_MSG_RESULT([yes])
                          break ],
-                        [ AC_MSG_RESULT(no) ],
+                        [ AC_MSG_RESULT([no]) ],
                        [ AC_MSG_WARN([cross compiling: cannot test])
                          break ]
                      )
                    ],
-                    [ AC_MSG_RESULT(no) ]
+                    [ AC_MSG_RESULT([no]) ]
                )
                CFLAGS="$saved_CFLAGS"
                LDFLAGS="$saved_LDFLAGS"
@@ -202,7 +201,7 @@ int main(void){char x[[256]]; snprintf(x, sizeof(x), "XXX"); return 0;}
                unset ac_cv_have_decl_LLONG_MAX
                saved_CFLAGS="$CFLAGS"
                CFLAGS="$CFLAGS -std=gnu99"
-                AC_CHECK_DECL(LLONG_MAX,
+                AC_CHECK_DECL([LLONG_MAX],
                    [have_llong_max=1],
                    [CFLAGS="$saved_CFLAGS"],
                    [#include <limits.h>]
@@ -211,10 +210,10 @@ int main(void){char x[[256]]; snprintf(x, sizeof(x), "XXX"); return 0;}
 fi
 if test "x$no_attrib_nonnull" != "x1" ; then
-        AC_DEFINE(HAVE_ATTRIBUTE__NONNULL__, 1, [Have attribute nonnull])
+        AC_DEFINE([HAVE_ATTRIBUTE__NONNULL__], [1], [Have attribute nonnull])
 fi
-AC_ARG_WITH(rpath,
+AC_ARG_WITH([rpath],
        [  --without-rpath         Disable auto-added -R linker paths],
        [
                if test "x$withval" = "xno" ; then
@@ -227,7 +226,7 @@ AC_ARG_WITH(rpath,
 )
 # Allow user to specify flags
-AC_ARG_WITH(cflags,
+AC_ARG_WITH([cflags],
        [  --with-cflags           Specify additional flags to pass to compiler],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -236,7 +235,7 @@ AC_ARG_WITH(cflags,
                fi
        ]
 )
-AC_ARG_WITH(cppflags,
+AC_ARG_WITH([cppflags],
        [  --with-cppflags         Specify additional flags to pass to preprocessor] ,
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -245,7 +244,7 @@ AC_ARG_WITH(cppflags,
                fi
        ]
 )
-AC_ARG_WITH(ldflags,
+AC_ARG_WITH([ldflags],
        [  --with-ldflags          Specify additional flags to pass to linker],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -254,7 +253,7 @@ AC_ARG_WITH(ldflags,
                fi
        ]
 )
-AC_ARG_WITH(libs,
+AC_ARG_WITH([libs],
        [  --with-libs             Specify additional libraries to link with],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -263,7 +262,7 @@ AC_ARG_WITH(libs,
                fi
        ]
 )
-AC_ARG_WITH(Werror,
+AC_ARG_WITH([Werror],
        [  --with-Werror           Build main code with -Werror],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"; then
@@ -275,7 +274,7 @@ AC_ARG_WITH(Werror,
        ]
 )
-AC_CHECK_HEADERS( \
+AC_CHECK_HEADERS([ \
        bstring.h \
        crypt.h \
        crypto/sha2.h \
@@ -339,29 +338,29 @@ AC_CHECK_HEADERS( \
        utmp.h \
        utmpx.h \
        vis.h \
-)
+])
 # lastlog.h requires sys/time.h to be included first on Solaris
-AC_CHECK_HEADERS(lastlog.h, [], [], [
+AC_CHECK_HEADERS([lastlog.h], [], [], [
 #ifdef HAVE_SYS_TIME_H
 # include <sys/time.h>
 #endif
 ])
 # sys/ptms.h requires sys/stream.h to be included first on Solaris
-AC_CHECK_HEADERS(sys/ptms.h, [], [], [
+AC_CHECK_HEADERS([sys/ptms.h], [], [], [
 #ifdef HAVE_SYS_STREAM_H
 # include <sys/stream.h>
 #endif
 ])
 # login_cap.h requires sys/types.h on NetBSD
-AC_CHECK_HEADERS(login_cap.h, [], [], [
+AC_CHECK_HEADERS([login_cap.h], [], [], [
 #include <sys/types.h>
 ])
 # older BSDs need sys/param.h before sys/mount.h
-AC_CHECK_HEADERS(sys/mount.h, [], [], [
+AC_CHECK_HEADERS([sys/mount.h], [], [], [
 #include <sys/param.h>
 ])
@@ -378,15 +377,14 @@ case "$host" in
        # particularly with older versions of vac or xlc.
        # It also throws errors about null macro argments, but these are
        # not fatal.
-        AC_MSG_CHECKING(if compiler allows macro redefinitions)
+        AC_MSG_CHECKING([if compiler allows macro redefinitions])
        AC_COMPILE_IFELSE(
-            [AC_LANG_SOURCE([[
+            [AC_LANG_PROGRAM([[
 #define testmacro foo
-#define testmacro bar
+#define testmacro bar]],
-int main(void) { exit(0); }
+            [[ exit(0); ]])],
-            ]])],
+            [ AC_MSG_RESULT([yes]) ],
-            [ AC_MSG_RESULT(yes) ],
+            [ AC_MSG_RESULT([no])
-            [ AC_MSG_RESULT(no)
              CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
              LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
              CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
@@ -407,21 +405,22 @@ int main(void) { exit(0); }
        for tryflags in $flags ;do
                if (test -z "$blibflags"); then
                        LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
-                        AC_TRY_LINK([], [], [blibflags=$tryflags])
+                        AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[]])],
+                        [blibflags=$tryflags], [])
                fi
        done
        if (test -z "$blibflags"); then
-                AC_MSG_RESULT(not found)
+                AC_MSG_RESULT([not found])
                AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
        else
-                AC_MSG_RESULT($blibflags)
+                AC_MSG_RESULT([$blibflags])
        fi
        LDFLAGS="$saved_LDFLAGS"
        dnl Check for authenticate.  Might be in libs.a on older AIXes
-        AC_CHECK_FUNC(authenticate, [AC_DEFINE(WITH_AIXAUTHENTICATE, 1,
+        AC_CHECK_FUNC([authenticate], [AC_DEFINE([WITH_AIXAUTHENTICATE], [1],
                [Define if you want to enable AIX4's authenticate function])],
-                [AC_CHECK_LIB(s,authenticate,
+                [AC_CHECK_LIB([s], [authenticate],
-                        [ AC_DEFINE(WITH_AIXAUTHENTICATE)
+                        [ AC_DEFINE([WITH_AIXAUTHENTICATE])
                                LIBS="$LIBS -ls"
                        ])
                ])
@@ -429,147 +428,154 @@ int main(void) { exit(0); }
        AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
            passwdexpired, setauthdb], , , [#include <usersec.h>])
        dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
-        AC_CHECK_DECLS(loginfailed,
+        AC_CHECK_DECLS([loginfailed],
-                 [AC_MSG_CHECKING(if loginfailed takes 4 arguments)
+            [AC_MSG_CHECKING([if loginfailed takes 4 arguments])
-                  AC_TRY_COMPILE(
+            AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <usersec.h> ]],
-                        [#include <usersec.h>],
+                [[ (void)loginfailed("user","host","tty",0); ]])],
-                        [(void)loginfailed("user","host","tty",0);],
+                [AC_MSG_RESULT([yes])
-                        [AC_MSG_RESULT(yes)
+                AC_DEFINE([AIX_LOGINFAILED_4ARG], [1],
-                         AC_DEFINE(AIX_LOGINFAILED_4ARG, 1,
+                        [Define if your AIX loginfailed() function
-                                [Define if your AIX loginfailed() function
+                        takes 4 arguments (AIX >= 5.2)])], [AC_MSG_RESULT([no])
-                                takes 4 arguments (AIX >= 5.2)])],
+            ])],
-                        [AC_MSG_RESULT(no)]
+            [],
-                )],
+            [#include <usersec.h>]
-                [],
-                [#include <usersec.h>]
        )
-        AC_CHECK_FUNCS(getgrset setauthdb)
+        AC_CHECK_FUNCS([getgrset setauthdb])
-        AC_CHECK_DECL(F_CLOSEM,
+        AC_CHECK_DECL([F_CLOSEM],
-            AC_DEFINE(HAVE_FCNTL_CLOSEM, 1, [Use F_CLOSEM fcntl for closefrom]),
+            AC_DEFINE([HAVE_FCNTL_CLOSEM], [1], [Use F_CLOSEM fcntl for closefrom]),
            [],
            [ #include <limits.h>
              #include <fcntl.h> ]
        )
        check_for_aix_broken_getaddrinfo=1
-        AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
+        AC_DEFINE([BROKEN_REALPATH], [1], [Define if you have a broken realpath.])
-        AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
+        AC_DEFINE([SETEUID_BREAKS_SETUID], [1],
            [Define if your platform breaks doing a seteuid before a setuid])
-        AC_DEFINE(BROKEN_SETREUID, 1, [Define if your setreuid() is broken])
+        AC_DEFINE([BROKEN_SETREUID], [1], [Define if your setreuid() is broken])
-        AC_DEFINE(BROKEN_SETREGID, 1, [Define if your setregid() is broken])
+        AC_DEFINE([BROKEN_SETREGID], [1], [Define if your setregid() is broken])
        dnl AIX handles lastlog as part of its login message
-        AC_DEFINE(DISABLE_LASTLOG, 1, [Define if you don't want to use lastlog])
+        AC_DEFINE([DISABLE_LASTLOG], [1], [Define if you don't want to use lastlog])
-        AC_DEFINE(LOGIN_NEEDS_UTMPX, 1,
+        AC_DEFINE([LOGIN_NEEDS_UTMPX], [1],
                [Some systems need a utmpx entry for /bin/login to work])
-        AC_DEFINE(SPT_TYPE,SPT_REUSEARGV,
+        AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV],
                [Define to a Set Process Title type if your system is
                supported by bsd-setproctitle.c])
-        AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
+        AC_DEFINE([SSHPAM_CHAUTHTOK_NEEDS_RUID], [1],
            [AIX 5.2 and 5.3 (and presumably newer) require this])
-        AC_DEFINE(PTY_ZEROREAD, 1, [read(1) can return 0 for a non-closed fd])
+        AC_DEFINE([PTY_ZEROREAD], [1], [read(1) can return 0 for a non-closed fd])
        ;;
 *-*-cygwin*)
        check_for_libcrypt_later=1
        LIBS="$LIBS /usr/lib/textreadmode.o"
-        AC_DEFINE(HAVE_CYGWIN, 1, [Define if you are on Cygwin])
+        AC_DEFINE([HAVE_CYGWIN], [1], [Define if you are on Cygwin])
-        AC_DEFINE(USE_PIPES, 1, [Use PIPES instead of a socketpair()])
+        AC_DEFINE([USE_PIPES], [1], [Use PIPES instead of a socketpair()])
-        AC_DEFINE(DISABLE_SHADOW, 1,
+        AC_DEFINE([DISABLE_SHADOW], [1],
                [Define if you want to disable shadow passwords])
-        AC_DEFINE(NO_X11_UNIX_SOCKETS, 1,
+        AC_DEFINE([NO_X11_UNIX_SOCKETS], [1],
                [Define if X11 doesn't support AF_UNIX sockets on that system])
-        AC_DEFINE(NO_IPPORT_RESERVED_CONCEPT, 1,
+        AC_DEFINE([NO_IPPORT_RESERVED_CONCEPT], [1],
                [Define if the concept of ports only accessible to
                superusers isn't known])
-        AC_DEFINE(DISABLE_FD_PASSING, 1,
+        AC_DEFINE([DISABLE_FD_PASSING], [1],
                [Define if your platform needs to skip post auth
                file descriptor passing])
-        AC_DEFINE(SSH_IOBUFSZ, 65535, [Windows is sensitive to read buffer size])
+        AC_DEFINE([SSH_IOBUFSZ], [65535], [Windows is sensitive to read buffer size])
-        AC_DEFINE(FILESYSTEM_NO_BACKSLASH, 1, [File names may not contain backslash characters]) 
+        AC_DEFINE([FILESYSTEM_NO_BACKSLASH], [1], [File names may not contain backslash characters]) 
        ;;
 *-*-dgux*)
-        AC_DEFINE(IP_TOS_IS_BROKEN, 1,
+        AC_DEFINE([IP_TOS_IS_BROKEN], [1],
                [Define if your system choked on IP TOS setting])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
        ;;
 *-*-darwin*)
-        AC_MSG_CHECKING(if we have working getaddrinfo)
+        AC_MSG_CHECKING([if we have working getaddrinfo])
-        AC_TRY_RUN([#include <mach-o/dyld.h>
+        AC_RUN_IFELSE([AC_LANG_SOURCE([[ #include <mach-o/dyld.h>
 main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
                exit(0);
        else
                exit(1);
-}], [AC_MSG_RESULT(working)],
+}
-        [AC_MSG_RESULT(buggy)
+                        ]])],
-        AC_DEFINE(BROKEN_GETADDRINFO, 1, [getaddrinfo is broken (if present)])],
+        [AC_MSG_RESULT([working])],
-        [AC_MSG_RESULT(assume it is working)])
+        [AC_MSG_RESULT([buggy])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([BROKEN_GETADDRINFO], [1],
-        AC_DEFINE(BROKEN_SETREUID)
+                [getaddrinfo is broken (if present)])
-        AC_DEFINE(BROKEN_SETREGID)
+        ],
-        AC_DEFINE(BROKEN_GLOB, 1, [OS X glob does not do what we expect])
+        [AC_MSG_RESULT([assume it is working])])
-        AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1,
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
+        AC_DEFINE([BROKEN_SETREUID])
+        AC_DEFINE([BROKEN_SETREGID])
+        AC_DEFINE([BROKEN_GLOB], [1], [OS X glob does not do what we expect])
+        AC_DEFINE_UNQUOTED([BIND_8_COMPAT], [1],
                [Define if your resolver libs need this for getrrsetbyname])
-        AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
+        AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
-        AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
+        AC_DEFINE([SSH_TUN_COMPAT_AF], [1],
            [Use tunnel device compatibility to OpenBSD])
-        AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
+        AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
            [Prepend the address family to IP tunnel traffic])
-        AC_MSG_CHECKING(if we have the Security Authorization Session API)
+        AC_MSG_CHECKING([if we have the Security Authorization Session API])
        AC_TRY_COMPILE([#include <Security/AuthSession.h>],
                [SessionCreate(0, 0);],
                [ac_cv_use_security_session_api="yes"
-                 AC_DEFINE(USE_SECURITY_SESSION_API, 1, 
+                 AC_DEFINE([USE_SECURITY_SESSION_API], [1], 
                        [platform has the Security Authorization Session API])
                 LIBS="$LIBS -framework Security"
-                 AC_MSG_RESULT(yes)],
+                 AC_MSG_RESULT([yes])],
                [ac_cv_use_security_session_api="no"
-                 AC_MSG_RESULT(no)])
+                 AC_MSG_RESULT([no])])
-        AC_MSG_CHECKING(if we have an in-memory credentials cache)
+        AC_MSG_CHECKING([if we have an in-memory credentials cache])
        AC_TRY_COMPILE(
                [#include <Kerberos/Kerberos.h>],
                [cc_context_t c;
                 (void) cc_initialize (&c, 0, NULL, NULL);],
-                [AC_DEFINE(USE_CCAPI, 1, 
+                [AC_DEFINE([USE_CCAPI], [1], 
                        [platform uses an in-memory credentials cache])
                 LIBS="$LIBS -framework Security"
-                 AC_MSG_RESULT(yes)
+                 AC_MSG_RESULT([yes])
                 if test "x$ac_cv_use_security_session_api" = "xno"; then
-                        AC_MSG_ERROR(*** Need a security framework to use the credentials cache API ***)
+                        AC_MSG_ERROR([*** Need a security framework to use the credentials cache API ***])
                fi],
-                [AC_MSG_RESULT(no)]
+                [AC_MSG_RESULT([no])]
        )
-        m4_pattern_allow(AU_IPv)
+        m4_pattern_allow([AU_IPv])
-        AC_CHECK_DECL(AU_IPv4, [], 
+        AC_CHECK_DECL([AU_IPv4], [], 
-            AC_DEFINE(AU_IPv4, 0, [System only supports IPv4 audit records])
+            AC_DEFINE([AU_IPv4], [0], [System only supports IPv4 audit records])
            [#include <bsm/audit.h>]
-        AC_DEFINE(LASTLOG_WRITE_PUTUTXLINE, 1,
+        AC_DEFINE([LASTLOG_WRITE_PUTUTXLINE], [1],
            [Define if pututxline updates lastlog too])
        )
+        AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV],
+                [Define to a Set Process Title type if your system is
+                supported by bsd-setproctitle.c])
+        AC_CHECK_FUNCS([sandbox_init])
+        AC_CHECK_HEADERS([sandbox.h])
        ;;
 *-*-dragonfly*)
        SSHDLIBS="$SSHDLIBS -lcrypt"
        ;;
 *-*-haiku*) 
    LIBS="$LIBS -lbsd "
-    AC_CHECK_LIB(network, socket)
+    AC_CHECK_LIB([network], [socket])
-    AC_DEFINE(HAVE_U_INT64_T)
+    AC_DEFINE([HAVE_U_INT64_T])
    MANTYPE=man 
    ;; 
 *-*-hpux*)
        # first we define all of the options common to all HP-UX releases
        CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
        IPADDR_IN_DISPLAY=yes
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(LOGIN_NO_ENDOPT, 1,
+        AC_DEFINE([LOGIN_NO_ENDOPT], [1],
            [Define if your login program cannot handle end of options ("--")])
-        AC_DEFINE(LOGIN_NEEDS_UTMPX)
+        AC_DEFINE([LOGIN_NEEDS_UTMPX])
-        AC_DEFINE(LOCKED_PASSWD_STRING, "*",
+        AC_DEFINE([LOCKED_PASSWD_STRING], ["*"],
                [String used in /etc/passwd to denote locked account])
-        AC_DEFINE(SPT_TYPE,SPT_PSTAT)
+        AC_DEFINE([SPT_TYPE], [SPT_PSTAT])
-        MAIL="/var/mail/username"
+        maildir="/var/mail"
        LIBS="$LIBS -lsec"
-        AC_CHECK_LIB(xnet, t_error, ,
+        AC_CHECK_LIB([xnet], [t_error], ,
-            AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***]))
+            [AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***])])
        # next, we define all of the options specific to major releases
        case "$host" in
@@ -579,13 +585,13 @@ main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
                fi
                ;;
        *-*-hpux11*)
-                AC_DEFINE(PAM_SUN_CODEBASE, 1,
+                AC_DEFINE([PAM_SUN_CODEBASE], [1],
                        [Define if you are using Solaris-derived PAM which
                        passes pam_messages to the conversation function
                        with an extra level of indirection])
-                AC_DEFINE(DISABLE_UTMP, 1,
+                AC_DEFINE([DISABLE_UTMP], [1],
                        [Define if you don't want to use utmp])
-                AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
+                AC_DEFINE([USE_BTMP], [1], [Use btmp to log bad logins])
                check_for_hpux_broken_getaddrinfo=1
                check_for_conflicting_getspnam=1
                ;;
@@ -594,7 +600,7 @@ main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
        # lastly, we define options specific to minor releases
        case "$host" in
        *-*-hpux10.26)
-                AC_DEFINE(HAVE_SECUREWARE, 1,
+                AC_DEFINE([HAVE_SECUREWARE], [1],
                        [Define if you have SecureWare-based
                        protected password database])
                disable_ptmx_check=yes
@@ -604,79 +610,79 @@ main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
        ;;
 *-*-irix5*)
        PATH="$PATH:/usr/etc"
-        AC_DEFINE(BROKEN_INET_NTOA, 1,
+        AC_DEFINE([BROKEN_INET_NTOA], [1],
                [Define if you system's inet_ntoa is busted
                (e.g. Irix gcc issue)])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(WITH_ABBREV_NO_TTY, 1,
+        AC_DEFINE([WITH_ABBREV_NO_TTY], [1],
                [Define if you shouldn't strip 'tty' from your
                ttyname in [uw]tmp])
-        AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
+        AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
        ;;
 *-*-irix6*)
        PATH="$PATH:/usr/etc"
-        AC_DEFINE(WITH_IRIX_ARRAY, 1,
+        AC_DEFINE([WITH_IRIX_ARRAY], [1],
                [Define if you have/want arrays
                (cluster-wide session managment, not C arrays)])
-        AC_DEFINE(WITH_IRIX_PROJECT, 1,
+        AC_DEFINE([WITH_IRIX_PROJECT], [1],
                [Define if you want IRIX project management])
-        AC_DEFINE(WITH_IRIX_AUDIT, 1,
+        AC_DEFINE([WITH_IRIX_AUDIT], [1],
                [Define if you want IRIX audit trails])
-        AC_CHECK_FUNC(jlimit_startjob, [AC_DEFINE(WITH_IRIX_JOBS, 1,
+        AC_CHECK_FUNC([jlimit_startjob], [AC_DEFINE([WITH_IRIX_JOBS], [1],
                [Define if you want IRIX kernel jobs])])
-        AC_DEFINE(BROKEN_INET_NTOA)
+        AC_DEFINE([BROKEN_INET_NTOA])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(BROKEN_UPDWTMPX, 1, [updwtmpx is broken (if present)])
+        AC_DEFINE([BROKEN_UPDWTMPX], [1], [updwtmpx is broken (if present)])
-        AC_DEFINE(WITH_ABBREV_NO_TTY)
+        AC_DEFINE([WITH_ABBREV_NO_TTY])
-        AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
+        AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
        ;;
 *-*-k*bsd*-gnu | *-*-kopensolaris*-gnu)
        check_for_libcrypt_later=1
-        AC_DEFINE(PAM_TTY_KLUDGE)
+        AC_DEFINE([PAM_TTY_KLUDGE])
-        AC_DEFINE(LOCKED_PASSWD_PREFIX, "!")
+        AC_DEFINE([LOCKED_PASSWD_PREFIX], ["!"])
-        AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
+        AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV])
-        AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
+        AC_DEFINE([_PATH_BTMP], ["/var/log/btmp"], [log for bad login attempts])
-        AC_DEFINE(USE_BTMP, 1, [Use btmp to log bad logins])
+        AC_DEFINE([USE_BTMP], [1], [Use btmp to log bad logins])
        ;;
 *-*-linux*)
        no_dev_ptmx=1
        check_for_libcrypt_later=1
        check_for_openpty_ctty_bug=1
-        AC_DEFINE(PAM_TTY_KLUDGE, 1,
+        AC_DEFINE([PAM_TTY_KLUDGE], [1],
                [Work around problematic Linux PAM modules handling of PAM_TTY])
-        AC_DEFINE(LOCKED_PASSWD_PREFIX, "!",
+        AC_DEFINE([LOCKED_PASSWD_PREFIX], ["!"],
                [String used in /etc/passwd to denote locked account])
-        AC_DEFINE(SPT_TYPE,SPT_REUSEARGV)
+        AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV])
-        AC_DEFINE(LINK_OPNOTSUPP_ERRNO, EPERM,
+        AC_DEFINE([LINK_OPNOTSUPP_ERRNO], [EPERM],
                [Define to whatever link() returns for "not supported"
                if it doesn't return EOPNOTSUPP.])
-        AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
+        AC_DEFINE([_PATH_BTMP], ["/var/log/btmp"], [log for bad login attempts])
-        AC_DEFINE(USE_BTMP)
+        AC_DEFINE([USE_BTMP])
-        AC_DEFINE(LINUX_OOM_ADJUST, 1, [Adjust Linux out-of-memory killer])
+        AC_DEFINE([LINUX_OOM_ADJUST], [1], [Adjust Linux out-of-memory killer])
        inet6_default_4in6=yes
        case `uname -r` in
        1.*|2.0.*)
-                AC_DEFINE(BROKEN_CMSG_TYPE, 1,
+                AC_DEFINE([BROKEN_CMSG_TYPE], [1],
                        [Define if cmsg_type is not passed correctly])
                ;;
        esac
        # tun(4) forwarding compat code
-        AC_CHECK_HEADERS(linux/if_tun.h)
+        AC_CHECK_HEADERS([linux/if_tun.h])
        if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
-                AC_DEFINE(SSH_TUN_LINUX, 1,
+                AC_DEFINE([SSH_TUN_LINUX], [1],
                    [Open tunnel devices the Linux tun/tap way])
-                AC_DEFINE(SSH_TUN_COMPAT_AF, 1,
+                AC_DEFINE([SSH_TUN_COMPAT_AF], [1],
                    [Use tunnel device compatibility to OpenBSD])
-                AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
+                AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
                    [Prepend the address family to IP tunnel traffic])
        fi
        ;;
 mips-sony-bsd|mips-sony-newsos4)
-        AC_DEFINE(NEED_SETPGRP, 1, [Need setpgrp to acquire controlling tty])
+        AC_DEFINE([NEED_SETPGRP], [1], [Need setpgrp to acquire controlling tty])
        SONY=1
        ;;
 *-*-netbsd*)
@@ -684,91 +690,91 @@ mips-sony-bsd|mips-sony-newsos4)
        if test "x$withval" != "xno" ; then
                need_dash_r=1
        fi
-        AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
+        AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
        AC_CHECK_HEADER([net/if_tap.h], ,
-            AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
+            AC_DEFINE([SSH_TUN_NO_L2], [1], [No layer 2 tunnel support]))
-        AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
+        AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
            [Prepend the address family to IP tunnel traffic])
        ;;
 *-*-freebsd*)
        check_for_libcrypt_later=1
-        AC_DEFINE(LOCKED_PASSWD_PREFIX, "*LOCKED*", [Account locked with pw(1)])
+        AC_DEFINE([LOCKED_PASSWD_PREFIX], ["*LOCKED*"], [Account locked with pw(1)])
-        AC_DEFINE(SSH_TUN_FREEBSD, 1, [Open tunnel devices the FreeBSD way])
+        AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
        AC_CHECK_HEADER([net/if_tap.h], ,
-            AC_DEFINE(SSH_TUN_NO_L2, 1, [No layer 2 tunnel support]))
+            AC_DEFINE([SSH_TUN_NO_L2], [1], [No layer 2 tunnel support]))
-        AC_DEFINE(BROKEN_GLOB, 1, [FreeBSD glob does not do what we need])
+        AC_DEFINE([BROKEN_GLOB], [1], [FreeBSD glob does not do what we need])
        ;;
 *-*-bsdi*)
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
        ;;
 *-next-*)
        conf_lastlog_location="/usr/adm/lastlog"
        conf_utmp_location=/etc/utmp
        conf_wtmp_location=/usr/adm/wtmp
-        MAIL=/usr/spool/mail
+        maildir=/usr/spool/mail
-        AC_DEFINE(HAVE_NEXT, 1, [Define if you are on NeXT])
+        AC_DEFINE([HAVE_NEXT], [1], [Define if you are on NeXT])
-        AC_DEFINE(BROKEN_REALPATH)
+        AC_DEFINE([BROKEN_REALPATH])
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(BROKEN_SAVED_UIDS, 1, [Needed for NeXT])
+        AC_DEFINE([BROKEN_SAVED_UIDS], [1], [Needed for NeXT])
        ;;
 *-*-openbsd*)
-        AC_DEFINE(HAVE_ATTRIBUTE__SENTINEL__, 1, [OpenBSD's gcc has sentinel])
+        AC_DEFINE([HAVE_ATTRIBUTE__SENTINEL__], [1], [OpenBSD's gcc has sentinel])
-        AC_DEFINE(HAVE_ATTRIBUTE__BOUNDED__, 1, [OpenBSD's gcc has bounded])
+        AC_DEFINE([HAVE_ATTRIBUTE__BOUNDED__], [1], [OpenBSD's gcc has bounded])
-        AC_DEFINE(SSH_TUN_OPENBSD, 1, [Open tunnel devices the OpenBSD way])
+        AC_DEFINE([SSH_TUN_OPENBSD], [1], [Open tunnel devices the OpenBSD way])
-        AC_DEFINE(SYSLOG_R_SAFE_IN_SIGHAND, 1,
+        AC_DEFINE([SYSLOG_R_SAFE_IN_SIGHAND], [1],
            [syslog_r function is safe to use in in a signal handler])
        ;;
 *-*-solaris*)
        if test "x$withval" != "xno" ; then
                need_dash_r=1
        fi
-        AC_DEFINE(PAM_SUN_CODEBASE)
+        AC_DEFINE([PAM_SUN_CODEBASE])
-        AC_DEFINE(LOGIN_NEEDS_UTMPX)
+        AC_DEFINE([LOGIN_NEEDS_UTMPX])
-        AC_DEFINE(LOGIN_NEEDS_TERM, 1,
+        AC_DEFINE([LOGIN_NEEDS_TERM], [1],
                [Some versions of /bin/login need the TERM supplied
                on the commandline])
-        AC_DEFINE(PAM_TTY_KLUDGE)
+        AC_DEFINE([PAM_TTY_KLUDGE])
-        AC_DEFINE(SSHPAM_CHAUTHTOK_NEEDS_RUID, 1,
+        AC_DEFINE([SSHPAM_CHAUTHTOK_NEEDS_RUID], [1],
                [Define if pam_chauthtok wants real uid set
                to the unpriv'ed user])
-        AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
+        AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
        # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
-        AC_DEFINE(SSHD_ACQUIRES_CTTY, 1,
+        AC_DEFINE([SSHD_ACQUIRES_CTTY], [1],
                [Define if sshd somehow reacquires a controlling TTY
                after setsid()])
-        AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd
+        AC_DEFINE([PASSWD_NEEDS_USERNAME], [1], [must supply username to passwd
                in case the name is longer than 8 chars])
-        AC_DEFINE(BROKEN_TCGETATTR_ICANON, 1, [tcgetattr with ICANON may hang])
+        AC_DEFINE([BROKEN_TCGETATTR_ICANON], [1], [tcgetattr with ICANON may hang])
        external_path_file=/etc/default/login
        # hardwire lastlog location (can't detect it on some versions)
        conf_lastlog_location="/var/adm/lastlog"
-        AC_MSG_CHECKING(for obsolete utmp and wtmp in solaris2.x)
+        AC_MSG_CHECKING([for obsolete utmp and wtmp in solaris2.x])
        sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
        if test "$sol2ver" -ge 8; then
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-                AC_DEFINE(DISABLE_UTMP)
+                AC_DEFINE([DISABLE_UTMP])
-                AC_DEFINE(DISABLE_WTMP, 1,
+                AC_DEFINE([DISABLE_WTMP], [1],
                        [Define if you don't want to use wtmp])
        else
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
        fi
-        AC_ARG_WITH(solaris-contracts,
+        AC_ARG_WITH([solaris-contracts],
                [  --with-solaris-contracts Enable Solaris process contracts (experimental)],
                [
-                AC_CHECK_LIB(contract, ct_tmpl_activate,
+                AC_CHECK_LIB([contract], [ct_tmpl_activate],
-                        [ AC_DEFINE(USE_SOLARIS_PROCESS_CONTRACTS, 1,
+                        [ AC_DEFINE([USE_SOLARIS_PROCESS_CONTRACTS], [1],
                                [Define if you have Solaris process contracts])
                          SSHDLIBS="$SSHDLIBS -lcontract"
                          SPC_MSG="yes" ], )
                ],
        )
-        AC_ARG_WITH(solaris-projects,
+        AC_ARG_WITH([solaris-projects],
                [  --with-solaris-projects Enable Solaris projects (experimental)],
                [
-                AC_CHECK_LIB(project, setproject,
+                AC_CHECK_LIB([project], [setproject],
-                        [ AC_DEFINE(USE_SOLARIS_PROJECTS, 1,
+                        [ AC_DEFINE([USE_SOLARIS_PROJECTS], [1],
                                [Define if you have Solaris projects])
                        SSHDLIBS="$SSHDLIBS -lproject"
                        SP_MSG="yes" ], )
@@ -777,33 +783,33 @@ mips-sony-bsd|mips-sony-newsos4)
        ;;
 *-*-sunos4*)
        CPPFLAGS="$CPPFLAGS -DSUNOS4"
-        AC_CHECK_FUNCS(getpwanam)
+        AC_CHECK_FUNCS([getpwanam])
-        AC_DEFINE(PAM_SUN_CODEBASE)
+        AC_DEFINE([PAM_SUN_CODEBASE])
        conf_utmp_location=/etc/utmp
        conf_wtmp_location=/var/adm/wtmp
        conf_lastlog_location=/var/adm/lastlog
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
        ;;
 *-ncr-sysv*)
        LIBS="$LIBS -lc89"
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(SSHD_ACQUIRES_CTTY)
+        AC_DEFINE([SSHD_ACQUIRES_CTTY])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
        ;;
 *-sni-sysv*)
        # /usr/ucblib MUST NOT be searched on ReliantUNIX
-        AC_CHECK_LIB(dl, dlsym, ,)
+        AC_CHECK_LIB([dl], [dlsym], ,)
        # -lresolv needs to be at the end of LIBS or DNS lookups break
-        AC_CHECK_LIB(resolv, res_query, [ LIBS="$LIBS -lresolv" ])
+        AC_CHECK_LIB([resolv], [res_query], [ LIBS="$LIBS -lresolv" ])
        IPADDR_IN_DISPLAY=yes
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(IP_TOS_IS_BROKEN)
+        AC_DEFINE([IP_TOS_IS_BROKEN])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(SSHD_ACQUIRES_CTTY)
+        AC_DEFINE([SSHD_ACQUIRES_CTTY])
        external_path_file=/etc/default/login
        # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
        # Attention: always take care to bind libsocket and libnsl before libc,
@@ -811,36 +817,37 @@ mips-sony-bsd|mips-sony-newsos4)
        ;;
 # UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
 *-*-sysv4.2*)
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(PASSWD_NEEDS_USERNAME, 1, [must supply username to passwd])
+        AC_DEFINE([PASSWD_NEEDS_USERNAME], [1], [must supply username to passwd])
-        AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
+        AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
        ;;
 # UnixWare 7.x, OpenUNIX 8
 *-*-sysv5*)
        CPPFLAGS="$CPPFLAGS -Dvsnprintf=_xvsnprintf -Dsnprintf=_xsnprintf"
-        AC_DEFINE(UNIXWARE_LONG_PASSWORDS, 1, [Support passwords > 8 chars])
+        AC_DEFINE([UNIXWARE_LONG_PASSWORDS], [1], [Support passwords > 8 chars])
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_GETADDRINFO)
+        AC_DEFINE([BROKEN_GETADDRINFO])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(PASSWD_NEEDS_USERNAME)
+        AC_DEFINE([PASSWD_NEEDS_USERNAME])
        case "$host" in
        *-*-sysv5SCO_SV*)       # SCO OpenServer 6.x
+                maildir=/var/spool/mail
                TEST_SHELL=/u95/bin/sh
-                AC_DEFINE(BROKEN_LIBIAF, 1,
+                AC_DEFINE([BROKEN_LIBIAF], [1],
                        [ia_uinfo routines not supported by OS yet])
-                AC_DEFINE(BROKEN_UPDWTMPX)
+                AC_DEFINE([BROKEN_UPDWTMPX])
-                AC_CHECK_LIB(prot, getluid,[ LIBS="$LIBS -lprot"
+                AC_CHECK_LIB([prot], [getluid], [ LIBS="$LIBS -lprot"
-                        AC_CHECK_FUNCS(getluid setluid,,,-lprot)
+                        AC_CHECK_FUNCS([getluid setluid], , , [-lprot])
-                        AC_DEFINE(HAVE_SECUREWARE)
+                        AC_DEFINE([HAVE_SECUREWARE])
-                        AC_DEFINE(DISABLE_SHADOW)
+                        AC_DEFINE([DISABLE_SHADOW])
-                        ],,)
+                        ], , )
                ;;
-        *)      AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*")
+        *)      AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
                check_for_libcrypt_later=1
                ;;
        esac
@@ -858,132 +865,128 @@ mips-sony-bsd|mips-sony-newsos4)
        fi
        LIBS="$LIBS -lprot -lx -ltinfo -lm"
        no_dev_ptmx=1
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(HAVE_SECUREWARE)
+        AC_DEFINE([HAVE_SECUREWARE])
-        AC_DEFINE(DISABLE_SHADOW)
+        AC_DEFINE([DISABLE_SHADOW])
-        AC_DEFINE(DISABLE_FD_PASSING)
+        AC_DEFINE([DISABLE_FD_PASSING])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_GETADDRINFO)
+        AC_DEFINE([BROKEN_GETADDRINFO])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(WITH_ABBREV_NO_TTY)
+        AC_DEFINE([WITH_ABBREV_NO_TTY])
-        AC_DEFINE(BROKEN_UPDWTMPX)
+        AC_DEFINE([BROKEN_UPDWTMPX])
-        AC_DEFINE(PASSWD_NEEDS_USERNAME)
+        AC_DEFINE([PASSWD_NEEDS_USERNAME])
-        AC_CHECK_FUNCS(getluid setluid)
+        AC_CHECK_FUNCS([getluid setluid])
        MANTYPE=man
        TEST_SHELL=ksh
        ;;
 *-*-unicosmk*)
-        AC_DEFINE(NO_SSH_LASTLOG, 1,
+        AC_DEFINE([NO_SSH_LASTLOG], [1],
                [Define if you don't want to use lastlog in session.c])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(DISABLE_FD_PASSING)
+        AC_DEFINE([DISABLE_FD_PASSING])
        LDFLAGS="$LDFLAGS"
        LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
        MANTYPE=cat
        ;;
 *-*-unicosmp*)
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(WITH_ABBREV_NO_TTY)
+        AC_DEFINE([WITH_ABBREV_NO_TTY])
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(DISABLE_FD_PASSING)
+        AC_DEFINE([DISABLE_FD_PASSING])
        LDFLAGS="$LDFLAGS"
        LIBS="$LIBS -lgen -lacid -ldb"
        MANTYPE=cat
        ;;
 *-*-unicos*)
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(DISABLE_FD_PASSING)
+        AC_DEFINE([DISABLE_FD_PASSING])
-        AC_DEFINE(NO_SSH_LASTLOG)
+        AC_DEFINE([NO_SSH_LASTLOG])
        LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
        LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
        MANTYPE=cat
        ;;
 *-dec-osf*)
-        AC_MSG_CHECKING(for Digital Unix SIA)
+        AC_MSG_CHECKING([for Digital Unix SIA])
        no_osfsia=""
-        AC_ARG_WITH(osfsia,
+        AC_ARG_WITH([osfsia],
                [  --with-osfsia           Enable Digital Unix SIA],
                [
                        if test "x$withval" = "xno" ; then
-                                AC_MSG_RESULT(disabled)
+                                AC_MSG_RESULT([disabled])
                                no_osfsia=1
                        fi
                ],
        )
        if test -z "$no_osfsia" ; then
                if test -f /etc/sia/matrix.conf; then
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                        AC_DEFINE(HAVE_OSF_SIA, 1,
+                        AC_DEFINE([HAVE_OSF_SIA], [1],
                                [Define if you have Digital Unix Security
                                Integration Architecture])
-                        AC_DEFINE(DISABLE_LOGIN, 1,
+                        AC_DEFINE([DISABLE_LOGIN], [1],
                                [Define if you don't want to use your
                                system's login() call])
-                        AC_DEFINE(DISABLE_FD_PASSING)
+                        AC_DEFINE([DISABLE_FD_PASSING])
                        LIBS="$LIBS -lsecurity -ldb -lm -laud"
                        SIA_MSG="yes"
                else
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
-                        AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin",
+                        AC_DEFINE([LOCKED_PASSWD_SUBSTR], ["Nologin"],
                          [String used in /etc/passwd to denote locked account])
                fi
        fi
-        AC_DEFINE(BROKEN_GETADDRINFO)
+        AC_DEFINE([BROKEN_GETADDRINFO])
-        AC_DEFINE(SETEUID_BREAKS_SETUID)
+        AC_DEFINE([SETEUID_BREAKS_SETUID])
-        AC_DEFINE(BROKEN_SETREUID)
+        AC_DEFINE([BROKEN_SETREUID])
-        AC_DEFINE(BROKEN_SETREGID)
+        AC_DEFINE([BROKEN_SETREGID])
-        AC_DEFINE(BROKEN_READV_COMPARISON, 1, [Can't do comparisons on readv])
+        AC_DEFINE([BROKEN_READV_COMPARISON], [1], [Can't do comparisons on readv])
        ;;
 *-*-nto-qnx*)
-        AC_DEFINE(USE_PIPES)
+        AC_DEFINE([USE_PIPES])
-        AC_DEFINE(NO_X11_UNIX_SOCKETS)
+        AC_DEFINE([NO_X11_UNIX_SOCKETS])
-        AC_DEFINE(MISSING_NFDBITS, 1, [Define on *nto-qnx systems])
+        AC_DEFINE([MISSING_NFDBITS], [1], [Define on *nto-qnx systems])
-        AC_DEFINE(MISSING_HOWMANY, 1, [Define on *nto-qnx systems])
+        AC_DEFINE([MISSING_HOWMANY], [1], [Define on *nto-qnx systems])
-        AC_DEFINE(MISSING_FD_MASK, 1, [Define on *nto-qnx systems])
+        AC_DEFINE([MISSING_FD_MASK], [1], [Define on *nto-qnx systems])
-        AC_DEFINE(DISABLE_LASTLOG)
+        AC_DEFINE([DISABLE_LASTLOG])
-        AC_DEFINE(SSHD_ACQUIRES_CTTY)
+        AC_DEFINE([SSHD_ACQUIRES_CTTY])
-        AC_DEFINE(BROKEN_SHADOW_EXPIRE, 1, [QNX shadow support is broken])
+        AC_DEFINE([BROKEN_SHADOW_EXPIRE], [1], [QNX shadow support is broken])
        enable_etc_default_login=no     # has incompatible /etc/default/login
        case "$host" in
        *-*-nto-qnx6*)
-                AC_DEFINE(DISABLE_FD_PASSING)
+                AC_DEFINE([DISABLE_FD_PASSING])
                ;;
        esac
        ;;
 *-*-ultrix*)
-        AC_DEFINE(BROKEN_GETGROUPS, 1, [getgroups(0,NULL) will return -1])
+        AC_DEFINE([BROKEN_GETGROUPS], [1], [getgroups(0,NULL) will return -1])
-        AC_DEFINE(BROKEN_MMAP, 1, [Ultrix mmap can't map files])
+        AC_DEFINE([BROKEN_MMAP], [1], [Ultrix mmap can't map files])
-        AC_DEFINE(NEED_SETPGRP)
+        AC_DEFINE([NEED_SETPGRP])
-        AC_DEFINE(HAVE_SYS_SYSLOG_H, 1, [Force use of sys/syslog.h on Ultrix])
+        AC_DEFINE([HAVE_SYS_SYSLOG_H], [1], [Force use of sys/syslog.h on Ultrix])
        ;;
 *-*-lynxos)
        CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
-        AC_DEFINE(MISSING_HOWMANY)
+        AC_DEFINE([MISSING_HOWMANY])
-        AC_DEFINE(BROKEN_SETVBUF, 1, [LynxOS has broken setvbuf() implementation])
+        AC_DEFINE([BROKEN_SETVBUF], [1], [LynxOS has broken setvbuf() implementation])
        ;;
 esac
-AC_MSG_CHECKING(compiler and flags for sanity)
+AC_MSG_CHECKING([compiler and flags for sanity])
-AC_RUN_IFELSE(
+AC_RUN_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]], [[ exit(0); ]])],
-        [AC_LANG_SOURCE([
+        [       AC_MSG_RESULT([yes]) ],
-#include <stdio.h>
-int main(){exit(0);}
-        ])],
-        [       AC_MSG_RESULT(yes) ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
                AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
        ],
        [       AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
@@ -991,12 +994,12 @@ int main(){exit(0);}
 dnl Checks for header files.
 # Checks for libraries.
-AC_CHECK_FUNC(yp_match, , AC_CHECK_LIB(nsl, yp_match))
+AC_CHECK_FUNC([yp_match], , [AC_CHECK_LIB([nsl], [yp_match])])
-AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt))
+AC_CHECK_FUNC([setsockopt], , [AC_CHECK_LIB([socket], [setsockopt])])
 dnl IRIX and Solaris 2.5.1 have dirname() in libgen
-AC_CHECK_FUNCS(dirname, [AC_CHECK_HEADERS(libgen.h)] ,[
+AC_CHECK_FUNCS([dirname], [AC_CHECK_HEADERS([libgen.h])] , [
-        AC_CHECK_LIB(gen, dirname,[
+        AC_CHECK_LIB([gen], [dirname], [
                AC_CACHE_CHECK([for broken dirname],
                        ac_cv_have_broken_dirname, [
                        save_LIBS="$LIBS"
@@ -1026,19 +1029,19 @@ int main(int argc, char **argv) {
                ])
                if test "x$ac_cv_have_broken_dirname" = "xno" ; then
                        LIBS="$LIBS -lgen"
-                        AC_DEFINE(HAVE_DIRNAME)
+                        AC_DEFINE([HAVE_DIRNAME])
-                        AC_CHECK_HEADERS(libgen.h)
+                        AC_CHECK_HEADERS([libgen.h])
                fi
        ])
 ])
-AC_CHECK_FUNC(getspnam, ,
+AC_CHECK_FUNC([getspnam], ,
-        AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen"))
+        [AC_CHECK_LIB([gen], [getspnam], [LIBS="$LIBS -lgen"])])
-AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME, 1,
+AC_SEARCH_LIBS([basename], [gen], [AC_DEFINE([HAVE_BASENAME], [1],
-        [Define if you have the basename function.]))
+        [Define if you have the basename function.])])
 dnl zlib is required
-AC_ARG_WITH(zlib,
+AC_ARG_WITH([zlib],
        [  --with-zlib=PATH        Use zlib in PATH],
        [ if test "x$withval" = "xno" ; then
                AC_MSG_ERROR([*** zlib is required ***])
@@ -1064,8 +1067,8 @@ AC_ARG_WITH(zlib,
        fi ]
 )
-AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***]))
+AC_CHECK_HEADER([zlib.h], ,[AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***])])
-AC_CHECK_LIB(z, deflate, ,
+AC_CHECK_LIB([z], [deflate], ,
        [
                saved_CPPFLAGS="$CPPFLAGS"
                saved_LDFLAGS="$LDFLAGS"
@@ -1078,7 +1081,7 @@ AC_CHECK_LIB(z, deflate, ,
                fi
                CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
                LIBS="$LIBS -lz"
-                AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ),
+                AC_TRY_LINK_FUNC([deflate], [AC_DEFINE([HAVE_LIBZ])],
                        [
                                AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
                        ]
@@ -1086,7 +1089,7 @@ AC_CHECK_LIB(z, deflate, ,
        ]
 )
-AC_ARG_WITH(zlib-version-check,
+AC_ARG_WITH([zlib-version-check],
        [  --without-zlib-version-check Disable zlib version check],
        [  if test "x$withval" = "xno" ; then
                zlib_check_nonfatal=1
@@ -1094,12 +1097,12 @@ AC_ARG_WITH(zlib-version-check,
        ]
 )
-AC_MSG_CHECKING(for possibly buggy zlib)
+AC_MSG_CHECKING([for possibly buggy zlib])
-AC_RUN_IFELSE([AC_LANG_SOURCE([[
+AC_RUN_IFELSE([AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <zlib.h>
-int main()
+        ]],
-{
+        [[
        int a=0, b=0, c=0, d=0, n, v;
        n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
        if (n != 3 && n != 4)
@@ -1116,10 +1119,9 @@ int main()
                exit(0);
        exit(2);
-}
        ]])],
-        AC_MSG_RESULT(no),
+        AC_MSG_RESULT([no]),
-        [ AC_MSG_RESULT(yes)
+        [ AC_MSG_RESULT([yes])
          if test -z "$zlib_check_nonfatal" ; then
                AC_MSG_ERROR([*** zlib too old - check config.log ***
 Your reported zlib version has known security problems.  It's possible your
@@ -1136,25 +1138,25 @@ See http://www.gzip.org/zlib/ for details.])
 )
 dnl UnixWare 2.x
-AC_CHECK_FUNC(strcasecmp,
+AC_CHECK_FUNC([strcasecmp],
-        [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ]
+        [], [ AC_CHECK_LIB([resolv], [strcasecmp], [LIBS="$LIBS -lresolv"]) ]
 )
-AC_CHECK_FUNCS(utimes,
+AC_CHECK_FUNCS([utimes],
-        [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES)
+        [], [ AC_CHECK_LIB([c89], [utimes], [AC_DEFINE([HAVE_UTIMES])
                                        LIBS="$LIBS -lc89"]) ]
 )
 dnl    Checks for libutil functions
-AC_CHECK_HEADERS(libutil.h)
+AC_CHECK_HEADERS([libutil.h])
-AC_SEARCH_LIBS(login, util bsd, [AC_DEFINE(HAVE_LOGIN, 1,
+AC_SEARCH_LIBS([login], [util bsd], [AC_DEFINE([HAVE_LOGIN], [1],
        [Define if your libraries define login()])])
-AC_CHECK_FUNCS(fmt_scaled logout updwtmp logwtmp)
+AC_CHECK_FUNCS([fmt_scaled logout updwtmp logwtmp])
 AC_FUNC_STRFTIME
 # Check for ALTDIRFUNC glob() extension
-AC_MSG_CHECKING(for GLOB_ALTDIRFUNC support)
+AC_MSG_CHECKING([for GLOB_ALTDIRFUNC support])
-AC_EGREP_CPP(FOUNDIT,
+AC_EGREP_CPP([FOUNDIT],
        [
                #include <glob.h>
                #ifdef GLOB_ALTDIRFUNC
@@ -1162,87 +1164,83 @@ AC_EGREP_CPP(FOUNDIT,
                #endif
        ],
        [
-                AC_DEFINE(GLOB_HAS_ALTDIRFUNC, 1,
+                AC_DEFINE([GLOB_HAS_ALTDIRFUNC], [1],
                        [Define if your system glob() function has
                        the GLOB_ALTDIRFUNC extension])
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
        ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
        ]
 )
 # Check for g.gl_matchc glob() extension
-AC_MSG_CHECKING(for gl_matchc field in glob_t)
+AC_MSG_CHECKING([for gl_matchc field in glob_t])
-AC_TRY_COMPILE(
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <glob.h> ]],
-        [ #include <glob.h> ],
+        [[ glob_t g; g.gl_matchc = 1; ]])],
-        [glob_t g; g.gl_matchc = 1;],
        [
-                AC_DEFINE(GLOB_HAS_GL_MATCHC, 1,
+                AC_DEFINE([GLOB_HAS_GL_MATCHC], [1],
                        [Define if your system glob() function has
                        gl_matchc options in glob_t])
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-        ],
+        ], [
-        [
+                AC_MSG_RESULT([no])
-                AC_MSG_RESULT(no)
+])
-        ]
-)
 # Check for g.gl_statv glob() extension
-AC_MSG_CHECKING(for gl_statv and GLOB_KEEPSTAT extensions for glob)
+AC_MSG_CHECKING([for gl_statv and GLOB_KEEPSTAT extensions for glob])
-AC_TRY_COMPILE(
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <glob.h> ]], [[
-        [ #include <glob.h> ],
-        [
 #ifndef GLOB_KEEPSTAT
 #error "glob does not support GLOB_KEEPSTAT extension"
 #endif
 glob_t g;
 g.gl_statv = NULL;
-],
+]])],
        [
-                AC_DEFINE(GLOB_HAS_GL_STATV, 1,
+                AC_DEFINE([GLOB_HAS_GL_STATV], [1],
                        [Define if your system glob() function has
                        gl_statv options in glob_t])
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-        ],
+        ], [
-        [
+                AC_MSG_RESULT([no])
-                AC_MSG_RESULT(no)
+        
-        ]
+])
-)
-AC_CHECK_DECLS(GLOB_NOMATCH, , , [#include <glob.h>])
+AC_CHECK_DECLS([GLOB_NOMATCH], , , [#include <glob.h>])
 AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
 AC_RUN_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <sys/types.h>
-#include <dirent.h>
+#include <dirent.h>]],
-int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));}
+        [[
+        struct dirent d;
+        exit(sizeof(d.d_name)<=sizeof(char));
        ]])],
-        [AC_MSG_RESULT(yes)],
+        [AC_MSG_RESULT([yes])],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
-                AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME, 1,
+                AC_DEFINE([BROKEN_ONE_BYTE_DIRENT_D_NAME], [1],
                        [Define if your struct dirent expects you to
                        allocate extra space for d_name])
        ],
        [
                AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
-                AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME)
+                AC_DEFINE([BROKEN_ONE_BYTE_DIRENT_D_NAME])
        ]
 )
 AC_MSG_CHECKING([for /proc/pid/fd directory])
 if test -d "/proc/$$/fd" ; then
-        AC_DEFINE(HAVE_PROC_PID, 1, [Define if you have /proc/$pid/fd])
+        AC_DEFINE([HAVE_PROC_PID], [1], [Define if you have /proc/$pid/fd])
-        AC_MSG_RESULT(yes)
+        AC_MSG_RESULT([yes])
 else
-        AC_MSG_RESULT(no)
+        AC_MSG_RESULT([no])
 fi
 # Check whether user wants S/Key support
 SKEY_MSG="no"
-AC_ARG_WITH(skey,
+AC_ARG_WITH([skey],
        [  --with-skey[[=PATH]]      Enable S/Key support (optionally in PATH)],
        [
                if test "x$withval" != "xno" ; then
@@ -1252,40 +1250,46 @@ AC_ARG_WITH(skey,
                                LDFLAGS="$LDFLAGS -L${withval}/lib"
                        fi
-                        AC_DEFINE(SKEY, 1, [Define if you want S/Key support])
+                        AC_DEFINE([SKEY], [1], [Define if you want S/Key support])
                        LIBS="-lskey $LIBS"
                        SKEY_MSG="yes"
                        AC_MSG_CHECKING([for s/key support])
                        AC_LINK_IFELSE(
-                                [AC_LANG_SOURCE([[
+                                [AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <skey.h>
-int main() { char *ff = skey_keyinfo(""); ff=""; exit(0); }
+                                ]], [[
+        char *ff = skey_keyinfo(""); ff="";
+        exit(0);
                                ]])],
-                                [AC_MSG_RESULT(yes)],
+                                [AC_MSG_RESULT([yes])],
                                [
-                                        AC_MSG_RESULT(no)
+                                        AC_MSG_RESULT([no])
                                        AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
                                ])
-                        AC_MSG_CHECKING(if skeychallenge takes 4 arguments)
+                        AC_MSG_CHECKING([if skeychallenge takes 4 arguments])
-                        AC_TRY_COMPILE(
+                        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                                [#include <stdio.h>
+#include <stdio.h>
-                                 #include <skey.h>],
+#include <skey.h>
-                                [(void)skeychallenge(NULL,"name","",0);],
+                                ]], [[
-                                [AC_MSG_RESULT(yes)
+        (void)skeychallenge(NULL,"name","",0);
-                                 AC_DEFINE(SKEYCHALLENGE_4ARG, 1,
+                                ]])],
+                        [
+                                AC_MSG_RESULT([yes])
+                                AC_DEFINE([SKEYCHALLENGE_4ARG], [1],
                                        [Define if your skeychallenge()
                                        function takes 4 arguments (NetBSD)])],
-                                [AC_MSG_RESULT(no)]
+                        [
-                        )
+                                AC_MSG_RESULT([no])
+                        ])
                fi
        ]
 )
 # Check whether user wants TCP wrappers support
 TCPW_MSG="no"
-AC_ARG_WITH(tcp-wrappers,
+AC_ARG_WITH([tcp-wrappers],
        [  --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support (optionally in PATH)],
        [
                if test "x$withval" != "xno" ; then
@@ -1314,28 +1318,26 @@ AC_ARG_WITH(tcp-wrappers,
                                fi
                        fi
                        LIBS="-lwrap $LIBS"
-                        AC_MSG_CHECKING(for libwrap)
+                        AC_MSG_CHECKING([for libwrap])
-                        AC_TRY_LINK(
+                        AC_LINK_IFELSE([AC_LANG_PROGRAM([[
-                                [
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <netinet/in.h>
 #include <tcpd.h>
-                                        int deny_severity = 0, allow_severity = 0;
+int deny_severity = 0, allow_severity = 0;
-                                ],
+                                ]], [[
-                                [hosts_access(0);],
+        hosts_access(0);
-                                [
+                                ]])], [
-                                        AC_MSG_RESULT(yes)
+                                        AC_MSG_RESULT([yes])
-                                        AC_DEFINE(LIBWRAP, 1,
+                                        AC_DEFINE([LIBWRAP], [1],
                                                [Define if you want
                                                TCP Wrappers support])
                                        SSHDLIBS="$SSHDLIBS -lwrap"
                                        TCPW_MSG="yes"
-                                ],
+                                ], [
-                                [
                                        AC_MSG_ERROR([*** libwrap missing])
-                                ]
+                                
-                        )
+                        ])
                        LIBS="$saved_LIBS"
                fi
        ]
@@ -1343,18 +1345,18 @@ AC_ARG_WITH(tcp-wrappers,
 # Check whether user wants libedit support
 LIBEDIT_MSG="no"
-AC_ARG_WITH(libedit,
+AC_ARG_WITH([libedit],
        [  --with-libedit[[=PATH]]   Enable libedit support for sftp],
        [ if test "x$withval" != "xno" ; then
                if test "x$withval" = "xyes" ; then
-                        AC_PATH_PROG(PKGCONFIG, pkg-config, no)
+                        AC_PATH_PROG([PKGCONFIG], [pkg-config], [no])
                        if test "x$PKGCONFIG" != "xno"; then
-                                AC_MSG_CHECKING(if $PKGCONFIG knows about libedit)
+                                AC_MSG_CHECKING([if $PKGCONFIG knows about libedit])
                                if "$PKGCONFIG" libedit; then
-                                        AC_MSG_RESULT(yes)
+                                        AC_MSG_RESULT([yes])
                                        use_pkgconfig_for_libedit=yes
                                else
-                                        AC_MSG_RESULT(no)
+                                        AC_MSG_RESULT([no])
                                fi
                        fi
                else
@@ -1372,73 +1374,70 @@ AC_ARG_WITH(libedit,
                        LIBEDIT="-ledit -lcurses"
                fi
                OTHERLIBS=`echo $LIBEDIT | sed 's/-ledit//'`
-                AC_CHECK_LIB(edit, el_init,
+                AC_CHECK_LIB([edit], [el_init],
-                        [ AC_DEFINE(USE_LIBEDIT, 1, [Use libedit for sftp])
+                        [ AC_DEFINE([USE_LIBEDIT], [1], [Use libedit for sftp])
                          LIBEDIT_MSG="yes"
-                          AC_SUBST(LIBEDIT)
+                          AC_SUBST([LIBEDIT])
                        ],
-                        [ AC_MSG_ERROR(libedit not found) ],
+                        [ AC_MSG_ERROR([libedit not found]) ],
                        [ $OTHERLIBS ]
                )
-                AC_MSG_CHECKING(if libedit version is compatible)
+                AC_MSG_CHECKING([if libedit version is compatible])
                AC_COMPILE_IFELSE(
-                    [AC_LANG_SOURCE([[
+                    [AC_LANG_PROGRAM([[ #include <histedit.h> ]],
-#include <histedit.h>
+                    [[
-int main(void)
-{
        int i = H_SETSIZE;
        el_init("", NULL, NULL, NULL);
        exit(0);
-}
                    ]])],
-                    [ AC_MSG_RESULT(yes) ],
+                    [ AC_MSG_RESULT([yes]) ],
-                    [ AC_MSG_RESULT(no)
+                    [ AC_MSG_RESULT([no])
-                      AC_MSG_ERROR(libedit version is not compatible) ]
+                      AC_MSG_ERROR([libedit version is not compatible]) ]
                )
        fi ]
 )
 AUDIT_MODULE=none
-AC_ARG_WITH(audit,
+AC_ARG_WITH([audit],
        [  --with-audit=module     Enable audit support (modules=debug,bsm,linux)],
        [
-          AC_MSG_CHECKING(for supported audit module)
+          AC_MSG_CHECKING([for supported audit module])
          case "$withval" in
          bsm)
-                AC_MSG_RESULT(bsm)
+                AC_MSG_RESULT([bsm])
                AUDIT_MODULE=bsm
                dnl    Checks for headers, libs and functions
-                AC_CHECK_HEADERS(bsm/audit.h, [],
+                AC_CHECK_HEADERS([bsm/audit.h], [],
-                    [AC_MSG_ERROR(BSM enabled and bsm/audit.h not found)],
+                    [AC_MSG_ERROR([BSM enabled and bsm/audit.h not found])],
                    [
 #ifdef HAVE_TIME_H
 # include <time.h>
 #endif
                    ]
 )
-                AC_CHECK_LIB(bsm, getaudit, [],
+                AC_CHECK_LIB([bsm], [getaudit], [],
-                    [AC_MSG_ERROR(BSM enabled and required library not found)])
+                    [AC_MSG_ERROR([BSM enabled and required library not found])])
-                AC_CHECK_FUNCS(getaudit, [],
+                AC_CHECK_FUNCS([getaudit], [],
-                    [AC_MSG_ERROR(BSM enabled and required function not found)])
+                    [AC_MSG_ERROR([BSM enabled and required function not found])])
                # These are optional
-                AC_CHECK_FUNCS(getaudit_addr aug_get_machine)
+                AC_CHECK_FUNCS([getaudit_addr aug_get_machine])
-                AC_DEFINE(USE_BSM_AUDIT, 1, [Use BSM audit module])
+                AC_DEFINE([USE_BSM_AUDIT], [1], [Use BSM audit module])
                ;;
          linux)
-                AC_MSG_RESULT(linux)
+                AC_MSG_RESULT([linux])
                AUDIT_MODULE=linux
                dnl    Checks for headers, libs and functions
-                AC_CHECK_HEADERS(libaudit.h)
+                AC_CHECK_HEADERS([libaudit.h])
                SSHDLIBS="$SSHDLIBS -laudit"
-                AC_DEFINE(USE_LINUX_AUDIT, 1, [Use Linux audit module])
+                AC_DEFINE([USE_LINUX_AUDIT], [1], [Use Linux audit module])
                ;;
          debug)
                AUDIT_MODULE=debug
-                AC_MSG_RESULT(debug)
+                AC_MSG_RESULT([debug])
-                AC_DEFINE(SSH_AUDIT_EVENTS, 1, [Use audit debugging module])
+                AC_DEFINE([SSH_AUDIT_EVENTS], [1], [Use audit debugging module])
                ;;
          no)
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
                ;;
          *)
                AC_MSG_ERROR([Unknown audit module $withval])
@@ -1447,7 +1446,7 @@ AC_ARG_WITH(audit,
 )
 dnl    Checks for library functions. Please keep in alphabetical order
-AC_CHECK_FUNCS( \
+AC_CHECK_FUNCS([ \
        arc4random \
        arc4random_buf \
        arc4random_uniform \
@@ -1543,46 +1542,43 @@ AC_CHECK_FUNCS( \
        vhangup \
        vsnprintf \
        waitpid \
-)
+])
 AC_LINK_IFELSE(
-[
+        [AC_LANG_PROGRAM(
-#include <ctype.h>
+           [[ #include <ctype.h> ]],
-int main(void)
+           [[ return (isblank('a')); ]])],
-{
+        [AC_DEFINE([HAVE_ISBLANK], [1], [Define if you have isblank(3C).])
-        return (isblank('a'));
-}
-],
-        [AC_DEFINE(HAVE_ISBLANK, 1, [Define if you have isblank(3C).])
 ])
 # PKCS#11 support requires dlopen() and co
-AC_SEARCH_LIBS(dlopen, dl,
+AC_SEARCH_LIBS([dlopen], [dl],
-    AC_DEFINE([ENABLE_PKCS11], [], [Enable for PKCS#11 support])
+    [AC_DEFINE([ENABLE_PKCS11], [], [Enable for PKCS#11 support])]
 )
 # IRIX has a const char return value for gai_strerror()
-AC_CHECK_FUNCS(gai_strerror,[
+AC_CHECK_FUNCS([gai_strerror], [
-        AC_DEFINE(HAVE_GAI_STRERROR)
+        AC_DEFINE([HAVE_GAI_STRERROR])
-        AC_TRY_COMPILE([
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <netdb.h>
-const char *gai_strerror(int);],[
+const char *gai_strerror(int);
-char *str;
+                        ]], [[
+        char *str;
-str = gai_strerror(0);],[
+        str = gai_strerror(0);
-                AC_DEFINE(HAVE_CONST_GAI_STRERROR_PROTO, 1,
+                        ]])], [
-                [Define if gai_strerror() returns const char *])])])
+                AC_DEFINE([HAVE_CONST_GAI_STRERROR_PROTO], [1],
+                [Define if gai_strerror() returns const char *])], [])])
-AC_SEARCH_LIBS(nanosleep, rt posix4, AC_DEFINE(HAVE_NANOSLEEP, 1,
+AC_SEARCH_LIBS([nanosleep], [rt posix4], [AC_DEFINE([HAVE_NANOSLEEP], [1],
-        [Some systems put nanosleep outside of libc]))
+        [Some systems put nanosleep outside of libc])])
 dnl Make sure prototypes are defined for these before using them.
-AC_CHECK_DECL(getrusage, [AC_CHECK_FUNCS(getrusage)])
+AC_CHECK_DECL([getrusage], [AC_CHECK_FUNCS([getrusage])])
-AC_CHECK_DECL(strsep,
+AC_CHECK_DECL([strsep],
-        [AC_CHECK_FUNCS(strsep)],
+        [AC_CHECK_FUNCS([strsep])],
        [],
        [
 #ifdef HAVE_STRING_H
@@ -1591,21 +1587,21 @@ AC_CHECK_DECL(strsep,
        ])
 dnl tcsendbreak might be a macro
-AC_CHECK_DECL(tcsendbreak,
+AC_CHECK_DECL([tcsendbreak],
-        [AC_DEFINE(HAVE_TCSENDBREAK)],
+        [AC_DEFINE([HAVE_TCSENDBREAK])],
-        [AC_CHECK_FUNCS(tcsendbreak)],
+        [AC_CHECK_FUNCS([tcsendbreak])],
        [#include <termios.h>]
 )
-AC_CHECK_DECLS(h_errno, , ,[#include <netdb.h>])
+AC_CHECK_DECLS([h_errno], , ,[#include <netdb.h>])
-AC_CHECK_DECLS(SHUT_RD, , ,
+AC_CHECK_DECLS([SHUT_RD], , ,
        [
 #include <sys/types.h>
 #include <sys/socket.h>
        ])
-AC_CHECK_DECLS(O_NONBLOCK, , ,
+AC_CHECK_DECLS([O_NONBLOCK], , ,
        [
 #include <sys/types.h>
 #ifdef HAVE_SYS_STAT_H
@@ -1616,90 +1612,104 @@ AC_CHECK_DECLS(O_NONBLOCK, , ,
 #endif
        ])
-AC_CHECK_DECLS(writev, , , [
+AC_CHECK_DECLS([writev], , , [
 #include <sys/types.h>
 #include <sys/uio.h>
 #include <unistd.h>
        ])
-AC_CHECK_DECLS(MAXSYMLINKS, , , [
+AC_CHECK_DECLS([MAXSYMLINKS], , , [
 #include <sys/param.h>
        ])
-AC_CHECK_DECLS(offsetof, , , [
+AC_CHECK_DECLS([offsetof], , , [
 #include <stddef.h>
        ])
-AC_CHECK_FUNCS(setresuid, [
+AC_CHECK_FUNCS([setresuid], [
        dnl Some platorms have setresuid that isn't implemented, test for this
-        AC_MSG_CHECKING(if setresuid seems to work)
+        AC_MSG_CHECKING([if setresuid seems to work])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <stdlib.h>
 #include <errno.h>
-int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
+                ]], [[
+        errno=0;
+        setresuid(0,0,0);
+        if (errno==ENOSYS)
+                exit(1);
+        else
+                exit(0);
                ]])],
-                [AC_MSG_RESULT(yes)],
+                [AC_MSG_RESULT([yes])],
-                [AC_DEFINE(BROKEN_SETRESUID, 1,
+                [AC_DEFINE([BROKEN_SETRESUID], [1],
                        [Define if your setresuid() is broken])
-                 AC_MSG_RESULT(not implemented)],
+                 AC_MSG_RESULT([not implemented])],
                [AC_MSG_WARN([cross compiling: not checking setresuid])]
        )
 ])
-AC_CHECK_FUNCS(setresgid, [
+AC_CHECK_FUNCS([setresgid], [
        dnl Some platorms have setresgid that isn't implemented, test for this
-        AC_MSG_CHECKING(if setresgid seems to work)
+        AC_MSG_CHECKING([if setresgid seems to work])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <stdlib.h>
 #include <errno.h>
-int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);}
+                ]], [[
+        errno=0;
+        setresgid(0,0,0);
+        if (errno==ENOSYS)
+                exit(1);
+        else
+                exit(0);
                ]])],
-                [AC_MSG_RESULT(yes)],
+                [AC_MSG_RESULT([yes])],
-                [AC_DEFINE(BROKEN_SETRESGID, 1,
+                [AC_DEFINE([BROKEN_SETRESGID], [1],
                        [Define if your setresgid() is broken])
-                 AC_MSG_RESULT(not implemented)],
+                 AC_MSG_RESULT([not implemented])],
                [AC_MSG_WARN([cross compiling: not checking setresuid])]
        )
 ])
 dnl    Checks for time functions
-AC_CHECK_FUNCS(gettimeofday time)
+AC_CHECK_FUNCS([gettimeofday time])
 dnl    Checks for utmp functions
-AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent)
+AC_CHECK_FUNCS([endutent getutent getutid getutline pututline setutent])
-AC_CHECK_FUNCS(utmpname)
+AC_CHECK_FUNCS([utmpname])
 dnl    Checks for utmpx functions
-AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline getutxuser pututxline)
+AC_CHECK_FUNCS([endutxent getutxent getutxid getutxline getutxuser pututxline])
-AC_CHECK_FUNCS(setutxdb setutxent utmpxname)
+AC_CHECK_FUNCS([setutxdb setutxent utmpxname])
 dnl    Checks for lastlog functions
-AC_CHECK_FUNCS(getlastlogxbyname)
+AC_CHECK_FUNCS([getlastlogxbyname])
-AC_CHECK_FUNC(daemon,
+AC_CHECK_FUNC([daemon],
-        [AC_DEFINE(HAVE_DAEMON, 1, [Define if your libraries define daemon()])],
+        [AC_DEFINE([HAVE_DAEMON], [1], [Define if your libraries define daemon()])],
-        [AC_CHECK_LIB(bsd, daemon,
+        [AC_CHECK_LIB([bsd], [daemon],
-                [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])]
+                [LIBS="$LIBS -lbsd"; AC_DEFINE([HAVE_DAEMON])])]
 )
-AC_CHECK_FUNC(getpagesize,
+AC_CHECK_FUNC([getpagesize],
-        [AC_DEFINE(HAVE_GETPAGESIZE, 1,
+        [AC_DEFINE([HAVE_GETPAGESIZE], [1],
                [Define if your libraries define getpagesize()])],
-        [AC_CHECK_LIB(ucb, getpagesize,
+        [AC_CHECK_LIB([ucb], [getpagesize],
-                [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])]
+                [LIBS="$LIBS -lucb"; AC_DEFINE([HAVE_GETPAGESIZE])])]
 )
 # Check for broken snprintf
 if test "x$ac_cv_func_snprintf" = "xyes" ; then
        AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
-#include <stdio.h>
+                [[
-int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');}
+        char b[5];
+        snprintf(b,5,"123456789");
+        exit(b[4]!='\0'); 
                ]])],
-                [AC_MSG_RESULT(yes)],
+                [AC_MSG_RESULT([yes])],
                [
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
-                        AC_DEFINE(BROKEN_SNPRINTF, 1,
+                        AC_DEFINE([BROKEN_SNPRINTF], [1],
                                [Define if your snprintf is busted])
                        AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
                ],
@@ -1714,7 +1724,7 @@ if test "x$ac_cv_func_asprintf" != "xyes" && \
   test "x$ac_cv_func_vsnprintf" = "xyes" ; then
        AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <stdio.h>
 #include <stdarg.h>
@@ -1725,15 +1735,14 @@ int x_snprintf(char *str,size_t count,const char *fmt,...)
        va_start(ap, fmt); ret = vsnprintf(str, count, fmt, ap); va_end(ap);
        return ret;
 }
-int main(void)
+                ]], [[
-{
        char x[1];
        exit(x_snprintf(x, 1, "%s %d", "hello", 12345) == 11 ? 0 : 1);
-} ]])],
+                ]])],
-                [AC_MSG_RESULT(yes)],
+                [AC_MSG_RESULT([yes])],
                [
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
-                        AC_DEFINE(BROKEN_SNPRINTF, 1,
+                        AC_DEFINE([BROKEN_SNPRINTF], [1],
                                [Define if your snprintf is busted])
                        AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
                ],
@@ -1745,71 +1754,69 @@ fi
 # check that the fmt argument is const char * or just char *.
 # This is only useful for when BROKEN_SNPRINTF
 AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
-AC_COMPILE_IFELSE([AC_LANG_SOURCE([[#include <stdio.h>
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-           int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
+#include <stdio.h>
-           int main(void) { snprintf(0, 0, 0); } 
+int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
-    ]])],
+                ]], [[
-   [AC_MSG_RESULT(yes)
+        snprintf(0, 0, 0);
-    AC_DEFINE(SNPRINTF_CONST, [const],
+                ]])],
+   [AC_MSG_RESULT([yes])
+    AC_DEFINE([SNPRINTF_CONST], [const],
              [Define as const if snprintf() can declare const char *fmt])],
-   [AC_MSG_RESULT(no)
+   [AC_MSG_RESULT([no])
-    AC_DEFINE(SNPRINTF_CONST, [/* not const */])])
+    AC_DEFINE([SNPRINTF_CONST], [/* not const */])])
 # Check for missing getpeereid (or equiv) support
 NO_PEERCHECK=""
 if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
        AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [#include <sys/types.h>
+#include <sys/types.h>
-                 #include <sys/socket.h>],
+#include <sys/socket.h>]], [[int i = SO_PEERCRED;]])],
-                [int i = SO_PEERCRED;],
+                [ AC_MSG_RESULT([yes])
-                [ AC_MSG_RESULT(yes)
+                  AC_DEFINE([HAVE_SO_PEERCRED], [1], [Have PEERCRED socket option])
-                  AC_DEFINE(HAVE_SO_PEERCRED, 1, [Have PEERCRED socket option])
+                ], [AC_MSG_RESULT([no])
-                ],
+                NO_PEERCHECK=1
-                [AC_MSG_RESULT(no)
+        ])
-                NO_PEERCHECK=1]
-        )
 fi
 dnl see whether mkstemp() requires XXXXXX
 if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
 AC_MSG_CHECKING([for (overly) strict mkstemp])
 AC_RUN_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <stdlib.h>
-main() { char template[]="conftest.mkstemp-test";
+        ]], [[
-if (mkstemp(template) == -1)
+        char template[]="conftest.mkstemp-test";
-        exit(1);
+        if (mkstemp(template) == -1)
-unlink(template); exit(0);
+                exit(1);
-}
+        unlink(template);
+        exit(0);
        ]])],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
        ],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-                AC_DEFINE(HAVE_STRICT_MKSTEMP, 1, [Silly mkstemp()])
+                AC_DEFINE([HAVE_STRICT_MKSTEMP], [1], [Silly mkstemp()])
        ],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-                AC_DEFINE(HAVE_STRICT_MKSTEMP)
+                AC_DEFINE([HAVE_STRICT_MKSTEMP])
        ]
 )
 fi
 dnl make sure that openpty does not reacquire controlling terminal
 if test ! -z "$check_for_openpty_ctty_bug"; then
-        AC_MSG_CHECKING(if openpty correctly handles controlling tty)
+        AC_MSG_CHECKING([if openpty correctly handles controlling tty])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <sys/fcntl.h>
 #include <sys/types.h>
 #include <sys/wait.h>
+                ]], [[
-int
-main()
-{
        pid_t pid;
        int fd, ptyfd, ttyfd, status;
@@ -1832,26 +1839,25 @@ main()
                else
                        exit(0);        /* Did not acquire ctty: OK */
        }
-}
                ]])],
                [
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
                ],
                [
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
-                        AC_DEFINE(SSHD_ACQUIRES_CTTY)
+                        AC_DEFINE([SSHD_ACQUIRES_CTTY])
                ],
                [
-                        AC_MSG_RESULT(cross-compiling, assuming yes)
+                        AC_MSG_RESULT([cross-compiling, assuming yes])
                ]
        )
 fi
 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
    test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
-        AC_MSG_CHECKING(if getaddrinfo seems to work)
+        AC_MSG_CHECKING([if getaddrinfo seems to work])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <sys/socket.h>
 #include <netdb.h>
@@ -1859,10 +1865,7 @@ if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
 #include <netinet/in.h>
 #define TEST_PORT "2222"
+                ]], [[
-int
-main(void)
-{
        int err, sock;
        struct addrinfo *gai_ai, *ai, hints;
        char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
@@ -1904,26 +1907,25 @@ main(void)
                }
        }
        exit(0);
-}
                ]])],
                [
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
                ],
                [
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
-                        AC_DEFINE(BROKEN_GETADDRINFO)
+                        AC_DEFINE([BROKEN_GETADDRINFO])
                ],
                [
-                        AC_MSG_RESULT(cross-compiling, assuming yes)
+                        AC_MSG_RESULT([cross-compiling, assuming yes])
                ]
        )
 fi
 if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
    test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
-        AC_MSG_CHECKING(if getaddrinfo seems to work)
+        AC_MSG_CHECKING([if getaddrinfo seems to work])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <sys/socket.h>
 #include <netdb.h>
@@ -1931,10 +1933,7 @@ if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
 #include <netinet/in.h>
 #define TEST_PORT "2222"
+                ]], [[
-int
-main(void)
-{
        int err, sock;
        struct addrinfo *gai_ai, *ai, hints;
        char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
@@ -1964,37 +1963,33 @@ main(void)
                }
        }
        exit(0);
-}
                ]])],
                [
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                        AC_DEFINE(AIX_GETNAMEINFO_HACK, 1,
+                        AC_DEFINE([AIX_GETNAMEINFO_HACK], [1],
                                [Define if you have a getaddrinfo that fails
                                for the all-zeros IPv6 address])
                ],
                [
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
-                        AC_DEFINE(BROKEN_GETADDRINFO)
+                        AC_DEFINE([BROKEN_GETADDRINFO])
                ],
                [
-                        AC_MSG_RESULT(cross-compiling, assuming no)
+                        AC_MSG_RESULT([cross-compiling, assuming no])
                ]
        )
 fi
 if test "x$check_for_conflicting_getspnam" = "x1"; then
-        AC_MSG_CHECKING(for conflicting getspnam in shadow.h)
+        AC_MSG_CHECKING([for conflicting getspnam in shadow.h])
-        AC_COMPILE_IFELSE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <shadow.h> ]],
+                [[ exit(0); ]])],
                [
-#include <shadow.h>
+                        AC_MSG_RESULT([no])
-int main(void) {exit(0);}
-                ],
-                [
-                        AC_MSG_RESULT(no)
                ],
                [
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                        AC_DEFINE(GETSPNAM_CONFLICTING_DEFS, 1,
+                        AC_DEFINE([GETSPNAM_CONFLICTING_DEFS], [1],
                            [Conflicting defs for getspnam])
                ]
        )
@@ -2005,7 +2000,7 @@ AC_FUNC_GETPGRP
 # Search for OpenSSL
 saved_CPPFLAGS="$CPPFLAGS"
 saved_LDFLAGS="$LDFLAGS"
-AC_ARG_WITH(ssl-dir,
+AC_ARG_WITH([ssl-dir],
        [  --with-ssl-dir=PATH     Specify path to OpenSSL installation ],
        [
                if test "x$withval" != "xno" ; then
@@ -2041,9 +2036,9 @@ AC_ARG_WITH(ssl-dir,
        ]
 )
 LIBS="-lcrypto $LIBS"
-AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
+AC_TRY_LINK_FUNC([RAND_add], [AC_DEFINE([HAVE_OPENSSL], [1],
        [Define if your ssl headers are included
-        with #include <openssl/header.h>]),
+        with #include <openssl/header.h>])],
        [
                dnl Check default openssl install dir
                if test -n "${need_dash_r}"; then
@@ -2053,8 +2048,8 @@ AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
                fi
                CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
                AC_CHECK_HEADER([openssl/opensslv.h], ,
-                    AC_MSG_ERROR([*** OpenSSL headers missing - please install first or check config.log ***]))
+                    [AC_MSG_ERROR([*** OpenSSL headers missing - please install first or check config.log ***])])
-                AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL),
+                AC_TRY_LINK_FUNC([RAND_add], [AC_DEFINE([HAVE_OPENSSL])],
                        [
                                AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
                        ]
@@ -2065,12 +2060,12 @@ AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL, 1,
 # Determine OpenSSL header version
 AC_MSG_CHECKING([OpenSSL header version])
 AC_RUN_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <string.h>
 #include <openssl/opensslv.h>
 #define DATA "conftest.sslincver"
-int main(void) {
+        ]], [[
        FILE *fd;
        int rc;
@@ -2082,15 +2077,14 @@ int main(void) {
                exit(1);
        exit(0);
-}
        ]])],
        [
                ssl_header_ver=`cat conftest.sslincver`
-                AC_MSG_RESULT($ssl_header_ver)
+                AC_MSG_RESULT([$ssl_header_ver])
        ],
        [
-                AC_MSG_RESULT(not found)
+                AC_MSG_RESULT([not found])
-                AC_MSG_ERROR(OpenSSL version header not found.)
+                AC_MSG_ERROR([OpenSSL version header not found.])
        ],
        [
                AC_MSG_WARN([cross compiling: not checking])
@@ -2100,13 +2094,13 @@ int main(void) {
 # Determine OpenSSL library version
 AC_MSG_CHECKING([OpenSSL library version])
 AC_RUN_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <stdio.h>
 #include <string.h>
 #include <openssl/opensslv.h>
 #include <openssl/crypto.h>
 #define DATA "conftest.ssllibver"
-int main(void) {
+        ]], [[
        FILE *fd;
        int rc;
@@ -2118,22 +2112,21 @@ int main(void) {
                exit(1);
        exit(0);
-}
        ]])],
        [
                ssl_library_ver=`cat conftest.ssllibver`
-                AC_MSG_RESULT($ssl_library_ver)
+                AC_MSG_RESULT([$ssl_library_ver])
        ],
        [
-                AC_MSG_RESULT(not found)
+                AC_MSG_RESULT([not found])
-                AC_MSG_ERROR(OpenSSL library not found.)
+                AC_MSG_ERROR([OpenSSL library not found.])
        ],
        [
                AC_MSG_WARN([cross compiling: not checking])
        ]
 )
-AC_ARG_WITH(openssl-header-check,
+AC_ARG_WITH([openssl-header-check],
        [  --without-openssl-header-check Disable OpenSSL version consistency check],
        [  if test "x$withval" = "xno" ; then
                openssl_check_nonfatal=1
@@ -2144,16 +2137,17 @@ AC_ARG_WITH(openssl-header-check,
 # Sanity check OpenSSL headers
 AC_MSG_CHECKING([whether OpenSSL's headers match the library])
 AC_RUN_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <string.h>
 #include <openssl/opensslv.h>
-int main(void) { exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
+        ]], [[
+        exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1);
        ]])],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
        ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
                if test "x$openssl_check_nonfatal" = "x"; then
                        AC_MSG_ERROR([Your OpenSSL headers do not match your
 library. Check config.log for details.
@@ -2174,85 +2168,84 @@ Also see contrib/findssl.sh for help identifying header/library mismatches.])
 AC_MSG_CHECKING([if programs using OpenSSL functions will link])
 AC_LINK_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[ #include <openssl/evp.h> ]],
-#include <openssl/evp.h>
+        [[ SSLeay_add_all_algorithms(); ]])],
-int main(void) { SSLeay_add_all_algorithms(); }
-        ]])],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
        ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
                saved_LIBS="$LIBS"
                LIBS="$LIBS -ldl"
                AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
                AC_LINK_IFELSE(
-                        [AC_LANG_SOURCE([[
+                        [AC_LANG_PROGRAM([[ #include <openssl/evp.h> ]],
-#include <openssl/evp.h>
+                        [[ SSLeay_add_all_algorithms(); ]])],
-int main(void) { SSLeay_add_all_algorithms(); }
-                        ]])],
                        [
-                                AC_MSG_RESULT(yes)
+                                AC_MSG_RESULT([yes])
                        ],
                        [
-                                AC_MSG_RESULT(no)
+                                AC_MSG_RESULT([no])
                                LIBS="$saved_LIBS"
                        ]
                )
        ]
 )
-AC_CHECK_FUNCS(RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method)
+AC_CHECK_FUNCS([RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method])
-AC_ARG_WITH(ssl-engine,
+AC_ARG_WITH([ssl-engine],
        [  --with-ssl-engine       Enable OpenSSL (hardware) ENGINE support ],
        [ if test "x$withval" != "xno" ; then
-                AC_MSG_CHECKING(for OpenSSL ENGINE support)
+                AC_MSG_CHECKING([for OpenSSL ENGINE support])
-                AC_TRY_COMPILE(
+                AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                        [ #include <openssl/engine.h>],
+#include <openssl/engine.h>
-                        [
+                        ]], [[
-ENGINE_load_builtin_engines();ENGINE_register_all_complete();
+        ENGINE_load_builtin_engines();
-                        ],
+        ENGINE_register_all_complete();
-                        [ AC_MSG_RESULT(yes)
+                        ]])],
-                          AC_DEFINE(USE_OPENSSL_ENGINE, 1,
+                        [ AC_MSG_RESULT([yes])
+                          AC_DEFINE([USE_OPENSSL_ENGINE], [1],
                             [Enable OpenSSL engine support])
-                        ],
+                        ], [ AC_MSG_ERROR([OpenSSL ENGINE support not found])
-                        [ AC_MSG_ERROR(OpenSSL ENGINE support not found)]
+                ])
-                )
          fi ]
 )
 # Check for OpenSSL without EVP_aes_{192,256}_cbc
 AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
 AC_LINK_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <string.h>
 #include <openssl/evp.h>
-int main(void) { exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);}
+        ]], [[
+        exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);
        ]])],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
        ],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-                AC_DEFINE(OPENSSL_LOBOTOMISED_AES, 1,
+                AC_DEFINE([OPENSSL_LOBOTOMISED_AES], [1],
                    [libcrypto is missing AES 192 and 256 bit functions])
        ]
 )
 AC_MSG_CHECKING([if EVP_DigestUpdate returns an int])
 AC_LINK_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <string.h>
 #include <openssl/evp.h>
-int main(void) { if(EVP_DigestUpdate(NULL, NULL,0)) exit(0); }
+        ]], [[
+        if(EVP_DigestUpdate(NULL, NULL,0))
+                exit(0);
        ]])],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
        ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
-                AC_DEFINE(OPENSSL_EVP_DIGESTUPDATE_VOID, 1,
+                AC_DEFINE([OPENSSL_EVP_DIGESTUPDATE_VOID], [1],
                    [Define if EVP_DigestUpdate returns void])
        ]
 )
@@ -2260,24 +2253,24 @@ int main(void) { if(EVP_DigestUpdate(NULL, NULL,0)) exit(0); }
 # Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
 # because the system crypt() is more featureful.
 if test "x$check_for_libcrypt_before" = "x1"; then
-        AC_CHECK_LIB(crypt, crypt)
+        AC_CHECK_LIB([crypt], [crypt])
 fi
 # Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
 # version in OpenSSL.
 if test "x$check_for_libcrypt_later" = "x1"; then
-        AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt")
+        AC_CHECK_LIB([crypt], [crypt], [LIBS="$LIBS -lcrypt"])
 fi
 # Search for SHA256 support in libc and/or OpenSSL
-AC_CHECK_FUNCS(SHA256_Update EVP_sha256, [TEST_SSH_SHA256=yes],
+AC_CHECK_FUNCS([SHA256_Update EVP_sha256], [TEST_SSH_SHA256=yes],
    [TEST_SSH_SHA256=no])
-AC_SUBST(TEST_SSH_SHA256)
+AC_SUBST([TEST_SSH_SHA256])
 # Check complete ECC support in OpenSSL
 AC_MSG_CHECKING([whether OpenSSL has complete ECC support])
 AC_LINK_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <openssl/ec.h>
 #include <openssl/ecdh.h>
 #include <openssl/ecdsa.h>
@@ -2287,32 +2280,31 @@ AC_LINK_IFELSE(
 #if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
 # error "OpenSSL < 0.9.8g has unreliable ECC code"
 #endif
-int main(void) {
+        ]], [[
        EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp521r1);
        const EVP_MD *m = EVP_sha512(); /* We need this too */
-}
        ]])],
        [
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-                AC_DEFINE(OPENSSL_HAS_ECC, 1,
+                AC_DEFINE([OPENSSL_HAS_ECC], [1],
                    [libcrypto includes complete ECC support])
                TEST_SSH_ECC=yes
                COMMENT_OUT_ECC=""
        ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
                TEST_SSH_ECC=no
                COMMENT_OUT_ECC="#no ecc#"
        ]
 )
-AC_SUBST(TEST_SSH_ECC)
+AC_SUBST([TEST_SSH_ECC])
-AC_SUBST(COMMENT_OUT_ECC)
+AC_SUBST([COMMENT_OUT_ECC])
 saved_LIBS="$LIBS"
-AC_CHECK_LIB(iaf, ia_openinfo, [
+AC_CHECK_LIB([iaf], [ia_openinfo], [
        LIBS="$LIBS -liaf"
-        AC_CHECK_FUNCS(set_id, [SSHDLIBS="$SSHDLIBS -liaf"
+        AC_CHECK_FUNCS([set_id], [SSHDLIBS="$SSHDLIBS -liaf"
-                                AC_DEFINE(HAVE_LIBIAF, 1,
+                                AC_DEFINE([HAVE_LIBIAF], [1],
                        [Define if system has libiaf that supports set_id])
                                ])
 ])
@@ -2323,128 +2315,29 @@ LIBS="$saved_LIBS"
 # Check wheter OpenSSL seeds itself
 AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
 AC_RUN_IFELSE(
-        [AC_LANG_SOURCE([[
+        [AC_LANG_PROGRAM([[
 #include <string.h>
 #include <openssl/rand.h>
-int main(void) { exit(RAND_status() == 1 ? 0 : 1); }
+        ]], [[
+        exit(RAND_status() == 1 ? 0 : 1);
        ]])],
        [
                OPENSSL_SEEDS_ITSELF=yes
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
        ],
        [
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
-                # Default to use of the rand helper if OpenSSL doesn't
-                # seed itself
-                USE_RAND_HELPER=yes
        ],
        [
                AC_MSG_WARN([cross compiling: assuming yes])
-                # This is safe, since all recent OpenSSL versions will
+                # This is safe, since we will fatal() at runtime if
-                # complain at runtime if not seeded correctly.
+                # OpenSSL is not seeded correctly.
                OPENSSL_SEEDS_ITSELF=yes
        ]
 )
-# Check for PAM libs
-PAM_MSG="no"
-AC_ARG_WITH(pam,
-        [  --with-pam              Enable PAM support ],
-        [
-                if test "x$withval" != "xno" ; then
-                        if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
-                           test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
-                                AC_MSG_ERROR([PAM headers not found])
-                        fi
-                        saved_LIBS="$LIBS"
-                        AC_CHECK_LIB(dl, dlopen, , )
-                        AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing]))
-                        AC_CHECK_FUNCS(pam_getenvlist)
-                        AC_CHECK_FUNCS(pam_putenv)
-                        LIBS="$saved_LIBS"
-                        PAM_MSG="yes"
-                        SSHDLIBS="$SSHDLIBS -lpam"
-                        AC_DEFINE(USE_PAM, 1,
-                                [Define if you want to enable PAM support])
-                        if test $ac_cv_lib_dl_dlopen = yes; then
-                                case "$LIBS" in
-                                *-ldl*)
-                                        # libdl already in LIBS
-                                        ;;
-                                *)
-                                        SSHDLIBS="$SSHDLIBS -ldl"
-                                        ;;
-                                esac
-                        fi
-                fi
-        ]
-)
-# Check for older PAM
-if test "x$PAM_MSG" = "xyes" ; then
-        # Check PAM strerror arguments (old PAM)
-        AC_MSG_CHECKING([whether pam_strerror takes only one argument])
-        AC_TRY_COMPILE(
-                [
-#include <stdlib.h>
-#if defined(HAVE_SECURITY_PAM_APPL_H)
-#include <security/pam_appl.h>
-#elif defined (HAVE_PAM_PAM_APPL_H)
-#include <pam/pam_appl.h>
-#endif
-                ],
-                [(void)pam_strerror((pam_handle_t *)NULL, -1);],
-                [AC_MSG_RESULT(no)],
-                [
-                        AC_DEFINE(HAVE_OLD_PAM, 1,
-                                [Define if you have an old version of PAM
-                                which takes only one argument to pam_strerror])
-                        AC_MSG_RESULT(yes)
-                        PAM_MSG="yes (old library)"
-                ]
-        )
-fi
-# Do we want to force the use of the rand helper?
-AC_ARG_WITH(rand-helper,
-        [  --with-rand-helper      Use subprocess to gather strong randomness ],
-        [
-                if test "x$withval" = "xno" ; then
-                        # Force use of OpenSSL's internal RNG, even if
-                        # the previous test showed it to be unseeded.
-                        if test -z "$OPENSSL_SEEDS_ITSELF" ; then
-                                AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG])
-                                OPENSSL_SEEDS_ITSELF=yes
-                                USE_RAND_HELPER=""
-                        fi
-                else
-                        USE_RAND_HELPER=yes
-                fi
-        ],
-)
-# Which randomness source do we use?
-if test ! -z "$OPENSSL_SEEDS_ITSELF" && test -z "$USE_RAND_HELPER" ; then
-        # OpenSSL only
-        AC_DEFINE(OPENSSL_PRNG_ONLY, 1,
-                [Define if you want OpenSSL's internally seeded PRNG only])
-        RAND_MSG="OpenSSL internal ONLY"
-        INSTALL_SSH_RAND_HELPER=""
-elif test ! -z "$USE_RAND_HELPER" ; then
-        # install rand helper
-        RAND_MSG="ssh-rand-helper"
-        INSTALL_SSH_RAND_HELPER="yes"
-fi
-AC_SUBST(INSTALL_SSH_RAND_HELPER)
-### Configuration of ssh-rand-helper
 # PRNGD TCP socket
-AC_ARG_WITH(prngd-port,
+AC_ARG_WITH([prngd-port],
        [  --with-prngd-port=PORT  read entropy from PRNGD/EGD TCP localhost:PORT],
        [
                case "$withval" in
@@ -2454,19 +2347,19 @@ AC_ARG_WITH(prngd-port,
                [[0-9]]*)
                        ;;
                *)
-                        AC_MSG_ERROR(You must specify a numeric port number for --with-prngd-port)
+                        AC_MSG_ERROR([You must specify a numeric port number for --with-prngd-port])
                        ;;
                esac
                if test ! -z "$withval" ; then
                        PRNGD_PORT="$withval"
-                        AC_DEFINE_UNQUOTED(PRNGD_PORT, $PRNGD_PORT,
+                        AC_DEFINE_UNQUOTED([PRNGD_PORT], [$PRNGD_PORT],
                                [Port number of PRNGD/EGD random number socket])
                fi
        ]
 )
 # PRNGD Unix domain socket
-AC_ARG_WITH(prngd-socket,
+AC_ARG_WITH([prngd-socket],
        [  --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
        [
                case "$withval" in
@@ -2479,59 +2372,119 @@ AC_ARG_WITH(prngd-socket,
                /*)
                        ;;
                *)
-                        AC_MSG_ERROR(You must specify an absolute path to the entropy socket)
+                        AC_MSG_ERROR([You must specify an absolute path to the entropy socket])
                        ;;
                esac
                if test ! -z "$withval" ; then
                        if test ! -z "$PRNGD_PORT" ; then
-                                AC_MSG_ERROR(You may not specify both a PRNGD/EGD port and socket)
+                                AC_MSG_ERROR([You may not specify both a PRNGD/EGD port and socket])
                        fi
                        if test ! -r "$withval" ; then
-                                AC_MSG_WARN(Entropy socket is not readable)
+                                AC_MSG_WARN([Entropy socket is not readable])
                        fi
                        PRNGD_SOCKET="$withval"
-                        AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET",
+                        AC_DEFINE_UNQUOTED([PRNGD_SOCKET], ["$PRNGD_SOCKET"],
                                [Location of PRNGD/EGD random number socket])
                fi
        ],
        [
                # Check for existing socket only if we don't have a random device already
-                if test "$USE_RAND_HELPER" = yes ; then
+                if test "x$OPENSSL_SEEDS_ITSELF" != "xyes" ; then
-                        AC_MSG_CHECKING(for PRNGD/EGD socket)
+                        AC_MSG_CHECKING([for PRNGD/EGD socket])
                        # Insert other locations here
                        for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
                                if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
                                        PRNGD_SOCKET="$sock"
-                                        AC_DEFINE_UNQUOTED(PRNGD_SOCKET, "$PRNGD_SOCKET")
+                                        AC_DEFINE_UNQUOTED([PRNGD_SOCKET], ["$PRNGD_SOCKET"])
                                        break;
                                fi
                        done
                        if test ! -z "$PRNGD_SOCKET" ; then
-                                AC_MSG_RESULT($PRNGD_SOCKET)
+                                AC_MSG_RESULT([$PRNGD_SOCKET])
                        else
-                                AC_MSG_RESULT(not found)
+                                AC_MSG_RESULT([not found])
                        fi
                fi
        ]
 )
-# Change default command timeout for hashing entropy source
+# Which randomness source do we use?
-entropy_timeout=200
+if test ! -z "$PRNGD_PORT" ; then
-AC_ARG_WITH(entropy-timeout,
+        RAND_MSG="PRNGd port $PRNGD_PORT"
-        [  --with-entropy-timeout  Specify entropy gathering command timeout (msec)],
+elif test ! -z "$PRNGD_SOCKET" ; then
+        RAND_MSG="PRNGd socket $PRNGD_SOCKET"
+elif test ! -z "$OPENSSL_SEEDS_ITSELF" ; then
+        AC_DEFINE([OPENSSL_PRNG_ONLY], [1],
+                [Define if you want OpenSSL's internally seeded PRNG only])
+        RAND_MSG="OpenSSL internal ONLY"
+else
+        AC_MSG_ERROR([OpenSSH has no source of random numbers. Please configure OpenSSL with an entropy source or re-run configure using one of the --with-prngd-port or --with-prngd-socket options])
+fi
+# Check for PAM libs
+PAM_MSG="no"
+AC_ARG_WITH([pam],
+        [  --with-pam              Enable PAM support ],
        [
-                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
+                if test "x$withval" != "xno" ; then
-                    test "x${withval}" != "xyes"; then
+                        if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
-                        entropy_timeout=$withval
+                           test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
+                                AC_MSG_ERROR([PAM headers not found])
+                        fi
+                        saved_LIBS="$LIBS"
+                        AC_CHECK_LIB([dl], [dlopen], , )
+                        AC_CHECK_LIB([pam], [pam_set_item], , [AC_MSG_ERROR([*** libpam missing])])
+                        AC_CHECK_FUNCS([pam_getenvlist])
+                        AC_CHECK_FUNCS([pam_putenv])
+                        LIBS="$saved_LIBS"
+                        PAM_MSG="yes"
+                        SSHDLIBS="$SSHDLIBS -lpam"
+                        AC_DEFINE([USE_PAM], [1],
+                                [Define if you want to enable PAM support])
+                        if test $ac_cv_lib_dl_dlopen = yes; then
+                                case "$LIBS" in
+                                *-ldl*)
+                                        # libdl already in LIBS
+                                        ;;
+                                *)
+                                        SSHDLIBS="$SSHDLIBS -ldl"
+                                        ;;
+                                esac
+                        fi
                fi
        ]
 )
-AC_DEFINE_UNQUOTED(ENTROPY_TIMEOUT_MSEC, $entropy_timeout,
-        [Builtin PRNG command timeout])
+# Check for older PAM
+if test "x$PAM_MSG" = "xyes" ; then
+        # Check PAM strerror arguments (old PAM)
+        AC_MSG_CHECKING([whether pam_strerror takes only one argument])
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
+#include <stdlib.h>
+#if defined(HAVE_SECURITY_PAM_APPL_H)
+#include <security/pam_appl.h>
+#elif defined (HAVE_PAM_PAM_APPL_H)
+#include <pam/pam_appl.h>
+#endif
+                ]], [[
+(void)pam_strerror((pam_handle_t *)NULL, -1);
+                ]])], [AC_MSG_RESULT([no])], [
+                        AC_DEFINE([HAVE_OLD_PAM], [1],
+                                [Define if you have an old version of PAM
+                                which takes only one argument to pam_strerror])
+                        AC_MSG_RESULT([yes])
+                        PAM_MSG="yes (old library)"
+                
+        ])
+fi
 SSH_PRIVSEP_USER=sshd
-AC_ARG_WITH(privsep-user,
+AC_ARG_WITH([privsep-user],
        [  --with-privsep-user=user Specify non-privileged user for privilege separation],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -2540,59 +2493,49 @@ AC_ARG_WITH(privsep-user,
                fi
        ]
 )
-AC_DEFINE_UNQUOTED(SSH_PRIVSEP_USER, "$SSH_PRIVSEP_USER",
+AC_DEFINE_UNQUOTED([SSH_PRIVSEP_USER], ["$SSH_PRIVSEP_USER"],
        [non-privileged user for privilege separation])
-AC_SUBST(SSH_PRIVSEP_USER)
+AC_SUBST([SSH_PRIVSEP_USER])
-# We do this little dance with the search path to insure
-# that programs that we select for use by installed programs
-# (which may be run by the super-user) come from trusted
-# locations before they come from the user's private area.
-# This should help avoid accidentally configuring some
-# random version of a program in someone's personal bin.
-OPATH=$PATH
-PATH=/bin:/usr/bin
-test -h /bin 2> /dev/null && PATH=/usr/bin
-test -d /sbin && PATH=$PATH:/sbin
-test -d /usr/sbin && PATH=$PATH:/usr/sbin
-PATH=$PATH:/etc:$OPATH
-# These programs are used by the command hashing source to gather entropy
-OSSH_PATH_ENTROPY_PROG(PROG_LS, ls)
-OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat)
-OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp)
-OSSH_PATH_ENTROPY_PROG(PROG_IFCONFIG, ifconfig)
-OSSH_PATH_ENTROPY_PROG(PROG_JSTAT, jstat)
-OSSH_PATH_ENTROPY_PROG(PROG_PS, ps)
-OSSH_PATH_ENTROPY_PROG(PROG_SAR, sar)
-OSSH_PATH_ENTROPY_PROG(PROG_W, w)
-OSSH_PATH_ENTROPY_PROG(PROG_WHO, who)
-OSSH_PATH_ENTROPY_PROG(PROG_LAST, last)
-OSSH_PATH_ENTROPY_PROG(PROG_LASTLOG, lastlog)
-OSSH_PATH_ENTROPY_PROG(PROG_DF, df)
-OSSH_PATH_ENTROPY_PROG(PROG_VMSTAT, vmstat)
-OSSH_PATH_ENTROPY_PROG(PROG_UPTIME, uptime)
-OSSH_PATH_ENTROPY_PROG(PROG_IPCS, ipcs)
-OSSH_PATH_ENTROPY_PROG(PROG_TAIL, tail)
-# restore PATH
-PATH=$OPATH
-# Where does ssh-rand-helper get its randomness from?
-INSTALL_SSH_PRNG_CMDS=""
-if test ! -z "$INSTALL_SSH_RAND_HELPER" ; then
-        if test ! -z "$PRNGD_PORT" ; then
-                RAND_HELPER_MSG="TCP localhost:$PRNGD_PORT"
-        elif test ! -z "$PRNGD_SOCKET" ; then
-                RAND_HELPER_MSG="Unix domain socket \"$PRNGD_SOCKET\""
-        else
-                RAND_HELPER_MSG="Command hashing (timeout $entropy_timeout)"
-                RAND_HELPER_CMDHASH=yes
-                INSTALL_SSH_PRNG_CMDS="yes"
-        fi
-fi
-AC_SUBST(INSTALL_SSH_PRNG_CMDS)
+# Decide which sandbox style to use
+sandbox_arg=""
+AC_ARG_WITH([sandbox],
+        [  --with-sandbox=style    Specify privilege separation sandbox (no, darwin, rlimit, systrace)],
+        [
+                if test "x$withval" = "xyes" ; then
+                        sandbox_arg=""
+                else
+                        sandbox_arg="$withval"
+                fi
+        ]
+)
+if test "x$sandbox_arg" = "xsystrace" || \
+   ( test -z "$sandbox_arg" && test "x$have_systr_policy_kill" = "x1" ) ; then
+        test "x$have_systr_policy_kill" != "x1" && \
+                AC_MSG_ERROR([systrace sandbox requires systrace headers and SYSTR_POLICY_KILL support])
+        SANDBOX_STYLE="systrace"
+        AC_DEFINE([SANDBOX_SYSTRACE], [1], [Sandbox using systrace(4)])
+elif test "x$sandbox_arg" = "xdarwin" || \
+     ( test -z "$sandbox_arg" && test "x$ac_cv_func_sandbox_init" = "xyes" && \
+       test "x$ac_cv_header_sandbox_h" = "xyes") ; then
+        test "x$ac_cv_func_sandbox_init" != "xyes" -o \
+             "x$ac_cv_header_sandbox_h" != "xyes" && \
+                AC_MSG_ERROR([Darwin seatbelt sandbox requires sandbox.h and sandbox_init function])
+        SANDBOX_STYLE="darwin"
+        AC_DEFINE([SANDBOX_DARWIN], [1], [Sandbox using Darwin sandbox_init(3)])
+elif test "x$sandbox_arg" = "xrlimit" || \
+     ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" ) ; then
+        test "x$ac_cv_func_setrlimit" != "xyes" && \
+                AC_MSG_ERROR([rlimit sandbox requires setrlimit function])
+        SANDBOX_STYLE="rlimit"
+        AC_DEFINE([SANDBOX_RLIMIT], [1], [Sandbox using setrlimit(2)])
+elif test -z "$sandbox_arg" || test "x$sandbox_arg" = "xno" || \
+     test "x$sandbox_arg" = "xnone" || test "x$sandbox_arg" = "xnull" ; then
+        SANDBOX_STYLE="none"
+        AC_DEFINE([SANDBOX_NULL], [1], [no privsep sandboxing])
+else
+        AC_MSG_ERROR([unsupported --with-sandbox])
+fi
 # Cheap hack to ensure NEWS-OS libraries are arranged right.
 if test ! -z "$SONY" ; then
@@ -2603,11 +2546,11 @@ fi
 AC_CHECK_TYPES([long long, unsigned long long, long double])
 # Check datatype sizes
-AC_CHECK_SIZEOF(char, 1)
+AC_CHECK_SIZEOF([char], [1])
-AC_CHECK_SIZEOF(short int, 2)
+AC_CHECK_SIZEOF([short int], [2])
-AC_CHECK_SIZEOF(int, 4)
+AC_CHECK_SIZEOF([int], [4])
-AC_CHECK_SIZEOF(long int, 4)
+AC_CHECK_SIZEOF([long int], [4])
-AC_CHECK_SIZEOF(long long int, 8)
+AC_CHECK_SIZEOF([long long int], [8])
 # Sanity check long long for some platforms (AIX)
 if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
@@ -2618,7 +2561,7 @@ fi
 if test -z "$have_llong_max"; then
        AC_MSG_CHECKING([for max value of long long])
        AC_RUN_IFELSE(
-                [AC_LANG_SOURCE([[
+                [AC_LANG_PROGRAM([[
 #include <stdio.h>
 /* Why is this so damn hard? */
 #ifdef __GNUC__
@@ -2654,8 +2597,7 @@ fprint_ll(FILE *f, long long n)
                return -1;
        return 0;
 }
+                ]], [[
-int main(void) {
        FILE *f;
        long long i, llmin, llmax = 0;
@@ -2689,22 +2631,21 @@ int main(void) {
        if (fclose(f) < 0)
                exit(5);
        exit(0);
-}
                ]])],
                [
                        llong_min=`$AWK '{print $1}' conftest.llminmax`
                        llong_max=`$AWK '{print $2}' conftest.llminmax`
-                        AC_MSG_RESULT($llong_max)
+                        AC_MSG_RESULT([$llong_max])
-                        AC_DEFINE_UNQUOTED(LLONG_MAX, [${llong_max}LL],
+                        AC_DEFINE_UNQUOTED([LLONG_MAX], [${llong_max}LL],
                            [max value of long long calculated by configure])
                        AC_MSG_CHECKING([for min value of long long])
-                        AC_MSG_RESULT($llong_min)
+                        AC_MSG_RESULT([$llong_min])
-                        AC_DEFINE_UNQUOTED(LLONG_MIN, [${llong_min}LL],
+                        AC_DEFINE_UNQUOTED([LLONG_MIN], [${llong_min}LL],
                            [min value of long long calculated by configure])
                ],
                [
-                        AC_MSG_RESULT(not found)
+                        AC_MSG_RESULT([not found])
                ],
                [
                        AC_MSG_WARN([cross compiling: not checking])
@@ -2715,28 +2656,24 @@ fi
 # More checks for data types
 AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [ #include <sys/types.h> ],
+        [[ u_int a; a = 1;]])],
-                [ u_int a; a = 1;],
+        [ ac_cv_have_u_int="yes" ], [ ac_cv_have_u_int="no" 
-                [ ac_cv_have_u_int="yes" ],
+        ])
-                [ ac_cv_have_u_int="no" ]
-        )
 ])
 if test "x$ac_cv_have_u_int" = "xyes" ; then
-        AC_DEFINE(HAVE_U_INT, 1, [define if you have u_int data type])
+        AC_DEFINE([HAVE_U_INT], [1], [define if you have u_int data type])
        have_u_int=1
 fi
 AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [ #include <sys/types.h> ],
+        [[ int8_t a; int16_t b; int32_t c; a = b = c = 1;]])],
-                [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
+        [ ac_cv_have_intxx_t="yes" ], [ ac_cv_have_intxx_t="no" 
-                [ ac_cv_have_intxx_t="yes" ],
+        ])
-                [ ac_cv_have_intxx_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_intxx_t" = "xyes" ; then
-        AC_DEFINE(HAVE_INTXX_T, 1, [define if you have intxx_t data type])
+        AC_DEFINE([HAVE_INTXX_T], [1], [define if you have intxx_t data type])
        have_intxx_t=1
 fi
@@ -2744,20 +2681,17 @@ if (test -z "$have_intxx_t" && \
           test "x$ac_cv_header_stdint_h" = "xyes")
 then
    AC_MSG_CHECKING([for intXX_t types in stdint.h])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <stdint.h> ]],
-                [ #include <stdint.h> ],
+        [[ int8_t a; int16_t b; int32_t c; a = b = c = 1;]])],
-                [ int8_t a; int16_t b; int32_t c; a = b = c = 1;],
                [
-                        AC_DEFINE(HAVE_INTXX_T)
+                        AC_DEFINE([HAVE_INTXX_T])
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                ],
+                ], [ AC_MSG_RESULT([no]) 
-                [ AC_MSG_RESULT(no) ]
+        ])
-        )
 fi
 AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #ifdef HAVE_STDINT_H
 # include <stdint.h>
@@ -2766,139 +2700,124 @@ AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
 #ifdef HAVE_SYS_BITYPES_H
 # include <sys/bitypes.h>
 #endif
-                ],
+                ]], [[
-                [ int64_t a; a = 1;],
+int64_t a; a = 1;
-                [ ac_cv_have_int64_t="yes" ],
+                ]])],
-                [ ac_cv_have_int64_t="no" ]
+        [ ac_cv_have_int64_t="yes" ], [ ac_cv_have_int64_t="no" 
-        )
+        ])
 ])
 if test "x$ac_cv_have_int64_t" = "xyes" ; then
-        AC_DEFINE(HAVE_INT64_T, 1, [define if you have int64_t data type])
+        AC_DEFINE([HAVE_INT64_T], [1], [define if you have int64_t data type])
 fi
 AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [ #include <sys/types.h> ],
+        [[ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;]])],
-                [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
+        [ ac_cv_have_u_intxx_t="yes" ], [ ac_cv_have_u_intxx_t="no" 
-                [ ac_cv_have_u_intxx_t="yes" ],
+        ])
-                [ ac_cv_have_u_intxx_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
-        AC_DEFINE(HAVE_U_INTXX_T, 1, [define if you have u_intxx_t data type])
+        AC_DEFINE([HAVE_U_INTXX_T], [1], [define if you have u_intxx_t data type])
        have_u_intxx_t=1
 fi
 if test -z "$have_u_intxx_t" ; then
    AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/socket.h> ]],
-                [ #include <sys/socket.h> ],
+        [[ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;]])],
-                [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;],
                [
-                        AC_DEFINE(HAVE_U_INTXX_T)
+                        AC_DEFINE([HAVE_U_INTXX_T])
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                ],
+                ], [ AC_MSG_RESULT([no]) 
-                [ AC_MSG_RESULT(no) ]
+        ])
-        )
 fi
 AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [ #include <sys/types.h> ],
+        [[ u_int64_t a; a = 1;]])],
-                [ u_int64_t a; a = 1;],
+        [ ac_cv_have_u_int64_t="yes" ], [ ac_cv_have_u_int64_t="no" 
-                [ ac_cv_have_u_int64_t="yes" ],
+        ])
-                [ ac_cv_have_u_int64_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
-        AC_DEFINE(HAVE_U_INT64_T, 1, [define if you have u_int64_t data type])
+        AC_DEFINE([HAVE_U_INT64_T], [1], [define if you have u_int64_t data type])
        have_u_int64_t=1
 fi
 if test -z "$have_u_int64_t" ; then
    AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/bitypes.h> ]],
-                [ #include <sys/bitypes.h> ],
+        [[ u_int64_t a; a = 1]])],
-                [ u_int64_t a; a = 1],
                [
-                        AC_DEFINE(HAVE_U_INT64_T)
+                        AC_DEFINE([HAVE_U_INT64_T])
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                ],
+                ], [ AC_MSG_RESULT([no]) 
-                [ AC_MSG_RESULT(no) ]
+        ])
-        )
 fi
 if test -z "$have_u_intxx_t" ; then
        AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
-                AC_TRY_COMPILE(
+                AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                        [
 #include <sys/types.h>
-                        ],
+                        ]], [[
-                        [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ],
+        uint8_t a;
-                        [ ac_cv_have_uintxx_t="yes" ],
+        uint16_t b;
-                        [ ac_cv_have_uintxx_t="no" ]
+        uint32_t c;
-                )
+        a = b = c = 1;
+                        ]])],
+                [ ac_cv_have_uintxx_t="yes" ], [ ac_cv_have_uintxx_t="no" 
+                ])
        ])
        if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
-                AC_DEFINE(HAVE_UINTXX_T, 1,
+                AC_DEFINE([HAVE_UINTXX_T], [1],
                        [define if you have uintxx_t data type])
        fi
 fi
 if test -z "$have_uintxx_t" ; then
    AC_MSG_CHECKING([for uintXX_t types in stdint.h])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <stdint.h> ]],
-                [ #include <stdint.h> ],
+        [[ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;]])],
-                [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;],
                [
-                        AC_DEFINE(HAVE_UINTXX_T)
+                        AC_DEFINE([HAVE_UINTXX_T])
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                ],
+                ], [ AC_MSG_RESULT([no]) 
-                [ AC_MSG_RESULT(no) ]
+        ])
-        )
 fi
 if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
           test "x$ac_cv_header_sys_bitypes_h" = "xyes")
 then
        AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/bitypes.h>
-                ],
+                ]], [[
-                [
                        int8_t a; int16_t b; int32_t c;
                        u_int8_t e; u_int16_t f; u_int32_t g;
                        a = b = c = e = f = g = 1;
-                ],
+                ]])],
                [
-                        AC_DEFINE(HAVE_U_INTXX_T)
+                        AC_DEFINE([HAVE_U_INTXX_T])
-                        AC_DEFINE(HAVE_INTXX_T)
+                        AC_DEFINE([HAVE_INTXX_T])
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                ],
+                ], [AC_MSG_RESULT([no])
-                [AC_MSG_RESULT(no)]
+        ])
-        )
 fi
 AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [
+        [[ u_char foo; foo = 125; ]])],
-#include <sys/types.h>
+        [ ac_cv_have_u_char="yes" ], [ ac_cv_have_u_char="no" 
-                ],
+        ])
-                [ u_char foo; foo = 125; ],
-                [ ac_cv_have_u_char="yes" ],
-                [ ac_cv_have_u_char="no" ]
-        )
 ])
 if test "x$ac_cv_have_u_char" = "xyes" ; then
-        AC_DEFINE(HAVE_U_CHAR, 1, [define if you have u_char data type])
+        AC_DEFINE([HAVE_U_CHAR], [1], [define if you have u_char data type])
 fi
 TYPE_SOCKLEN_T
-AC_CHECK_TYPES(sig_atomic_t,,,[#include <signal.h>])
+AC_CHECK_TYPES([sig_atomic_t], , , [#include <signal.h>])
-AC_CHECK_TYPES([fsblkcnt_t, fsfilcnt_t],,,[
+AC_CHECK_TYPES([fsblkcnt_t, fsfilcnt_t], , , [
 #include <sys/types.h>
 #ifdef HAVE_SYS_BITYPES_H
 #include <sys/bitypes.h>
@@ -2911,156 +2830,125 @@ AC_CHECK_TYPES([fsblkcnt_t, fsfilcnt_t],,,[
 #endif
 ])
-AC_CHECK_TYPES([in_addr_t, in_port_t],,,
+AC_CHECK_TYPES([in_addr_t, in_port_t], , ,
 [#include <sys/types.h>
 #include <netinet/in.h>])
 AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [
+        [[ size_t foo; foo = 1235; ]])],
-#include <sys/types.h>
+        [ ac_cv_have_size_t="yes" ], [ ac_cv_have_size_t="no" 
-                ],
+        ])
-                [ size_t foo; foo = 1235; ],
-                [ ac_cv_have_size_t="yes" ],
-                [ ac_cv_have_size_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_size_t" = "xyes" ; then
-        AC_DEFINE(HAVE_SIZE_T, 1, [define if you have size_t data type])
+        AC_DEFINE([HAVE_SIZE_T], [1], [define if you have size_t data type])
 fi
 AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [
+        [[ ssize_t foo; foo = 1235; ]])],
-#include <sys/types.h>
+        [ ac_cv_have_ssize_t="yes" ], [ ac_cv_have_ssize_t="no" 
-                ],
+        ])
-                [ ssize_t foo; foo = 1235; ],
-                [ ac_cv_have_ssize_t="yes" ],
-                [ ac_cv_have_ssize_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_ssize_t" = "xyes" ; then
-        AC_DEFINE(HAVE_SSIZE_T, 1, [define if you have ssize_t data type])
+        AC_DEFINE([HAVE_SSIZE_T], [1], [define if you have ssize_t data type])
 fi
 AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <time.h> ]],
-                [
+        [[ clock_t foo; foo = 1235; ]])],
-#include <time.h>
+        [ ac_cv_have_clock_t="yes" ], [ ac_cv_have_clock_t="no" 
-                ],
+        ])
-                [ clock_t foo; foo = 1235; ],
-                [ ac_cv_have_clock_t="yes" ],
-                [ ac_cv_have_clock_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_clock_t" = "xyes" ; then
-        AC_DEFINE(HAVE_CLOCK_T, 1, [define if you have clock_t data type])
+        AC_DEFINE([HAVE_CLOCK_T], [1], [define if you have clock_t data type])
 fi
 AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
-                ],
+                ]], [[ sa_family_t foo; foo = 1235; ]])],
-                [ sa_family_t foo; foo = 1235; ],
+        [ ac_cv_have_sa_family_t="yes" ],
-                [ ac_cv_have_sa_family_t="yes" ],
+        [ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [ AC_TRY_COMPILE(
-                  [
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <netinet/in.h>
-                ],
+                ]], [[ sa_family_t foo; foo = 1235; ]])],
-                [ sa_family_t foo; foo = 1235; ],
                [ ac_cv_have_sa_family_t="yes" ],
                [ ac_cv_have_sa_family_t="no" ]
-        )]
        )
+        ])
 ])
 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
-        AC_DEFINE(HAVE_SA_FAMILY_T, 1,
+        AC_DEFINE([HAVE_SA_FAMILY_T], [1],
                [define if you have sa_family_t data type])
 fi
 AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [
+        [[ pid_t foo; foo = 1235; ]])],
-#include <sys/types.h>
+        [ ac_cv_have_pid_t="yes" ], [ ac_cv_have_pid_t="no" 
-                ],
+        ])
-                [ pid_t foo; foo = 1235; ],
-                [ ac_cv_have_pid_t="yes" ],
-                [ ac_cv_have_pid_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_pid_t" = "xyes" ; then
-        AC_DEFINE(HAVE_PID_T, 1, [define if you have pid_t data type])
+        AC_DEFINE([HAVE_PID_T], [1], [define if you have pid_t data type])
 fi
 AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
-                [
+        [[ mode_t foo; foo = 1235; ]])],
-#include <sys/types.h>
+        [ ac_cv_have_mode_t="yes" ], [ ac_cv_have_mode_t="no" 
-                ],
+        ])
-                [ mode_t foo; foo = 1235; ],
-                [ ac_cv_have_mode_t="yes" ],
-                [ ac_cv_have_mode_t="no" ]
-        )
 ])
 if test "x$ac_cv_have_mode_t" = "xyes" ; then
-        AC_DEFINE(HAVE_MODE_T, 1, [define if you have mode_t data type])
+        AC_DEFINE([HAVE_MODE_T], [1], [define if you have mode_t data type])
 fi
 AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
-                ],
+                ]], [[ struct sockaddr_storage s; ]])],
-                [ struct sockaddr_storage s; ],
+        [ ac_cv_have_struct_sockaddr_storage="yes" ],
-                [ ac_cv_have_struct_sockaddr_storage="yes" ],
+        [ ac_cv_have_struct_sockaddr_storage="no" 
-                [ ac_cv_have_struct_sockaddr_storage="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
-        AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE, 1,
+        AC_DEFINE([HAVE_STRUCT_SOCKADDR_STORAGE], [1],
                [define if you have struct sockaddr_storage data type])
 fi
 AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <netinet/in.h>
-                ],
+                ]], [[ struct sockaddr_in6 s; s.sin6_family = 0; ]])],
-                [ struct sockaddr_in6 s; s.sin6_family = 0; ],
+        [ ac_cv_have_struct_sockaddr_in6="yes" ],
-                [ ac_cv_have_struct_sockaddr_in6="yes" ],
+        [ ac_cv_have_struct_sockaddr_in6="no" 
-                [ ac_cv_have_struct_sockaddr_in6="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
-        AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6, 1,
+        AC_DEFINE([HAVE_STRUCT_SOCKADDR_IN6], [1],
                [define if you have struct sockaddr_in6 data type])
 fi
 AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <netinet/in.h>
-                ],
+                ]], [[ struct in6_addr s; s.s6_addr[0] = 0; ]])],
-                [ struct in6_addr s; s.s6_addr[0] = 0; ],
+        [ ac_cv_have_struct_in6_addr="yes" ],
-                [ ac_cv_have_struct_in6_addr="yes" ],
+        [ ac_cv_have_struct_in6_addr="no" 
-                [ ac_cv_have_struct_in6_addr="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
-        AC_DEFINE(HAVE_STRUCT_IN6_ADDR, 1,
+        AC_DEFINE([HAVE_STRUCT_IN6_ADDR], [1],
                [define if you have struct in6_addr data type])
 dnl Now check for sin6_scope_id
-        AC_CHECK_MEMBERS([struct sockaddr_in6.sin6_scope_id],,,
+        AC_CHECK_MEMBERS([struct sockaddr_in6.sin6_scope_id], , ,
                [
 #ifdef HAVE_SYS_TYPES_H
 #include <sys/types.h>
@@ -3070,36 +2958,33 @@ dnl Now check for sin6_scope_id
 fi
 AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <netdb.h>
-                ],
+                ]], [[ struct addrinfo s; s.ai_flags = AI_PASSIVE; ]])],
-                [ struct addrinfo s; s.ai_flags = AI_PASSIVE; ],
+        [ ac_cv_have_struct_addrinfo="yes" ],
-                [ ac_cv_have_struct_addrinfo="yes" ],
+        [ ac_cv_have_struct_addrinfo="no" 
-                [ ac_cv_have_struct_addrinfo="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
-        AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1,
+        AC_DEFINE([HAVE_STRUCT_ADDRINFO], [1],
                [define if you have struct addrinfo data type])
 fi
 AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/time.h> ]],
-                [ #include <sys/time.h> ],
+        [[ struct timeval tv; tv.tv_sec = 1;]])],
-                [ struct timeval tv; tv.tv_sec = 1;],
+        [ ac_cv_have_struct_timeval="yes" ],
-                [ ac_cv_have_struct_timeval="yes" ],
+        [ ac_cv_have_struct_timeval="no" 
-                [ ac_cv_have_struct_timeval="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
-        AC_DEFINE(HAVE_STRUCT_TIMEVAL, 1, [define if you have struct timeval])
+        AC_DEFINE([HAVE_STRUCT_TIMEVAL], [1], [define if you have struct timeval])
        have_struct_timeval=1
 fi
-AC_CHECK_TYPES(struct timespec)
+AC_CHECK_TYPES([struct timespec])
 # We need int64_t or else certian parts of the compile will fail.
 if test "x$ac_cv_have_int64_t" = "xno" && \
@@ -3135,32 +3020,32 @@ main()
 #else
 main() { exit(0); }
 #endif
-                ]])], [ true ], [ AC_DEFINE(BROKEN_SNPRINTF) ],
+                ]])], [ true ], [ AC_DEFINE([BROKEN_SNPRINTF]) ],
                AC_MSG_WARN([cross compiling: Assuming working snprintf()])
        )
 fi
 dnl Checks for structure members
-OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmp.h, HAVE_HOST_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_host], [utmp.h], [HAVE_HOST_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_host, utmpx.h, HAVE_HOST_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_host], [utmpx.h], [HAVE_HOST_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(syslen, utmpx.h, HAVE_SYSLEN_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([syslen], [utmpx.h], [HAVE_SYSLEN_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_pid, utmp.h, HAVE_PID_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_pid], [utmp.h], [HAVE_PID_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmp.h, HAVE_TYPE_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_type], [utmp.h], [HAVE_TYPE_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_type, utmpx.h, HAVE_TYPE_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_type], [utmpx.h], [HAVE_TYPE_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmp.h, HAVE_TV_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_tv], [utmp.h], [HAVE_TV_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmp.h, HAVE_ID_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_id], [utmp.h], [HAVE_ID_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_id, utmpx.h, HAVE_ID_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_id], [utmpx.h], [HAVE_ID_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmp.h, HAVE_ADDR_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_addr], [utmp.h], [HAVE_ADDR_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_addr, utmpx.h, HAVE_ADDR_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_addr], [utmpx.h], [HAVE_ADDR_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmp.h, HAVE_ADDR_V6_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_addr_v6], [utmp.h], [HAVE_ADDR_V6_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_addr_v6, utmpx.h, HAVE_ADDR_V6_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_addr_v6], [utmpx.h], [HAVE_ADDR_V6_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_exit, utmp.h, HAVE_EXIT_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_exit], [utmp.h], [HAVE_EXIT_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmp.h, HAVE_TIME_IN_UTMP)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_time], [utmp.h], [HAVE_TIME_IN_UTMP])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_time, utmpx.h, HAVE_TIME_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_time], [utmpx.h], [HAVE_TIME_IN_UTMPX])
-OSSH_CHECK_HEADER_FOR_FIELD(ut_tv, utmpx.h, HAVE_TV_IN_UTMPX)
+OSSH_CHECK_HEADER_FOR_FIELD([ut_tv], [utmpx.h], [HAVE_TV_IN_UTMPX])
 AC_CHECK_MEMBERS([struct stat.st_blksize])
-AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
+AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE([__res_state], [state],
        [Define if we don't have struct __res_state in resolv.h])],
 [
 #include <stdio.h>
@@ -3174,94 +3059,79 @@ AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE(__res_state, state,
 AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
                ac_cv_have_ss_family_in_struct_ss, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
-                ],
+                ]], [[ struct sockaddr_storage s; s.ss_family = 1; ]])],
-                [ struct sockaddr_storage s; s.ss_family = 1; ],
+        [ ac_cv_have_ss_family_in_struct_ss="yes" ],
-                [ ac_cv_have_ss_family_in_struct_ss="yes" ],
+        [ ac_cv_have_ss_family_in_struct_ss="no" ])
-                [ ac_cv_have_ss_family_in_struct_ss="no" ],
-        )
 ])
 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
-        AC_DEFINE(HAVE_SS_FAMILY_IN_SS, 1, [Fields in struct sockaddr_storage])
+        AC_DEFINE([HAVE_SS_FAMILY_IN_SS], [1], [Fields in struct sockaddr_storage])
 fi
 AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
                ac_cv_have___ss_family_in_struct_ss, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
-                ],
+                ]], [[ struct sockaddr_storage s; s.__ss_family = 1; ]])],
-                [ struct sockaddr_storage s; s.__ss_family = 1; ],
+        [ ac_cv_have___ss_family_in_struct_ss="yes" ],
-                [ ac_cv_have___ss_family_in_struct_ss="yes" ],
+        [ ac_cv_have___ss_family_in_struct_ss="no" 
-                [ ac_cv_have___ss_family_in_struct_ss="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
-        AC_DEFINE(HAVE___SS_FAMILY_IN_SS, 1,
+        AC_DEFINE([HAVE___SS_FAMILY_IN_SS], [1],
                [Fields in struct sockaddr_storage])
 fi
 AC_CACHE_CHECK([for pw_class field in struct passwd],
                ac_cv_have_pw_class_in_struct_passwd, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
-                [
+        [[ struct passwd p; p.pw_class = 0; ]])],
-#include <pwd.h>
+        [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
-                ],
+        [ ac_cv_have_pw_class_in_struct_passwd="no" 
-                [ struct passwd p; p.pw_class = 0; ],
+        ])
-                [ ac_cv_have_pw_class_in_struct_passwd="yes" ],
-                [ ac_cv_have_pw_class_in_struct_passwd="no" ]
-        )
 ])
 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then
-        AC_DEFINE(HAVE_PW_CLASS_IN_PASSWD, 1,
+        AC_DEFINE([HAVE_PW_CLASS_IN_PASSWD], [1],
                [Define if your password has a pw_class field])
 fi
 AC_CACHE_CHECK([for pw_expire field in struct passwd],
                ac_cv_have_pw_expire_in_struct_passwd, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
-                [
+        [[ struct passwd p; p.pw_expire = 0; ]])],
-#include <pwd.h>
+        [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
-                ],
+        [ ac_cv_have_pw_expire_in_struct_passwd="no" 
-                [ struct passwd p; p.pw_expire = 0; ],
+        ])
-                [ ac_cv_have_pw_expire_in_struct_passwd="yes" ],
-                [ ac_cv_have_pw_expire_in_struct_passwd="no" ]
-        )
 ])
 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then
-        AC_DEFINE(HAVE_PW_EXPIRE_IN_PASSWD, 1,
+        AC_DEFINE([HAVE_PW_EXPIRE_IN_PASSWD], [1],
                [Define if your password has a pw_expire field])
 fi
 AC_CACHE_CHECK([for pw_change field in struct passwd],
                ac_cv_have_pw_change_in_struct_passwd, [
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <pwd.h> ]],
-                [
+        [[ struct passwd p; p.pw_change = 0; ]])],
-#include <pwd.h>
+        [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
-                ],
+        [ ac_cv_have_pw_change_in_struct_passwd="no" 
-                [ struct passwd p; p.pw_change = 0; ],
+        ])
-                [ ac_cv_have_pw_change_in_struct_passwd="yes" ],
-                [ ac_cv_have_pw_change_in_struct_passwd="no" ]
-        )
 ])
 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then
-        AC_DEFINE(HAVE_PW_CHANGE_IN_PASSWD, 1,
+        AC_DEFINE([HAVE_PW_CHANGE_IN_PASSWD], [1],
                [Define if your password has a pw_change field])
 fi
 dnl make sure we're using the real structure members and not defines
 AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
                ac_cv_have_accrights_in_msghdr, [
-        AC_COMPILE_IFELSE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/uio.h>
-int main() {
+                ]], [[
 #ifdef msg_accrights
 #error "msg_accrights is a macro"
 exit(1);
@@ -3269,20 +3139,19 @@ exit(1);
 struct msghdr m;
 m.msg_accrights = 0;
 exit(0);
-}
+                ]])],
-                ],
                [ ac_cv_have_accrights_in_msghdr="yes" ],
                [ ac_cv_have_accrights_in_msghdr="no" ]
        )
 ])
 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
-        AC_DEFINE(HAVE_ACCRIGHTS_IN_MSGHDR, 1,
+        AC_DEFINE([HAVE_ACCRIGHTS_IN_MSGHDR], [1],
                [Define if your system uses access rights style
                file descriptor passing])
 fi
-AC_MSG_CHECKING(if struct statvfs.f_fsid is integral type)
+AC_MSG_CHECKING([if struct statvfs.f_fsid is integral type])
-AC_TRY_COMPILE([
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <sys/stat.h>
 #ifdef HAVE_SYS_TIME_H
@@ -3294,37 +3163,36 @@ AC_TRY_COMPILE([
 #ifdef HAVE_SYS_STATVFS_H
 #include <sys/statvfs.h>
 #endif
-], [struct statvfs s; s.f_fsid = 0;],
+        ]], [[ struct statvfs s; s.f_fsid = 0; ]])],
-[ AC_MSG_RESULT(yes) ],
+        [ AC_MSG_RESULT([yes]) ],
-[ AC_MSG_RESULT(no)
+        [ AC_MSG_RESULT([no])
-        AC_MSG_CHECKING(if fsid_t has member val)
+        AC_MSG_CHECKING([if fsid_t has member val])
-        AC_TRY_COMPILE([
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
-#include <sys/statvfs.h>],
+#include <sys/statvfs.h>
-        [fsid_t t; t.val[0] = 0;],
+        ]], [[ fsid_t t; t.val[0] = 0; ]])],
-        [ AC_MSG_RESULT(yes)
+        [ AC_MSG_RESULT([yes])
-          AC_DEFINE(FSID_HAS_VAL, 1, fsid_t has member val) ],
+          AC_DEFINE([FSID_HAS_VAL], [1], [fsid_t has member val]) ],
-        [ AC_MSG_RESULT(no) ])
+        [ AC_MSG_RESULT([no]) ])
-        AC_MSG_CHECKING(if f_fsid has member __val)
+        AC_MSG_CHECKING([if f_fsid has member __val])
-        AC_TRY_COMPILE([
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
-#include <sys/statvfs.h>],
+#include <sys/statvfs.h>
-        [fsid_t t; t.__val[0] = 0;],
+        ]], [[ fsid_t t; t.__val[0] = 0; ]])],
-        [ AC_MSG_RESULT(yes)
+        [ AC_MSG_RESULT([yes])
-          AC_DEFINE(FSID_HAS___VAL, 1, fsid_t has member __val) ],
+          AC_DEFINE([FSID_HAS___VAL], [1], [fsid_t has member __val]) ],
-        [ AC_MSG_RESULT(no) ])
+        [ AC_MSG_RESULT([no]) ])
 ])
 AC_CACHE_CHECK([for msg_control field in struct msghdr],
                ac_cv_have_control_in_msghdr, [
-        AC_COMPILE_IFELSE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-                [
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/uio.h>
-int main() {
+                ]], [[
 #ifdef msg_control
 #error "msg_control is a macro"
 exit(1);
@@ -3332,178 +3200,161 @@ exit(1);
 struct msghdr m;
 m.msg_control = 0;
 exit(0);
-}
+                ]])],
-                ],
                [ ac_cv_have_control_in_msghdr="yes" ],
                [ ac_cv_have_control_in_msghdr="no" ]
        )
 ])
 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
-        AC_DEFINE(HAVE_CONTROL_IN_MSGHDR, 1,
+        AC_DEFINE([HAVE_CONTROL_IN_MSGHDR], [1],
                [Define if your system uses ancillary data style
                file descriptor passing])
 fi
 AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
-        AC_TRY_LINK([],
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
-                [ extern char *__progname; printf("%s", __progname); ],
+                [[ extern char *__progname; printf("%s", __progname); ]])],
-                [ ac_cv_libc_defines___progname="yes" ],
+        [ ac_cv_libc_defines___progname="yes" ],
-                [ ac_cv_libc_defines___progname="no" ]
+        [ ac_cv_libc_defines___progname="no" 
-        )
+        ])
 ])
 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
-        AC_DEFINE(HAVE___PROGNAME, 1, [Define if libc defines __progname])
+        AC_DEFINE([HAVE___PROGNAME], [1], [Define if libc defines __progname])
 fi
 AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
-        AC_TRY_LINK([
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]],
-#include <stdio.h>
+                [[ printf("%s", __FUNCTION__); ]])],
-],
+        [ ac_cv_cc_implements___FUNCTION__="yes" ],
-                [ printf("%s", __FUNCTION__); ],
+        [ ac_cv_cc_implements___FUNCTION__="no" 
-                [ ac_cv_cc_implements___FUNCTION__="yes" ],
+        ])
-                [ ac_cv_cc_implements___FUNCTION__="no" ]
-        )
 ])
 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
-        AC_DEFINE(HAVE___FUNCTION__, 1,
+        AC_DEFINE([HAVE___FUNCTION__], [1],
                [Define if compiler implements __FUNCTION__])
 fi
 AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
-        AC_TRY_LINK([
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]],
-#include <stdio.h>
+                [[ printf("%s", __func__); ]])],
-],
+        [ ac_cv_cc_implements___func__="yes" ],
-                [ printf("%s", __func__); ],
+        [ ac_cv_cc_implements___func__="no" 
-                [ ac_cv_cc_implements___func__="yes" ],
+        ])
-                [ ac_cv_cc_implements___func__="no" ]
-        )
 ])
 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
-        AC_DEFINE(HAVE___func__, 1, [Define if compiler implements __func__])
+        AC_DEFINE([HAVE___func__], [1], [Define if compiler implements __func__])
 fi
 AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
-        AC_TRY_LINK(
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[
-                [#include <stdarg.h>
+#include <stdarg.h>
-                 va_list x,y;],
+va_list x,y;
-                [va_copy(x,y);],
+                ]], [[ va_copy(x,y); ]])],
-                [ ac_cv_have_va_copy="yes" ],
+        [ ac_cv_have_va_copy="yes" ],
-                [ ac_cv_have_va_copy="no" ]
+        [ ac_cv_have_va_copy="no" 
-        )
+        ])
 ])
 if test "x$ac_cv_have_va_copy" = "xyes" ; then
-        AC_DEFINE(HAVE_VA_COPY, 1, [Define if va_copy exists])
+        AC_DEFINE([HAVE_VA_COPY], [1], [Define if va_copy exists])
 fi
 AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
-        AC_TRY_LINK(
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[
-                [#include <stdarg.h>
+#include <stdarg.h>
-                 va_list x,y;],
+va_list x,y;
-                [__va_copy(x,y);],
+                ]], [[ __va_copy(x,y); ]])],
-                [ ac_cv_have___va_copy="yes" ],
+        [ ac_cv_have___va_copy="yes" ], [ ac_cv_have___va_copy="no" 
-                [ ac_cv_have___va_copy="no" ]
+        ])
-        )
 ])
 if test "x$ac_cv_have___va_copy" = "xyes" ; then
-        AC_DEFINE(HAVE___VA_COPY, 1, [Define if __va_copy exists])
+        AC_DEFINE([HAVE___VA_COPY], [1], [Define if __va_copy exists])
 fi
 AC_CACHE_CHECK([whether getopt has optreset support],
                ac_cv_have_getopt_optreset, [
-        AC_TRY_LINK(
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <getopt.h> ]],
-                [
+                [[ extern int optreset; optreset = 0; ]])],
-#include <getopt.h>
+        [ ac_cv_have_getopt_optreset="yes" ],
-                ],
+        [ ac_cv_have_getopt_optreset="no" 
-                [ extern int optreset; optreset = 0; ],
+        ])
-                [ ac_cv_have_getopt_optreset="yes" ],
-                [ ac_cv_have_getopt_optreset="no" ]
-        )
 ])
 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
-        AC_DEFINE(HAVE_GETOPT_OPTRESET, 1,
+        AC_DEFINE([HAVE_GETOPT_OPTRESET], [1],
                [Define if your getopt(3) defines and uses optreset])
 fi
 AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
-        AC_TRY_LINK([],
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
-                [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);],
+[[ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);]])],
-                [ ac_cv_libc_defines_sys_errlist="yes" ],
+        [ ac_cv_libc_defines_sys_errlist="yes" ],
-                [ ac_cv_libc_defines_sys_errlist="no" ]
+        [ ac_cv_libc_defines_sys_errlist="no" 
-        )
+        ])
 ])
 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
-        AC_DEFINE(HAVE_SYS_ERRLIST, 1,
+        AC_DEFINE([HAVE_SYS_ERRLIST], [1],
                [Define if your system defines sys_errlist[]])
 fi
 AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
-        AC_TRY_LINK([],
+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
-                [ extern int sys_nerr; printf("%i", sys_nerr);],
+[[ extern int sys_nerr; printf("%i", sys_nerr);]])],
-                [ ac_cv_libc_defines_sys_nerr="yes" ],
+        [ ac_cv_libc_defines_sys_nerr="yes" ],
-                [ ac_cv_libc_defines_sys_nerr="no" ]
+        [ ac_cv_libc_defines_sys_nerr="no" 
-        )
+        ])
 ])
 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
-        AC_DEFINE(HAVE_SYS_NERR, 1, [Define if your system defines sys_nerr])
+        AC_DEFINE([HAVE_SYS_NERR], [1], [Define if your system defines sys_nerr])
 fi
 # Check libraries needed by DNS fingerprint support
-AC_SEARCH_LIBS(getrrsetbyname, resolv,
+AC_SEARCH_LIBS([getrrsetbyname], [resolv],
-        [AC_DEFINE(HAVE_GETRRSETBYNAME, 1,
+        [AC_DEFINE([HAVE_GETRRSETBYNAME], [1],
                [Define if getrrsetbyname() exists])],
        [
                # Needed by our getrrsetbyname()
-                AC_SEARCH_LIBS(res_query, resolv)
+                AC_SEARCH_LIBS([res_query], [resolv])
-                AC_SEARCH_LIBS(dn_expand, resolv)
+                AC_SEARCH_LIBS([dn_expand], [resolv])
-                AC_MSG_CHECKING(if res_query will link)
+                AC_MSG_CHECKING([if res_query will link])
-                AC_LINK_IFELSE([
+                AC_LINK_IFELSE([AC_LANG_PROGRAM([[
-#include "confdefs.h"
 #include <sys/types.h>
 #include <netinet/in.h>
 #include <arpa/nameser.h>
 #include <netdb.h>
 #include <resolv.h>
-int main()
+                                ]], [[
-{
        res_query (0, 0, 0, 0, 0);
-        return 0;
+                                ]])],
-}
+                    AC_MSG_RESULT([yes]),
-                   ],
+                   [AC_MSG_RESULT([no])
-                    AC_MSG_RESULT(yes),
-                   [AC_MSG_RESULT(no)
                    saved_LIBS="$LIBS"
                    LIBS="$LIBS -lresolv"
-                    AC_MSG_CHECKING(for res_query in -lresolv)
+                    AC_MSG_CHECKING([for res_query in -lresolv])
-                    AC_LINK_IFELSE([
+                    AC_LINK_IFELSE([AC_LANG_PROGRAM([[
-#include "confdefs.h"
 #include <sys/types.h>
 #include <netinet/in.h>
 #include <arpa/nameser.h>
 #include <netdb.h>
 #include <resolv.h>
-int main()
+                                ]], [[
-{
        res_query (0, 0, 0, 0, 0);
-        return 0;
+                                ]])],
-}
+                        [AC_MSG_RESULT([yes])],
-                        ],
-                        [AC_MSG_RESULT(yes)],
                        [LIBS="$saved_LIBS"
-                         AC_MSG_RESULT(no)])
+                         AC_MSG_RESULT([no])])
                    ])
-                AC_CHECK_FUNCS(_getshort _getlong)
+                AC_CHECK_FUNCS([_getshort _getlong])
                AC_CHECK_DECLS([_getshort, _getlong], , ,
                    [#include <sys/types.h>
                    #include <arpa/nameser.h>])
-                AC_CHECK_MEMBER(HEADER.ad,
+                AC_CHECK_MEMBER([HEADER.ad],
-                        [AC_DEFINE(HAVE_HEADER_AD, 1,
+                        [AC_DEFINE([HAVE_HEADER_AD], [1],
-                            [Define if HEADER.ad exists in arpa/nameser.h])],,
+                            [Define if HEADER.ad exists in arpa/nameser.h])], ,
                        [#include <arpa/nameser.h>])
        ])
-AC_MSG_CHECKING(if struct __res_state _res is an extern)
+AC_MSG_CHECKING([if struct __res_state _res is an extern])
-AC_LINK_IFELSE([
+AC_LINK_IFELSE([AC_LANG_PROGRAM([[
 #include <stdio.h>
 #if HAVE_SYS_TYPES_H
 # include <sys/types.h>
@@ -3512,43 +3363,43 @@ AC_LINK_IFELSE([
 #include <arpa/nameser.h>
 #include <resolv.h>
 extern struct __res_state _res;
-int main() { return 0; }
+                ]], [[ ]])],
-                ],
+                [AC_MSG_RESULT([yes])
-                [AC_MSG_RESULT(yes)
+                 AC_DEFINE([HAVE__RES_EXTERN], [1],
-                 AC_DEFINE(HAVE__RES_EXTERN, 1,
                    [Define if you have struct __res_state _res as an extern])
                ],
-                [ AC_MSG_RESULT(no) ]
+                [ AC_MSG_RESULT([no]) ]
 )
 # Check whether user wants SELinux support
 SELINUX_MSG="no"
 LIBSELINUX=""
-AC_ARG_WITH(selinux,
+AC_ARG_WITH([selinux],
        [  --with-selinux          Enable SELinux support],
        [ if test "x$withval" != "xno" ; then
                save_LIBS="$LIBS"
-                AC_DEFINE(WITH_SELINUX,1,[Define if you want SELinux support.])
+                AC_DEFINE([WITH_SELINUX], [1],
+                        [Define if you want SELinux support.])
                SELINUX_MSG="yes"
                AC_CHECK_HEADER([selinux/selinux.h], ,
-                        AC_MSG_ERROR(SELinux support requires selinux.h header))
+                        AC_MSG_ERROR([SELinux support requires selinux.h header]))
-                AC_CHECK_LIB(selinux, setexeccon,
+                AC_CHECK_LIB([selinux], [setexeccon],
                        [ LIBSELINUX="-lselinux"
                          LIBS="$LIBS -lselinux"
                        ],
-                        AC_MSG_ERROR(SELinux support requires libselinux library))
+                        AC_MSG_ERROR([SELinux support requires libselinux library]))
                SSHLIBS="$SSHLIBS $LIBSELINUX"
                SSHDLIBS="$SSHDLIBS $LIBSELINUX"
-                AC_CHECK_FUNCS(getseuserbyname get_default_context_with_level)
+                AC_CHECK_FUNCS([getseuserbyname get_default_context_with_level])
                LIBS="$save_LIBS"
        fi ]
 )
-AC_SUBST(SSHLIBS)
+AC_SUBST([SSHLIBS])
-AC_SUBST(SSHDLIBS)
+AC_SUBST([SSHDLIBS])
 # Check whether user wants Kerberos 5 support
 KRB5_MSG="no"
-AC_ARG_WITH(kerberos5,
+AC_ARG_WITH([kerberos5],
        [  --with-kerberos5=PATH   Enable Kerberos 5 support],
        [ if test "x$withval" != "xno" ; then
                if test "x$withval" = "xyes" ; then
@@ -3557,73 +3408,72 @@ AC_ARG_WITH(kerberos5,
                        KRB5ROOT=${withval}
                fi
-                AC_DEFINE(KRB5, 1, [Define if you want Kerberos 5 support])
+                AC_DEFINE([KRB5], [1], [Define if you want Kerberos 5 support])
                KRB5_MSG="yes"
-                AC_PATH_PROG([KRB5CONF],[krb5-config],
+                AC_PATH_PROG([KRB5CONF], [krb5-config],
                             [$KRB5ROOT/bin/krb5-config],
                             [$KRB5ROOT/bin:$PATH])
                if test -x $KRB5CONF ; then
-                        AC_MSG_CHECKING(for gssapi support)
+                        AC_MSG_CHECKING([for gssapi support])
                        if $KRB5CONF | grep gssapi >/dev/null ; then
-                                AC_MSG_RESULT(yes)
+                                AC_MSG_RESULT([yes])
-                                AC_DEFINE(GSSAPI, 1,
+                                AC_DEFINE([GSSAPI], [1],
                                        [Define this if you want GSSAPI
                                        support in the version 2 protocol])
                                k5confopts=gssapi
                        else
-                                AC_MSG_RESULT(no)
+                                AC_MSG_RESULT([no])
                                k5confopts=""
                        fi
                        K5CFLAGS="`$KRB5CONF --cflags $k5confopts`"
                        K5LIBS="`$KRB5CONF --libs $k5confopts`"
                        CPPFLAGS="$CPPFLAGS $K5CFLAGS"
-                        AC_MSG_CHECKING(whether we are using Heimdal)
+                        AC_MSG_CHECKING([whether we are using Heimdal])
-                        AC_TRY_COMPILE([ #include <krb5.h> ],
+                        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <krb5.h>
-                                       [ char *tmp = heimdal_version; ],
+                                ]], [[ char *tmp = heimdal_version; ]])],
-                                       [ AC_MSG_RESULT(yes)
+                                [ AC_MSG_RESULT([yes])
-                                         AC_DEFINE(HEIMDAL, 1,
+                                AC_DEFINE([HEIMDAL], [1],
-                                        [Define this if you are using the
+                                [Define this if you are using the Heimdal
-                                        Heimdal version of Kerberos V5]) ],
+                                version of Kerberos V5]) ],
-                                         AC_MSG_RESULT(no)
+                                [AC_MSG_RESULT([no])
-                        )
+                        ])
                else
                        CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
                        LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
-                        AC_MSG_CHECKING(whether we are using Heimdal)
+                        AC_MSG_CHECKING([whether we are using Heimdal])
-                        AC_TRY_COMPILE([ #include <krb5.h> ],
+                        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <krb5.h>
-                                       [ char *tmp = heimdal_version; ],
+                                ]], [[ char *tmp = heimdal_version; ]])],
-                                       [ AC_MSG_RESULT(yes)
+                                        [ AC_MSG_RESULT([yes])
-                                         AC_DEFINE(HEIMDAL)
+                                         AC_DEFINE([HEIMDAL])
                                         K5LIBS="-lkrb5"
                                         K5LIBS="$K5LIBS -lcom_err -lasn1"
-                                         AC_CHECK_LIB(roken, net_write,
+                                         AC_CHECK_LIB([roken], [net_write],
                                           [K5LIBS="$K5LIBS -lroken"])
-                                         AC_CHECK_LIB(des, des_cbc_encrypt,
+                                         AC_CHECK_LIB([des], [des_cbc_encrypt],
                                           [K5LIBS="$K5LIBS -ldes"])
-                                       ],
+                                       ], [ AC_MSG_RESULT([no])
-                                       [ AC_MSG_RESULT(no)
                                         K5LIBS="-lkrb5 -lk5crypto -lcom_err"
-                                       ]
+                                       
-                        )
+                        ])
-                        AC_SEARCH_LIBS(dn_expand, resolv)
+                        AC_SEARCH_LIBS([dn_expand], [resolv])
-                        AC_CHECK_LIB(gssapi_krb5, gss_init_sec_context,
+                        AC_CHECK_LIB([gssapi_krb5], [gss_init_sec_context],
-                                [ AC_DEFINE(GSSAPI)
+                                [ AC_DEFINE([GSSAPI])
                                  K5LIBS="-lgssapi_krb5 $K5LIBS" ],
-                                [ AC_CHECK_LIB(gssapi, gss_init_sec_context,
+                                [ AC_CHECK_LIB([gssapi], [gss_init_sec_context],
-                                        [ AC_DEFINE(GSSAPI)
+                                        [ AC_DEFINE([GSSAPI])
                                          K5LIBS="-lgssapi $K5LIBS" ],
                                        AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]),
                                        $K5LIBS)
                                ],
                                $K5LIBS)
-                        AC_CHECK_HEADER(gssapi.h, ,
+                        AC_CHECK_HEADER([gssapi.h], ,
                                [ unset ac_cv_header_gssapi_h
                                  CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
-                                  AC_CHECK_HEADERS(gssapi.h, ,
+                                  AC_CHECK_HEADERS([gssapi.h], ,
                                        AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
                                  )
                                ]
@@ -3631,7 +3481,7 @@ AC_ARG_WITH(kerberos5,
                        oldCPP="$CPPFLAGS"
                        CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
-                        AC_CHECK_HEADER(gssapi_krb5.h, ,
+                        AC_CHECK_HEADER([gssapi_krb5.h], ,
                                        [ CPPFLAGS="$oldCPP" ])
                fi
@@ -3642,13 +3492,13 @@ AC_ARG_WITH(kerberos5,
                        blibpath="$blibpath:${KRB5ROOT}/lib"
                fi
-                AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h)
+                AC_CHECK_HEADERS([gssapi.h gssapi/gssapi.h])
-                AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h)
+                AC_CHECK_HEADERS([gssapi_krb5.h gssapi/gssapi_krb5.h])
-                AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h)
+                AC_CHECK_HEADERS([gssapi_generic.h gssapi/gssapi_generic.h])
                LIBS="$LIBS $K5LIBS"
-                AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS, 1,
+                AC_SEARCH_LIBS([k_hasafs], [kafs], [AC_DEFINE([USE_AFS], [1],
-                        [Define this if you want to use libkafs' AFS support]))
+                        [Define this if you want to use libkafs' AFS support])])
        fi
        ]
 )
@@ -3656,7 +3506,7 @@ AC_ARG_WITH(kerberos5,
 # Looking for programs, paths and files
 PRIVSEP_PATH=/var/empty
-AC_ARG_WITH(privsep-path,
+AC_ARG_WITH([privsep-path],
        [  --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -3665,9 +3515,9 @@ AC_ARG_WITH(privsep-path,
                fi
        ]
 )
-AC_SUBST(PRIVSEP_PATH)
+AC_SUBST([PRIVSEP_PATH])
-AC_ARG_WITH(xauth,
+AC_ARG_WITH([xauth],
        [  --with-xauth=PATH       Specify path to xauth program ],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -3681,7 +3531,7 @@ AC_ARG_WITH(xauth,
                TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
                TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
                TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
-                AC_PATH_PROG(xauth_path, xauth, , $TestPath)
+                AC_PATH_PROG([xauth_path], [xauth], , [$TestPath])
                if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
                        xauth_path="/usr/openwin/bin/xauth"
                fi
@@ -3689,7 +3539,7 @@ AC_ARG_WITH(xauth,
 )
 STRIP_OPT=-s
-AC_ARG_ENABLE(strip,
+AC_ARG_ENABLE([strip],
        [  --disable-strip         Disable calling strip(1) on install],
        [
                if test "x$enableval" = "xno" ; then
@@ -3697,24 +3547,99 @@ AC_ARG_ENABLE(strip,
                fi
        ]
 )
-AC_SUBST(STRIP_OPT)
+AC_SUBST([STRIP_OPT])
 if test -z "$xauth_path" ; then
        XAUTH_PATH="undefined"
-        AC_SUBST(XAUTH_PATH)
+        AC_SUBST([XAUTH_PATH])
 else
-        AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path",
+        AC_DEFINE_UNQUOTED([XAUTH_PATH], ["$xauth_path"],
                [Define if xauth is found in your path])
        XAUTH_PATH=$xauth_path
-        AC_SUBST(XAUTH_PATH)
+        AC_SUBST([XAUTH_PATH])
 fi
-# Check for mail directory (last resort if we cannot get it from headers)
+dnl # --with-maildir=/path/to/mail gets top priority.
-if test ! -z "$MAIL" ; then
+dnl # if maildir is set in the platform case statement above we use that.
-        maildir=`dirname $MAIL`
+dnl # Otherwise we run a program to get the dir from system headers.
-        AC_DEFINE_UNQUOTED(MAIL_DIRECTORY, "$maildir",
+dnl # We first look for _PATH_MAILDIR then MAILDIR then _PATH_MAIL
-                [Set this to your mail directory if you don't have maillock.h])
+dnl # If we find _PATH_MAILDIR we do nothing because that is what
-fi
+dnl # session.c expects anyway. Otherwise we set to the value found
+dnl # stripping any trailing slash. If for some strage reason our program
+dnl # does not find what it needs, we default to /var/spool/mail.
+# Check for mail directory
+AC_ARG_WITH([maildir],
+    [  --with-maildir=/path/to/mail    Specify your system mail directory],
+    [
+        if test "X$withval" != X  &&  test "x$withval" != xno  &&  \
+            test "x${withval}" != xyes; then
+                AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$withval"],
+            [Set this to your mail directory if you do not have _PATH_MAILDIR])
+            fi
+     ],[
+        if test "X$maildir" != "X"; then
+            AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$maildir"])
+        else
+            AC_MSG_CHECKING([Discovering system mail directory])
+            AC_RUN_IFELSE(
+                [AC_LANG_PROGRAM([[
+#include <stdio.h>
+#include <string.h>
+#ifdef HAVE_PATHS_H
+#include <paths.h>
+#endif
+#ifdef HAVE_MAILLOCK_H
+#include <maillock.h>
+#endif
+#define DATA "conftest.maildir"
+        ]], [[
+        FILE *fd;
+        int rc;
+        fd = fopen(DATA,"w");
+        if(fd == NULL)
+                exit(1);
+#if defined (_PATH_MAILDIR)
+        if ((rc = fprintf(fd ,"_PATH_MAILDIR:%s\n", _PATH_MAILDIR)) <0)
+                exit(1);
+#elif defined (MAILDIR)
+        if ((rc = fprintf(fd ,"MAILDIR:%s\n", MAILDIR)) <0)
+                exit(1);
+#elif defined (_PATH_MAIL)
+        if ((rc = fprintf(fd ,"_PATH_MAIL:%s\n", _PATH_MAIL)) <0)
+                exit(1);
+#else
+        exit (2);
+#endif
+        exit(0);
+                ]])],
+                [
+                    maildir_what=`awk -F: '{print $1}' conftest.maildir`
+                    maildir=`awk -F: '{print $2}' conftest.maildir \
+                        | sed 's|/$||'`
+                    AC_MSG_RESULT([Using: $maildir from $maildir_what])
+                    if test "x$maildir_what" != "x_PATH_MAILDIR"; then
+                        AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$maildir"])
+                    fi
+                ],
+                [
+                    if test "X$ac_status" = "X2";then
+# our test program didn't find it. Default to /var/spool/mail
+                        AC_MSG_RESULT([Using: default value of /var/spool/mail])
+                        AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["/var/spool/mail"])
+                     else
+                        AC_MSG_RESULT([*** not found ***])
+                     fi
+                ],
+                [
+                        AC_MSG_WARN([cross compiling: use --with-maildir=/path/to/mail])
+                ]
+            )
+        fi
+    ]
+) # maildir
 if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
        AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
@@ -3722,9 +3647,9 @@ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
 fi
 if test -z "$no_dev_ptmx" ; then
        if test "x$disable_ptmx_check" != "xyes" ; then
-                AC_CHECK_FILE("/dev/ptmx",
+                AC_CHECK_FILE(["/dev/ptmx"],
                        [
-                                AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX, 1,
+                                AC_DEFINE_UNQUOTED([HAVE_DEV_PTMX], [1],
                                        [Define if you have /dev/ptmx])
                                have_dev_ptmx=1
                        ]
@@ -3733,9 +3658,9 @@ if test -z "$no_dev_ptmx" ; then
 fi
 if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
-        AC_CHECK_FILE("/dev/ptc",
+        AC_CHECK_FILE(["/dev/ptc"],
                [
-                        AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC, 1,
+                        AC_DEFINE_UNQUOTED([HAVE_DEV_PTS_AND_PTC], [1],
                                [Define if you have /dev/ptc])
                        have_dev_ptc=1
                ]
@@ -3745,7 +3670,7 @@ else
 fi
 # Options from here on. Some of these are preset by platform above
-AC_ARG_WITH(mantype,
+AC_ARG_WITH([mantype],
        [  --with-mantype=man|cat|doc  Set man page type],
        [
                case "$withval" in
@@ -3753,14 +3678,14 @@ AC_ARG_WITH(mantype,
                        MANTYPE=$withval
                        ;;
                *)
-                        AC_MSG_ERROR(invalid man type: $withval)
+                        AC_MSG_ERROR([invalid man type: $withval])
                        ;;
                esac
        ]
 )
 if test -z "$MANTYPE"; then
        TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
-        AC_PATH_PROGS(NROFF, nroff awf, /bin/false, $TestPath)
+        AC_PATH_PROGS([NROFF], [nroff awf], [/bin/false], [$TestPath])
        if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
                MANTYPE=doc
        elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
@@ -3769,21 +3694,21 @@ if test -z "$MANTYPE"; then
                MANTYPE=cat
        fi
 fi
-AC_SUBST(MANTYPE)
+AC_SUBST([MANTYPE])
 if test "$MANTYPE" = "doc"; then
        mansubdir=man;
 else
        mansubdir=$MANTYPE;
 fi
-AC_SUBST(mansubdir)
+AC_SUBST([mansubdir])
 # Check whether to enable MD5 passwords
 MD5_MSG="no"
-AC_ARG_WITH(md5-passwords,
+AC_ARG_WITH([md5-passwords],
        [  --with-md5-passwords    Enable use of MD5 passwords],
        [
                if test "x$withval" != "xno" ; then
-                        AC_DEFINE(HAVE_MD5_PASSWORDS, 1,
+                        AC_DEFINE([HAVE_MD5_PASSWORDS], [1],
                                [Define if you want to allow MD5 passwords])
                        MD5_MSG="yes"
                fi
@@ -3791,11 +3716,11 @@ AC_ARG_WITH(md5-passwords,
 )
 # Whether to disable shadow password support
-AC_ARG_WITH(shadow,
+AC_ARG_WITH([shadow],
        [  --without-shadow        Disable shadow password support],
        [
                if test "x$withval" = "xno" ; then
-                        AC_DEFINE(DISABLE_SHADOW)
+                        AC_DEFINE([DISABLE_SHADOW])
                        disable_shadow=yes
                fi
        ]
@@ -3803,37 +3728,36 @@ AC_ARG_WITH(shadow,
 if test -z "$disable_shadow" ; then
        AC_MSG_CHECKING([if the systems has expire shadow information])
-        AC_TRY_COMPILE(
+        AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
-        [
 #include <sys/types.h>
 #include <shadow.h>
-        struct spwd sp;
+struct spwd sp;
-        ],[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ],
+                ]], [[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ]])],
-        [ sp_expire_available=yes ], []
+                [ sp_expire_available=yes ], [
-        )
+        ])
        if test "x$sp_expire_available" = "xyes" ; then
-                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
-                AC_DEFINE(HAS_SHADOW_EXPIRE, 1,
+                AC_DEFINE([HAS_SHADOW_EXPIRE], [1],
                    [Define if you want to use shadow password expire field])
        else
-                AC_MSG_RESULT(no)
+                AC_MSG_RESULT([no])
        fi
 fi
 # Use ip address instead of hostname in $DISPLAY
 if test ! -z "$IPADDR_IN_DISPLAY" ; then
        DISPLAY_HACK_MSG="yes"
-        AC_DEFINE(IPADDR_IN_DISPLAY, 1,
+        AC_DEFINE([IPADDR_IN_DISPLAY], [1],
                [Define if you need to use IP address
                instead of hostname in $DISPLAY])
 else
        DISPLAY_HACK_MSG="no"
-        AC_ARG_WITH(ipaddr-display,
+        AC_ARG_WITH([ipaddr-display],
                [  --with-ipaddr-display   Use ip address instead of hostname in \$DISPLAY],
                [
                        if test "x$withval" != "xno" ; then
-                                AC_DEFINE(IPADDR_IN_DISPLAY)
+                                AC_DEFINE([IPADDR_IN_DISPLAY])
                                DISPLAY_HACK_MSG="yes"
                        fi
                ]
@@ -3841,7 +3765,7 @@ else
 fi
 # check for /etc/default/login and use it if present.
-AC_ARG_ENABLE(etc-default-login,
+AC_ARG_ENABLE([etc-default-login],
        [  --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
        [ if test "x$enableval" = "xno"; then
                AC_MSG_NOTICE([/etc/default/login handling disabled])
@@ -3859,10 +3783,10 @@ AC_ARG_ENABLE(etc-default-login,
 )
 if test "x$etc_default_login" != "xno"; then
-        AC_CHECK_FILE("/etc/default/login",
+        AC_CHECK_FILE(["/etc/default/login"],
            [ external_path_file=/etc/default/login ])
        if test "x$external_path_file" = "x/etc/default/login"; then
-                AC_DEFINE(HAVE_ETC_DEFAULT_LOGIN, 1,
+                AC_DEFINE([HAVE_ETC_DEFAULT_LOGIN], [1],
                        [Define if your system has /etc/default/login])
        fi
 fi
@@ -3875,7 +3799,7 @@ fi
 # Whether to mess with the default path
 SERVER_PATH_MSG="(default)"
-AC_ARG_WITH(default-path,
+AC_ARG_WITH([default-path],
        [  --with-default-path=    Specify default \$PATH environment for server],
        [
                if test "x$external_path_file" = "x/etc/login.conf" ; then
@@ -3901,7 +3825,7 @@ If PATH is defined in $external_path_file, ensure the path to scp is included,
 otherwise scp will not work.])
                fi
                AC_RUN_IFELSE(
-                        [AC_LANG_SOURCE([[
+                        [AC_LANG_PROGRAM([[
 /* find out what STDPATH is */
 #include <stdio.h>
 #ifdef HAVE_PATHS_H
@@ -3918,9 +3842,7 @@ otherwise scp will not work.])
 #include <sys/stat.h>
 #include <fcntl.h>
 #define DATA "conftest.stdpath"
+                        ]], [[
-main()
-{
        FILE *fd;
        int rc;
@@ -3932,7 +3854,6 @@ main()
                exit(1);
        exit(0);
-}
                ]])],
                [ user_path=`cat conftest.stdpath` ],
                [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
@@ -3951,23 +3872,23 @@ main()
                        echo $user_path | grep "^$t_bindir"  > /dev/null 2>&1
                        if test $? -ne 0  ; then
                                user_path=$user_path:$t_bindir
-                                AC_MSG_RESULT(Adding $t_bindir to USER_PATH so scp will work)
+                                AC_MSG_RESULT([Adding $t_bindir to USER_PATH so scp will work])
                        fi
                fi
        fi ]
 )
 if test "x$external_path_file" != "x/etc/login.conf" ; then
-        AC_DEFINE_UNQUOTED(USER_PATH, "$user_path", [Specify default $PATH])
+        AC_DEFINE_UNQUOTED([USER_PATH], ["$user_path"], [Specify default $PATH])
-        AC_SUBST(user_path)
+        AC_SUBST([user_path])
 fi
 # Set superuser path separately to user path
-AC_ARG_WITH(superuser-path,
+AC_ARG_WITH([superuser-path],
        [  --with-superuser-path=  Specify different path for super-user],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
                    test "x${withval}" != "xyes"; then
-                        AC_DEFINE_UNQUOTED(SUPERUSER_PATH, "$withval",
+                        AC_DEFINE_UNQUOTED([SUPERUSER_PATH], ["$withval"],
                                [Define if you want a different $PATH
                                for the superuser])
                        superuser_path=$withval
@@ -3982,18 +3903,18 @@ AC_ARG_WITH(4in6,
        [  --with-4in6             Check for and convert IPv4 in IPv6 mapped addresses],
        [
                if test "x$withval" != "xno" ; then
-                        AC_MSG_RESULT(yes)
+                        AC_MSG_RESULT([yes])
-                        AC_DEFINE(IPV4_IN_IPV6, 1,
+                        AC_DEFINE([IPV4_IN_IPV6], [1],
                                [Detect IPv4 in IPv6 mapped addresses
                                and treat as IPv4])
                        IPV4_IN6_HACK_MSG="yes"
                else
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
                fi
-        ],[
+        ], [
                if test "x$inet6_default_4in6" = "xyes"; then
                        AC_MSG_RESULT([yes (default)])
-                        AC_DEFINE(IPV4_IN_IPV6)
+                        AC_DEFINE([IPV4_IN_IPV6])
                        IPV4_IN6_HACK_MSG="yes"
                else
                        AC_MSG_RESULT([no (default)])
@@ -4003,11 +3924,11 @@ AC_ARG_WITH(4in6,
 # Whether to enable BSD auth support
 BSD_AUTH_MSG=no
-AC_ARG_WITH(bsd-auth,
+AC_ARG_WITH([bsd-auth],
        [  --with-bsd-auth         Enable BSD auth support],
        [
                if test "x$withval" != "xno" ; then
-                        AC_DEFINE(BSD_AUTH, 1,
+                        AC_DEFINE([BSD_AUTH], [1],
                                [Define if you have BSD auth support])
                        BSD_AUTH_MSG=yes
                fi
@@ -4024,7 +3945,7 @@ if test ! -d $piddir ; then
        esac
 fi
-AC_ARG_WITH(pid-dir,
+AC_ARG_WITH([pid-dir],
        [  --with-pid-dir=PATH     Specify location of ssh.pid file],
        [
                if test -n "$withval"  &&  test "x$withval" != "xno"  &&  \
@@ -4037,85 +3958,86 @@ AC_ARG_WITH(pid-dir,
        ]
 )
-AC_DEFINE_UNQUOTED(_PATH_SSH_PIDDIR, "$piddir", [Specify location of ssh.pid])
+AC_DEFINE_UNQUOTED([_PATH_SSH_PIDDIR], ["$piddir"], 
-AC_SUBST(piddir)
+        [Specify location of ssh.pid])
+AC_SUBST([piddir])
 dnl allow user to disable some login recording features
-AC_ARG_ENABLE(lastlog,
+AC_ARG_ENABLE([lastlog],
        [  --disable-lastlog       disable use of lastlog even if detected [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_LASTLOG)
+                        AC_DEFINE([DISABLE_LASTLOG])
                fi
        ]
 )
-AC_ARG_ENABLE(utmp,
+AC_ARG_ENABLE([utmp],
        [  --disable-utmp          disable use of utmp even if detected [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_UTMP)
+                        AC_DEFINE([DISABLE_UTMP])
                fi
        ]
 )
-AC_ARG_ENABLE(utmpx,
+AC_ARG_ENABLE([utmpx],
        [  --disable-utmpx         disable use of utmpx even if detected [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_UTMPX, 1,
+                        AC_DEFINE([DISABLE_UTMPX], [1],
                                [Define if you don't want to use utmpx])
                fi
        ]
 )
-AC_ARG_ENABLE(wtmp,
+AC_ARG_ENABLE([wtmp],
        [  --disable-wtmp          disable use of wtmp even if detected [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_WTMP)
+                        AC_DEFINE([DISABLE_WTMP])
                fi
        ]
 )
-AC_ARG_ENABLE(wtmpx,
+AC_ARG_ENABLE([wtmpx],
        [  --disable-wtmpx         disable use of wtmpx even if detected [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_WTMPX, 1,
+                        AC_DEFINE([DISABLE_WTMPX], [1],
                                [Define if you don't want to use wtmpx])
                fi
        ]
 )
-AC_ARG_ENABLE(libutil,
+AC_ARG_ENABLE([libutil],
        [  --disable-libutil       disable use of libutil (login() etc.) [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_LOGIN)
+                        AC_DEFINE([DISABLE_LOGIN])
                fi
        ]
 )
-AC_ARG_ENABLE(pututline,
+AC_ARG_ENABLE([pututline],
        [  --disable-pututline     disable use of pututline() etc. ([uw]tmp) [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_PUTUTLINE, 1,
+                        AC_DEFINE([DISABLE_PUTUTLINE], [1],
                                [Define if you don't want to use pututline()
                                etc. to write [uw]tmp])
                fi
        ]
 )
-AC_ARG_ENABLE(pututxline,
+AC_ARG_ENABLE([pututxline],
        [  --disable-pututxline    disable use of pututxline() etc. ([uw]tmpx) [no]],
        [
                if test "x$enableval" = "xno" ; then
-                        AC_DEFINE(DISABLE_PUTUTXLINE, 1,
+                        AC_DEFINE([DISABLE_PUTUTXLINE], [1],
                                [Define if you don't want to use pututxline()
                                etc. to write [uw]tmpx])
                fi
        ]
 )
-AC_ARG_WITH(lastlog,
+AC_ARG_WITH([lastlog],
  [  --with-lastlog=FILE|DIR specify lastlog location [common locations]],
        [
                if test "x$withval" = "xno" ; then
-                        AC_DEFINE(DISABLE_LASTLOG)
+                        AC_DEFINE([DISABLE_LASTLOG])
                elif test -n "$withval"  &&  test "x${withval}" != "xyes"; then
                        conf_lastlog_location=$withval
                fi
@@ -4130,7 +4052,7 @@ dnl lastlog and [uw]tmp are subject to a file search if all else fails
 dnl lastlog detection
 dnl  NOTE: the code itself will detect if lastlog is a directory
 AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
-AC_TRY_COMPILE([
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <utmp.h>
 #ifdef HAVE_LASTLOG_H
@@ -4142,13 +4064,12 @@ AC_TRY_COMPILE([
 #ifdef HAVE_LOGIN_H
 # include <login.h>
 #endif
-        ],
+        ]], [[ char *lastlog = LASTLOG_FILE; ]])],
-        [ char *lastlog = LASTLOG_FILE; ],
+                [ AC_MSG_RESULT([yes]) ],
-        [ AC_MSG_RESULT(yes) ],
+                [
-        [
+                AC_MSG_RESULT([no])
-                AC_MSG_RESULT(no)
                AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
-                AC_TRY_COMPILE([
+                AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <utmp.h>
 #ifdef HAVE_LASTLOG_H
@@ -4157,15 +4078,13 @@ AC_TRY_COMPILE([
 #ifdef HAVE_PATHS_H
 #  include <paths.h>
 #endif
-                ],
+                ]], [[ char *lastlog = _PATH_LASTLOG; ]])],
-                [ char *lastlog = _PATH_LASTLOG; ],
+                [ AC_MSG_RESULT([yes]) ],
-                [ AC_MSG_RESULT(yes) ],
                [
-                        AC_MSG_RESULT(no)
+                        AC_MSG_RESULT([no])
                        system_lastlog_path=no
                ])
-        ]
+])
-)
 if test -z "$conf_lastlog_location"; then
        if test x"$system_lastlog_path" = x"no" ; then
@@ -4182,24 +4101,23 @@ if test -z "$conf_lastlog_location"; then
 fi
 if test -n "$conf_lastlog_location"; then
-        AC_DEFINE_UNQUOTED(CONF_LASTLOG_FILE, "$conf_lastlog_location",
+        AC_DEFINE_UNQUOTED([CONF_LASTLOG_FILE], ["$conf_lastlog_location"],
                [Define if you want to specify the path to your lastlog file])
 fi
 dnl utmp detection
 AC_MSG_CHECKING([if your system defines UTMP_FILE])
-AC_TRY_COMPILE([
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <utmp.h>
 #ifdef HAVE_PATHS_H
 #  include <paths.h>
 #endif
-        ],
+        ]], [[ char *utmp = UTMP_FILE; ]])],
-        [ char *utmp = UTMP_FILE; ],
+        [ AC_MSG_RESULT([yes]) ],
-        [ AC_MSG_RESULT(yes) ],
+        [ AC_MSG_RESULT([no])
-        [ AC_MSG_RESULT(no)
+          system_utmp_path=no 
-          system_utmp_path=no ]
+])
-)
 if test -z "$conf_utmp_location"; then
        if test x"$system_utmp_path" = x"no" ; then
                for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
@@ -4208,29 +4126,28 @@ if test -z "$conf_utmp_location"; then
                        fi
                done
                if test -z "$conf_utmp_location"; then
-                        AC_DEFINE(DISABLE_UTMP)
+                        AC_DEFINE([DISABLE_UTMP])
                fi
        fi
 fi
 if test -n "$conf_utmp_location"; then
-        AC_DEFINE_UNQUOTED(CONF_UTMP_FILE, "$conf_utmp_location",
+        AC_DEFINE_UNQUOTED([CONF_UTMP_FILE], ["$conf_utmp_location"],
                [Define if you want to specify the path to your utmp file])
 fi
 dnl wtmp detection
 AC_MSG_CHECKING([if your system defines WTMP_FILE])
-AC_TRY_COMPILE([
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <utmp.h>
 #ifdef HAVE_PATHS_H
 #  include <paths.h>
 #endif
-        ],
+        ]], [[ char *wtmp = WTMP_FILE; ]])],
-        [ char *wtmp = WTMP_FILE; ],
+        [ AC_MSG_RESULT([yes]) ],
-        [ AC_MSG_RESULT(yes) ],
+        [ AC_MSG_RESULT([no])
-        [ AC_MSG_RESULT(no)
+          system_wtmp_path=no 
-          system_wtmp_path=no ]
+])
-)
 if test -z "$conf_wtmp_location"; then
        if test x"$system_wtmp_path" = x"no" ; then
                for f in /usr/adm/wtmp /var/log/wtmp; do
@@ -4239,19 +4156,19 @@ if test -z "$conf_wtmp_location"; then
                        fi
                done
                if test -z "$conf_wtmp_location"; then
-                        AC_DEFINE(DISABLE_WTMP)
+                        AC_DEFINE([DISABLE_WTMP])
                fi
        fi
 fi
 if test -n "$conf_wtmp_location"; then
-        AC_DEFINE_UNQUOTED(CONF_WTMP_FILE, "$conf_wtmp_location",
+        AC_DEFINE_UNQUOTED([CONF_WTMP_FILE], ["$conf_wtmp_location"],
                [Define if you want to specify the path to your wtmp file])
 fi
 dnl wtmpx detection
 AC_MSG_CHECKING([if your system defines WTMPX_FILE])
-AC_TRY_COMPILE([
+AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 #include <sys/types.h>
 #include <utmp.h>
 #ifdef HAVE_UTMPX_H
@@ -4260,18 +4177,17 @@ AC_TRY_COMPILE([
 #ifdef HAVE_PATHS_H
 #  include <paths.h>
 #endif
-        ],
+        ]], [[ char *wtmpx = WTMPX_FILE; ]])],
-        [ char *wtmpx = WTMPX_FILE; ],
+        [ AC_MSG_RESULT([yes]) ],
-        [ AC_MSG_RESULT(yes) ],
+        [ AC_MSG_RESULT([no])
-        [ AC_MSG_RESULT(no)
+          system_wtmpx_path=no 
-          system_wtmpx_path=no ]
+])
-)
 if test -z "$conf_wtmpx_location"; then
        if test x"$system_wtmpx_path" = x"no" ; then
-                AC_DEFINE(DISABLE_WTMPX)
+                AC_DEFINE([DISABLE_WTMPX])
        fi
 else
-        AC_DEFINE_UNQUOTED(CONF_WTMPX_FILE, "$conf_wtmpx_location",
+        AC_DEFINE_UNQUOTED([CONF_WTMPX_FILE], ["$conf_wtmpx_location"],
                [Define if you want to specify the path to your wtmpx file])
 fi
@@ -4290,13 +4206,13 @@ if test "x$ac_cv_func_getaddrinfo" != "xyes" ; then
 else
        TEST_SSH_IPV6=yes
 fi
-AC_CHECK_DECL(BROKEN_GETADDRINFO,  TEST_SSH_IPV6=no)
+AC_CHECK_DECL([BROKEN_GETADDRINFO],  [TEST_SSH_IPV6=no])
-AC_SUBST(TEST_SSH_IPV6, $TEST_SSH_IPV6)
+AC_SUBST([TEST_SSH_IPV6], [$TEST_SSH_IPV6])
 AC_EXEEXT
 AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
        openbsd-compat/Makefile openbsd-compat/regress/Makefile \
-        ssh_prng_cmds survey.sh])
+        survey.sh])
 AC_OUTPUT
 # Print summary of options
@@ -4351,9 +4267,7 @@ echo "       IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
 echo "           Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
 echo "                  BSD Auth support: $BSD_AUTH_MSG"
 echo "              Random number source: $RAND_MSG"
-if test ! -z "$USE_RAND_HELPER" ; then
+echo "             Privsep sandbox style: $SANDBOX_STYLE"
-echo "     ssh-rand-helper collects from: $RAND_HELPER_MSG"
-fi
 echo ""
@@ -4385,14 +4299,6 @@ if test "x$PAM_MSG" = "xyes" ; then
        echo ""
 fi
-if test ! -z "$RAND_HELPER_CMDHASH" ; then
-        echo "WARNING: you are using the builtin random number collection "
-        echo "service. Please read WARNING.RNG and request that your OS "
-        echo "vendor includes kernel-based random number collection in "
-        echo "future versions of your OS."
-        echo ""
-fi
 if test ! -z "$NO_PEERCHECK" ; then
        echo "WARNING: the operating system that you are using does not"
        echo "appear to support getpeereid(), getpeerucred() or the"
diff --git a/contrib/aix/buildbff.sh b/contrib/aix/buildbff.sh
index ca4bf0210..81d8cc301 100755
--- a/contrib/aix/buildbff.sh
+++ b/contrib/aix/buildbff.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 #
 # buildbff.sh: Create AIX SMIT-installable OpenSSH packages
-# $Id: buildbff.sh,v 1.12 2010/04/18 03:35:00 dtucker Exp $
+# $Id: buildbff.sh,v 1.13 2011/05/05 03:48:41 djm Exp $
 #
 # Author: Darren Tucker (dtucker at zip dot com dot au)
 # This file is placed in the public domain and comes with absolutely
@@ -156,13 +156,6 @@ do
        mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default
 done
-# AIX 5.3 and newer have /dev/random and don't create ssh_prng_cmds
-if [ -f $FAKE_ROOT/$sysconfdir/ssh_prng_cmds ]
-then
-        mv $FAKE_ROOT/$sysconfdir/ssh_prng_cmds \
-                $FAKE_ROOT/$sysconfdir/ssh_prng_cmds.default
-fi
 #
 # Generate lpp control files.
 #       working dir is $FAKE_ROOT but files are generated in dir above
@@ -197,7 +190,7 @@ cat <<EOF >>../openssh.post_i
 #!/bin/sh
 echo Creating configs from defaults if necessary.
-for cfgfile in ssh_config sshd_config ssh_prng_cmds
+for cfgfile in ssh_config sshd_config
 do
        if [ ! -f $sysconfdir/\$cfgfile ]
        then
diff --git a/contrib/caldera/openssh.spec b/contrib/caldera/openssh.spec
index 435003a2a..73d441d0c 100644
--- a/contrib/caldera/openssh.spec
+++ b/contrib/caldera/openssh.spec
@@ -16,7 +16,7 @@
 #old cvs stuff.  please update before use.  may be deprecated.
 %define use_stable      1
-%define version         5.8p1
+%define version         5.9p1
 %if %{use_stable}
  %define cvs           %{nil}
  %define release       1
@@ -363,4 +363,4 @@ fi
 * Mon Jan 01 1998 ...
 Template Version: 1.31
-$Id: openssh.spec,v 1.73.4.1 2011/02/04 00:57:54 djm Exp $
+$Id: openssh.spec,v 1.75.2.1 2011/09/05 00:28:11 djm Exp $
diff --git a/contrib/cygwin/ssh-host-config b/contrib/cygwin/ssh-host-config
index d968d4619..3ac39a621 100644
--- a/contrib/cygwin/ssh-host-config
+++ b/contrib/cygwin/ssh-host-config
@@ -1,6 +1,6 @@
 #!/bin/bash
 #
-# ssh-host-config, Copyright 2000-2009 Red Hat Inc.
+# ssh-host-config, Copyright 2000-2011 Red Hat Inc.
 #
 # This file is part of the Cygwin port of OpenSSH.
 #
@@ -19,12 +19,39 @@
 # ======================================================================
 # Initialization
 # ======================================================================
-PROGNAME=$(basename $0)
-_tdir=$(dirname $0)
-PROGDIR=$(cd $_tdir && pwd)
 CSIH_SCRIPT=/usr/share/csih/cygwin-service-installation-helper.sh
+# List of apps used.  This is checkad for existance in csih_sanity_check
+# Don't use *any* transient commands before sourcing the csih helper script,
+# otherwise the sanity checks are short-circuited.
+declare -a csih_required_commands=(
+  /usr/bin/basename coreutils
+  /usr/bin/cat coreutils
+  /usr/bin/chmod coreutils
+  /usr/bin/dirname coreutils
+  /usr/bin/id coreutils
+  /usr/bin/mv coreutils
+  /usr/bin/rm coreutils
+  /usr/bin/cygpath cygwin
+  /usr/bin/mount cygwin
+  /usr/bin/ps cygwin
+  /usr/bin/setfacl cygwin
+  /usr/bin/umount cygwin
+  /usr/bin/cmp diffutils
+  /usr/bin/grep grep
+  /usr/bin/awk gawk
+  /usr/bin/ssh-keygen openssh
+  /usr/sbin/sshd openssh
+  /usr/bin/sed sed
+)
+csih_sanity_check_server=yes
+source ${CSIH_SCRIPT}
+PROGNAME=$(/usr/bin/basename $0)
+_tdir=$(/usr/bin/dirname $0)
+PROGDIR=$(cd $_tdir && pwd)
 # Subdirectory where the new package is being installed
 PREFIX=/usr
@@ -32,8 +59,6 @@ PREFIX=/usr
 SYSCONFDIR=/etc
 LOCALSTATEDIR=/var
-source ${CSIH_SCRIPT}
 port_number=22
 privsep_configured=no
 privsep_used=yes
@@ -46,23 +71,48 @@ opt_force=no
 # Routine: create_host_keys
 # ======================================================================
 create_host_keys() {
+  local ret=0
  if [ ! -f "${SYSCONFDIR}/ssh_host_key" ]
  then
    csih_inform "Generating ${SYSCONFDIR}/ssh_host_key"
-    ssh-keygen -t rsa1 -f ${SYSCONFDIR}/ssh_host_key -N '' > /dev/null
+    if ! /usr/bin/ssh-keygen -t rsa1 -f ${SYSCONFDIR}/ssh_host_key -N '' > /dev/null
+    then
+        csih_warning "Generating ${SYSCONFDIR}/ssh_host_key failed!"
+        let ++ret
+    fi
  fi
  if [ ! -f "${SYSCONFDIR}/ssh_host_rsa_key" ]
  then
    csih_inform "Generating ${SYSCONFDIR}/ssh_host_rsa_key"
-    ssh-keygen -t rsa -f ${SYSCONFDIR}/ssh_host_rsa_key -N '' > /dev/null
+    if ! /usr/bin/ssh-keygen -t rsa -f ${SYSCONFDIR}/ssh_host_rsa_key -N '' > /dev/null
+    then
+        csih_warning "Generating ${SYSCONFDIR}/ssh_host_key failed!"
+        let ++ret
+    fi
  fi
  if [ ! -f "${SYSCONFDIR}/ssh_host_dsa_key" ]
  then
    csih_inform "Generating ${SYSCONFDIR}/ssh_host_dsa_key"
-    ssh-keygen -t dsa -f ${SYSCONFDIR}/ssh_host_dsa_key -N '' > /dev/null
+    if ! /usr/bin/ssh-keygen -t dsa -f ${SYSCONFDIR}/ssh_host_dsa_key -N '' > /dev/null
+    then
+        csih_warning "Generating ${SYSCONFDIR}/ssh_host_key failed!"
+        let ++ret
+    fi
  fi
+  if [ ! -f "${SYSCONFDIR}/ssh_host_ecdsa_key" ]
+  then
+    csih_inform "Generating ${SYSCONFDIR}/ssh_host_ecdsa_key"
+    if ! /usr/bin/ssh-keygen -t ecdsa -f ${SYSCONFDIR}/ssh_host_ecdsa_key -N '' > /dev/null
+    then
+        csih_warning "Generating ${SYSCONFDIR}/ssh_host_key failed!"
+        let ++ret
+    fi
+  fi
+  return $ret
 } # --- End of create_host_keys --- #
 # ======================================================================
@@ -75,61 +125,58 @@ update_services_file() {
  local _spaces
  local _serv_tmp
  local _wservices
+  local ret=0
-  if csih_is_nt
+  _win_etcdir="${SYSTEMROOT}\\system32\\drivers\\etc"
-  then
+  _services="${_my_etcdir}/services"
-    _win_etcdir="${SYSTEMROOT}\\system32\\drivers\\etc"
+  _spaces="                           #"
-    _services="${_my_etcdir}/services"
-    # On NT, 27 spaces, no space after the hash
-    _spaces="                           #"
-  else
-    _win_etcdir="${WINDIR}"
-    _services="${_my_etcdir}/SERVICES"
-    # On 9x, 18 spaces (95 is very touchy), a space after the hash
-    _spaces="                  # "
-  fi
  _serv_tmp="${_my_etcdir}/srv.out.$$"
-  mount -o text,posix=0,noacl -f "${_win_etcdir}" "${_my_etcdir}"
+  /usr/bin/mount -o text,posix=0,noacl -f "${_win_etcdir}" "${_my_etcdir}"
  # Depends on the above mount
  _wservices=`cygpath -w "${_services}"`
  # Remove sshd 22/port from services
-  if [ `grep -q 'sshd[ \t][ \t]*22' "${_services}"; echo $?` -eq 0 ]
+  if [ `/usr/bin/grep -q 'sshd[ \t][ \t]*22' "${_services}"; echo $?` -eq 0 ]
  then
-    grep -v 'sshd[ \t][ \t]*22' "${_services}" > "${_serv_tmp}"
+    /usr/bin/grep -v 'sshd[ \t][ \t]*22' "${_services}" > "${_serv_tmp}"
    if [ -f "${_serv_tmp}" ]
    then
-      if mv "${_serv_tmp}" "${_services}"
+      if /usr/bin/mv "${_serv_tmp}" "${_services}"
      then
        csih_inform "Removing sshd from ${_wservices}"
      else
        csih_warning "Removing sshd from ${_wservices} failed!"
+        let ++ret
      fi
-      rm -f "${_serv_tmp}"
+      /usr/bin/rm -f "${_serv_tmp}"
    else
      csih_warning "Removing sshd from ${_wservices} failed!"
+      let ++ret
    fi
  fi
  # Add ssh 22/tcp  and ssh 22/udp to services
-  if [ `grep -q 'ssh[ \t][ \t]*22' "${_services}"; echo $?` -ne 0 ]
+  if [ `/usr/bin/grep -q 'ssh[ \t][ \t]*22' "${_services}"; echo $?` -ne 0 ]
  then
-    if awk '{ if ( $2 ~ /^23\/tcp/ ) print "ssh                22/tcp'"${_spaces}"'SSH Remote Login Protocol\nssh                22/udp'"${_spaces}"'SSH Remote Login Protocol"; print $0; }' < "${_services}" > "${_serv_tmp}"
+    if /usr/bin/awk '{ if ( $2 ~ /^23\/tcp/ ) print "ssh                22/tcp'"${_spaces}"'SSH Remote Login Protocol\nssh                22/udp'"${_spaces}"'SSH Remote Login Protocol"; print $0; }' < "${_services}" > "${_serv_tmp}"
    then
-      if mv "${_serv_tmp}" "${_services}"
+      if /usr/bin/mv "${_serv_tmp}" "${_services}"
      then
        csih_inform "Added ssh to ${_wservices}"
      else
        csih_warning "Adding ssh to ${_wservices} failed!"
+        let ++ret
      fi
-      rm -f "${_serv_tmp}"
+      /usr/bin/rm -f "${_serv_tmp}"
    else
      csih_warning "Adding ssh to ${_wservices} failed!"
+      let ++ret
    fi
  fi
-  umount "${_my_etcdir}"
+  /usr/bin/umount "${_my_etcdir}"
+  return $ret
 } # --- End of update_services_file --- #
 # ======================================================================
@@ -138,51 +185,57 @@ update_services_file() {
 # ======================================================================
 sshd_privsep() {
  local sshdconfig_tmp
+  local ret=0
  if [ "${privsep_configured}" != "yes" ]
  then
-    if csih_is_nt
+    csih_inform "Privilege separation is set to yes by default since OpenSSH 3.3."
+    csih_inform "However, this requires a non-privileged account called 'sshd'."
+    csih_inform "For more info on privilege separation read /usr/share/doc/openssh/README.privsep."
+    if csih_request "Should privilege separation be used?"
    then
-      csih_inform "Privilege separation is set to yes by default since OpenSSH 3.3."
+      privsep_used=yes
-      csih_inform "However, this requires a non-privileged account called 'sshd'."
+      if ! csih_create_unprivileged_user sshd
-      csih_inform "For more info on privilege separation read /usr/share/doc/openssh/README.privsep."
-      if csih_request "Should privilege separation be used?"
      then
-        privsep_used=yes
+        csih_error_recoverable "Couldn't create user 'sshd'!"
-        if ! csih_create_unprivileged_user sshd
+        csih_error_recoverable "Privilege separation set to 'no' again!"
-        then
+        csih_error_recoverable "Check your ${SYSCONFDIR}/sshd_config file!"
-          csih_warning "Couldn't create user 'sshd'!"
+        let ++ret
-          csih_warning "Privilege separation set to 'no' again!"
-          csih_warning "Check your ${SYSCONFDIR}/sshd_config file!"
-          privsep_used=no
-        fi
-      else
        privsep_used=no
      fi
    else
-      # On 9x don't use privilege separation.  Since security isn't
-      # available it just adds useless additional processes.
      privsep_used=no
    fi
  fi
  # Create default sshd_config from skeleton files in /etc/defaults/etc or
  # modify to add the missing privsep configuration option
-  if cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1
+  if /usr/bin/cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1
  then
    csih_inform "Updating ${SYSCONFDIR}/sshd_config file"
    sshdconfig_tmp=${SYSCONFDIR}/sshd_config.$$
-    sed -e "s/^#UsePrivilegeSeparation yes/UsePrivilegeSeparation ${privsep_used}/
+    /usr/bin/sed -e "s/^#UsePrivilegeSeparation yes/UsePrivilegeSeparation ${privsep_used}/
          s/^#Port 22/Port ${port_number}/
          s/^#StrictModes yes/StrictModes no/" \
        < ${SYSCONFDIR}/sshd_config \
        > "${sshdconfig_tmp}"
-    mv "${sshdconfig_tmp}" ${SYSCONFDIR}/sshd_config
+    if ! /usr/bin/mv "${sshdconfig_tmp}" ${SYSCONFDIR}/sshd_config
+    then
+        csih_warning "Setting privilege separation to 'yes' failed!"
+        csih_warning "Check your ${SYSCONFDIR}/sshd_config file!"
+        let ++ret
+    fi
  elif [ "${privsep_configured}" != "yes" ]
  then
    echo >> ${SYSCONFDIR}/sshd_config
-    echo "UsePrivilegeSeparation ${privsep_used}" >> ${SYSCONFDIR}/sshd_config
+    if ! echo "UsePrivilegeSeparation ${privsep_used}" >> ${SYSCONFDIR}/sshd_config
+    then
+        csih_warning "Setting privilege separation to 'yes' failed!"
+        csih_warning "Check your ${SYSCONFDIR}/sshd_config file!"
+        let ++ret
+    fi
  fi
+  return $ret
 } # --- End of sshd_privsep --- #
 # ======================================================================
@@ -195,72 +248,82 @@ update_inetd_conf() {
  local _sshd_inetd_conf="${_inetcnf_dir}/sshd-inetd"
  local _sshd_inetd_conf_tmp="${_inetcnf_dir}/sshd-inetd.$$"
  local _with_comment=1
+  local ret=0
  if [ -d "${_inetcnf_dir}" ]
  then
    # we have inetutils-1.5 inetd.d support
    if [ -f "${_inetcnf}" ]
    then
-      grep -q '^[ \t]*ssh' "${_inetcnf}" && _with_comment=0
+      /usr/bin/grep -q '^[ \t]*ssh' "${_inetcnf}" && _with_comment=0
      # check for sshd OR ssh in top-level inetd.conf file, and remove
      # will be replaced by a file in inetd.d/
-      if [ `grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -eq 0 ]
+      if [ `/usr/bin/grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -eq 0 ]
      then
-        grep -v '^[# \t]*ssh' "${_inetcnf}" >> "${_inetcnf_tmp}"
+        /usr/bin/grep -v '^[# \t]*ssh' "${_inetcnf}" >> "${_inetcnf_tmp}"
        if [ -f "${_inetcnf_tmp}" ]
        then
-          if mv "${_inetcnf_tmp}" "${_inetcnf}"
+          if /usr/bin/mv "${_inetcnf_tmp}" "${_inetcnf}"
          then
            csih_inform "Removed ssh[d] from ${_inetcnf}"
          else
            csih_warning "Removing ssh[d] from ${_inetcnf} failed!"
+            let ++ret
          fi
-          rm -f "${_inetcnf_tmp}"
+          /usr/bin/rm -f "${_inetcnf_tmp}"
        else
          csih_warning "Removing ssh[d] from ${_inetcnf} failed!"
+          let ++ret
        fi
      fi
    fi
    csih_install_config "${_sshd_inetd_conf}"   "${SYSCONFDIR}/defaults"
-    if cmp "${SYSCONFDIR}/defaults${_sshd_inetd_conf}" "${_sshd_inetd_conf}" >/dev/null 2>&1
+    if /usr/bin/cmp "${SYSCONFDIR}/defaults${_sshd_inetd_conf}" "${_sshd_inetd_conf}" >/dev/null 2>&1
    then
      if [ "${_with_comment}" -eq 0 ]
      then
-        sed -e 's/@COMMENT@[ \t]*//' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}"
+        /usr/bin/sed -e 's/@COMMENT@[ \t]*//' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}"
      else
-        sed -e 's/@COMMENT@[ \t]*/# /' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}"
+        /usr/bin/sed -e 's/@COMMENT@[ \t]*/# /' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}"
+      fi
+      if /usr/bin/mv "${_sshd_inetd_conf_tmp}" "${_sshd_inetd_conf}"
+      then
+        csih_inform "Updated ${_sshd_inetd_conf}"
+      else
+        csih_warning "Updating ${_sshd_inetd_conf} failed!"
+        let ++ret
      fi
-      mv "${_sshd_inetd_conf_tmp}" "${_sshd_inetd_conf}"
-      csih_inform "Updated ${_sshd_inetd_conf}"
    fi
  elif [ -f "${_inetcnf}" ]
  then
-    grep -q '^[ \t]*sshd' "${_inetcnf}" && _with_comment=0
+    /usr/bin/grep -q '^[ \t]*sshd' "${_inetcnf}" && _with_comment=0
    # check for sshd in top-level inetd.conf file, and remove
    # will be replaced by a file in inetd.d/
-    if [ `grep -q '^[# \t]*sshd' "${_inetcnf}"; echo $?` -eq 0 ]
+    if [ `/usr/bin/grep -q '^[# \t]*sshd' "${_inetcnf}"; echo $?` -eq 0 ]
    then
-      grep -v '^[# \t]*sshd' "${_inetcnf}" >> "${_inetcnf_tmp}"
+      /usr/bin/grep -v '^[# \t]*sshd' "${_inetcnf}" >> "${_inetcnf_tmp}"
      if [ -f "${_inetcnf_tmp}" ]
      then
-        if mv "${_inetcnf_tmp}" "${_inetcnf}"
+        if /usr/bin/mv "${_inetcnf_tmp}" "${_inetcnf}"
        then
            csih_inform "Removed sshd from ${_inetcnf}"
        else
            csih_warning "Removing sshd from ${_inetcnf} failed!"
+            let ++ret
        fi
-        rm -f "${_inetcnf_tmp}"
+        /usr/bin/rm -f "${_inetcnf_tmp}"
      else
        csih_warning "Removing sshd from ${_inetcnf} failed!"
+        let ++ret
      fi
    fi
    # Add ssh line to inetd.conf
-    if [ `grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -ne 0 ]
+    if [ `/usr/bin/grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -ne 0 ]
    then
      if [ "${_with_comment}" -eq 0 ]
      then
@@ -268,115 +331,186 @@ update_inetd_conf() {
      else
        echo '# ssh  stream  tcp     nowait  root    /usr/sbin/sshd sshd -i' >> "${_inetcnf}"
      fi
-      csih_inform "Added ssh to ${_inetcnf}"
+      if [ $? -eq 0 ]
+      then
+        csih_inform "Added ssh to ${_inetcnf}"
+      else
+        csih_warning "Adding ssh to ${_inetcnf} failed!"
+        let ++ret
+      fi
    fi
  fi
+  return $ret
 } # --- End of update_inetd_conf --- #
 # ======================================================================
+# Routine: check_service_files_ownership
+#   Checks that the files in /etc and /var belong to the right owner
+# ======================================================================
+check_service_files_ownership() {
+  local run_service_as=$1
+  local ret=0
+  if [ -z "${run_service_as}" ]
+  then
+    accnt_name=$(/usr/bin/cygrunsrv -VQ sshd | /usr/bin/sed -ne 's/^Account *: *//gp')
+    if [ "${accnt_name}" = "LocalSystem" ]
+    then
+      # Convert "LocalSystem" to "SYSTEM" as is the correct account name
+      accnt_name="SYSTEM:"
+    elif [[ "${accnt_name}" =~ ^\.\\ ]]
+    then
+      # Convert "." domain to local machine name
+      accnt_name="U-${COMPUTERNAME}${accnt_name#.},"
+    fi
+    run_service_as=$(/usr/bin/grep -Fi "${accnt_name}" /etc/passwd | /usr/bin/awk -F: '{print $1;}')
+    if [ -z "${run_service_as}" ]
+    then
+      csih_warning "Couldn't determine name of user running sshd service from /etc/passwd!"
+      csih_warning "As a result, this script cannot make sure that the files used"
+      csih_warning "by the sshd service belong to the user running the service."
+      csih_warning "Please re-run the mkpasswd tool to make sure the /etc/passwd"
+      csih_warning "file is in a good shape."
+      return 1
+    fi
+  fi
+  for i in "${SYSCONFDIR}"/ssh_config "${SYSCONFDIR}"/sshd_config "${SYSCONFDIR}"/ssh_host_*key "${SYSCONFDIR}"/ssh_host_*key.pub
+  do
+    if [ -f "$i" ]
+    then
+      if ! chown "${run_service_as}".544 "$i" >/dev/null 2>&1
+      then
+        csih_warning "Couldn't change owner of $i!"
+        let ++ret
+      fi
+    fi
+  done
+  if ! chown "${run_service_as}".544 ${LOCALSTATEDIR}/empty >/dev/null 2>&1
+  then
+    csih_warning "Couldn't change owner of ${LOCALSTATEDIR}/empty!"
+    let ++ret
+  fi
+  if ! chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/lastlog >/dev/null 2>&1
+  then
+    csih_warning "Couldn't change owner of ${LOCALSTATEDIR}/log/lastlog!"
+    let ++ret
+  fi
+  if [ -f ${LOCALSTATEDIR}/log/sshd.log ]
+  then
+    if ! chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/sshd.log >/dev/null 2>&1
+    then
+      csih_warning "Couldn't change owner of ${LOCALSTATEDIR}/log/sshd.log!"
+      let ++ret
+    fi
+  fi
+  if [ $ret -ne 0 ]
+  then
+    csih_warning "Couldn't change owner of important files to ${run_service_as}!"
+    csih_warning "This may cause the sshd service to fail!  Please make sure that"
+    csih_warning "you have suufficient permissions to change the ownership of files"
+    csih_warning "and try to run the ssh-host-config script again."
+  fi
+  return $ret
+} # --- End of check_service_files_ownership --- #
+# ======================================================================
 # Routine: install_service
 #   Install sshd as a service
 # ======================================================================
 install_service() {
  local run_service_as
  local password
+  local ret=0
-  if csih_is_nt
+  echo
+  if /usr/bin/cygrunsrv -Q sshd >/dev/null 2>&1
  then
-    if ! cygrunsrv -Q sshd >/dev/null 2>&1
+    csih_inform "Sshd service is already installed."
+    check_service_files_ownership "" || let ret+=$?
+  else
+    echo -e "${_csih_QUERY_STR} Do you want to install sshd as a service?"
+    if csih_request "(Say \"no\" if it is already installed as a service)"
    then
-      echo
+      csih_get_cygenv "${cygwin_value}"
-      echo
-      csih_warning "The following functions require administrator privileges!"
-      echo
-      echo -e "${_csih_QUERY_STR} Do you want to install sshd as a service?"
-      if csih_request "(Say \"no\" if it is already installed as a service)"
-      then
-        csih_get_cygenv "${cygwin_value}"
-        if ( csih_is_nt2003 || [ "$csih_FORCE_PRIVILEGED_USER" = "yes" ] )
+      if ( csih_is_nt2003 || [ "$csih_FORCE_PRIVILEGED_USER" = "yes" ] )
-        then
+      then
-          csih_inform "On Windows Server 2003, Windows Vista, and above, the"
+        csih_inform "On Windows Server 2003, Windows Vista, and above, the"
-          csih_inform "SYSTEM account cannot setuid to other users -- a capability"
+        csih_inform "SYSTEM account cannot setuid to other users -- a capability"
-          csih_inform "sshd requires.  You need to have or to create a privileged"
+        csih_inform "sshd requires.  You need to have or to create a privileged"
-          csih_inform "account.  This script will help you do so."
+        csih_inform "account.  This script will help you do so."
-          echo
+        echo
-          [ "${opt_force}" = "yes" ] && opt_f=-f
+        [ "${opt_force}" = "yes" ] && opt_f=-f
-          [ -n "${user_account}" ] && opt_u="-u ""${user_account}"""
+        [ -n "${user_account}" ] && opt_u="-u ""${user_account}"""
-          csih_select_privileged_username ${opt_f} ${opt_u} sshd
+        csih_select_privileged_username ${opt_f} ${opt_u} sshd
-          if ! csih_create_privileged_user "${password_value}"
+        if ! csih_create_privileged_user "${password_value}"
-          then
+        then
-            csih_error_recoverable "There was a serious problem creating a privileged user."
+          csih_error_recoverable "There was a serious problem creating a privileged user."
-            csih_request "Do you want to proceed anyway?" || exit 1
+          csih_request "Do you want to proceed anyway?" || exit 1
-          fi
+          let ++ret
        fi
+      fi
-        # never returns empty if NT or above
+      # Never returns empty if NT or above
-        run_service_as=$(csih_service_should_run_as)
+      run_service_as=$(csih_service_should_run_as)
-        if [ "${run_service_as}" = "${csih_PRIVILEGED_USERNAME}" ]
+      if [ "${run_service_as}" = "${csih_PRIVILEGED_USERNAME}" ]
+      then
+        password="${csih_PRIVILEGED_PASSWORD}"
+        if [ -z "${password}" ]
        then
-          password="${csih_PRIVILEGED_PASSWORD}"
+          csih_get_value "Please enter the password for user '${run_service_as}':" "-s"
-          if [ -z "${password}" ]
+          password="${csih_value}"
-          then
-            csih_get_value "Please enter the password for user '${run_service_as}':" "-s"
-            password="${csih_value}"
-          fi
        fi
+      fi
-        # at this point, we either have $run_service_as = "system" and $password is empty,
+      # At this point, we either have $run_service_as = "system" and
-        # or $run_service_as is some privileged user and (hopefully) $password contains
+      # $password is empty, or $run_service_as is some privileged user and
-        # the correct password.  So, from here out, we use '-z "${password}"' to discriminate
+      # (hopefully) $password contains the correct password.  So, from here
-        # the two cases.
+      # out, we use '-z "${password}"' to discriminate the two cases.
-        csih_check_user "${run_service_as}"
+      csih_check_user "${run_service_as}"
-        if [ -n "${csih_cygenv}" ]
+      if [ -n "${csih_cygenv}" ]
+      then
+        cygwin_env=( -e "CYGWIN=${csih_cygenv}" )
+      fi
+      if [ -z "${password}" ]
+      then
+        if /usr/bin/cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd \
+                              -a "-D" -y tcpip "${cygwin_env[@]}"
        then
-          cygwin_env=( -e "CYGWIN=${csih_cygenv}" )
+          echo
+          csih_inform "The sshd service has been installed under the LocalSystem"
+          csih_inform "account (also known as SYSTEM). To start the service now, call"
+          csih_inform "\`net start sshd' or \`cygrunsrv -S sshd'.  Otherwise, it"
+          csih_inform "will start automatically after the next reboot."
        fi
-        if [ -z "${password}" ]
+      else
+        if /usr/bin/cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd \
+                              -a "-D" -y tcpip "${cygwin_env[@]}" \
+                              -u "${run_service_as}" -w "${password}"
        then
-          if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd \
+          echo
-                            -a "-D" -y tcpip "${cygwin_env[@]}"
+          csih_inform "The sshd service has been installed under the '${run_service_as}'"
-          then
+          csih_inform "account.  To start the service now, call \`net start sshd' or"
-            echo
+          csih_inform "\`cygrunsrv -S sshd'.  Otherwise, it will start automatically"
-            csih_inform "The sshd service has been installed under the LocalSystem"
+          csih_inform "after the next reboot."
-            csih_inform "account (also known as SYSTEM). To start the service now, call"
-            csih_inform "\`net start sshd' or \`cygrunsrv -S sshd'.  Otherwise, it"
-            csih_inform "will start automatically after the next reboot."
-          fi
-        else
-          if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd \
-                            -a "-D" -y tcpip "${cygwin_env[@]}" \
-                            -u "${run_service_as}" -w "${password}"
-          then
-            echo
-            csih_inform "The sshd service has been installed under the '${run_service_as}'"
-            csih_inform "account.  To start the service now, call \`net start sshd' or"
-            csih_inform "\`cygrunsrv -S sshd'.  Otherwise, it will start automatically"
-            csih_inform "after the next reboot."
-          fi
        fi
+      fi
-        # now, if successfully installed, set ownership of the affected files
+      if /usr/bin/cygrunsrv -Q sshd >/dev/null 2>&1
-        if cygrunsrv -Q sshd >/dev/null 2>&1
+      then
-        then
+        check_service_files_ownership "${run_service_as}" || let ret+=$?
-          chown "${run_service_as}" ${SYSCONFDIR}/ssh*
+      else
-          chown "${run_service_as}".544 ${LOCALSTATEDIR}/empty
+        csih_error_recoverable "Installing sshd as a service failed!"
-          chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/lastlog
+        let ++ret
-          if [ -f ${LOCALSTATEDIR}/log/sshd.log ]
+      fi
-          then
+    fi # user allowed us to install as service
-            chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/sshd.log
+  fi # service not yet installed
-          fi
+  return $ret
-        else
-          csih_warning "Something went wrong installing the sshd service."
-        fi
-      fi # user allowed us to install as service
-    fi # service not yet installed
-  fi # csih_is_nt
 } # --- End of install_service --- #
 # ======================================================================
@@ -488,21 +622,71 @@ done
 # Check for running ssh/sshd processes first. Refuse to do anything while
 # some ssh processes are still running
-if ps -ef | grep -q '/sshd\?$'
+if /usr/bin/ps -ef | /usr/bin/grep -q '/sshd\?$'
 then
  echo
  csih_error "There are still ssh processes running. Please shut them down first."
 fi
+# Make sure the user is running in an administrative context
+admin=$(/usr/bin/id -G | /usr/bin/grep -Eq '\<544\>' && echo yes || echo no)
+if [ "${admin}" != "yes" ]
+then
+  echo
+  csih_warning "Running this script typically requires administrator privileges!"
+  csih_warning "However, it seems your account does not have these privileges."
+  csih_warning "Here's the list of groups in your user token:"
+  echo
+  for i in $(/usr/bin/id -G)
+  do
+    /usr/bin/awk -F: "/[^:]*:[^:]*:$i:/{ print \"    \" \$1; }" /etc/group
+  done
+  echo
+  csih_warning "This usually means you're running this script from a non-admin"
+  csih_warning "desktop session, or in a non-elevated shell under UAC control."
+  echo
+  csih_warning "Make sure you have the appropriate privileges right now,"
+  csih_warning "otherwise parts of this script will probably fail!"
+  echo
+  echo -e "${_csih_QUERY_STR} Are you sure you want to continue?  (Say \"no\" if you're not sure"
+  if ! csih_request "you have the required privileges)"
+  then
+    echo
+    csih_inform "Ok.  Exiting.  Make sure to switch to an administrative account"
+    csih_inform "or to start this script from an elevated shell."
+    exit 1
+  fi
+fi
+echo
+warning_cnt=0
 # Check for ${SYSCONFDIR} directory
 csih_make_dir "${SYSCONFDIR}" "Cannot create global configuration files."
-chmod 775 "${SYSCONFDIR}"
+if ! /usr/bin/chmod 775 "${SYSCONFDIR}" >/dev/null 2>&1
-setfacl -m u:system:rwx "${SYSCONFDIR}"
+then
+  csih_warning "Can't set permissions on ${SYSCONFDIR}!"
+  let ++warning_cnt
+fi
+if ! /usr/bin/setfacl -m u:system:rwx "${SYSCONFDIR}" >/dev/null 2>&1
+then
+  csih_warning "Can't set extended permissions on ${SYSCONFDIR}!"
+  let ++warning_cnt
+fi
 # Check for /var/log directory
 csih_make_dir "${LOCALSTATEDIR}/log" "Cannot create log directory."
-chmod 775 "${LOCALSTATEDIR}/log"
+if ! /usr/bin/chmod 775 "${LOCALSTATEDIR}/log" >/dev/null 2>&1
-setfacl -m u:system:rwx "${LOCALSTATEDIR}/log"
+then
+  csih_warning "Can't set permissions on ${LOCALSTATEDIR}/log!"
+  let ++warning_cnt
+fi
+if ! /usr/bin/setfacl -m u:system:rwx "${LOCALSTATEDIR}/log" >/dev/null 2>&1
+then
+  csih_warning "Can't set extended permissions on ${LOCALSTATEDIR}/log!"
+  let ++warning_cnt
+fi
 # Create /var/log/lastlog if not already exists
 if [ -e ${LOCALSTATEDIR}/log/lastlog -a ! -f ${LOCALSTATEDIR}/log/lastlog ]
@@ -513,26 +697,33 @@ then
 fi
 if [ ! -e ${LOCALSTATEDIR}/log/lastlog ]
 then
-  cat /dev/null > ${LOCALSTATEDIR}/log/lastlog
+  /usr/bin/cat /dev/null > ${LOCALSTATEDIR}/log/lastlog
-  chmod 644 ${LOCALSTATEDIR}/log/lastlog
+  if ! /usr/bin/chmod 644 ${LOCALSTATEDIR}/log/lastlog >/dev/null 2>&1
+  then
+    csih_warning "Can't set permissions on ${LOCALSTATEDIR}/log/lastlog!"
+    let ++warning_cnt
+  fi
 fi
 # Create /var/empty file used as chroot jail for privilege separation
 csih_make_dir "${LOCALSTATEDIR}/empty" "Cannot create ${LOCALSTATEDIR}/empty directory."
-chmod 755 "${LOCALSTATEDIR}/empty"
+if ! /usr/bin/chmod 755 "${LOCALSTATEDIR}/empty" >/dev/null 2>&1
-setfacl -m u:system:rwx "${LOCALSTATEDIR}/empty"
+then
+  csih_warning "Can't set permissions on ${LOCALSTATEDIR}/empty!"
+  let ++warning_cnt
+fi
+if ! /usr/bin/setfacl -m u:system:rwx "${LOCALSTATEDIR}/empty" >/dev/null 2>&1
+then
+  csih_warning "Can't set extended permissions on ${LOCALSTATEDIR}/empty!"
+  let ++warning_cnt
+fi
 # host keys
-create_host_keys
+create_host_keys || let warning_cnt+=$?
-# use 'cmp' program to determine if a config file is identical
-# to the default version of that config file
-csih_check_program_or_error cmp diffutils
 # handle ssh_config
-csih_install_config "${SYSCONFDIR}/ssh_config"   "${SYSCONFDIR}/defaults"
+csih_install_config "${SYSCONFDIR}/ssh_config" "${SYSCONFDIR}/defaults" || let ++warning_cnt
-if cmp "${SYSCONFDIR}/ssh_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/ssh_config" >/dev/null 2>&1
+if /usr/bin/cmp "${SYSCONFDIR}/ssh_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/ssh_config" >/dev/null 2>&1
 then
  if [ "${port_number}" != "22" ]
  then
@@ -543,19 +734,24 @@ then
 fi
 # handle sshd_config (and privsep)
-csih_install_config "${SYSCONFDIR}/sshd_config"   "${SYSCONFDIR}/defaults"
+csih_install_config "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults" || let ++warning_cnt
-if ! cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1
+if ! /usr/bin/cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1
 then
-  grep -q UsePrivilegeSeparation ${SYSCONFDIR}/sshd_config && privsep_configured=yes
+  /usr/bin/grep -q UsePrivilegeSeparation ${SYSCONFDIR}/sshd_config && privsep_configured=yes
 fi
-sshd_privsep
+sshd_privsep || let warning_cnt+=$?
+update_services_file || let warning_cnt+=$?
-update_services_file
+update_inetd_conf || let warning_cnt+=$?
-update_inetd_conf
+install_service || let warning_cnt+=$?
-install_service
 echo
-csih_inform "Host configuration finished. Have fun!"
+if [ $warning_cnt -eq 0 ]
+then
+  csih_inform "Host configuration finished. Have fun!"
+else
+  csih_warning "Host configuration exited with ${warning_cnt} errors or warnings!"
+  csih_warning "Make sure that all problems reported are fixed,"
+  csih_warning "then re-run ssh-host-config."
+fi
+exit $warning_cnt
diff --git a/contrib/cygwin/ssh-user-config b/contrib/cygwin/ssh-user-config
index f1a001a93..027ae6032 100644
--- a/contrib/cygwin/ssh-user-config
+++ b/contrib/cygwin/ssh-user-config
@@ -39,85 +39,34 @@ pwdhome=
 with_passphrase=
 # ======================================================================
-# Routine: create_ssh1_identity
+# Routine: create_identity
-#   optionally create ~/.ssh/identity[.pub]
+#   optionally create identity of type argument in ~/.ssh
 #   optionally add result to ~/.ssh/authorized_keys
 # ======================================================================
-create_ssh1_identity() {
+create_identity() {
-  if [ ! -f "${pwdhome}/.ssh/identity" ]
+  local file="$1"
+  local type="$2"
+  local name="$3"
+  if [ ! -f "${pwdhome}/.ssh/${file}" ]
  then
-    if csih_request "Shall I create an SSH1 RSA identity file for you?"
+    if csih_request "Shall I create a ${name} identity file for you?"
    then
-      csih_inform "Generating ${pwdhome}/.ssh/identity"
+      csih_inform "Generating ${pwdhome}/.ssh/${file}"
      if [ "${with_passphrase}" = "yes" ]
      then
-        ssh-keygen -t rsa1 -N "${passphrase}" -f "${pwdhome}/.ssh/identity" > /dev/null
+        ssh-keygen -t "${type}" -N "${passphrase}" -f "${pwdhome}/.ssh/${file}" > /dev/null
      else
-        ssh-keygen -t rsa1 -f "${pwdhome}/.ssh/identity" > /dev/null
+        ssh-keygen -t "${type}" -f "${pwdhome}/.ssh/${file}" > /dev/null
      fi
      if csih_request "Do you want to use this identity to login to this machine?"
      then
        csih_inform "Adding to ${pwdhome}/.ssh/authorized_keys"
-        cat "${pwdhome}/.ssh/identity.pub" >> "${pwdhome}/.ssh/authorized_keys"
+        cat "${pwdhome}/.ssh/${file}.pub" >> "${pwdhome}/.ssh/authorized_keys"
      fi
    fi
  fi
 } # === End of create_ssh1_identity() === #
-readonly -f create_ssh1_identity
+readonly -f create_identity
-# ======================================================================
-# Routine: create_ssh2_rsa_identity
-#   optionally create ~/.ssh/id_rsa[.pub]
-#   optionally add result to ~/.ssh/authorized_keys
-# ======================================================================
-create_ssh2_rsa_identity() {
-  if [ ! -f "${pwdhome}/.ssh/id_rsa" ]
-  then
-    if csih_request "Shall I create an SSH2 RSA identity file for you?"
-    then
-      csih_inform "Generating ${pwdhome}/.ssh/id_rsa"
-      if [ "${with_passphrase}" = "yes" ]
-      then
-        ssh-keygen -t rsa -N "${passphrase}" -f "${pwdhome}/.ssh/id_rsa" > /dev/null
-      else
-        ssh-keygen -t rsa -f "${pwdhome}/.ssh/id_rsa" > /dev/null
-      fi
-      if csih_request "Do you want to use this identity to login to this machine?"
-      then
-        csih_inform "Adding to ${pwdhome}/.ssh/authorized_keys"
-        cat "${pwdhome}/.ssh/id_rsa.pub" >> "${pwdhome}/.ssh/authorized_keys"
-      fi
-    fi
-  fi
-} # === End of create_ssh2_rsa_identity() === #
-readonly -f create_ssh2_rsa_identity
-# ======================================================================
-# Routine: create_ssh2_dsa_identity
-#   optionally create ~/.ssh/id_dsa[.pub]
-#   optionally add result to ~/.ssh/authorized_keys
-# ======================================================================
-create_ssh2_dsa_identity() {
-  if [ ! -f "${pwdhome}/.ssh/id_dsa" ]
-  then
-    if csih_request "Shall I create an SSH2 DSA identity file for you?"
-    then
-      csih_inform "Generating ${pwdhome}/.ssh/id_dsa"
-      if [ "${with_passphrase}" = "yes" ]
-      then
-        ssh-keygen -t dsa -N "${passphrase}" -f "${pwdhome}/.ssh/id_dsa" > /dev/null
-      else
-        ssh-keygen -t dsa -f "${pwdhome}/.ssh/id_dsa" > /dev/null
-      fi
-      if csih_request "Do you want to use this identity to login to this machine?"
-      then
-        csih_inform "Adding to ${pwdhome}/.ssh/authorized_keys"
-        cat "${pwdhome}/.ssh/id_dsa.pub" >> "${pwdhome}/.ssh/authorized_keys"
-      fi
-    fi
-  fi
-} # === End of create_ssh2_dsa_identity() === #
-readonly -f create_ssh2_dsa_identity
 # ======================================================================
 # Routine: check_user_homedir
@@ -311,9 +260,10 @@ fi
 check_user_homedir
 check_user_dot_ssh_dir
-create_ssh1_identity
+create_identity id_rsa rsa "SSH2 RSA"
-create_ssh2_rsa_identity
+create_identity id_dsa dsa "SSH2 DSA"
-create_ssh2_dsa_identity
+create_identity id_ecdsa ecdsa "SSH2 ECDSA"
+create_identity identity rsa1 "(deprecated) SSH1 RSA"
 fix_authorized_keys_perms
 echo
diff --git a/contrib/redhat/openssh.spec b/contrib/redhat/openssh.spec
index e99e33d0f..be6de088c 100644
--- a/contrib/redhat/openssh.spec
+++ b/contrib/redhat/openssh.spec
@@ -1,4 +1,4 @@
-%define ver 5.8p1
+%define ver 5.9p1
 %define rel 1
 # OpenSSH privilege separation requires a user & group ID
@@ -84,24 +84,24 @@ Obsoletes: ssh
 %if %{build6x}
 PreReq: initscripts >= 5.00
 %else
-PreReq: initscripts >= 5.20
+Requires: initscripts >= 5.20
 %endif
-BuildPreReq: perl, openssl-devel, tcp_wrappers
+BuildRequires: perl, openssl-devel, tcp_wrappers
-BuildPreReq: /bin/login
+BuildRequires: /bin/login
 %if ! %{build6x}
 BuildPreReq: glibc-devel, pam
 %else
-BuildPreReq: /usr/include/security/pam_appl.h
+BuildRequires: /usr/include/security/pam_appl.h
 %endif
 %if ! %{no_x11_askpass}
-BuildPreReq: /usr/include/X11/Xlib.h
+BuildRequires: /usr/include/X11/Xlib.h
 %endif
 %if ! %{no_gnome_askpass}
-BuildPreReq: pkgconfig
+BuildRequires: pkgconfig
 %endif
 %if %{kerberos5}
-BuildPreReq: krb5-devel
+BuildRequires: krb5-devel
-BuildPreReq: krb5-libs
+BuildRequires: krb5-libs
 %endif
 %package clients
@@ -114,7 +114,7 @@ Obsoletes: ssh-clients
 Summary: The OpenSSH server daemon.
 Group: System Environment/Daemons
 Obsoletes: ssh-server
-PreReq: openssh = %{version}-%{release}, chkconfig >= 0.9
+Requires: openssh = %{version}-%{release}, chkconfig >= 0.9
 %if ! %{build6x}
 Requires: /etc/pam.d/system-auth
 %endif
@@ -712,7 +712,7 @@ fi
  it generates.
 * Thu Oct  5 2000 Nalin Dahyabhai <nalin@redhat.com>
- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
+- Add BuildRequires on /usr/include/security/pam_appl.h to be sure we always
  build PAM authentication in.
 - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
 - Clean out no-longer-used patches.
@@ -721,7 +721,7 @@ fi
 * Mon Oct  2 2000 Nalin Dahyabhai <nalin@redhat.com>
 - Update x11-askpass to 1.0.2. (#17835)
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
+- Add BuildRequiress for /bin/login and /usr/bin/rsh so that configure will
  always find them in the right place. (#17909)
 - Set the default path to be the same as the one supplied by /bin/login, but
  add /usr/X11R6/bin. (#17909)
diff --git a/contrib/redhat/sshd.init b/contrib/redhat/sshd.init
index 854aff665..2334d8142 100755
--- a/contrib/redhat/sshd.init
+++ b/contrib/redhat/sshd.init
@@ -22,70 +22,9 @@ RETVAL=0
 prog="sshd"
 # Some functions to make the below more readable
-KEYGEN=/usr/bin/ssh-keygen
 SSHD=/usr/sbin/sshd
-RSA1_KEY=/etc/ssh/ssh_host_key
-RSA_KEY=/etc/ssh/ssh_host_rsa_key
-DSA_KEY=/etc/ssh/ssh_host_dsa_key
 PID_FILE=/var/run/sshd.pid
-do_rsa1_keygen() {
-        if [ ! -s $RSA1_KEY ]; then
-                echo -n $"Generating SSH1 RSA host key: "
-                if $KEYGEN -q -t rsa1 -f $RSA1_KEY -C '' -N '' >&/dev/null; then
-                        chmod 600 $RSA1_KEY
-                        chmod 644 $RSA1_KEY.pub
-                        if [ -x /sbin/restorecon ]; then
-                            /sbin/restorecon $RSA1_KEY.pub
-                        fi
-                        success $"RSA1 key generation"
-                        echo
-                else
-                        failure $"RSA1 key generation"
-                        echo
-                        exit 1
-                fi
-        fi
-}
-do_rsa_keygen() {
-        if [ ! -s $RSA_KEY ]; then
-                echo -n $"Generating SSH2 RSA host key: "
-                if $KEYGEN -q -t rsa -f $RSA_KEY -C '' -N '' >&/dev/null; then
-                        chmod 600 $RSA_KEY
-                        chmod 644 $RSA_KEY.pub
-                        if [ -x /sbin/restorecon ]; then
-                            /sbin/restorecon $RSA_KEY.pub
-                        fi
-                        success $"RSA key generation"
-                        echo
-                else
-                        failure $"RSA key generation"
-                        echo
-                        exit 1
-                fi
-        fi
-}
-do_dsa_keygen() {
-        if [ ! -s $DSA_KEY ]; then
-                echo -n $"Generating SSH2 DSA host key: "
-                if $KEYGEN -q -t dsa -f $DSA_KEY -C '' -N '' >&/dev/null; then
-                        chmod 600 $DSA_KEY
-                        chmod 644 $DSA_KEY.pub
-                        if [ -x /sbin/restorecon ]; then
-                            /sbin/restorecon $DSA_KEY.pub
-                        fi
-                        success $"DSA key generation"
-                        echo
-                else
-                        failure $"DSA key generation"
-                        echo
-                        exit 1
-                fi
-        fi
-}
 do_restart_sanity_check()
 {
        $SSHD -t
@@ -99,9 +38,13 @@ do_restart_sanity_check()
 start()
 {
        # Create keys if necessary
-        do_rsa1_keygen
+        /usr/bin/ssh-keygen -A
-        do_rsa_keygen
+        if [ -x /sbin/restorecon ]; then
-        do_dsa_keygen
+                /sbin/restorcon /etc/ssh/ssh_host_key.pub
+                /sbin/restorcon /etc/ssh/ssh_host_rsa_key.pub
+                /sbin/restorcon /etc/ssh/ssh_host_dsa_key.pub
+                /sbin/restorcon /etc/ssh/ssh_host_ecdsa_key.pub
+        fi
        echo -n $"Starting $prog:"
        $SSHD $OPTIONS && success || failure
diff --git a/contrib/ssh-copy-id b/contrib/ssh-copy-id
index 368645cb4..9451aceec 100644
--- a/contrib/ssh-copy-id
+++ b/contrib/ssh-copy-id
@@ -25,7 +25,7 @@ else
 fi
 if [ -z "`eval $GET_ID`" ] && [ -r "${ID_FILE}" ] ; then
-  GET_ID="cat ${ID_FILE}"
+  GET_ID="cat \"${ID_FILE}\""
 fi
 if [ -z "`eval $GET_ID`" ]; then
diff --git a/contrib/suse/openssh.spec b/contrib/suse/openssh.spec
index 6afdcc4b4..3a4dfea37 100644
--- a/contrib/suse/openssh.spec
+++ b/contrib/suse/openssh.spec
@@ -13,7 +13,7 @@
 Summary:        OpenSSH, a free Secure Shell (SSH) protocol implementation
 Name:           openssh
-Version:        5.8p1
+Version:        5.9p1
 URL:            http://www.openssh.com/
 Release:        1
 Source0:        openssh-%{version}.tar.gz
@@ -28,11 +28,12 @@ Provides:	ssh
 # (Build[ing] Prereq[uisites] only work for RPM 2.95 and newer.)
 # building prerequisites -- stuff for
 #   OpenSSL (openssl-devel),
-#   TCP Wrappers (nkitb),
+#   TCP Wrappers (tcpd-devel),
 #   and Gnome (glibdev, gtkdev, and gnlibsd)
 #
 BuildPrereq:    openssl
-BuildPrereq:    nkitb
+BuildPrereq:    tcpd-devel
+BuildPrereq:    zlib-devel
 #BuildPrereq:   glibdev
 #BuildPrereq:   gtkdev
 #BuildPrereq:   gnlibsd
@@ -177,15 +178,8 @@ rm -rf $RPM_BUILD_ROOT
 /usr/sbin/useradd -r -o -g sshd -u %{sshd_uid} -s /bin/false -c "SSH Privilege Separation User" -d /var/lib/sshd sshd 2> /dev/null || :
 %post
-if [ ! -f /etc/ssh/ssh_host_key -o ! -s /etc/ssh/ssh_host_key ]; then
+/usr/bin/ssh-keygen -A
-        echo "Generating SSH RSA host key..."
+%{fillup_and_insserv -n -y ssh sshd}
-        /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N '' >&2
-fi
-if [ ! -f /etc/ssh/ssh_host_dsa_key -o ! -s /etc/ssh/ssh_host_dsa_key ]; then
-        echo "Generating SSH DSA host key..."
-        /usr/bin/ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N '' >&2
-fi
-%{fillup_and_insserv -n -s -y ssh sshd START_SSHD}
 %run_permissions
 %verifyscript
diff --git a/contrib/suse/rc.sshd b/contrib/suse/rc.sshd
index 4d4880d7e..4a3bc41db 100644
--- a/contrib/suse/rc.sshd
+++ b/contrib/suse/rc.sshd
@@ -43,20 +43,8 @@ rc_reset
 case "$1" in
    start)
-        if ! test -f /etc/ssh/ssh_host_key ; then
+        # Generate any missing host keys
-            echo Generating /etc/ssh/ssh_host_key.
+        ssh-keygen -A
-            ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key -N ''
-        fi
-        if ! test -f /etc/ssh/ssh_host_dsa_key ; then
-            echo Generating /etc/ssh/ssh_host_dsa_key.
-            
-            ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''
-        fi
-        if ! test -f /etc/ssh/ssh_host_rsa_key ; then
-            echo Generating /etc/ssh/ssh_host_rsa_key.
-            
-            ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''
-        fi
        echo -n "Starting SSH daemon"
        ## Start daemon with startproc(8). If this fails
        ## the echo return value is set appropriate.
diff --git a/debian/changelog b/debian/changelog
index 4ab7d8955..108d915bb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,30 @@
+openssh (1:5.9p1-1) UNRELEASED; urgency=low
+  * New upstream release (http://www.openssh.org/txt/release-5.9).
+    - Introduce sandboxing of the pre-auth privsep child using an optional
+      sshd_config(5) "UsePrivilegeSeparation=sandbox" mode that enables
+      mandatory restrictions on the syscalls the privsep child can perform.
+    - Add new SHA256-based HMAC transport integrity modes from
+      http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt.
+    - The pre-authentication sshd(8) privilege separation slave process now
+      logs via a socket shared with the master process, avoiding the need to
+      maintain /dev/log inside the chroot (closes: #75043, #429243,
+      #599240).
+    - ssh(1) now warns when a server refuses X11 forwarding (closes:
+      #504757).
+    - sshd_config(5)'s AuthorizedKeysFile now accepts multiple paths,
+      separated by whitespace (closes: #76312).  The authorized_keys2
+      fallback is deprecated but documented (closes: #560156).
+    - ssh(1) and sshd(8): set IPv6 traffic class from IPQoS, as well as IPv4
+      ToS/DSCP (closes: #498297).
+    - ssh-add(1) now accepts keys piped from standard input.  E.g. "ssh-add
+      - < /path/to/key" (closes: #229124).
+    - Clean up lost-passphrase text in ssh-keygen(1) (closes: #444691).
+    - Say "required" rather than "recommended" in unprotected-private-key
+      warning (LP: #663455).
+ -- Colin Watson <cjwatson@debian.org>  Tue, 06 Sep 2011 10:16:33 +0100
 openssh (1:5.8p1-7) unstable; urgency=low
  * Only recommend ssh-import-id when built on Ubuntu (closes: #635887).
diff --git a/debian/patches/auth-log-verbosity.patch b/debian/patches/auth-log-verbosity.patch
index 7aea6690d..da940d9fa 100644
--- a/debian/patches/auth-log-verbosity.patch
+++ b/debian/patches/auth-log-verbosity.patch
@@ -83,9 +83,9 @@ Index: b/auth-rsa.c
 ===================================================================
 --- a/auth-rsa.c
 +++ b/auth-rsa.c
-@@ -193,6 +193,8 @@
+@@ -175,6 +175,8 @@
- 
+        if ((f = auth_openkeyfile(file, pw, options.strict_modes)) == NULL)
-        key = key_new(KEY_RSA1);
+                return 0;
 
 +       auth_start_parse_options();
 +
diff --git a/debian/patches/authorized-keys-man-symlink.patch b/debian/patches/authorized-keys-man-symlink.patch
index 13b3b6561..a9ca85407 100644
--- a/debian/patches/authorized-keys-man-symlink.patch
+++ b/debian/patches/authorized-keys-man-symlink.patch
@@ -8,11 +8,11 @@ Index: b/Makefile.in
 ===================================================================
 --- a/Makefile.in
 +++ b/Makefile.in
-@@ -289,6 +289,7 @@
+@@ -275,6 +275,7 @@
        $(INSTALL) -m 644 sshd_config.5.out $(DESTDIR)$(mandir)/$(mansubdir)5/sshd_config.5
        $(INSTALL) -m 644 ssh_config.5.out $(DESTDIR)$(mandir)/$(mansubdir)5/ssh_config.5
        $(INSTALL) -m 644 sshd.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sshd.8
 +       ln -s ../$(mansubdir)8/sshd.8 $(DESTDIR)$(mandir)/$(mansubdir)5/authorized_keys.5
-        if [ ! -z "$(INSTALL_SSH_RAND_HELPER)" ]; then \
+        $(INSTALL) -m 644 sftp.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/sftp.1
-                $(INSTALL) -m 644 ssh-rand-helper.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-rand-helper.8 ; \
+        $(INSTALL) -m 644 sftp-server.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8
-        fi
+        $(INSTALL) -m 644 ssh-keysign.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8
diff --git a/debian/patches/debian-banner.patch b/debian/patches/debian-banner.patch
index 32251397d..57ca35e87 100644
--- a/debian/patches/debian-banner.patch
+++ b/debian/patches/debian-banner.patch
@@ -10,7 +10,7 @@ Index: b/servconf.c
 ===================================================================
 --- a/servconf.c
 +++ b/servconf.c
-@@ -143,6 +143,7 @@
+@@ -142,6 +142,7 @@
        options->authorized_principals_file = NULL;
        options->ip_qos_interactive = -1;
        options->ip_qos_bulk = -1;
@@ -18,7 +18,7 @@ Index: b/servconf.c
 }
 
 void
-@@ -293,6 +294,8 @@
+@@ -289,6 +290,8 @@
                options->ip_qos_interactive = IPTOS_LOWDELAY;
        if (options->ip_qos_bulk == -1)
                options->ip_qos_bulk = IPTOS_THROUGHPUT;
@@ -27,7 +27,7 @@ Index: b/servconf.c
 
        /* Turn privilege separation on by default */
        if (use_privsep == -1)
-@@ -342,6 +345,7 @@
+@@ -338,6 +341,7 @@
        sZeroKnowledgePasswordAuthentication, sHostCertificate,
        sRevokedKeys, sTrustedUserCAKeys, sAuthorizedPrincipalsFile,
        sKexAlgorithms, sIPQoS,
@@ -35,7 +35,7 @@ Index: b/servconf.c
        sDeprecated, sUnsupported
 } ServerOpCodes;
 
-@@ -477,6 +481,7 @@
+@@ -473,6 +477,7 @@
        { "authorizedprincipalsfile", sAuthorizedPrincipalsFile, SSHCFG_ALL },
        { "kexalgorithms", sKexAlgorithms, SSHCFG_GLOBAL },
        { "ipqos", sIPQoS, SSHCFG_ALL },
@@ -43,7 +43,7 @@ Index: b/servconf.c
        { NULL, sBadOption, 0 }
 };
 
-@@ -1439,6 +1444,10 @@
+@@ -1436,6 +1441,10 @@
                }
                break;
 
@@ -58,7 +58,7 @@ Index: b/servconf.h
 ===================================================================
 --- a/servconf.h
 +++ b/servconf.h
-@@ -160,6 +160,8 @@
+@@ -166,6 +166,8 @@
 
        int     num_permitted_opens;
 
@@ -71,7 +71,7 @@ Index: b/sshd.c
 ===================================================================
 --- a/sshd.c
 +++ b/sshd.c
-@@ -422,7 +422,8 @@
+@@ -423,7 +423,8 @@
                minor = PROTOCOL_MINOR_1;
        }
        snprintf(buf, sizeof buf, "SSH-%d.%d-%.100s%s", major, minor,
@@ -85,7 +85,7 @@ Index: b/sshd_config.5
 ===================================================================
 --- a/sshd_config.5
 +++ b/sshd_config.5
-@@ -339,6 +339,11 @@
+@@ -340,6 +340,11 @@
 .Dq no .
 The default is
 .Dq delayed .
diff --git a/debian/patches/debian-config.patch b/debian/patches/debian-config.patch
index e804aa526..74aa53ecc 100644
--- a/debian/patches/debian-config.patch
+++ b/debian/patches/debian-config.patch
@@ -24,7 +24,7 @@ Index: b/readconf.c
 ===================================================================
 --- a/readconf.c
 +++ b/readconf.c
-@@ -1223,7 +1223,7 @@
+@@ -1268,7 +1268,7 @@
        if (options->forward_x11 == -1)
                options->forward_x11 = 0;
        if (options->forward_x11_trusted == -1)
@@ -84,7 +84,7 @@ Index: b/ssh_config.5
 The configuration file has the following format:
 .Pp
 Empty lines and lines starting with
-@@ -482,7 +498,8 @@
+@@ -499,7 +515,8 @@
 Remote clients will be refused access after this time.
 .Pp
 The default is
diff --git a/debian/patches/doc-hash-tab-completion.patch b/debian/patches/doc-hash-tab-completion.patch
index 5cf8aa46b..cec6f6639 100644
--- a/debian/patches/doc-hash-tab-completion.patch
+++ b/debian/patches/doc-hash-tab-completion.patch
@@ -8,7 +8,7 @@ Index: b/ssh_config.5
 ===================================================================
 --- a/ssh_config.5
 +++ b/ssh_config.5
-@@ -566,6 +566,9 @@
+@@ -585,6 +585,9 @@
 will not be converted automatically,
 but may be manually hashed using
 .Xr ssh-keygen 1 .
diff --git a/debian/patches/gssapi-autoconf.patch b/debian/patches/gssapi-autoconf.patch
deleted file mode 100644
index 51d8a8e72..000000000
--- a/debian/patches/gssapi-autoconf.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-Description: Update config.h.in following GSSAPI patch
-Author: Colin Watson <cjwatson@debian.org>
-Forwarded: not-needed
-Last-Updated: 2010-02-27
-Index: b/config.h.in
-===================================================================
--- a/config.h.in
-+++ b/config.h.in
-@@ -1417,6 +1417,9 @@
- /* Use btmp to log bad logins */
- #undef USE_BTMP
- 
-+/* platform uses an in-memory credentials cache */
-+#undef USE_CCAPI
-+
- /* Use libedit for sftp */
- #undef USE_LIBEDIT
- 
-@@ -1432,6 +1435,9 @@
- /* Use PIPES instead of a socketpair() */
- #undef USE_PIPES
- 
-+/* platform has the Security Authorization Session API */
-+#undef USE_SECURITY_SESSION_API
-+
- /* Define if you have Solaris process contracts */
- #undef USE_SOLARIS_PROCESS_CONTRACTS
- 
diff --git a/debian/patches/gssapi.patch b/debian/patches/gssapi.patch
index c123bf7b9..dc293683e 100644
--- a/debian/patches/gssapi.patch
+++ b/debian/patches/gssapi.patch
@@ -137,7 +137,7 @@ Index: b/Makefile.in
 ===================================================================
 --- a/Makefile.in
 +++ b/Makefile.in
-@@ -75,6 +75,7 @@
+@@ -70,6 +70,7 @@
        atomicio.o key.o dispatch.o kex.o mac.o uidswap.o uuencode.o misc.o \
        monitor_fdpass.o rijndael.o ssh-dss.o ssh-ecdsa.o ssh-rsa.o dh.o \
        kexdh.o kexgex.o kexdhc.o kexgexc.o bufec.o kexecdh.o kexecdhc.o \
@@ -145,7 +145,7 @@ Index: b/Makefile.in
        msg.o progressmeter.o dns.o entropy.o gss-genr.o umac.o jpake.o \
        schnorr.o ssh-pkcs11.o
 
-@@ -91,7 +92,7 @@
+@@ -86,7 +87,7 @@
        auth2-none.o auth2-passwd.o auth2-pubkey.o auth2-jpake.o \
        monitor_mm.o monitor.o monitor_wrap.o kexdhs.o kexgexs.o kexecdhs.o \
        auth-krb5.o \
@@ -153,7 +153,7 @@ Index: b/Makefile.in
 +       auth2-gss.o gss-serv.o gss-serv-krb5.o kexgsss.o\
        loginrec.o auth-pam.o auth-shadow.o auth-sia.o md5crypt.o \
        sftp-server.o sftp-common.o \
-        roaming_common.o roaming_serv.o
+        roaming_common.o roaming_serv.o \
 Index: b/auth-krb5.c
 ===================================================================
 --- a/auth-krb5.c
@@ -205,24 +205,12 @@ Index: b/auth-krb5.c
 
        return (krb5_cc_resolve(ctx, ccname, ccache));
 }
-Index: b/auth.h
-===================================================================
--- a/auth.h
-+++ b/auth.h
-@@ -53,6 +53,7 @@
-        int              valid;         /* user exists and is allowed to login */
-        int              attempt;
-        int              failures;
-+       int              server_caused_failure; 
-        int              force_pwchange;
-        char            *user;          /* username sent by the client */
-        char            *service;
 Index: b/auth2-gss.c
 ===================================================================
 --- a/auth2-gss.c
 +++ b/auth2-gss.c
 @@ -1,7 +1,7 @@
- /* $OpenBSD: auth2-gss.c,v 1.16 2007/10/29 00:52:45 dtucker Exp $ */
+ /* $OpenBSD: auth2-gss.c,v 1.17 2011/03/10 02:52:57 djm Exp $ */
 
 /*
 - * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved.
@@ -271,23 +259,7 @@ Index: b/auth2-gss.c
 /*
  * We only support those mechanisms that we know about (ie ones that we know
  * how to check local user kuserok and the like)
-@@ -102,6 +136,7 @@
+@@ -244,7 +278,8 @@
- 
-        if (!present) {
-                xfree(doid);
-+               authctxt->server_caused_failure = 1;
-                return (0);
-        }
- 
-@@ -109,6 +144,7 @@
-                if (ctxt != NULL)
-                        ssh_gssapi_delete_ctx(&ctxt);
-                xfree(doid);
-+               authctxt->server_caused_failure = 1;
-                return (0);
-        }
- 
-@@ -242,7 +278,8 @@
 
        packet_check_eom();
 
@@ -297,7 +269,7 @@ Index: b/auth2-gss.c
 
        authctxt->postponed = 0;
        dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL);
-@@ -277,7 +314,8 @@
+@@ -279,7 +314,8 @@
        gssbuf.length = buffer_len(&b);
 
        if (!GSS_ERROR(PRIVSEP(ssh_gssapi_checkmic(gssctxt, &gssbuf, &mic))))
@@ -307,7 +279,7 @@ Index: b/auth2-gss.c
        else
                logit("GSSAPI MIC check failed");
 
-@@ -292,6 +330,12 @@
+@@ -294,6 +330,12 @@
        userauth_finish(authctxt, authenticated, "gssapi-with-mic");
 }
 
@@ -340,24 +312,6 @@ Index: b/auth2.c
        &method_gssapi,
 #endif
 #ifdef JPAKE
-@@ -274,6 +276,7 @@
- #endif
- 
-        authctxt->postponed = 0;
-+       authctxt->server_caused_failure = 0;
- 
-        /* try to authenticate user */
-        m = authmethod_lookup(method);
-@@ -346,7 +349,8 @@
-        } else {
- 
-                /* Allow initial try of "none" auth without failure penalty */
-               if (authctxt->attempt > 1 || strcmp(method, "none") != 0)
-+               if (!authctxt->server_caused_failure &&
-+                   (authctxt->attempt > 1 || strcmp(method, "none") != 0))
-                        authctxt->failures++;
-                if (authctxt->failures >= options.max_authtries) {
- #ifdef SSH_AUDIT_EVENTS
 Index: b/clientloop.c
 ===================================================================
 --- a/clientloop.c
@@ -373,7 +327,7 @@ Index: b/clientloop.c
 /* import options */
 extern Options options;
 
-@@ -1483,6 +1487,15 @@
+@@ -1508,6 +1512,15 @@
                /* Do channel operations unless rekeying in progress. */
                if (!rekeying) {
                        channel_after_select(readset, writeset);
@@ -389,41 +343,133 @@ Index: b/clientloop.c
                        if (need_rekeying || packet_need_rekeying()) {
                                debug("need rekeying");
                                xxx_kex->done = 0;
+Index: b/config.h.in
+===================================================================
+--- a/config.h.in
+++ b/config.h.in
+@@ -1441,6 +1441,9 @@
+ /* Use btmp to log bad logins */
+ #undef USE_BTMP
+ 
+/* platform uses an in-memory credentials cache */
+#undef USE_CCAPI
+
+ /* Use libedit for sftp */
+ #undef USE_LIBEDIT
+ 
+@@ -1456,6 +1459,9 @@
+ /* Use PIPES instead of a socketpair() */
+ #undef USE_PIPES
+ 
+/* platform has the Security Authorization Session API */
+#undef USE_SECURITY_SESSION_API
+
+ /* Define if you have Solaris process contracts */
+ #undef USE_SOLARIS_PROCESS_CONTRACTS
+ 
+Index: b/configure
+===================================================================
+--- a/configure
+++ b/configure
+@@ -6521,6 +6521,63 @@
+ 
+ $as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
+ 
+       { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we have the Security Authorization Session API" >&5
+$as_echo_n "checking if we have the Security Authorization Session API... " >&6; }
+       cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <Security/AuthSession.h>
+int
+main ()
+{
+SessionCreate(0, 0);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_use_security_session_api="yes"
+
+$as_echo "#define USE_SECURITY_SESSION_API 1" >>confdefs.h
+
+                LIBS="$LIBS -framework Security"
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  ac_cv_use_security_session_api="no"
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+       { $as_echo "$as_me:${as_lineno-$LINENO}: checking if we have an in-memory credentials cache" >&5
+$as_echo_n "checking if we have an in-memory credentials cache... " >&6; }
+       cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <Kerberos/Kerberos.h>
+int
+main ()
+{
+cc_context_t c;
+                (void) cc_initialize (&c, 0, NULL, NULL);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+$as_echo "#define USE_CCAPI 1" >>confdefs.h
+
+                LIBS="$LIBS -framework Security"
+                { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+                if test "x$ac_cv_use_security_session_api" = "xno"; then
+                       as_fn_error $? "*** Need a security framework to use the credentials cache API ***" "$LINENO" 5
+               fi
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+ 
+        ac_fn_c_check_decl "$LINENO" "AU_IPv4" "ac_cv_have_decl_AU_IPv4" "$ac_includes_default"
+ if test "x$ac_cv_have_decl_AU_IPv4" = xyes; then :
 Index: b/configure.ac
 ===================================================================
 --- a/configure.ac
 +++ b/configure.ac
-@@ -514,6 +514,30 @@
+@@ -515,6 +515,30 @@
            [Use tunnel device compatibility to OpenBSD])
-        AC_DEFINE(SSH_TUN_PREPEND_AF, 1,
+        AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
            [Prepend the address family to IP tunnel traffic])
-+       AC_MSG_CHECKING(if we have the Security Authorization Session API)
+       AC_MSG_CHECKING([if we have the Security Authorization Session API])
 +       AC_TRY_COMPILE([#include <Security/AuthSession.h>],
 +               [SessionCreate(0, 0);],
 +               [ac_cv_use_security_session_api="yes"
-+                AC_DEFINE(USE_SECURITY_SESSION_API, 1, 
+                AC_DEFINE([USE_SECURITY_SESSION_API], [1], 
 +                       [platform has the Security Authorization Session API])
 +                LIBS="$LIBS -framework Security"
-+                AC_MSG_RESULT(yes)],
+                AC_MSG_RESULT([yes])],
 +               [ac_cv_use_security_session_api="no"
-+                AC_MSG_RESULT(no)])
+                AC_MSG_RESULT([no])])
-+       AC_MSG_CHECKING(if we have an in-memory credentials cache)
+       AC_MSG_CHECKING([if we have an in-memory credentials cache])
 +       AC_TRY_COMPILE(
 +               [#include <Kerberos/Kerberos.h>],
 +               [cc_context_t c;
 +                (void) cc_initialize (&c, 0, NULL, NULL);],
-+               [AC_DEFINE(USE_CCAPI, 1, 
+               [AC_DEFINE([USE_CCAPI], [1], 
 +                       [platform uses an in-memory credentials cache])
 +                LIBS="$LIBS -framework Security"
-+                AC_MSG_RESULT(yes)
+                AC_MSG_RESULT([yes])
 +                if test "x$ac_cv_use_security_session_api" = "xno"; then
-+                       AC_MSG_ERROR(*** Need a security framework to use the credentials cache API ***)
+                       AC_MSG_ERROR([*** Need a security framework to use the credentials cache API ***])
 +               fi],
-+               [AC_MSG_RESULT(no)]
+               [AC_MSG_RESULT([no])]
 +       )
-        m4_pattern_allow(AU_IPv)
+        m4_pattern_allow([AU_IPv])
-        AC_CHECK_DECL(AU_IPv4, [], 
+        AC_CHECK_DECL([AU_IPv4], [], 
-            AC_DEFINE(AU_IPv4, 0, [System only supports IPv4 audit records])
+            AC_DEFINE([AU_IPv4], [0], [System only supports IPv4 audit records])
 Index: b/gss-genr.c
 ===================================================================
 --- a/gss-genr.c
@@ -904,7 +950,7 @@ Index: b/gss-serv.c
 --- a/gss-serv.c
 +++ b/gss-serv.c
 @@ -1,7 +1,7 @@
- /* $OpenBSD: gss-serv.c,v 1.22 2008/05/08 12:02:23 djm Exp $ */
+ /* $OpenBSD: gss-serv.c,v 1.23 2011/08/01 19:18:15 markus Exp $ */
 
 /*
 - * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved.
@@ -1023,7 +1069,7 @@ Index: b/gss-serv.c
 
        while (supported_mechs[i]->name != NULL) {
                if (GSS_ERROR(gss_test_oid_set_member(&min_status,
-@@ -247,8 +284,48 @@
+@@ -249,8 +286,48 @@
 ssh_gssapi_getclient(Gssctxt *ctx, ssh_gssapi_client *client)
 {
        int i = 0;
@@ -1073,7 +1119,7 @@ Index: b/gss-serv.c
 
        client->mech = NULL;
 
-@@ -263,6 +340,13 @@
+@@ -265,6 +342,13 @@
        if (client->mech == NULL)
                return GSS_S_FAILURE;
 
@@ -1087,7 +1133,7 @@ Index: b/gss-serv.c
        if ((ctx->major = gss_display_name(&ctx->minor, ctx->client,
            &client->displayname, NULL))) {
                ssh_gssapi_error(ctx);
-@@ -280,6 +364,8 @@
+@@ -282,6 +366,8 @@
                return (ctx->major);
        }
 
@@ -1096,7 +1142,7 @@ Index: b/gss-serv.c
        /* We can't copy this structure, so we just move the pointer to it */
        client->creds = ctx->client_creds;
        ctx->client_creds = GSS_C_NO_CREDENTIAL;
-@@ -327,7 +413,7 @@
+@@ -329,7 +415,7 @@
 
 /* Privileged */
 int
@@ -1105,7 +1151,7 @@ Index: b/gss-serv.c
 {
        OM_uint32 lmin;
 
-@@ -337,9 +423,11 @@
+@@ -339,9 +425,11 @@
                return 0;
        }
        if (gssapi_client.mech && gssapi_client.mech->userok)
@@ -1119,7 +1165,7 @@ Index: b/gss-serv.c
                        /* Destroy delegated credentials if userok fails */
                        gss_release_buffer(&lmin, &gssapi_client.displayname);
                        gss_release_buffer(&lmin, &gssapi_client.exportedname);
-@@ -352,14 +440,90 @@
+@@ -354,14 +442,90 @@
        return (0);
 }
 
@@ -1961,7 +2007,7 @@ Index: b/monitor.c
 ===================================================================
 --- a/monitor.c
 +++ b/monitor.c
-@@ -172,6 +172,8 @@
+@@ -180,6 +180,8 @@
 int mm_answer_gss_accept_ctx(int, Buffer *);
 int mm_answer_gss_userok(int, Buffer *);
 int mm_answer_gss_checkmic(int, Buffer *);
@@ -1970,7 +2016,7 @@ Index: b/monitor.c
 #endif
 
 #ifdef SSH_AUDIT_EVENTS
-@@ -241,6 +243,7 @@
+@@ -251,6 +253,7 @@
     {MONITOR_REQ_GSSSTEP, MON_ISAUTH, mm_answer_gss_accept_ctx},
     {MONITOR_REQ_GSSUSEROK, MON_AUTH, mm_answer_gss_userok},
     {MONITOR_REQ_GSSCHECKMIC, MON_ISAUTH, mm_answer_gss_checkmic},
@@ -1978,7 +2024,7 @@ Index: b/monitor.c
 #endif
 #ifdef JPAKE
     {MONITOR_REQ_JPAKE_GET_PWDATA, MON_ONCE, mm_answer_jpake_get_pwdata},
-@@ -253,6 +256,12 @@
+@@ -263,6 +266,12 @@
 };
 
 struct mon_table mon_dispatch_postauth20[] = {
@@ -1991,7 +2037,7 @@ Index: b/monitor.c
     {MONITOR_REQ_MODULI, 0, mm_answer_moduli},
     {MONITOR_REQ_SIGN, 0, mm_answer_sign},
     {MONITOR_REQ_PTY, 0, mm_answer_pty},
-@@ -357,6 +366,10 @@
+@@ -371,6 +380,10 @@
                /* Permit requests for moduli and signatures */
                monitor_permit(mon_dispatch, MONITOR_REQ_MODULI, 1);
                monitor_permit(mon_dispatch, MONITOR_REQ_SIGN, 1);
@@ -2002,7 +2048,7 @@ Index: b/monitor.c
        } else {
                mon_dispatch = mon_dispatch_proto15;
 
-@@ -443,6 +456,10 @@
+@@ -468,6 +481,10 @@
                monitor_permit(mon_dispatch, MONITOR_REQ_MODULI, 1);
                monitor_permit(mon_dispatch, MONITOR_REQ_SIGN, 1);
                monitor_permit(mon_dispatch, MONITOR_REQ_TERM, 1);
@@ -2013,7 +2059,7 @@ Index: b/monitor.c
        } else {
                mon_dispatch = mon_dispatch_postauth15;
                monitor_permit(mon_dispatch, MONITOR_REQ_TERM, 1);
-@@ -1692,6 +1709,13 @@
+@@ -1802,6 +1819,13 @@
        kex->kex[KEX_DH_GEX_SHA1] = kexgex_server;
        kex->kex[KEX_DH_GEX_SHA256] = kexgex_server;
        kex->kex[KEX_ECDH_SHA2] = kexecdh_server;
@@ -2027,7 +2073,7 @@ Index: b/monitor.c
        kex->server = 1;
        kex->hostkey_type = buffer_get_int(m);
        kex->kex_type = buffer_get_int(m);
-@@ -1898,6 +1922,9 @@
+@@ -2008,6 +2032,9 @@
        OM_uint32 major;
        u_int len;
 
@@ -2037,7 +2083,7 @@ Index: b/monitor.c
        goid.elements = buffer_get_string(m, &len);
        goid.length = len;
 
-@@ -1925,6 +1952,9 @@
+@@ -2035,6 +2062,9 @@
        OM_uint32 flags = 0; /* GSI needs this */
        u_int len;
 
@@ -2047,7 +2093,7 @@ Index: b/monitor.c
        in.value = buffer_get_string(m, &len);
        in.length = len;
        major = ssh_gssapi_accept_ctx(gsscontext, &in, &out, &flags);
-@@ -1942,6 +1972,7 @@
+@@ -2052,6 +2082,7 @@
                monitor_permit(mon_dispatch, MONITOR_REQ_GSSSTEP, 0);
                monitor_permit(mon_dispatch, MONITOR_REQ_GSSUSEROK, 1);
                monitor_permit(mon_dispatch, MONITOR_REQ_GSSCHECKMIC, 1);
@@ -2055,7 +2101,7 @@ Index: b/monitor.c
        }
        return (0);
 }
-@@ -1953,6 +1984,9 @@
+@@ -2063,6 +2094,9 @@
        OM_uint32 ret;
        u_int len;
 
@@ -2065,7 +2111,7 @@ Index: b/monitor.c
        gssbuf.value = buffer_get_string(m, &len);
        gssbuf.length = len;
        mic.value = buffer_get_string(m, &len);
-@@ -1979,7 +2013,11 @@
+@@ -2089,7 +2123,11 @@
 {
        int authenticated;
 
@@ -2078,7 +2124,7 @@ Index: b/monitor.c
 
        buffer_clear(m);
        buffer_put_int(m, authenticated);
-@@ -1992,6 +2030,74 @@
+@@ -2102,6 +2140,74 @@
        /* Monitor loop will terminate if authenticated */
        return (authenticated);
 }
@@ -2170,7 +2216,7 @@ Index: b/monitor_wrap.c
 ===================================================================
 --- a/monitor_wrap.c
 +++ b/monitor_wrap.c
-@@ -1232,7 +1232,7 @@
+@@ -1270,7 +1270,7 @@
 }
 
 int
@@ -2179,7 +2225,7 @@ Index: b/monitor_wrap.c
 {
        Buffer m;
        int authenticated = 0;
-@@ -1249,6 +1249,51 @@
+@@ -1287,6 +1287,51 @@
        debug3("%s: user %sauthenticated",__func__, authenticated ? "" : "not ");
        return (authenticated);
 }
@@ -2235,7 +2281,7 @@ Index: b/monitor_wrap.h
 ===================================================================
 --- a/monitor_wrap.h
 +++ b/monitor_wrap.h
-@@ -57,8 +57,10 @@
+@@ -58,8 +58,10 @@
 OM_uint32 mm_ssh_gssapi_server_ctx(Gssctxt **, gss_OID);
 OM_uint32 mm_ssh_gssapi_accept_ctx(Gssctxt *,
    gss_buffer_desc *, gss_buffer_desc *, OM_uint32 *);
@@ -2280,7 +2326,7 @@ Index: b/readconf.c
 #endif
        { "fallbacktorsh", oDeprecated },
        { "usersh", oDeprecated },
-@@ -479,10 +490,30 @@
+@@ -482,10 +493,30 @@
                intptr = &options->gss_authentication;
                goto parse_flag;
 
@@ -2311,7 +2357,7 @@ Index: b/readconf.c
        case oBatchMode:
                intptr = &options->batch_mode;
                goto parse_flag;
-@@ -1092,7 +1123,12 @@
+@@ -1138,7 +1169,12 @@
        options->pubkey_authentication = -1;
        options->challenge_response_authentication = -1;
        options->gss_authentication = -1;
@@ -2324,7 +2370,7 @@ Index: b/readconf.c
        options->password_authentication = -1;
        options->kbd_interactive_authentication = -1;
        options->kbd_interactive_devices = NULL;
-@@ -1193,8 +1229,14 @@
+@@ -1238,8 +1274,14 @@
                options->challenge_response_authentication = 1;
        if (options->gss_authentication == -1)
                options->gss_authentication = 0;
@@ -2343,7 +2389,7 @@ Index: b/readconf.h
 ===================================================================
 --- a/readconf.h
 +++ b/readconf.h
-@@ -46,7 +46,12 @@
+@@ -47,7 +47,12 @@
        int     challenge_response_authentication;
                                        /* Try S/Key or TIS, authentication. */
        int     gss_authentication;     /* Try GSS authentication */
@@ -2371,7 +2417,7 @@ Index: b/servconf.c
        options->password_authentication = -1;
        options->kbd_interactive_authentication = -1;
        options->challenge_response_authentication = -1;
-@@ -226,8 +229,14 @@
+@@ -225,8 +228,14 @@
                options->kerberos_get_afs_token = 0;
        if (options->gss_authentication == -1)
                options->gss_authentication = 0;
@@ -2386,10 +2432,10 @@ Index: b/servconf.c
        if (options->password_authentication == -1)
                options->password_authentication = 1;
        if (options->kbd_interactive_authentication == -1)
-@@ -322,7 +331,9 @@
+@@ -318,7 +327,9 @@
        sBanner, sUseDNS, sHostbasedAuthentication,
        sHostbasedUsesNameFromPacketOnly, sClientAliveInterval,
-        sClientAliveCountMax, sAuthorizedKeysFile, sAuthorizedKeysFile2,
+        sClientAliveCountMax, sAuthorizedKeysFile,
 -       sGssAuthentication, sGssCleanupCreds, sAcceptEnv, sPermitTunnel,
 +       sGssAuthentication, sGssCleanupCreds, sGssStrictAcceptor,
 +       sGssKeyEx, sGssStoreRekey,
@@ -2397,7 +2443,7 @@ Index: b/servconf.c
        sMatch, sPermitOpen, sForceCommand, sChrootDirectory,
        sUsePrivilegeSeparation, sAllowAgentForwarding,
        sZeroKnowledgePasswordAuthentication, sHostCertificate,
-@@ -386,10 +397,20 @@
+@@ -382,10 +393,20 @@
 #ifdef GSSAPI
        { "gssapiauthentication", sGssAuthentication, SSHCFG_ALL },
        { "gssapicleanupcredentials", sGssCleanupCreds, SSHCFG_GLOBAL },
@@ -2418,7 +2464,7 @@ Index: b/servconf.c
        { "passwordauthentication", sPasswordAuthentication, SSHCFG_ALL },
        { "kbdinteractiveauthentication", sKbdInteractiveAuthentication, SSHCFG_ALL },
        { "challengeresponseauthentication", sChallengeResponseAuthentication, SSHCFG_GLOBAL },
-@@ -944,10 +965,22 @@
+@@ -962,10 +983,22 @@
                intptr = &options->gss_authentication;
                goto parse_flag;
 
@@ -2441,7 +2487,7 @@ Index: b/servconf.c
        case sPasswordAuthentication:
                intptr = &options->password_authentication;
                goto parse_flag;
-@@ -1704,7 +1737,10 @@
+@@ -1720,7 +1753,10 @@
 #endif
 #ifdef GSSAPI
        dump_cfg_fmtint(sGssAuthentication, o->gss_authentication);
@@ -2456,7 +2502,7 @@ Index: b/servconf.h
 ===================================================================
 --- a/servconf.h
 +++ b/servconf.h
-@@ -97,7 +97,10 @@
+@@ -103,7 +103,10 @@
        int     kerberos_get_afs_token;         /* If true, try to get AFS token if
                                                 * authenticated with Kerberos. */
        int     gss_authentication;     /* If true, permit GSSAPI authentication */
@@ -2585,7 +2631,7 @@ Index: b/ssh_config.5
 ===================================================================
 --- a/ssh_config.5
 +++ b/ssh_config.5
-@@ -508,11 +508,43 @@
+@@ -527,11 +527,43 @@
 The default is
 .Dq no .
 Note that this option applies to protocol version 2 only.
@@ -2634,7 +2680,7 @@ Index: b/sshconnect2.c
 ===================================================================
 --- a/sshconnect2.c
 +++ b/sshconnect2.c
-@@ -159,9 +159,34 @@
+@@ -160,9 +160,34 @@
 {
        Kex *kex;
 
@@ -2669,7 +2715,7 @@ Index: b/sshconnect2.c
        if (options.ciphers == (char *)-1) {
                logit("No valid ciphers for protocol version 2 given, using defaults.");
                options.ciphers = NULL;
-@@ -196,6 +221,17 @@
+@@ -197,6 +222,17 @@
        if (options.kex_algorithms != NULL)
                myproposal[PROPOSAL_KEX_ALGS] = options.kex_algorithms;
 
@@ -2687,7 +2733,7 @@ Index: b/sshconnect2.c
        if (options.rekey_limit)
                packet_set_rekey_limit((u_int32_t)options.rekey_limit);
 
-@@ -206,10 +242,30 @@
+@@ -207,10 +243,30 @@
        kex->kex[KEX_DH_GEX_SHA1] = kexgex_client;
        kex->kex[KEX_DH_GEX_SHA256] = kexgex_client;
        kex->kex[KEX_ECDH_SHA2] = kexecdh_client;
@@ -2718,7 +2764,7 @@ Index: b/sshconnect2.c
        xxx_kex = kex;
 
        dispatch_run(DISPATCH_BLOCK, &kex->done, kex);
-@@ -304,6 +360,7 @@
+@@ -305,6 +361,7 @@
 void   input_gssapi_hash(int type, u_int32_t, void *);
 void   input_gssapi_error(int, u_int32_t, void *);
 void   input_gssapi_errtok(int, u_int32_t, void *);
@@ -2726,7 +2772,7 @@ Index: b/sshconnect2.c
 #endif
 
 void   userauth(Authctxt *, char *);
-@@ -319,6 +376,11 @@
+@@ -320,6 +377,11 @@
 
 Authmethod authmethods[] = {
 #ifdef GSSAPI
@@ -2738,7 +2784,7 @@ Index: b/sshconnect2.c
        {"gssapi-with-mic",
                userauth_gssapi,
                NULL,
-@@ -625,19 +687,31 @@
+@@ -626,19 +688,31 @@
        static u_int mech = 0;
        OM_uint32 min;
        int ok = 0;
@@ -2772,7 +2818,7 @@ Index: b/sshconnect2.c
                        ok = 1; /* Mechanism works */
                } else {
                        mech++;
-@@ -734,8 +808,8 @@
+@@ -735,8 +809,8 @@
 {
        Authctxt *authctxt = ctxt;
        Gssctxt *gssctxt;
@@ -2783,7 +2829,7 @@ Index: b/sshconnect2.c
 
        if (authctxt == NULL)
                fatal("input_gssapi_response: no authentication context");
-@@ -845,6 +919,48 @@
+@@ -846,6 +920,48 @@
        xfree(msg);
        xfree(lang);
 }
@@ -2836,8 +2882,8 @@ Index: b/sshd.c
 ===================================================================
 --- a/sshd.c
 +++ b/sshd.c
-@@ -120,6 +120,10 @@
+@@ -121,6 +121,10 @@
- #include "roaming.h"
+ #include "ssh-sandbox.h"
 #include "version.h"
 
 +#ifdef USE_SECURITY_SESSION_API
@@ -2847,7 +2893,7 @@ Index: b/sshd.c
 #ifdef LIBWRAP
 #include <tcpd.h>
 #include <syslog.h>
-@@ -1590,10 +1594,13 @@
+@@ -1612,10 +1616,13 @@
                logit("Disabling protocol version 1. Could not load host key");
                options.protocol &= ~SSH_PROTO_1;
        }
@@ -2861,7 +2907,7 @@ Index: b/sshd.c
        if (!(options.protocol & (SSH_PROTO_1|SSH_PROTO_2))) {
                logit("sshd: no hostkeys available -- exiting.");
                exit(1);
-@@ -1922,6 +1929,60 @@
+@@ -1944,6 +1951,60 @@
        /* Log the connection. */
        verbose("Connection from %.500s port %d", remote_ip, remote_port);
 
@@ -2922,7 +2968,7 @@ Index: b/sshd.c
        /*
         * We don't want to listen forever unless the other side
         * successfully authenticates itself.  So we set up an alarm which is
-@@ -2303,6 +2364,48 @@
+@@ -2325,6 +2386,48 @@
 
        myproposal[PROPOSAL_SERVER_HOST_KEY_ALGS] = list_hostkey_types();
 
@@ -2971,7 +3017,7 @@ Index: b/sshd.c
        /* start key exchange */
        kex = kex_setup(myproposal);
        kex->kex[KEX_DH_GRP1_SHA1] = kexdh_server;
-@@ -2310,6 +2413,13 @@
+@@ -2332,6 +2435,13 @@
        kex->kex[KEX_DH_GEX_SHA1] = kexgex_server;
        kex->kex[KEX_DH_GEX_SHA256] = kexgex_server;
        kex->kex[KEX_ECDH_SHA2] = kexecdh_server;
@@ -2989,7 +3035,7 @@ Index: b/sshd_config
 ===================================================================
 --- a/sshd_config
 +++ b/sshd_config
-@@ -72,6 +72,8 @@
+@@ -75,6 +75,8 @@
 # GSSAPI options
 #GSSAPIAuthentication no
 #GSSAPICleanupCredentials yes
@@ -3002,7 +3048,7 @@ Index: b/sshd_config.5
 ===================================================================
 --- a/sshd_config.5
 +++ b/sshd_config.5
-@@ -423,12 +423,40 @@
+@@ -424,12 +424,40 @@
 The default is
 .Dq no .
 Note that this option applies to protocol version 2 only.
diff --git a/debian/patches/hostbased-ecdsa.patch b/debian/patches/hostbased-ecdsa.patch
deleted file mode 100644
index fb618940a..000000000
--- a/debian/patches/hostbased-ecdsa.patch
+++ /dev/null
@@ -1,71 +0,0 @@
-Description: Make hostbased auth with ECDSA keys work correctly
-Author: Harv <harvey.eneman@oracle.com>
-Author: Damien Miller <djm@mindrot.org>
-Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1858
-Bug-Debian: http://bugs.debian.org/633368
-Origin: upstream, http://bazaar.launchpad.net/~vcs-imports/openssh/main/revision/6327
-Applied-Upstream: yes
-Forwarded: not-needed
-Last-Update: 2011-07-17
-Index: b/ssh-keysign.c
-===================================================================
--- a/ssh-keysign.c
-+++ b/ssh-keysign.c
-@@ -150,9 +150,10 @@
- {
-        Buffer b;
-        Options options;
-       Key *keys[2], *key = NULL;
-+#define NUM_KEYTYPES 3
-+       Key *keys[NUM_KEYTYPES], *key = NULL;
-        struct passwd *pw;
-       int key_fd[2], i, found, version = 2, fd;
-+       int key_fd[NUM_KEYTYPES], i, found, version = 2, fd;
-        u_char *signature, *data;
-        char *host;
-        u_int slen, dlen;
-@@ -165,8 +166,10 @@
-        if (fd > 2)
-                close(fd);
- 
-       key_fd[0] = open(_PATH_HOST_RSA_KEY_FILE, O_RDONLY);
-       key_fd[1] = open(_PATH_HOST_DSA_KEY_FILE, O_RDONLY);
-+       i = 0;
-+       key_fd[i++] = open(_PATH_HOST_DSA_KEY_FILE, O_RDONLY);
-+       key_fd[i++] = open(_PATH_HOST_ECDSA_KEY_FILE, O_RDONLY);
-+       key_fd[i++] = open(_PATH_HOST_RSA_KEY_FILE, O_RDONLY);
- 
-        original_real_uid = getuid();   /* XXX readconf.c needs this */
-        if ((pw = getpwuid(original_real_uid)) == NULL)
-@@ -191,7 +194,11 @@
-                fatal("ssh-keysign not enabled in %s",
-                    _PATH_HOST_CONFIG_FILE);
- 
-       if (key_fd[0] == -1 && key_fd[1] == -1)
-+       for (i = found = 0; i < NUM_KEYTYPES; i++) {
-+               if (key_fd[i] != -1)
-+                       found = 1;
-+       }
-+       if (found == 0)
-                fatal("could not open any host key");
- 
-        OpenSSL_add_all_algorithms();
-@@ -200,7 +207,7 @@
-        RAND_seed(rnd, sizeof(rnd));
- 
-        found = 0;
-       for (i = 0; i < 2; i++) {
-+       for (i = 0; i < NUM_KEYTYPES; i++) {
-                keys[i] = NULL;
-                if (key_fd[i] == -1)
-                        continue;
-@@ -230,7 +237,7 @@
-        xfree(host);
- 
-        found = 0;
-       for (i = 0; i < 2; i++) {
-+       for (i = 0; i < NUM_KEYTYPES; i++) {
-                if (keys[i] != NULL &&
-                    key_equal_public(key, keys[i])) {
-                        found = 1;
diff --git a/debian/patches/keepalive-extensions.patch b/debian/patches/keepalive-extensions.patch
index 89011cfb7..d8362de70 100644
--- a/debian/patches/keepalive-extensions.patch
+++ b/debian/patches/keepalive-extensions.patch
@@ -21,21 +21,21 @@ Index: b/readconf.c
 @@ -138,6 +138,7 @@
        oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand,
        oVisualHostKey, oUseRoaming, oZeroKnowledgePasswordAuthentication,
-        oKexAlgorithms, oIPQoS,
+        oKexAlgorithms, oIPQoS, oRequestTTY,
 +       oProtocolKeepAlives, oSetupTimeOut,
        oDeprecated, oUnsupported
 } OpCodes;
 
-@@ -258,6 +259,8 @@
+@@ -259,6 +260,8 @@
- #endif
        { "kexalgorithms", oKexAlgorithms },
        { "ipqos", oIPQoS },
+        { "requesttty", oRequestTTY },
 +       { "protocolkeepalives", oProtocolKeepAlives },
 +       { "setuptimeout", oSetupTimeOut },
 
        { NULL, oBadOption }
 };
-@@ -888,6 +891,8 @@
+@@ -914,6 +917,8 @@
                goto parse_flag;
 
        case oServerAliveInterval:
@@ -44,7 +44,7 @@ Index: b/readconf.c
                intptr = &options->server_alive_interval;
                goto parse_time;
 
-@@ -1336,8 +1341,13 @@
+@@ -1385,8 +1390,13 @@
                options->rekey_limit = 0;
        if (options->verify_host_key_dns == -1)
                options->verify_host_key_dns = 0;
@@ -64,7 +64,7 @@ Index: b/ssh_config.5
 ===================================================================
 --- a/ssh_config.5
 +++ b/ssh_config.5
-@@ -127,8 +127,12 @@
+@@ -136,8 +136,12 @@
 If set to
 .Dq yes ,
 passphrase/password querying will be disabled.
@@ -78,7 +78,7 @@ Index: b/ssh_config.5
 The argument must be
 .Dq yes
 or
-@@ -1058,8 +1062,15 @@
+@@ -1100,8 +1104,15 @@
 will send a message through the encrypted
 channel to request a response from the server.
 The default
@@ -95,7 +95,7 @@ Index: b/ssh_config.5
 .It Cm StrictHostKeyChecking
 If this flag is set to
 .Dq yes ,
-@@ -1098,6 +1109,12 @@
+@@ -1140,6 +1151,12 @@
 other side.
 If they are sent, death of the connection or crash of one
 of the machines will be properly noticed.
@@ -112,7 +112,7 @@ Index: b/sshd_config.5
 ===================================================================
 --- a/sshd_config.5
 +++ b/sshd_config.5
-@@ -1034,6 +1034,9 @@
+@@ -1037,6 +1037,9 @@
 .Pp
 To disable TCP keepalive messages, the value should be set to
 .Dq no .
diff --git a/debian/patches/lintian-symlink-pickiness.patch b/debian/patches/lintian-symlink-pickiness.patch
index 6e161f451..7ee91cce8 100644
--- a/debian/patches/lintian-symlink-pickiness.patch
+++ b/debian/patches/lintian-symlink-pickiness.patch
@@ -9,7 +9,7 @@ Index: b/Makefile.in
 ===================================================================
 --- a/Makefile.in
 +++ b/Makefile.in
-@@ -299,9 +299,9 @@
+@@ -282,9 +282,9 @@
        $(INSTALL) -m 644 ssh-pkcs11-helper.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-pkcs11-helper.8
        $(INSTALL) -m 644 ssh-vulnkey.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-vulnkey.1
        -rm -f $(DESTDIR)$(bindir)/slogin
diff --git a/debian/patches/openbsd-docs.patch b/debian/patches/openbsd-docs.patch
index fc07e8861..bda5f0c24 100644
--- a/debian/patches/openbsd-docs.patch
+++ b/debian/patches/openbsd-docs.patch
@@ -13,28 +13,28 @@ Index: b/moduli.5
 --- a/moduli.5
 +++ b/moduli.5
 @@ -21,7 +21,7 @@
- .Nd Diffie Hellman moduli
+ .Nd Diffie-Hellman moduli
 .Sh DESCRIPTION
 The
 -.Pa /etc/moduli
 +.Pa /etc/ssh/moduli
- file contains prime numbers and generators for use by 
+ file contains prime numbers and generators for use by
 .Xr sshd 8
 in the Diffie-Hellman Group Exchange key exchange method.
-@@ -111,7 +111,7 @@
+@@ -110,7 +110,7 @@
- Diffie Hellman output to sufficiently key the selected symmetric cipher.
+ Diffie-Hellman output to sufficiently key the selected symmetric cipher.
 .Xr sshd 8
 then randomly selects a modulus from
 -.Fa /etc/moduli
 +.Fa /etc/ssh/moduli
 that best meets the size requirement.
- .Pp
 .Sh SEE ALSO
+ .Xr ssh-keygen 1 ,
 Index: b/ssh-keygen.1
 ===================================================================
 --- a/ssh-keygen.1
 +++ b/ssh-keygen.1
-@@ -147,9 +147,7 @@
+@@ -149,9 +149,7 @@
 .Pa ~/.ssh/id_dsa
 or
 .Pa ~/.ssh/id_rsa .
@@ -45,22 +45,40 @@ Index: b/ssh-keygen.1
 .Pp
 Normally this program generates the key and asks for a file in which
 to store the private key.
-@@ -393,9 +391,7 @@
+@@ -197,9 +195,7 @@
- .It Fl q
+ For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys
- Silence
+ do not exist, generate the host keys with the default key file path,
- .Nm ssh-keygen .
+ an empty passphrase, default bits for the key type, and default comment.
-Used by
+-This is used by
 -.Pa /etc/rc
-when creating a new key.
+-to generate new host keys.
-+Used by system administration scripts when creating a new key.
+This is used by system administration scripts to generate new host keys.
- .It Fl R Ar hostname
+ .It Fl a Ar trials
- Removes all keys belonging to
+ Specifies the number of primality tests to perform when screening DH-GEX
- .Ar hostname
+ candidates using the
+@@ -535,7 +531,7 @@
+ Valid generator values are 2, 3, and 5.
+ .Pp
+ Screened DH groups may be installed in
+-.Pa /etc/moduli .
+.Pa /etc/ssh/moduli .
+ It is important that this file contains moduli of a range of bit lengths and
+ that both ends of a connection share common moduli.
+ .Sh CERTIFICATES
+@@ -661,7 +657,7 @@
+ where the user wishes to log in using public key authentication.
+ There is no need to keep the contents of this file secret.
+ .Pp
+-.It Pa /etc/moduli
+.It Pa /etc/ssh/moduli
+ Contains Diffie-Hellman groups used for DH-GEX.
+ The file format is described in
+ .Xr moduli 5 .
 Index: b/ssh.1
 ===================================================================
 --- a/ssh.1
 +++ b/ssh.1
-@@ -726,6 +726,10 @@
+@@ -731,6 +731,10 @@
 .Sx HISTORY
 section of
 .Xr ssl 8
@@ -84,7 +102,7 @@ Index: b/sshd.8
 It forks a new
 daemon for each incoming connection.
 The forked daemons handle
-@@ -850,7 +850,7 @@
+@@ -853,7 +853,7 @@
 .Xr ssh 1 ) .
 It should only be writable by root.
 .Pp
@@ -93,7 +111,7 @@ Index: b/sshd.8
 Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange".
 The file format is described in
 .Xr moduli 5 .
-@@ -948,7 +948,6 @@
+@@ -951,7 +951,6 @@
 .Xr ssh-vulnkey 1 ,
 .Xr chroot 2 ,
 .Xr hosts_access 5 ,
@@ -105,7 +123,7 @@ Index: b/sshd_config.5
 ===================================================================
 --- a/sshd_config.5
 +++ b/sshd_config.5
-@@ -221,8 +221,7 @@
+@@ -222,8 +222,7 @@
 By default, no banner is displayed.
 .It Cm ChallengeResponseAuthentication
 Specifies whether challenge-response authentication is allowed (e.g. via
diff --git a/debian/patches/package-versioning.patch b/debian/patches/package-versioning.patch
index 0bcc7ed3b..6dd0cf78d 100644
--- a/debian/patches/package-versioning.patch
+++ b/debian/patches/package-versioning.patch
@@ -24,7 +24,7 @@ Index: b/sshd.c
 ===================================================================
 --- a/sshd.c
 +++ b/sshd.c
-@@ -422,7 +422,7 @@
+@@ -423,7 +423,7 @@
                minor = PROTOCOL_MINOR_1;
        }
        snprintf(buf, sizeof buf, "SSH-%d.%d-%.100s%s", major, minor,
@@ -38,9 +38,9 @@ Index: b/version.h
 --- a/version.h
 +++ b/version.h
 @@ -3,4 +3,9 @@
- #define SSH_VERSION    "OpenSSH_5.8"
+ #define SSH_VERSION    "OpenSSH_5.9"
 
- #define SSH_PORTABLE   "p1"
+ #define SSH_PORTABLE   "p2"
 -#define SSH_RELEASE    SSH_VERSION SSH_PORTABLE
 +#define SSH_RELEASE_MINIMUM    SSH_VERSION SSH_PORTABLE
 +#ifdef SSH_EXTRAVERSION
diff --git a/debian/patches/quieter-signals.patch b/debian/patches/quieter-signals.patch
index f8bc5fd4e..ff41f094d 100644
--- a/debian/patches/quieter-signals.patch
+++ b/debian/patches/quieter-signals.patch
@@ -16,7 +16,7 @@ Index: b/clientloop.c
 ===================================================================
 --- a/clientloop.c
 +++ b/clientloop.c
-@@ -1594,8 +1594,10 @@
+@@ -1619,8 +1619,10 @@
                exit_status = 0;
        }
 
diff --git a/debian/patches/selinux-build-failure.patch b/debian/patches/selinux-build-failure.patch
deleted file mode 100644
index 6c99e3f38..000000000
--- a/debian/patches/selinux-build-failure.patch
+++ /dev/null
@@ -1,19 +0,0 @@
-Description: Fix SELinux build failure
-Origin: other, https://bugzilla.mindrot.org/attachment.cgi?id=1991&action=diff
-Author: Leonardo Chiqitto <leonardo@ngdn.org>
-Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1851
-Last-Update: 2011-02-05
-Index: b/openbsd-compat/port-linux.c
-===================================================================
--- a/openbsd-compat/port-linux.c
-+++ b/openbsd-compat/port-linux.c
-@@ -226,7 +226,7 @@
- 
-        if (!ssh_selinux_enabled())
-                return;
-       if (path == NULL)
-+       if (path == NULL) {
-                setfscreatecon(NULL);
-                return;
-        }
diff --git a/debian/patches/selinux-role.patch b/debian/patches/selinux-role.patch
index 70364f9d5..b14402199 100644
--- a/debian/patches/selinux-role.patch
+++ b/debian/patches/selinux-role.patch
@@ -92,7 +92,7 @@ Index: b/monitor.c
 ===================================================================
 --- a/monitor.c
 +++ b/monitor.c
-@@ -137,6 +137,7 @@
+@@ -145,6 +145,7 @@
 int mm_answer_pwnamallow(int, Buffer *);
 int mm_answer_auth2_read_banner(int, Buffer *);
 int mm_answer_authserv(int, Buffer *);
@@ -100,7 +100,7 @@ Index: b/monitor.c
 int mm_answer_authpassword(int, Buffer *);
 int mm_answer_bsdauthquery(int, Buffer *);
 int mm_answer_bsdauthrespond(int, Buffer *);
-@@ -215,6 +216,7 @@
+@@ -225,6 +226,7 @@
     {MONITOR_REQ_SIGN, MON_ONCE, mm_answer_sign},
     {MONITOR_REQ_PWNAM, MON_ONCE, mm_answer_pwnamallow},
     {MONITOR_REQ_AUTHSERV, MON_ONCE, mm_answer_authserv},
@@ -108,15 +108,15 @@ Index: b/monitor.c
     {MONITOR_REQ_AUTH2_READ_BANNER, MON_ONCE, mm_answer_auth2_read_banner},
     {MONITOR_REQ_AUTHPASSWORD, MON_AUTH, mm_answer_authpassword},
 #ifdef USE_PAM
-@@ -699,6 +701,7 @@
+@@ -810,6 +812,7 @@
        else {
                /* Allow service/style information on the auth context */
                monitor_permit(mon_dispatch, MONITOR_REQ_AUTHSERV, 1);
 +               monitor_permit(mon_dispatch, MONITOR_REQ_AUTHROLE, 1);
                monitor_permit(mon_dispatch, MONITOR_REQ_AUTH2_READ_BANNER, 1);
        }
- 
+ #ifdef USE_PAM
-@@ -732,14 +735,37 @@
+@@ -842,14 +845,37 @@
 
        authctxt->service = buffer_get_string(m, NULL);
        authctxt->style = buffer_get_string(m, NULL);
@@ -156,7 +156,7 @@ Index: b/monitor.c
        return (0);
 }
 
-@@ -1327,7 +1353,7 @@
+@@ -1437,7 +1463,7 @@
        res = pty_allocate(&s->ptyfd, &s->ttyfd, s->tty, sizeof(s->tty));
        if (res == 0)
                goto error;
@@ -182,7 +182,7 @@ Index: b/monitor_wrap.c
 ===================================================================
 --- a/monitor_wrap.c
 +++ b/monitor_wrap.c
-@@ -280,10 +280,10 @@
+@@ -318,10 +318,10 @@
        return (banner);
 }
 
@@ -195,7 +195,7 @@ Index: b/monitor_wrap.c
 {
        Buffer m;
 
-@@ -292,11 +292,29 @@
+@@ -330,11 +330,29 @@
        buffer_init(&m);
        buffer_put_cstring(&m, service);
        buffer_put_cstring(&m, style ? style : "");
@@ -229,7 +229,7 @@ Index: b/monitor_wrap.h
 ===================================================================
 --- a/monitor_wrap.h
 +++ b/monitor_wrap.h
-@@ -40,7 +40,8 @@
+@@ -41,7 +41,8 @@
 int mm_is_monitor(void);
 DH *mm_choose_dh(int, int, int);
 int mm_key_sign(Key *, u_char **, u_int *, u_char *, u_int);
@@ -256,7 +256,7 @@ Index: b/openbsd-compat/port-linux.c
 #include "log.h"
 #include "xmalloc.h"
 #include "port-linux.h"
-@@ -54,9 +60,9 @@
+@@ -58,9 +64,9 @@
 
 /* Return the default security context for the given username */
 static security_context_t
@@ -268,7 +268,7 @@ Index: b/openbsd-compat/port-linux.c
        char *sename = NULL, *lvl = NULL;
        int r;
 
-@@ -69,9 +75,16 @@
+@@ -73,9 +79,16 @@
 #endif
 
 #ifdef HAVE_GET_DEFAULT_CONTEXT_WITH_LEVEL
@@ -287,7 +287,7 @@ Index: b/openbsd-compat/port-linux.c
 #endif
 
        if (r != 0) {
-@@ -102,7 +115,7 @@
+@@ -106,7 +119,7 @@
 
 /* Set the execution context to the default for the specified user */
 void
@@ -296,7 +296,7 @@ Index: b/openbsd-compat/port-linux.c
 {
        security_context_t user_ctx = NULL;
 
-@@ -111,7 +124,7 @@
+@@ -115,7 +128,7 @@
 
        debug3("%s: setting execution context", __func__);
 
@@ -305,7 +305,7 @@ Index: b/openbsd-compat/port-linux.c
        if (setexeccon(user_ctx) != 0) {
                switch (security_getenforce()) {
                case -1:
-@@ -133,7 +146,7 @@
+@@ -137,7 +150,7 @@
 
 /* Set the TTY context for the specified user */
 void
@@ -314,7 +314,7 @@ Index: b/openbsd-compat/port-linux.c
 {
        security_context_t new_tty_ctx = NULL;
        security_context_t user_ctx = NULL;
-@@ -144,7 +157,7 @@
+@@ -148,7 +161,7 @@
 
        debug3("%s: setting TTY context on %s", __func__, tty);
 
@@ -377,7 +377,7 @@ Index: b/session.c
 ===================================================================
 --- a/session.c
 +++ b/session.c
-@@ -1467,7 +1467,7 @@
+@@ -1471,7 +1471,7 @@
 
 /* Set login name, uid, gid, and groups. */
 void
@@ -386,7 +386,7 @@ Index: b/session.c
 {
        char *chroot_path, *tmp;
 
-@@ -1495,7 +1495,7 @@
+@@ -1499,7 +1499,7 @@
                endgrent();
 #endif
 
@@ -395,7 +395,7 @@ Index: b/session.c
 
                if (options.chroot_directory != NULL &&
                    strcasecmp(options.chroot_directory, "none") != 0) {
-@@ -1618,7 +1618,7 @@
+@@ -1625,7 +1625,7 @@
 
        /* Force a password change */
        if (s->authctxt->force_pwchange) {
@@ -404,7 +404,7 @@ Index: b/session.c
                child_close_fds();
                do_pwchange(s);
                exit(1);
-@@ -1645,7 +1645,7 @@
+@@ -1652,7 +1652,7 @@
                /* When PAM is enabled we rely on it to do the nologin check */
                if (!options.use_pam)
                        do_nologin(pw);
@@ -413,7 +413,7 @@ Index: b/session.c
                /*
                 * PAM session modules in do_setusercontext may have
                 * generated messages, so if this in an interactive
-@@ -2057,7 +2057,7 @@
+@@ -2064,7 +2064,7 @@
        tty_parse_modes(s->ttyfd, &n_bytes);
 
        if (!use_privsep)
@@ -439,7 +439,7 @@ Index: b/sshd.c
 ===================================================================
 --- a/sshd.c
 +++ b/sshd.c
-@@ -707,7 +707,7 @@
+@@ -730,7 +730,7 @@
        RAND_seed(rnd, sizeof(rnd));
 
        /* Drop privileges */
diff --git a/debian/patches/series b/debian/patches/series
index 3450e4c55..2be7cf10a 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,6 +1,5 @@
 # GSSAPI
 gssapi.patch
-gssapi-autoconf.patch
 # SELinux
 selinux-role.patch
@@ -37,9 +36,6 @@ ssh-argv0.patch
 doc-hash-tab-completion.patch
 # Miscellaneous bug fixes
-selinux-build-failure.patch
-ssh-add-fifo.patch
-hostbased-ecdsa.patch
 auth-log-verbosity.patch
 # Debian-specific configuration
diff --git a/debian/patches/shell-path.patch b/debian/patches/shell-path.patch
index 5100d8ec7..8c549128b 100644
--- a/debian/patches/shell-path.patch
+++ b/debian/patches/shell-path.patch
@@ -19,7 +19,7 @@ Index: b/sshconnect.c
                perror(argv[0]);
                exit(1);
        }
-@@ -1274,7 +1274,7 @@
+@@ -1273,7 +1273,7 @@
        if (pid == 0) {
                signal(SIGPIPE, SIG_DFL);
                debug3("Executing %s -c \"%s\"", shell, args);
diff --git a/debian/patches/ssh-add-fifo.patch b/debian/patches/ssh-add-fifo.patch
deleted file mode 100644
index deac58e75..000000000
--- a/debian/patches/ssh-add-fifo.patch
+++ /dev/null
@@ -1,37 +0,0 @@
-Description: Allow ssh-add to read from FIFOs
-Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
-Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1869
-Bug-Debian: http://bugs.debian.org/614897
-Origin: other, https://bugzilla.mindrot.org/attachment.cgi?id=2002&action=diff
-Forwarded: yes
-Last-Update: 2011-03-18
-Index: b/authfile.c
-===================================================================
--- a/authfile.c
-+++ b/authfile.c
-@@ -317,7 +317,7 @@
- static int
- key_load_file(int fd, const char *filename, Buffer *blob)
- {
-       size_t len;
-+       size_t len, readcount;
-        u_char *cp;
-        struct stat st;
- 
-@@ -337,11 +337,14 @@
-                return 0;
-        }
-        len = (size_t)st.st_size;               /* truncated */
-+       if (0 == len && S_ISFIFO(st.st_mode))
-+               len = 8192; /* we will try reading up to 8KiB from a FIFO */
- 
-        buffer_init(blob);
-        cp = buffer_append_space(blob, len);
- 
-       if (atomicio(read, fd, cp, len) != len) {
-+       readcount = atomicio(read, fd, cp, len);
-+       if (readcount != len && !(readcount > 0 && S_ISFIFO(st.st_mode))) {
-                debug("%s: read from key file %.200s%sfailed: %.100s", __func__,
-                    filename == NULL ? "" : filename,
-                    filename == NULL ? "" : " ",
diff --git a/debian/patches/ssh-argv0.patch b/debian/patches/ssh-argv0.patch
index 43d9d4d44..a7750ed23 100644
--- a/debian/patches/ssh-argv0.patch
+++ b/debian/patches/ssh-argv0.patch
@@ -11,7 +11,7 @@ Index: b/ssh.1
 ===================================================================
 --- a/ssh.1
 +++ b/ssh.1
-@@ -1406,6 +1406,7 @@
+@@ -1411,6 +1411,7 @@
 .Xr sftp 1 ,
 .Xr ssh-add 1 ,
 .Xr ssh-agent 1 ,
diff --git a/debian/patches/ssh-vulnkey.patch b/debian/patches/ssh-vulnkey.patch
index f3e08b06d..4245319c3 100644
--- a/debian/patches/ssh-vulnkey.patch
+++ b/debian/patches/ssh-vulnkey.patch
@@ -14,47 +14,45 @@ Index: b/Makefile.in
 ===================================================================
 --- a/Makefile.in
 +++ b/Makefile.in
-@@ -27,6 +27,7 @@
+@@ -26,6 +26,7 @@
+ SFTP_SERVER=$(libexecdir)/sftp-server
 SSH_KEYSIGN=$(libexecdir)/ssh-keysign
 SSH_PKCS11_HELPER=$(libexecdir)/ssh-pkcs11-helper
- RAND_HELPER=$(libexecdir)/ssh-rand-helper
 +SSH_DATADIR=$(datadir)/ssh
 PRIVSEP_PATH=@PRIVSEP_PATH@
 SSH_PRIVSEP_USER=@SSH_PRIVSEP_USER@
 STRIP_OPT=@STRIP_OPT@
-@@ -39,7 +40,8 @@
+@@ -38,6 +39,7 @@
        -D_PATH_SSH_PKCS11_HELPER=\"$(SSH_PKCS11_HELPER)\" \
        -D_PATH_SSH_PIDDIR=\"$(piddir)\" \
        -D_PATH_PRIVSEP_CHROOT_DIR=\"$(PRIVSEP_PATH)\" \
-       -DSSH_RAND_HELPER=\"$(RAND_HELPER)\"
+       -D_PATH_SSH_DATADIR=\"$(SSH_DATADIR)\" \
-+       -DSSH_RAND_HELPER=\"$(RAND_HELPER)\" \
-+       -D_PATH_SSH_DATADIR=\"$(SSH_DATADIR)\"
 
 CC=@CC@
 LD=@LD@
-@@ -64,7 +66,7 @@
+@@ -59,7 +61,7 @@
- INSTALL_SSH_PRNG_CMDS=@INSTALL_SSH_PRNG_CMDS@
+ EXEEXT=@EXEEXT@
- INSTALL_SSH_RAND_HELPER=@INSTALL_SSH_RAND_HELPER@
+ MANFMT=@MANFMT@
 
-TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-pkcs11-helper$(EXEEXT) ssh-agent$(EXEEXT) scp$(EXEEXT) ssh-rand-helper${EXEEXT} sftp-server$(EXEEXT) sftp$(EXEEXT)
+-TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-pkcs11-helper$(EXEEXT) ssh-agent$(EXEEXT) scp$(EXEEXT) sftp-server$(EXEEXT) sftp$(EXEEXT)
-+TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-pkcs11-helper$(EXEEXT) ssh-agent$(EXEEXT) scp$(EXEEXT) ssh-rand-helper${EXEEXT} sftp-server$(EXEEXT) sftp$(EXEEXT) ssh-vulnkey$(EXEEXT)
+TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-pkcs11-helper$(EXEEXT) ssh-agent$(EXEEXT) scp$(EXEEXT) sftp-server$(EXEEXT) sftp$(EXEEXT) ssh-vulnkey$(EXEEXT)
 
 LIBSSH_OBJS=acss.o authfd.o authfile.o bufaux.o bufbn.o buffer.o \
        canohost.o channels.o cipher.o cipher-acss.o cipher-aes.o \
-@@ -97,8 +99,8 @@
+@@ -93,8 +95,8 @@
-        sftp-server.o sftp-common.o \
+        roaming_common.o roaming_serv.o \
-        roaming_common.o roaming_serv.o
+        sandbox-null.o sandbox-rlimit.o sandbox-systrace.o sandbox-darwin.o
 
-MANPAGES       = moduli.5.out scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-rand-helper.8.out ssh-keysign.8.out ssh-pkcs11-helper.8.out sshd_config.5.out ssh_config.5.out
+-MANPAGES       = moduli.5.out scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-keysign.8.out ssh-pkcs11-helper.8.out sshd_config.5.out ssh_config.5.out
-MANPAGES_IN    = moduli.5 scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-rand-helper.8 ssh-keysign.8 ssh-pkcs11-helper.8 sshd_config.5 ssh_config.5
+-MANPAGES_IN    = moduli.5 scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-keysign.8 ssh-pkcs11-helper.8 sshd_config.5 ssh_config.5
-+MANPAGES       = moduli.5.out scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-rand-helper.8.out ssh-keysign.8.out ssh-pkcs11-helper.8.out ssh-vulnkey.1.out sshd_config.5.out ssh_config.5.out
+MANPAGES       = moduli.5.out scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-keysign.8.out ssh-pkcs11-helper.8.out ssh-vulnkey.1.out sshd_config.5.out ssh_config.5.out
-+MANPAGES_IN    = moduli.5 scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-rand-helper.8 ssh-keysign.8 ssh-pkcs11-helper.8 ssh-vulnkey.1 sshd_config.5 ssh_config.5
+MANPAGES_IN    = moduli.5 scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-keysign.8 ssh-pkcs11-helper.8 ssh-vulnkey.1 sshd_config.5 ssh_config.5
 MANTYPE                = @MANTYPE@
 
 CONFIGFILES=sshd_config.out ssh_config.out moduli.out
-@@ -179,6 +181,9 @@
+@@ -171,6 +173,9 @@
- ssh-rand-helper${EXEEXT}: $(LIBCOMPAT) libssh.a ssh-rand-helper.o
+ sftp$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-client.o sftp-common.o sftp-glob.o progressmeter.o
-        $(LD) -o $@ ssh-rand-helper.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS)
+        $(LD) -o $@ progressmeter.o sftp.o sftp-client.o sftp-common.o sftp-glob.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) $(LIBEDIT)
 
 +ssh-vulnkey$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-vulnkey.o
 +       $(LD) -o $@ ssh-vulnkey.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS)
@@ -62,7 +60,7 @@ Index: b/Makefile.in
 # test driver for the loginrec code - not built by default
 logintest: logintest.o $(LIBCOMPAT) libssh.a loginrec.o
        $(LD) -o $@ logintest.o $(LDFLAGS) loginrec.o -lopenbsd-compat -lssh $(LIBS)
-@@ -273,6 +278,7 @@
+@@ -259,6 +264,7 @@
        $(INSTALL) -m 0755 $(STRIP_OPT) ssh-pkcs11-helper$(EXEEXT) $(DESTDIR)$(SSH_PKCS11_HELPER)$(EXEEXT)
        $(INSTALL) -m 0755 $(STRIP_OPT) sftp$(EXEEXT) $(DESTDIR)$(bindir)/sftp$(EXEEXT)
        $(INSTALL) -m 0755 $(STRIP_OPT) sftp-server$(EXEEXT) $(DESTDIR)$(SFTP_SERVER)$(EXEEXT)
@@ -70,7 +68,7 @@ Index: b/Makefile.in
        $(INSTALL) -m 644 ssh.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh.1
        $(INSTALL) -m 644 scp.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/scp.1
        $(INSTALL) -m 644 ssh-add.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-add.1
-@@ -290,6 +296,7 @@
+@@ -273,6 +279,7 @@
        $(INSTALL) -m 644 sftp-server.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8
        $(INSTALL) -m 644 ssh-keysign.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8
        $(INSTALL) -m 644 ssh-pkcs11-helper.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-pkcs11-helper.8
@@ -78,7 +76,7 @@ Index: b/Makefile.in
        -rm -f $(DESTDIR)$(bindir)/slogin
        ln -s ./ssh$(EXEEXT) $(DESTDIR)$(bindir)/slogin
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/slogin.1
-@@ -379,6 +386,7 @@
+@@ -354,6 +361,7 @@
        -rm -f $(DESTDIR)$(bindir)/ssh-agent$(EXEEXT)
        -rm -f $(DESTDIR)$(bindir)/ssh-keygen$(EXEEXT)
        -rm -f $(DESTDIR)$(bindir)/ssh-keyscan$(EXEEXT)
@@ -86,14 +84,14 @@ Index: b/Makefile.in
        -rm -f $(DESTDIR)$(bindir)/sftp$(EXEEXT)
        -rm -f $(DESTDIR)$(sbindir)/sshd$(EXEEXT)
        -rm -r $(DESTDIR)$(SFTP_SERVER)$(EXEEXT)
-@@ -392,6 +400,7 @@
+@@ -366,6 +374,7 @@
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keygen.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/sftp.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keyscan.1
 +       -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-vulnkey.1
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/sshd.8
-        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-rand-helper.8
        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8
+        -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8
 Index: b/auth-rh-rsa.c
 ===================================================================
 --- a/auth-rh-rsa.c
@@ -111,7 +109,7 @@ Index: b/auth-rsa.c
 ===================================================================
 --- a/auth-rsa.c
 +++ b/auth-rsa.c
-@@ -247,7 +247,7 @@
+@@ -233,7 +233,7 @@
                            file, linenum, BN_num_bits(key->rsa->n), bits);
 
                /* Never accept a revoked key */
@@ -132,7 +130,7 @@ Index: b/auth.c
 #include "auth.h"
 #include "auth-options.h"
 #include "canohost.h"
-@@ -621,10 +622,34 @@
+@@ -606,10 +607,34 @@
 
 /* Returns 1 if key is revoked by revoked_keys_file, 0 otherwise */
 int
@@ -172,7 +170,7 @@ Index: b/auth.h
 ===================================================================
 --- a/auth.h
 +++ b/auth.h
-@@ -175,7 +175,7 @@
+@@ -174,7 +174,7 @@
 
 FILE   *auth_openkeyfile(const char *, struct passwd *, int);
 FILE   *auth_openprincipals(const char *, struct passwd *, int);
@@ -199,7 +197,7 @@ Index: b/auth2-pubkey.c
 --- a/auth2-pubkey.c
 +++ b/auth2-pubkey.c
 @@ -439,9 +439,10 @@
-        int success;
+        u_int success, i;
        char *file;
 
 -       if (auth_key_is_revoked(key))
@@ -221,9 +219,9 @@ Index: b/authfile.c
 #include "atomicio.h"
 +#include "pathnames.h"
 
- /* Version identification string for SSH v1 identity files. */
+ #define MAX_KEY_FILE_SIZE      (1024 * 1024)
- static const char authfile_id_string[] =
+ 
-@@ -906,3 +907,140 @@
+@@ -944,3 +945,140 @@
        return ret;
 }
 
@@ -368,7 +366,7 @@ Index: b/authfile.h
 ===================================================================
 --- a/authfile.h
 +++ b/authfile.h
-@@ -26,4 +26,6 @@
+@@ -28,4 +28,6 @@
 int     key_perm_ok(int, const char *);
 int     key_in_file(Key *, const char *, int);
 
@@ -420,7 +418,7 @@ Index: b/readconf.c
        { "rsaauthentication", oRSAAuthentication },
        { "pubkeyauthentication", oPubkeyAuthentication },
        { "dsaauthentication", oPubkeyAuthentication },             /* alias */
-@@ -486,6 +488,10 @@
+@@ -489,6 +491,10 @@
                intptr = &options->challenge_response_authentication;
                goto parse_flag;
 
@@ -431,7 +429,7 @@ Index: b/readconf.c
        case oGssAuthentication:
                intptr = &options->gss_authentication;
                goto parse_flag;
-@@ -1134,6 +1140,7 @@
+@@ -1180,6 +1186,7 @@
        options->kbd_interactive_devices = NULL;
        options->rhosts_rsa_authentication = -1;
        options->hostbased_authentication = -1;
@@ -439,7 +437,7 @@ Index: b/readconf.c
        options->batch_mode = -1;
        options->check_host_ip = -1;
        options->strict_host_key_checking = -1;
-@@ -1245,6 +1252,8 @@
+@@ -1290,6 +1297,8 @@
                options->rhosts_rsa_authentication = 0;
        if (options->hostbased_authentication == -1)
                options->hostbased_authentication = 0;
@@ -452,7 +450,7 @@ Index: b/readconf.h
 ===================================================================
 --- a/readconf.h
 +++ b/readconf.h
-@@ -57,6 +57,7 @@
+@@ -58,6 +58,7 @@
        int     kbd_interactive_authentication; /* Try keyboard-interactive auth. */
        char    *kbd_interactive_devices; /* Keyboard-interactive auth devices. */
        int     zero_knowledge_password_authentication; /* Try jpake */
@@ -472,7 +470,7 @@ Index: b/servconf.c
        options->permit_empty_passwd = -1;
        options->permit_user_env = -1;
        options->use_login = -1;
-@@ -243,6 +244,8 @@
+@@ -242,6 +243,8 @@
                options->kbd_interactive_authentication = 0;
        if (options->challenge_response_authentication == -1)
                options->challenge_response_authentication = 1;
@@ -481,7 +479,7 @@ Index: b/servconf.c
        if (options->permit_empty_passwd == -1)
                options->permit_empty_passwd = 0;
        if (options->permit_user_env == -1)
-@@ -322,7 +325,7 @@
+@@ -318,7 +321,7 @@
        sListenAddress, sAddressFamily,
        sPrintMotd, sPrintLastLog, sIgnoreRhosts,
        sX11Forwarding, sX11DisplayOffset, sX11UseLocalhost,
@@ -490,7 +488,7 @@ Index: b/servconf.c
        sPermitUserEnvironment, sUseLogin, sAllowTcpForwarding, sCompression,
        sAllowUsers, sDenyUsers, sAllowGroups, sDenyGroups,
        sIgnoreUserKnownHosts, sCiphers, sMacs, sProtocol, sPidFile,
-@@ -432,6 +435,7 @@
+@@ -428,6 +431,7 @@
        { "x11uselocalhost", sX11UseLocalhost, SSHCFG_ALL },
        { "xauthlocation", sXAuthLocation, SSHCFG_GLOBAL },
        { "strictmodes", sStrictModes, SSHCFG_GLOBAL },
@@ -498,7 +496,7 @@ Index: b/servconf.c
        { "permitemptypasswords", sEmptyPasswd, SSHCFG_ALL },
        { "permituserenvironment", sPermitUserEnvironment, SSHCFG_GLOBAL },
        { "uselogin", sUseLogin, SSHCFG_GLOBAL },
-@@ -1029,6 +1033,10 @@
+@@ -1047,6 +1051,10 @@
                intptr = &options->tcp_keep_alive;
                goto parse_flag;
 
@@ -509,7 +507,7 @@ Index: b/servconf.c
        case sEmptyPasswd:
                intptr = &options->permit_empty_passwd;
                goto parse_flag;
-@@ -1757,6 +1765,7 @@
+@@ -1773,6 +1781,7 @@
        dump_cfg_fmtint(sX11UseLocalhost, o->x11_use_localhost);
        dump_cfg_fmtint(sStrictModes, o->strict_modes);
        dump_cfg_fmtint(sTCPKeepAlive, o->tcp_keep_alive);
@@ -521,7 +519,7 @@ Index: b/servconf.h
 ===================================================================
 --- a/servconf.h
 +++ b/servconf.h
-@@ -107,6 +107,7 @@
+@@ -113,6 +113,7 @@
        int     challenge_response_authentication;
        int     zero_knowledge_password_authentication;
                                        /* If true, permit jpake auth */
@@ -564,10 +562,10 @@ Index: b/ssh-add.c
 +       char *comment = NULL, *fp;
        char msg[1024], *certpath;
        int fd, perms_ok, ret = -1;
- 
+        Buffer keyblob;
-@@ -187,6 +187,14 @@
+@@ -218,6 +218,14 @@
-                            "Bad passphrase, try again for %.200s: ", comment);
+        } else {
-                }
+                fprintf(stderr, "Could not add identity: %s\n", filename);
        }
 +       if (blacklisted_key(private, &fp) == 1) {
 +               fprintf(stderr, "Public key %s blacklisted (see "
@@ -578,13 +576,13 @@ Index: b/ssh-add.c
 +               return -1;
 +       }
 
-        if (ssh_add_identity_constrained(ac, private, comment, lifetime,
+ 
-            confirm)) {
+        /* Now try to add the certificate flavour too */
 Index: b/ssh-keygen.1
 ===================================================================
 --- a/ssh-keygen.1
 +++ b/ssh-keygen.1
-@@ -659,6 +659,7 @@
+@@ -670,6 +670,7 @@
 .Xr ssh 1 ,
 .Xr ssh-add 1 ,
 .Xr ssh-agent 1 ,
@@ -843,7 +841,7 @@ Index: b/ssh-vulnkey.c
 ===================================================================
 --- /dev/null
 +++ b/ssh-vulnkey.c
-@@ -0,0 +1,388 @@
+@@ -0,0 +1,387 @@
 +/*
 + * Copyright (c) 2008 Canonical Ltd.  All rights reserved.
 + *
@@ -1157,7 +1155,6 @@ Index: b/ssh-vulnkey.c
 +       /* We don't need the RNG ourselves, but symbol references here allow
 +        * ld to link us properly.
 +        */
-+       init_rng();
 +       seed_rng();
 +
 +       while ((opt = getopt(argc, argv, "ahqv")) != -1) {
@@ -1236,7 +1233,7 @@ Index: b/ssh.1
 ===================================================================
 --- a/ssh.1
 +++ b/ssh.1
-@@ -1402,6 +1402,7 @@
+@@ -1407,6 +1407,7 @@
 .Xr ssh-agent 1 ,
 .Xr ssh-keygen 1 ,
 .Xr ssh-keyscan 1 ,
@@ -1248,7 +1245,7 @@ Index: b/ssh.c
 ===================================================================
 --- a/ssh.c
 +++ b/ssh.c
-@@ -1445,7 +1445,7 @@
+@@ -1476,7 +1476,7 @@
 static void
 load_public_identity_files(void)
 {
@@ -1257,7 +1254,7 @@ Index: b/ssh.c
        char *pwdir = NULL, *pwname = NULL;
        int i = 0;
        Key *public;
-@@ -1502,6 +1502,22 @@
+@@ -1533,6 +1533,22 @@
                public = key_load_public(filename, NULL);
                debug("identity file %s type %d", filename,
                    public ? public->type : -1);
@@ -1284,7 +1281,7 @@ Index: b/ssh_config.5
 ===================================================================
 --- a/ssh_config.5
 +++ b/ssh_config.5
-@@ -1146,6 +1146,23 @@
+@@ -1188,6 +1188,23 @@
 .Dq any .
 The default is
 .Dq any:any .
@@ -1312,7 +1309,7 @@ Index: b/sshconnect2.c
 ===================================================================
 --- a/sshconnect2.c
 +++ b/sshconnect2.c
-@@ -1488,6 +1488,8 @@
+@@ -1489,6 +1489,8 @@
 
        /* list of keys stored in the filesystem */
        for (i = 0; i < options.num_identity_files; i++) {
@@ -1321,7 +1318,7 @@ Index: b/sshconnect2.c
                key = options.identity_keys[i];
                if (key && key->type == KEY_RSA1)
                        continue;
-@@ -1581,7 +1583,7 @@
+@@ -1582,7 +1584,7 @@
                        debug("Offering %s public key: %s", key_type(id->key),
                            id->filename);
                        sent = send_pubkey_test(authctxt, id);
@@ -1334,7 +1331,7 @@ Index: b/sshd.8
 ===================================================================
 --- a/sshd.8
 +++ b/sshd.8
-@@ -945,6 +945,7 @@
+@@ -948,6 +948,7 @@
 .Xr ssh-agent 1 ,
 .Xr ssh-keygen 1 ,
 .Xr ssh-keyscan 1 ,
@@ -1346,7 +1343,7 @@ Index: b/sshd.c
 ===================================================================
 --- a/sshd.c
 +++ b/sshd.c
-@@ -1576,6 +1576,11 @@
+@@ -1598,6 +1598,11 @@
                        sensitive_data.host_keys[i] = NULL;
                        continue;
                }
@@ -1362,7 +1359,7 @@ Index: b/sshd_config.5
 ===================================================================
 --- a/sshd_config.5
 +++ b/sshd_config.5
-@@ -792,6 +792,20 @@
+@@ -795,6 +795,20 @@
 Specifies whether password authentication is allowed.
 The default is
 .Dq yes .
diff --git a/debian/patches/ssh1-keepalive.patch b/debian/patches/ssh1-keepalive.patch
index 5f1caddc9..d5a7fe07a 100644
--- a/debian/patches/ssh1-keepalive.patch
+++ b/debian/patches/ssh1-keepalive.patch
@@ -7,7 +7,7 @@ Index: b/clientloop.c
 ===================================================================
 --- a/clientloop.c
 +++ b/clientloop.c
-@@ -547,16 +547,21 @@
+@@ -545,16 +545,21 @@
 static void
 server_alive_check(void)
 {
@@ -38,7 +38,7 @@ Index: b/clientloop.c
 }
 
 /*
-@@ -616,7 +621,7 @@
+@@ -614,7 +619,7 @@
         */
 
        timeout_secs = INT_MAX; /* we use INT_MAX to mean no timeout */
@@ -51,7 +51,7 @@ Index: b/ssh_config.5
 ===================================================================
 --- a/ssh_config.5
 +++ b/ssh_config.5
-@@ -1047,7 +1047,10 @@
+@@ -1089,7 +1089,10 @@
 .Cm ServerAliveCountMax
 is left at the default, if the server becomes unresponsive,
 ssh will disconnect after approximately 45 seconds.
diff --git a/debian/patches/syslog-level-silent.patch b/debian/patches/syslog-level-silent.patch
index 9b560217f..90ddca4ad 100644
--- a/debian/patches/syslog-level-silent.patch
+++ b/debian/patches/syslog-level-silent.patch
@@ -14,7 +14,7 @@ Index: b/log.c
 ===================================================================
 --- a/log.c
 +++ b/log.c
-@@ -90,6 +90,7 @@
+@@ -92,6 +92,7 @@
        LogLevel val;
 } log_levels[] =
 {
@@ -26,10 +26,10 @@ Index: b/ssh.c
 ===================================================================
 --- a/ssh.c
 +++ b/ssh.c
-@@ -641,7 +641,7 @@
+@@ -678,7 +678,7 @@
-                tty_flag = 0;
        /* Do not allocate a tty if stdin is not a tty. */
-        if ((!isatty(fileno(stdin)) || stdin_null_flag) && !force_tty_flag) {
+        if ((!isatty(fileno(stdin)) || stdin_null_flag) &&
+            options.request_tty != REQUEST_TTY_FORCE) {
 -               if (tty_flag)
 +               if (tty_flag && options.log_level != SYSLOG_LEVEL_QUIET)
                        logit("Pseudo-terminal will not be allocated because "
diff --git a/debian/patches/user-group-modes.patch b/debian/patches/user-group-modes.patch
index fe2d99be0..01ba05526 100644
--- a/debian/patches/user-group-modes.patch
+++ b/debian/patches/user-group-modes.patch
@@ -24,7 +24,7 @@ Index: b/readconf.c
 
 #include "xmalloc.h"
 #include "ssh.h"
-@@ -1085,8 +1087,7 @@
+@@ -1131,8 +1133,7 @@
 
                if (fstat(fileno(f), &sb) == -1)
                        fatal("fstat %s: %s", filename, strerror(errno));
@@ -38,7 +38,7 @@ Index: b/ssh.1
 ===================================================================
 --- a/ssh.1
 +++ b/ssh.1
-@@ -1293,6 +1293,8 @@
+@@ -1298,6 +1298,8 @@
 .Xr ssh_config 5 .
 Because of the potential for abuse, this file must have strict permissions:
 read/write for the user, and not accessible by others.
@@ -51,7 +51,7 @@ Index: b/ssh_config.5
 ===================================================================
 --- a/ssh_config.5
 +++ b/ssh_config.5
-@@ -1299,6 +1299,8 @@
+@@ -1343,6 +1343,8 @@
 This file is used by the SSH client.
 Because of the potential for abuse, this file must have strict permissions:
 read/write for the user, and not accessible by others.
@@ -64,7 +64,7 @@ Index: b/auth.c
 ===================================================================
 --- a/auth.c
 +++ b/auth.c
-@@ -392,8 +392,7 @@
+@@ -380,8 +380,7 @@
                user_hostfile = tilde_expand_filename(userfile, pw->pw_uid);
                if (options.strict_modes &&
                    (stat(user_hostfile, &st) == 0) &&
@@ -74,7 +74,7 @@ Index: b/auth.c
                        logit("Authentication refused for %.100s: "
                            "bad owner or modes for %.200s",
                            pw->pw_name, user_hostfile);
-@@ -454,8 +453,7 @@
+@@ -442,8 +441,7 @@
 
        /* check the open file to avoid races */
        if (fstat(fileno(f), &st) < 0 ||
@@ -84,9 +84,9 @@ Index: b/auth.c
                snprintf(err, errlen, "bad ownership or modes for file %s",
                    buf);
                return -1;
-@@ -471,8 +469,7 @@
+@@ -458,8 +456,7 @@
+                strlcpy(buf, cp, sizeof(buf));
 
-                debug3("secure_filename: checking '%s'", buf);
                if (stat(buf, &st) < 0 ||
 -                   (st.st_uid != 0 && st.st_uid != uid) ||
 -                   (st.st_mode & 022) != 0) {
@@ -169,7 +169,7 @@ Index: b/misc.h
 ===================================================================
 --- a/misc.h
 +++ b/misc.h
-@@ -102,4 +102,6 @@
+@@ -103,4 +103,6 @@
 int     ask_permission(const char *, ...) __attribute__((format(printf, 1, 2)));
 int     read_keyfile_line(FILE *, const char *, char *, size_t, u_long *);
 
diff --git a/debian/rules b/debian/rules
index eb895e0c3..ce56fdea4 100755
--- a/debian/rules
+++ b/debian/rules
@@ -80,7 +80,6 @@ confflags += --disable-strip
 confflags += --with-mantype=doc
 confflags += --with-4in6
 confflags += --with-privsep-path=/var/run/sshd
-confflags += --without-rand-helper
 # The Hurd needs libcrypt for res_query et al.
 ifeq ($(DEB_HOST_ARCH_OS),hurd)
diff --git a/defines.h b/defines.h
index cd273066d..e4ccc5407 100644
--- a/defines.h
+++ b/defines.h
@@ -25,7 +25,7 @@
 #ifndef _DEFINES_H
 #define _DEFINES_H
-/* $Id: defines.h,v 1.164 2011/01/17 10:15:31 dtucker Exp $ */
+/* $Id: defines.h,v 1.167 2011/06/03 01:17:49 tim Exp $ */
 /* Constants */
@@ -45,6 +45,8 @@ enum
 /*
 * Definitions for IP type of service (ip_tos)
 */
+#include <netinet/in_systm.h>
+#include <netinet/ip.h>
 #ifndef IPTOS_LOWDELAY
 # define IPTOS_LOWDELAY          0x10
 # define IPTOS_THROUGHPUT        0x08
@@ -56,8 +58,6 @@ enum
 /*
 * Definitions for DiffServ Codepoints as per RFC2474
 */
-#include <netinet/in_systm.h>
-#include <netinet/ip.h>
 #ifndef IPTOS_DSCP_AF11
 # define        IPTOS_DSCP_AF11         0x28
 # define        IPTOS_DSCP_AF12         0x30
@@ -131,6 +131,10 @@ enum
 # define O_NONBLOCK      00004  /* Non Blocking Open */
 #endif
+#ifndef S_IFSOCK
+# define S_IFSOCK 0
+#endif /* S_IFSOCK */
 #ifndef S_ISDIR
 # define S_ISDIR(mode)  (((mode) & (_S_IFMT)) == (_S_IFDIR))
 #endif /* S_ISDIR */
@@ -385,18 +389,15 @@ struct winsize {
 # define _PATH_DEVNULL "/dev/null"
 #endif
-#ifndef MAIL_DIRECTORY
+/* user may have set a different path */
-# define MAIL_DIRECTORY "/var/spool/mail"
+#if defined(_PATH_MAILDIR) && defined(MAIL_DIRECTORY)
-#endif
+# undef _PATH_MAILDIR MAILDIR
+#endif /* defined(_PATH_MAILDIR) && defined(MAIL_DIRECTORY) */
-#ifndef MAILDIR
+#ifdef MAIL_DIRECTORY
-# define MAILDIR MAIL_DIRECTORY
+# define _PATH_MAILDIR MAIL_DIRECTORY
 #endif
-#if !defined(_PATH_MAILDIR) && defined(MAILDIR)
-# define _PATH_MAILDIR MAILDIR
-#endif /* !defined(_PATH_MAILDIR) && defined(MAILDIR) */
 #ifndef _PATH_NOLOGIN
 # define _PATH_NOLOGIN "/etc/nologin"
 #endif
diff --git a/entropy.c b/entropy.c
index a82166258..2d6d3ec52 100644
--- a/entropy.c
+++ b/entropy.c
@@ -25,19 +25,19 @@
 #include "includes.h"
 #include <sys/types.h>
-#include <sys/wait.h>
+#include <sys/socket.h>
+#ifdef HAVE_SYS_UN_H
-#ifdef HAVE_SYS_STAT_H
+# include <sys/un.h>
-# include <sys/stat.h>
 #endif
-#ifdef HAVE_FCNTL_H
+#include <netinet/in.h>
-# include <fcntl.h>
+#include <arpa/inet.h>
-#endif
-#include <stdarg.h>
+#include <errno.h>
-#include <string.h>
 #include <signal.h>
+#include <string.h>
 #include <unistd.h>
+#include <stddef.h> /* for offsetof */
 #include <openssl/rand.h>
 #include <openssl/crypto.h>
@@ -54,118 +54,128 @@
 /*
 * Portable OpenSSH PRNG seeding:
 * If OpenSSL has not "internally seeded" itself (e.g. pulled data from
- * /dev/random), then we execute a "ssh-rand-helper" program which
+ * /dev/random), then collect RANDOM_SEED_SIZE bytes of randomness from
- * collects entropy and writes it to stdout. The child program must
+ * PRNGd.
- * write at least RANDOM_SEED_SIZE bytes. The child is run with stderr
- * attached, so error/debugging output should be visible.
- *
- * XXX: we should tell the child how many bytes we need.
 */
 #ifndef OPENSSL_PRNG_ONLY
 #define RANDOM_SEED_SIZE 48
-static uid_t original_uid, original_euid;
-#endif
-void
+/*
-seed_rng(void)
+ * Collect 'len' bytes of entropy into 'buf' from PRNGD/EGD daemon
+ * listening either on 'tcp_port', or via Unix domain socket at *
+ * 'socket_path'.
+ * Either a non-zero tcp_port or a non-null socket_path must be
+ * supplied.
+ * Returns 0 on success, -1 on error
+ */
+int
+get_random_bytes_prngd(unsigned char *buf, int len,
+    unsigned short tcp_port, char *socket_path)
 {
-#ifndef OPENSSL_PRNG_ONLY
+        int fd, addr_len, rval, errors;
-        int devnull;
+        u_char msg[2];
-        int p[2];
+        struct sockaddr_storage addr;
-        pid_t pid;
+        struct sockaddr_in *addr_in = (struct sockaddr_in *)&addr;
-        int ret;
+        struct sockaddr_un *addr_un = (struct sockaddr_un *)&addr;
-        unsigned char buf[RANDOM_SEED_SIZE];
+        mysig_t old_sigpipe;
-        mysig_t old_sigchld;
+        /* Sanity checks */
+        if (socket_path == NULL && tcp_port == 0)
+                fatal("You must specify a port or a socket");
+        if (socket_path != NULL &&
+            strlen(socket_path) >= sizeof(addr_un->sun_path))
+                fatal("Random pool path is too long");
+        if (len <= 0 || len > 255)
+                fatal("Too many bytes (%d) to read from PRNGD", len);
+        memset(&addr, '\0', sizeof(addr));
+        if (tcp_port != 0) {
+                addr_in->sin_family = AF_INET;
+                addr_in->sin_addr.s_addr = htonl(INADDR_LOOPBACK);
+                addr_in->sin_port = htons(tcp_port);
+                addr_len = sizeof(*addr_in);
+        } else {
+                addr_un->sun_family = AF_UNIX;
+                strlcpy(addr_un->sun_path, socket_path,
+                    sizeof(addr_un->sun_path));
+                addr_len = offsetof(struct sockaddr_un, sun_path) +
+                    strlen(socket_path) + 1;
+        }
-        if (RAND_status() == 1) {
+        old_sigpipe = mysignal(SIGPIPE, SIG_IGN);
-                debug3("RNG is ready, skipping seeding");
-                return;
+        errors = 0;
+        rval = -1;
+reopen:
+        fd = socket(addr.ss_family, SOCK_STREAM, 0);
+        if (fd == -1) {
+                error("Couldn't create socket: %s", strerror(errno));
+                goto done;
        }
-        debug3("Seeding PRNG from %s", SSH_RAND_HELPER);
+        if (connect(fd, (struct sockaddr*)&addr, addr_len) == -1) {
+                if (tcp_port != 0) {
-        if ((devnull = open("/dev/null", O_RDWR)) == -1)
+                        error("Couldn't connect to PRNGD port %d: %s",
-                fatal("Couldn't open /dev/null: %s", strerror(errno));
+                            tcp_port, strerror(errno));
-        if (pipe(p) == -1)
+                } else {
-                fatal("pipe: %s", strerror(errno));
+                        error("Couldn't connect to PRNGD socket \"%s\": %s",
+                            addr_un->sun_path, strerror(errno));
-        old_sigchld = signal(SIGCHLD, SIG_DFL);
-        if ((pid = fork()) == -1)
-                fatal("Couldn't fork: %s", strerror(errno));
-        if (pid == 0) {
-                dup2(devnull, STDIN_FILENO);
-                dup2(p[1], STDOUT_FILENO);
-                /* Keep stderr open for errors */
-                close(p[0]);
-                close(p[1]);
-                close(devnull);
-                if (original_uid != original_euid &&
-                    ( seteuid(getuid()) == -1 ||
-                      setuid(original_uid) == -1) ) {
-                        fprintf(stderr, "(rand child) setuid(%li): %s\n",
-                            (long int)original_uid, strerror(errno));
-                        _exit(1);
                }
+                goto done;
-                execl(SSH_RAND_HELPER, "ssh-rand-helper", NULL);
-                fprintf(stderr, "(rand child) Couldn't exec '%s': %s\n",
-                    SSH_RAND_HELPER, strerror(errno));
-                _exit(1);
        }
-        close(devnull);
+        /* Send blocking read request to PRNGD */
-        close(p[1]);
+        msg[0] = 0x02;
+        msg[1] = len;
-        memset(buf, '\0', sizeof(buf));
+        if (atomicio(vwrite, fd, msg, sizeof(msg)) != sizeof(msg)) {
-        ret = atomicio(read, p[0], buf, sizeof(buf));
+                if (errno == EPIPE && errors < 10) {
-        if (ret == -1)
+                        close(fd);
-                fatal("Couldn't read from ssh-rand-helper: %s",
+                        errors++;
+                        goto reopen;
+                }
+                error("Couldn't write to PRNGD socket: %s",
                    strerror(errno));
-        if (ret != sizeof(buf))
+                goto done;
-                fatal("ssh-rand-helper child produced insufficient data");
+        }
-        close(p[0]);
-        if (waitpid(pid, &ret, 0) == -1)
+        if (atomicio(read, fd, buf, len) != (size_t)len) {
-                fatal("Couldn't wait for ssh-rand-helper completion: %s",
+                if (errno == EPIPE && errors < 10) {
+                        close(fd);
+                        errors++;
+                        goto reopen;
+                }
+                error("Couldn't read from PRNGD socket: %s",
                    strerror(errno));
-        signal(SIGCHLD, old_sigchld);
+                goto done;
+        }
-        /* We don't mind if the child exits upon a SIGPIPE */
-        if (!WIFEXITED(ret) &&
-            (!WIFSIGNALED(ret) || WTERMSIG(ret) != SIGPIPE))
-                fatal("ssh-rand-helper terminated abnormally");
-        if (WEXITSTATUS(ret) != 0)
-                fatal("ssh-rand-helper exit with exit status %d", ret);
-        RAND_add(buf, sizeof(buf), sizeof(buf));
-        memset(buf, '\0', sizeof(buf));
-#endif /* OPENSSL_PRNG_ONLY */
+        rval = 0;
-        if (RAND_status() != 1)
+done:
-                fatal("PRNG is not seeded");
+        mysignal(SIGPIPE, old_sigpipe);
+        if (fd != -1)
+                close(fd);
+        return rval;
 }
-void
+static int
-init_rng(void)
+seed_from_prngd(unsigned char *buf, size_t bytes)
 {
-        /*
+#ifdef PRNGD_PORT
-         * OpenSSL version numbers: MNNFFPPS: major minor fix patch status
+        debug("trying egd/prngd port %d", PRNGD_PORT);
-         * We match major, minor, fix and status (not patch)
+        if (get_random_bytes_prngd(buf, bytes, PRNGD_PORT, NULL) == 0)
-         */
+                return 0;
-        if ((SSLeay() ^ OPENSSL_VERSION_NUMBER) & ~0xff0L)
+#endif
-                fatal("OpenSSL version mismatch. Built against %lx, you "
+#ifdef PRNGD_SOCKET
-                    "have %lx", (u_long)OPENSSL_VERSION_NUMBER, SSLeay());
+        debug("trying egd/prngd socket %s", PRNGD_SOCKET);
+        if (get_random_bytes_prngd(buf, bytes, 0, PRNGD_SOCKET) == 0)
-#ifndef OPENSSL_PRNG_ONLY
+                return 0;
-        original_uid = getuid();
-        original_euid = geteuid();
 #endif
+        return -1;
 }
-#ifndef OPENSSL_PRNG_ONLY
 void
 rexec_send_rng_seed(Buffer *m)
 {
@@ -191,4 +201,34 @@ rexec_recv_rng_seed(Buffer *m)
                RAND_add(buf, len, len);
        }
 }
+#endif /* OPENSSL_PRNG_ONLY */
+void
+seed_rng(void)
+{
+#ifndef OPENSSL_PRNG_ONLY
+        unsigned char buf[RANDOM_SEED_SIZE];
 #endif
+        /*
+         * OpenSSL version numbers: MNNFFPPS: major minor fix patch status
+         * We match major, minor, fix and status (not patch)
+         */
+        if ((SSLeay() ^ OPENSSL_VERSION_NUMBER) & ~0xff0L)
+                fatal("OpenSSL version mismatch. Built against %lx, you "
+                    "have %lx", (u_long)OPENSSL_VERSION_NUMBER, SSLeay());
+#ifndef OPENSSL_PRNG_ONLY
+        if (RAND_status() == 1) {
+                debug3("RNG is ready, skipping seeding");
+                return;
+        }
+        if (seed_from_prngd(buf, sizeof(buf)) == -1)
+                fatal("Could not obtain seed from PRNGd");
+        RAND_add(buf, sizeof(buf), sizeof(buf));
+        memset(buf, '\0', sizeof(buf));
+#endif /* OPENSSL_PRNG_ONLY */
+        if (RAND_status() != 1)
+                fatal("PRNG is not seeded");
+}
diff --git a/gss-serv.c b/gss-serv.c
index 365e48d88..380895ea5 100644
--- a/gss-serv.c
+++ b/gss-serv.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: gss-serv.c,v 1.22 2008/05/08 12:02:23 djm Exp $ */
+/* $OpenBSD: gss-serv.c,v 1.23 2011/08/01 19:18:15 markus Exp $ */
 /*
 * Copyright (c) 2001-2009 Simon Wilkinson. All rights reserved.
@@ -266,6 +266,8 @@ ssh_gssapi_parse_ename(Gssctxt *ctx, gss_buffer_t ename, gss_buffer_t name)
        name->length = get_u32(tok+offset);
        offset += 4;
+        if (UINT_MAX - offset < name->length)
+                return GSS_S_FAILURE;
        if (ename->length < offset+name->length)
                return GSS_S_FAILURE;
diff --git a/key.c b/key.c
index d30dc5c3c..fc65c2948 100644
--- a/key.c
+++ b/key.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: key.c,v 1.96 2011/02/04 00:44:21 djm Exp $ */
+/* $OpenBSD: key.c,v 1.97 2011/05/17 07:13:31 djm Exp $ */
 /*
 * read_bignum():
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -1821,6 +1821,9 @@ key_to_certified(Key *k, int legacy)
                k->type = legacy ? KEY_DSA_CERT_V00 : KEY_DSA_CERT;
                return 0;
        case KEY_ECDSA:
+                if (legacy)
+                        fatal("%s: legacy ECDSA certificates are not supported",
+                            __func__);
                k->cert = cert_new();
                k->type = KEY_ECDSA_CERT;
                return 0;
diff --git a/log.c b/log.c
index d8a1f734e..201740893 100644
--- a/log.c
+++ b/log.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: log.c,v 1.41 2008/06/10 04:50:25 dtucker Exp $ */
+/* $OpenBSD: log.c,v 1.42 2011/06/17 21:44:30 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -56,6 +56,8 @@ static LogLevel log_level = SYSLOG_LEVEL_INFO;
 static int log_on_stderr = 1;
 static int log_facility = LOG_AUTH;
 static char *argv0;
+static log_handler_fn *log_handler;
+static void *log_handler_ctx;
 extern char *__progname;
@@ -261,6 +263,9 @@ log_init(char *av0, LogLevel level, SyslogFacility facility, int on_stderr)
                exit(1);
        }
+        log_handler = NULL;
+        log_handler_ctx = NULL;
        log_on_stderr = on_stderr;
        if (on_stderr)
                return;
@@ -328,6 +333,23 @@ log_init(char *av0, LogLevel level, SyslogFacility facility, int on_stderr)
 #define MSGBUFSIZ 1024
 void
+set_log_handler(log_handler_fn *handler, void *ctx)
+{
+        log_handler = handler;
+        log_handler_ctx = ctx;
+}
+void
+do_log2(LogLevel level, const char *fmt,...)
+{
+        va_list args;
+        va_start(args, fmt);
+        do_log(level, fmt, args);
+        va_end(args);
+}
+void
 do_log(LogLevel level, const char *fmt, va_list args)
 {
 #if defined(HAVE_OPENLOG_R) && defined(SYSLOG_DATA_INIT)
@@ -338,6 +360,7 @@ do_log(LogLevel level, const char *fmt, va_list args)
        char *txt = NULL;
        int pri = LOG_INFO;
        int saved_errno = errno;
+        log_handler_fn *tmp_handler;
        if (level > log_level)
                return;
@@ -376,7 +399,7 @@ do_log(LogLevel level, const char *fmt, va_list args)
                pri = LOG_ERR;
                break;
        }
-        if (txt != NULL) {
+        if (txt != NULL && log_handler == NULL) {
                snprintf(fmtbuf, sizeof(fmtbuf), "%s: %s", txt, fmt);
                vsnprintf(msgbuf, sizeof(msgbuf), fmtbuf, args);
        } else {
@@ -384,7 +407,13 @@ do_log(LogLevel level, const char *fmt, va_list args)
        }
        strnvis(fmtbuf, msgbuf, sizeof(fmtbuf),
            log_on_stderr ? LOG_STDERR_VIS : LOG_SYSLOG_VIS);
-        if (log_on_stderr) {
+        if (log_handler != NULL) {
+                /* Avoid recursion */
+                tmp_handler = log_handler;
+                log_handler = NULL;
+                tmp_handler(level, fmtbuf, log_handler_ctx);
+                log_handler = tmp_handler;
+        } else if (log_on_stderr) {
                snprintf(msgbuf, sizeof msgbuf, "%s\r\n", fmtbuf);
                write(STDERR_FILENO, msgbuf, strlen(msgbuf));
        } else {
diff --git a/log.h b/log.h
index 650582791..1b8d2142b 100644
--- a/log.h
+++ b/log.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: log.h,v 1.17 2008/06/13 00:12:02 dtucker Exp $ */
+/* $OpenBSD: log.h,v 1.18 2011/06/17 21:44:30 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -46,6 +46,8 @@ typedef enum {
        SYSLOG_LEVEL_NOT_SET = -1
 }       LogLevel;
+typedef void (log_handler_fn)(LogLevel, const char *, void *);
 void     log_init(char *, LogLevel, SyslogFacility, int);
 SyslogFacility  log_facility_number(char *);
@@ -64,6 +66,10 @@ void     debug(const char *, ...) __attribute__((format(printf, 1, 2)));
 void     debug2(const char *, ...) __attribute__((format(printf, 1, 2)));
 void     debug3(const char *, ...) __attribute__((format(printf, 1, 2)));
+void     set_log_handler(log_handler_fn *, void *);
+void     do_log2(LogLevel, const char *, ...)
+    __attribute__((format(printf, 2, 3)));
 void     do_log(LogLevel, const char *, va_list);
 void     cleanup_exit(int) __attribute__((noreturn));
 #endif
diff --git a/mac.c b/mac.c
index fabc3ed66..eef50f48d 100644
--- a/mac.c
+++ b/mac.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: mac.c,v 1.15 2008/06/13 00:51:47 dtucker Exp $ */
+/* $OpenBSD: mac.c,v 1.16 2011/08/02 01:22:11 djm Exp $ */
 /*
 * Copyright (c) 2001 Markus Friedl.  All rights reserved.
 *
@@ -57,6 +57,12 @@ struct {
 } macs[] = {
        { "hmac-sha1",                  SSH_EVP, EVP_sha1, 0, -1, -1 },
        { "hmac-sha1-96",               SSH_EVP, EVP_sha1, 96, -1, -1 },
+#ifdef HAVE_EVP_SHA256
+        { "hmac-sha2-256",              SSH_EVP, EVP_sha256, 0, -1, -1 },
+        { "hmac-sha2-256-96",           SSH_EVP, EVP_sha256, 96, -1, -1 },
+        { "hmac-sha2-512",              SSH_EVP, EVP_sha512, 0, -1, -1 },
+        { "hmac-sha2-512-96",           SSH_EVP, EVP_sha512, 96, -1, -1 },
+#endif
        { "hmac-md5",                   SSH_EVP, EVP_md5, 0, -1, -1 },
        { "hmac-md5-96",                SSH_EVP, EVP_md5, 96, -1, -1 },
        { "hmac-ripemd160",             SSH_EVP, EVP_ripemd160, 0, -1, -1 },
diff --git a/misc.c b/misc.c
index ea614ce22..1814ae3af 100644
--- a/misc.c
+++ b/misc.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: misc.c,v 1.84 2010/11/21 01:01:13 djm Exp $ */
+/* $OpenBSD: misc.c,v 1.85 2011/03/29 18:54:17 stevesk Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 * Copyright (c) 2005,2006 Damien Miller.  All rights reserved.
@@ -1035,6 +1035,19 @@ parse_ipqos(const char *cp)
        return val;
 }
+const char *
+iptos2str(int iptos)
+{
+        int i;
+        static char iptos_str[sizeof "0xff"];
+        for (i = 0; ipqos[i].name != NULL; i++) {
+                if (ipqos[i].value == iptos)
+                        return ipqos[i].name;
+        }
+        snprintf(iptos_str, sizeof iptos_str, "0x%02x", iptos);
+        return iptos_str;
+}
 void
 sock_set_v6only(int s)
 {
diff --git a/misc.h b/misc.h
index b8225eb90..904edc704 100644
--- a/misc.h
+++ b/misc.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: misc.h,v 1.47 2010/11/21 01:01:13 djm Exp $ */
+/* $OpenBSD: misc.h,v 1.48 2011/03/29 18:54:17 stevesk Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -89,6 +89,7 @@ void bandwidth_limit_init(struct bwlimit *, u_int64_t, size_t);
 void bandwidth_limit(struct bwlimit *, size_t);
 int parse_ipqos(const char *);
+const char *iptos2str(int);
 void mktemp_proto(char *, size_t);
 /* readpass.c */
diff --git a/moduli.0 b/moduli.0
index ded094ff0..c529488b2 100644
--- a/moduli.0
+++ b/moduli.0
@@ -1,7 +1,7 @@
 MODULI(5)                 OpenBSD Programmer's Manual                MODULI(5)
 NAME
-     moduli - Diffie Hellman moduli
+     moduli - Diffie-Hellman moduli
 DESCRIPTION
     The /etc/moduli file contains prime numbers and generators for use by
@@ -10,12 +10,12 @@ DESCRIPTION
     New moduli may be generated with ssh-keygen(1) using a two-step process.
     An initial candidate generation pass, using ssh-keygen -G, calculates
     numbers that are likely to be useful.  A second primality testing pass,
-     using ssh-keygen -T provides a high degree of assurance that the numbers
+     using ssh-keygen -T, provides a high degree of assurance that the numbers
-     are prime and are safe for use in Diffie Hellman operations by sshd(8).
+     are prime and are safe for use in Diffie-Hellman operations by sshd(8).
     This moduli format is used as the output from each pass.
     The file consists of newline-separated records, one per modulus,
-     containing seven space separated fields.  These fields are as follows:
+     containing seven space-separated fields.  These fields are as follows:
           timestamp    The time that the modulus was last processed as
                        YYYYMMDDHHMMSS.
@@ -23,12 +23,12 @@ DESCRIPTION
           type         Decimal number specifying the internal structure of
                        the prime modulus.  Supported types are:
-                        0     Unknown, not tested
+                        0     Unknown, not tested.
                        2     "Safe" prime; (p-1)/2 is also prime.
                        4     Sophie Germain; (p+1)*2 is also prime.
                        Moduli candidates initially produced by ssh-keygen(1)
-                        are Sophie Germain primes (type 4).  Futher primality
+                        are Sophie Germain primes (type 4).  Further primality
                        testing with ssh-keygen(1) produces safe prime moduli
                        (type 2) that are ready for use in sshd(8).  Other
                        types are not used by OpenSSH.
@@ -37,18 +37,18 @@ DESCRIPTION
                        that the number has been subjected to represented as a
                        bitmask of the following values:
-                        0x00  Not tested
+                        0x00  Not tested.
                        0x01  Composite number - not prime.
-                        0x02  Sieve of Eratosthenes
+                        0x02  Sieve of Eratosthenes.
-                        0x04  Probabalistic Miller-Rabin primality tests.
+                        0x04  Probabilistic Miller-Rabin primality tests.
                        The ssh-keygen(1) moduli candidate generation uses the
                        Sieve of Eratosthenes (flag 0x02).  Subsequent
                        ssh-keygen(1) primality tests are Miller-Rabin tests
                        (flag 0x04).
-           trials       Decimal number indicating of primaility trials that
+           trials       Decimal number indicating the number of primality
-                        have been performed on the modulus.
+                        trials that have been performed on the modulus.
           size         Decimal number indicating the size of the prime in
                        bits.
@@ -58,15 +58,15 @@ DESCRIPTION
           modulus      The modulus itself in hexadecimal.
-     When performing Diffie Hellman Group Exchange, sshd(8) first estimates
+     When performing Diffie-Hellman Group Exchange, sshd(8) first estimates
-     the size of the modulus required to produce enough Diffie Hellman output
+     the size of the modulus required to produce enough Diffie-Hellman output
     to sufficiently key the selected symmetric cipher.  sshd(8) then randomly
     selects a modulus from /etc/moduli that best meets the size requirement.
 SEE ALSO
-     ssh-keygen(1), sshd(8),
+     ssh-keygen(1), sshd(8)
     Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer
     Protocol, RFC 4419, 2006.
-OpenBSD 4.9                      June 26, 2008                     OpenBSD 4.9
+OpenBSD 5.0                    October 14, 2010                    OpenBSD 5.0
diff --git a/moduli.5 b/moduli.5
index c64c08dfc..097abc109 100644
--- a/moduli.5
+++ b/moduli.5
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: moduli.5,v 1.12 2008/06/26 05:57:54 djm Exp $
+.\"     $OpenBSD: moduli.5,v 1.15 2010/10/14 20:41:28 jmc Exp $
 .\"
 .\" Copyright (c) 2008 Damien Miller <djm@mindrot.org>
 .\"
@@ -13,16 +13,16 @@
 .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-.Dd $Mdocdate: June 26 2008 $
+.Dd $Mdocdate: October 14 2010 $
 .Dt MODULI 5
 .Os
 .Sh NAME
 .Nm moduli
-.Nd Diffie Hellman moduli
+.Nd Diffie-Hellman moduli
 .Sh DESCRIPTION
 The
 .Pa /etc/ssh/moduli
-file contains prime numbers and generators for use by 
+file contains prime numbers and generators for use by
 .Xr sshd 8
 in the Diffie-Hellman Group Exchange key exchange method.
 .Pp
@@ -31,24 +31,23 @@ New moduli may be generated with
 using a two-step process.
 An initial
 .Em candidate generation
-pass, using 
+pass, using
 .Ic ssh-keygen -G ,
 calculates numbers that are likely to be useful.
 A second
 .Em primality testing
 pass, using
-.Ic ssh-keygen -T
+.Ic ssh-keygen -T ,
 provides a high degree of assurance that the numbers are prime and are
-safe for use in Diffie Hellman operations by
+safe for use in Diffie-Hellman operations by
 .Xr sshd 8 .
 This
 .Nm
 format is used as the output from each pass.
 .Pp
 The file consists of newline-separated records, one per modulus,
-containing seven space separated fields.
+containing seven space-separated fields.
 These fields are as follows:
-.Pp
 .Bl -tag -width Description -offset indent
 .It timestamp
 The time that the modulus was last processed as YYYYMMDDHHMMSS.
@@ -58,7 +57,7 @@ Supported types are:
 .Pp
 .Bl -tag -width 0x00 -compact
 .It 0
-Unknown, not tested
+Unknown, not tested.
 .It 2
 "Safe" prime; (p-1)/2 is also prime.
 .It 4
@@ -68,7 +67,7 @@ Sophie Germain; (p+1)*2 is also prime.
 Moduli candidates initially produced by
 .Xr ssh-keygen 1
 are Sophie Germain primes (type 4).
-Futher primality testing with
+Further primality testing with
 .Xr ssh-keygen 1
 produces safe prime moduli (type 2) that are ready for use in
 .Xr sshd 8 .
@@ -79,13 +78,13 @@ has been subjected to represented as a bitmask of the following values:
 .Pp
 .Bl -tag -width 0x00 -compact
 .It 0x00
-Not tested
+Not tested.
 .It 0x01
-Composite number - not prime.
+Composite number \(en not prime.
 .It 0x02
-Sieve of Eratosthenes
+Sieve of Eratosthenes.
 .It 0x04
-Probabalistic Miller-Rabin primality tests.
+Probabilistic Miller-Rabin primality tests.
 .El
 .Pp
 The
@@ -95,8 +94,8 @@ Subsequent
 .Xr ssh-keygen 1
 primality tests are Miller-Rabin tests (flag 0x04).
 .It trials
-Decimal number indicating of primaility trials that have been performed
+Decimal number indicating the number of primality trials
-on the modulus.
+that have been performed on the modulus.
 .It size
 Decimal number indicating the size of the prime in bits.
 .It generator
@@ -105,18 +104,17 @@ The recommended generator for use with this modulus (hexadecimal).
 The modulus itself in hexadecimal.
 .El
 .Pp
-When performing Diffie Hellman Group Exchange,
+When performing Diffie-Hellman Group Exchange,
 .Xr sshd 8
 first estimates the size of the modulus required to produce enough
-Diffie Hellman output to sufficiently key the selected symmetric cipher.
+Diffie-Hellman output to sufficiently key the selected symmetric cipher.
 .Xr sshd 8
 then randomly selects a modulus from
 .Fa /etc/ssh/moduli
 that best meets the size requirement.
-.Pp
 .Sh SEE ALSO
 .Xr ssh-keygen 1 ,
-.Xr sshd 8 ,
+.Xr sshd 8
 .Rs
 .%R RFC 4419
 .%T "Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol"
diff --git a/monitor.c b/monitor.c
index fa7fb0e25..985916b1e 100644
--- a/monitor.c
+++ b/monitor.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: monitor.c,v 1.110 2010/09/09 10:45:45 djm Exp $ */
+/* $OpenBSD: monitor.c,v 1.115 2011/06/23 23:35:42 djm Exp $ */
 /*
 * Copyright 2002 Niels Provos <provos@citi.umich.edu>
 * Copyright 2002 Markus Friedl <markus@openbsd.org>
@@ -44,6 +44,13 @@
 #include <stdlib.h>
 #include <string.h>
 #include <unistd.h>
+#ifdef HAVE_POLL_H
+#include <poll.h>
+#else
+# ifdef HAVE_SYS_POLL_H
+#  include <sys/poll.h>
+# endif
+#endif
 #ifdef SKEY
 #include <skey.h>
@@ -52,6 +59,7 @@
 #include <openssl/dh.h>
 #include "openbsd-compat/sys-queue.h"
+#include "atomicio.h"
 #include "xmalloc.h"
 #include "ssh.h"
 #include "key.h"
@@ -182,6 +190,8 @@ int mm_answer_audit_event(int, Buffer *);
 int mm_answer_audit_command(int, Buffer *);
 #endif
+static int monitor_read_log(struct monitor *);
 static Authctxt *authctxt;
 static BIGNUM *ssh1_challenge = NULL;   /* used for ssh1 rsa auth */
@@ -357,6 +367,10 @@ monitor_child_preauth(Authctxt *_authctxt, struct monitor *pmonitor)
        debug3("preauth child monitor started");
+        close(pmonitor->m_recvfd);
+        close(pmonitor->m_log_sendfd);
+        pmonitor->m_log_sendfd = pmonitor->m_recvfd = -1;
        authctxt = _authctxt;
        memset(authctxt, 0, sizeof(*authctxt));
@@ -420,6 +434,10 @@ monitor_child_preauth(Authctxt *_authctxt, struct monitor *pmonitor)
 #endif
        }
+        /* Drain any buffered messages from the child */
+        while (pmonitor->m_log_recvfd != -1 && monitor_read_log(pmonitor) == 0)
+                ;
        if (!authctxt->valid)
                fatal("%s: authenticated invalid user", __func__);
        if (strcmp(auth_method, "unknown") == 0)
@@ -429,6 +447,10 @@ monitor_child_preauth(Authctxt *_authctxt, struct monitor *pmonitor)
            __func__, authctxt->user);
        mm_get_keystate(pmonitor);
+        close(pmonitor->m_sendfd);
+        close(pmonitor->m_log_recvfd);
+        pmonitor->m_sendfd = pmonitor->m_log_recvfd = -1;
 }
 static void
@@ -446,6 +468,9 @@ monitor_child_handler(int sig)
 void
 monitor_child_postauth(struct monitor *pmonitor)
 {
+        close(pmonitor->m_recvfd);
+        pmonitor->m_recvfd = -1;
        monitor_set_child_handler(pmonitor->m_pid);
        signal(SIGHUP, &monitor_child_handler);
        signal(SIGTERM, &monitor_child_handler);
@@ -473,6 +498,9 @@ monitor_child_postauth(struct monitor *pmonitor)
        for (;;)
                monitor_read(pmonitor, mon_dispatch, NULL);
+        close(pmonitor->m_sendfd);
+        pmonitor->m_sendfd = -1;
 }
 void
@@ -484,6 +512,52 @@ monitor_sync(struct monitor *pmonitor)
        }
 }
+static int
+monitor_read_log(struct monitor *pmonitor)
+{
+        Buffer logmsg;
+        u_int len, level;
+        char *msg;
+        buffer_init(&logmsg);
+        /* Read length */
+        buffer_append_space(&logmsg, 4);
+        if (atomicio(read, pmonitor->m_log_recvfd,
+            buffer_ptr(&logmsg), buffer_len(&logmsg)) != buffer_len(&logmsg)) {
+                if (errno == EPIPE) {
+                        debug("%s: child log fd closed", __func__);
+                        close(pmonitor->m_log_recvfd);
+                        pmonitor->m_log_recvfd = -1;
+                        return -1;
+                }
+                fatal("%s: log fd read: %s", __func__, strerror(errno));
+        }
+        len = buffer_get_int(&logmsg);
+        if (len <= 4 || len > 8192)
+                fatal("%s: invalid log message length %u", __func__, len);
+        /* Read severity, message */
+        buffer_clear(&logmsg);
+        buffer_append_space(&logmsg, len);
+        if (atomicio(read, pmonitor->m_log_recvfd,
+            buffer_ptr(&logmsg), buffer_len(&logmsg)) != buffer_len(&logmsg))
+                fatal("%s: log fd read: %s", __func__, strerror(errno));
+        /* Log it */
+        level = buffer_get_int(&logmsg);
+        msg = buffer_get_string(&logmsg, NULL);
+        if (log_level_name(level) == NULL)
+                fatal("%s: invalid log level %u (corrupted message?)",
+                    __func__, level);
+        do_log2(level, "%s [preauth]", msg);
+        buffer_free(&logmsg);
+        xfree(msg);
+        return 0;
+}
 int
 monitor_read(struct monitor *pmonitor, struct mon_table *ent,
    struct mon_table **pent)
@@ -491,6 +565,30 @@ monitor_read(struct monitor *pmonitor, struct mon_table *ent,
        Buffer m;
        int ret;
        u_char type;
+        struct pollfd pfd[2];
+        for (;;) {
+                bzero(&pfd, sizeof(pfd));
+                pfd[0].fd = pmonitor->m_sendfd;
+                pfd[0].events = POLLIN;
+                pfd[1].fd = pmonitor->m_log_recvfd;
+                pfd[1].events = pfd[1].fd == -1 ? 0 : POLLIN;
+                if (poll(pfd, pfd[1].fd == -1 ? 1 : 2, -1) == -1) {
+                        if (errno == EINTR || errno == EAGAIN)
+                                continue;
+                        fatal("%s: poll: %s", __func__, strerror(errno));
+                }
+                if (pfd[1].revents) {
+                        /*
+                         * Drain all log messages before processing next
+                         * monitor request.
+                         */
+                        monitor_read_log(pmonitor);
+                        continue;
+                }
+                if (pfd[0].revents)
+                        break;  /* Continues below */
+        }
        buffer_init(&m);
@@ -651,6 +749,7 @@ mm_answer_pwnamallow(int sock, Buffer *m)
        char *username;
        struct passwd *pwent;
        int allowed = 0;
+        u_int i;
        debug3("%s", __func__);
@@ -690,8 +789,20 @@ mm_answer_pwnamallow(int sock, Buffer *m)
 out:
        buffer_put_string(m, &options, sizeof(options));
-        if (options.banner != NULL)
-                buffer_put_cstring(m, options.banner);
+#define M_CP_STROPT(x) do { \
+                if (options.x != NULL) \
+                        buffer_put_cstring(m, options.x); \
+        } while (0)
+#define M_CP_STRARRAYOPT(x, nx) do { \
+                for (i = 0; i < options.nx; i++) \
+                        buffer_put_cstring(m, options.x[i]); \
+        } while (0)
+        /* See comment in servconf.h */
+        COPY_MATCH_STRING_OPTS();
+#undef M_CP_STROPT
+#undef M_CP_STRARRAYOPT
+        
        debug3("%s: sending MONITOR_ANS_PWNAM: %d", __func__, allowed);
        mm_request_send(sock, MONITOR_ANS_PWNAM, m);
@@ -704,7 +815,6 @@ mm_answer_pwnamallow(int sock, Buffer *m)
                monitor_permit(mon_dispatch, MONITOR_REQ_AUTHROLE, 1);
                monitor_permit(mon_dispatch, MONITOR_REQ_AUTH2_READ_BANNER, 1);
        }
 #ifdef USE_PAM
        if (options.use_pam)
                monitor_permit(mon_dispatch, MONITOR_REQ_PAM_START, 1);
@@ -1884,22 +1994,31 @@ mm_init_compression(struct mm_master *mm)
 /* XXX */
 #define FD_CLOSEONEXEC(x) do { \
-        if (fcntl(x, F_SETFD, 1) == -1) \
+        if (fcntl(x, F_SETFD, FD_CLOEXEC) == -1) \
                fatal("fcntl(%d, F_SETFD)", x); \
 } while (0)
 static void
-monitor_socketpair(int *pair)
+monitor_openfds(struct monitor *mon, int do_logfds)
 {
-#ifdef HAVE_SOCKETPAIR
+        int pair[2];
        if (socketpair(AF_UNIX, SOCK_STREAM, 0, pair) == -1)
-                fatal("%s: socketpair", __func__);
+                fatal("%s: socketpair: %s", __func__, strerror(errno));
-#else
-        fatal("%s: UsePrivilegeSeparation=yes not supported",
-            __func__);
-#endif
        FD_CLOSEONEXEC(pair[0]);
        FD_CLOSEONEXEC(pair[1]);
+        mon->m_recvfd = pair[0];
+        mon->m_sendfd = pair[1];
+        if (do_logfds) {
+                if (pipe(pair) == -1)
+                        fatal("%s: pipe: %s", __func__, strerror(errno));
+                FD_CLOSEONEXEC(pair[0]);
+                FD_CLOSEONEXEC(pair[1]);
+                mon->m_log_recvfd = pair[0];
+                mon->m_log_sendfd = pair[1];
+        } else
+                mon->m_log_recvfd = mon->m_log_sendfd = -1;
 }
 #define MM_MEMSIZE      65536
@@ -1908,14 +2027,10 @@ struct monitor *
 monitor_init(void)
 {
        struct monitor *mon;
-        int pair[2];
        mon = xcalloc(1, sizeof(*mon));
-        monitor_socketpair(pair);
+        monitor_openfds(mon, 1);
-        mon->m_recvfd = pair[0];
-        mon->m_sendfd = pair[1];
        /* Used to share zlib space across processes */
        if (options.compression) {
@@ -1932,12 +2047,7 @@ monitor_init(void)
 void
 monitor_reinit(struct monitor *mon)
 {
-        int pair[2];
+        monitor_openfds(mon, 0);
-        monitor_socketpair(pair);
-        mon->m_recvfd = pair[0];
-        mon->m_sendfd = pair[1];
 }
 #ifdef GSSAPI
diff --git a/monitor.h b/monitor.h
index 5cebb356b..42887ebd1 100644
--- a/monitor.h
+++ b/monitor.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: monitor.h,v 1.15 2008/11/04 08:22:13 djm Exp $ */
+/* $OpenBSD: monitor.h,v 1.16 2011/06/17 21:44:31 djm Exp $ */
 /*
 * Copyright 2002 Niels Provos <provos@citi.umich.edu>
@@ -74,6 +74,8 @@ struct mm_master;
 struct monitor {
        int                      m_recvfd;
        int                      m_sendfd;
+        int                      m_log_recvfd;
+        int                      m_log_sendfd;
        struct mm_master        *m_zback;
        struct mm_master        *m_zlib;
        struct Kex              **m_pkex;
diff --git a/monitor_wrap.c b/monitor_wrap.c
index d69e4cce7..f46be660d 100644
--- a/monitor_wrap.c
+++ b/monitor_wrap.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: monitor_wrap.c,v 1.70 2010/08/31 11:54:45 djm Exp $ */
+/* $OpenBSD: monitor_wrap.c,v 1.73 2011/06/17 21:44:31 djm Exp $ */
 /*
 * Copyright 2002 Niels Provos <provos@citi.umich.edu>
 * Copyright 2002 Markus Friedl <markus@openbsd.org>
@@ -88,6 +88,32 @@ extern struct monitor *pmonitor;
 extern Buffer loginmsg;
 extern ServerOptions options;
+void
+mm_log_handler(LogLevel level, const char *msg, void *ctx)
+{
+        Buffer log_msg;
+        struct monitor *mon = (struct monitor *)ctx;
+        if (mon->m_log_sendfd == -1)
+                fatal("%s: no log channel", __func__);
+        buffer_init(&log_msg);
+        /*
+         * Placeholder for packet length. Will be filled in with the actual
+         * packet length once the packet has been constucted. This saves
+         * fragile math.
+         */
+        buffer_put_int(&log_msg, 0);
+        buffer_put_int(&log_msg, level);
+        buffer_put_cstring(&log_msg, msg);
+        put_u32(buffer_ptr(&log_msg), buffer_len(&log_msg) - 4);
+        if (atomicio(vwrite, mon->m_log_sendfd, buffer_ptr(&log_msg),
+            buffer_len(&log_msg)) != buffer_len(&log_msg))
+                fatal("%s: write: %s", __func__, strerror(errno));
+        buffer_free(&log_msg);
+}
 int
 mm_is_monitor(void)
 {
@@ -211,7 +237,7 @@ mm_getpwnamallow(const char *username)
 {
        Buffer m;
        struct passwd *pw;
-        u_int len;
+        u_int len, i;
        ServerOptions *newopts;
        debug3("%s entering", __func__);
@@ -245,8 +271,20 @@ out:
        newopts = buffer_get_string(&m, &len);
        if (len != sizeof(*newopts))
                fatal("%s: option block size mismatch", __func__);
-        if (newopts->banner != NULL)
-                newopts->banner = buffer_get_string(&m, NULL);
+#define M_CP_STROPT(x) do { \
+                if (newopts->x != NULL) \
+                        newopts->x = buffer_get_string(&m, NULL); \
+        } while (0)
+#define M_CP_STRARRAYOPT(x, nx) do { \
+                for (i = 0; i < newopts->nx; i++) \
+                        newopts->x[i] = buffer_get_string(&m, NULL); \
+        } while (0)
+        /* See comment in servconf.h */
+        COPY_MATCH_STRING_OPTS();
+#undef M_CP_STROPT
+#undef M_CP_STRARRAYOPT
        copy_set_server_options(&options, newopts, 1);
        xfree(newopts);
diff --git a/monitor_wrap.h b/monitor_wrap.h
index d2dad84aa..4d12e2956 100644
--- a/monitor_wrap.h
+++ b/monitor_wrap.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: monitor_wrap.h,v 1.22 2009/03/05 07:18:19 djm Exp $ */
+/* $OpenBSD: monitor_wrap.h,v 1.23 2011/06/17 21:44:31 djm Exp $ */
 /*
 * Copyright 2002 Niels Provos <provos@citi.umich.edu>
@@ -37,6 +37,7 @@ struct monitor;
 struct mm_master;
 struct Authctxt;
+void mm_log_handler(LogLevel, const char *, void *);
 int mm_is_monitor(void);
 DH *mm_choose_dh(int, int, int);
 int mm_key_sign(Key *, u_char **, u_int *, u_char *, u_int);
diff --git a/mux.c b/mux.c
index e370462db..add0e26b1 100644
--- a/mux.c
+++ b/mux.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: mux.c,v 1.24 2011/01/13 21:54:53 djm Exp $ */
+/* $OpenBSD: mux.c,v 1.29 2011/06/22 22:08:42 djm Exp $ */
 /*
 * Copyright (c) 2002-2008 Damien Miller <djm@openbsd.org>
 *
@@ -87,7 +87,6 @@
 /* from ssh.c */
 extern int tty_flag;
-extern int force_tty_flag;
 extern Options options;
 extern int stdin_null_flag;
 extern char *host;
@@ -146,6 +145,7 @@ struct mux_master_state {
 #define MUX_C_OPEN_FWD          0x10000006
 #define MUX_C_CLOSE_FWD         0x10000007
 #define MUX_C_NEW_STDIO_FWD     0x10000008
+#define MUX_C_STOP_LISTENING    0x10000009
 #define MUX_S_OK                0x80000001
 #define MUX_S_PERMISSION_DENIED 0x80000002
 #define MUX_S_FAILURE           0x80000003
@@ -153,6 +153,7 @@ struct mux_master_state {
 #define MUX_S_ALIVE             0x80000005
 #define MUX_S_SESSION_OPENED    0x80000006
 #define MUX_S_REMOTE_PORT       0x80000007
+#define MUX_S_TTY_ALLOC_FAIL    0x80000008
 /* type codes for MUX_C_OPEN_FWD and MUX_C_CLOSE_FWD */
 #define MUX_FWD_LOCAL   1
@@ -168,6 +169,7 @@ static int process_mux_terminate(u_int, Channel *, Buffer *, Buffer *);
 static int process_mux_open_fwd(u_int, Channel *, Buffer *, Buffer *);
 static int process_mux_close_fwd(u_int, Channel *, Buffer *, Buffer *);
 static int process_mux_stdio_fwd(u_int, Channel *, Buffer *, Buffer *);
+static int process_mux_stop_listening(u_int, Channel *, Buffer *, Buffer *);
 static const struct {
        u_int type;
@@ -180,6 +182,7 @@ static const struct {
        { MUX_C_OPEN_FWD, process_mux_open_fwd },
        { MUX_C_CLOSE_FWD, process_mux_close_fwd },
        { MUX_C_NEW_STDIO_FWD, process_mux_stdio_fwd },
+        { MUX_C_STOP_LISTENING, process_mux_stop_listening },
        { 0, NULL }
 };
@@ -915,6 +918,39 @@ process_mux_stdio_fwd(u_int rid, Channel *c, Buffer *m, Buffer *r)
        return 0;
 }
+static int
+process_mux_stop_listening(u_int rid, Channel *c, Buffer *m, Buffer *r)
+{
+        debug("%s: channel %d: stop listening", __func__, c->self);
+        if (options.control_master == SSHCTL_MASTER_ASK ||
+            options.control_master == SSHCTL_MASTER_AUTO_ASK) {
+                if (!ask_permission("Disable further multiplexing on shared "
+                    "connection to %s? ", host)) {
+                        debug2("%s: stop listen refused by user", __func__);
+                        buffer_put_int(r, MUX_S_PERMISSION_DENIED);
+                        buffer_put_int(r, rid);
+                        buffer_put_cstring(r, "Permission denied");
+                        return 0;
+                }
+        }
+        if (mux_listener_channel != NULL) {
+                channel_free(mux_listener_channel);
+                client_stop_mux();
+                xfree(options.control_path);
+                options.control_path = NULL;
+                mux_listener_channel = NULL;
+                muxserver_sock = -1;
+        }
+        /* prepare reply */
+        buffer_put_int(r, MUX_S_OK);
+        buffer_put_int(r, rid);
+        return 0;
+}
 /* Channel callbacks fired on read/write from mux slave fd */
 static int
 mux_master_read_cb(Channel *c)
@@ -1019,6 +1055,27 @@ mux_exit_message(Channel *c, int exitval)
        buffer_free(&m);
 }
+void
+mux_tty_alloc_failed(Channel *c)
+{
+        Buffer m;
+        Channel *mux_chan;
+        debug3("%s: channel %d: TTY alloc failed", __func__, c->self);
+        if ((mux_chan = channel_by_id(c->ctl_chan)) == NULL)
+                fatal("%s: channel %d missing mux channel %d",
+                    __func__, c->self, c->ctl_chan);
+        /* Append exit message packet to control socket output queue */
+        buffer_init(&m);
+        buffer_put_int(&m, MUX_S_TTY_ALLOC_FAIL);
+        buffer_put_int(&m, c->self);
+        buffer_put_string(&mux_chan->output, buffer_ptr(&m), buffer_len(&m));
+        buffer_free(&m);
+}
 /* Prepare a mux master to listen on a Unix domain socket. */
 void
 muxserver_listen(void)
@@ -1059,21 +1116,25 @@ muxserver_listen(void)
            strlen(options.control_path) + 1;
        if (strlcpy(addr.sun_path, options.control_path,
-            sizeof(addr.sun_path)) >= sizeof(addr.sun_path))
+            sizeof(addr.sun_path)) >= sizeof(addr.sun_path)) {
-                fatal("ControlPath too long");
+                error("ControlPath \"%s\" too long for Unix domain socket",
+                    options.control_path);
+                goto disable_mux_master;
+        }
        if ((muxserver_sock = socket(PF_UNIX, SOCK_STREAM, 0)) < 0)
                fatal("%s socket(): %s", __func__, strerror(errno));
        old_umask = umask(0177);
        if (bind(muxserver_sock, (struct sockaddr *)&addr, sun_len) == -1) {
-                muxserver_sock = -1;
                if (errno == EINVAL || errno == EADDRINUSE) {
                        error("ControlSocket %s already exists, "
                            "disabling multiplexing", options.control_path);
 disable_mux_master:
-                        close(muxserver_sock);
+                        if (muxserver_sock != -1) {
-                        muxserver_sock = -1;
+                                close(muxserver_sock);
+                                muxserver_sock = -1;
+                        }
                        xfree(options.control_path);
                        options.control_path = NULL;
                        options.control_master = SSHCTL_MASTER_NO;
@@ -1153,8 +1214,10 @@ mux_session_confirm(int id, int success, void *arg)
                /* Request forwarding with authentication spoofing. */
                debug("Requesting X11 forwarding with authentication "
                    "spoofing.");
-                x11_request_forwarding_with_spoofing(id, display, proto, data);
+                x11_request_forwarding_with_spoofing(id, display, proto,
-                /* XXX wait for reply */
+                    data, 1);
+                client_expect_confirm(id, "X11 forwarding", CONFIRM_WARN);
+                /* XXX exit_on_forward_failure */
        }
        if (cctx->want_agent_fwd && options.forward_agent) {
@@ -1573,7 +1636,7 @@ mux_client_request_session(int fd)
        char *e, *term;
        u_int i, rid, sid, esid, exitval, type, exitval_seen;
        extern char **environ;
-        int devnull;
+        int devnull, rawmode;
        debug3("%s: entering", __func__);
@@ -1669,8 +1732,9 @@ mux_client_request_session(int fd)
        signal(SIGTERM, control_client_sighandler);
        signal(SIGWINCH, control_client_sigrelay);
+        rawmode = tty_flag;
        if (tty_flag)
-                enter_raw_mode(force_tty_flag);
+                enter_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        /*
         * Stick around until the controlee closes the client_fd.
@@ -1684,22 +1748,35 @@ mux_client_request_session(int fd)
                if (mux_client_read_packet(fd, &m) != 0)
                        break;
                type = buffer_get_int(&m);
-                if (type != MUX_S_EXIT_MESSAGE) {
+                switch (type) {
+                case MUX_S_TTY_ALLOC_FAIL:
+                        if ((esid = buffer_get_int(&m)) != sid)
+                                fatal("%s: tty alloc fail on unknown session: "
+                                    "my id %u theirs %u",
+                                    __func__, sid, esid);
+                        leave_raw_mode(options.request_tty ==
+                            REQUEST_TTY_FORCE);
+                        rawmode = 0;
+                        continue;
+                case MUX_S_EXIT_MESSAGE:
+                        if ((esid = buffer_get_int(&m)) != sid)
+                                fatal("%s: exit on unknown session: "
+                                    "my id %u theirs %u",
+                                    __func__, sid, esid);
+                        if (exitval_seen)
+                                fatal("%s: exitval sent twice", __func__);
+                        exitval = buffer_get_int(&m);
+                        exitval_seen = 1;
+                        continue;
+                default:
                        e = buffer_get_string(&m, NULL);
                        fatal("%s: master returned error: %s", __func__, e);
                }
-                if ((esid = buffer_get_int(&m)) != sid)
-                        fatal("%s: exit on unknown session: my id %u theirs %u",
-                            __func__, sid, esid);
-                debug("%s: master session id: %u", __func__, sid);
-                if (exitval_seen)
-                        fatal("%s: exitval sent twice", __func__);
-                exitval = buffer_get_int(&m);
-                exitval_seen = 1;
        }
        close(fd);
-        leave_raw_mode(force_tty_flag);
+        if (rawmode)
+                leave_raw_mode(options.request_tty == REQUEST_TTY_FORCE);
        if (muxclient_terminate) {
                debug2("Exiting on signal %d", muxclient_terminate);
@@ -1813,6 +1890,50 @@ mux_client_request_stdio_fwd(int fd)
        fatal("%s: master returned unexpected message %u", __func__, type);
 }
+static void
+mux_client_request_stop_listening(int fd)
+{
+        Buffer m;
+        char *e;
+        u_int type, rid;
+        debug3("%s: entering", __func__);
+        buffer_init(&m);
+        buffer_put_int(&m, MUX_C_STOP_LISTENING);
+        buffer_put_int(&m, muxclient_request_id);
+        if (mux_client_write_packet(fd, &m) != 0)
+                fatal("%s: write packet: %s", __func__, strerror(errno));
+        buffer_clear(&m);
+        /* Read their reply */
+        if (mux_client_read_packet(fd, &m) != 0)
+                fatal("%s: read from master failed: %s",
+                    __func__, strerror(errno));
+        type = buffer_get_int(&m);
+        if ((rid = buffer_get_int(&m)) != muxclient_request_id)
+                fatal("%s: out of sequence reply: my id %u theirs %u",
+                    __func__, muxclient_request_id, rid);
+        switch (type) {
+        case MUX_S_OK:
+                break;
+        case MUX_S_PERMISSION_DENIED:
+                e = buffer_get_string(&m, NULL);
+                fatal("Master refused stop listening request: %s", e);
+        case MUX_S_FAILURE:
+                e = buffer_get_string(&m, NULL);
+                fatal("%s: stop listening request failed: %s", __func__, e);
+        default:
+                fatal("%s: unexpected response from master 0x%08x",
+                    __func__, type);
+        }
+        buffer_free(&m);
+        muxclient_request_id++;
+}
 /* Multiplex client main loop. */
 void
 muxclient(const char *path)
@@ -1906,6 +2027,10 @@ muxclient(const char *path)
        case SSHMUX_COMMAND_STDIO_FWD:
                mux_client_request_stdio_fwd(sock);
                exit(0);
+        case SSHMUX_COMMAND_STOP:
+                mux_client_request_stop_listening(sock);
+                fprintf(stderr, "Stop listening request sent.\r\n");
+                exit(0);
        default:
                fatal("unrecognised muxclient_command %d", muxclient_command);
        }
diff --git a/myproposal.h b/myproposal.h
index 2c43607a7..0bc1c778c 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: myproposal.h,v 1.27 2010/09/01 22:42:13 djm Exp $ */
+/* $OpenBSD: myproposal.h,v 1.28 2011/08/02 01:22:11 djm Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
@@ -75,10 +75,25 @@
        "arcfour256,arcfour128," \
        "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
        "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se"
+#ifdef HAVE_EVP_SHA256
+#define SHA2_HMAC_MODES \
+        "hmac-sha2-256," \
+        "hmac-sha2-256-96," \
+        "hmac-sha2-512," \
+        "hmac-sha2-512-96,"
+#else
+# define SHA2_HMAC_MODES
+#endif
 #define KEX_DEFAULT_MAC \
-        "hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160," \
+        "hmac-md5," \
+        "hmac-sha1," \
+        "umac-64@openssh.com," \
+        SHA2_HMAC_MODES \
+        "hmac-ripemd160," \
        "hmac-ripemd160@openssh.com," \
-        "hmac-sha1-96,hmac-md5-96"
+        "hmac-sha1-96," \
+        "hmac-md5-96"
 #define KEX_DEFAULT_COMP        "none,zlib@openssh.com,zlib"
 #define KEX_DEFAULT_LANG        ""
diff --git a/openbsd-compat/bsd-cygwin_util.c b/openbsd-compat/bsd-cygwin_util.c
index e9fa3a0e2..9eedc88d2 100644
--- a/openbsd-compat/bsd-cygwin_util.c
+++ b/openbsd-compat/bsd-cygwin_util.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2000, 2001, Corinna Vinschen <vinschen@cygnus.com>
+ * Copyright (c) 2000, 2001, 2011 Corinna Vinschen <vinschen@redhat.com>
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
@@ -34,9 +34,6 @@
 #if defined(open) && open == binary_open
 # undef open
 #endif
-#if defined(pipe) && open == binary_pipe
-# undef pipe
-#endif
 #include <sys/types.h>
@@ -59,18 +56,6 @@ binary_open(const char *filename, int flags, ...)
        return (open(filename, flags | O_BINARY, mode));
 }
-int 
-binary_pipe(int fd[2])
-{
-        int ret = pipe(fd);
-        if (!ret) {
-                setmode(fd[0], O_BINARY);
-                setmode(fd[1], O_BINARY);
-        }
-        return (ret);
-}
 int
 check_ntsec(const char *filename)
 {
diff --git a/openbsd-compat/bsd-cygwin_util.h b/openbsd-compat/bsd-cygwin_util.h
index 39b8eb788..48f64b740 100644
--- a/openbsd-compat/bsd-cygwin_util.h
+++ b/openbsd-compat/bsd-cygwin_util.h
@@ -1,7 +1,7 @@
-/* $Id: bsd-cygwin_util.h,v 1.12 2009/03/08 00:40:28 dtucker Exp $ */
+/* $Id: bsd-cygwin_util.h,v 1.13 2011/08/17 01:31:09 djm Exp $ */
 /*
- * Copyright (c) 2000, 2001, Corinna Vinschen <vinschen@cygnus.com>
+ * Copyright (c) 2000, 2001, 2011 Corinna Vinschen <vinschen@redhat.com>
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
@@ -41,13 +41,11 @@
 #include <io.h>
 int binary_open(const char *, int , ...);
-int binary_pipe(int fd[2]);
 int check_ntsec(const char *);
 char **fetch_windows_environment(void);
 void free_windows_environment(char **);
 #define open binary_open
-#define pipe binary_pipe
 #endif /* HAVE_CYGWIN */
diff --git a/openbsd-compat/openssl-compat.c b/openbsd-compat/openssl-compat.c
index b617fdf19..5189cab61 100644
--- a/openbsd-compat/openssl-compat.c
+++ b/openbsd-compat/openssl-compat.c
@@ -1,4 +1,4 @@
-/* $Id: openssl-compat.c,v 1.13 2011/01/21 22:37:06 dtucker Exp $ */
+/* $Id: openssl-compat.c,v 1.14 2011/05/10 01:13:38 dtucker Exp $ */
 /*
 * Copyright (c) 2005 Darren Tucker <dtucker@zip.com.au>
@@ -134,9 +134,9 @@ RSA_get_default_method(void)
 #ifdef  USE_OPENSSL_ENGINE
 void
-ssh_SSLeay_add_all_algorithms(void)
+ssh_OpenSSL_add_all_algorithms(void)
 {
-        SSLeay_add_all_algorithms();
+        OpenSSL_add_all_algorithms();
        /* Enable use of crypto hardware */
        ENGINE_load_builtin_engines();
diff --git a/openbsd-compat/openssl-compat.h b/openbsd-compat/openssl-compat.h
index 6d4f3f215..c5fc24eb4 100644
--- a/openbsd-compat/openssl-compat.h
+++ b/openbsd-compat/openssl-compat.h
@@ -1,4 +1,4 @@
-/* $Id: openssl-compat.h,v 1.18 2011/01/21 22:37:06 dtucker Exp $ */
+/* $Id: openssl-compat.h,v 1.19 2011/05/10 01:13:38 dtucker Exp $ */
 /*
 * Copyright (c) 2005 Darren Tucker <dtucker@zip.com.au>
@@ -106,10 +106,10 @@ RSA_METHOD *RSA_get_default_method(void);
 #  endif
 # ifdef USE_OPENSSL_ENGINE
-#  ifdef SSLeay_add_all_algorithms
+#  ifdef OpenSSL_add_all_algorithms
-#   undef SSLeay_add_all_algorithms
+#   undef OpenSSL_add_all_algorithms
 #  endif
-#  define SSLeay_add_all_algorithms()  ssh_SSLeay_add_all_algorithms()
+#  define OpenSSL_add_all_algorithms()  ssh_OpenSSL_add_all_algorithms()
 # endif
 # ifndef HAVE_BN_IS_PRIME_EX
@@ -129,6 +129,6 @@ int ssh_EVP_CipherInit(EVP_CIPHER_CTX *, const EVP_CIPHER *, unsigned char *,
    unsigned char *, int);
 int ssh_EVP_Cipher(EVP_CIPHER_CTX *, char *, char *, int);
 int ssh_EVP_CIPHER_CTX_cleanup(EVP_CIPHER_CTX *);
-void ssh_SSLeay_add_all_algorithms(void);
+void ssh_OpenSSL_add_all_algorithms(void);
 #endif  /* SSH_DONT_OVERLOAD_OPENSSL_FUNCS */
diff --git a/openbsd-compat/port-linux.c b/openbsd-compat/port-linux.c
index dc8b1fa55..ef91e4446 100644
--- a/openbsd-compat/port-linux.c
+++ b/openbsd-compat/port-linux.c
@@ -1,4 +1,4 @@
-/* $Id: port-linux.c,v 1.11.4.2 2011/02/04 00:43:08 djm Exp $ */
+/* $Id: port-linux.c,v 1.16 2011/08/29 06:09:57 djm Exp $ */
 /*
 * Copyright (c) 2005 Daniel Walsh <dwalsh@redhat.com>
@@ -44,6 +44,10 @@
 #include <selinux/flask.h>
 #include <selinux/get_context_list.h>
+#ifndef SSH_SELINUX_UNCONFINED_TYPE
+# define SSH_SELINUX_UNCONFINED_TYPE ":unconfined_t:"
+#endif
 /* Wrapper around is_selinux_enabled() to log its return value once only */
 int
 ssh_selinux_enabled(void)
@@ -190,12 +194,13 @@ ssh_selinux_change_context(const char *newname)
 {
        int len, newlen;
        char *oldctx, *newctx, *cx;
+        void (*switchlog) (const char *fmt,...) = logit;
        if (!ssh_selinux_enabled())
                return;
        if (getcon((security_context_t *)&oldctx) < 0) {
-                logit("%s: getcon failed with %s", __func__, strerror (errno));
+                logit("%s: getcon failed with %s", __func__, strerror(errno));
                return;
        }
        if ((cx = index(oldctx, ':')) == NULL || (cx = index(cx + 1, ':')) ==
@@ -204,6 +209,14 @@ ssh_selinux_change_context(const char *newname)
                return;
        }
+        /*
+         * Check whether we are attempting to switch away from an unconfined
+         * security context.
+         */
+        if (strncmp(cx, SSH_SELINUX_UNCONFINED_TYPE,
+            sizeof(SSH_SELINUX_UNCONFINED_TYPE) - 1) == 0)
+                switchlog = debug3;
        newlen = strlen(oldctx) + strlen(newname) + 1;
        newctx = xmalloc(newlen);
        len = cx - oldctx + 1;
@@ -211,10 +224,11 @@ ssh_selinux_change_context(const char *newname)
        strlcpy(newctx + len, newname, newlen - len);
        if ((cx = index(cx + 1, ':')))
                strlcat(newctx, cx, newlen);
-        debug3("%s: setting context from '%s' to '%s'", __func__, oldctx,
+        debug3("%s: setting context from '%s' to '%s'", __func__,
-            newctx);
+            oldctx, newctx);
        if (setcon(newctx) < 0)
-                logit("%s: setcon failed with %s", __func__, strerror (errno));
+                switchlog("%s: setcon %s from %s failed with %s", __func__,
+                    newctx, oldctx, strerror(errno));
        xfree(oldctx);
        xfree(newctx);
 }
diff --git a/openbsd-compat/port-linux.h b/openbsd-compat/port-linux.h
index 3804fa2d1..80ce13ad9 100644
--- a/openbsd-compat/port-linux.h
+++ b/openbsd-compat/port-linux.h
@@ -1,4 +1,4 @@
-/* $Id: port-linux.h,v 1.4.10.1 2011/02/04 00:42:21 djm Exp $ */
+/* $Id: port-linux.h,v 1.5 2011/01/25 01:16:18 djm Exp $ */
 /*
 * Copyright (c) 2006 Damien Miller <djm@openbsd.org>
diff --git a/openbsd-compat/regress/closefromtest.c b/openbsd-compat/regress/closefromtest.c
index 145b09d7b..82ffeb9a7 100644
--- a/openbsd-compat/regress/closefromtest.c
+++ b/openbsd-compat/regress/closefromtest.c
@@ -24,6 +24,8 @@
 #define NUM_OPENS 10
+int closefrom(int);
 void
 fail(char *msg)
 {
diff --git a/packet.c b/packet.c
index b4e01f716..ba9341731 100644
--- a/packet.c
+++ b/packet.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: packet.c,v 1.172 2010/11/13 23:27:50 djm Exp $ */
+/* $OpenBSD: packet.c,v 1.173 2011/05/06 21:14:05 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -422,10 +422,8 @@ packet_set_state(int mode, u_int32_t seqnr, u_int64_t blocks, u_int32_t packets,
        state->bytes = bytes;
 }
-/* returns 1 if connection is via ipv4 */
+static int
+packet_connection_af(void)
-int
-packet_connection_is_ipv4(void)
 {
        struct sockaddr_storage to;
        socklen_t tolen = sizeof(to);
@@ -439,9 +437,9 @@ packet_connection_is_ipv4(void)
 #ifdef IPV4_IN_IPV6
        if (to.ss_family == AF_INET6 &&
            IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *)&to)->sin6_addr))
-                return 1;
+                return AF_INET;
 #endif
-        return 0;
+        return to.ss_family;
 }
 /* Sets the connection into non-blocking mode. */
@@ -1752,16 +1750,30 @@ packet_not_very_much_data_to_write(void)
 static void
 packet_set_tos(int tos)
 {
-#if defined(IP_TOS) && !defined(IP_TOS_IS_BROKEN)
+#ifndef IP_TOS_IS_BROKEN
-        if (!packet_connection_is_on_socket() ||
+        if (!packet_connection_is_on_socket())
-            !packet_connection_is_ipv4())
                return;
-        debug3("%s: set IP_TOS 0x%02x", __func__, tos);
+        switch (packet_connection_af()) {
-        if (setsockopt(active_state->connection_in, IPPROTO_IP, IP_TOS, &tos,
+# ifdef IP_TOS
-            sizeof(tos)) < 0)
+        case AF_INET:
-                error("setsockopt IP_TOS %d: %.100s:",
+                debug3("%s: set IP_TOS 0x%02x", __func__, tos);
-                    tos, strerror(errno));
+                if (setsockopt(active_state->connection_in,
-#endif
+                    IPPROTO_IP, IP_TOS, &tos, sizeof(tos)) < 0)
+                        error("setsockopt IP_TOS %d: %.100s:",
+                            tos, strerror(errno));
+                break;
+# endif /* IP_TOS */
+# ifdef IPV6_TCLASS
+        case AF_INET6:
+                debug3("%s: set IPV6_TCLASS 0x%02x", __func__, tos);
+                if (setsockopt(active_state->connection_in,
+                    IPPROTO_IPV6, IPV6_TCLASS, &tos, sizeof(tos)) < 0)
+                        error("setsockopt IPV6_TCLASS %d: %.100s:",
+                            tos, strerror(errno));
+                break;
+# endif /* IPV6_TCLASS */
+        }
+#endif /* IP_TOS_IS_BROKEN */
 }
 /* Informs that the current session is interactive.  Sets IP flags for that. */
diff --git a/packet.h b/packet.h
index d516aae8d..90eec17a9 100644
--- a/packet.h
+++ b/packet.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: packet.h,v 1.55 2010/11/13 23:27:50 djm Exp $ */
+/* $OpenBSD: packet.h,v 1.56 2011/05/06 21:14:05 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -92,7 +92,6 @@ int      packet_have_data_to_write(void);
 int      packet_not_very_much_data_to_write(void);
 int      packet_connection_is_on_socket(void);
-int      packet_connection_is_ipv4(void);
 int      packet_remaining(void);
 void     packet_send_ignore(int);
 void     packet_add_padding(u_char);
diff --git a/pathnames.h b/pathnames.h
index 6a940c918..0cdfcef7f 100644
--- a/pathnames.h
+++ b/pathnames.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: pathnames.h,v 1.20 2010/08/31 11:54:45 djm Exp $ */
+/* $OpenBSD: pathnames.h,v 1.22 2011/05/23 03:30:07 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
diff --git a/readconf.c b/readconf.c
index 656a2519f..7a26e923b 100644
--- a/readconf.c
+++ b/readconf.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: readconf.c,v 1.190 2010/11/13 23:27:50 djm Exp $ */
+/* $OpenBSD: readconf.c,v 1.193 2011/05/24 07:15:47 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -139,7 +139,7 @@ typedef enum {
        oHashKnownHosts,
        oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand,
        oVisualHostKey, oUseRoaming, oZeroKnowledgePasswordAuthentication,
-        oKexAlgorithms, oIPQoS,
+        oKexAlgorithms, oIPQoS, oRequestTTY,
        oProtocolKeepAlives, oSetupTimeOut,
        oDeprecated, oUnsupported
 } OpCodes;
@@ -209,9 +209,9 @@ static struct {
        { "host", oHost },
        { "escapechar", oEscapeChar },
        { "globalknownhostsfile", oGlobalKnownHostsFile },
-        { "globalknownhostsfile2", oGlobalKnownHostsFile2 },    /* obsolete */
+        { "globalknownhostsfile2", oDeprecated },
        { "userknownhostsfile", oUserKnownHostsFile },
-        { "userknownhostsfile2", oUserKnownHostsFile2 },        /* obsolete */
+        { "userknownhostsfile2", oDeprecated }, 
        { "connectionattempts", oConnectionAttempts },
        { "batchmode", oBatchMode },
        { "checkhostip", oCheckHostIP },
@@ -261,6 +261,7 @@ static struct {
 #endif
        { "kexalgorithms", oKexAlgorithms },
        { "ipqos", oIPQoS },
+        { "requesttty", oRequestTTY },
        { "protocolkeepalives", oProtocolKeepAlives },
        { "setuptimeout", oSetupTimeOut },
@@ -371,8 +372,10 @@ process_config_line(Options *options, const char *host,
                    char *line, const char *filename, int linenum,
                    int *activep)
 {
-        char *s, **charptr, *endofnumber, *keyword, *arg, *arg2, fwdarg[256];
+        char *s, **charptr, *endofnumber, *keyword, *arg, *arg2;
-        int opcode, *intptr, value, value2, scale;
+        char **cpptr, fwdarg[256];
+        u_int *uintptr, max_entries = 0;
+        int negated, opcode, *intptr, value, value2, scale;
        LogLevel *log_level_ptr;
        long long orig, val64;
        size_t len;
@@ -639,26 +642,33 @@ parse_yesnoask:
 parse_string:
                arg = strdelim(&s);
                if (!arg || *arg == '\0')
-                        fatal("%.200s line %d: Missing argument.", filename, linenum);
+                        fatal("%.200s line %d: Missing argument.",
+                            filename, linenum);
                if (*activep && *charptr == NULL)
                        *charptr = xstrdup(arg);
                break;
        case oGlobalKnownHostsFile:
-                charptr = &options->system_hostfile;
+                cpptr = (char **)&options->system_hostfiles;
-                goto parse_string;
+                uintptr = &options->num_system_hostfiles;
+                max_entries = SSH_MAX_HOSTS_FILES;
+parse_char_array:
+                if (*activep && *uintptr == 0) {
+                        while ((arg = strdelim(&s)) != NULL && *arg != '\0') {
+                                if ((*uintptr) >= max_entries)
+                                        fatal("%s line %d: "
+                                            "too many authorized keys files.",
+                                            filename, linenum);
+                                cpptr[(*uintptr)++] = xstrdup(arg);
+                        }
+                }
+                return 0;
        case oUserKnownHostsFile:
-                charptr = &options->user_hostfile;
+                cpptr = (char **)&options->user_hostfiles;
-                goto parse_string;
+                uintptr = &options->num_user_hostfiles;
+                max_entries = SSH_MAX_HOSTS_FILES;
-        case oGlobalKnownHostsFile2:
+                goto parse_char_array;
-                charptr = &options->system_hostfile2;
-                goto parse_string;
-        case oUserKnownHostsFile2:
-                charptr = &options->user_hostfile2;
-                goto parse_string;
        case oHostName:
                charptr = &options->hostname;
@@ -835,12 +845,28 @@ parse_int:
        case oHost:
                *activep = 0;
-                while ((arg = strdelim(&s)) != NULL && *arg != '\0')
+                arg2 = NULL;
+                while ((arg = strdelim(&s)) != NULL && *arg != '\0') {
+                        negated = *arg == '!';
+                        if (negated)
+                                arg++;
                        if (match_pattern(host, arg)) {
-                                debug("Applying options for %.100s", arg);
+                                if (negated) {
+                                        debug("%.200s line %d: Skipping Host "
+                                            "block because of negated match "
+                                            "for %.100s", filename, linenum,
+                                            arg);
+                                        *activep = 0;
+                                        break;
+                                }
+                                if (!*activep)
+                                        arg2 = arg; /* logged below */
                                *activep = 1;
-                                break;
                        }
+                }
+                if (*activep)
+                        debug("%.200s line %d: Applying options for %.100s",
+                            filename, linenum, arg2);
                /* Avoid garbage check below, as strdelim is done. */
                return 0;
@@ -1041,6 +1067,26 @@ parse_int:
                intptr = &options->use_roaming;
                goto parse_flag;
+        case oRequestTTY:
+                arg = strdelim(&s);
+                if (!arg || *arg == '\0')
+                        fatal("%s line %d: missing argument.",
+                            filename, linenum);
+                intptr = &options->request_tty;
+                if (strcasecmp(arg, "yes") == 0)
+                        value = REQUEST_TTY_YES;
+                else if (strcasecmp(arg, "no") == 0)
+                        value = REQUEST_TTY_NO;
+                else if (strcasecmp(arg, "force") == 0)
+                        value = REQUEST_TTY_FORCE;
+                else if (strcasecmp(arg, "auto") == 0)
+                        value = REQUEST_TTY_AUTO;
+                else
+                        fatal("Unsupported RequestTTY \"%s\"", arg);
+                if (*activep && *intptr == -1)
+                        *intptr = value;
+                break;
        case oDeprecated:
                debug("%s line %d: Deprecated option \"%s\"",
                    filename, linenum, keyword);
@@ -1170,10 +1216,8 @@ initialize_options(Options * options)
        options->proxy_command = NULL;
        options->user = NULL;
        options->escape_char = -1;
-        options->system_hostfile = NULL;
+        options->num_system_hostfiles = 0;
-        options->user_hostfile = NULL;
+        options->num_user_hostfiles = 0;
-        options->system_hostfile2 = NULL;
-        options->user_hostfile2 = NULL;
        options->local_forwards = NULL;
        options->num_local_forwards = 0;
        options->remote_forwards = NULL;
@@ -1206,6 +1250,7 @@ initialize_options(Options * options)
        options->zero_knowledge_password_authentication = -1;
        options->ip_qos_interactive = -1;
        options->ip_qos_bulk = -1;
+        options->request_tty = -1;
 }
 /*
@@ -1320,14 +1365,18 @@ fill_default_options(Options * options)
        }
        if (options->escape_char == -1)
                options->escape_char = '~';
-        if (options->system_hostfile == NULL)
+        if (options->num_system_hostfiles == 0) {
-                options->system_hostfile = _PATH_SSH_SYSTEM_HOSTFILE;
+                options->system_hostfiles[options->num_system_hostfiles++] =
-        if (options->user_hostfile == NULL)
+                    xstrdup(_PATH_SSH_SYSTEM_HOSTFILE);
-                options->user_hostfile = _PATH_SSH_USER_HOSTFILE;
+                options->system_hostfiles[options->num_system_hostfiles++] =
-        if (options->system_hostfile2 == NULL)
+                    xstrdup(_PATH_SSH_SYSTEM_HOSTFILE2);
-                options->system_hostfile2 = _PATH_SSH_SYSTEM_HOSTFILE2;
+        }
-        if (options->user_hostfile2 == NULL)
+        if (options->num_user_hostfiles == 0) {
-                options->user_hostfile2 = _PATH_SSH_USER_HOSTFILE2;
+                options->user_hostfiles[options->num_user_hostfiles++] =
+                    xstrdup(_PATH_SSH_USER_HOSTFILE);
+                options->user_hostfiles[options->num_user_hostfiles++] =
+                    xstrdup(_PATH_SSH_USER_HOSTFILE2);
+        }
        if (options->log_level == SYSLOG_LEVEL_NOT_SET)
                options->log_level = SYSLOG_LEVEL_INFO;
        if (options->clear_forwardings == 1)
@@ -1377,6 +1426,8 @@ fill_default_options(Options * options)
                options->ip_qos_interactive = IPTOS_LOWDELAY;
        if (options->ip_qos_bulk == -1)
                options->ip_qos_bulk = IPTOS_THROUGHPUT;
+        if (options->request_tty == -1)
+                options->request_tty = REQUEST_TTY_AUTO;
        /* options->local_command should not be set by default */
        /* options->proxy_command should not be set by default */
        /* options->user will be set in the main program if appropriate */
diff --git a/readconf.h b/readconf.h
index c4391abe4..2d9005ffa 100644
--- a/readconf.h
+++ b/readconf.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: readconf.h,v 1.88 2010/11/13 23:27:50 djm Exp $ */
+/* $OpenBSD: readconf.h,v 1.90 2011/05/24 07:15:47 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -27,7 +27,8 @@ typedef struct {
 }       Forward;
 /* Data structure for representing option data. */
-#define MAX_SEND_ENV    256
+#define MAX_SEND_ENV            256
+#define SSH_MAX_HOSTS_FILES     256
 typedef struct {
        int     forward_agent;  /* Forward authentication agent. */
@@ -89,10 +90,10 @@ typedef struct {
        char   *user;           /* User to log in as. */
        int     escape_char;    /* Escape character; -2 = none */
-        char   *system_hostfile;/* Path for /etc/ssh/ssh_known_hosts. */
+        u_int   num_system_hostfiles;   /* Paths for /etc/ssh/ssh_known_hosts */
-        char   *user_hostfile;  /* Path for $HOME/.ssh/known_hosts. */
+        char   *system_hostfiles[SSH_MAX_HOSTS_FILES];
-        char   *system_hostfile2;
+        u_int   num_user_hostfiles;     /* Path for $HOME/.ssh/known_hosts */
-        char   *user_hostfile2;
+        char   *user_hostfiles[SSH_MAX_HOSTS_FILES];
        char   *preferred_authentications;
        char   *bind_address;   /* local socket address for connection to sshd */
        char   *pkcs11_provider; /* PKCS#11 provider */
@@ -138,6 +139,7 @@ typedef struct {
        int     use_roaming;
+        int     request_tty;
 }       Options;
 #define SSHCTL_MASTER_NO        0
@@ -146,6 +148,11 @@ typedef struct {
 #define SSHCTL_MASTER_ASK       3
 #define SSHCTL_MASTER_AUTO_ASK  4
+#define REQUEST_TTY_AUTO        0
+#define REQUEST_TTY_NO          1
+#define REQUEST_TTY_YES         2
+#define REQUEST_TTY_FORCE       3
 void     initialize_options(Options *);
 void     fill_default_options(Options *);
 int      read_config_file(const char *, const char *, Options *, int);
diff --git a/regress/README.regress b/regress/README.regress
index da9bb6a99..82e4cc751 100644
--- a/regress/README.regress
+++ b/regress/README.regress
@@ -93,10 +93,6 @@ Failed tests can be difficult to diagnose. Suggestions:
 Known Issues.
- If your build requires ssh-rand-helper regress tests will fail
-  unless ssh-rand-helper is in pre-installed (the path to
-  ssh-rand-helper is hard coded).
 - Similarly, if you do not have "scp" in your system's $PATH then the
  multiplex scp tests will fail (since the system's shell startup scripts
  will determine where the shell started by sshd will look for scp).
@@ -105,4 +101,4 @@ Known Issues.
  test to fail.  The old behaviour can be restored by setting (and
  exporting) _POSIX2_VERSION=199209 before running the tests.
-$Id: README.regress,v 1.11 2010/08/16 21:04:29 djm Exp $
+$Id: README.regress,v 1.12 2011/05/05 03:48:42 djm Exp $
diff --git a/regress/cert-hostkey.sh b/regress/cert-hostkey.sh
index 3b147b9f7..6216abd87 100644
--- a/regress/cert-hostkey.sh
+++ b/regress/cert-hostkey.sh
@@ -1,4 +1,4 @@
-#       $OpenBSD: cert-hostkey.sh,v 1.5 2010/08/31 12:24:09 djm Exp $
+#       $OpenBSD: cert-hostkey.sh,v 1.6 2011/05/20 02:43:36 djm Exp $
 #       Placed in the Public Domain.
 tid="certified host keys"
diff --git a/regress/cert-userkey.sh b/regress/cert-userkey.sh
index fcca3708b..6700db274 100644
--- a/regress/cert-userkey.sh
+++ b/regress/cert-userkey.sh
@@ -1,4 +1,4 @@
-#       $OpenBSD: cert-userkey.sh,v 1.7 2010/08/31 12:24:09 djm Exp $
+#       $OpenBSD: cert-userkey.sh,v 1.8 2011/05/17 07:13:31 djm Exp $
 #       Placed in the Public Domain.
 tid="certified user keys"
@@ -27,7 +27,7 @@ for ktype in rsa dsa $ecdsa ; do
            -n ${USER},mekmitasdigoat $OBJ/cert_user_key_${ktype} ||
                fail "couldn't sign cert_user_key_${ktype}"
        # v00 ecdsa certs do not exist
-        test "{ktype}" = "ecdsa" && continue
+        test "${ktype}" = "ecdsa" && continue
        cp $OBJ/cert_user_key_${ktype} $OBJ/cert_user_key_${ktype}_v00
        cp $OBJ/cert_user_key_${ktype}.pub $OBJ/cert_user_key_${ktype}_v00.pub
        ${SSHKEYGEN} -q -t v00 -s $OBJ/user_ca_key -I \
diff --git a/regress/cfgmatch.sh b/regress/cfgmatch.sh
index 96badd51b..0603fab64 100644
--- a/regress/cfgmatch.sh
+++ b/regress/cfgmatch.sh
@@ -1,4 +1,4 @@
-#       $OpenBSD: cfgmatch.sh,v 1.4 2006/12/13 08:36:36 dtucker Exp $
+#       $OpenBSD: cfgmatch.sh,v 1.6 2011/06/03 05:35:10 dtucker Exp $
 #       Placed in the Public Domain.
 tid="sshd_config match"
@@ -7,6 +7,28 @@ pidfile=$OBJ/remote_pid
 fwdport=3301
 fwd="-L $fwdport:127.0.0.1:$PORT"
+echo "ExitOnForwardFailure=yes" >> $OBJ/ssh_config
+echo "ExitOnForwardFailure=yes" >> $OBJ/ssh_proxy
+start_client()
+{
+        rm -f $pidfile
+        ${SSH} -q -$p $fwd "$@" somehost \
+            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' \
+            >>$TEST_SSH_LOGFILE 2>&1 &
+        client_pid=$!
+        # Wait for remote end
+        n=0
+        while test ! -f $pidfile ; do
+                sleep 1
+                n=`expr $n + 1`
+                if test $n -gt 60; then
+                        kill $client_pid
+                        fatal "timeout waiting for background ssh"
+                fi
+        done    
+}
 stop_client()
 {
        pid=`cat $pidfile`
@@ -14,11 +36,15 @@ stop_client()
                kill $pid
                sleep 1
        fi
+        wait
 }
 cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
+grep -v AuthorizedKeysFile $OBJ/sshd_proxy_bak > $OBJ/sshd_proxy
+echo "AuthorizedKeysFile /dev/null" >>$OBJ/sshd_proxy
 echo "PermitOpen 127.0.0.1:1" >>$OBJ/sshd_config
+echo "Match user $USER" >>$OBJ/sshd_proxy
+echo "AuthorizedKeysFile /dev/null $OBJ/authorized_keys_%u" >>$OBJ/sshd_proxy
 echo "Match Address 127.0.0.1" >>$OBJ/sshd_config
 echo "PermitOpen 127.0.0.1:$PORT" >>$OBJ/sshd_config
@@ -32,12 +58,8 @@ start_sshd
 # Test Match + PermitOpen in sshd_config.  This should be permitted
 for p in 1 2; do
-        rm -f $pidfile
        trace "match permitopen localhost proto $p"
-        ${SSH} -$p $fwd -F $OBJ/ssh_config -f somehost \
+        start_client -F $OBJ/ssh_config
-            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' >>$TEST_SSH_LOGFILE 2>&1 ||\
-            fail "match permitopen proto $p sshd failed"
-        sleep 1;
        ${SSH} -q -$p -p $fwdport -F $OBJ/ssh_config somehost true || \
            fail "match permitopen permit proto $p"
        stop_client
@@ -45,12 +67,8 @@ done
 # Same but from different source.  This should not be permitted
 for p in 1 2; do
-        rm -f $pidfile
        trace "match permitopen proxy proto $p"
-        ${SSH} -q -$p $fwd -F $OBJ/ssh_proxy -f somehost \
+        start_client -F $OBJ/ssh_proxy
-            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' >>$TEST_SSH_LOGFILE 2>&1 ||\
-            fail "match permitopen proxy proto $p sshd failed"
-        sleep 1;
        ${SSH} -q -$p -p $fwdport -F $OBJ/ssh_config somehost true && \
            fail "match permitopen deny proto $p"
        stop_client
@@ -62,12 +80,8 @@ cat $OBJ/rsa.pub >> $OBJ/authorized_keys_$USER
 echon 'permitopen="127.0.0.1:'$PORT'" ' >>$OBJ/authorized_keys_$USER
 cat $OBJ/rsa1.pub >> $OBJ/authorized_keys_$USER
 for p in 1 2; do
-        rm -f $pidfile
        trace "match permitopen proxy w/key opts proto $p"
-        ${SSH} -q -$p $fwd -F $OBJ/ssh_proxy -f somehost \
+        start_client -F $OBJ/ssh_proxy
-            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' >>$TEST_SSH_LOGFILE 2>&1 ||\
-            fail "match permitopen w/key opt proto $p sshd failed"
-        sleep 1;
        ${SSH} -q -$p -p $fwdport -F $OBJ/ssh_config somehost true && \
            fail "match permitopen deny w/key opt proto $p"
        stop_client
@@ -76,12 +90,8 @@ done
 # Test both sshd_config and key options permitting the same dst/port pair.
 # Should be permitted.
 for p in 1 2; do
-        rm -f $pidfile
        trace "match permitopen localhost proto $p"
-        ${SSH} -$p $fwd -F $OBJ/ssh_config -f somehost \
+        start_client -F $OBJ/ssh_config
-            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' >>$TEST_SSH_LOGFILE 2>&1 ||\
-            fail "match permitopen proto $p sshd failed"
-        sleep 1;
        ${SSH} -q -$p -p $fwdport -F $OBJ/ssh_config somehost true || \
            fail "match permitopen permit proto $p"
        stop_client
@@ -94,12 +104,8 @@ echo "PermitOpen 127.0.0.1:1 127.0.0.1:2" >>$OBJ/sshd_proxy
 # Test that a Match overrides a PermitOpen in the global section
 for p in 1 2; do
-        rm -f $pidfile
        trace "match permitopen proxy w/key opts proto $p"
-        ${SSH} -q -$p $fwd -F $OBJ/ssh_proxy -f somehost \
+        start_client -F $OBJ/ssh_proxy
-            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' >>$TEST_SSH_LOGFILE 2>&1 ||\
-            fail "match override permitopen proto $p sshd failed"
-        sleep 1;
        ${SSH} -q -$p -p $fwdport -F $OBJ/ssh_config somehost true && \
            fail "match override permitopen proto $p"
        stop_client
@@ -113,12 +119,8 @@ echo "PermitOpen 127.0.0.1:1 127.0.0.1:2" >>$OBJ/sshd_proxy
 # Test that a rule that doesn't match doesn't override, plus test a
 # PermitOpen entry that's not at the start of the list
 for p in 1 2; do
-        rm -f $pidfile
        trace "nomatch permitopen proxy w/key opts proto $p"
-        ${SSH} -q -$p $fwd -F $OBJ/ssh_proxy -f somehost \
+        start_client -F $OBJ/ssh_proxy
-            exec sh -c \'"echo \$\$ > $pidfile; exec sleep 100"\' >>$TEST_SSH_LOGFILE 2>&1 ||\
-            fail "nomatch override permitopen proto $p sshd failed"
-        sleep 1;
        ${SSH} -q -$p -p $fwdport -F $OBJ/ssh_config somehost true || \
            fail "nomatch override permitopen proto $p"
        stop_client
diff --git a/regress/cipher-speed.sh b/regress/cipher-speed.sh
index 85de6d585..257afd179 100644
--- a/regress/cipher-speed.sh
+++ b/regress/cipher-speed.sh
@@ -1,4 +1,4 @@
-#       $OpenBSD: cipher-speed.sh,v 1.3 2007/06/07 19:41:46 pvalchev Exp $
+#       $OpenBSD: cipher-speed.sh,v 1.4 2011/08/02 01:23:41 djm Exp $
 #       Placed in the Public Domain.
 tid="cipher speed"
@@ -12,9 +12,13 @@ tries="1 2"
 DATA=/bin/ls
 DATA=/bsd
-macs="hmac-sha1 hmac-md5 umac-64@openssh.com hmac-sha1-96 hmac-md5-96"
 ciphers="aes128-cbc 3des-cbc blowfish-cbc cast128-cbc 
-        arcfour128 arcfour256 arcfour aes192-cbc aes256-cbc aes128-ctr"
+        arcfour128 arcfour256 arcfour 
+        aes192-cbc aes256-cbc rijndael-cbc@lysator.liu.se
+        aes128-ctr aes192-ctr aes256-ctr"
+macs="hmac-sha1 hmac-md5 umac-64@openssh.com hmac-sha1-96 hmac-md5-96"
+config_defined HAVE_EVP_SHA256 &&
+    macs="$macs hmac-sha2-256 hmac-sha2-256-96 hmac-sha2-512 hmac-sha2-512-96"
 for c in $ciphers; do for m in $macs; do
        trace "proto 2 cipher $c mac $m"
diff --git a/regress/connect-privsep.sh b/regress/connect-privsep.sh
index d23cadba5..11fb9aef9 100644
--- a/regress/connect-privsep.sh
+++ b/regress/connect-privsep.sh
@@ -1,8 +1,9 @@
-#       $OpenBSD: connect-privsep.sh,v 1.1 2002/03/21 21:45:07 markus Exp $
+#       $OpenBSD: connect-privsep.sh,v 1.2 2011/06/30 22:44:43 markus Exp $
 #       Placed in the Public Domain.
 tid="proxy connect with privsep"
+cp $OBJ/sshd_proxy $OBJ/sshd_proxy.orig
 echo 'UsePrivilegeSeparation yes' >> $OBJ/sshd_proxy
 for p in 1 2; do
@@ -11,3 +12,14 @@ for p in 1 2; do
                fail "ssh privsep+proxyconnect protocol $p failed"
        fi
 done
+cp $OBJ/sshd_proxy.orig $OBJ/sshd_proxy
+echo 'UsePrivilegeSeparation sandbox' >> $OBJ/sshd_proxy
+for p in 1 2; do
+        ${SSH} -$p -F $OBJ/ssh_proxy 999.999.999.999 true
+        if [ $? -ne 0 ]; then
+                # XXX replace this with fail once sandbox has stabilised
+                warn "ssh privsep/sandbox+proxyconnect protocol $p failed"
+        fi
+done
diff --git a/regress/dynamic-forward.sh b/regress/dynamic-forward.sh
index 4674a7baf..d1ab8059b 100644
--- a/regress/dynamic-forward.sh
+++ b/regress/dynamic-forward.sh
@@ -1,4 +1,4 @@
-#       $OpenBSD: dynamic-forward.sh,v 1.4 2004/06/22 22:55:56 dtucker Exp $
+#       $OpenBSD: dynamic-forward.sh,v 1.9 2011/06/03 00:29:52 dtucker Exp $
 #       Placed in the Public Domain.
 tid="dynamic forwarding"
@@ -20,9 +20,23 @@ trace "will use ProxyCommand $proxycmd"
 start_sshd
 for p in 1 2; do
+        n=0
+        error="1"
        trace "start dynamic forwarding, fork to background"
-        ${SSH} -$p -F $OBJ/ssh_config -f -D $FWDPORT -q somehost \
+        while [ "$error" -ne 0 -a "$n" -lt 3 ]; do
-                exec sh -c \'"echo \$\$ > $OBJ/remote_pid; exec sleep 444"\'
+                n=`expr $n + 1`
+                ${SSH} -$p -F $OBJ/ssh_config -f -D $FWDPORT -q \
+                    -oExitOnForwardFailure=yes somehost exec sh -c \
+                        \'"echo \$\$ > $OBJ/remote_pid; exec sleep 444"\'
+                error=$?
+                if [ "$error" -ne 0 ]; then
+                        trace "forward failed proto $p attempt $n err $error"
+                        sleep $n
+                fi
+        done
+        if [ "$error" -ne 0 ]; then
+                fatal "failed to start dynamic forwarding proto $p"
+        fi
        for s in 4 5; do
            for h in 127.0.0.1 localhost; do
@@ -44,7 +58,4 @@ for p in 1 2; do
        else
                fail "no pid file: $OBJ/remote_pid"
        fi
-        # Must allow time for connection tear-down
-        sleep 2
 done
diff --git a/regress/test-exec.sh b/regress/test-exec.sh
index 5c56aefff..092cfed5b 100644
--- a/regress/test-exec.sh
+++ b/regress/test-exec.sh
@@ -204,6 +204,11 @@ verbose ()
        fi
 }
+warn ()
+{
+        echo "WARNING: $@" >>$TEST_SSH_LOGFILE
+        echo "WARNING: $@"
+}
 fail ()
 {
diff --git a/regress/try-ciphers.sh b/regress/try-ciphers.sh
index ef776d2ee..0918d2245 100644
--- a/regress/try-ciphers.sh
+++ b/regress/try-ciphers.sh
@@ -1,4 +1,4 @@
-#       $OpenBSD: try-ciphers.sh,v 1.11 2007/06/07 19:41:46 pvalchev Exp $
+#       $OpenBSD: try-ciphers.sh,v 1.12 2011/08/02 01:23:41 djm Exp $
 #       Placed in the Public Domain.
 tid="try ciphers"
@@ -8,6 +8,8 @@ ciphers="aes128-cbc 3des-cbc blowfish-cbc cast128-cbc
        aes192-cbc aes256-cbc rijndael-cbc@lysator.liu.se
        aes128-ctr aes192-ctr aes256-ctr"
 macs="hmac-sha1 hmac-md5 umac-64@openssh.com hmac-sha1-96 hmac-md5-96"
+config_defined HAVE_EVP_SHA256 &&
+    macs="$macs hmac-sha2-256 hmac-sha2-256-96 hmac-sha2-512 hmac-sha2-512-96"
 for c in $ciphers; do
        for m in $macs; do
diff --git a/sandbox-darwin.c b/sandbox-darwin.c
new file mode 100644
index 000000000..69901ef14
--- /dev/null
+++ b/sandbox-darwin.c
@@ -0,0 +1,98 @@
+/*
+ * Copyright (c) 2011 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+#include "includes.h"
+#ifdef SANDBOX_DARWIN
+#include <sys/types.h>
+#include <sandbox.h>
+#include <errno.h>
+#include <stdarg.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include "log.h"
+#include "sandbox.h"
+#include "xmalloc.h"
+/* Darwin/OS X sandbox */
+struct ssh_sandbox {
+        pid_t child_pid;
+};
+struct ssh_sandbox *
+ssh_sandbox_init(void)
+{
+        struct ssh_sandbox *box;
+        /*
+         * Strictly, we don't need to maintain any state here but we need
+         * to return non-NULL to satisfy the API.
+         */
+        debug3("%s: preparing Darwin sandbox", __func__);
+        box = xcalloc(1, sizeof(*box));
+        box->child_pid = 0;
+        return box;
+}
+void
+ssh_sandbox_child(struct ssh_sandbox *box)
+{
+        char *errmsg;
+        struct rlimit rl_zero;
+        debug3("%s: starting Darwin sandbox", __func__);
+        if (sandbox_init(kSBXProfilePureComputation, SANDBOX_NAMED,
+            &errmsg) == -1)
+                fatal("%s: sandbox_init: %s", __func__, errmsg);
+        /*
+         * The kSBXProfilePureComputation still allows sockets, so
+         * we must disable these using rlimit.
+         */
+        rl_zero.rlim_cur = rl_zero.rlim_max = 0;
+        if (setrlimit(RLIMIT_FSIZE, &rl_zero) == -1)
+                fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s",
+                        __func__, strerror(errno));
+        if (setrlimit(RLIMIT_NOFILE, &rl_zero) == -1)
+                fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s",
+                        __func__, strerror(errno));
+        if (setrlimit(RLIMIT_NPROC, &rl_zero) == -1)
+                fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s",
+                        __func__, strerror(errno));
+}
+void
+ssh_sandbox_parent_finish(struct ssh_sandbox *box)
+{
+        free(box);
+        debug3("%s: finished", __func__);
+}
+void
+ssh_sandbox_parent_preauth(struct ssh_sandbox *box, pid_t child_pid)
+{
+        box->child_pid = child_pid;
+}
+#endif /* SANDBOX_DARWIN */
diff --git a/sandbox-null.c b/sandbox-null.c
new file mode 100644
index 000000000..29fa9669f
--- /dev/null
+++ b/sandbox-null.c
@@ -0,0 +1,72 @@
+/* $OpenBSD$ */
+/*
+ * Copyright (c) 2011 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+#include "includes.h"
+#ifdef SANDBOX_NULL
+#include <sys/types.h>
+#include <errno.h>
+#include <stdarg.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include "log.h"
+#include "ssh-sandbox.h"
+#include "xmalloc.h"
+/* dummy sandbox */
+struct ssh_sandbox {
+        int junk;
+};
+struct ssh_sandbox *
+ssh_sandbox_init(void)
+{
+        struct ssh_sandbox *box;
+        /*
+         * Strictly, we don't need to maintain any state here but we need
+         * to return non-NULL to satisfy the API.
+         */
+        box = xcalloc(1, sizeof(*box));
+        return box;
+}
+void
+ssh_sandbox_child(struct ssh_sandbox *box)
+{
+        /* Nothing to do here */
+}
+void
+ssh_sandbox_parent_finish(struct ssh_sandbox *box)
+{
+        free(box);
+}
+void
+ssh_sandbox_parent_preauth(struct ssh_sandbox *box, pid_t child_pid)
+{
+        /* Nothing to do here */
+}
+#endif /* SANDBOX_NULL */
diff --git a/sandbox-rlimit.c b/sandbox-rlimit.c
new file mode 100644
index 000000000..761e9284f
--- /dev/null
+++ b/sandbox-rlimit.c
@@ -0,0 +1,93 @@
+/* $OpenBSD: sandbox-rlimit.c,v 1.3 2011/06/23 09:34:13 djm Exp $ */
+/*
+ * Copyright (c) 2011 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+#include "includes.h"
+#ifdef SANDBOX_RLIMIT
+#include <sys/types.h>
+#include <sys/param.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+#include <errno.h>
+#include <stdarg.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include "log.h"
+#include "ssh-sandbox.h"
+#include "xmalloc.h"
+/* Minimal sandbox that sets zero nfiles, nprocs and filesize rlimits */
+struct ssh_sandbox {
+        pid_t child_pid;
+};
+struct ssh_sandbox *
+ssh_sandbox_init(void)
+{
+        struct ssh_sandbox *box;
+        /*
+         * Strictly, we don't need to maintain any state here but we need
+         * to return non-NULL to satisfy the API.
+         */
+        debug3("%s: preparing rlimit sandbox", __func__);
+        box = xcalloc(1, sizeof(*box));
+        box->child_pid = 0;
+        return box;
+}
+void
+ssh_sandbox_child(struct ssh_sandbox *box)
+{
+        struct rlimit rl_zero;
+        rl_zero.rlim_cur = rl_zero.rlim_max = 0;
+        if (setrlimit(RLIMIT_FSIZE, &rl_zero) == -1)
+                fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s",
+                        __func__, strerror(errno));
+        if (setrlimit(RLIMIT_NOFILE, &rl_zero) == -1)
+                fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0 }): %s",
+                        __func__, strerror(errno));
+#ifdef HAVE_RLIMIT_NPROC
+        if (setrlimit(RLIMIT_NPROC, &rl_zero) == -1)
+                fatal("%s: setrlimit(RLIMIT_NPROC, { 0, 0 }): %s",
+                        __func__, strerror(errno));
+#endif
+}
+void
+ssh_sandbox_parent_finish(struct ssh_sandbox *box)
+{
+        free(box);
+        debug3("%s: finished", __func__);
+}
+void
+ssh_sandbox_parent_preauth(struct ssh_sandbox *box, pid_t child_pid)
+{
+        box->child_pid = child_pid;
+}
+#endif /* SANDBOX_RLIMIT */
diff --git a/sandbox-systrace.c b/sandbox-systrace.c
new file mode 100644
index 000000000..5a39f4fe1
--- /dev/null
+++ b/sandbox-systrace.c
@@ -0,0 +1,198 @@
+/* $OpenBSD: sandbox-systrace.c,v 1.4 2011/07/29 14:42:45 djm Exp $ */
+/*
+ * Copyright (c) 2011 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+#include "includes.h"
+#ifdef SANDBOX_SYSTRACE
+#include <sys/types.h>
+#include <sys/param.h>
+#include <sys/ioctl.h>
+#include <sys/syscall.h>
+#include <sys/socket.h>
+#include <dev/systrace.h>
+#include <errno.h>
+#include <fcntl.h>
+#include <limits.h>
+#include <stdarg.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include "atomicio.h"
+#include "log.h"
+#include "ssh-sandbox.h"
+#include "xmalloc.h"
+struct sandbox_policy {
+        int syscall;
+        int action;
+};
+/* Permitted syscalls in preauth. Unlisted syscalls get SYSTR_POLICY_KILL */
+static const struct sandbox_policy preauth_policy[] = {
+        { SYS_open, SYSTR_POLICY_NEVER },
+        { SYS___sysctl, SYSTR_POLICY_PERMIT },
+        { SYS_close, SYSTR_POLICY_PERMIT },
+        { SYS_exit, SYSTR_POLICY_PERMIT },
+        { SYS_getpid, SYSTR_POLICY_PERMIT },
+        { SYS_gettimeofday, SYSTR_POLICY_PERMIT },
+        { SYS_madvise, SYSTR_POLICY_PERMIT },
+        { SYS_mmap, SYSTR_POLICY_PERMIT },
+        { SYS_mprotect, SYSTR_POLICY_PERMIT },
+        { SYS_poll, SYSTR_POLICY_PERMIT },
+        { SYS_munmap, SYSTR_POLICY_PERMIT },
+        { SYS_read, SYSTR_POLICY_PERMIT },
+        { SYS_select, SYSTR_POLICY_PERMIT },
+        { SYS_sigprocmask, SYSTR_POLICY_PERMIT },
+        { SYS_write, SYSTR_POLICY_PERMIT },
+        { -1, -1 }
+};
+struct ssh_sandbox {
+        int child_sock;
+        int parent_sock;
+        int systrace_fd;
+        pid_t child_pid;
+};
+struct ssh_sandbox *
+ssh_sandbox_init(void)
+{
+        struct ssh_sandbox *box;
+        int s[2];
+        debug3("%s: preparing systrace sandbox", __func__);
+        box = xcalloc(1, sizeof(*box));
+        if (socketpair(AF_UNIX, SOCK_STREAM, 0, s) == -1)
+                fatal("%s: socketpair: %s", __func__, strerror(errno));
+        box->child_sock = s[0];
+        box->parent_sock = s[1];
+        box->systrace_fd = -1;
+        box->child_pid = 0;
+        return box;
+}
+void
+ssh_sandbox_child(struct ssh_sandbox *box)
+{
+        char whatever = 0;
+        close(box->parent_sock);
+        /* Signal parent that we are ready */
+        debug3("%s: ready", __func__);
+        if (atomicio(vwrite, box->child_sock, &whatever, 1) != 1)
+                fatal("%s: write: %s", __func__, strerror(errno));
+        /* Wait for parent to signal for us to go */
+        if (atomicio(read, box->child_sock, &whatever, 1) != 1)
+                fatal("%s: read: %s", __func__, strerror(errno));
+        debug3("%s: started", __func__);
+        close(box->child_sock);
+}
+static void
+ssh_sandbox_parent(struct ssh_sandbox *box, pid_t child_pid,
+    const struct sandbox_policy *allowed_syscalls)
+{
+        int dev_systrace, i, j, found;
+        char whatever = 0;
+        struct systrace_policy policy;
+        debug3("%s: wait for child %ld", __func__, (long)child_pid);
+        box->child_pid = child_pid;
+        close(box->child_sock);
+        /* Wait for child to signal that it is ready */
+        if (atomicio(read, box->parent_sock, &whatever, 1) != 1)
+                fatal("%s: read: %s", __func__, strerror(errno));
+        debug3("%s: child %ld ready", __func__, (long)child_pid);
+        /* Set up systracing of child */
+        if ((dev_systrace = open("/dev/systrace", O_RDONLY)) == -1)
+                fatal("%s: open(\"/dev/systrace\"): %s", __func__,
+                    strerror(errno));
+        if (ioctl(dev_systrace, STRIOCCLONE, &box->systrace_fd) == -1)
+                fatal("%s: ioctl(STRIOCCLONE, %d): %s", __func__,
+                    dev_systrace, strerror(errno));
+        close(dev_systrace);
+        debug3("%s: systrace attach, fd=%d", __func__, box->systrace_fd);
+        if (ioctl(box->systrace_fd, STRIOCATTACH, &child_pid) == -1)
+                fatal("%s: ioctl(%d, STRIOCATTACH, %d): %s", __func__,
+                    box->systrace_fd, child_pid, strerror(errno));
+        /* Allocate and assign policy */
+        bzero(&policy, sizeof(policy));
+        policy.strp_op = SYSTR_POLICY_NEW;
+        policy.strp_maxents = SYS_MAXSYSCALL;
+        if (ioctl(box->systrace_fd, STRIOCPOLICY, &policy) == -1)
+                fatal("%s: ioctl(%d, STRIOCPOLICY (new)): %s", __func__,
+                    box->systrace_fd, strerror(errno));
+        policy.strp_op = SYSTR_POLICY_ASSIGN;
+        policy.strp_pid = box->child_pid;
+        if (ioctl(box->systrace_fd, STRIOCPOLICY, &policy) == -1)
+                fatal("%s: ioctl(%d, STRIOCPOLICY (assign)): %s",
+                    __func__, box->systrace_fd, strerror(errno));
+        /* Set per-syscall policy */
+        for (i = 0; i < SYS_MAXSYSCALL; i++) {
+                found = 0;
+                for (j = 0; allowed_syscalls[j].syscall != -1; j++) {
+                        if (allowed_syscalls[j].syscall == i) {
+                                found = 1;
+                                break;
+                        }
+                }
+                policy.strp_op = SYSTR_POLICY_MODIFY;
+                policy.strp_code = i;
+                policy.strp_policy = found ?
+                    allowed_syscalls[j].action : SYSTR_POLICY_KILL;
+                if (found)
+                        debug3("%s: policy: enable syscall %d", __func__, i);
+                if (ioctl(box->systrace_fd, STRIOCPOLICY, &policy) == -1)
+                        fatal("%s: ioctl(%d, STRIOCPOLICY (modify)): %s",
+                            __func__, box->systrace_fd, strerror(errno));
+        }
+        /* Signal the child to start running */
+        debug3("%s: start child %ld", __func__, (long)child_pid);
+        if (atomicio(vwrite, box->parent_sock, &whatever, 1) != 1)
+                fatal("%s: write: %s", __func__, strerror(errno));
+        close(box->parent_sock);
+}
+void
+ssh_sandbox_parent_finish(struct ssh_sandbox *box)
+{
+        /* Closing this before the child exits will terminate it */
+        close(box->systrace_fd);
+        free(box);
+        debug3("%s: finished", __func__);
+}
+void
+ssh_sandbox_parent_preauth(struct ssh_sandbox *box, pid_t child_pid)
+{
+        ssh_sandbox_parent(box, child_pid, preauth_policy);
+}
+#endif /* SANDBOX_SYSTRACE */
diff --git a/scp.0 b/scp.0
index 72467c8ec..a4fad8ade 100644
--- a/scp.0
+++ b/scp.0
@@ -153,4 +153,4 @@ AUTHORS
     Timo Rinne <tri@iki.fi>
     Tatu Ylonen <ylo@cs.hut.fi>
-OpenBSD 4.9                    December 9, 2010                    OpenBSD 4.9
+OpenBSD 5.0                    December 9, 2010                    OpenBSD 5.0
diff --git a/servconf.c b/servconf.c
index 11a69f819..1911ac540 100644
--- a/servconf.c
+++ b/servconf.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: servconf.c,v 1.213 2010/11/13 23:27:50 djm Exp $ */
+/* $OpenBSD: servconf.c,v 1.222 2011/06/22 21:57:01 djm Exp $ */
 /*
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
 *                    All rights reserved
@@ -130,8 +130,7 @@ initialize_server_options(ServerOptions *options)
        options->use_dns = -1;
        options->client_alive_interval = -1;
        options->client_alive_count_max = -1;
-        options->authorized_keys_file = NULL;
+        options->num_authkeys_files = 0;
-        options->authorized_keys_file2 = NULL;
        options->num_accept_env = 0;
        options->permit_tun = -1;
        options->num_permitted_opens = -1;
@@ -277,15 +276,12 @@ fill_default_server_options(ServerOptions *options)
                options->client_alive_interval = 0;
        if (options->client_alive_count_max == -1)
                options->client_alive_count_max = 3;
-        if (options->authorized_keys_file2 == NULL) {
+        if (options->num_authkeys_files == 0) {
-                /* authorized_keys_file2 falls back to authorized_keys_file */
+                options->authorized_keys_files[options->num_authkeys_files++] =
-                if (options->authorized_keys_file != NULL)
+                    xstrdup(_PATH_SSH_USER_PERMITTED_KEYS);
-                        options->authorized_keys_file2 = xstrdup(options->authorized_keys_file);
+                options->authorized_keys_files[options->num_authkeys_files++] =
-                else
+                    xstrdup(_PATH_SSH_USER_PERMITTED_KEYS2);
-                        options->authorized_keys_file2 = xstrdup(_PATH_SSH_USER_PERMITTED_KEYS2);
        }
-        if (options->authorized_keys_file == NULL)
-                options->authorized_keys_file = xstrdup(_PATH_SSH_USER_PERMITTED_KEYS);
        if (options->permit_tun == -1)
                options->permit_tun = SSH_TUNMODE_NO;
        if (options->zero_knowledge_password_authentication == -1)
@@ -299,7 +295,7 @@ fill_default_server_options(ServerOptions *options)
        /* Turn privilege separation on by default */
        if (use_privsep == -1)
-                use_privsep = 1;
+                use_privsep = PRIVSEP_ON;
 #ifndef HAVE_MMAP
        if (use_privsep && options->compression == 1) {
@@ -336,7 +332,7 @@ typedef enum {
        sMaxStartups, sMaxAuthTries, sMaxSessions,
        sBanner, sUseDNS, sHostbasedAuthentication,
        sHostbasedUsesNameFromPacketOnly, sClientAliveInterval,
-        sClientAliveCountMax, sAuthorizedKeysFile, sAuthorizedKeysFile2,
+        sClientAliveCountMax, sAuthorizedKeysFile,
        sGssAuthentication, sGssCleanupCreds, sGssStrictAcceptor,
        sGssKeyEx, sGssStoreRekey,
        sAcceptEnv, sPermitTunnel,
@@ -467,7 +463,7 @@ static struct {
        { "clientaliveinterval", sClientAliveInterval, SSHCFG_GLOBAL },
        { "clientalivecountmax", sClientAliveCountMax, SSHCFG_GLOBAL },
        { "authorizedkeysfile", sAuthorizedKeysFile, SSHCFG_ALL },
-        { "authorizedkeysfile2", sAuthorizedKeysFile2, SSHCFG_ALL },
+        { "authorizedkeysfile2", sDeprecated, SSHCFG_ALL },
        { "useprivilegeseparation", sUsePrivilegeSeparation, SSHCFG_GLOBAL},
        { "acceptenv", sAcceptEnv, SSHCFG_GLOBAL },
        { "permittunnel", sPermitTunnel, SSHCFG_ALL },
@@ -705,6 +701,43 @@ match_cfg_line(char **condition, int line, const char *user, const char *host,
 #define WHITESPACE " \t\r\n"
+/* Multistate option parsing */
+struct multistate {
+        char *key;
+        int value;
+};
+static const struct multistate multistate_addressfamily[] = {
+        { "inet",                       AF_INET },
+        { "inet6",                      AF_INET6 },
+        { "any",                        AF_UNSPEC },
+        { NULL, -1 }
+};
+static const struct multistate multistate_permitrootlogin[] = {
+        { "without-password",           PERMIT_NO_PASSWD },
+        { "forced-commands-only",       PERMIT_FORCED_ONLY },
+        { "yes",                        PERMIT_YES },
+        { "no",                         PERMIT_NO },
+        { NULL, -1 }
+};
+static const struct multistate multistate_compression[] = {
+        { "delayed",                    COMP_DELAYED },
+        { "yes",                        COMP_ZLIB },
+        { "no",                         COMP_NONE },
+        { NULL, -1 }
+};
+static const struct multistate multistate_gatewayports[] = {
+        { "clientspecified",            2 },
+        { "yes",                        1 },
+        { "no",                         0 },
+        { NULL, -1 }
+};
+static const struct multistate multistate_privsep[] = {
+        { "sandbox",                    PRIVSEP_SANDBOX },
+        { "yes",                        PRIVSEP_ON },
+        { "no",                         PRIVSEP_OFF },
+        { NULL, -1 }
+};
 int
 process_server_config_line(ServerOptions *options, char *line,
    const char *filename, int linenum, int *activep, const char *user,
@@ -718,6 +751,7 @@ process_server_config_line(ServerOptions *options, char *line,
        int port;
        u_int i, flags = 0;
        size_t len;
+        const struct multistate *multistate_ptr;
        cp = line;
        if ((arg = strdelim(&cp)) == NULL)
@@ -833,24 +867,27 @@ process_server_config_line(ServerOptions *options, char *line,
                break;
        case sAddressFamily:
+                intptr = &options->address_family;
+                multistate_ptr = multistate_addressfamily;
+                if (options->listen_addrs != NULL)
+                        fatal("%s line %d: address family must be specified "
+                            "before ListenAddress.", filename, linenum);
+ parse_multistate:
                arg = strdelim(&cp);
                if (!arg || *arg == '\0')
-                        fatal("%s line %d: missing address family.",
+                        fatal("%s line %d: missing argument.",
                            filename, linenum);
-                intptr = &options->address_family;
+                value = -1;
-                if (options->listen_addrs != NULL)
+                for (i = 0; multistate_ptr[i].key != NULL; i++) {
-                        fatal("%s line %d: address family must be specified before "
+                        if (strcasecmp(arg, multistate_ptr[i].key) == 0) {
-                            "ListenAddress.", filename, linenum);
+                                value = multistate_ptr[i].value;
-                if (strcasecmp(arg, "inet") == 0)
+                                break;
-                        value = AF_INET;
+                        }
-                else if (strcasecmp(arg, "inet6") == 0)
+                }
-                        value = AF_INET6;
+                if (value == -1)
-                else if (strcasecmp(arg, "any") == 0)
+                        fatal("%s line %d: unsupported option \"%s\".",
-                        value = AF_UNSPEC;
-                else
-                        fatal("%s line %d: unsupported address family \"%s\".",
                            filename, linenum, arg);
-                if (*intptr == -1)
+                if (*activep && *intptr == -1)
                        *intptr = value;
                break;
@@ -889,27 +926,8 @@ process_server_config_line(ServerOptions *options, char *line,
        case sPermitRootLogin:
                intptr = &options->permit_root_login;
-                arg = strdelim(&cp);
+                multistate_ptr = multistate_permitrootlogin;
-                if (!arg || *arg == '\0')
+                goto parse_multistate;
-                        fatal("%s line %d: missing yes/"
-                            "without-password/forced-commands-only/no "
-                            "argument.", filename, linenum);
-                value = 0;      /* silence compiler */
-                if (strcmp(arg, "without-password") == 0)
-                        value = PERMIT_NO_PASSWD;
-                else if (strcmp(arg, "forced-commands-only") == 0)
-                        value = PERMIT_FORCED_ONLY;
-                else if (strcmp(arg, "yes") == 0)
-                        value = PERMIT_YES;
-                else if (strcmp(arg, "no") == 0)
-                        value = PERMIT_NO;
-                else
-                        fatal("%s line %d: Bad yes/"
-                            "without-password/forced-commands-only/no "
-                            "argument: %s", filename, linenum, arg);
-                if (*activep && *intptr == -1)
-                        *intptr = value;
-                break;
        case sIgnoreRhosts:
                intptr = &options->ignore_rhosts;
@@ -1056,43 +1074,13 @@ process_server_config_line(ServerOptions *options, char *line,
        case sCompression:
                intptr = &options->compression;
-                arg = strdelim(&cp);
+                multistate_ptr = multistate_compression;
-                if (!arg || *arg == '\0')
+                goto parse_multistate;
-                        fatal("%s line %d: missing yes/no/delayed "
-                            "argument.", filename, linenum);
-                value = 0;      /* silence compiler */
-                if (strcmp(arg, "delayed") == 0)
-                        value = COMP_DELAYED;
-                else if (strcmp(arg, "yes") == 0)
-                        value = COMP_ZLIB;
-                else if (strcmp(arg, "no") == 0)
-                        value = COMP_NONE;
-                else
-                        fatal("%s line %d: Bad yes/no/delayed "
-                            "argument: %s", filename, linenum, arg);
-                if (*intptr == -1)
-                        *intptr = value;
-                break;
        case sGatewayPorts:
                intptr = &options->gateway_ports;
-                arg = strdelim(&cp);
+                multistate_ptr = multistate_gatewayports;
-                if (!arg || *arg == '\0')
+                goto parse_multistate;
-                        fatal("%s line %d: missing yes/no/clientspecified "
-                            "argument.", filename, linenum);
-                value = 0;      /* silence compiler */
-                if (strcmp(arg, "clientspecified") == 0)
-                        value = 2;
-                else if (strcmp(arg, "yes") == 0)
-                        value = 1;
-                else if (strcmp(arg, "no") == 0)
-                        value = 0;
-                else
-                        fatal("%s line %d: Bad yes/no/clientspecified "
-                            "argument: %s", filename, linenum, arg);
-                if (*activep && *intptr == -1)
-                        *intptr = value;
-                break;
        case sUseDNS:
                intptr = &options->use_dns;
@@ -1130,7 +1118,8 @@ process_server_config_line(ServerOptions *options, char *line,
        case sUsePrivilegeSeparation:
                intptr = &use_privsep;
-                goto parse_flag;
+                multistate_ptr = multistate_privsep;
+                goto parse_multistate;
        case sAllowUsers:
                while ((arg = strdelim(&cp)) && *arg != '\0') {
@@ -1296,14 +1285,22 @@ process_server_config_line(ServerOptions *options, char *line,
         * AuthorizedKeysFile   /etc/ssh_keys/%u
         */
        case sAuthorizedKeysFile:
-                charptr = &options->authorized_keys_file;
+                if (*activep && options->num_authkeys_files == 0) {
-                goto parse_tilde_filename;
+                        while ((arg = strdelim(&cp)) && *arg != '\0') {
-        case sAuthorizedKeysFile2:
+                                if (options->num_authkeys_files >=
-                charptr = &options->authorized_keys_file2;
+                                    MAX_AUTHKEYS_FILES)
-                goto parse_tilde_filename;
+                                        fatal("%s line %d: "
+                                            "too many authorized keys files.",
+                                            filename, linenum);
+                                options->authorized_keys_files[
+                                    options->num_authkeys_files++] =
+                                    tilde_expand_filename(arg, getuid());
+                        }
+                }
+                return 0;
        case sAuthorizedPrincipalsFile:
                charptr = &options->authorized_principals_file;
- parse_tilde_filename:
                arg = strdelim(&cp);
                if (!arg || *arg == '\0')
                        fatal("%s line %d: missing file name.",
@@ -1526,6 +1523,12 @@ parse_server_match_config(ServerOptions *options, const char *user,
                dst->n = src->n; \
        } \
 } while(0)
+#define M_CP_STRARRAYOPT(n, num_n) do {\
+        if (src->num_n != 0) { \
+                for (dst->num_n = 0; dst->num_n < src->num_n; dst->num_n++) \
+                        dst->n[dst->num_n] = xstrdup(src->n[dst->num_n]); \
+        } \
+} while(0)
 /*
 * Copy any supported values that are set.
@@ -1561,20 +1564,23 @@ copy_set_server_options(ServerOptions *dst, ServerOptions *src, int preauth)
        M_CP_INTOPT(ip_qos_interactive);
        M_CP_INTOPT(ip_qos_bulk);
-        M_CP_STROPT(banner);
+        /* See comment in servconf.h */
+        COPY_MATCH_STRING_OPTS();
+        /*
+         * The only things that should be below this point are string options
+         * which are only used after authentication.
+         */
        if (preauth)
                return;
        M_CP_STROPT(adm_forced_command);
        M_CP_STROPT(chroot_directory);
-        M_CP_STROPT(trusted_user_ca_keys);
-        M_CP_STROPT(revoked_keys_file);
-        M_CP_STROPT(authorized_keys_file);
-        M_CP_STROPT(authorized_keys_file2);
-        M_CP_STROPT(authorized_principals_file);
 }
 #undef M_CP_INTOPT
 #undef M_CP_STROPT
+#undef M_CP_STRARRAYOPT
 void
 parse_server_config(ServerOptions *options, const char *filename, Buffer *conf,
@@ -1600,31 +1606,34 @@ parse_server_config(ServerOptions *options, const char *filename, Buffer *conf,
 }
 static const char *
-fmt_intarg(ServerOpCodes code, int val)
+fmt_multistate_int(int val, const struct multistate *m)
 {
-        if (code == sAddressFamily) {
+        u_int i;
-                switch (val) {
-                case AF_INET:
+        for (i = 0; m[i].key != NULL; i++) {
-                        return "inet";
+                if (m[i].value == val)
-                case AF_INET6:
+                        return m[i].key;
-                        return "inet6";
-                case AF_UNSPEC:
-                        return "any";
-                default:
-                        return "UNKNOWN";
-                }
-        }
-        if (code == sPermitRootLogin) {
-                switch (val) {
-                case PERMIT_NO_PASSWD:
-                        return "without-password";
-                case PERMIT_FORCED_ONLY:
-                        return "forced-commands-only";
-                case PERMIT_YES:
-                        return "yes";
-                }
        }
-        if (code == sProtocol) {
+        return "UNKNOWN";
+}
+static const char *
+fmt_intarg(ServerOpCodes code, int val)
+{
+        if (val == -1)
+                return "unset";
+        switch (code) {
+        case sAddressFamily:
+                return fmt_multistate_int(val, multistate_addressfamily);
+        case sPermitRootLogin:
+                return fmt_multistate_int(val, multistate_permitrootlogin);
+        case sGatewayPorts:
+                return fmt_multistate_int(val, multistate_gatewayports);
+        case sCompression:
+                return fmt_multistate_int(val, multistate_compression);
+        case sUsePrivilegeSeparation:
+                return fmt_multistate_int(val, multistate_privsep);
+        case sProtocol:
                switch (val) {
                case SSH_PROTO_1:
                        return "1";
@@ -1635,20 +1644,16 @@ fmt_intarg(ServerOpCodes code, int val)
                default:
                        return "UNKNOWN";
                }
+        default:
+                switch (val) {
+                case 0:
+                        return "no";
+                case 1:
+                        return "yes";
+                default:
+                        return "UNKNOWN";
+                }
        }
-        if (code == sGatewayPorts && val == 2)
-                return "clientspecified";
-        if (code == sCompression && val == COMP_DELAYED)
-                return "delayed";
-        switch (val) {
-        case -1:
-                return "unset";
-        case 0:
-                return "no";
-        case 1:
-                return "yes";
-        }
-        return "UNKNOWN";
 }
 static const char *
@@ -1688,7 +1693,18 @@ dump_cfg_strarray(ServerOpCodes code, u_int count, char **vals)
        u_int i;
        for (i = 0; i < count; i++)
-                printf("%s %s\n", lookup_opcode_name(code),  vals[i]);
+                printf("%s %s\n", lookup_opcode_name(code), vals[i]);
+}
+static void
+dump_cfg_strarray_oneline(ServerOpCodes code, u_int count, char **vals)
+{
+        u_int i;
+        printf("%s", lookup_opcode_name(code));
+        for (i = 0; i < count; i++)
+                printf(" %s",  vals[i]);
+        printf("\n");
 }
 void
@@ -1790,8 +1806,6 @@ dump_config(ServerOptions *o)
        dump_cfg_string(sCiphers, o->ciphers);
        dump_cfg_string(sMacs, o->macs);
        dump_cfg_string(sBanner, o->banner);
-        dump_cfg_string(sAuthorizedKeysFile, o->authorized_keys_file);
-        dump_cfg_string(sAuthorizedKeysFile2, o->authorized_keys_file2);
        dump_cfg_string(sForceCommand, o->adm_forced_command);
        dump_cfg_string(sChrootDirectory, o->chroot_directory);
        dump_cfg_string(sTrustedUserCAKeys, o->trusted_user_ca_keys);
@@ -1804,6 +1818,8 @@ dump_config(ServerOptions *o)
        dump_cfg_string(sLogFacility, log_facility_name(o->log_facility));
        /* string array arguments */
+        dump_cfg_strarray_oneline(sAuthorizedKeysFile, o->num_authkeys_files,
+            o->authorized_keys_files);
        dump_cfg_strarray(sHostKeyFile, o->num_host_key_files,
             o->host_key_files);
        dump_cfg_strarray(sHostKeyFile, o->num_host_cert_files,
@@ -1829,7 +1845,8 @@ dump_config(ServerOptions *o)
                }
        dump_cfg_string(sPermitTunnel, s);
-        printf("ipqos 0x%02x 0x%02x\n", o->ip_qos_interactive, o->ip_qos_bulk);
+        printf("ipqos %s ", iptos2str(o->ip_qos_interactive));
+        printf("%s\n", iptos2str(o->ip_qos_bulk));
        channel_print_adm_permitted_opens();
 }
diff --git a/servconf.h b/servconf.h
index be3be0be3..0be15f09a 100644
--- a/servconf.h
+++ b/servconf.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: servconf.h,v 1.95 2010/11/13 23:27:50 djm Exp $ */
+/* $OpenBSD: servconf.h,v 1.99 2011/06/22 21:57:01 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
@@ -27,6 +27,7 @@
 #define MAX_HOSTCERTS           256     /* Max # host certificates. */
 #define MAX_ACCEPT_ENV          256     /* Max # of env vars. */
 #define MAX_MATCH_GROUPS        256     /* Max # of groups for Match. */
+#define MAX_AUTHKEYS_FILES      256     /* Max # of authorized_keys files. */
 /* permit_root_login */
 #define PERMIT_NOT_SET          -1
@@ -35,6 +36,11 @@
 #define PERMIT_NO_PASSWD        2
 #define PERMIT_YES              3
+/* use_privsep */
+#define PRIVSEP_OFF             0
+#define PRIVSEP_ON              1
+#define PRIVSEP_SANDBOX         2
 #define DEFAULT_AUTH_FAIL_MAX   6       /* Default for MaxAuthTries */
 #define DEFAULT_SESSIONS_MAX    10      /* Default for MaxSessions */
@@ -149,8 +155,8 @@ typedef struct {
                                         * disconnect the session
                                         */
-        char   *authorized_keys_file;   /* File containing public keys */
+        u_int num_authkeys_files;       /* Files containing public keys */
-        char   *authorized_keys_file2;
+        char   *authorized_keys_files[MAX_AUTHKEYS_FILES];
        char   *adm_forced_command;
@@ -168,6 +174,20 @@ typedef struct {
        char   *authorized_principals_file;
 }       ServerOptions;
+/*
+ * These are string config options that must be copied between the
+ * Match sub-config and the main config, and must be sent from the
+ * privsep slave to the privsep master. We use a macro to ensure all
+ * the options are copied and the copies are done in the correct order.
+ */
+#define COPY_MATCH_STRING_OPTS() do { \
+                M_CP_STROPT(banner); \
+                M_CP_STROPT(trusted_user_ca_keys); \
+                M_CP_STROPT(revoked_keys_file); \
+                M_CP_STROPT(authorized_principals_file); \
+                M_CP_STRARRAYOPT(authorized_keys_files, num_authkeys_files); \
+        } while (0)
 void     initialize_server_options(ServerOptions *);
 void     fill_default_server_options(ServerOptions *);
 int      process_server_config_line(ServerOptions *, char *, const char *, int,
diff --git a/serverloop.c b/serverloop.c
index db3c2514f..f7bbdad07 100644
--- a/serverloop.c
+++ b/serverloop.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: serverloop.c,v 1.159 2009/05/28 16:50:16 andreas Exp $ */
+/* $OpenBSD: serverloop.c,v 1.160 2011/05/15 08:09:01 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -131,8 +131,8 @@ notify_setup(void)
 {
        if (pipe(notify_pipe) < 0) {
                error("pipe(notify_pipe) failed %s", strerror(errno));
-        } else if ((fcntl(notify_pipe[0], F_SETFD, 1) == -1) ||
+        } else if ((fcntl(notify_pipe[0], F_SETFD, FD_CLOEXEC) == -1) ||
-            (fcntl(notify_pipe[1], F_SETFD, 1) == -1)) {
+            (fcntl(notify_pipe[1], F_SETFD, FD_CLOEXEC) == -1)) {
                error("fcntl(notify_pipe, F_SETFD) failed %s", strerror(errno));
                close(notify_pipe[0]);
                close(notify_pipe[1]);
diff --git a/session.c b/session.c
index 1eaacb528..5b34aa2a2 100644
--- a/session.c
+++ b/session.c
@@ -96,6 +96,10 @@
 #include <kafs.h>
 #endif
+#ifdef WITH_SELINUX
+#include <selinux/selinux.h>
+#endif
 #define IS_INTERNAL_SFTP(c) \
        (!strncmp(c, INTERNAL_SFTP_NAME, sizeof(INTERNAL_SFTP_NAME) - 1) && \
         (c[sizeof(INTERNAL_SFTP_NAME) - 1] == '\0' || \
@@ -1531,6 +1535,9 @@ do_pwchange(Session *s)
        if (s->ttyfd != -1) {
                fprintf(stderr,
                    "You must change your password now and login again!\n");
+#ifdef WITH_SELINUX
+                setexeccon(NULL);
+#endif
 #ifdef PASSWD_NEEDS_USERNAME
                execl(_PATH_PASSWD_PROG, "passwd", s->pw->pw_name,
                    (char *)NULL);
diff --git a/sftp-server.0 b/sftp-server.0
index b7d30ec09..08695a038 100644
--- a/sftp-server.0
+++ b/sftp-server.0
@@ -61,4 +61,4 @@ HISTORY
 AUTHORS
     Markus Friedl <markus@openbsd.org>
-OpenBSD 4.9                     January 9, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     January 9, 2010                    OpenBSD 5.0
diff --git a/sftp-server.c b/sftp-server.c
index b268d0883..9d01c7d79 100644
--- a/sftp-server.c
+++ b/sftp-server.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sftp-server.c,v 1.93 2010/12/04 00:18:01 djm Exp $ */
+/* $OpenBSD: sftp-server.c,v 1.94 2011/06/17 21:46:16 djm Exp $ */
 /*
 * Copyright (c) 2000-2004 Markus Friedl.  All rights reserved.
 *
@@ -68,7 +68,7 @@ Buffer iqueue;
 Buffer oqueue;
 /* Version of client */
-int version;
+u_int version;
 /* Disable writes */
 int readonly;
@@ -522,7 +522,7 @@ process_init(void)
        Buffer msg;
        version = get_int();
-        verbose("received client version %d", version);
+        verbose("received client version %u", version);
        buffer_init(&msg);
        buffer_put_char(&msg, SSH2_FXP_VERSION);
        buffer_put_int(&msg, SSH2_FILEXFER_VERSION);
diff --git a/sftp.0 b/sftp.0
index 960ffb9df..f29776701 100644
--- a/sftp.0
+++ b/sftp.0
@@ -28,7 +28,13 @@ DESCRIPTION
     The final usage format allows for automated sessions using the -b option.
     In such cases, it is necessary to configure non-interactive
     authentication to obviate the need to enter a password at connection time
-     (see sshd(8) and ssh-keygen(1) for details).  The options are as follows:
+     (see sshd(8) and ssh-keygen(1) for details).
+     Since some usage formats use colon characters to delimit host names from
+     path names, IPv6 addresses must be enclosed in square brackets to avoid
+     ambiguity.
+     The options are as follows:
     -1      Specify the use of protocol version 1.
@@ -287,7 +293,7 @@ INTERACTIVE COMMANDS
             remote-path is specified, then remote-path must specify a
             directory.
-             If ether the -P or -p flag is specified, then full file
+             If either the -P or -p flag is specified, then full file
             permissions and access times are copied too.
             If the -r flag is specified then directories will be copied
@@ -328,4 +334,4 @@ SEE ALSO
     draft-ietf-secsh-filexfer-00.txt, January 2001, work in progress
     material.
-OpenBSD 4.9                    December 4, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     August 7, 2011                     OpenBSD 5.0
diff --git a/sftp.1 b/sftp.1
index 89b5d3544..eb88014e2 100644
--- a/sftp.1
+++ b/sftp.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: sftp.1,v 1.88 2010/12/04 00:18:01 djm Exp $
+.\" $OpenBSD: sftp.1,v 1.90 2011/08/07 12:55:30 dtucker Exp $
 .\"
 .\" Copyright (c) 2001 Damien Miller.  All rights reserved.
 .\"
@@ -22,7 +22,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 4 2010 $
+.Dd $Mdocdate: August 7 2011 $
 .Dt SFTP 1
 .Os
 .Sh NAME
@@ -89,6 +89,10 @@ to obviate the need to enter a password at connection time (see
 and
 .Xr ssh-keygen 1
 for details).
+.Pp
+Since some usage formats use colon characters to delimit host names from path
+names, IPv6 addresses must be enclosed in square brackets to avoid ambiguity.
+.Pp
 The options are as follows:
 .Bl -tag -width Ds
 .It Fl 1
@@ -479,7 +483,7 @@ is specified, then
 .Ar remote-path
 must specify a directory.
 .Pp
-If ether the
+If either the
 .Fl P
 or
 .Fl p
diff --git a/ssh-add.0 b/ssh-add.0
index d91512888..e1e2a6417 100644
--- a/ssh-add.0
+++ b/ssh-add.0
@@ -112,4 +112,4 @@ AUTHORS
     created OpenSSH.  Markus Friedl contributed the support for SSH protocol
     versions 1.5 and 2.0.
-OpenBSD 4.9                    October 28, 2010                    OpenBSD 4.9
+OpenBSD 5.0                    October 28, 2010                    OpenBSD 5.0
diff --git a/ssh-add.c b/ssh-add.c
index 64bf89bc0..3e2f9f6ce 100644
--- a/ssh-add.c
+++ b/ssh-add.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-add.c,v 1.100 2010/08/31 12:33:38 djm Exp $ */
+/* $OpenBSD: ssh-add.c,v 1.101 2011/05/04 21:15:29 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -145,8 +145,12 @@ add_file(AuthenticationConnection *ac, const char *filename)
        char *comment = NULL, *fp;
        char msg[1024], *certpath;
        int fd, perms_ok, ret = -1;
+        Buffer keyblob;
-        if ((fd = open(filename, O_RDONLY)) < 0) {
+        if (strcmp(filename, "-") == 0) {
+                fd = STDIN_FILENO;
+                filename = "(stdin)";
+        } else if ((fd = open(filename, O_RDONLY)) < 0) {
                perror(filename);
                return -1;
        }
@@ -155,18 +159,28 @@ add_file(AuthenticationConnection *ac, const char *filename)
         * Since we'll try to load a keyfile multiple times, permission errors
         * will occur multiple times, so check perms first and bail if wrong.
         */
-        perms_ok = key_perm_ok(fd, filename);
+        if (fd != STDIN_FILENO) {
-        close(fd);
+                perms_ok = key_perm_ok(fd, filename);
-        if (!perms_ok)
+                if (!perms_ok) {
+                        close(fd);
+                        return -1;
+                }
+        }
+        buffer_init(&keyblob);
+        if (!key_load_file(fd, filename, &keyblob)) {
+                buffer_free(&keyblob);
+                close(fd);
                return -1;
+        }
+        close(fd);
        /* At first, try empty passphrase */
-        private = key_load_private(filename, "", &comment);
+        private = key_parse_private(&keyblob, filename, "", &comment);
        if (comment == NULL)
                comment = xstrdup(filename);
        /* try last */
        if (private == NULL && pass != NULL)
-                private = key_load_private(filename, pass, NULL);
+                private = key_parse_private(&keyblob, filename, pass, NULL);
        if (private == NULL) {
                /* clear passphrase since it did not work */
                clear_pass();
@@ -177,9 +191,11 @@ add_file(AuthenticationConnection *ac, const char *filename)
                        if (strcmp(pass, "") == 0) {
                                clear_pass();
                                xfree(comment);
+                                buffer_free(&keyblob);
                                return -1;
                        }
-                        private = key_load_private(filename, pass, &comment);
+                        private = key_parse_private(&keyblob, filename, pass,
+                            &comment);
                        if (private != NULL)
                                break;
                        clear_pass();
@@ -187,14 +203,7 @@ add_file(AuthenticationConnection *ac, const char *filename)
                            "Bad passphrase, try again for %.200s: ", comment);
                }
        }
-        if (blacklisted_key(private, &fp) == 1) {
+        buffer_free(&keyblob);
-                fprintf(stderr, "Public key %s blacklisted (see "
-                    "ssh-vulnkey(1)); refusing to add it\n", fp);
-                xfree(fp);
-                key_free(private);
-                xfree(comment);
-                return -1;
-        }
        if (ssh_add_identity_constrained(ac, private, comment, lifetime,
            confirm)) {
@@ -209,6 +218,14 @@ add_file(AuthenticationConnection *ac, const char *filename)
        } else {
                fprintf(stderr, "Could not add identity: %s\n", filename);
        }
+        if (blacklisted_key(private, &fp) == 1) {
+                fprintf(stderr, "Public key %s blacklisted (see "
+                    "ssh-vulnkey(1)); refusing to add it\n", fp);
+                xfree(fp);
+                key_free(private);
+                xfree(comment);
+                return -1;
+        }
        /* Now try to add the certificate flavour too */
@@ -380,7 +397,6 @@ main(int argc, char **argv)
        sanitise_stdfd();
        __progname = ssh_get_progname(argv[0]);
-        init_rng();
        seed_rng();
        OpenSSL_add_all_algorithms();
diff --git a/ssh-agent.0 b/ssh-agent.0
index c3de21b42..751f49041 100644
--- a/ssh-agent.0
+++ b/ssh-agent.0
@@ -120,4 +120,4 @@ AUTHORS
     created OpenSSH.  Markus Friedl contributed the support for SSH protocol
     versions 1.5 and 2.0.
-OpenBSD 4.9                    November 21, 2010                   OpenBSD 4.9
+OpenBSD 5.0                    November 21, 2010                   OpenBSD 5.0
diff --git a/ssh-agent.c b/ssh-agent.c
index afba413d7..b9498e6ef 100644
--- a/ssh-agent.c
+++ b/ssh-agent.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-agent.c,v 1.171 2010/11/21 01:01:13 djm Exp $ */
+/* $OpenBSD: ssh-agent.c,v 1.172 2011/06/03 01:37:40 dtucker Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -1097,7 +1097,11 @@ cleanup_handler(int sig)
 static void
 check_parent_exists(void)
 {
-        if (parent_pid != -1 && kill(parent_pid, 0) < 0) {
+        /*
+         * If our parent has exited then getppid() will return (pid_t)1,
+         * so testing for that should be safe.
+         */
+        if (parent_pid != -1 && getppid() != parent_pid) {
                /* printf("Parent has died - Authentication agent exiting.\n"); */
                cleanup_socket();
                _exit(2);
@@ -1154,7 +1158,6 @@ main(int ac, char **av)
        OpenSSL_add_all_algorithms();
        __progname = ssh_get_progname(av[0]);
-        init_rng();
        seed_rng();
        while ((ch = getopt(ac, av, "cdksa:t:")) != -1) {
diff --git a/ssh-keygen.0 b/ssh-keygen.0
index a01b30db0..6c1763d4d 100644
--- a/ssh-keygen.0
+++ b/ssh-keygen.0
@@ -24,6 +24,7 @@ SYNOPSIS
     ssh-keygen -s ca_key -I certificate_identity [-h] [-n principals]
                [-O option] [-V validity_interval] [-z serial_number] file ...
     ssh-keygen -L [-f input_keyfile]
+     ssh-keygen -A
 DESCRIPTION
     ssh-keygen generates, manages and converts authentication keys for
@@ -57,8 +58,8 @@ DESCRIPTION
     the -p option.
     There is no way to recover a lost passphrase.  If the passphrase is lost
-     or forgotten, a new key must be generated and copied to the corresponding
+     or forgotten, a new key must be generated and the corresponding public
-     public key to other machines.
+     key copied to other machines.
     For RSA1 keys, there is also a comment field in the key file that is only
     for convenience to the user to help identify the key.  The comment can
@@ -71,6 +72,12 @@ DESCRIPTION
     The options are as follows:
+     -A      For each of the key types (rsa1, rsa, dsa and ecdsa) for which
+             host keys do not exist, generate the host keys with the default
+             key file path, an empty passphrase, default bits for the key
+             type, and default comment.  This is used by /etc/rc to generate
+             new host keys.
     -a trials
             Specifies the number of primality tests to perform when screening
             DH-GEX candidates using the -T command.
@@ -82,7 +89,11 @@ DESCRIPTION
             Specifies the number of bits in the key to create.  For RSA keys,
             the minimum size is 768 bits and the default is 2048 bits.
             Generally, 2048 bits is considered sufficient.  DSA keys must be
-             exactly 1024 bits as specified by FIPS 186-2.
+             exactly 1024 bits as specified by FIPS 186-2.  For ECDSA keys,
+             the -b flag determines they key length by selecting from one of
+             three elliptic curve sizes: 256, 384 or 521 bits.  Attempting to
+             use bit lengths other than these three values for ECDSA keys will
+             fail.
     -C comment
             Provides a new comment.
@@ -231,7 +242,7 @@ DESCRIPTION
             containing the private key, for the old passphrase, and twice for
             the new passphrase.
-     -q      Silence ssh-keygen.  Used by /etc/rc when creating a new key.
+     -q      Silence ssh-keygen.
     -R hostname
             Removes all keys belonging to hostname from a known_hosts file.
@@ -440,4 +451,4 @@ AUTHORS
     created OpenSSH.  Markus Friedl contributed the support for SSH protocol
     versions 1.5 and 2.0.
-OpenBSD 4.9                    October 28, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     April 13, 2011                     OpenBSD 5.0
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index d0c00ebb0..7c8b1f202 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: ssh-keygen.1,v 1.101 2010/10/28 18:33:28 jmc Exp $
+.\"     $OpenBSD: ssh-keygen.1,v 1.106 2011/04/13 04:09:37 djm Exp $
 .\"
 .\" Author: Tatu Ylonen <ylo@cs.hut.fi>
 .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -35,7 +35,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: October 28 2010 $
+.Dd $Mdocdate: April 13 2011 $
 .Dt SSH-KEYGEN 1
 .Os
 .Sh NAME
@@ -117,6 +117,8 @@
 .Nm ssh-keygen
 .Fl L
 .Op Fl f Ar input_keyfile
+.Nm ssh-keygen
+.Fl A
 .Ek
 .Sh DESCRIPTION
 .Nm
@@ -171,9 +173,8 @@ The passphrase can be changed later by using the
 option.
 .Pp
 There is no way to recover a lost passphrase.
-If the passphrase is
+If the passphrase is lost or forgotten, a new key must be generated
-lost or forgotten, a new key must be generated and copied to the
+and the corresponding public key copied to other machines.
-corresponding public key to other machines.
 .Pp
 For RSA1 keys,
 there is also a comment field in the key file that is only for
@@ -190,6 +191,11 @@ should be placed to be activated.
 .Pp
 The options are as follows:
 .Bl -tag -width Ds
+.It Fl A
+For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys
+do not exist, generate the host keys with the default key file path,
+an empty passphrase, default bits for the key type, and default comment.
+This is used by system administration scripts to generate new host keys.
 .It Fl a Ar trials
 Specifies the number of primality tests to perform when screening DH-GEX
 candidates using the
@@ -202,6 +208,12 @@ Specifies the number of bits in the key to create.
 For RSA keys, the minimum size is 768 bits and the default is 2048 bits.
 Generally, 2048 bits is considered sufficient.
 DSA keys must be exactly 1024 bits as specified by FIPS 186-2.
+For ECDSA keys, the
+.Fl b
+flag determines they key length by selecting from one of three elliptic
+curve sizes: 256, 384 or 521 bits.
+Attempting to use bit lengths other than these three values for ECDSA keys
+will fail.
 .It Fl C Ar comment
 Provides a new comment.
 .It Fl c
@@ -391,7 +403,6 @@ new passphrase.
 .It Fl q
 Silence
 .Nm ssh-keygen .
-Used by system administration scripts when creating a new key.
 .It Fl R Ar hostname
 Removes all keys belonging to
 .Ar hostname
@@ -520,7 +531,7 @@ option.
 Valid generator values are 2, 3, and 5.
 .Pp
 Screened DH groups may be installed in
-.Pa /etc/moduli .
+.Pa /etc/ssh/moduli .
 It is important that this file contains moduli of a range of bit lengths and
 that both ends of a connection share common moduli.
 .Sh CERTIFICATES
@@ -646,7 +657,7 @@ on all machines
 where the user wishes to log in using public key authentication.
 There is no need to keep the contents of this file secret.
 .Pp
-.It Pa /etc/moduli
+.It Pa /etc/ssh/moduli
 Contains Diffie-Hellman groups used for DH-GEX.
 The file format is described in
 .Xr moduli 5 .
diff --git a/ssh-keygen.c b/ssh-keygen.c
index c95e4ab29..4b6218b10 100644
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-keygen.c,v 1.205 2011/01/11 06:13:10 djm Exp $ */
+/* $OpenBSD: ssh-keygen.c,v 1.210 2011/04/18 00:46:05 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1994 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -49,10 +49,7 @@
 #include "hostfile.h"
 #include "dns.h"
 #include "ssh2.h"
-#ifdef ENABLE_PKCS11
 #include "ssh-pkcs11.h"
-#endif
 /* Number of bits in the RSA/DSA key.  This value can be set on the command line. */
 #define DEFAULT_BITS            2048
@@ -160,6 +157,38 @@ int gen_candidates(FILE *, u_int32_t, u_int32_t, BIGNUM *);
 int prime_test(FILE *, FILE *, u_int32_t, u_int32_t);
 static void
+type_bits_valid(int type, u_int32_t *bitsp)
+{
+        u_int maxbits;
+        if (type == KEY_UNSPEC) {
+                fprintf(stderr, "unknown key type %s\n", key_type_name);
+                exit(1);
+        }
+        if (*bitsp == 0) {
+                if (type == KEY_DSA)
+                        *bitsp = DEFAULT_BITS_DSA;
+                else if (type == KEY_ECDSA)
+                        *bitsp = DEFAULT_BITS_ECDSA;
+                else
+                        *bitsp = DEFAULT_BITS;
+        }
+        maxbits = (type == KEY_DSA) ?
+            OPENSSL_DSA_MAX_MODULUS_BITS : OPENSSL_RSA_MAX_MODULUS_BITS;
+        if (*bitsp > maxbits) {
+                fprintf(stderr, "key bits exceeds maximum %d\n", maxbits);
+                exit(1);
+        }
+        if (type == KEY_DSA && *bitsp != 1024)
+                fatal("DSA keys must be 1024 bits");
+        else if (type != KEY_ECDSA && *bitsp < 768)
+                fatal("Key must at least be 768 bits");
+        else if (type == KEY_ECDSA && key_ecdsa_bits_to_nid(*bitsp) == -1)
+                fatal("Invalid ECDSA key length - valid lengths are "
+                    "256, 384 or 521 bits");
+}
+static void
 ask_filename(struct passwd *pw, const char *prompt)
 {
        char buf[1024];
@@ -818,6 +847,98 @@ do_fingerprint(struct passwd *pw)
 }
 static void
+do_gen_all_hostkeys(struct passwd *pw)
+{
+        struct {
+                char *key_type;
+                char *key_type_display;
+                char *path;
+        } key_types[] = {
+                { "rsa1", "RSA1", _PATH_HOST_KEY_FILE },
+                { "rsa", "RSA" ,_PATH_HOST_RSA_KEY_FILE },
+                { "dsa", "DSA", _PATH_HOST_DSA_KEY_FILE },
+                { "ecdsa", "ECDSA",_PATH_HOST_ECDSA_KEY_FILE },
+                { NULL, NULL, NULL }
+        };
+        int first = 0;
+        struct stat st;
+        Key *private, *public;
+        char comment[1024];
+        int i, type, fd;
+        FILE *f;
+        for (i = 0; key_types[i].key_type; i++) {
+                if (stat(key_types[i].path, &st) == 0)
+                        continue;
+                if (errno != ENOENT) {
+                        printf("Could not stat %s: %s", key_types[i].path,
+                            strerror(errno));
+                        first = 0;
+                        continue;
+                }
+                if (first == 0) {
+                        first = 1;
+                        printf("%s: generating new host keys: ", __progname);
+                }
+                printf("%s ", key_types[i].key_type_display);
+                fflush(stdout);
+                arc4random_stir();
+                type = key_type_from_name(key_types[i].key_type);
+                strlcpy(identity_file, key_types[i].path, sizeof(identity_file));
+                bits = 0;
+                type_bits_valid(type, &bits);
+                private = key_generate(type, bits);
+                if (private == NULL) {
+                        fprintf(stderr, "key_generate failed\n");
+                        first = 0;
+                        continue;
+                }
+                public  = key_from_private(private);
+                snprintf(comment, sizeof comment, "%s@%s", pw->pw_name,
+                    hostname);
+                if (!key_save_private(private, identity_file, "", comment)) {
+                        printf("Saving the key failed: %s.\n", identity_file);
+                        key_free(private);
+                        key_free(public);
+                        first = 0;
+                        continue;
+                }
+                key_free(private);
+                arc4random_stir();
+                strlcat(identity_file, ".pub", sizeof(identity_file));
+                fd = open(identity_file, O_WRONLY | O_CREAT | O_TRUNC, 0644);
+                if (fd == -1) {
+                        printf("Could not save your public key in %s\n",
+                            identity_file);
+                        key_free(public);
+                        first = 0;
+                        continue;
+                }
+                f = fdopen(fd, "w");
+                if (f == NULL) {
+                        printf("fdopen %s failed\n", identity_file);
+                        key_free(public);
+                        first = 0;
+                        continue;
+                }
+                if (!key_write(public, f)) {
+                        fprintf(stderr, "write key failed\n");
+                        key_free(public);
+                        first = 0;
+                        continue;
+                }
+                fprintf(f, " %s\n", comment);
+                fclose(f);
+                key_free(public);
+        }
+        if (first != 0)
+                printf("\n");
+}
+static void
 printhost(FILE *f, const char *name, Key *public, int ca, int hash)
 {
        if (print_fingerprint) {
@@ -1330,6 +1451,9 @@ prepare_options_buf(Buffer *c, int which)
            certflags_command != NULL)
                add_string_option(c, "force-command", certflags_command);
        if ((which & OPTIONS_EXTENSIONS) != 0 &&
+            (certflags_flags & CERTOPT_X_FWD) != 0)
+                add_flag_option(c, "permit-X11-forwarding");
+        if ((which & OPTIONS_EXTENSIONS) != 0 &&
            (certflags_flags & CERTOPT_AGENT_FWD) != 0)
                add_flag_option(c, "permit-agent-forwarding");
        if ((which & OPTIONS_EXTENSIONS) != 0 &&
@@ -1341,9 +1465,6 @@ prepare_options_buf(Buffer *c, int which)
        if ((which & OPTIONS_EXTENSIONS) != 0 &&
            (certflags_flags & CERTOPT_USER_RC) != 0)
                add_flag_option(c, "permit-user-rc");
-        if ((which & OPTIONS_EXTENSIONS) != 0 &&
-            (certflags_flags & CERTOPT_X_FWD) != 0)
-                add_flag_option(c, "permit-X11-forwarding");
        if ((which & OPTIONS_CRITICAL) != 0 &&
            certflags_src_addr != NULL)
                add_string_option(c, "source-address", certflags_src_addr);
@@ -1593,7 +1714,7 @@ add_cert_option(char *opt)
 {
        char *val;
-        if (strcmp(opt, "clear") == 0)
+        if (strcasecmp(opt, "clear") == 0)
                certflags_flags = 0;
        else if (strcasecmp(opt, "no-x11-forwarding") == 0)
                certflags_flags &= ~CERTOPT_X_FWD;
@@ -1745,6 +1866,7 @@ usage(void)
 {
        fprintf(stderr, "usage: %s [options]\n", __progname);
        fprintf(stderr, "Options:\n");
+        fprintf(stderr, "  -A          Generate non-existent host keys for all key types.\n");
        fprintf(stderr, "  -a trials   Number of trials for screening DH-GEX moduli.\n");
        fprintf(stderr, "  -B          Show bubblebabble digest of key file.\n");
        fprintf(stderr, "  -b bits     Number of bits in the key to create.\n");
@@ -1799,9 +1921,9 @@ main(int argc, char **argv)
        struct passwd *pw;
        struct stat st;
        int opt, type, fd;
-        u_int maxbits;
        u_int32_t memory = 0, generator_wanted = 0, trials = 100;
        int do_gen_candidates = 0, do_screen_candidates = 0;
+        int gen_all_hostkeys = 0;
        BIGNUM *start = NULL;
        FILE *f;
        const char *errstr;
@@ -1817,7 +1939,6 @@ main(int argc, char **argv)
        OpenSSL_add_all_algorithms();
        log_init(argv[0], SYSLOG_LEVEL_INFO, SYSLOG_FACILITY_USER, 1);
-        init_rng();
        seed_rng();
        /* we need this for the home * directory.  */
@@ -1831,9 +1952,12 @@ main(int argc, char **argv)
                exit(1);
        }
-        while ((opt = getopt(argc, argv, "degiqpclBHLhvxXyF:b:f:t:D:I:P:m:N:n:"
+        while ((opt = getopt(argc, argv, "AegiqpclBHLhvxXyF:b:f:t:D:I:P:m:N:n:"
            "O:C:r:g:R:T:G:M:S:s:a:V:W:z:")) != -1) {
                switch (opt) {
+                case 'A':
+                        gen_all_hostkeys = 1;
+                        break;
                case 'b':
                        bits = (u_int32_t)strtonum(optarg, 256, 32768, &errstr);
                        if (errstr)
@@ -1928,9 +2052,6 @@ main(int argc, char **argv)
                case 'y':
                        print_public = 1;
                        break;
-                case 'd':
-                        key_type_name = "dsa";
-                        break;
                case 's':
                        ca_key_path = optarg;
                        break;
@@ -2109,37 +2230,19 @@ main(int argc, char **argv)
                return (0);
        }
+        if (gen_all_hostkeys) {
+                do_gen_all_hostkeys(pw);
+                return (0);
+        }
        arc4random_stir();
        if (key_type_name == NULL)
                key_type_name = "rsa";
        type = key_type_from_name(key_type_name);
-        if (type == KEY_UNSPEC) {
+        type_bits_valid(type, &bits);
-                fprintf(stderr, "unknown key type %s\n", key_type_name);
-                exit(1);
-        }
-        if (bits == 0) {
-                if (type == KEY_DSA)
-                        bits = DEFAULT_BITS_DSA;
-                else if (type == KEY_ECDSA)
-                        bits = DEFAULT_BITS_ECDSA;
-                else
-                        bits = DEFAULT_BITS;
-        }
-        maxbits = (type == KEY_DSA) ?
-            OPENSSL_DSA_MAX_MODULUS_BITS : OPENSSL_RSA_MAX_MODULUS_BITS;
-        if (bits > maxbits) {
-                fprintf(stderr, "key bits exceeds maximum %d\n", maxbits);
-                exit(1);
-        }
-        if (type == KEY_DSA && bits != 1024)
-                fatal("DSA keys must be 1024 bits");
-        else if (type != KEY_ECDSA && bits < 768)
-                fatal("Key must at least be 768 bits");
-        else if (type == KEY_ECDSA && key_ecdsa_bits_to_nid(bits) == -1)
-                fatal("Invalid ECDSA key length - valid lengths are "
-                    "256, 384 or 521 bits");
        if (!quiet)
                printf("Generating public/private %s key pair.\n", key_type_name);
        private = key_generate(type, bits);
diff --git a/ssh-keyscan.0 b/ssh-keyscan.0
index 4c3d2dbcc..d9db0d4c9 100644
--- a/ssh-keyscan.0
+++ b/ssh-keyscan.0
@@ -106,4 +106,4 @@ BUGS
     This is because it opens a connection to the ssh port, reads the public
     key, and drops the connection as soon as it gets the key.
-OpenBSD 4.9                     August 31, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     August 31, 2010                    OpenBSD 5.0
diff --git a/ssh-keyscan.c b/ssh-keyscan.c
index 25d7ac66f..b085dd417 100644
--- a/ssh-keyscan.c
+++ b/ssh-keyscan.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-keyscan.c,v 1.84 2011/01/04 20:44:13 otto Exp $ */
+/* $OpenBSD: ssh-keyscan.c,v 1.85 2011/03/15 10:36:02 okan Exp $ */
 /*
 * Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>.
 *
@@ -535,7 +535,7 @@ conloop(void)
                        seltime.tv_sec--;
                }
        } else
-                seltime.tv_sec = seltime.tv_usec = 0;
+                timerclear(&seltime);
        r = xcalloc(read_wait_nfdset, sizeof(fd_mask));
        e = xcalloc(read_wait_nfdset, sizeof(fd_mask));
@@ -620,7 +620,6 @@ main(int argc, char **argv)
        extern char *optarg;
        __progname = ssh_get_progname(argv[0]);
-        init_rng();
        seed_rng();
        TAILQ_INIT(&tq);
diff --git a/ssh-keysign.0 b/ssh-keysign.0
index bff850f27..9252084c9 100644
--- a/ssh-keysign.0
+++ b/ssh-keysign.0
@@ -48,4 +48,4 @@ HISTORY
 AUTHORS
     Markus Friedl <markus@openbsd.org>
-OpenBSD 4.9                     August 31, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     August 31, 2010                    OpenBSD 5.0
diff --git a/ssh-keysign.c b/ssh-keysign.c
index aa1be91f5..1deb7e141 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-keysign.c,v 1.35 2010/08/31 12:33:38 djm Exp $ */
+/* $OpenBSD: ssh-keysign.c,v 1.36 2011/02/16 00:31:14 djm Exp $ */
 /*
 * Copyright (c) 2002 Markus Friedl.  All rights reserved.
 *
@@ -178,7 +178,6 @@ main(int argc, char **argv)
        permanently_set_uid(pw);
-        init_rng();
        seed_rng();
        arc4random_stir();
diff --git a/ssh-pkcs11-helper.0 b/ssh-pkcs11-helper.0
index 22526781e..107117ed9 100644
--- a/ssh-pkcs11-helper.0
+++ b/ssh-pkcs11-helper.0
@@ -22,4 +22,4 @@ HISTORY
 AUTHORS
     Markus Friedl <markus@openbsd.org>
-OpenBSD 4.9                    February 10, 2010                   OpenBSD 4.9
+OpenBSD 5.0                    February 10, 2010                   OpenBSD 5.0
diff --git a/ssh-pkcs11-helper.c b/ssh-pkcs11-helper.c
index 8e3f57ace..cd33515f6 100644
--- a/ssh-pkcs11-helper.c
+++ b/ssh-pkcs11-helper.c
@@ -280,7 +280,6 @@ main(int argc, char **argv)
        TAILQ_INIT(&pkcs11_keylist);
        pkcs11_init(0);
-        init_rng();
        seed_rng();
        __progname = ssh_get_progname(argv[0]);
diff --git a/ssh-pkcs11.c b/ssh-pkcs11.c
index 286c232c7..1f4c1c8e4 100644
--- a/ssh-pkcs11.c
+++ b/ssh-pkcs11.c
@@ -590,4 +590,18 @@ fail:
        return (-1);
 }
+#else
+int
+pkcs11_init(int interactive)
+{
+        return (0);
+}
+void
+pkcs11_terminate(void)
+{
+        return;
+}
 #endif /* ENABLE_PKCS11 */
diff --git a/ssh-rand-helper.0 b/ssh-rand-helper.0
deleted file mode 100644
index 93d3554fc..000000000
--- a/ssh-rand-helper.0
+++ /dev/null
@@ -1,51 +0,0 @@
-SSH-RAND-HELPER(8)      OpenBSD System Manager's Manual     SSH-RAND-HELPER(8)
-NAME
-     ssh-rand-helper - random number gatherer for OpenSSH
-SYNOPSIS
-     ssh-rand-hlper [-vxXh] [-b bytes]
-DESCRIPTION
-     ssh-rand-helper is a small helper program used by ssh(1), ssh-add(1),
-     ssh-agent(1), ssh-keygen(1), ssh-keyscan(1) and sshd(8) to gather random
-     numbers of cryptographic quality if the openssl(4) library has not been
-     configured to provide them itself.
-     Normally ssh-rand-helper will generate a strong random seed and provide
-     it to the calling program via standard output. If standard output is a
-     tty, ssh-rand-helper will instead print the seed in hexidecimal format
-     unless told otherwise.
-     ssh-rand-helper will by default gather random numbers from the system
-     commands listed in /etc/ssh/ssh_prng_cmds.  The output of each of the
-     commands listed will be hashed and used to generate a random seed for the
-     calling program.  ssh-rand-helper will also store seed files in
-     ~/.ssh/prng_seed between executions.
-     Alternately, ssh-rand-helper may be configured at build time to collect
-     random numbers from a EGD/PRNGd server via a unix domain or localhost tcp
-     socket.
-     This program is not intended to be run by the end-user, so the few
-     commandline options are for debugging purposes only.
-     -b bytes
-             Specify the number of random bytes to include in the output.
-     -x      Output a hexidecimal instead of a binary seed.
-     -X      Force output of a binary seed, even if standard output is a tty
-     -v      Turn on debugging message. Multiple -v options will increase the
-             debugging level.
-     -h      Display a summary of options.
-AUTHORS
-     Damien Miller <djm@mindrot.org>
-SEE ALSO
-     ssh(1), ssh-add(1), ssh-keygen(1), sshd(8)
-OpenBSD 4.9                     April 14, 2002                     OpenBSD 4.9
diff --git a/ssh-rand-helper.8 b/ssh-rand-helper.8
deleted file mode 100644
index af5a72fcb..000000000
--- a/ssh-rand-helper.8
+++ /dev/null
@@ -1,94 +0,0 @@
-.\" $Id: ssh-rand-helper.8,v 1.3 2007/01/22 01:44:53 djm Exp $
-.\"
-.\" Copyright (c) 2002 Damien Miller.  All rights reserved.
-.\"
-.\" Redistribution and use in source and binary forms, with or without
-.\" modification, are permitted provided that the following conditions
-.\" are met:
-.\" 1. Redistributions of source code must retain the above copyright
-.\"    notice, this list of conditions and the following disclaimer.
-.\" 2. Redistributions in binary form must reproduce the above copyright
-.\"    notice, this list of conditions and the following disclaimer in the
-.\"    documentation and/or other materials provided with the distribution.
-.\"
-.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
-.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
-.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
-.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
-.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
-.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-.\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-.\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
-.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-.\"
-.Dd April 14, 2002
-.Dt SSH-RAND-HELPER 8
-.Os
-.Sh NAME
-.Nm ssh-rand-helper
-.Nd random number gatherer for OpenSSH
-.Sh SYNOPSIS
-.Nm ssh-rand-hlper
-.Op Fl vxXh
-.Op Fl b Ar bytes
-.Sh DESCRIPTION
-.Nm
-is a small helper program used by
-.Xr ssh 1 ,
-.Xr ssh-add 1 ,
-.Xr ssh-agent 1 ,
-.Xr ssh-keygen 1 ,
-.Xr ssh-keyscan 1
-and
-.Xr sshd 8
-to gather random numbers of cryptographic quality if the
-.Xr openssl 4
-library has not been configured to provide them itself.
-.Pp
-Normally
-.Nm
-will generate a strong random seed and provide it to the calling
-program via standard output. If standard output is a tty,
-.Nm
-will instead print the seed in hexidecimal format unless told otherwise.
-.Pp
-.Nm
-will by default gather random numbers from the system commands listed
-in
-.Pa /etc/ssh/ssh_prng_cmds .
-The output of each of the commands listed will be hashed and used to
-generate a random seed for the calling program.
-.Nm
-will also store seed files in
-.Pa ~/.ssh/prng_seed
-between executions.
-.Pp
-Alternately,
-.Nm
-may be configured at build time to collect random numbers from a
-EGD/PRNGd server via a unix domain or localhost tcp socket.
-.Pp
-This program is not intended to be run by the end-user, so the few
-commandline options are for debugging purposes only.
-.Bl -tag -width Ds
-.It Fl b Ar bytes
-Specify the number of random bytes to include in the output.
-.It Fl x
-Output a hexidecimal instead of a binary seed.
-.It Fl X
-Force output of a binary seed, even if standard output is a tty
-.It Fl v
-Turn on debugging message. Multiple
-.Fl v
-options will increase the debugging level.
-.It Fl h
-Display a summary of options.
-.El
-.Sh AUTHORS
-Damien Miller <djm@mindrot.org>
-.Sh SEE ALSO
-.Xr ssh 1 ,
-.Xr ssh-add 1 ,
-.Xr ssh-keygen 1 ,
-.Xr sshd 8
diff --git a/ssh-rand-helper.c b/ssh-rand-helper.c
deleted file mode 100644
index fa5070499..000000000
--- a/ssh-rand-helper.c
+++ /dev/null
@@ -1,932 +0,0 @@
-/*
- * Copyright (c) 2001-2002 Damien Miller.  All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the above copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- *
- * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
- * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
- * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
- * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
- * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
- * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
- * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
- * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- */
-#include "includes.h"
-#include <sys/types.h>
-#include <sys/resource.h>
-#include <sys/stat.h>
-#include <sys/wait.h>
-#include <sys/socket.h>
-#include <stdarg.h>
-#include <stddef.h>
-#include <string.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-#ifdef HAVE_SYS_UN_H
-# include <sys/un.h>
-#endif
-#include <errno.h>
-#include <fcntl.h>
-#include <pwd.h>
-#include <signal.h>
-#include <time.h>
-#include <unistd.h>
-#include <openssl/rand.h>
-#include <openssl/sha.h>
-#include <openssl/crypto.h>
-/* SunOS 4.4.4 needs this */
-#ifdef HAVE_FLOATINGPOINT_H
-# include <floatingpoint.h>
-#endif /* HAVE_FLOATINGPOINT_H */
-#include "misc.h"
-#include "xmalloc.h"
-#include "atomicio.h"
-#include "pathnames.h"
-#include "log.h"
-/* Number of bytes we write out */
-#define OUTPUT_SEED_SIZE        48
-/* Length of on-disk seedfiles */
-#define SEED_FILE_SIZE          1024
-/* Maximum number of command-line arguments to read from file */
-#define NUM_ARGS                10
-/* Minimum number of usable commands to be considered sufficient */
-#define MIN_ENTROPY_SOURCES     16
-/* Path to on-disk seed file (relative to user's home directory */
-#ifndef SSH_PRNG_SEED_FILE
-# define SSH_PRNG_SEED_FILE      _PATH_SSH_USER_DIR"/prng_seed"
-#endif
-/* Path to PRNG commands list */
-#ifndef SSH_PRNG_COMMAND_FILE
-# define SSH_PRNG_COMMAND_FILE   SSHDIR "/ssh_prng_cmds"
-#endif
-extern char *__progname;
-#define WHITESPACE " \t\n"
-#ifndef RUSAGE_SELF
-# define RUSAGE_SELF 0
-#endif
-#ifndef RUSAGE_CHILDREN
-# define RUSAGE_CHILDREN 0
-#endif
-#if !defined(PRNGD_SOCKET) && !defined(PRNGD_PORT)
-# define USE_SEED_FILES
-#endif
-typedef struct {
-        /* Proportion of data that is entropy */
-        double rate;
-        /* Counter goes positive if this command times out */
-        unsigned int badness;
-        /* Increases by factor of two each timeout */
-        unsigned int sticky_badness;
-        /* Path to executable */
-        char *path;
-        /* argv to pass to executable */
-        char *args[NUM_ARGS]; /* XXX: arbitrary limit */
-        /* full command string (debug) */
-        char *cmdstring;
-} entropy_cmd_t;
-/* slow command timeouts (all in milliseconds) */
-/* static int entropy_timeout_default = ENTROPY_TIMEOUT_MSEC; */
-static int entropy_timeout_current = ENTROPY_TIMEOUT_MSEC;
-/* this is initialised from a file, by prng_read_commands() */
-static entropy_cmd_t *entropy_cmds = NULL;
-/* Prototypes */
-double stir_from_system(void);
-double stir_from_programs(void);
-double stir_gettimeofday(double entropy_estimate);
-double stir_clock(double entropy_estimate);
-double stir_rusage(int who, double entropy_estimate);
-double hash_command_output(entropy_cmd_t *src, unsigned char *hash);
-int get_random_bytes_prngd(unsigned char *buf, int len,
-    unsigned short tcp_port, char *socket_path);
-/*
- * Collect 'len' bytes of entropy into 'buf' from PRNGD/EGD daemon
- * listening either on 'tcp_port', or via Unix domain socket at *
- * 'socket_path'.
- * Either a non-zero tcp_port or a non-null socket_path must be
- * supplied.
- * Returns 0 on success, -1 on error
- */
-int
-get_random_bytes_prngd(unsigned char *buf, int len,
-    unsigned short tcp_port, char *socket_path)
-{
-        int fd, addr_len, rval, errors;
-        u_char msg[2];
-        struct sockaddr_storage addr;
-        struct sockaddr_in *addr_in = (struct sockaddr_in *)&addr;
-        struct sockaddr_un *addr_un = (struct sockaddr_un *)&addr;
-        mysig_t old_sigpipe;
-        /* Sanity checks */
-        if (socket_path == NULL && tcp_port == 0)
-                fatal("You must specify a port or a socket");
-        if (socket_path != NULL &&
-            strlen(socket_path) >= sizeof(addr_un->sun_path))
-                fatal("Random pool path is too long");
-        if (len <= 0 || len > 255)
-                fatal("Too many bytes (%d) to read from PRNGD", len);
-        memset(&addr, '\0', sizeof(addr));
-        if (tcp_port != 0) {
-                addr_in->sin_family = AF_INET;
-                addr_in->sin_addr.s_addr = htonl(INADDR_LOOPBACK);
-                addr_in->sin_port = htons(tcp_port);
-                addr_len = sizeof(*addr_in);
-        } else {
-                addr_un->sun_family = AF_UNIX;
-                strlcpy(addr_un->sun_path, socket_path,
-                    sizeof(addr_un->sun_path));
-                addr_len = offsetof(struct sockaddr_un, sun_path) +
-                    strlen(socket_path) + 1;
-        }
-        old_sigpipe = mysignal(SIGPIPE, SIG_IGN);
-        errors = 0;
-        rval = -1;
-reopen:
-        fd = socket(addr.ss_family, SOCK_STREAM, 0);
-        if (fd == -1) {
-                error("Couldn't create socket: %s", strerror(errno));
-                goto done;
-        }
-        if (connect(fd, (struct sockaddr*)&addr, addr_len) == -1) {
-                if (tcp_port != 0) {
-                        error("Couldn't connect to PRNGD port %d: %s",
-                            tcp_port, strerror(errno));
-                } else {
-                        error("Couldn't connect to PRNGD socket \"%s\": %s",
-                            addr_un->sun_path, strerror(errno));
-                }
-                goto done;
-        }
-        /* Send blocking read request to PRNGD */
-        msg[0] = 0x02;
-        msg[1] = len;
-        if (atomicio(vwrite, fd, msg, sizeof(msg)) != sizeof(msg)) {
-                if (errno == EPIPE && errors < 10) {
-                        close(fd);
-                        errors++;
-                        goto reopen;
-                }
-                error("Couldn't write to PRNGD socket: %s",
-                    strerror(errno));
-                goto done;
-        }
-        if (atomicio(read, fd, buf, len) != (size_t)len) {
-                if (errno == EPIPE && errors < 10) {
-                        close(fd);
-                        errors++;
-                        goto reopen;
-                }
-                error("Couldn't read from PRNGD socket: %s",
-                    strerror(errno));
-                goto done;
-        }
-        rval = 0;
-done:
-        mysignal(SIGPIPE, old_sigpipe);
-        if (fd != -1)
-                close(fd);
-        return rval;
-}
-static int
-seed_from_prngd(unsigned char *buf, size_t bytes)
-{
-#ifdef PRNGD_PORT
-        debug("trying egd/prngd port %d", PRNGD_PORT);
-        if (get_random_bytes_prngd(buf, bytes, PRNGD_PORT, NULL) == 0)
-                return 0;
-#endif
-#ifdef PRNGD_SOCKET
-        debug("trying egd/prngd socket %s", PRNGD_SOCKET);
-        if (get_random_bytes_prngd(buf, bytes, 0, PRNGD_SOCKET) == 0)
-                return 0;
-#endif
-        return -1;
-}
-double
-stir_gettimeofday(double entropy_estimate)
-{
-        struct timeval tv;
-        if (gettimeofday(&tv, NULL) == -1)
-                fatal("Couldn't gettimeofday: %s", strerror(errno));
-        RAND_add(&tv, sizeof(tv), entropy_estimate);
-        return entropy_estimate;
-}
-double
-stir_clock(double entropy_estimate)
-{
-#ifdef HAVE_CLOCK
-        clock_t c;
-        c = clock();
-        RAND_add(&c, sizeof(c), entropy_estimate);
-        return entropy_estimate;
-#else /* _HAVE_CLOCK */
-        return 0;
-#endif /* _HAVE_CLOCK */
-}
-double
-stir_rusage(int who, double entropy_estimate)
-{
-#ifdef HAVE_GETRUSAGE
-        struct rusage ru;
-        if (getrusage(who, &ru) == -1)
-                return 0;
-        RAND_add(&ru, sizeof(ru), entropy_estimate);
-        return entropy_estimate;
-#else /* _HAVE_GETRUSAGE */
-        return 0;
-#endif /* _HAVE_GETRUSAGE */
-}
-static int
-timeval_diff(struct timeval *t1, struct timeval *t2)
-{
-        int secdiff, usecdiff;
-        secdiff = t2->tv_sec - t1->tv_sec;
-        usecdiff = (secdiff*1000000) + (t2->tv_usec - t1->tv_usec);
-        return (int)(usecdiff / 1000);
-}
-double
-hash_command_output(entropy_cmd_t *src, unsigned char *hash)
-{
-        char buf[8192];
-        fd_set rdset;
-        int bytes_read, cmd_eof, error_abort, msec_elapsed, p[2];
-        int status, total_bytes_read;
-        static int devnull = -1;
-        pid_t pid;
-        SHA_CTX sha;
-        struct timeval tv_start, tv_current;
-        debug3("Reading output from \'%s\'", src->cmdstring);
-        if (devnull == -1) {
-                devnull = open("/dev/null", O_RDWR);
-                if (devnull == -1)
-                        fatal("Couldn't open /dev/null: %s",
-                            strerror(errno));
-        }
-        if (pipe(p) == -1)
-                fatal("Couldn't open pipe: %s", strerror(errno));
-        (void)gettimeofday(&tv_start, NULL); /* record start time */
-        switch (pid = fork()) {
-                case -1: /* Error */
-                        close(p[0]);
-                        close(p[1]);
-                        fatal("Couldn't fork: %s", strerror(errno));
-                        /* NOTREACHED */
-                case 0: /* Child */
-                        dup2(devnull, STDIN_FILENO);
-                        dup2(p[1], STDOUT_FILENO);
-                        dup2(p[1], STDERR_FILENO);
-                        close(p[0]);
-                        close(p[1]);
-                        close(devnull);
-                        execv(src->path, (char**)(src->args));
-                        debug("(child) Couldn't exec '%s': %s",
-                            src->cmdstring, strerror(errno));
-                        _exit(-1);
-                default: /* Parent */
-                        break;
-        }
-        RAND_add(&pid, sizeof(&pid), 0.0);
-        close(p[1]);
-        /* Hash output from child */
-        SHA1_Init(&sha);
-        cmd_eof = error_abort = msec_elapsed = total_bytes_read = 0;
-        while (!error_abort && !cmd_eof) {
-                int ret;
-                struct timeval tv;
-                int msec_remaining;
-                (void) gettimeofday(&tv_current, 0);
-                msec_elapsed = timeval_diff(&tv_start, &tv_current);
-                if (msec_elapsed >= entropy_timeout_current) {
-                        error_abort=1;
-                        continue;
-                }
-                msec_remaining = entropy_timeout_current - msec_elapsed;
-                FD_ZERO(&rdset);
-                FD_SET(p[0], &rdset);
-                tv.tv_sec = msec_remaining / 1000;
-                tv.tv_usec = (msec_remaining % 1000) * 1000;
-                ret = select(p[0] + 1, &rdset, NULL, NULL, &tv);
-                RAND_add(&tv, sizeof(tv), 0.0);
-                switch (ret) {
-                case 0:
-                        /* timer expired */
-                        error_abort = 1;
-                        kill(pid, SIGINT);
-                        break;
-                case 1:
-                        /* command input */
-                        do {
-                                bytes_read = read(p[0], buf, sizeof(buf));
-                        } while (bytes_read == -1 && errno == EINTR);
-                        RAND_add(&bytes_read, sizeof(&bytes_read), 0.0);
-                        if (bytes_read == -1) {
-                                error_abort = 1;
-                                break;
-                        } else if (bytes_read) {
-                                SHA1_Update(&sha, buf, bytes_read);
-                                total_bytes_read += bytes_read;
-                        } else {
-                                cmd_eof = 1;
-                        }
-                        break;
-                case -1:
-                default:
-                        /* error */
-                        debug("Command '%s': select() failed: %s",
-                            src->cmdstring, strerror(errno));
-                        error_abort = 1;
-                        break;
-                }
-        }
-        SHA1_Final(hash, &sha);
-        close(p[0]);
-        debug3("Time elapsed: %d msec", msec_elapsed);
-        if (waitpid(pid, &status, 0) == -1) {
-                error("Couldn't wait for child '%s' completion: %s",
-                    src->cmdstring, strerror(errno));
-                return 0.0;
-        }
-        RAND_add(&status, sizeof(&status), 0.0);
-        if (error_abort) {
-                /*
-                 * Closing p[0] on timeout causes the entropy command to
-                 * SIGPIPE. Take whatever output we got, and mark this
-                 * command as slow
-                 */
-                debug2("Command '%s' timed out", src->cmdstring);
-                src->sticky_badness *= 2;
-                src->badness = src->sticky_badness;
-                return total_bytes_read;
-        }
-        if (WIFEXITED(status)) {
-                if (WEXITSTATUS(status) == 0) {
-                        return total_bytes_read;
-                } else {
-                        debug2("Command '%s' exit status was %d",
-                            src->cmdstring, WEXITSTATUS(status));
-                        src->badness = src->sticky_badness = 128;
-                        return 0.0;
-                }
-        } else if (WIFSIGNALED(status)) {
-                debug2("Command '%s' returned on uncaught signal %d !",
-                    src->cmdstring, status);
-                src->badness = src->sticky_badness = 128;
-                return 0.0;
-        } else
-                return 0.0;
-}
-double
-stir_from_system(void)
-{
-        double total_entropy_estimate;
-        long int i;
-        total_entropy_estimate = 0;
-        i = getpid();
-        RAND_add(&i, sizeof(i), 0.5);
-        total_entropy_estimate += 0.1;
-        i = getppid();
-        RAND_add(&i, sizeof(i), 0.5);
-        total_entropy_estimate += 0.1;
-        i = getuid();
-        RAND_add(&i, sizeof(i), 0.0);
-        i = getgid();
-        RAND_add(&i, sizeof(i), 0.0);
-        total_entropy_estimate += stir_gettimeofday(1.0);
-        total_entropy_estimate += stir_clock(0.5);
-        total_entropy_estimate += stir_rusage(RUSAGE_SELF, 2.0);
-        return total_entropy_estimate;
-}
-double
-stir_from_programs(void)
-{
-        int c;
-        double entropy, total_entropy;
-        unsigned char hash[SHA_DIGEST_LENGTH];
-        total_entropy = 0;
-        for(c = 0; entropy_cmds[c].path != NULL; c++) {
-                if (!entropy_cmds[c].badness) {
-                        /* Hash output from command */
-                        entropy = hash_command_output(&entropy_cmds[c],
-                            hash);
-                        /* Scale back estimate by command's rate */
-                        entropy *= entropy_cmds[c].rate;
-                        /* Upper bound of entropy is SHA_DIGEST_LENGTH */
-                        if (entropy > SHA_DIGEST_LENGTH)
-                                entropy = SHA_DIGEST_LENGTH;
-                        /* Stir it in */
-                        RAND_add(hash, sizeof(hash), entropy);
-                        debug3("Got %0.2f bytes of entropy from '%s'",
-                            entropy, entropy_cmds[c].cmdstring);
-                        total_entropy += entropy;
-                        /* Execution time should be a bit unpredictable */
-                        total_entropy += stir_gettimeofday(0.05);
-                        total_entropy += stir_clock(0.05);
-                        total_entropy += stir_rusage(RUSAGE_SELF, 0.1);
-                        total_entropy += stir_rusage(RUSAGE_CHILDREN, 0.1);
-                } else {
-                        debug2("Command '%s' disabled (badness %d)",
-                            entropy_cmds[c].cmdstring,
-                            entropy_cmds[c].badness);
-                        if (entropy_cmds[c].badness > 0)
-                                entropy_cmds[c].badness--;
-                }
-        }
-        return total_entropy;
-}
-/*
- * prng seedfile functions
- */
-int
-prng_check_seedfile(char *filename)
-{
-        struct stat st;
-        /*
-         * XXX raceable: eg replace seed between this stat and subsequent
-         * open. Not such a problem because we don't really trust the
-         * seed file anyway.
-         * XXX: use secure path checking as elsewhere in OpenSSH
-         */
-        if (lstat(filename, &st) == -1) {
-                /* Give up on hard errors */
-                if (errno != ENOENT)
-                        debug("WARNING: Couldn't stat random seed file "
-                            "\"%.100s\": %s", filename, strerror(errno));
-                return 0;
-        }
-        /* regular file? */
-        if (!S_ISREG(st.st_mode))
-                fatal("PRNG seedfile %.100s is not a regular file",
-                    filename);
-        /* mode 0600, owned by root or the current user? */
-        if (((st.st_mode & 0177) != 0) || !(st.st_uid == getuid())) {
-                debug("WARNING: PRNG seedfile %.100s must be mode 0600, "
-                    "owned by uid %li", filename, (long int)getuid());
-                return 0;
-        }
-        return 1;
-}
-void
-prng_write_seedfile(void)
-{
-        int fd, save_errno;
-        unsigned char seed[SEED_FILE_SIZE];
-        char filename[MAXPATHLEN], tmpseed[MAXPATHLEN];
-        struct passwd *pw;
-        mode_t old_umask;
-        pw = getpwuid(getuid());
-        if (pw == NULL)
-                fatal("Couldn't get password entry for current user "
-                    "(%li): %s", (long int)getuid(), strerror(errno));
-        /* Try to ensure that the parent directory is there */
-        snprintf(filename, sizeof(filename), "%.512s/%s", pw->pw_dir,
-            _PATH_SSH_USER_DIR);
-        if (mkdir(filename, 0700) < 0 && errno != EEXIST)
-                fatal("mkdir %.200s: %s", filename, strerror(errno));
-        snprintf(filename, sizeof(filename), "%.512s/%s", pw->pw_dir,
-            SSH_PRNG_SEED_FILE);
-        strlcpy(tmpseed, filename, sizeof(tmpseed));
-        if (strlcat(tmpseed, ".XXXXXXXXXX", sizeof(tmpseed)) >=
-            sizeof(tmpseed))
-                fatal("PRNG seed filename too long");
-        if (RAND_bytes(seed, sizeof(seed)) <= 0)
-                fatal("PRNG seed extraction failed");
-        /* Don't care if the seed doesn't exist */
-        prng_check_seedfile(filename);
-        old_umask = umask(0177);
-        if ((fd = mkstemp(tmpseed)) == -1) {
-                debug("WARNING: couldn't make temporary PRNG seedfile %.100s "
-                    "(%.100s)", tmpseed, strerror(errno));
-        } else {
-                debug("writing PRNG seed to file %.100s", tmpseed);
-                if (atomicio(vwrite, fd, &seed, sizeof(seed)) < sizeof(seed)) {
-                        save_errno = errno;
-                        close(fd);
-                        unlink(tmpseed);
-                        fatal("problem writing PRNG seedfile %.100s "
-                            "(%.100s)", filename, strerror(save_errno));
-                }
-                close(fd);
-                debug("moving temporary PRNG seed to file %.100s", filename);
-                if (rename(tmpseed, filename) == -1) {
-                        save_errno = errno;
-                        unlink(tmpseed);
-                        fatal("problem renaming PRNG seedfile from %.100s "
-                            "to %.100s (%.100s)", tmpseed, filename,
-                            strerror(save_errno));
-                }
-        }
-        umask(old_umask);
-}
-void
-prng_read_seedfile(void)
-{
-        int fd;
-        char seed[SEED_FILE_SIZE], filename[MAXPATHLEN];
-        struct passwd *pw;
-        pw = getpwuid(getuid());
-        if (pw == NULL)
-                fatal("Couldn't get password entry for current user "
-                    "(%li): %s", (long int)getuid(), strerror(errno));
-        snprintf(filename, sizeof(filename), "%.512s/%s", pw->pw_dir,
-                SSH_PRNG_SEED_FILE);
-        debug("loading PRNG seed from file %.100s", filename);
-        if (!prng_check_seedfile(filename)) {
-                verbose("Random seed file not found or invalid, ignoring.");
-                return;
-        }
-        /* open the file and read in the seed */
-        fd = open(filename, O_RDONLY);
-        if (fd == -1)
-                fatal("could not open PRNG seedfile %.100s (%.100s)",
-                    filename, strerror(errno));
-        if (atomicio(read, fd, &seed, sizeof(seed)) < sizeof(seed)) {
-                verbose("invalid or short read from PRNG seedfile "
-                    "%.100s - ignoring", filename);
-                memset(seed, '\0', sizeof(seed));
-        }
-        close(fd);
-        /* stir in the seed, with estimated entropy zero */
-        RAND_add(&seed, sizeof(seed), 0.0);
-}
-/*
- * entropy command initialisation functions
- */
-int
-prng_read_commands(char *cmdfilename)
-{
-        char cmd[SEED_FILE_SIZE], *cp, line[1024], path[SEED_FILE_SIZE];
-        double est;
-        entropy_cmd_t *entcmd;
-        FILE *f;
-        int cur_cmd, linenum, num_cmds, arg;
-        if ((f = fopen(cmdfilename, "r")) == NULL) {
-                fatal("couldn't read entropy commands file %.100s: %.100s",
-                    cmdfilename, strerror(errno));
-        }
-        num_cmds = 64;
-        entcmd = xcalloc(num_cmds, sizeof(entropy_cmd_t));
-        /* Read in file */
-        cur_cmd = linenum = 0;
-        while (fgets(line, sizeof(line), f)) {
-                linenum++;
-                /* Skip leading whitespace, blank lines and comments */
-                cp = line + strspn(line, WHITESPACE);
-                if ((*cp == 0) || (*cp == '#'))
-                        continue; /* done with this line */
-                /*
-                 * The first non-whitespace char should be a double quote
-                 * delimiting the commandline
-                 */
-                if (*cp != '"') {
-                        error("bad entropy command, %.100s line %d",
-                            cmdfilename, linenum);
-                        continue;
-                }
-                /*
-                 * First token, command args (incl. argv[0]) in double
-                 * quotes
-                 */
-                cp = strtok(cp, "\"");
-                if (cp == NULL) {
-                        error("missing or bad command string, %.100s "
-                            "line %d -- ignored", cmdfilename, linenum);
-                        continue;
-                }
-                strlcpy(cmd, cp, sizeof(cmd));
-                /* Second token, full command path */
-                if ((cp = strtok(NULL, WHITESPACE)) == NULL) {
-                        error("missing command path, %.100s "
-                            "line %d -- ignored", cmdfilename, linenum);
-                        continue;
-                }
-                /* Did configure mark this as dead? */
-                if (strncmp("undef", cp, 5) == 0)
-                        continue;
-                strlcpy(path, cp, sizeof(path));
-                /* Third token, entropy rate estimate for this command */
-                if ((cp = strtok(NULL, WHITESPACE)) == NULL) {
-                        error("missing entropy estimate, %.100s "
-                            "line %d -- ignored", cmdfilename, linenum);
-                        continue;
-                }
-                est = strtod(cp, NULL);
-                /* end of line */
-                if ((cp = strtok(NULL, WHITESPACE)) != NULL) {
-                        error("garbage at end of line %d in %.100s "
-                            "-- ignored", linenum, cmdfilename);
-                        continue;
-                }
-                /* save the command for debug messages */
-                entcmd[cur_cmd].cmdstring = xstrdup(cmd);
-                /* split the command args */
-                cp = strtok(cmd, WHITESPACE);
-                arg = 0;
-                do {
-                        entcmd[cur_cmd].args[arg] = xstrdup(cp);
-                        arg++;
-                } while(arg < NUM_ARGS && (cp = strtok(NULL, WHITESPACE)));
-                if (strtok(NULL, WHITESPACE))
-                        error("ignored extra commands (max %d), %.100s "
-                            "line %d", NUM_ARGS, cmdfilename, linenum);
-                /* Copy the command path and rate estimate */
-                entcmd[cur_cmd].path = xstrdup(path);
-                entcmd[cur_cmd].rate = est;
-                /* Initialise other values */
-                entcmd[cur_cmd].sticky_badness = 1;
-                cur_cmd++;
-                /*
-                 * If we've filled the array, reallocate it twice the size
-                 * Do this now because even if this we're on the last
-                 * command we need another slot to mark the last entry
-                 */
-                if (cur_cmd == num_cmds) {
-                        num_cmds *= 2;
-                        entcmd = xrealloc(entcmd, num_cmds,
-                            sizeof(entropy_cmd_t));
-                }
-        }
-        /* zero the last entry */
-        memset(&entcmd[cur_cmd], '\0', sizeof(entropy_cmd_t));
-        /* trim to size */
-        entropy_cmds = xrealloc(entcmd, (cur_cmd + 1),
-            sizeof(entropy_cmd_t));
-        debug("Loaded %d entropy commands from %.100s", cur_cmd,
-            cmdfilename);
-        fclose(f);
-        return cur_cmd < MIN_ENTROPY_SOURCES ? -1 : 0;
-}
-void
-usage(void)
-{
-        fprintf(stderr, "Usage: %s [options]\n", __progname);
-        fprintf(stderr, "  -v          Verbose; display verbose debugging messages.\n");
-        fprintf(stderr, "              Multiple -v increases verbosity.\n");
-        fprintf(stderr, "  -x          Force output in hexadecimal (for debugging)\n");
-        fprintf(stderr, "  -X          Force output in binary\n");
-        fprintf(stderr, "  -b bytes    Number of bytes to output (default %d)\n",
-            OUTPUT_SEED_SIZE);
-}
-int
-main(int argc, char **argv)
-{
-        unsigned char *buf;
-        int ret, ch, debug_level, output_hex, bytes;
-        extern char *optarg;
-        extern int optind;
-        LogLevel ll;
-        __progname = ssh_get_progname(argv[0]);
-        log_init(argv[0], SYSLOG_LEVEL_INFO, SYSLOG_FACILITY_USER, 1);
-        ll = SYSLOG_LEVEL_INFO;
-        debug_level = output_hex = 0;
-        bytes = OUTPUT_SEED_SIZE;
-        /* Don't write binary data to a tty, unless we are forced to */
-        if (isatty(STDOUT_FILENO))
-                output_hex = 1;
-        while ((ch = getopt(argc, argv, "vxXhb:")) != -1) {
-                switch (ch) {
-                case 'v':
-                        if (debug_level < 3)
-                                ll = SYSLOG_LEVEL_DEBUG1 + debug_level++;
-                        break;
-                case 'x':
-                        output_hex = 1;
-                        break;
-                case 'X':
-                        output_hex = 0;
-                        break;
-                case 'b':
-                        if ((bytes = atoi(optarg)) <= 0)
-                                fatal("Invalid number of output bytes");
-                        break;
-                case 'h':
-                        usage();
-                        exit(0);
-                default:
-                        error("Invalid commandline option");
-                        usage();
-                        exit(1);
-                }
-        }
-        log_init(argv[0], ll, SYSLOG_FACILITY_USER, 1);
-        if (argc != optind) {
-                error("Unexpected commandline arguments.");
-                usage();
-                exit(1);
-        }
-#ifdef USE_SEED_FILES
-        prng_read_seedfile();
-#endif
-        buf = xmalloc(bytes);
-        /*
-         * Seed the RNG from wherever we can
-         */
-        /* Take whatever is on the stack, but don't credit it */
-        RAND_add(buf, bytes, 0);
-        debug("Seeded RNG with %i bytes from system calls",
-            (int)stir_from_system());
-        /* try prngd, fall back to commands if prngd fails or not configured */
-        if (seed_from_prngd(buf, bytes) == 0) {
-                RAND_add(buf, bytes, bytes);
-        } else {
-                /* Read in collection commands */
-                if (prng_read_commands(SSH_PRNG_COMMAND_FILE) == -1)
-                        fatal("PRNG initialisation failed -- exiting.");
-                debug("Seeded RNG with %i bytes from programs",
-                    (int)stir_from_programs());
-        }
-#ifdef USE_SEED_FILES
-        prng_write_seedfile();
-#endif
-        /*
-         * Write the seed to stdout
-         */
-        if (!RAND_status())
-                fatal("Not enough entropy in RNG");
-        if (RAND_bytes(buf, bytes) <= 0)
-                fatal("Couldn't extract entropy from PRNG");
-        if (output_hex) {
-                for(ret = 0; ret < bytes; ret++)
-                        printf("%02x", (unsigned char)(buf[ret]));
-                printf("\n");
-        } else
-                ret = atomicio(vwrite, STDOUT_FILENO, buf, bytes);
-        memset(buf, '\0', bytes);
-        xfree(buf);
-        return ret == bytes ? 0 : 1;
-}
-/*
- * We may attempt to re-seed during mkstemp if we are using the one in the
- * compat library (via mkstemp -> _gettemp -> arc4random -> seed_rng) so we
- * need our own seed_rng().  We must also check that we have enough entropy.
- */
-void
-seed_rng(void)
-{
-        if (!RAND_status())
-                fatal("Not enough entropy in RNG");
-}
diff --git a/ssh-sandbox.h b/ssh-sandbox.h
new file mode 100755
index 000000000..dfecd5aa0
--- /dev/null
+++ b/ssh-sandbox.h
@@ -0,0 +1,23 @@
+/* $OpenBSD: ssh-sandbox.h,v 1.1 2011/06/23 09:34:13 djm Exp $ */
+/*
+ * Copyright (c) 2011 Damien Miller <djm@mindrot.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+struct ssh_sandbox;
+struct ssh_sandbox *ssh_sandbox_init(void);
+void ssh_sandbox_child(struct ssh_sandbox *);
+void ssh_sandbox_parent_finish(struct ssh_sandbox *);
+void ssh_sandbox_parent_preauth(struct ssh_sandbox *, pid_t);
diff --git a/ssh-vulnkey.c b/ssh-vulnkey.c
index 2e29ba462..f8125e0bb 100644
--- a/ssh-vulnkey.c
+++ b/ssh-vulnkey.c
@@ -311,7 +311,6 @@ main(int argc, char **argv)
        /* We don't need the RNG ourselves, but symbol references here allow
         * ld to link us properly.
         */
-        init_rng();
        seed_rng();
        while ((opt = getopt(argc, argv, "ahqv")) != -1) {
diff --git a/ssh.0 b/ssh.0
index c1d3135ce..1c98f7780 100644
--- a/ssh.0
+++ b/ssh.0
@@ -202,8 +202,9 @@ DESCRIPTION
             the -O option is specified, the ctl_cmd argument is interpreted
             and passed to the master process.  Valid commands are: ``check''
             (check that the master process is running), ``forward'' (request
-             forwardings without command execution) and ``exit'' (request the
+             forwardings without command execution), ``exit'' (request the
-             master to exit).
+             master to exit), and ``stop'' (request the master to stop
+             accepting further multiplexing requests).
     -o option
             Can be used to give options in the format used in the
@@ -263,6 +264,7 @@ DESCRIPTION
                   PubkeyAuthentication
                   RekeyLimit
                   RemoteForward
+                   RequestTTY
                   RhostsRSAAuthentication
                   RSAAuthentication
                   SendEnv
@@ -389,8 +391,9 @@ AUTHENTICATION
     support similar authentication methods, but protocol 2 is the default
     since it provides additional mechanisms for confidentiality (the traffic
     is encrypted using AES, 3DES, Blowfish, CAST128, or Arcfour) and
-     integrity (hmac-md5, hmac-sha1, umac-64, hmac-ripemd160).  Protocol 1
+     integrity (hmac-md5, hmac-sha1, hmac-sha2-256, hmac-sha2-512, umac-64,
-     lacks a strong mechanism for ensuring the integrity of the connection.
+     hmac-ripemd160).  Protocol 1 lacks a strong mechanism for ensuring the
+     integrity of the connection.
     The methods available for authentication are: GSSAPI-based
     authentication, host-based authentication, public key authentication,
@@ -895,4 +898,4 @@ AUTHORS
     created OpenSSH.  Markus Friedl contributed the support for SSH protocol
     versions 1.5 and 2.0.
-OpenBSD 4.9                    November 18, 2010                   OpenBSD 4.9
+OpenBSD 5.0                     August 2, 2011                     OpenBSD 5.0
diff --git a/ssh.1 b/ssh.1
index e0f237966..d20a5671e 100644
--- a/ssh.1
+++ b/ssh.1
@@ -33,8 +33,8 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: ssh.1,v 1.316 2010/11/18 15:01:00 jmc Exp $
+.\" $OpenBSD: ssh.1,v 1.320 2011/08/02 01:22:11 djm Exp $
-.Dd $Mdocdate: November 18 2010 $
+.Dd $Mdocdate: August 2 2011 $
 .Dt SSH 1
 .Os
 .Sh NAME
@@ -392,9 +392,11 @@ Valid commands are:
 .Dq check
 (check that the master process is running),
 .Dq forward
-(request forwardings without command execution) and
+(request forwardings without command execution),
 .Dq exit
-(request the master to exit).
+(request the master to exit), and
+.Dq stop
+(request the master to stop accepting further multiplexing requests).
 .It Fl o Ar option
 Can be used to give options in the format used in the configuration file.
 This is useful for specifying options for which there is no separate
@@ -454,6 +456,7 @@ For full details of the options listed below, and their possible values, see
 .It PubkeyAuthentication
 .It RekeyLimit
 .It RemoteForward
+.It RequestTTY
 .It RhostsRSAAuthentication
 .It RSAAuthentication
 .It SendEnv
@@ -664,7 +667,9 @@ Both protocols support similar authentication methods,
 but protocol 2 is the default since
 it provides additional mechanisms for confidentiality
 (the traffic is encrypted using AES, 3DES, Blowfish, CAST128, or Arcfour)
-and integrity (hmac-md5, hmac-sha1, umac-64, hmac-ripemd160).
+and integrity (hmac-md5, hmac-sha1,
+hmac-sha2-256, hmac-sha2-512,
+umac-64, hmac-ripemd160).
 Protocol 1 lacks a strong mechanism for ensuring the
 integrity of the connection.
 .Pp
diff --git a/ssh.c b/ssh.c
index aa2ad4a2f..44b005687 100644
--- a/ssh.c
+++ b/ssh.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh.c,v 1.356 2011/01/06 22:23:53 djm Exp $ */
+/* $OpenBSD: ssh.c,v 1.364 2011/08/02 23:15:03 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -111,13 +111,16 @@
 extern char *__progname;
+/* Saves a copy of argv for setproctitle emulation */
+#ifndef HAVE_SETPROCTITLE
+static char **saved_av;
+#endif
 /* Flag indicating whether debug mode is on.  May be set on the command line. */
 int debug_flag = 0;
-/* Flag indicating whether a tty should be allocated */
+/* Flag indicating whether a tty should be requested */
 int tty_flag = 0;
-int no_tty_flag = 0;
-int force_tty_flag = 0;
 /* don't exec a shell */
 int no_shell_flag = 0;
@@ -135,7 +138,7 @@ int stdin_null_flag = 0;
 int need_controlpersist_detach = 0;
 /* Copies of flags for ControlPersist foreground slave */
-int ostdin_null_flag, ono_shell_flag, ono_tty_flag, otty_flag;
+int ostdin_null_flag, ono_shell_flag, otty_flag, orequest_tty;
 /*
 * Flag indicating that ssh should fork after authentication.  This is useful
@@ -214,6 +217,20 @@ static void main_sigchld_handler(int);
 void muxclient(const char *);
 void muxserver_listen(void);
+/* ~/ expand a list of paths. NB. assumes path[n] is heap-allocated. */
+static void
+tilde_expand_paths(char **paths, u_int num_paths)
+{
+        u_int i;
+        char *cp;
+        for (i = 0; i < num_paths; i++) {
+                cp = tilde_expand_filename(paths[i], original_real_uid);
+                xfree(paths[i]);
+                paths[i] = cp;
+        }
+}
 /*
 * Main program for the ssh client.
 */
@@ -222,11 +239,13 @@ main(int ac, char **av)
 {
        int i, r, opt, exit_status, use_syslog;
        char *p, *cp, *line, *argv0, buf[MAXPATHLEN], *host_arg;
+        char thishost[NI_MAXHOST], shorthost[NI_MAXHOST], portstr[NI_MAXSERV];
        struct stat st;
        struct passwd *pw;
        int dummy, timeout_ms;
        extern int optind, optreset;
        extern char *optarg;
        struct servent *sp;
        Forward fwd;
@@ -234,7 +253,17 @@ main(int ac, char **av)
        sanitise_stdfd();
        __progname = ssh_get_progname(av[0]);
-        init_rng();
+#ifndef HAVE_SETPROCTITLE
+        /* Prepare for later setproctitle emulation */
+        /* Save argv so it isn't clobbered by setproctitle() emulation */
+        saved_av = xcalloc(ac + 1, sizeof(*saved_av));
+        for (i = 0; i < ac; i++)
+                saved_av[i] = xstrdup(av[i]);
+        saved_av[i] = NULL;
+        compat_init_setproctitle(ac, av);
+        av = saved_av;
+#endif
        /*
         * Discard other fds that are hanging around. These can cause problem
@@ -346,6 +375,8 @@ main(int ac, char **av)
                                muxclient_command = SSHMUX_COMMAND_FORWARD;
                        else if (strcmp(optarg, "exit") == 0)
                                muxclient_command = SSHMUX_COMMAND_TERMINATE;
+                        else if (strcmp(optarg, "stop") == 0)
+                                muxclient_command = SSHMUX_COMMAND_STOP;
                        else
                                fatal("Invalid multiplex command.");
                        break;
@@ -387,9 +418,10 @@ main(int ac, char **av)
 #endif
                        break;
                case 't':
-                        if (tty_flag)
+                        if (options.request_tty == REQUEST_TTY_YES)
-                                force_tty_flag = 1;
+                                options.request_tty = REQUEST_TTY_FORCE;
-                        tty_flag = 1;
+                        else
+                                options.request_tty = REQUEST_TTY_YES;
                        break;
                case 'v':
                        if (debug_flag == 0) {
@@ -432,7 +464,7 @@ main(int ac, char **av)
                                    optarg);
                                exit(255);
                        }
-                        no_tty_flag = 1;
+                        options.request_tty = REQUEST_TTY_NO;
                        no_shell_flag = 1;
                        options.clear_forwardings = 1;
                        options.exit_on_forward_failure = 1;
@@ -541,10 +573,10 @@ main(int ac, char **av)
                        break;
                case 'N':
                        no_shell_flag = 1;
-                        no_tty_flag = 1;
+                        options.request_tty = REQUEST_TTY_NO;
                        break;
                case 'T':
-                        no_tty_flag = 1;
+                        options.request_tty = REQUEST_TTY_NO;
                        break;
                case 'o':
                        dummy = 1;
@@ -604,6 +636,10 @@ main(int ac, char **av)
        /* Initialize the command to execute on remote host. */
        buffer_init(&command);
+        if (options.request_tty == REQUEST_TTY_YES ||
+            options.request_tty == REQUEST_TTY_FORCE)
+                tty_flag = 1;
        /*
         * Save the command to execute on the remote host in a buffer. There
         * is no limit on the length of the command, except by the maximum
@@ -611,7 +647,7 @@ main(int ac, char **av)
         */
        if (!ac) {
                /* No command specified - execute shell on a tty. */
-                tty_flag = 1;
+                tty_flag = options.request_tty != REQUEST_TTY_NO;
                if (subsystem_flag) {
                        fprintf(stderr,
                            "You must specify a subsystem to invoke.\n");
@@ -634,13 +670,14 @@ main(int ac, char **av)
        /* Allocate a tty by default if no command specified. */
        if (buffer_len(&command) == 0)
-                tty_flag = 1;
+                tty_flag = options.request_tty != REQUEST_TTY_NO;
        /* Force no tty */
-        if (no_tty_flag || muxclient_command != 0)
+        if (options.request_tty == REQUEST_TTY_NO || muxclient_command != 0)
                tty_flag = 0;
        /* Do not allocate a tty if stdin is not a tty. */
-        if ((!isatty(fileno(stdin)) || stdin_null_flag) && !force_tty_flag) {
+        if ((!isatty(fileno(stdin)) || stdin_null_flag) &&
+            options.request_tty != REQUEST_TTY_FORCE) {
                if (tty_flag && options.log_level != SYSLOG_LEVEL_QUIET)
                        logit("Pseudo-terminal will not be allocated because "
                            "stdin is not a terminal.");
@@ -669,7 +706,7 @@ main(int ac, char **av)
                if (r > 0 && (size_t)r < sizeof(buf))
                        (void)read_config_file(buf, host, &options, 1);
-                /* Read systemwide configuration file after use config. */
+                /* Read systemwide configuration file after user config. */
                (void)read_config_file(_PATH_HOST_CONFIG_FILE, host,
                    &options, 0);
        }
@@ -700,17 +737,19 @@ main(int ac, char **av)
                    "h", host, (char *)NULL);
        }
-        if (options.local_command != NULL) {
+        if (gethostname(thishost, sizeof(thishost)) == -1)
-                char thishost[NI_MAXHOST];
+                fatal("gethostname: %s", strerror(errno));
+        strlcpy(shorthost, thishost, sizeof(shorthost));
+        shorthost[strcspn(thishost, ".")] = '\0';
+        snprintf(portstr, sizeof(portstr), "%d", options.port);
-                if (gethostname(thishost, sizeof(thishost)) == -1)
+        if (options.local_command != NULL) {
-                        fatal("gethostname: %s", strerror(errno));
-                snprintf(buf, sizeof(buf), "%d", options.port);
                debug3("expanding LocalCommand: %s", options.local_command);
                cp = options.local_command;
                options.local_command = percent_expand(cp, "d", pw->pw_dir,
                    "h", host, "l", thishost, "n", host_arg, "r", options.user,
-                    "p", buf, "u", pw->pw_name, (char *)NULL);
+                    "p", portstr, "u", pw->pw_name, "L", shorthost,
+                    (char *)NULL);
                debug3("expanded LocalCommand: %s", options.local_command);
                xfree(cp);
        }
@@ -734,16 +773,13 @@ main(int ac, char **av)
        }
        if (options.control_path != NULL) {
-                char thishost[NI_MAXHOST];
-                if (gethostname(thishost, sizeof(thishost)) == -1)
-                        fatal("gethostname: %s", strerror(errno));
-                snprintf(buf, sizeof(buf), "%d", options.port);
                cp = tilde_expand_filename(options.control_path,
                    original_real_uid);
                xfree(options.control_path);
-                options.control_path = percent_expand(cp, "p", buf, "h", host,
+                options.control_path = percent_expand(cp, "h", host,
-                    "r", options.user, "l", thishost, (char *)NULL);
+                    "l", thishost, "n", host_arg, "r", options.user,
+                    "p", portstr, "u", pw->pw_name, "L", shorthost,
+                    (char *)NULL);
                xfree(cp);
        }
        if (muxclient_command != 0 && options.control_path == NULL)
@@ -864,15 +900,9 @@ main(int ac, char **av)
        load_public_identity_files();
        /* Expand ~ in known host file names. */
-        /* XXX mem-leaks: */
+        tilde_expand_paths(options.system_hostfiles,
-        options.system_hostfile =
+            options.num_system_hostfiles);
-            tilde_expand_filename(options.system_hostfile, original_real_uid);
+        tilde_expand_paths(options.user_hostfiles, options.num_user_hostfiles);
-        options.user_hostfile =
-            tilde_expand_filename(options.user_hostfile, original_real_uid);
-        options.system_hostfile2 =
-            tilde_expand_filename(options.system_hostfile2, original_real_uid);
-        options.user_hostfile2 =
-            tilde_expand_filename(options.user_hostfile2, original_real_uid);
        signal(SIGPIPE, SIG_IGN); /* ignore SIGPIPE early */
        signal(SIGCHLD, main_sigchld_handler);
@@ -945,8 +975,7 @@ control_persist_detach(void)
                /* Parent: set up mux slave to connect to backgrounded master */
                debug2("%s: background process is %ld", __func__, (long)pid);
                stdin_null_flag = ostdin_null_flag;
-                no_shell_flag = ono_shell_flag;
+                options.request_tty = orequest_tty;
-                no_tty_flag = ono_tty_flag;
                tty_flag = otty_flag;
                close(muxserver_sock);
                muxserver_sock = -1;
@@ -965,6 +994,7 @@ control_persist_detach(void)
                if (devnull > STDERR_FILENO)
                        close(devnull);
        }
+        setproctitle("%s [mux]", options.control_path);
 }
 /* Do fork() after authentication. Used by "ssh -f" */
@@ -1209,8 +1239,8 @@ ssh_session(void)
                /* Request forwarding with authentication spoofing. */
                debug("Requesting X11 forwarding with authentication "
                    "spoofing.");
-                x11_request_forwarding_with_spoofing(0, display, proto, data);
+                x11_request_forwarding_with_spoofing(0, display, proto,
+                    data, 0);
                /* Read response from the server. */
                type = packet_read();
                if (type == SSH_SMSG_SUCCESS) {
@@ -1308,9 +1338,11 @@ ssh_session2_setup(int id, int success, void *arg)
                /* Request forwarding with authentication spoofing. */
                debug("Requesting X11 forwarding with authentication "
                    "spoofing.");
-                x11_request_forwarding_with_spoofing(id, display, proto, data);
+                x11_request_forwarding_with_spoofing(id, display, proto,
+                    data, 1);
+                client_expect_confirm(id, "X11 forwarding", CONFIRM_WARN);
+                /* XXX exit_on_forward_failure */
                interactive = 1;
-                /* XXX wait for reply */
        }
        check_agent_present();
@@ -1393,11 +1425,10 @@ ssh_session2(void)
        if (options.control_persist && muxserver_sock != -1) {
                ostdin_null_flag = stdin_null_flag;
                ono_shell_flag = no_shell_flag;
-                ono_tty_flag = no_tty_flag;
+                orequest_tty = options.request_tty;
                otty_flag = tty_flag;
                stdin_null_flag = 1;
                no_shell_flag = 1;
-                no_tty_flag = 1;
                tty_flag = 0;
                if (!fork_after_authentication_flag)
                        need_controlpersist_detach = 1;
diff --git a/ssh_config.0 b/ssh_config.0
index c4a12f7bb..7b9205681 100644
--- a/ssh_config.0
+++ b/ssh_config.0
@@ -47,6 +47,12 @@ DESCRIPTION
             line (i.e. the name is not converted to a canonicalized host name
             before matching).
+             A pattern entry may be negated by prefixing it with an
+             exclamation mark (`!').  If a negated entry is matched, then the
+             Host entry is ignored, regardless of whether any other patterns
+             on the line match.  Negated matches are therefore useful to
+             provide exceptions for wildcard matches.
             See PATTERNS for more information on patterns.
     AddressFamily
@@ -160,13 +166,16 @@ DESCRIPTION
     ControlPath
             Specify the path to the control socket used for connection
             sharing as described in the ControlMaster section above or the
-             string ``none'' to disable connection sharing.  In the path, `%l'
+             string ``none'' to disable connection sharing.  In the path, `%L'
-             will be substituted by the local host name, `%h' will be
+             will be substituted by the first component of the local host
-             substituted by the target host name, `%p' the port, and `%r' by
+             name, `%l' will be substituted by the local host name (including
-             the remote login username.  It is recommended that any
+             any domain name), `%h' will be substituted by the target host
-             ControlPath used for opportunistic connection sharing include at
+             name, `%n' will be substituted by the original target host name
-             least %h, %p, and %r.  This ensures that shared connections are
+             specified on the command line, `%p' the port, `%r' by the remote
-             uniquely identified.
+             login username, and `%u' by the username of the user running
+             ssh(1).  It is recommended that any ControlPath used for
+             opportunistic connection sharing include at least %h, %p, and %r.
+             This ensures that shared connections are uniquely identified.
     ControlPersist
             When used in conjunction with ControlMaster, specifies that the
@@ -282,8 +291,9 @@ DESCRIPTION
             default is ``no''.
     GlobalKnownHostsFile
-             Specifies a file to use for the global host key database instead
+             Specifies one or more files to use for the global host key
-             of /etc/ssh/ssh_known_hosts.
+             database, separated by whitespace.  The default is
+             /etc/ssh/ssh_known_hosts, /etc/ssh/ssh_known_hosts2.
     GSSAPIAuthentication
             Specifies whether user authentication based on GSSAPI is allowed.
@@ -336,7 +346,7 @@ DESCRIPTION
             Specifies the real host name to log into.  This can be used to
             specify nicknames or abbreviations for hosts.  If the hostname
             contains the character sequence `%h', then this will be replaced
-             with the host name specified on the commandline (this is useful
+             with the host name specified on the command line (this is useful
             for manipulating unqualified names).  The default is the name
             given on the command line.  Numeric IP addresses are also
             permitted (both on the command line and in HostName
@@ -367,7 +377,9 @@ DESCRIPTION
             It is possible to have multiple identity files specified in
             configuration files; all these identities will be tried in
-             sequence.
+             sequence.  Multiple IdentityFile directives will add to the list
+             of identities tried (this behaviour differs from that of other
+             configuration directives).
     IPQoS   Specifies the IPv4 type-of-service or DSCP class for connections.
             Accepted values are ``af11'', ``af12'', ``af13'', ``af14'',
@@ -451,7 +463,9 @@ DESCRIPTION
             must be comma-separated.  The default is:
                   hmac-md5,hmac-sha1,umac-64@openssh.com,
-                   hmac-ripemd160,hmac-sha1-96,hmac-md5-96
+                   hmac-ripemd160,hmac-sha1-96,hmac-md5-96,
+                   hmac-sha2-256,hmac-sha2-256-96,hmac-sha2-512,
+                   hmac-sha2-512-96
     NoHostAuthenticationForLocalhost
             This option can be used if the home directory is shared across
@@ -555,6 +569,14 @@ DESCRIPTION
             if the server's GatewayPorts option is enabled (see
             sshd_config(5)).
+     RequestTTY
+             Specifies whether to request a pseudo-tty for the session.  The
+             argument may be one of: ``no'' (never request a TTY), ``yes''
+             (always request a TTY when standard input is a TTY), ``force''
+             (always request a TTY) or ``auto'' (request a TTY when opening a
+             login session).  This option mirrors the -t and -T flags for
+             ssh(1).
     RhostsRSAAuthentication
             Specifies whether to try rhosts based authentication with RSA
             host authentication.  The argument must be ``yes'' or ``no''.
@@ -666,8 +688,9 @@ DESCRIPTION
             command line.
     UserKnownHostsFile
-             Specifies a file to use for the user host key database instead of
+             Specifies one or more files to use for the user host key
-             ~/.ssh/known_hosts.
+             database, separated by whitespace.  The default is
+             ~/.ssh/known_hosts, ~/.ssh/known_hosts2.
     VerifyHostKeyDNS
             Specifies whether to verify the remote key using DNS and SSHFP
@@ -741,4 +764,4 @@ AUTHORS
     created OpenSSH.  Markus Friedl contributed the support for SSH protocol
     versions 1.5 and 2.0.
-OpenBSD 4.9                    December 8, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     August 2, 2011                     OpenBSD 5.0
diff --git a/ssh_config.5 b/ssh_config.5
index fc994d482..19bff6d54 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -33,8 +33,8 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: ssh_config.5,v 1.146 2010/12/08 04:02:47 djm Exp $
+.\" $OpenBSD: ssh_config.5,v 1.153 2011/08/02 01:22:11 djm Exp $
-.Dd $Mdocdate: December 8 2010 $
+.Dd $Mdocdate: August 2 2011 $
 .Dt SSH_CONFIG 5
 .Os
 .Sh NAME
@@ -128,6 +128,15 @@ The host is the
 argument given on the command line (i.e. the name is not converted to
 a canonicalized host name before matching).
 .Pp
+A pattern entry may be negated by prefixing it with an exclamation mark
+.Pq Sq !\& .
+If a negated entry is matched, then the
+.Cm Host
+entry is ignored, regardless of whether any other patterns on the line
+match.
+Negated matches are therefore useful to provide exceptions for wildcard
+matches.
+.Pp
 See
 .Sx PATTERNS
 for more information on patterns.
@@ -325,14 +334,22 @@ section above or the string
 .Dq none
 to disable connection sharing.
 In the path,
+.Ql %L
+will be substituted by the first component of the local host name,
 .Ql %l
-will be substituted by the local host name,
+will be substituted by the local host name (including any domain name),
 .Ql %h
 will be substituted by the target host name,
+.Ql %n
+will be substituted by the original target host name
+specified on the command line,
 .Ql %p
-the port, and
+the port,
 .Ql %r
-by the remote login username.
+by the remote login username, and
+.Ql %u
+by the username of the user running
+.Xr ssh 1 .
 It is recommended that any
 .Cm ControlPath
 used for opportunistic connection sharing include
@@ -521,9 +538,11 @@ or
 The default is
 .Dq no .
 .It Cm GlobalKnownHostsFile
-Specifies a file to use for the global
+Specifies one or more files to use for the global
-host key database instead of
+host key database, separated by whitespace.
-.Pa /etc/ssh/ssh_known_hosts .
+The default is
+.Pa /etc/ssh/ssh_known_hosts ,
+.Pa /etc/ssh/ssh_known_hosts2 .
 .It Cm GSSAPIAuthentication
 Specifies whether user authentication based on GSSAPI is allowed.
 The default is
@@ -625,7 +644,7 @@ Specifies the real host name to log into.
 This can be used to specify nicknames or abbreviations for hosts.
 If the hostname contains the character sequence
 .Ql %h ,
-then this will be replaced with the host name specified on the commandline
+then this will be replaced with the host name specified on the command line
 (this is useful for manipulating unqualified names).
 The default is the name given on the command line.
 Numeric IP addresses are also permitted (both on the command line and in
@@ -685,6 +704,10 @@ escape characters:
 It is possible to have
 multiple identity files specified in configuration files; all these
 identities will be tried in sequence.
+Multiple
+.Cm IdentityFile
+directives will add to the list of identities tried (this behaviour
+differs from that of other configuration directives).
 .It Cm IPQoS
 Specifies the IPv4 type-of-service or DSCP class for connections.
 Accepted values are
@@ -826,7 +849,9 @@ Multiple algorithms must be comma-separated.
 The default is:
 .Bd -literal -offset indent
 hmac-md5,hmac-sha1,umac-64@openssh.com,
-hmac-ripemd160,hmac-sha1-96,hmac-md5-96
+hmac-ripemd160,hmac-sha1-96,hmac-md5-96,
+hmac-sha2-256,hmac-sha2-256-96,hmac-sha2-512,
+hmac-sha2-512-96
 .Ed
 .It Cm NoHostAuthenticationForLocalhost
 This option can be used if the home directory is shared across machines.
@@ -999,6 +1024,23 @@ will only succeed if the server's
 .Cm GatewayPorts
 option is enabled (see
 .Xr sshd_config 5 ) .
+.It Cm RequestTTY
+Specifies whether to request a pseudo-tty for the session.
+The argument may be one of:
+.Dq no
+(never request a TTY),
+.Dq yes
+(always request a TTY when standard input is a TTY),
+.Dq force
+(always request a TTY) or
+.Dq auto
+(request a TTY when opening a login session).
+This option mirrors the
+.Fl t
+and
+.Fl T
+flags for
+.Xr ssh 1 .
 .It Cm RhostsRSAAuthentication
 Specifies whether to try rhosts based authentication with RSA host
 authentication.
@@ -1226,9 +1268,11 @@ This can be useful when a different user name is used on different machines.
 This saves the trouble of
 having to remember to give the user name on the command line.
 .It Cm UserKnownHostsFile
-Specifies a file to use for the user
+Specifies one or more files to use for the user
-host key database instead of
+host key database, separated by whitespace.
-.Pa ~/.ssh/known_hosts .
+The default is
+.Pa ~/.ssh/known_hosts ,
+.Pa ~/.ssh/known_hosts2 .
 .It Cm VerifyHostKeyDNS
 Specifies whether to verify the remote key using DNS and SSHFP resource
 records.
diff --git a/ssh_prng_cmds.in b/ssh_prng_cmds.in
deleted file mode 100644
index 0d29d49f1..000000000
--- a/ssh_prng_cmds.in
+++ /dev/null
@@ -1,75 +0,0 @@
-# entropy gathering commands
-# Format is: "program-name args" path rate
-# The "rate" represents the number of bits of usuable entropy per
-# byte of command output. Be conservative.
-#
-# $Id: ssh_prng_cmds.in,v 1.9 2003/11/21 12:48:56 djm Exp $
-"ls -alni /var/log"                     @PROG_LS@       0.02
-"ls -alni /var/adm"                     @PROG_LS@       0.02
-"ls -alni /usr/adm"                     @PROG_LS@       0.02
-"ls -alni /var/mail"                    @PROG_LS@       0.02
-"ls -alni /usr/mail"                    @PROG_LS@       0.02
-"ls -alni /var/adm/syslog"              @PROG_LS@       0.02
-"ls -alni /usr/adm/syslog"              @PROG_LS@       0.02
-"ls -alni /var/spool/mail"              @PROG_LS@       0.02
-"ls -alni /proc"                        @PROG_LS@       0.02
-"ls -alni /tmp"                         @PROG_LS@       0.02
-"ls -alni /var/tmp"                     @PROG_LS@       0.02
-"ls -alni /usr/tmp"                     @PROG_LS@       0.02
-"ls -alTi /var/log"                     @PROG_LS@       0.02
-"ls -alTi /var/adm"                     @PROG_LS@       0.02
-"ls -alTi /var/mail"                    @PROG_LS@       0.02
-"ls -alTi /var/adm/syslog"              @PROG_LS@       0.02
-"ls -alTi /var/spool/mail"              @PROG_LS@       0.02
-"ls -alTi /proc"                        @PROG_LS@       0.02
-"ls -alTi /tmp"                         @PROG_LS@       0.02
-"ls -alTi /var/tmp"                     @PROG_LS@       0.02
-"ls -alTi /usr/tmp"                     @PROG_LS@       0.02
-"netstat -an"                           @PROG_NETSTAT@  0.05
-"netstat -in"                           @PROG_NETSTAT@  0.05
-"netstat -rn"                           @PROG_NETSTAT@  0.02
-"netstat -pn"                           @PROG_NETSTAT@  0.02
-"netstat -ia"                           @PROG_NETSTAT@  0.05
-"netstat -s"                            @PROG_NETSTAT@  0.02
-"netstat -is"                           @PROG_NETSTAT@  0.07
-"arp -n -a"                             @PROG_ARP@      0.02
-"ifconfig -a"                           @PROG_IFCONFIG@ 0.02
-"ps laxww"                              @PROG_PS@       0.03
-"ps -al"                                @PROG_PS@       0.03
-"ps -efl"                               @PROG_PS@       0.03
-"jstat"                                 @PROG_JSTAT@    0.07
-"w"                                     @PROG_W@        0.05
-"who -i"                                @PROG_WHO@      0.01
-"last"                                  @PROG_LAST@     0.01
-"lastlog"                               @PROG_LASTLOG@  0.01
-"df"                                    @PROG_DF@       0.01
-"df -i"                                 @PROG_DF@       0.01
-"sar -d"                                @PROG_SAR@      0.04
-"vmstat"                                @PROG_VMSTAT@   0.01
-"uptime"                                @PROG_UPTIME@   0.01
-"ipcs -a"                               @PROG_IPCS@     0.01
-"tail -200 /var/log/messages"           @PROG_TAIL@     0.01
-"tail -200 /var/log/syslog"             @PROG_TAIL@     0.01
-"tail -200 /var/adm/messages"           @PROG_TAIL@     0.01
-"tail -200 /var/adm/syslog"             @PROG_TAIL@     0.01
-"tail -200 /var/adm/syslog/syslog.log"  @PROG_TAIL@     0.01
-"tail -200 /var/log/maillog"            @PROG_TAIL@     0.01
-"tail -200 /var/adm/maillog"            @PROG_TAIL@     0.01
-"tail -200 /var/adm/syslog/mail.log"    @PROG_TAIL@     0.01
diff --git a/sshconnect.c b/sshconnect.c
index 1c066b641..aed4c0bc7 100644
--- a/sshconnect.c
+++ b/sshconnect.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sshconnect.c,v 1.232 2011/01/16 11:50:36 djm Exp $ */
+/* $OpenBSD: sshconnect.c,v 1.234 2011/05/24 07:15:47 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -683,28 +683,30 @@ get_hostfile_hostname_ipaddr(char *hostname, struct sockaddr *hostaddr,
 /*
 * check whether the supplied host key is valid, return -1 if the key
- * is not valid. the user_hostfile will not be updated if 'readonly' is true.
+ * is not valid. user_hostfile[0] will not be updated if 'readonly' is true.
 */
 #define RDRW    0
 #define RDONLY  1
 #define ROQUIET 2
 static int
 check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
-    Key *host_key, int readonly, char *user_hostfile,
+    Key *host_key, int readonly,
-    char *system_hostfile)
+    char **user_hostfiles, u_int num_user_hostfiles,
+    char **system_hostfiles, u_int num_system_hostfiles)
 {
+        HostStatus host_status;
+        HostStatus ip_status;
        Key *raw_key = NULL;
-        const char *type;
        char *ip = NULL, *host = NULL;
        char hostline[1000], *hostp, *fp, *ra;
-        HostStatus host_status;
-        HostStatus ip_status;
-        int r, want_cert = key_is_cert(host_key), host_ip_differ = 0;
-        int local = sockaddr_is_local(hostaddr);
        char msg[1024];
+        const char *type;
+        const struct hostkey_entry *host_found, *ip_found;
        int len, cancelled_forwarding = 0;
+        int local = sockaddr_is_local(hostaddr);
+        int r, want_cert = key_is_cert(host_key), host_ip_differ = 0;
        struct hostkeys *host_hostkeys, *ip_hostkeys;
-        const struct hostkey_entry *host_found, *ip_found;
+        u_int i;
        /*
         * Force accepting of the host key for loopback/localhost. The
@@ -736,14 +738,18 @@ check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
                options.check_host_ip = 0;
        host_hostkeys = init_hostkeys();
-        load_hostkeys(host_hostkeys, host, user_hostfile);
+        for (i = 0; i < num_user_hostfiles; i++)
-        load_hostkeys(host_hostkeys, host, system_hostfile);
+                load_hostkeys(host_hostkeys, host, user_hostfiles[i]);
+        for (i = 0; i < num_system_hostfiles; i++)
+                load_hostkeys(host_hostkeys, host, system_hostfiles[i]);
        ip_hostkeys = NULL;
        if (!want_cert && options.check_host_ip) {
                ip_hostkeys = init_hostkeys();
-                load_hostkeys(ip_hostkeys, ip, user_hostfile);
+                for (i = 0; i < num_user_hostfiles; i++)
-                load_hostkeys(ip_hostkeys, ip, system_hostfile);
+                        load_hostkeys(ip_hostkeys, ip, user_hostfiles[i]);
+                for (i = 0; i < num_system_hostfiles; i++)
+                        load_hostkeys(ip_hostkeys, ip, system_hostfiles[i]);
        }
 retry:
@@ -788,11 +794,12 @@ check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
                                logit("%s host key for IP address "
                                    "'%.128s' not in list of known hosts.",
                                    type, ip);
-                        else if (!add_host_to_hostfile(user_hostfile, ip,
+                        else if (!add_host_to_hostfile(user_hostfiles[0], ip,
                            host_key, options.hash_known_hosts))
                                logit("Failed to add the %s host key for IP "
                                    "address '%.128s' to the list of known "
-                                    "hosts (%.30s).", type, ip, user_hostfile);
+                                    "hosts (%.30s).", type, ip,
+                                    user_hostfiles[0]);
                        else
                                logit("Warning: Permanently added the %s host "
                                    "key for IP address '%.128s' to the list "
@@ -811,7 +818,8 @@ check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
                    port != SSH_DEFAULT_PORT) {
                        debug("checking without port identifier");
                        if (check_host_key(hostname, hostaddr, 0, host_key,
-                            ROQUIET, user_hostfile, system_hostfile) == 0) {
+                            ROQUIET, user_hostfiles, num_user_hostfiles,
+                            system_hostfiles, num_system_hostfiles) == 0) {
                                debug("found matching key w/out port");
                                break;
                        }
@@ -876,25 +884,25 @@ check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
                        hostp = hostline;
                        if (options.hash_known_hosts) {
                                /* Add hash of host and IP separately */
-                                r = add_host_to_hostfile(user_hostfile, host,
+                                r = add_host_to_hostfile(user_hostfiles[0],
-                                    host_key, options.hash_known_hosts) &&
+                                    host, host_key, options.hash_known_hosts) &&
-                                    add_host_to_hostfile(user_hostfile, ip,
+                                    add_host_to_hostfile(user_hostfiles[0], ip,
                                    host_key, options.hash_known_hosts);
                        } else {
                                /* Add unhashed "host,ip" */
-                                r = add_host_to_hostfile(user_hostfile,
+                                r = add_host_to_hostfile(user_hostfiles[0],
                                    hostline, host_key,
                                    options.hash_known_hosts);
                        }
                } else {
-                        r = add_host_to_hostfile(user_hostfile, host, host_key,
+                        r = add_host_to_hostfile(user_hostfiles[0], host,
-                            options.hash_known_hosts);
+                            host_key, options.hash_known_hosts);
                        hostp = host;
                }
                if (!r)
                        logit("Failed to add the host to the list of known "
-                            "hosts (%.500s).", user_hostfile);
+                            "hosts (%.500s).", user_hostfiles[0]);
                else
                        logit("Warning: Permanently added '%.200s' (%s) to the "
                            "list of known hosts.", hostp, type);
@@ -955,7 +963,7 @@ check_host_key(char *hostname, struct sockaddr *hostaddr, u_short port,
                /* The host key has changed. */
                warn_changed_key(host_key);
                error("Add correct host key in %.100s to get rid of this message.",
-                    user_hostfile);
+                    user_hostfiles[0]);
                error("Offending %s key in %s:%lu", key_type(host_found->key),
                    host_found->file, host_found->line);
@@ -1100,7 +1108,6 @@ fail:
 int
 verify_host_key(char *host, struct sockaddr *hostaddr, Key *host_key)
 {
-        struct stat st;
        int flags = 0;
        char *fp;
@@ -1111,7 +1118,6 @@ verify_host_key(char *host, struct sockaddr *hostaddr, Key *host_key)
        /* XXX certs are not yet supported for DNS */
        if (!key_is_cert(host_key) && options.verify_host_key_dns &&
            verify_host_key_dns(host, hostaddr, host_key, &flags) == 0) {
                if (flags & DNS_VERIFY_FOUND) {
                        if (options.verify_host_key_dns == 1 &&
@@ -1129,16 +1135,9 @@ verify_host_key(char *host, struct sockaddr *hostaddr, Key *host_key)
                }
        }
-        /* return ok if the key can be found in an old keyfile */
+        return check_host_key(host, hostaddr, options.port, host_key, RDRW,
-        if (stat(options.system_hostfile2, &st) == 0 ||
+            options.user_hostfiles, options.num_user_hostfiles,
-            stat(options.user_hostfile2, &st) == 0) {
+            options.system_hostfiles, options.num_system_hostfiles);
-                if (check_host_key(host, hostaddr, options.port, host_key,
-                    RDONLY, options.user_hostfile2,
-                    options.system_hostfile2) == 0)
-                        return 0;
-        }
-        return check_host_key(host, hostaddr, options.port, host_key,
-            RDRW, options.user_hostfile, options.system_hostfile);
 }
 /*
diff --git a/sshconnect2.c b/sshconnect2.c
index e01721b73..8346372cb 100644
--- a/sshconnect2.c
+++ b/sshconnect2.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sshconnect2.c,v 1.186 2010/11/29 23:45:51 djm Exp $ */
+/* $OpenBSD: sshconnect2.c,v 1.188 2011/05/24 07:15:47 djm Exp $ */
 /*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 * Copyright (c) 2008 Damien Miller.  All rights reserved.
@@ -109,14 +109,15 @@ order_hostkeyalgs(char *host, struct sockaddr *hostaddr, u_short port)
        size_t maxlen;
        struct hostkeys *hostkeys;
        int ktype;
+        u_int i;
        /* Find all hostkeys for this hostname */
        get_hostfile_hostname_ipaddr(host, hostaddr, port, &hostname, NULL);
        hostkeys = init_hostkeys();
-        load_hostkeys(hostkeys, hostname, options.user_hostfile2);
+        for (i = 0; i < options.num_user_hostfiles; i++)
-        load_hostkeys(hostkeys, hostname, options.system_hostfile2);
+                load_hostkeys(hostkeys, hostname, options.user_hostfiles[i]);
-        load_hostkeys(hostkeys, hostname, options.user_hostfile);
+        for (i = 0; i < options.num_system_hostfiles; i++)
-        load_hostkeys(hostkeys, hostname, options.system_hostfile);
+                load_hostkeys(hostkeys, hostname, options.system_hostfiles[i]);
        oavail = avail = xstrdup(KEX_DEFAULT_PK_ALG);
        maxlen = strlen(avail) + 1;
@@ -2006,9 +2007,12 @@ authmethod_get(char *authlist)
                    authmethod_is_enabled(current)) {
                        debug3("authmethod_is_enabled %s", name);
                        debug("Next authentication method: %s", name);
+                        xfree(name);
                        return current;
                }
        }
+        if (name != NULL)
+                xfree(name);
 }
 static char *
diff --git a/sshd.0 b/sshd.0
index 873584d7d..e8b49831d 100644
--- a/sshd.0
+++ b/sshd.0
@@ -167,8 +167,8 @@ AUTHENTICATION
     AES, Blowfish, 3DES, CAST128, Arcfour, 192-bit AES, or 256-bit AES.  The
     client selects the encryption algorithm to use from those offered by the
     server.  Additionally, session integrity is provided through a
-     cryptographic message authentication code (hmac-md5, hmac-sha1, umac-64
+     cryptographic message authentication code (hmac-md5, hmac-sha1, umac-64,
-     or hmac-ripemd160).
+     hmac-ripemd160, hmac-sha2-256 or hmac-sha2-512).
     Finally, the server and the client enter an authentication dialog.  The
     client tries to authenticate itself using host-based authentication,
@@ -261,20 +261,21 @@ SSHRC
     exist either, xauth is used to add the cookie.
 AUTHORIZED_KEYS FILE FORMAT
-     AuthorizedKeysFile specifies the file containing public keys for public
+     AuthorizedKeysFile specifies the files containing public keys for public
     key authentication; if none is specified, the default is
-     ~/.ssh/authorized_keys.  Each line of the file contains one key (empty
+     ~/.ssh/authorized_keys and ~/.ssh/authorized_keys2.  Each line of the
-     lines and lines starting with a `#' are ignored as comments).  Protocol 1
+     file contains one key (empty lines and lines starting with a `#' are
-     public keys consist of the following space-separated fields: options,
+     ignored as comments).  Protocol 1 public keys consist of the following
-     bits, exponent, modulus, comment.  Protocol 2 public key consist of:
+     space-separated fields: options, bits, exponent, modulus, comment.
-     options, keytype, base64-encoded key, comment.  The options field is
+     Protocol 2 public key consist of: options, keytype, base64-encoded key,
-     optional; its presence is determined by whether the line starts with a
+     comment.  The options field is optional; its presence is determined by
-     number or not (the options field never starts with a number).  The bits,
+     whether the line starts with a number or not (the options field never
-     exponent, modulus, and comment fields give the RSA key for protocol
+     starts with a number).  The bits, exponent, modulus, and comment fields
-     version 1; the comment field is not used for anything (but may be
+     give the RSA key for protocol version 1; the comment field is not used
-     convenient for the user to identify the key).  For protocol version 2 the
+     for anything (but may be convenient for the user to identify the key).
-     keytype is ``ecdsa-sha2-nistp256'', ``ecdsa-sha2-nistp384'',
+     For protocol version 2 the keytype is ``ecdsa-sha2-nistp256'',
-     ``ecdsa-sha2-nistp521'', ``ssh-dss'' or ``ssh-rsa''.
+     ``ecdsa-sha2-nistp384'', ``ecdsa-sha2-nistp521'', ``ssh-dss'' or
+     ``ssh-rsa''.
     Note that lines in this file are usually several hundred bytes long
     (because of the size of the public key encoding) up to a limit of 8
@@ -631,4 +632,4 @@ CAVEATS
     System security is not improved unless rshd, rlogind, and rexecd are
     disabled (thus completely disabling rlogin and rsh into the machine).
-OpenBSD 4.9                    October 28, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     August 2, 2011                     OpenBSD 5.0
diff --git a/sshd.8 b/sshd.8
index 3466aeda1..80b3a1e45 100644
--- a/sshd.8
+++ b/sshd.8
@@ -33,8 +33,8 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd.8,v 1.260 2010/10/28 18:33:28 jmc Exp $
+.\" $OpenBSD: sshd.8,v 1.263 2011/08/02 01:22:11 djm Exp $
-.Dd $Mdocdate: October 28 2010 $
+.Dd $Mdocdate: August 2 2011 $
 .Dt SSHD 8
 .Os
 .Sh NAME
@@ -314,7 +314,8 @@ The client selects the encryption algorithm
 to use from those offered by the server.
 Additionally, session integrity is provided
 through a cryptographic message authentication code
-(hmac-md5, hmac-sha1, umac-64 or hmac-ripemd160).
+(hmac-md5, hmac-sha1, umac-64, hmac-ripemd160,
+hmac-sha2-256 or hmac-sha2-512).
 .Pp
 Finally, the server and the client enter an authentication dialog.
 The client tries to authenticate itself using
@@ -462,10 +463,12 @@ is run, and if that
 does not exist either, xauth is used to add the cookie.
 .Sh AUTHORIZED_KEYS FILE FORMAT
 .Cm AuthorizedKeysFile
-specifies the file containing public keys for
+specifies the files containing public keys for
 public key authentication;
 if none is specified, the default is
-.Pa ~/.ssh/authorized_keys .
+.Pa ~/.ssh/authorized_keys
+and
+.Pa ~/.ssh/authorized_keys2 .
 Each line of the file contains one
 key (empty lines and lines starting with a
 .Ql #
diff --git a/sshd.c b/sshd.c
index 67a2f9d6b..9b32cb458 100644
--- a/sshd.c
+++ b/sshd.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sshd.c,v 1.381 2011/01/11 06:13:10 djm Exp $ */
+/* $OpenBSD: sshd.c,v 1.385 2011/06/23 09:34:13 djm Exp $ */
 /*
 * Author: Tatu Ylonen <ylo@cs.hut.fi>
 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -118,6 +118,7 @@
 #endif
 #include "monitor_wrap.h"
 #include "roaming.h"
+#include "ssh-sandbox.h"
 #include "version.h"
 #ifdef USE_SECURITY_SESSION_API
@@ -629,42 +630,62 @@ privsep_preauth(Authctxt *authctxt)
 {
        int status;
        pid_t pid;
+        struct ssh_sandbox *box = NULL;
        /* Set up unprivileged child process to deal with network data */
        pmonitor = monitor_init();
        /* Store a pointer to the kex for later rekeying */
        pmonitor->m_pkex = &xxx_kex;
+        if (use_privsep == PRIVSEP_SANDBOX)
+                box = ssh_sandbox_init();
        pid = fork();
        if (pid == -1) {
                fatal("fork of unprivileged child failed");
        } else if (pid != 0) {
                debug2("Network child is on pid %ld", (long)pid);
-                close(pmonitor->m_recvfd);
+                if (box != NULL)
+                        ssh_sandbox_parent_preauth(box, pid);
                pmonitor->m_pid = pid;
                monitor_child_preauth(authctxt, pmonitor);
-                close(pmonitor->m_sendfd);
                /* Sync memory */
                monitor_sync(pmonitor);
                /* Wait for the child's exit status */
-                while (waitpid(pid, &status, 0) < 0)
+                while (waitpid(pid, &status, 0) < 0) {
                        if (errno != EINTR)
-                                break;
+                                fatal("%s: waitpid: %s", __func__,
-                return (1);
+                                    strerror(errno));
+                }
+                if (WIFEXITED(status)) {
+                        if (WEXITSTATUS(status) != 0)
+                                fatal("%s: preauth child exited with status %d",
+                                    __func__, WEXITSTATUS(status));
+                } else if (WIFSIGNALED(status))
+                        fatal("%s: preauth child terminated by signal %d",
+                            __func__, WTERMSIG(status));
+                if (box != NULL)
+                        ssh_sandbox_parent_finish(box);
+                return 1;
        } else {
                /* child */
                close(pmonitor->m_sendfd);
+                close(pmonitor->m_log_recvfd);
+                /* Arrange for logging to be sent to the monitor */
+                set_log_handler(mm_log_handler, pmonitor);
                /* Demote the child */
                if (getuid() == 0 || geteuid() == 0)
                        privsep_preauth_child();
                setproctitle("%s", "[net]");
+                if (box != NULL)
+                        ssh_sandbox_child(box);
+                return 0;
        }
-        return (0);
 }
 static void
@@ -690,7 +711,6 @@ privsep_postauth(Authctxt *authctxt)
                fatal("fork of unprivileged child failed");
        else if (pmonitor->m_pid != 0) {
                verbose("User child is on pid %ld", (long)pmonitor->m_pid);
-                close(pmonitor->m_recvfd);
                buffer_clear(&loginmsg);
                monitor_child_postauth(pmonitor);
@@ -698,7 +718,10 @@ privsep_postauth(Authctxt *authctxt)
                exit(0);
        }
+        /* child */
        close(pmonitor->m_sendfd);
+        pmonitor->m_sendfd = -1;
        /* Demote the private keys to public keys. */
        demote_sensitive_data();
@@ -1120,7 +1143,7 @@ server_accept_loop(int *sock_in, int *sock_out, int *newsock, int *config_s)
                            (int) received_sigterm);
                        close_listen_socks();
                        unlink(options.pid_file);
-                        exit(255);
+                        exit(received_sigterm == SIGTERM ? 0 : 255);
                }
                if (key_used && key_do_regen) {
                        generate_ephemeral_server_key();
@@ -1311,7 +1334,6 @@ main(int ac, char **av)
        (void)set_auth_parameters(ac, av);
 #endif
        __progname = ssh_get_progname(av[0]);
-        init_rng();
        /* Save argv. Duplicate so setproctitle emulation doesn't clobber it */
        saved_argc = ac;
diff --git a/sshd_config b/sshd_config
index c3ad1fe61..e7a33399b 100644
--- a/sshd_config
+++ b/sshd_config
@@ -1,4 +1,4 @@
-#       $OpenBSD: sshd_config,v 1.82 2010/09/06 17:10:19 naddy Exp $
+#       $OpenBSD: sshd_config,v 1.84 2011/05/23 03:30:07 djm Exp $
 # This is the sshd server system-wide configuration file.  See
 # sshd_config(5) for more information.
@@ -7,7 +7,7 @@
 # The strategy used for options in the default sshd_config shipped with
 # OpenSSH is to specify options with their default value where
-# possible, but leave them commented.  Uncommented options change a
+# possible, but leave them commented.  Uncommented options override the
 # default value.
 #Port 22
@@ -45,7 +45,10 @@
 #RSAAuthentication yes
 #PubkeyAuthentication yes
-#AuthorizedKeysFile     .ssh/authorized_keys
+# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
+# but this is overridden so installations will only check .ssh/authorized_keys
+AuthorizedKeysFile      .ssh/authorized_keys
 # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
 #RhostsRSAAuthentication no
diff --git a/sshd_config.0 b/sshd_config.0
index ab0d79be6..e19ca875b 100644
--- a/sshd_config.0
+++ b/sshd_config.0
@@ -81,8 +81,9 @@ DESCRIPTION
             home directory of the user being authenticated, and %u is
             replaced by the username of that user.  After expansion,
             AuthorizedKeysFile is taken to be an absolute path or one
-             relative to the user's home directory.  The default is
+             relative to the user's home directory.  Multiple files may be
-             ``.ssh/authorized_keys''.
+             listed, separated by whitespace.  The default is
+             ``.ssh/authorized_keys .ssh/authorized_keys2''.
     AuthorizedPrincipalsFile
             Specifies a file that lists principal names that are accepted for
@@ -375,7 +376,9 @@ DESCRIPTION
             separated.  The default is:
                   hmac-md5,hmac-sha1,umac-64@openssh.com,
-                   hmac-ripemd160,hmac-sha1-96,hmac-md5-96
+                   hmac-ripemd160,hmac-sha1-96,hmac-md5-96,
+                   hmac-sha2-256,hmac-sha256-96,hmac-sha2-512,
+                   hmac-sha2-512-96
     Match   Introduces a conditional block.  If all of the criteria on the
             Match line are satisfied, the keywords on the following lines
@@ -625,7 +628,9 @@ DESCRIPTION
             that has the privilege of the authenticated user.  The goal of
             privilege separation is to prevent privilege escalation by
             containing any corruption within the unprivileged processes.  The
-             default is ``yes''.
+             default is ``yes''.  If UsePrivilegeSeparation is set to
+             ``sandbox'' then the pre-authentication unprivileged process is
+             subject to additional restrictions.
     X11DisplayOffset
             Specifies the first display number available for sshd(8)'s X11
@@ -710,4 +715,4 @@ AUTHORS
     versions 1.5 and 2.0.  Niels Provos and Markus Friedl contributed support
     for privilege separation.
-OpenBSD 4.9                    December 8, 2010                    OpenBSD 4.9
+OpenBSD 5.0                     August 2, 2011                     OpenBSD 5.0
diff --git a/sshd_config.5 b/sshd_config.5
index e7a5f0a08..e73624154 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -33,8 +33,8 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd_config.5,v 1.131 2010/12/08 04:02:47 djm Exp $
+.\" $OpenBSD: sshd_config.5,v 1.135 2011/08/02 01:22:11 djm Exp $
-.Dd $Mdocdate: December 8 2010 $
+.Dd $Mdocdate: August 2 2011 $
 .Dt SSHD_CONFIG 5
 .Os
 .Sh NAME
@@ -195,8 +195,9 @@ After expansion,
 .Cm AuthorizedKeysFile
 is taken to be an absolute path or one relative to the user's home
 directory.
+Multiple files may be listed, separated by whitespace.
 The default is
-.Dq .ssh/authorized_keys .
+.Dq .ssh/authorized_keys .ssh/authorized_keys2 .
 .It Cm AuthorizedPrincipalsFile
 Specifies a file that lists principal names that are accepted for
 certificate authentication.
@@ -713,7 +714,9 @@ Multiple algorithms must be comma-separated.
 The default is:
 .Bd -literal -offset indent
 hmac-md5,hmac-sha1,umac-64@openssh.com,
-hmac-ripemd160,hmac-sha1-96,hmac-md5-96
+hmac-ripemd160,hmac-sha1-96,hmac-md5-96,
+hmac-sha2-256,hmac-sha256-96,hmac-sha2-512,
+hmac-sha2-512-96
 .Ed
 .It Cm Match
 Introduces a conditional block.
@@ -1146,6 +1149,12 @@ The goal of privilege separation is to prevent privilege
 escalation by containing any corruption within the unprivileged processes.
 The default is
 .Dq yes .
+If
+.Cm UsePrivilegeSeparation
+is set to
+.Dq sandbox
+then the pre-authentication unprivileged process is subject to additional
+restrictions.
 .It Cm X11DisplayOffset
 Specifies the first display number available for
 .Xr sshd 8 Ns 's
diff --git a/version.h b/version.h
index 56809360c..577684554 100644
--- a/version.h
+++ b/version.h
@@ -1,8 +1,8 @@
-/* $OpenBSD: version.h,v 1.61 2011/02/04 00:44:43 djm Exp $ */
+/* $OpenBSD: version.h,v 1.62 2011/08/02 23:13:01 djm Exp $ */
-#define SSH_VERSION     "OpenSSH_5.8"
+#define SSH_VERSION     "OpenSSH_5.9"
-#define SSH_PORTABLE    "p1"
+#define SSH_PORTABLE    "p2"
 #define SSH_RELEASE_MINIMUM     SSH_VERSION SSH_PORTABLE
 #ifdef SSH_EXTRAVERSION
 #define SSH_RELEASE     SSH_RELEASE_MINIMUM " " SSH_EXTRAVERSION
author	Colin Watson <cjwatson@debian.org>	2011-09-06 14:56:29 +0100
committer	Colin Watson <cjwatson@debian.org>	2011-09-06 14:56:29 +0100
commit	978e62d6f14c60747bddef2cc72d66a9c8b83b54 (patch)
tree	89400a44e42d84937deba7864e4964d6c7734da5
parent	87c685b8c6a49814fd782288097b3093f975aa72 (diff)
parent	3a7e89697ca363de0f64e0d5704c57219294e41c (diff)