Diff of the two buildlogs:

--
--- b1/build.log	2025-03-07 17:26:16.884967409 +0000
+++ b2/build.log	2025-03-07 17:29:34.164083655 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Thu Apr  9 11:47:31 -12 2026
-I: pbuilder-time-stamp: 1775778451
+I: Current time: Sat Mar  8 07:26:19 +14 2025
+I: pbuilder-time-stamp: 1741368379
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/trixie-reproducible-base.tgz]
 I: copying local configuration
@@ -27,52 +27,84 @@
 dpkg-source: info: applying 0004-Include-features.h-to-enable-NSPR-workaround-for-854.patch
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/1534544/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos1-amd64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Mar  7 17:26 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='amd64'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 '
-  DISTRIBUTION='trixie'
-  HOME='/root'
-  HOST_ARCH='amd64'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu")
+  BASH_VERSION='5.2.37(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=amd64
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=20 '
+  DIRSTACK=()
+  DISTRIBUTION=trixie
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=x86_64
+  HOST_ARCH=amd64
   IFS=' 	
   '
-  INVOCATION_ID='c3ed408c6b074d5ba86a0693979c8745'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='1534544'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=81b4344d26764ae7bd1f75e520ee4ed1
+  LANG=C
+  LANGUAGE=et_EE:et
+  LC_ALL=C
+  MACHTYPE=x86_64-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=3987186
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.IVK3lgrD/pbuilderrc_4tWf --distribution trixie --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.IVK3lgrD/b1 --logfile b1/build.log libreswan_5.2-2.dsc'
-  SUDO_GID='110'
-  SUDO_UID='105'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://213.165.73.152:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.IVK3lgrD/pbuilderrc_erda --distribution trixie --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.IVK3lgrD/b2 --logfile b2/build.log libreswan_5.2-2.dsc'
+  SUDO_GID=110
+  SUDO_UID=105
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://46.16.76.132:3128
 I: uname -a
-  Linux ionos5-amd64 6.12.12+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1~bpo12+1 (2025-02-23) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-31-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Nov 22  2024 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/1534544/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -323,7 +355,7 @@
 Get: 171 http://deb.debian.org/debian trixie/main amd64 man2html amd64 1.6g-16 [32.3 kB]
 Get: 172 http://deb.debian.org/debian trixie/main amd64 xsltproc amd64 1.1.35-1.1+b1 [115 kB]
 Get: 173 http://deb.debian.org/debian trixie/main amd64 xmlto amd64 0.0.28-3.1 [27.2 kB]
-Fetched 68.0 MB in 1s (57.7 MB/s)
+Fetched 68.0 MB in 6s (12.3 MB/s)
 Preconfiguring packages ...
 Selecting previously unselected package libsystemd-shared:amd64.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19800 files and directories currently installed.)
@@ -1084,7 +1116,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/libreswan-5.2/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../libreswan_5.2-2_source.changes
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for trixie
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/libreswan-5.2/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../libreswan_5.2-2_source.changes
 dpkg-buildpackage: info: source package libreswan
 dpkg-buildpackage: info: source version 5.2-2
 dpkg-buildpackage: info: source distribution unstable
@@ -1094,7 +1130,7 @@
  debian/rules clean
 dh clean
    dh_auto_clean
-	make -j42 distclean
+	make -j20 distclean
 make[1]: Entering directory '/build/reproducible-path/libreswan-5.2'
 : generated test keys
 : careful output mixed with repo files
@@ -1122,7 +1158,7 @@
 make[1]: Entering directory '/build/reproducible-path/libreswan-5.2'
 dh_auto_build -- programs \
 	ARCH=amd64 OBJDIR=OBJ.linux.amd64 IPSECVERSION=5.2 PREFIX=/usr USE_LDAP=true USE_LIBCURL=true USE_AUTHPAM=true USE_LIBCAP_NG=true USE_LABELED_IPSEC=true USE_LINUX_AUDIT=true USE_DH31=true USE_NSS_KDF=true USE_NSS_IPSEC_PROFILE=true USE_DNSSEC=true DEFAULT_DNSSEC_ROOTKEY_FILE=/usr/share/dns/root.key
-	make -j42 "INSTALL=install --strip-program=true" programs ARCH=amd64 OBJDIR=OBJ.linux.amd64 IPSECVERSION=5.2 PREFIX=/usr USE_LDAP=true USE_LIBCURL=true USE_AUTHPAM=true USE_LIBCAP_NG=true USE_LABELED_IPSEC=true USE_LINUX_AUDIT=true USE_DH31=true USE_NSS_KDF=true USE_NSS_IPSEC_PROFILE=true USE_DNSSEC=true DEFAULT_DNSSEC_ROOTKEY_FILE=/usr/share/dns/root.key
+	make -j20 "INSTALL=install --strip-program=true" programs ARCH=amd64 OBJDIR=OBJ.linux.amd64 IPSECVERSION=5.2 PREFIX=/usr USE_LDAP=true USE_LIBCURL=true USE_AUTHPAM=true USE_LIBCAP_NG=true USE_LABELED_IPSEC=true USE_LINUX_AUDIT=true USE_DH31=true USE_NSS_KDF=true USE_NSS_IPSEC_PROFILE=true USE_DNSSEC=true DEFAULT_DNSSEC_ROOTKEY_FILE=/usr/share/dns/root.key
 make[2]: Entering directory '/build/reproducible-path/libreswan-5.2'
 make[3]: Entering directory '/build/reproducible-path/libreswan-5.2/lib'
 make[4]: Entering directory '/build/reproducible-path/libreswan-5.2/lib/libswan'
@@ -2686,8 +2722,8 @@
     ./version.in.c \
     > /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/version.c.tmp
 rm -f /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c.tmp
-./enum_checklist.sh enum_names ../../include/addr_lookup.h ../../include/alg_byname.h ../../include/asn1.h ../../include/authby.h ../../include/binary-iec-60027-2.h ../../include/binaryscale-iec-60027-2.h ../../include/certs.h ../../include/chunk.h ../../include/ckaid.h ../../include/connection_owner.h ../../include/constants.h ../../include/crypt_cipher.h ../../include/crypt_hash.h ../../include/crypt_mac.h ../../include/crypt_prf.h ../../include/crypt_symkey.h ../../include/deltatime.h ../../include/diag.h ../../include/dnssec.h ../../include/encap_mode.h ../../include/encap_proto.h ../../include/encap_type.h ../../include/end.h ../../include/enum_names.h ../../include/err.h ../../include/fatal.h ../../include/fd.h ../../include/fips_mode.h ../../include/hunk.h ../../include/id.h ../../include/ietf_constants.h ../../include/ike_alg.h ../../include/ike_alg_dh.h ../../include/ike_alg_dh_ops.h ../../include/ike_alg_encrypt.h ../../include/ike_alg_encrypt_ops.h ../../include/ike_alg_hash.h ../../include/ike_alg_hash_ops.h ../../include/ike_alg_integ.h ../../include/ike_alg_ipcomp.h ../../include/ike_alg_ipcomp_ops.h ../../include/ike_alg_prf.h ../../include/ike_alg_prf_ikev1_ops.h ../../include/ike_alg_prf_ikev2_ops.h ../../include/ike_alg_prf_mac_ops.h ../../include/ike_alg_test_cbc.h ../../include/ike_alg_test_ctr.h ../../include/ike_alg_test_gcm.h ../../include/ike_alg_test_prf.h ../../include/ike_spi.h ../../include/ikev1_prf.h ../../include/ikev2_prf.h ../../include/impair.h ../../include/initiated_by.h ../../include/ip_address.h ../../include/ip_bytes.h ../../include/ip_cidr.h ../../include/ip_encap.h ../../include/ip_endpoint.h ../../include/ip_index.h ../../include/ip_info.h ../../include/ip_packet.h ../../include/ip_port.h ../../include/ip_port_range.h ../../include/ip_protocol.h ../../include/ip_protoport.h ../../include/ip_range.h ../../include/ip_said.h ../../include/ip_selector.h ../../include/ip_sockaddr.h ../../include/ip_subnet.h ../../include/ip_version.h ../../include/ipsec_spi.h ../../include/jambuf.h ../../include/kernel_mode.h ../../include/kernel_netlink_query.h ../../include/kernel_netlink_reply.h ../../include/keyid.h ../../include/lex.h ../../include/linux_netlink.h ../../include/lmod.h ../../include/logjam.h ../../include/lset.h ../../include/lsw-pfkeyv2.h ../../include/lsw_socket.h ../../include/lswalloc.h ../../include/lswcdefs.h ../../include/lswconf.h ../../include/lswendian.h ../../include/lswglob.h ../../include/lswlog.h ../../include/lswnss.h ../../include/lswsd.h ../../include/lswseccomp.h ../../include/lswtool.h ../../include/lswversion.h ../../include/message_role.h ../../include/monotime.h ../../include/names.h ../../include/names_constant.h ../../include/netlink_attrib.h ../../include/nss_cert_load.h ../../include/oid.h ../../include/optarg.h ../../include/passert.h ../../include/pexpect.h ../../include/pluto_constants.h ../../include/proposals.h ../../include/realtime.h ../../include/refcnt.h ../../include/reqid.h ../../include/rnd.h ../../include/sa_role.h ../../include/sa_type.h ../../include/scale.h ../../include/secrets.h ../../include/shunk.h ../../include/sparse_names.h ../../include/state_category.h ../../include/sysdep.h ../../include/terminate_reason.h ../../include/test_buffer.h ../../include/timescale.h ../../include/ttodata.h ../../include/vendorid.h ../../include/verbose.h ../../include/whack.h ../../include/where.h ../../include/x509.h ../../include/ipsecconf/confread.h ../../include/ipsecconf/confwrite.h ../../include/ipsecconf/interfaces.h ../../include/ipsecconf/keywords.h ../../include/ipsecconf/parser-controls.h ../../include/ipsecconf/parser-flex.h ../../include/ipsecconf/parser.h ../../include/ipsecconf/pluto.h ../../include/ipsecconf/starterwhack.h >/build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c.tmp
 mv /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/version.c.tmp /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/version.c
+./enum_checklist.sh enum_names ../../include/addr_lookup.h ../../include/alg_byname.h ../../include/asn1.h ../../include/authby.h ../../include/binary-iec-60027-2.h ../../include/binaryscale-iec-60027-2.h ../../include/certs.h ../../include/chunk.h ../../include/ckaid.h ../../include/connection_owner.h ../../include/constants.h ../../include/crypt_cipher.h ../../include/crypt_hash.h ../../include/crypt_mac.h ../../include/crypt_prf.h ../../include/crypt_symkey.h ../../include/deltatime.h ../../include/diag.h ../../include/dnssec.h ../../include/encap_mode.h ../../include/encap_proto.h ../../include/encap_type.h ../../include/end.h ../../include/enum_names.h ../../include/err.h ../../include/fatal.h ../../include/fd.h ../../include/fips_mode.h ../../include/hunk.h ../../include/id.h ../../include/ietf_constants.h ../../include/ike_alg.h ../../include/ike_alg_dh.h ../../include/ike_alg_dh_ops.h ../../include/ike_alg_encrypt.h ../../include/ike_alg_encrypt_ops.h ../../include/ike_alg_hash.h ../../include/ike_alg_hash_ops.h ../../include/ike_alg_integ.h ../../include/ike_alg_ipcomp.h ../../include/ike_alg_ipcomp_ops.h ../../include/ike_alg_prf.h ../../include/ike_alg_prf_ikev1_ops.h ../../include/ike_alg_prf_ikev2_ops.h ../../include/ike_alg_prf_mac_ops.h ../../include/ike_alg_test_cbc.h ../../include/ike_alg_test_ctr.h ../../include/ike_alg_test_gcm.h ../../include/ike_alg_test_prf.h ../../include/ike_spi.h ../../include/ikev1_prf.h ../../include/ikev2_prf.h ../../include/impair.h ../../include/initiated_by.h ../../include/ip_address.h ../../include/ip_bytes.h ../../include/ip_cidr.h ../../include/ip_encap.h ../../include/ip_endpoint.h ../../include/ip_index.h ../../include/ip_info.h ../../include/ip_packet.h ../../include/ip_port.h ../../include/ip_port_range.h ../../include/ip_protocol.h ../../include/ip_protoport.h ../../include/ip_range.h ../../include/ip_said.h ../../include/ip_selector.h ../../include/ip_sockaddr.h ../../include/ip_subnet.h ../../include/ip_version.h ../../include/ipsec_spi.h ../../include/jambuf.h ../../include/kernel_mode.h ../../include/kernel_netlink_query.h ../../include/kernel_netlink_reply.h ../../include/keyid.h ../../include/lex.h ../../include/linux_netlink.h ../../include/lmod.h ../../include/logjam.h ../../include/lset.h ../../include/lsw-pfkeyv2.h ../../include/lsw_socket.h ../../include/lswalloc.h ../../include/lswcdefs.h ../../include/lswconf.h ../../include/lswendian.h ../../include/lswglob.h ../../include/lswlog.h ../../include/lswnss.h ../../include/lswsd.h ../../include/lswseccomp.h ../../include/lswtool.h ../../include/lswversion.h ../../include/message_role.h ../../include/monotime.h ../../include/names.h ../../include/names_constant.h ../../include/netlink_attrib.h ../../include/nss_cert_load.h ../../include/oid.h ../../include/optarg.h ../../include/passert.h ../../include/pexpect.h ../../include/pluto_constants.h ../../include/proposals.h ../../include/realtime.h ../../include/refcnt.h ../../include/reqid.h ../../include/rnd.h ../../include/sa_role.h ../../include/sa_type.h ../../include/scale.h ../../include/secrets.h ../../include/shunk.h ../../include/sparse_names.h ../../include/state_category.h ../../include/sysdep.h ../../include/terminate_reason.h ../../include/test_buffer.h ../../include/timescale.h ../../include/ttodata.h ../../include/vendorid.h ../../include/verbose.h ../../include/whack.h ../../include/where.h ../../include/x509.h ../../include/ipsecconf/confread.h ../../include/ipsecconf/confwrite.h ../../include/ipsecconf/interfaces.h ../../include/ipsecconf/keywords.h ../../include/ipsecconf/parser-controls.h ../../include/ipsecconf/parser-flex.h ../../include/ipsecconf/parser.h ../../include/ipsecconf/pluto.h ../../include/ipsecconf/starterwhack.h >/build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c.tmp
 rm -f /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.c.tmp
 ./enum_checklist.sh enum_enum_names ../../include/addr_lookup.h ../../include/alg_byname.h ../../include/asn1.h ../../include/authby.h ../../include/binary-iec-60027-2.h ../../include/binaryscale-iec-60027-2.h ../../include/certs.h ../../include/chunk.h ../../include/ckaid.h ../../include/connection_owner.h ../../include/constants.h ../../include/crypt_cipher.h ../../include/crypt_hash.h ../../include/crypt_mac.h ../../include/crypt_prf.h ../../include/crypt_symkey.h ../../include/deltatime.h ../../include/diag.h ../../include/dnssec.h ../../include/encap_mode.h ../../include/encap_proto.h ../../include/encap_type.h ../../include/end.h ../../include/enum_names.h ../../include/err.h ../../include/fatal.h ../../include/fd.h ../../include/fips_mode.h ../../include/hunk.h ../../include/id.h ../../include/ietf_constants.h ../../include/ike_alg.h ../../include/ike_alg_dh.h ../../include/ike_alg_dh_ops.h ../../include/ike_alg_encrypt.h ../../include/ike_alg_encrypt_ops.h ../../include/ike_alg_hash.h ../../include/ike_alg_hash_ops.h ../../include/ike_alg_integ.h ../../include/ike_alg_ipcomp.h ../../include/ike_alg_ipcomp_ops.h ../../include/ike_alg_prf.h ../../include/ike_alg_prf_ikev1_ops.h ../../include/ike_alg_prf_ikev2_ops.h ../../include/ike_alg_prf_mac_ops.h ../../include/ike_alg_test_cbc.h ../../include/ike_alg_test_ctr.h ../../include/ike_alg_test_gcm.h ../../include/ike_alg_test_prf.h ../../include/ike_spi.h ../../include/ikev1_prf.h ../../include/ikev2_prf.h ../../include/impair.h ../../include/initiated_by.h ../../include/ip_address.h ../../include/ip_bytes.h ../../include/ip_cidr.h ../../include/ip_encap.h ../../include/ip_endpoint.h ../../include/ip_index.h ../../include/ip_info.h ../../include/ip_packet.h ../../include/ip_port.h ../../include/ip_port_range.h ../../include/ip_protocol.h ../../include/ip_protoport.h ../../include/ip_range.h ../../include/ip_said.h ../../include/ip_selector.h ../../include/ip_sockaddr.h ../../include/ip_subnet.h ../../include/ip_version.h ../../include/ipsec_spi.h ../../include/jambuf.h ../../include/kernel_mode.h ../../include/kernel_netlink_query.h ../../include/kernel_netlink_reply.h ../../include/keyid.h ../../include/lex.h ../../include/linux_netlink.h ../../include/lmod.h ../../include/logjam.h ../../include/lset.h ../../include/lsw-pfkeyv2.h ../../include/lsw_socket.h ../../include/lswalloc.h ../../include/lswcdefs.h ../../include/lswconf.h ../../include/lswendian.h ../../include/lswglob.h ../../include/lswlog.h ../../include/lswnss.h ../../include/lswsd.h ../../include/lswseccomp.h ../../include/lswtool.h ../../include/lswversion.h ../../include/message_role.h ../../include/monotime.h ../../include/names.h ../../include/names_constant.h ../../include/netlink_attrib.h ../../include/nss_cert_load.h ../../include/oid.h ../../include/optarg.h ../../include/passert.h ../../include/pexpect.h ../../include/pluto_constants.h ../../include/proposals.h ../../include/realtime.h ../../include/refcnt.h ../../include/reqid.h ../../include/rnd.h ../../include/sa_role.h ../../include/sa_type.h ../../include/scale.h ../../include/secrets.h ../../include/shunk.h ../../include/sparse_names.h ../../include/state_category.h ../../include/sysdep.h ../../include/terminate_reason.h ../../include/test_buffer.h ../../include/timescale.h ../../include/ttodata.h ../../include/vendorid.h ../../include/verbose.h ../../include/whack.h ../../include/where.h ../../include/x509.h ../../include/ipsecconf/confread.h ../../include/ipsecconf/confwrite.h ../../include/ipsecconf/interfaces.h ../../include/ipsecconf/keywords.h ../../include/ipsecconf/parser-controls.h ../../include/ipsecconf/parser-flex.h ../../include/ipsecconf/parser.h ../../include/ipsecconf/pluto.h ../../include/ipsecconf/starterwhack.h >/build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.c.tmp
 cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
@@ -2698,10 +2734,9 @@
 	-MP -MMD -MT /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/version.o \
 	-o ../../OBJ.linux.amd64/lib/libswan/version.o \
 	-c /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/version.c
-exchange_type_names ikev1_ipsec_attr_value_names ikev1_oakley_attr_value_names payload_type_names
 ah_transformid_names allow_global_redirect_names attr_msg_type_names auth_alg_names certpolicy_type_names connection_event_kind_names connection_kind_names connection_owner_names connection_owner_stories dns_auth_level_names doi_names eap_code_names eap_type_names eaptls_flag_names encap_mode_names encap_mode_story encap_proto_names encap_proto_story encap_type_names encapsulation_mode_names end_names end_stories esp_transformid_names event_type_names fips_mode_names global_timer_names ike_cert_type_names ike_id_type_names ike_version_names ikev1_exchange_names ikev1_ike_id_type_names ikev1_ipsec_attr_names ikev1_payload_names ikev1_protocol_names ikev1_xauth_type_names ikev2_auth_method_names ikev2_cert_type_names ikev2_cp_attribute_type_names ikev2_cp_type_names ikev2_delete_protocol_id_names ikev2_exchange_names ikev2_hash_algorithm_names ikev2_ike_id_type_names ikev2_last_proposal_desc ikev2_last_transform_desc ikev2_notify_protocol_id_names ikev2_payload_names ikev2_ppk_id_type_names ikev2_proposal_protocol_id_names ikev2_redirect_gw_names ikev2_trans_attr_descs ikev2_trans_type_encr_names ikev2_trans_type_esn_names ikev2_trans_type_integ_names ikev2_trans_type_names ikev2_trans_type_prf_names ikev2_ts_type_names initiated_by_names ip_protocol_id_names ipsec_attr_names ipsec_ipcomp_algo_names ipseckey_algorithm_config_names ipseckey_algorithm_type_names isakmp_flag_names isakmp_transformid_names isakmp_xchg_type_names kernel_mode_names kernel_mode_stories keyword_auth_names keyword_host_names message_role_names modecfg_attr_names natt_method_names oakley_attr_bit_names oakley_attr_names oakley_auth_names oakley_enc_names oakley_group_names oakley_hash_names oakley_lifetime_names payload_names_ikev1orv2 perspective_names pluto_exit_code_names sa_lifetime_names sa_role_names sa_type_names sd_action_names secret_kind_names shunt_kind_names shunt_policy_names shunt_policy_percent_names sit_bit_names state_category_names stf_status_names terminate_reason_names v1_notification_names v2_notification_names version_names xauth_attr_names xfrm_policy_names KERNEL_XFRM
+exchange_type_names ikev1_ipsec_attr_value_names ikev1_oakley_attr_value_names payload_type_names
 mv /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.c.tmp /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.c
-mv /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c.tmp /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c
 cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
 	-I../../OBJ.linux.amd64/lib/libswan -I../../include -I/usr/include/nss -I/usr/include/nspr  \
 	-DHERE_FILENAME='"lib/libswan/enum_enum_names_checklist.c"' \
@@ -2710,6 +2745,7 @@
 	-MP -MMD -MT /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.o \
 	-o ../../OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.o \
 	-c /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_enum_names_checklist.c
+mv /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c.tmp /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/enum_names_checklist.c
 cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
 	-I../../OBJ.linux.amd64/lib/libswan -I../../include -I/usr/include/nss -I/usr/include/nspr  \
 	-DHERE_FILENAME='"lib/libswan/enum_names_checklist.c"' \
@@ -4538,13 +4574,13 @@
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-pluto.8.xml -o ../../OBJ.linux.amd64/html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/libreswan.7.html
 touch ../../OBJ.linux.amd64/programs/pluto/libreswan.7.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-pluto.8.html
+touch ../../OBJ.linux.amd64/programs/pluto/ipsec-pluto.8.html
 Note: Writing ipsec-pluto.8
 Note: Writing pluto.8 (soelim stub)
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/pluto/ipsec-pluto.8
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/pluto/pluto.8
 touch ../../OBJ.linux.amd64/programs/pluto/ipsec-pluto.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-pluto.8.html
-touch ../../OBJ.linux.amd64/programs/pluto/ipsec-pluto.8.html
 Note: Writing libreswan.7
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/pluto/libreswan.7
 touch ../../OBJ.linux.amd64/programs/pluto/libreswan.7.man
@@ -4577,8 +4613,6 @@
 	-c /build/reproducible-path/libreswan-5.2/programs/whack/whack.c
 xmlto  man ipsec-whack.8.xml -o ../../OBJ.linux.amd64/programs/whack
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-whack.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-whack.8.html
-touch ../../OBJ.linux.amd64/programs/whack/ipsec-whack.8.html
 cd ../../OBJ.linux.amd64/programs/whack && \
 cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
 	-I../../OBJ.linux.amd64/programs/whack -I../../include -I/usr/include/nss -I/usr/include/nspr  \
@@ -4586,6 +4620,8 @@
 	-o whack whack.o /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libwhack/libwhack.a /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/libswan.a /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/liblswtool/liblswtool.a /build/reproducible-path/libreswan-5.2/OBJ.linux.amd64/lib/libswan/libswan.a \
 	-Wl,--as-needed -Wl,-z,relro,-z,now -pie  \
 	-Wl,-z,relro
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-whack.8.html
+touch ../../OBJ.linux.amd64/programs/whack/ipsec-whack.8.html
 Note: Writing ipsec-whack.8
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/whack/ipsec-whack.8
 touch ../../OBJ.linux.amd64/programs/whack/ipsec-whack.8.man
@@ -4882,8 +4918,8 @@
 xmlto  man ipsec-add.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-briefconnectionstatus.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-briefstatus.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
-mv ../../OBJ.linux.amd64/programs/ipsec/ipsec.tmp ../../OBJ.linux.amd64/programs/ipsec/ipsec
 xmlto  man ipsec-certutil.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+mv ../../OBJ.linux.amd64/programs/ipsec/ipsec.tmp ../../OBJ.linux.amd64/programs/ipsec/ipsec
 xmlto  man ipsec-checkconfig.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-checknflog.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-checknss.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
@@ -4899,287 +4935,287 @@
 xmlto  man ipsec-listall.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-listcacerts.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-listcerts.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-briefconnectionstatus.8
+Note: Writing ipsec-certutil.8
+Note: Writing ipsec-add.8
+Note: Writing ipsec-briefstatus.8
+Note: Writing ipsec-down.8
+Note: Writing ipsec-checknss.8
+Note: Writing ipsec-connectionstatus.8
+Note: Writing ipsec-checknflog.8
+Note: Writing ipsec-crlutil.8
+Note: Writing ipsec.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefconnectionstatus.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefconnectionstatus.8.man
 xmlto  man ipsec-listcrls.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-listcacerts.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-add.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-down.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-add.8.man
 xmlto  man ipsec-listen.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-connectionstatus.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-down.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefstatus.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-certutil.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknss.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-connectionstatus.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefstatus.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-certutil.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknss.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknflog.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec.8
 xmlto  man ipsec-listpubkeys.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-crlutil.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcacerts.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknflog.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-crlutil.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcacerts.8.man
 xmlto  man ipsec-modutil.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-ondemand.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-delete.8
 xmlto  man ipsec-pk12util.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-checkconfig.8
 xmlto  man ipsec-purgeocsp.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-fetchcrls.8
 xmlto  man ipsec-redirect.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-replace.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-rereadall.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-initnss.8
+Note: Writing ipsec-fipsstatus.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-delete.8
 xmlto  man ipsec-rereadcerts.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-delete.8.man
 xmlto  man ipsec-rereadsecrets.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-globalstatus.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-checkconfig.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checkconfig.8.man
 xmlto  man ipsec-restart.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-listall.8
+Note: Writing ipsec-import.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-fetchcrls.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-initnss.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-fipsstatus.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fetchcrls.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-initnss.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fipsstatus.8.man
 xmlto  man ipsec-route.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-showstates.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-listcerts.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-globalstatus.8
 xmlto  man ipsec-shuntstatus.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listall.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-globalstatus.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-import.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listall.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-import.8.man
 xmlto  man ipsec-start.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcerts.8
 xmlto  man ipsec-status.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcerts.8.man
 xmlto  man ipsec-stop.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
 xmlto  man ipsec-trafficstatus.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-listen.8
+Note: Writing ipsec-listcrls.8
+Note: Writing ipsec-listpubkeys.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listen.8
+Note: Writing ipsec-purgeocsp.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listen.8.man
 xmlto  man ipsec-unroute.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
-xmlto  man ipsec-up.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
-Note: Writing ipsec-briefconnectionstatus.8
-Note: Writing ipsec-checknflog.8
-Note: Writing ipsec-checknss.8
-Note: Writing ipsec-briefstatus.8
-Note: Writing ipsec-connectionstatus.8
-Note: Writing ipsec-fetchcrls.8
-Note: Writing ipsec-globalstatus.8
-Note: Writing ipsec-import.8
-Note: Writing ipsec.8
-Note: Writing ipsec-down.8
-Note: Writing ipsec-add.8
-Note: Writing ipsec-fipsstatus.8
-Note: Writing ipsec-certutil.8
-Note: Writing ipsec-listcerts.8
-Note: Writing ipsec-delete.8
-Note: Writing ipsec-checkconfig.8
+Note: Writing ipsec-ondemand.8
 Note: Writing ipsec-modutil.8
-Note: Writing ipsec-crlutil.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefconnectionstatus.8
-Note: Writing ipsec-rereadsecrets.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefconnectionstatus.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknflog.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-purgeocsp.8
+Note: Writing ipsec-pk12util.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcrls.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-purgeocsp.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listpubkeys.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcrls.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listpubkeys.8.man
+xmlto  man ipsec-up.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
+Note: Writing ipsec-redirect.8
 xmlto  man ipsec-vfychain.8.xml -o ../../OBJ.linux.amd64/programs/ipsec
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-fetchcrls.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-globalstatus.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefstatus.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-import.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-connectionstatus.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fetchcrls.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-globalstatus.8.man
+Note: Writing ipsec-replace.8
+Note: Writing ipsec-rereadall.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec.8.xml -o ../../OBJ.linux.amd64/html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-ondemand.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-modutil.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-ondemand.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-add.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-import.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknss.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknflog.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefstatus.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-connectionstatus.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-modutil.8.man
+Note: Writing ipsec-restart.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-pk12util.8
+Note: Writing ipsec-rereadsecrets.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-briefconnectionstatus.8.xml -o ../../OBJ.linux.amd64/html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-redirect.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-pk12util.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadall.8
+Note: Writing ipsec-route.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-replace.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-redirect.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadall.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-replace.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-briefstatus.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-add.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-certutil.8.xml -o ../../OBJ.linux.amd64/html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-checkconfig.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknss.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-checknflog.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-down.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadsecrets.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-restart.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadsecrets.8.man
+Note: Writing ipsec-shuntstatus.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-checknss.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-fipsstatus.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-add.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-down.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-restart.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-connectionstatus.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-listcacerts.8
+Note: Writing ipsec-rereadcerts.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-route.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-route.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-crlutil.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-certutil.8
-Note: Writing ipsec-listall.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fipsstatus.8.man
+Note: Writing ipsec-showstates.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadcerts.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadcerts.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-shuntstatus.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-delete.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-certutil.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcerts.8
+Note: Writing ipsec-trafficstatus.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-shuntstatus.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-down.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-delete.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcerts.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-modutil.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-delete.8.man
+Note: Writing ipsec-status.8
+Note: Writing ipsec-start.8
+Note: Writing ipsec-stop.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-showstates.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-showstates.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-fetchcrls.8.xml -o ../../OBJ.linux.amd64/html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-trafficstatus.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-status.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-trafficstatus.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-status.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-fipsstatus.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-checkconfig.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-crlutil.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-modutil.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-stop.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-globalstatus.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checkconfig.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-start.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-stop.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-start.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-import.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-crlutil.8.man
-Note: Writing ipsec-initnss.8
+Note: Writing ipsec-unroute.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-initnss.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadsecrets.8
-Note: Writing ipsec-listpubkeys.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadsecrets.8.man
-Note: Writing ipsec-redirect.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-add.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-add.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-listall.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-pk12util.8
-Note: Writing ipsec-purgeocsp.8
-Note: Writing ipsec-replace.8
-Note: Writing ipsec-ondemand.8
-Note: Writing ipsec-listen.8
-Note: Writing ipsec-listcrls.8Note: Writing ipsec-rereadcerts.8
-
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcacerts.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listall.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcacerts.8.man
+Note: Writing ipsec-up.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-briefconnectionstatus.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefconnectionstatus.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-listcacerts.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-shuntstatus.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listall.8.man
+Note: Writing ipsec-vfychain.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-unroute.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-certutil.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-unroute.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-certutil.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-listcerts.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-rereadall.8
-Note: Writing ipsec-restart.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-initnss.8
-Note: Writing ipsec-route.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-initnss.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-listcrls.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listpubkeys.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-redirect.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-pk12util.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listpubkeys.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-replace.8
-Note: Writing ipsec-status.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-redirect.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-purgeocsp.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-pk12util.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-listen.8.xml -o ../../OBJ.linux.amd64/html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-up.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-checkconfig.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-up.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checkconfig.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-listpubkeys.8.xml -o ../../OBJ.linux.amd64/html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-modutil.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-ondemand.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-purgeocsp.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-replace.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-vfychain.8
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-checknflog.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-vfychain.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-checknss.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknflog.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-ondemand.8.xml -o ../../OBJ.linux.amd64/html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-pk12util.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-ondemand.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknss.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-purgeocsp.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listen.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadcerts.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcrls.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listen.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-crlutil.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-briefstatus.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-connectionstatus.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefstatus.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-redirect.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadcerts.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcrls.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-crlutil.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-down.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-connectionstatus.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-replace.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-showstates.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-rereadall.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-shuntstatus.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-shuntstatus.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-restart.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadall.8
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-down.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-rereadcerts.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-start.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-restart.8.man
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadall.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-delete.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-delete.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-rereadsecrets.8.xml -o ../../OBJ.linux.amd64/html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-fetchcrls.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fetchcrls.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-restart.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-route.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-route.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-initnss.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-fipsstatus.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-initnss.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fipsstatus.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-route.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-stop.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-status.8
-Note: Writing ipsec-trafficstatus.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-status.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-globalstatus.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-import.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listall.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-globalstatus.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-import.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listall.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-showstates.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-unroute.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-showstates.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-showstates.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-shuntstatus.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-start.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-start.8.man
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-start.8.xml -o ../../OBJ.linux.amd64/html
-Note: Writing ipsec-up.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-stop.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-stop.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-trafficstatus.8
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-status.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-unroute.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-trafficstatus.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listcerts.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcerts.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-stop.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-unroute.8.man
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listcacerts.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcacerts.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listcrls.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-trafficstatus.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-up.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-up.8.man
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcrls.8.html
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-unroute.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-certutil.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-briefstatus.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-certutil.8.html
-xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-up.8.xml -o ../../OBJ.linux.amd64/html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-add.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-checknflog.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-briefconnectionstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-checkconfig.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-checknss.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-crlutil.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-add.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknflog.8.html
-xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-vfychain.8.xml -o ../../OBJ.linux.amd64/html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checkconfig.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-checknss.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-crlutil.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-briefconnectionstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-delete.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-fipsstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-globalstatus.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-delete.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fipsstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-connectionstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-down.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-globalstatus.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-connectionstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-fetchcrls.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-down.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-fetchcrls.8.html
-Note: Writing ipsec-vfychain.8
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-import.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-import.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listall.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listall.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-initnss.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-initnss.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/ipsec/ipsec-vfychain.8
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-vfychain.8.man
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listcrls.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listen.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcrls.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-purgeocsp.8.html
 touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listen.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listcacerts.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcacerts.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listcerts.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-redirect.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listcerts.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-redirect.8.html
+xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-up.8.xml -o ../../OBJ.linux.amd64/html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-purgeocsp.8.html
+xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-vfychain.8.xml -o ../../OBJ.linux.amd64/html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-modutil.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-ondemand.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-rereadall.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-modutil.8.html
 touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-ondemand.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadall.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-listpubkeys.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-replace.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-rereadcerts.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listpubkeys.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-replace.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadcerts.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-modutil.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-pk12util.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-modutil.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-listpubkeys.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-redirect.8.html
 touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-pk12util.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-purgeocsp.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-purgeocsp.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-redirect.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-rereadsecrets.8.html
 touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadsecrets.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-rereadcerts.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadcerts.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-replace.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-rereadall.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-replace.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-rereadall.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-shuntstatus.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-restart.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-restart.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-route.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-route.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-status.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-shuntstatus.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-showstates.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-status.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-showstates.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-start.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-trafficstatus.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-start.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-trafficstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-shuntstatus.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-shuntstatus.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-unroute.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-unroute.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-vfychain.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-restart.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-route.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-status.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-showstates.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-trafficstatus.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-start.8.html
 touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-vfychain.8.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-stop.8.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-up.8.html
-touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-stop.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-unroute.8.html
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-stop.8.html
 touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-up.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-unroute.8.html
+touch ../../OBJ.linux.amd64/programs/ipsec/ipsec-stop.8.html
 make[4]: Leaving directory '/build/reproducible-path/libreswan-5.2/programs/ipsec'
 make[4]: Entering directory '/build/reproducible-path/libreswan-5.2/programs/letsencrypt'
 mkdir -p ../../OBJ.linux.amd64/programs/letsencrypt
@@ -5376,9 +5412,9 @@
 xmlto  man ipsec-_stackmanager.8.xml -o ../../OBJ.linux.amd64/programs/_stackmanager
 xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-_stackmanager.8.xml -o ../../OBJ.linux.amd64/html
 mv ../../OBJ.linux.amd64/programs/_stackmanager/_stackmanager.tmp ../../OBJ.linux.amd64/programs/_stackmanager/_stackmanager
+Note: Writing ipsec-_stackmanager.8
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.amd64/html/ipsec-_stackmanager.8.html
 touch ../../OBJ.linux.amd64/programs/_stackmanager/ipsec-_stackmanager.8.html
-Note: Writing ipsec-_stackmanager.8
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.amd64/programs/_stackmanager/ipsec-_stackmanager.8
 touch ../../OBJ.linux.amd64/programs/_stackmanager/ipsec-_stackmanager.8.man
 make[4]: Leaving directory '/build/reproducible-path/libreswan-5.2/programs/_stackmanager'
@@ -5858,34 +5894,34 @@
 IN ipsec.conf.in -> ../OBJ.linux.amd64/configs/ipsec.conf
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < ipsec.conf.in > ../OBJ.linux.amd64/configs/ipsec.conf.tmp
 IN ipsec.secrets.in -> ../OBJ.linux.amd64/configs/ipsec.secrets
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < ipsec.secrets.in > ../OBJ.linux.amd64/configs/ipsec.secrets.tmp
 IN clear.in -> ../OBJ.linux.amd64/configs/clear
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < clear.in > ../OBJ.linux.amd64/configs/clear.tmp
 IN clear-or-private.in -> ../OBJ.linux.amd64/configs/clear-or-private
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < ipsec.secrets.in > ../OBJ.linux.amd64/configs/ipsec.secrets.tmp
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < clear.in > ../OBJ.linux.amd64/configs/clear.tmp
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < clear-or-private.in > ../OBJ.linux.amd64/configs/clear-or-private.tmp
+mv ../OBJ.linux.amd64/configs/ipsec.conf.tmp ../OBJ.linux.amd64/configs/ipsec.conf
+mv ../OBJ.linux.amd64/configs/ipsec.secrets.tmp ../OBJ.linux.amd64/configs/ipsec.secrets
+mv ../OBJ.linux.amd64/configs/clear.tmp ../OBJ.linux.amd64/configs/clear
+mv ../OBJ.linux.amd64/configs/clear-or-private.tmp ../OBJ.linux.amd64/configs/clear-or-private
 IN private-or-clear.in -> ../OBJ.linux.amd64/configs/private-or-clear
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < private-or-clear.in > ../OBJ.linux.amd64/configs/private-or-clear.tmp
 IN private.in -> ../OBJ.linux.amd64/configs/private
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < private-or-clear.in > ../OBJ.linux.amd64/configs/private-or-clear.tmp
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < private.in > ../OBJ.linux.amd64/configs/private.tmp
 IN block.in -> ../OBJ.linux.amd64/configs/block
-IN portexcludes.conf.in -> ../OBJ.linux.amd64/configs/portexcludes.conf
-IN libreswan.in -> ../OBJ.linux.amd64/configs/libreswan
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < block.in > ../OBJ.linux.amd64/configs/block.tmp
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < portexcludes.conf.in > ../OBJ.linux.amd64/configs/portexcludes.conf.tmp
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < libreswan.in > ../OBJ.linux.amd64/configs/libreswan.tmp
-mv ../OBJ.linux.amd64/configs/ipsec.conf.tmp ../OBJ.linux.amd64/configs/ipsec.conf
-mv ../OBJ.linux.amd64/configs/clear.tmp ../OBJ.linux.amd64/configs/clear
-mv ../OBJ.linux.amd64/configs/ipsec.secrets.tmp ../OBJ.linux.amd64/configs/ipsec.secrets
-mv ../OBJ.linux.amd64/configs/clear-or-private.tmp ../OBJ.linux.amd64/configs/clear-or-private
 mv ../OBJ.linux.amd64/configs/private-or-clear.tmp ../OBJ.linux.amd64/configs/private-or-clear
 mv ../OBJ.linux.amd64/configs/private.tmp ../OBJ.linux.amd64/configs/private
+IN portexcludes.conf.in -> ../OBJ.linux.amd64/configs/portexcludes.conf
 mv ../OBJ.linux.amd64/configs/block.tmp ../OBJ.linux.amd64/configs/block
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < portexcludes.conf.in > ../OBJ.linux.amd64/configs/portexcludes.conf.tmp
+IN libreswan.in -> ../OBJ.linux.amd64/configs/libreswan
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' < libreswan.in > ../OBJ.linux.amd64/configs/libreswan.tmp
 mv ../OBJ.linux.amd64/configs/portexcludes.conf.tmp ../OBJ.linux.amd64/configs/portexcludes.conf
 mv ../OBJ.linux.amd64/configs/libreswan.tmp ../OBJ.linux.amd64/configs/libreswan
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../OBJ.linux.amd64/html/ipsec.secrets.5.html
 touch ../OBJ.linux.amd64/configs/ipsec.secrets.5.html
-sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../OBJ.linux.amd64/html/ipsec.conf.5.html
 Note: Writing ipsec.secrets.5
+sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../OBJ.linux.amd64/html/ipsec.conf.5.html
 touch ../OBJ.linux.amd64/configs/ipsec.conf.5.html
 sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../OBJ.linux.amd64/configs/ipsec.secrets.5
 touch ../OBJ.linux.amd64/configs/ipsec.secrets.5.man
@@ -9197,16 +9233,16 @@
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: CAMELLIA_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"
 | decode_to_mac() output:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
@@ -9247,16 +9283,16 @@
 |   00 11 22 33  44 55 66 77  88 99 aa bb  cc dd ee ff   .."3DUfw........
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: CAMELLIA_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"
 | decode_to_mac() output:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
@@ -9298,16 +9334,16 @@
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: CAMELLIA_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876d290 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"
 | decode_to_mac() output:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
@@ -9349,16 +9385,16 @@
 |   ff ee dd cc  bb aa 99 88  77 66 55 44  33 22 11 00   ........wfUD3"..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: CAMELLIA_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876d290 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"
 | decode_to_mac() output:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
@@ -9400,16 +9436,16 @@
 |   cf 06 3a 34  d4 a9 a7 6c  2c 86 78 7d  3f 96 db 71   ..:4...l,.x}?..q
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256d0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72d0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_GCM
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825688
+|     params: 8-bytes@0x7ffc637c7288
 | decode_to_chunk() salted IV: input "0x113b9785971864c83b01c787"
 | decode_to_chunk() output:
 |   11 3b 97 85  97 18 64 c8  3b 01 c7 87                .;....d.;...
@@ -9443,16 +9479,16 @@
 |   e9 8b 72 a9  88 1a 84 ca  6b 76 e0 f4  3e 68 64 7a   ..r.....kv..>hdz
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256d0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72d0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_GCM
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825688
+|     params: 8-bytes@0x7ffc637c7288
 | decode_to_chunk() salted IV: input "0x8b23299fde174053f3d652ba"
 | decode_to_chunk() output:
 |   8b 23 29 9f  de 17 40 53  f3 d6 52 ba                .#)...@S..R.
@@ -9490,16 +9526,16 @@
 |   bf d4 14 a6  21 29 58 a6  07 a0 f5 d3  ab 48 47 1d   ....!)X......HG.
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256d0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72d0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_GCM
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825688
+|     params: 8-bytes@0x7ffc637c7288
 | decode_to_chunk() salted IV: input "0x86d8ea0ab8e40dcc481cd0e2"
 | decode_to_chunk() output:
 |   86 d8 ea 0a  b8 e4 0d cc  48 1c d0 e2                ........H...
@@ -9543,16 +9579,16 @@
 |   95 bc de 70  c0 94 f0 4e  3d d8 25 9c  af d8 8c e8   ...p...N=.%.....
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256d0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72d0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_GCM
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825688
+|     params: 8-bytes@0x7ffc637c7288
 | decode_to_chunk() salted IV: input "0x12cf097ad22380432ff40a5c"
 | decode_to_chunk() output:
 |   12 cf 09 7a  d2 23 80 43  2f f4 0a 5c                ...z.#.C/..\
@@ -9597,16 +9633,16 @@
 |   ae 68 52 f8  12 10 67 cc  4b f7 a5 76  55 77 f3 9e   .hR...g.K..vUw..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 00 00 30  00 00 00 00 00 00 00 00  00 00 00 01"
 | decode_to_mac() output:
 |   00 00 00 30  00 00 00 00  00 00 00 00  00 00 00 01   ...0............
@@ -9619,7 +9655,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02"
 | decode_to_chunk() output:
 |   00 00 00 30  00 00 00 00  00 00 00 00  00 00 00 02   ...0............
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876dfe0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4facfe0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00000030000000000000000000000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x2 for 16 bytes
 | do_aes_ctr: exit
@@ -9638,7 +9674,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02"
 | decode_to_chunk() output:
 |   00 00 00 30  00 00 00 00  00 00 00 00  00 00 00 02   ...0............
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876dfe0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4facfe0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00000030000000000000000000000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x2 for 16 bytes
 | do_aes_ctr: exit
@@ -9651,16 +9687,16 @@
 |   7e 24 06 78  17 fa e0 d7  43 d6 ce 1f  32 53 91 63   ~$.x....C...2S.c
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 6C B6 DB C0 54 3B 59 DA 48 D9 0B 00 00 00 01"
 | decode_to_mac() output:
 |   00 6c b6 db  c0 54 3b 59  da 48 d9 0b  00 00 00 01   .l...T;Y.H......
@@ -9675,7 +9711,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 6C B6 DB C0 54 3B 59 DA 48 D9 0B 00 00 00 03"
 | decode_to_chunk() output:
 |   00 6c b6 db  c0 54 3b 59  da 48 d9 0b  00 00 00 03   .l...T;Y.H......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876b860 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4faa860 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 006cb6dbc0543b59da48d90b00000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x3 for 32 bytes
 | do_aes_ctr: exit
@@ -9696,7 +9732,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 6C B6 DB C0 54 3B 59 DA 48 D9 0B 00 00 00 03"
 | decode_to_chunk() output:
 |   00 6c b6 db  c0 54 3b 59  da 48 d9 0b  00 00 00 03   .l...T;Y.H......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876b860 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4faa860 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 006cb6dbc0543b59da48d90b00000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x3 for 32 bytes
 | do_aes_ctr: exit
@@ -9709,16 +9745,16 @@
 |   76 91 be 03  5e 50 20 a8  ac 6e 61 85  29 f9 a0 dc   v...^P ..na.)...
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 E0 01 7B  27 77 7F 3F 4A 17 86 F0  00 00 00 01"
 | decode_to_mac() output:
 |   00 e0 01 7b  27 77 7f 3f  4a 17 86 f0  00 00 00 01   ...{'w.?J.......
@@ -9735,7 +9771,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 E0 01 7B  27 77 7F 3F 4A 17 86 F0  00 00 00 04"
 | decode_to_chunk() output:
 |   00 e0 01 7b  27 77 7f 3f  4a 17 86 f0  00 00 00 04   ...{'w.?J.......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d4b0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac4b0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00e0017b27777f3f4a1786f000000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x4 for 36 bytes
 | do_aes_ctr: exit
@@ -9758,7 +9794,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 E0 01 7B  27 77 7F 3F 4A 17 86 F0  00 00 00 04"
 | decode_to_chunk() output:
 |   00 e0 01 7b  27 77 7f 3f  4a 17 86 f0  00 00 00 04   ...{'w.?J.......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d4b0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac4b0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00e0017b27777f3f4a1786f000000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x4 for 36 bytes
 | do_aes_ctr: exit
@@ -9772,16 +9808,16 @@
 |   86 3d 06 cc  fd b7 85 15                             .=......
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 24
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 24-bytes
-|     base: base-key@0x556f9876d290 (40-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (40-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 00 00 48  36 73 3C 14 7D 6D 93 CB  00 00 00 01"
 | decode_to_mac() output:
 |   00 00 00 48  36 73 3c 14  7d 6d 93 cb  00 00 00 01   ...H6s<.}m......
@@ -9794,7 +9830,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 00 00 48  36 73 3C 14 7D 6D 93 CB  00 00 00 02"
 | decode_to_chunk() output:
 |   00 00 00 48  36 73 3c 14  7d 6d 93 cb  00 00 00 02   ...H6s<.}m......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d470 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac470 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 0000004836733c147d6d93cb00000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x2 for 16 bytes
 | do_aes_ctr: exit
@@ -9813,7 +9849,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 00 00 48  36 73 3C 14 7D 6D 93 CB  00 00 00 02"
 | decode_to_chunk() output:
 |   00 00 00 48  36 73 3c 14  7d 6d 93 cb  00 00 00 02   ...H6s<.}m......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d470 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac470 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 0000004836733c147d6d93cb00000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x2 for 16 bytes
 | do_aes_ctr: exit
@@ -9827,16 +9863,16 @@
 |   67 8c 3d b8  e6 f6 a9 1a                             g.=.....
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 24
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 24-bytes
-|     base: base-key@0x556f9876d290 (40-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (40-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 96 B0 3B  02 0C 6E AD C2 CB 50 0D  00 00 00 01"
 | decode_to_mac() output:
 |   00 96 b0 3b  02 0c 6e ad  c2 cb 50 0d  00 00 00 01   ...;..n...P.....
@@ -9851,7 +9887,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 96 B0 3B  02 0C 6E AD C2 CB 50 0D  00 00 00 03"
 | decode_to_chunk() output:
 |   00 96 b0 3b  02 0c 6e ad  c2 cb 50 0d  00 00 00 03   ...;..n...P.....
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876dc00 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4facc00 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 0096b03b020c6eadc2cb500d00000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x3 for 32 bytes
 | do_aes_ctr: exit
@@ -9872,7 +9908,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 96 B0 3B  02 0C 6E AD C2 CB 50 0D  00 00 00 03"
 | decode_to_chunk() output:
 |   00 96 b0 3b  02 0c 6e ad  c2 cb 50 0d  00 00 00 03   ...;..n...P.....
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876dc00 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4facc00 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 0096b03b020c6eadc2cb500d00000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x3 for 32 bytes
 | do_aes_ctr: exit
@@ -9886,16 +9922,16 @@
 |   f5 9b 60 a7  86 d3 e0 fe                             ..`.....
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 24
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 24-bytes
-|     base: base-key@0x556f9876d290 (40-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (40-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 07 BD FD  5C BD 60 27 8D CC 09 12  00 00 00 01"
 | decode_to_mac() output:
 |   00 07 bd fd  5c bd 60 27  8d cc 09 12  00 00 00 01   ....\.`'........
@@ -9912,7 +9948,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 07 BD FD  5C BD 60 27 8D CC 09 12  00 00 00 04"
 | decode_to_chunk() output:
 |   00 07 bd fd  5c bd 60 27  8d cc 09 12  00 00 00 04   ....\.`'........
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876efb0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fadfb0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 0007bdfd5cbd60278dcc091200000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x4 for 36 bytes
 | do_aes_ctr: exit
@@ -9935,7 +9971,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 07 BD FD  5C BD 60 27 8D CC 09 12  00 00 00 04"
 | decode_to_chunk() output:
 |   00 07 bd fd  5c bd 60 27  8d cc 09 12  00 00 00 04   ....\.`'........
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876efb0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fadfb0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 0007bdfd5cbd60278dcc091200000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x4 for 36 bytes
 | do_aes_ctr: exit
@@ -9949,16 +9985,16 @@
 |   6a 81 af 1e  ec 96 b4 d3  7f c1 d6 89  e6 c1 c1 04   j...............
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876d290 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 00 00 60  DB 56 72 C9 7A A8 F0 B2  00 00 00 01"
 | decode_to_mac() output:
 |   00 00 00 60  db 56 72 c9  7a a8 f0 b2  00 00 00 01   ...`.Vr.z.......
@@ -9971,7 +10007,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 00 00 60  DB 56 72 C9 7A A8 F0 B2  00 00 00 02"
 | decode_to_chunk() output:
 |   00 00 00 60  db 56 72 c9  7a a8 f0 b2  00 00 00 02   ...`.Vr.z.......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876b860 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4faa860 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00000060db5672c97aa8f0b200000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x2 for 16 bytes
 | do_aes_ctr: exit
@@ -9990,7 +10026,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 00 00 60  DB 56 72 C9 7A A8 F0 B2  00 00 00 02"
 | decode_to_chunk() output:
 |   00 00 00 60  db 56 72 c9  7a a8 f0 b2  00 00 00 02   ...`.Vr.z.......
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876b860 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4faa860 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00000060db5672c97aa8f0b200000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x2 for 16 bytes
 | do_aes_ctr: exit
@@ -10004,16 +10040,16 @@
 |   c6 6d d5 1a  5b 6a 99 74  4b 50 59 0c  87 a2 38 84   .m..[j.tKPY...8.
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876d290 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 FA AC 24  C1 58 5E F1 5A 43 D8 75  00 00 00 01"
 | decode_to_mac() output:
 |   00 fa ac 24  c1 58 5e f1  5a 43 d8 75  00 00 00 01   ...$.X^.ZC.u....
@@ -10028,7 +10064,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 FA AC 24  C1 58 5E F1 5A 43 D8 75  00 00 00 03"
 | decode_to_chunk() output:
 |   00 fa ac 24  c1 58 5e f1  5a 43 d8 75  00 00 00 03   ...$.X^.ZC.u....
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d4b0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac4b0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00faac24c1585ef15a43d87500000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x3 for 32 bytes
 | do_aes_ctr: exit
@@ -10049,7 +10085,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 FA AC 24  C1 58 5E F1 5A 43 D8 75  00 00 00 03"
 | decode_to_chunk() output:
 |   00 fa ac 24  c1 58 5e f1  5a 43 d8 75  00 00 00 03   ...$.X^.ZC.u....
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d4b0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac4b0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 00faac24c1585ef15a43d87500000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x3 for 32 bytes
 | do_aes_ctr: exit
@@ -10063,16 +10099,16 @@
 |   aa 62 d9 f8  05 53 2e df  f1 ee d6 87  fb 54 15 3d   .b...S.......T.=
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CTR
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876d290 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() input counter-block: : input "0x 00 1C C5 B7  51 A5 1D 70 A1 C1 11 48  00 00 00 01"
 | decode_to_mac() output:
 |   00 1c c5 b7  51 a5 1d 70  a1 c1 11 48  00 00 00 01   ....Q..p...H....
@@ -10089,7 +10125,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 1C C5 B7  51 A5 1D 70 A1 C1 11 48  00 00 00 04"
 | decode_to_chunk() output:
 |   00 1c c5 b7  51 a5 1d 70  a1 c1 11 48  00 00 00 04   ....Q..p...H....
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d6b0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac6b0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 001cc5b751a51d70a1c1114800000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x4 for 36 bytes
 | do_aes_ctr: exit
@@ -10112,7 +10148,7 @@
 | decode_to_chunk() expected counter-block: : input "0x 00 1C C5 B7  51 A5 1D 70 A1 C1 11 48  00 00 00 04"
 | decode_to_chunk() output:
 |   00 1c c5 b7  51 a5 1d 70  a1 c1 11 48  00 00 00 04   ....Q..p...H....
-| cipher_op_ctr_nss() enter AES_CTR 0x556f9876d6b0 use IKEv1 IV wire_iv 0 count 0
+| cipher_op_ctr_nss() enter AES_CTR 0x55caa4fac6b0 use IKEv1 IV wire_iv 0 count 0
 | ctr_param: count 32 iv 001cc5b751a51d70a1c1114800000001
 | cipher_op_ctr_nss() counter-block updated from 0x1 to 0x4 for 36 bytes
 | do_aes_ctr: exit
@@ -10126,16 +10162,16 @@
 |   06 a9 21 40  36 b8 a1 5b  51 2e 03 d5  34 12 00 06   ..!@6..[Q...4...
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x3dafba429d9eb430b422da802c9fac41"
 | decode_to_mac() output:
 |   3d af ba 42  9d 9e b4 30  b4 22 da 80  2c 9f ac 41   =..B...0."..,..A
@@ -10176,16 +10212,16 @@
 |   c2 86 69 6d  88 7c 9a a0  61 1b bb 3e  20 25 a4 5a   ..im.|..a..> %.Z
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x562e17996d093d28ddb3ba695a2e6f58"
 | decode_to_mac() output:
 |   56 2e 17 99  6d 09 3d 28  dd b3 ba 69  5a 2e 6f 58   V...m.=(...iZ.oX
@@ -10232,16 +10268,16 @@
 |   6c 3e a0 47  76 30 ce 21  a2 ce 33 4a  a7 46 c2 cd   l>.Gv0.!..3J.F..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0xc782dc4c098c66cbd9cd27d825682c81"
 | decode_to_mac() output:
 |   c7 82 dc 4c  09 8c 66 cb  d9 cd 27 d8  25 68 2c 81   ...L..f...'.%h,.
@@ -10294,16 +10330,16 @@
 |   56 e4 7a 38  c5 59 89 74  bc 46 90 3d  ba 29 03 49   V.z8.Y.t.F.=.).I
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825780
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7380
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_CBC
 |     flags: ENCRYPT+DECRYPT
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825738
+|     params: 8-bytes@0x7ffc637c7338
 | decode_to_mac() IV: : input "0x8ce82eefbea0da3c44699ed7db51b7d9"
 | decode_to_mac() output:
 |   8c e8 2e ef  be a0 da 3c  44 69 9e d7  db 51 b7 d9   .......<Di...Q..
@@ -10367,38 +10403,38 @@
 | decode_to_chunk() test_prf_vector: input "0x75f0251d528ac01c4573dfd584d79f29"
 | decode_to_chunk() output:
 |   75 f0 25 1d  52 8a c0 1c  45 73 df d5  84 d7 9f 29   u.%.R...Es.....)
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876efb0 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4fadfb0 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876d5e0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876d470 length 0)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fac5e0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fac470 length 0)
 |                                                        
 | XCBC: data
 |                                                        
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876e980
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fad980
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10407,16 +10443,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[0] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -10437,37 +10473,37 @@
 | verify_bytes() RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fac5e0
 | PRF symkey interface PRF AES_XCBC update symkey message-key@(nil) (size 0)
 | PRF symkey interface: symkey message-key@NULL
 | symkey message NULL key has no bytes
 | XCBC: data
 |                                                        
-| K extracting all 16 bytes of key@0x556f9876b880
-| K: symkey-key@0x556f9876b880 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4faa880
+| K: symkey-key@0x55caa4faa880 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)-1115531592: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876fa30
+| wrapper: (SECItemType)1669100216: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4faea30
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10476,16 +10512,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[0] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -10501,23 +10537,23 @@
 |   75 f0 25 1d  52 8a c0 1c  45 73 df d5  84 d7 9f 29   u.%.R...Es.....)
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98771520 (size 16)
-| PRF symkey interface: key-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input extracting all 16 bytes of key@0x556f98771520
-| RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb0520 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input extracting all 16 bytes of key@0x55caa4fb0520
+| RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: 0b af e3 e4  4e e0 fc 34  40 1e d1 75  66 fb 07 1f
-| RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: 86 71 09 cb  a5 f4 ff 4f  1d eb 82 90  1c 48 9e fe
+| RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   75 f0 25 1d  52 8a c0 1c  45 73 df d5  84 d7 9f 29   u.%.R...Es.....)
 | verify_bytes() RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input: symkey: ok
@@ -10531,38 +10567,38 @@
 | decode_to_chunk() test_prf_vector: input "0x5b376580ae2f19afe7219ceef172756f"
 | decode_to_chunk() output:
 |   5b 37 65 80  ae 2f 19 af  e7 21 9c ee  f1 72 75 6f   [7e../...!...ruo
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876b860 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4faa860 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876d5e0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876dc00 length 3)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fac5e0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4facc00 length 3)
 |   00 01 02                                             ...
 | XCBC: data
 |   00 01 02                                             ...
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876fa30
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4faea30
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10571,16 +10607,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[1] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -10601,54 +10637,54 @@
 | verify_bytes() RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fac5e0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 3
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 3-bytes
-|     base: base-key@0x556f98772db0 (19-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (19-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 3)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (3-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 3 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (3-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 3)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (3-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 3 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (3-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: ad bd cd cd  97 47 b9 1e  ed 0a fd 0b  da 51 b6 4e
-| symkey message extracted len 16 bytes at 0x556f9876fa50
+| wrapper: (SECItemType)1023: b4 76 cc c4  2f 85 c2 bc  12 fa 24 46  02 e6 01 69
+| symkey message extracted len 16 bytes at 0x55caa4faea50
 | unwrapped:
 |   00 01 02 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02                                             ...
-| K extracting all 16 bytes of key@0x556f98771520
-| K: symkey-key@0x556f98771520 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb0520
+| K: symkey-key@0x55caa4fb0520 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876f710
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fae710
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10657,16 +10693,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[1] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -10682,23 +10718,23 @@
 |   5b 37 65 80  ae 2f 19 af  e7 21 9c ee  f1 72 75 6f   [7e../...!...ruo
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98772db0 (size 16)
-| PRF symkey interface: key-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input extracting all 16 bytes of key@0x556f98772db0
-| RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb1db0 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input extracting all 16 bytes of key@0x55caa4fb1db0
+| RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: a6 e3 63 7b  ae c9 03 87  3a af 2f 52  ce b2 d5 2b
-| RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: 44 55 ff 38  5f 30 6c cc  08 52 f5 cb  27 a4 16 57
+| RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   5b 37 65 80  ae 2f 19 af  e7 21 9c ee  f1 72 75 6f   [7e../...!...ruo
 | verify_bytes() RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input: symkey: ok
@@ -10712,38 +10748,38 @@
 | decode_to_chunk() test_prf_vector: input "0xd2a246fa349b68a79998a4394ff7a263"
 | decode_to_chunk() output:
 |   d2 a2 46 fa  34 9b 68 a7  99 98 a4 39  4f f7 a2 63   ..F.4.h....9O..c
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876efb0 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4fadfb0 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876d5e0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876d6b0 length 16)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fac5e0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fac6b0 length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876fb40
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4faeb40
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10752,16 +10788,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | XCBC: Computing E[1] using K2
 | XCBC: K2
 |   bd 86 2f fb  97 ad 2f b8  f8 b8 91 f6  03 2f 36 cb   ../.../....../6.
@@ -10780,54 +10816,54 @@
 | verify_bytes() RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fac5e0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 16)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 16 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 16)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 16 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| symkey message extracted len 16 bytes at 0x556f9876fb40
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| symkey message extracted len 16 bytes at 0x55caa4faeb40
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
-| K extracting all 16 bytes of key@0x556f98772db0
-| K: symkey-key@0x556f98772db0 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb1db0
+| K: symkey-key@0x55caa4fb1db0 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876fb60
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4faeb60
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10836,16 +10872,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | XCBC: Computing E[1] using K2
 | XCBC: K2
 |   bd 86 2f fb  97 ad 2f b8  f8 b8 91 f6  03 2f 36 cb   ../.../....../6.
@@ -10859,23 +10895,23 @@
 |   d2 a2 46 fa  34 9b 68 a7  99 98 a4 39  4f f7 a2 63   ..F.4.h....9O..c
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98771520 (size 16)
-| PRF symkey interface: key-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input extracting all 16 bytes of key@0x556f98771520
-| RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb0520 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input extracting all 16 bytes of key@0x55caa4fb0520
+| RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: c9 44 79 5a  dd 6e c7 4f  27 19 59 8e  00 cb 50 f9
-| RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: 0d 41 72 4f  e1 36 8c 8e  1e c3 2c eb  1b fc c0 a9
+| RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   d2 a2 46 fa  34 9b 68 a7  99 98 a4 39  4f f7 a2 63   ..F.4.h....9O..c
 | verify_bytes() RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input: symkey: ok
@@ -10890,40 +10926,40 @@
 | decode_to_chunk() test_prf_vector: input "0x47f51b4564966215b8985c63055ed308"
 | decode_to_chunk() output:
 |   47 f5 1b 45  64 96 62 15  b8 98 5c 63  05 5e d3 08   G..Ed.b...\c.^..
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876fa30 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4faea30 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876d5e0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876d520 length 20)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fac5e0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fac520 length 20)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876f6f0
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fae6f0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -10932,16 +10968,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[2] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -10962,56 +10998,56 @@
 | verify_bytes() RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fac5e0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 20
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 20-bytes
-|     base: base-key@0x556f98772db0 (36-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (36-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 20)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (20-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 20 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 20)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (20-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 20 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (20-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  67 37 8a 84  08 9f b5 56  61 0b f7 bc  c4 c3 73 2b
-| symkey message extracted len 32 bytes at 0x556f9876fb40
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  de e6 4c 18  d8 21 4d 85  d1 98 d4 d0  89 86 48 74
+| symkey message extracted len 32 bytes at 0x55caa4faeb40
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f98771520
-| K: symkey-key@0x556f98771520 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb0520
+| K: symkey-key@0x55caa4fb0520 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876e330
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fad330
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11020,16 +11056,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[2] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -11045,23 +11081,23 @@
 |   47 f5 1b 45  64 96 62 15  b8 98 5c 63  05 5e d3 08   G..Ed.b...\c.^..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98772db0 (size 16)
-| PRF symkey interface: key-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input extracting all 16 bytes of key@0x556f98772db0
-| RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb1db0 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input extracting all 16 bytes of key@0x55caa4fb1db0
+| RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: 49 fb a7 82  0c aa 62 9b  8c 63 81 89  a2 1a 2d 6a
-| RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: ae bf 66 d1  0f 03 74 f0  c9 45 df 64  ca 88 66 de
+| RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   47 f5 1b 45  64 96 62 15  b8 98 5c 63  05 5e d3 08   G..Ed.b...\c.^..
 | verify_bytes() RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input: symkey: ok
@@ -11076,40 +11112,40 @@
 | decode_to_chunk() test_prf_vector: input "0xf54f0ec8d2b9f3d36807734bd5283fd4"
 | decode_to_chunk() output:
 |   f5 4f 0e c8  d2 b9 f3 d3  68 07 73 4b  d5 28 3f d4   .O......h.sK.(?.
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876b860 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4faa860 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876f6f0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876d5e0 length 32)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fae6f0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fac5e0 length 32)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876e980
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fad980
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11118,16 +11154,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | XCBC: Computing E[2] using K2
 | XCBC: K2
 |   bd 86 2f fb  97 ad 2f b8  f8 b8 91 f6  03 2f 36 cb   ../.../....../6.
@@ -11146,56 +11182,56 @@
 | verify_bytes() RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f987717b0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fb07b0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 32-bytes
-|     base: base-key@0x556f98771520 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 32)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 32 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 32)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 32 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  01 de 47 3f  24 ef 52 2f  41 05 13 90  1b 85 97 6d
-| symkey message extracted len 32 bytes at 0x556f9876e330
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  25 83 12 e4  10 08 f9 e5  5d 87 3a a6  d8 6a 27 b9
+| symkey message extracted len 32 bytes at 0x55caa4fad330
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
-| K extracting all 16 bytes of key@0x556f98772db0
-| K: symkey-key@0x556f98772db0 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb1db0
+| K: symkey-key@0x55caa4fb1db0 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876e980
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fad980
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11204,16 +11240,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | XCBC: Computing E[2] using K2
 | XCBC: K2
 |   bd 86 2f fb  97 ad 2f b8  f8 b8 91 f6  03 2f 36 cb   ../.../....../6.
@@ -11227,23 +11263,23 @@
 |   f5 4f 0e c8  d2 b9 f3 d3  68 07 73 4b  d5 28 3f d4   .O......h.sK.(?.
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98771520 (size 16)
-| PRF symkey interface: key-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input extracting all 16 bytes of key@0x556f98771520
-| RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb0520 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input extracting all 16 bytes of key@0x55caa4fb0520
+| RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: d1 a1 6d d5  45 37 5b 9d  f5 3b be 7d  34 f9 a6 ba
-| RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input extracted len 16 bytes at 0x556f9876fb70
+| wrapper: siBuffer: 41 a1 58 42  83 2a 38 d9  86 ea ae 1a  b3 f3 6b ba
+| RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input extracted len 16 bytes at 0x55caa4faeb70
 | unwrapped:
 |   f5 4f 0e c8  d2 b9 f3 d3  68 07 73 4b  d5 28 3f d4   .O......h.sK.(?.
 | verify_bytes() RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input: symkey: ok
@@ -11259,30 +11295,30 @@
 | decode_to_chunk() test_prf_vector: input "0xbecbb3bccdb518a30677d5481fb6b4d8"
 | decode_to_chunk() output:
 |   be cb b3 bc  cd b5 18 a3  06 77 d5 48  1f b6 b4 d8   .........w.H....
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876d270 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4fac270 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876f2c0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876ef80 length 34)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fae2c0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fadf80 length 34)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
 |   20 21                                                 !
@@ -11290,11 +11326,11 @@
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
 |   20 21                                                 !
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876e980
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fad980
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11303,16 +11339,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[3] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -11333,45 +11369,45 @@
 | verify_bytes() RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876f2c0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fae2c0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 34
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 34-bytes
-|     base: base-key@0x556f98772db0 (50-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (50-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 34)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (34-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 34 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (34-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 34)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (34-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 34 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (34-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 48
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  01 de 47 3f  24 ef 52 2f  41 05 13 90  1b 85 97 6d  8d f0 24 19  c0 e4 eb 90  02 f7 83 74  5b f0 95 2c
-| symkey message extracted len 48 bytes at 0x556f9876e330
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  25 83 12 e4  10 08 f9 e5  5d 87 3a a6  d8 6a 27 b9  f2 7a 74 38  c0 b1 61 df  36 b3 4b 23  28 48 2d 65
+| symkey message extracted len 48 bytes at 0x55caa4fad330
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
@@ -11380,11 +11416,11 @@
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  14 15 16 17  18 19 1a 1b  1c 1d 1e 1f   ................
 |   20 21                                                 !
-| K extracting all 16 bytes of key@0x556f98771520
-| K: symkey-key@0x556f98771520 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb0520
+| K: symkey-key@0x55caa4fb0520 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876f6f0
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fae6f0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11393,16 +11429,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[3] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -11418,23 +11454,23 @@
 |   be cb b3 bc  cd b5 18 a3  06 77 d5 48  1f b6 b4 d8   .........w.H....
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98772db0 (size 16)
-| PRF symkey interface: key-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input extracting all 16 bytes of key@0x556f98772db0
-| RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb1db0 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input extracting all 16 bytes of key@0x55caa4fb1db0
+| RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: df 03 de a5  32 8a 6b 73  fc 6a b8 c9  fd 30 e3 68
-| RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input extracted len 16 bytes at 0x556f9876b860
+| wrapper: siBuffer: d9 e4 39 f4  56 63 a3 87  6f a4 61 fc  6a b7 7a 9b
+| RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input extracted len 16 bytes at 0x55caa4faa860
 | unwrapped:
 |   be cb b3 bc  cd b5 18 a3  06 77 d5 48  1f b6 b4 d8   .........w.H....
 | verify_bytes() RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input: symkey: ok
@@ -11445,30 +11481,30 @@
 | decode_to_chunk() test_prf_vector: input "0xf0dafee895db30253761103b5d84528f"
 | decode_to_chunk() output:
 |   f0 da fe e8  95 db 30 25  37 61 10 3b  5d 84 52 8f   ......0%7a.;].R.
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876efb0 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4fadfb0 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876f2c0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876bbe0 length 1000)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fae2c0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4faabe0 length 1000)
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
@@ -11596,11 +11632,11 @@
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00                             ........
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876e330
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fad330
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11609,16 +11645,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[63] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -11639,45 +11675,45 @@
 | verify_bytes() RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876ef80
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fadf80
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 1000
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 1000-bytes
-|     base: base-key@0x556f98771520 (1016-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (1016-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 1000)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (1000-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 1000 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (1000-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 1000)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (1000-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 1000 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (1000-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 1008
-| wrapper: (SECItemType)1023: 8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f  8...
-| symkey message extracted len 1008 bytes at 0x556f98776eb0
+| wrapper: (SECItemType)1023: cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2  c...
+| symkey message extracted len 1008 bytes at 0x55caa4fb5eb0
 | unwrapped:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
@@ -11806,11 +11842,11 @@
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 |   00 00 00 00  00 00 00 00                             ........
-| K extracting all 16 bytes of key@0x556f98772db0
-| K: symkey-key@0x556f98772db0 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb1db0
+| K: symkey-key@0x55caa4fb1db0 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876d270
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fac270
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11819,16 +11855,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[63] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -11844,23 +11880,23 @@
 |   f0 da fe e8  95 db 30 25  37 61 10 3b  5d 84 52 8f   ......0%7a.;].R.
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98771520 (size 16)
-| PRF symkey interface: key-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input extracting all 16 bytes of key@0x556f98771520
-| RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb0520 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input extracting all 16 bytes of key@0x55caa4fb0520
+| RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: cb fc 46 73  03 92 10 c9  10 2a d5 7e  38 6b 4d 67
-| RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input extracted len 16 bytes at 0x556f9876b860
+| wrapper: siBuffer: f4 50 5b 3f  b7 c9 80 b4  20 81 ee 5a  f0 bd 61 9b
+| RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input extracted len 16 bytes at 0x55caa4faa860
 | unwrapped:
 |   f0 da fe e8  95 db 30 25  37 61 10 3b  5d 84 52 8f   ......0%7a.;].R.
 | verify_bytes() RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input: symkey: ok
@@ -11875,40 +11911,40 @@
 | decode_to_chunk() test_prf_vector: input "0x47f51b4564966215b8985c63055ed308"
 | decode_to_chunk() output:
 |   47 f5 1b 45  64 96 62 15  b8 98 5c 63  05 5e d3 08   G..Ed.b...\c.^..
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876d520 (length 16)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4fac520 (length 16)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876d5e0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876e330 length 20)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fac5e0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fad330 length 20)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876f2c0
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fae2c0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -11917,16 +11953,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[2] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -11947,56 +11983,56 @@
 | verify_bytes() RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16): prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98771520 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 16=16 just right
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fac5e0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 20
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 20-bytes
-|     base: base-key@0x556f98772db0 (36-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (36-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f9876b880 (size 20)
-| PRF symkey interface: symkey message-key@0x556f9876b880 (20-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 20 bytes of key@0x556f9876b880
-| symkey message: symkey-key@0x556f9876b880 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4faa880 (size 20)
+| PRF symkey interface: symkey message-key@0x55caa4faa880 (20-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 20 bytes of key@0x55caa4faa880
+| symkey message: symkey-key@0x55caa4faa880 (20-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  67 37 8a 84  08 9f b5 56  61 0b f7 bc  c4 c3 73 2b
-| symkey message extracted len 32 bytes at 0x556f9876ef80
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  de e6 4c 18  d8 21 4d 85  d1 98 d4 d0  89 86 48 74
+| symkey message extracted len 32 bytes at 0x55caa4fadf80
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f98771520
-| K: symkey-key@0x556f98771520 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb0520
+| K: symkey-key@0x55caa4fb0520 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6
-| K extracted len 16 bytes at 0x556f9876ef80
+| wrapper: (SECItemType)3145728: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87
+| K extracted len 16 bytes at 0x55caa4fadf80
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 | XCBC: K:
@@ -12005,16 +12041,16 @@
 |   c3 52 80 57  54 23 7f 31  1a c0 ff f4  e3 e0 3e 78   .R.WT#.1......>x
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[2] using K3
 | XCBC: K3
 |   c1 a7 ab a1  a2 3a 94 06  58 07 a0 8c  c8 ee d0 6e   .....:..X......n
@@ -12030,23 +12066,23 @@
 |   47 f5 1b 45  64 96 62 15  b8 98 5c 63  05 5e d3 08   G..Ed.b...\c.^..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98772db0 (size 16)
-| PRF symkey interface: key-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) extracting all 16 bytes of key@0x556f98772db0
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16): symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb1db0 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) extracting all 16 bytes of key@0x55caa4fb1db0
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16): symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: 49 fb a7 82  0c aa 62 9b  8c 63 81 89  a2 1a 2d 6a
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) extracted len 16 bytes at 0x556f9876ef80
+| wrapper: siBuffer: ae bf 66 d1  0f 03 74 f0  c9 45 df 64  ca 88 66 de
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) extracted len 16 bytes at 0x55caa4fadf80
 | unwrapped:
 |   47 f5 1b 45  64 96 62 15  b8 98 5c 63  05 5e d3 08   G..Ed.b...\c.^..
 | verify_bytes() RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16): symkey: ok
@@ -12061,44 +12097,44 @@
 | decode_to_chunk() test_prf_vector: input "0x0fa087af7d866e7653434e602fdde835"
 | decode_to_chunk() output:
 |   0f a0 87 af  7d 86 6e 76  53 43 4e 60  2f dd e8 35   ....}.nvSCN`/..5
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876efb0 (length 10)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4fadfb0 (length 10)
 |   00 01 02 03  04 05 06 07  08 09                      ..........
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 10
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 10-bytes
-|     base: base-key@0x556f9876d290 (26-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (26-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 10<16 too small, padding with zeros
 | CONCATENATE_BASE_AND_DATA:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f98772db0 (10-bytes, EXTRACT_KEY_FROM_KEY)
-|     params: 16-bytes@0x7fffbd8255b0
+|     base: base-key@0x55caa4fb1db0 (10-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 16-bytes@0x7ffc637c71b0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF chunk interface PRF AES_XCBC 0x556f9876f2c0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876dfe0 length 20)
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF chunk interface PRF AES_XCBC 0x55caa4fae2c0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4facfe0 length 20)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f9876b880
-| K: symkey-key@0x556f9876b880 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4faa880
+| K: symkey-key@0x55caa4faa880 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: ff ca 92 8b  e1 79 45 23  c1 c9 50 b2  a1 9e cc d4
-| K extracted len 16 bytes at 0x556f9876d520
+| wrapper: (SECItemType)1023: fa f6 2e 11  f4 60 4c bb  13 92 13 38  32 0d b8 49
+| K extracted len 16 bytes at 0x55caa4fac520
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 00 00  00 00 00 00   ................
 | XCBC: K:
@@ -12107,16 +12143,16 @@
 |   50 ca b2 4d  03 34 45 5e  40 7b 25 0f  dd 7c f8 d5   P..M.4E^@{%..|..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[2] using K3
 | XCBC: K3
 |   8e f7 48 db  56 f1 f7 26  24 72 f2 c5  63 b0 3f 88   ..H.V..&$r..c.?.
@@ -12137,60 +12173,60 @@
 | verify_bytes() RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10): prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 10
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 10-bytes
-|     base: base-key@0x556f98772db0 (26-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (26-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f9876b880 (size 10)
-| PRF symkey interface: key symkey-key@0x556f9876b880 (10-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4faa880 (size 10)
+| PRF symkey interface: key symkey-key@0x55caa4faa880 (10-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 10<16 too small, padding with zeros
 | CONCATENATE_BASE_AND_DATA:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876b880 (10-bytes, EXTRACT_KEY_FROM_KEY)
-|     params: 16-bytes@0x7fffbd8255f0
+|     base: base-key@0x55caa4faa880 (10-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 16-bytes@0x7ffc637c71f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255f8
-| PRF symkey interface PRF AES_XCBC 0x556f9876f2c0
+|     params: 8-bytes@0x7ffc637c71f8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fae2c0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 20
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 20-bytes
-|     base: base-key@0x556f98771520 (36-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (36-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f98772db0 (size 20)
-| PRF symkey interface: symkey message-key@0x556f98772db0 (20-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 20 bytes of key@0x556f98772db0
-| symkey message: symkey-key@0x556f98772db0 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4fb1db0 (size 20)
+| PRF symkey interface: symkey message-key@0x55caa4fb1db0 (20-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 20 bytes of key@0x55caa4fb1db0
+| symkey message: symkey-key@0x55caa4fb1db0 (20-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  67 37 8a 84  08 9f b5 56  61 0b f7 bc  c4 c3 73 2b
-| symkey message extracted len 32 bytes at 0x556f9876d5e0
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  de e6 4c 18  d8 21 4d 85  d1 98 d4 d0  89 86 48 74
+| symkey message extracted len 32 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f9876d290
-| K: symkey-key@0x556f9876d290 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fac290
+| K: symkey-key@0x55caa4fac290 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: ff ca 92 8b  e1 79 45 23  c1 c9 50 b2  a1 9e cc d4
-| K extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: (SECItemType)3145728: fa f6 2e 11  f4 60 4c bb  13 92 13 38  32 0d b8 49
+| K extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 00 00  00 00 00 00   ................
 | XCBC: K:
@@ -12199,16 +12235,16 @@
 |   50 ca b2 4d  03 34 45 5e  40 7b 25 0f  dd 7c f8 d5   P..M.4E^@{%..|..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[2] using K3
 | XCBC: K3
 |   8e f7 48 db  56 f1 f7 26  24 72 f2 c5  63 b0 3f 88   ..H.V..&$r..c.?.
@@ -12224,23 +12260,23 @@
 |   0f a0 87 af  7d 86 6e 76  53 43 4e 60  2f dd e8 35   ....}.nvSCN`/..5
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f98771520 (size 16)
-| PRF symkey interface: key-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) extracting all 16 bytes of key@0x556f98771520
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10): symkey-key@0x556f98771520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fb0520 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) extracting all 16 bytes of key@0x55caa4fb0520
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10): symkey-key@0x55caa4fb0520 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: 9c b9 da 3c  52 d3 4b 2a  d6 82 16 76  2f 2a 3d 5b
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: 4f 46 0e 2e  55 b5 2f d5  dd 8a 38 37  8d 0d 4f fa
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   0f a0 87 af  7d 86 6e 76  53 43 4e 60  2f dd e8 35   ....}.nvSCN`/..5
 | verify_bytes() RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10): symkey: ok
@@ -12256,49 +12292,49 @@
 | decode_to_chunk() test_prf_vector: input "0x8cd3c93ae598a9803006ffb67c40e9e4"
 | decode_to_chunk() output:
 |   8c d3 c9 3a  e5 98 a9 80  30 06 ff b6  7c 40 e9 e4   ...:....0...|@..
-| PRF chunk interface PRF AES_XCBC init key hunk 0x556f9876b860 (length 18)
+| PRF chunk interface PRF AES_XCBC init key hunk 0x55caa4faa860 (length 18)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   ed cb                                                ..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825680
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7280
 |     key-offset: 0, key-size: 18
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 18-bytes
-|     base: base-key@0x556f9876b880 (34-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (34-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825608
+|     params: 8-bytes@0x7ffc637c7208
 | XCBC: Key 18>16 too big, rehashing to size
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
-| draft_chunk extracting all 18 bytes of key@0x556f98771520
-| draft_chunk: symkey-key@0x556f98771520 (18-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7178
+| draft_chunk extracting all 18 bytes of key@0x55caa4fb0520
+| draft_chunk: symkey-key@0x55caa4fb0520 (18-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)693716299: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  e8 34 9d 6f  5d 85 a9 84  e8 63 d1 22  ab 8b 57 63
-| draft_chunk extracted len 32 bytes at 0x556f9876d5e0
+| wrapper: (SECItemType)693716299: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  5f dc 90 30  06 75 93 71  9f 98 3b 85  8d 7a 92 a7
+| draft_chunk extracted len 32 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   ed cb 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   ed cb                                                ..
-| K extracting all 16 bytes of key@0x556f9876b880
-| K: symkey-key@0x556f9876b880 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4faa880
+| K: symkey-key@0x55caa4faa880 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: siBuffer: 8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f
-| K extracted len 16 bytes at 0x556f9876f2c0
+| wrapper: siBuffer: cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2
+| K extracted len 16 bytes at 0x55caa4fae2c0
 | unwrapped:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: K:
@@ -12307,16 +12343,16 @@
 |   e1 4d 5d 0e  e2 77 15 df  08 b4 15 2b  a2 3d a8 e0   .M]..w.....+.=..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8254e0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c70e0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8254b8
+|     params: 8-bytes@0x7ffc637c70b8
 | Computing E[2] using K3
 | XCBC: K3
 |   8d 34 ef cb  3b d5 45 ca  06 2a ec df  ef 7c 0b fa   .4..;.E..*...|..
@@ -12332,28 +12368,28 @@
 |   5d 93 a5 3b  80 a3 e4 06  90 d2 4c ea  e1 44 9c 0e   ]..;......L..D..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
-| PRF chunk interface PRF AES_XCBC 0x556f9876d5e0
-| PRF chunk interface PRF AES_XCBC update message (0x556f9876e980 length 20)
+|     params: 8-bytes@0x7ffc637c7178
+| PRF chunk interface PRF AES_XCBC 0x55caa4fac5e0
+| PRF chunk interface PRF AES_XCBC update message (0x55caa4fad980 length 20)
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f98772db0
-| K: symkey-key@0x556f98772db0 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb1db0
+| K: symkey-key@0x55caa4fb1db0 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)1023: aa e1 b1 0c  69 ce 02 48  10 5a a3 87  b7 6d d3 54
-| K extracted len 16 bytes at 0x556f9876f2c0
+| wrapper: (SECItemType)1023: 3e 80 7f 19  2c 75 0f 2a  3d f7 d3 fe  60 97 c9 96
+| K extracted len 16 bytes at 0x55caa4fae2c0
 | unwrapped:
 |   5d 93 a5 3b  80 a3 e4 06  90 d2 4c ea  e1 44 9c 0e   ]..;......L..D..
 | XCBC: K:
@@ -12362,16 +12398,16 @@
 |   27 f3 88 2f  b7 b9 4b a4  16 36 09 d5  d2 39 c5 7f   '../..K..6...9..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825560
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7160
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825538
+|     params: 8-bytes@0x7ffc637c7138
 | Computing E[2] using K3
 | XCBC: K3
 |   50 9e d8 ae  74 5a 75 4c  93 4d 6c 91  98 fe e2 1b   P...tZuL.Ml.....
@@ -12392,46 +12428,46 @@
 | verify_bytes() RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18): prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 18
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 18-bytes
-|     base: base-key@0x556f98771520 (34-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (34-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC init key symkey-key@0x556f98772db0 (size 18)
-| PRF symkey interface: key symkey-key@0x556f98772db0 (18-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC init key symkey-key@0x55caa4fb1db0 (size 18)
+| PRF symkey interface: key symkey-key@0x55caa4fb1db0 (18-bytes, EXTRACT_KEY_FROM_KEY)
 | XCBC: Key 18>16 too big, rehashing to size
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255e0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71e0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| draft_chunk extracting all 18 bytes of key@0x556f98772db0
-| draft_chunk: symkey-key@0x556f98772db0 (18-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c71b8
+| draft_chunk extracting all 18 bytes of key@0x55caa4fb1db0
+| draft_chunk: symkey-key@0x55caa4fb1db0 (18-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)16: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  e8 34 9d 6f  5d 85 a9 84  e8 63 d1 22  ab 8b 57 63
-| draft_chunk extracted len 32 bytes at 0x556f9876f2c0
+| wrapper: (SECItemType)16: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  5f dc 90 30  06 75 93 71  9f 98 3b 85  8d 7a 92 a7
+| draft_chunk extracted len 32 bytes at 0x55caa4fae2c0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   ed cb 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   ed cb                                                ..
-| K extracting all 16 bytes of key@0x556f98771520
-| K: symkey-key@0x556f98771520 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4fb0520
+| K: symkey-key@0x55caa4fb0520 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: siBuffer: 8f 0d 25 8b  1f a5 29 2d  3f 2a db 43  07 7e 30 9f
-| K extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: cd 52 d0 8f  b0 1b f0 68  81 ef 28 47  4e e7 47 f2
+| K extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: K:
@@ -12440,16 +12476,16 @@
 |   e1 4d 5d 0e  e2 77 15 df  08 b4 15 2b  a2 3d a8 e0   .M]..w.....+.=..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825520
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7120
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8254f8
+|     params: 8-bytes@0x7ffc637c70f8
 | Computing E[2] using K3
 | XCBC: K3
 |   8d 34 ef cb  3b d5 45 ca  06 2a ec df  ef 7c 0b fa   .4..;.E..*...|..
@@ -12465,46 +12501,46 @@
 |   5d 93 a5 3b  80 a3 e4 06  90 d2 4c ea  e1 44 9c 0e   ]..;......L..D..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255e0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71e0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8255b8
-| PRF symkey interface PRF AES_XCBC 0x556f9876f2c0
+|     params: 8-bytes@0x7ffc637c71b8
+| PRF symkey interface PRF AES_XCBC 0x55caa4fae2c0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 20
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 20-bytes
-|     base: base-key@0x556f9876d290 (36-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (36-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF AES_XCBC update symkey message-key@0x556f98771520 (size 20)
-| PRF symkey interface: symkey message-key@0x556f98771520 (20-bytes, EXTRACT_KEY_FROM_KEY)
-| symkey message extracting all 20 bytes of key@0x556f98771520
-| symkey message: symkey-key@0x556f98771520 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF AES_XCBC update symkey message-key@0x55caa4fb0520 (size 20)
+| PRF symkey interface: symkey message-key@0x55caa4fb0520 (20-bytes, EXTRACT_KEY_FROM_KEY)
+| symkey message extracting all 20 bytes of key@0x55caa4fb0520
+| symkey message: symkey-key@0x55caa4fb0520 (20-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)1023: 47 58 ac 35  fc fd af 45  3b 06 20 08  f2 8d f9 f6  67 37 8a 84  08 9f b5 56  61 0b f7 bc  c4 c3 73 2b
-| symkey message extracted len 32 bytes at 0x556f987713d0
+| wrapper: (SECItemType)1023: ca 56 16 95  61 4d 3a 0e  6e 53 fb 18  8b bf 3b 87  de e6 4c 18  d8 21 4d 85  d1 98 d4 d0  89 86 48 74
+| symkey message extracted len 32 bytes at 0x55caa4fb03d0
 | unwrapped:
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | XCBC: data
 |   00 01 02 03  04 05 06 07  08 09 0a 0b  0c 0d 0e 0f   ................
 |   10 11 12 13                                          ....
-| K extracting all 16 bytes of key@0x556f9876b880
-| K: symkey-key@0x556f9876b880 (16-bytes, AES_ECB)
+| K extracting all 16 bytes of key@0x55caa4faa880
+| K: symkey-key@0x55caa4faa880 (16-bytes, AES_ECB)
 | sizeof bytes 16
-| wrapper: (SECItemType)3145728: aa e1 b1 0c  69 ce 02 48  10 5a a3 87  b7 6d d3 54
-| K extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: (SECItemType)3145728: 3e 80 7f 19  2c 75 0f 2a  3d f7 d3 fe  60 97 c9 96
+| K extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   5d 93 a5 3b  80 a3 e4 06  90 d2 4c ea  e1 44 9c 0e   ]..;......L..D..
 | XCBC: K:
@@ -12513,16 +12549,16 @@
 |   27 f3 88 2f  b7 b9 4b a4  16 36 09 d5  d2 39 c5 7f   '../..K..6...9..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8255a0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c71a0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: AES_ECB
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825578
+|     params: 8-bytes@0x7ffc637c7178
 | Computing E[2] using K3
 | XCBC: K3
 |   50 9e d8 ae  74 5a 75 4c  93 4d 6c 91  98 fe e2 1b   P...tZuL.Ml.....
@@ -12538,23 +12574,23 @@
 |   8c d3 c9 3a  e5 98 a9 80  30 06 ff b6  7c 40 e9 e4   ...:....0...|@..
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825690
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7290
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98774640 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb3640 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825618
-| PRF symkey interface PRF AES_XCBC final-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) extracting all 16 bytes of key@0x556f9876d290
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18): symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7218
+| PRF symkey interface PRF AES_XCBC final-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) extracting all 16 bytes of key@0x55caa4fac290
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18): symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: ad b6 9c 87  e9 b8 32 c4  20 1e 50 cd  a1 59 03 78
-| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) extracted len 16 bytes at 0x556f9876d5e0
+| wrapper: siBuffer: 57 9a 46 7c  75 ae a5 7f  c6 38 74 46  88 45 dd 42
+| RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) extracted len 16 bytes at 0x55caa4fac5e0
 | unwrapped:
 |   8c d3 c9 3a  e5 98 a9 80  30 06 ff b6  7c 40 e9 e4   ...:....0...|@..
 | verify_bytes() RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18): symkey: ok
@@ -12569,24 +12605,24 @@
 | decode_to_chunk() test_prf_vector: input "0x9294727a3638bb1c13f48ef8158bfc9d"
 | decode_to_chunk() output:
 |   92 94 72 7a  36 38 bb 1c  13 f4 8e f8  15 8b fc 9d   ..rz68..........
-| PRF chunk interface PRF HMAC_MD5 init key hunk 0x556f9876dc00 (length 16)
+| PRF chunk interface PRF HMAC_MD5 init key hunk 0x55caa4facc00 (length 16)
 |   0b 0b 0b 0b  0b 0b 0b 0b  0b 0b 0b 0b  0b 0b 0b 0b   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825650
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7250
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: MD5_HMAC
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825628
-| PRF chunk interface prf: created HMAC_MD5 context 0x556f9876f2f0 from key-key@0x556f9876d290
-| PRF chunk interface prf: begin HMAC_MD5 with context 0x556f9876f2f0 from key-key@0x556f9876d290
-| PRF chunk interface PRF HMAC_MD5 0x556f9876f2c0
-| PRF chunk interface PRF HMAC_MD5 update message (0x556f9876d520 length 8)
+|     params: 8-bytes@0x7ffc637c7228
+| PRF chunk interface prf: created HMAC_MD5 context 0x55caa4fae2f0 from key-key@0x55caa4fac290
+| PRF chunk interface prf: begin HMAC_MD5 with context 0x55caa4fae2f0 from key-key@0x55caa4fac290
+| PRF chunk interface PRF HMAC_MD5 0x55caa4fae2c0
+| PRF chunk interface PRF HMAC_MD5 update message (0x55caa4fac520 length 8)
 |   48 69 20 54  68 65 72 65                             Hi There
 | PRF chunk interface PRF HMAC_MD5 final length 16
 |   92 94 72 7a  36 38 bb 1c  13 f4 8e f8  15 8b fc 9d   ..rz68..........
@@ -12595,67 +12631,67 @@
 | verify_bytes() RFC 2104: MD5_HMAC test 1: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF HMAC_MD5 init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF HMAC_MD5 init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: MD5_HMAC
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825668
-| PRF symkey interface prf: created HMAC_MD5 context 0x556f9876e520 from key symkey-key@0x556f98772db0
-| PRF symkey interface prf: begin HMAC_MD5 with context 0x556f9876e520 from key symkey-key@0x556f98772db0
-| PRF symkey interface PRF HMAC_MD5 0x556f9876e350
+|     params: 8-bytes@0x7ffc637c7268
+| PRF symkey interface prf: created HMAC_MD5 context 0x55caa4fad520 from key symkey-key@0x55caa4fb1db0
+| PRF symkey interface prf: begin HMAC_MD5 with context 0x55caa4fad520 from key symkey-key@0x55caa4fb1db0
+| PRF symkey interface PRF HMAC_MD5 0x55caa4fad350
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 8
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 8-bytes
-|     base: base-key@0x556f9876b880 (24-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (24-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF HMAC_MD5 update symkey message-key@0x556f98771520 (size 8)
-| PRF symkey interface: symkey message-key@0x556f98771520 (8-bytes, EXTRACT_KEY_FROM_KEY)
-| nss hmac digest hack extracting all 8 bytes of key@0x556f98771520
-| nss hmac digest hack: symkey-key@0x556f98771520 (8-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF HMAC_MD5 update symkey message-key@0x55caa4fb0520 (size 8)
+| PRF symkey interface: symkey message-key@0x55caa4fb0520 (8-bytes, EXTRACT_KEY_FROM_KEY)
+| nss hmac digest hack extracting all 8 bytes of key@0x55caa4fb0520
+| nss hmac digest hack: symkey-key@0x55caa4fb0520 (8-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: (SECItemType)1264538437: 60 1e b3 40  b1 e9 86 b0  c8 5c b9 4b  94 c0 52 ad
-| nss hmac digest hack extracted len 16 bytes at 0x556f9876d6b0
+| wrapper: (SECItemType)1264538437: 6a d4 dd 29  70 c3 0a dd  ec 96 be d7  b6 5d bb a8
+| nss hmac digest hack extracted len 16 bytes at 0x55caa4fac6b0
 | unwrapped:
 |   48 69 20 54  68 65 72 65  00 00 00 00  00 00 00 00   Hi There........
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256b0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72b0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825638
-| PRF symkey interface PRF HMAC_MD5 final-key@0x556f98772db0 (size 16)
-| PRF symkey interface: key-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 2104: MD5_HMAC test 1 extracting all 16 bytes of key@0x556f98772db0
-| RFC 2104: MD5_HMAC test 1: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7238
+| PRF symkey interface PRF HMAC_MD5 final-key@0x55caa4fb1db0 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 2104: MD5_HMAC test 1 extracting all 16 bytes of key@0x55caa4fb1db0
+| RFC 2104: MD5_HMAC test 1: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: 61 48 06 f2  d7 7f a0 d0  37 a0 aa 4a  4b bd 2e 4e
-| RFC 2104: MD5_HMAC test 1 extracted len 16 bytes at 0x556f9876e350
+| wrapper: siBuffer: cc c2 11 0a  c1 ef e5 9e  9e 17 e4 a0  55 1e 1f 41
+| RFC 2104: MD5_HMAC test 1 extracted len 16 bytes at 0x55caa4fad350
 | unwrapped:
 |   92 94 72 7a  36 38 bb 1c  13 f4 8e f8  15 8b fc 9d   ..rz68..........
 | verify_bytes() RFC 2104: MD5_HMAC test 1: symkey: ok
@@ -12670,24 +12706,24 @@
 | decode_to_chunk() test_prf_vector: input "0x750c783e6ab0b503eaa86e310a5db738"
 | decode_to_chunk() output:
 |   75 0c 78 3e  6a b0 b5 03  ea a8 6e 31  0a 5d b7 38   u.x>j.....n1.].8
-| PRF chunk interface PRF HMAC_MD5 init key hunk 0x556f9876e330 (length 4)
+| PRF chunk interface PRF HMAC_MD5 init key hunk 0x55caa4fad330 (length 4)
 |   4a 65 66 65                                          Jefe
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825650
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7250
 |     key-offset: 0, key-size: 4
 | EXTRACT_KEY_FROM_KEY:
 |     target: MD5_HMAC
 |     flags: SIGN
 |     key_size: 4-bytes
-|     base: base-key@0x556f9876d290 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (20-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825628
-| PRF chunk interface prf: created HMAC_MD5 context 0x556f987719a0 from key-key@0x556f98772db0
-| PRF chunk interface prf: begin HMAC_MD5 with context 0x556f987719a0 from key-key@0x556f98772db0
-| PRF chunk interface PRF HMAC_MD5 0x556f9876d5e0
-| PRF chunk interface PRF HMAC_MD5 update message (0x556f9876e350 length 28)
+|     params: 8-bytes@0x7ffc637c7228
+| PRF chunk interface prf: created HMAC_MD5 context 0x55caa4fb09a0 from key-key@0x55caa4fb1db0
+| PRF chunk interface prf: begin HMAC_MD5 with context 0x55caa4fb09a0 from key-key@0x55caa4fb1db0
+| PRF chunk interface PRF HMAC_MD5 0x55caa4fac5e0
+| PRF chunk interface PRF HMAC_MD5 update message (0x55caa4fad350 length 28)
 |   77 68 61 74  20 64 6f 20  79 61 20 77  61 6e 74 20   what do ya want 
 |   66 6f 72 20  6e 6f 74 68  69 6e 67 3f                for nothing?
 | PRF chunk interface PRF HMAC_MD5 final length 16
@@ -12697,68 +12733,68 @@
 | verify_bytes() RFC 2104: MD5_HMAC test 2: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 4
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 4-bytes
-|     base: base-key@0x556f9876d290 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (20-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF HMAC_MD5 init key symkey-key@0x556f98772db0 (size 4)
-| PRF symkey interface: key symkey-key@0x556f98772db0 (4-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF HMAC_MD5 init key symkey-key@0x55caa4fb1db0 (size 4)
+| PRF symkey interface: key symkey-key@0x55caa4fb1db0 (4-bytes, EXTRACT_KEY_FROM_KEY)
 |     key-offset: 0, key-size: 4
 | EXTRACT_KEY_FROM_KEY:
 |     target: MD5_HMAC
 |     flags: SIGN
 |     key_size: 4-bytes
-|     base: base-key@0x556f98772db0 (4-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (4-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825668
-| PRF symkey interface prf: created HMAC_MD5 context 0x556f9876f2c0 from key symkey-key@0x556f9876d290
-| PRF symkey interface prf: begin HMAC_MD5 with context 0x556f9876f2c0 from key symkey-key@0x556f9876d290
-| PRF symkey interface PRF HMAC_MD5 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c7268
+| PRF symkey interface prf: created HMAC_MD5 context 0x55caa4fae2c0 from key symkey-key@0x55caa4fac290
+| PRF symkey interface prf: begin HMAC_MD5 with context 0x55caa4fae2c0 from key symkey-key@0x55caa4fac290
+| PRF symkey interface PRF HMAC_MD5 0x55caa4fac5e0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 28
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 28-bytes
-|     base: base-key@0x556f9876b880 (44-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (44-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF HMAC_MD5 update symkey message-key@0x556f98771520 (size 28)
-| PRF symkey interface: symkey message-key@0x556f98771520 (28-bytes, EXTRACT_KEY_FROM_KEY)
-| nss hmac digest hack extracting all 28 bytes of key@0x556f98771520
-| nss hmac digest hack: symkey-key@0x556f98771520 (28-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF HMAC_MD5 update symkey message-key@0x55caa4fb0520 (size 28)
+| PRF symkey interface: symkey message-key@0x55caa4fb0520 (28-bytes, EXTRACT_KEY_FROM_KEY)
+| nss hmac digest hack extracting all 28 bytes of key@0x55caa4fb0520
+| nss hmac digest hack: symkey-key@0x55caa4fb0520 (28-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 32
-| wrapper: (SECItemType)1264538437: fa 9f 50 a0  28 f8 d1 cb  5e 37 e3 0f  3a c0 e7 b6  1e 62 9c 19  f2 8f e8 a8  b6 82 60 f2  49 bb 2b 30
-| nss hmac digest hack extracted len 32 bytes at 0x556f9876f6f0
+| wrapper: (SECItemType)1264538437: eb b5 5d 46  a7 01 1d ec  a2 1b e7 fd  cd 8d 71 08  9f 94 57 57  96 3b b0 e9  87 05 b0 7a  c4 41 76 a3
+| nss hmac digest hack extracted len 32 bytes at 0x55caa4fae6f0
 | unwrapped:
 |   77 68 61 74  20 64 6f 20  79 61 20 77  61 6e 74 20   what do ya want 
 |   66 6f 72 20  6e 6f 74 68  69 6e 67 3f  00 00 00 00   for nothing?....
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256b0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72b0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825638
-| PRF symkey interface PRF HMAC_MD5 final-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 2104: MD5_HMAC test 2 extracting all 16 bytes of key@0x556f9876d290
-| RFC 2104: MD5_HMAC test 2: symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7238
+| PRF symkey interface PRF HMAC_MD5 final-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 2104: MD5_HMAC test 2 extracting all 16 bytes of key@0x55caa4fac290
+| RFC 2104: MD5_HMAC test 2: symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: 42 b7 25 08  fc 6f 6b 4d  59 07 64 02  01 a3 5f f5
-| RFC 2104: MD5_HMAC test 2 extracted len 16 bytes at 0x556f9876d270
+| wrapper: siBuffer: ef c7 27 4e  4b 73 43 81  c7 d8 23 0e  a6 b9 b2 ca
+| RFC 2104: MD5_HMAC test 2 extracted len 16 bytes at 0x55caa4fac270
 | unwrapped:
 |   75 0c 78 3e  6a b0 b5 03  ea a8 6e 31  0a 5d b7 38   u.x>j.....n1.].8
 | verify_bytes() RFC 2104: MD5_HMAC test 2: symkey: ok
@@ -12775,24 +12811,24 @@
 | decode_to_chunk() test_prf_vector: input "0x56be34521d144c88dbb8c733f0e8b3f6"
 | decode_to_chunk() output:
 |   56 be 34 52  1d 14 4c 88  db b8 c7 33  f0 e8 b3 f6   V.4R..L....3....
-| PRF chunk interface PRF HMAC_MD5 init key hunk 0x556f9876d110 (length 16)
+| PRF chunk interface PRF HMAC_MD5 init key hunk 0x55caa4fac110 (length 16)
 |   aa aa aa aa  aa aa aa aa  aa aa aa aa  aa aa aa aa   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825650
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7250
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: MD5_HMAC
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825628
-| PRF chunk interface prf: created HMAC_MD5 context 0x556f987719a0 from key-key@0x556f9876d290
-| PRF chunk interface prf: begin HMAC_MD5 with context 0x556f987719a0 from key-key@0x556f9876d290
-| PRF chunk interface PRF HMAC_MD5 0x556f9876d5e0
-| PRF chunk interface PRF HMAC_MD5 update message (0x556f9876dd60 length 50)
+|     params: 8-bytes@0x7ffc637c7228
+| PRF chunk interface prf: created HMAC_MD5 context 0x55caa4fb09a0 from key-key@0x55caa4fac290
+| PRF chunk interface prf: begin HMAC_MD5 with context 0x55caa4fb09a0 from key-key@0x55caa4fac290
+| PRF chunk interface PRF HMAC_MD5 0x55caa4fac5e0
+| PRF chunk interface PRF HMAC_MD5 update message (0x55caa4facd60 length 50)
 |   dd dd dd dd  dd dd dd dd  dd dd dd dd  dd dd dd dd   ................
 |   dd dd dd dd  dd dd dd dd  dd dd dd dd  dd dd dd dd   ................
 |   dd dd dd dd  dd dd dd dd  dd dd dd dd  dd dd dd dd   ................
@@ -12804,46 +12840,46 @@
 | verify_bytes() RFC 2104: MD5_HMAC test 3: prf OUT: ok
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF HMAC_MD5 init key symkey-key@0x556f9876d290 (size 16)
-| PRF symkey interface: key symkey-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF HMAC_MD5 init key symkey-key@0x55caa4fac290 (size 16)
+| PRF symkey interface: key symkey-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: MD5_HMAC
 |     flags: SIGN
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876d290 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (16-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825668
-| PRF symkey interface prf: created HMAC_MD5 context 0x556f9876f2c0 from key symkey-key@0x556f98772db0
-| PRF symkey interface prf: begin HMAC_MD5 with context 0x556f9876f2c0 from key symkey-key@0x556f98772db0
-| PRF symkey interface PRF HMAC_MD5 0x556f9876d5e0
+|     params: 8-bytes@0x7ffc637c7268
+| PRF symkey interface prf: created HMAC_MD5 context 0x55caa4fae2c0 from key symkey-key@0x55caa4fb1db0
+| PRF symkey interface prf: begin HMAC_MD5 with context 0x55caa4fae2c0 from key symkey-key@0x55caa4fb1db0
+| PRF symkey interface PRF HMAC_MD5 0x55caa4fac5e0
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256f0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72f0
 |     key-offset: 0, key-size: 50
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 50-bytes
-|     base: base-key@0x556f9876b880 (66-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (66-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825678
-| PRF symkey interface PRF HMAC_MD5 update symkey message-key@0x556f98771520 (size 50)
-| PRF symkey interface: symkey message-key@0x556f98771520 (50-bytes, EXTRACT_KEY_FROM_KEY)
-| nss hmac digest hack extracting all 50 bytes of key@0x556f98771520
-| nss hmac digest hack: symkey-key@0x556f98771520 (50-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7278
+| PRF symkey interface PRF HMAC_MD5 update symkey message-key@0x55caa4fb0520 (size 50)
+| PRF symkey interface: symkey message-key@0x55caa4fb0520 (50-bytes, EXTRACT_KEY_FROM_KEY)
+| nss hmac digest hack extracting all 50 bytes of key@0x55caa4fb0520
+| nss hmac digest hack: symkey-key@0x55caa4fb0520 (50-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 64
-| wrapper: (SECItemType)1264538437: 16 8c c1 33  c6 7b b9 10  f1 a9 9e d0  fc 0d 45 e3  16 8c c1 33  c6 7b b9 10  f1 a9 9e d0  fc 0d 45 e3  16 8c c1 33  c6 7b b9 10  f1 a9 9e d0  fc 0d 45 e3  7b b0 ce 0a  27 ff 77 95  5b 5d 3b f3  06 f4 de 8f
-| nss hmac digest hack extracted len 64 bytes at 0x556f9876fb40
+| wrapper: (SECItemType)1264538437: f5 2d c2 e1  ce 44 9d 22  7e d7 2c a1  f7 bd e8 b4  f5 2d c2 e1  ce 44 9d 22  7e d7 2c a1  f7 bd e8 b4  f5 2d c2 e1  ce 44 9d 22  7e d7 2c a1  f7 bd e8 b4  60 36 10 f4  d6 03 d0 43  24 a1 14 35  88 25 65 c2
+| nss hmac digest hack extracted len 64 bytes at 0x55caa4faeb40
 | unwrapped:
 |   dd dd dd dd  dd dd dd dd  dd dd dd dd  dd dd dd dd   ................
 |   dd dd dd dd  dd dd dd dd  dd dd dd dd  dd dd dd dd   ................
@@ -12851,23 +12887,23 @@
 |   dd dd 00 00  00 00 00 00  00 00 00 00  00 00 00 00   ................
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd8256b0
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c72b0
 |     key-offset: 0, key-size: 16
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 16-bytes
-|     base: base-key@0x556f9876b880 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4faa880 (32-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825638
-| PRF symkey interface PRF HMAC_MD5 final-key@0x556f98772db0 (size 16)
-| PRF symkey interface: key-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| output: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
-| RFC 2104: MD5_HMAC test 3 extracting all 16 bytes of key@0x556f98772db0
-| RFC 2104: MD5_HMAC test 3: symkey-key@0x556f98772db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 8-bytes@0x7ffc637c7238
+| PRF symkey interface PRF HMAC_MD5 final-key@0x55caa4fb1db0 (size 16)
+| PRF symkey interface: key-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| output: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
+| RFC 2104: MD5_HMAC test 3 extracting all 16 bytes of key@0x55caa4fb1db0
+| RFC 2104: MD5_HMAC test 3: symkey-key@0x55caa4fb1db0 (16-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 16
-| wrapper: siBuffer: d2 41 84 82  9d 03 e8 77  d1 ae 7f ab  28 44 df a0
-| RFC 2104: MD5_HMAC test 3 extracted len 16 bytes at 0x556f9876d520
+| wrapper: siBuffer: f8 9f ee 94  ff 9d 9a d1  2e 97 62 39  0f a6 1d 18
+| RFC 2104: MD5_HMAC test 3 extracted len 16 bytes at 0x55caa4fac520
 | unwrapped:
 |   56 be 34 52  1d 14 4c 88  db b8 c7 33  f0 e8 b3 f6   V.4R..L....3....
 | verify_bytes() RFC 2104: MD5_HMAC test 3: symkey: ok
@@ -12914,24 +12950,24 @@
 |   a7 a5 6c c4                                          ..l.
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825720
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7320
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876d290 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd8256a8
+|     params: 8-bytes@0x7ffc637c72a8
 | NSS_IKE_PRF_DERIVE:
 |     target: NSS_IKE_PRF_PLUS_DERIVE
-|     base: base-key@0x556f98772db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
-|     params: 56-bytes@0x7fffbd825720
-| CAVP: IKEv2 key derivation with HMAC-SHA1 extracting all 20 bytes of key@0x556f9876d290
-| CAVP: IKEv2 key derivation with HMAC-SHA1: symkey-key@0x556f9876d290 (20-bytes, NSS_IKE_PRF_PLUS_DERIVE)
+|     base: base-key@0x55caa4fb1db0 (32-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 56-bytes@0x7ffc637c7320
+| CAVP: IKEv2 key derivation with HMAC-SHA1 extracting all 20 bytes of key@0x55caa4fac290
+| CAVP: IKEv2 key derivation with HMAC-SHA1: symkey-key@0x55caa4fac290 (20-bytes, NSS_IKE_PRF_PLUS_DERIVE)
 | sizeof bytes 32
-| wrapper: (SECItemType)538976380: 54 fe e9 fc  7b c8 fe 80  08 4b 48 5f  ea 82 77 b8  9f e2 56 78  18 f6 8e 7a  6f fe fa db  68 c2 2b a7
-| CAVP: IKEv2 key derivation with HMAC-SHA1 extracted len 32 bytes at 0x556f9876d060
+| wrapper: (SECItemType)538976380: 3d fe 76 45  87 6f a2 ed  4b d4 7d 54  1c d4 01 07  ef 19 0b 86  b8 bc 23 57  21 9b 85 df  82 cb 31 09
+| CAVP: IKEv2 key derivation with HMAC-SHA1 extracted len 32 bytes at 0x55caa4fac060
 | unwrapped:
 |   a9 a7 b2 22  b5 9f 8f 48  64 5f 28 a1  db 5b 5f 5d   ..."...Hd_(..[_]
 |   74 79 cb a7  00 00 00 00  00 00 00 00  00 00 00 00   ty..............
@@ -12939,13 +12975,13 @@
 | NSS_IKE_PRF_PLUS_DERIVE:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 132-bytes
-|     base: base-key@0x556f9876d290 (20-bytes, NSS_IKE_PRF_PLUS_DERIVE)
-|     params: 40-bytes@0x7fffbd825660
-| CAVP: IKEv2 key derivation with HMAC-SHA1 extracting all 132 bytes of key@0x556f98771520
-| CAVP: IKEv2 key derivation with HMAC-SHA1: symkey-key@0x556f98771520 (132-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fac290 (20-bytes, NSS_IKE_PRF_PLUS_DERIVE)
+|     params: 40-bytes@0x7ffc637c7260
+| CAVP: IKEv2 key derivation with HMAC-SHA1 extracting all 132 bytes of key@0x55caa4fb0520
+| CAVP: IKEv2 key derivation with HMAC-SHA1: symkey-key@0x55caa4fb0520 (132-bytes, EXTRACT_KEY_FROM_KEY)
 | sizeof bytes 144
-| wrapper: (SECItemType)538976380: 39 90 0f 68  c1 3b 8f 1b  43 79 b9 2f  95 35 eb f8  af ad ae b4  06 6f 30 2e  c1 80 ea a1  b8 bb 3f 09  a8 91 55 22  64 d2 32 17  d2 86 2c 0c  4a a7 49 b8  f5 84 24 3f  73 ca 6b 9b  d6 20 91 fc  15 83 9e f6  b8 a5 3d 4b  f5 c4 3e 9b  42 32 1a 30  7a 13 ab a0  03 b0 b5 c1  71 0f 2d bc  25 46 47 2e  79 1a 01 67  fa 33 22 6b  90 ff c0 83  b2 6d 59 05  23 ed 38 21  74 06 02 f9  b6 b4 84 dc  37 da e8 dc  dd 19 c7 31  93 c6 7a fc  54 34 34 1d  6d 75 f0 47  6d 65 fc 30
-| CAVP: IKEv2 key derivation with HMAC-SHA1 extracted len 144 bytes at 0x556f98771d70
+| wrapper: (SECItemType)538976380: f7 eb 5b 47  0c 5c 38 31  95 37 38 53  61 ed dc c2  50 f7 23 58  af 26 c4 d1  fc 7c 58 19  d1 f8 1d b1  c0 28 82 13  1d 81 f2 dc  8a 66 10 8a  c0 3a a2 fd  d5 13 38 d7  b7 7f 49 bc  d2 54 57 1a  ec 52 71 a9  94 f5 f7 9b  18 6f 32 08  eb 86 8a 1e  87 1c 35 1d  20 32 a1 d4  ce 7d df cf  9f 41 8c 40  70 fc 1c 7f  cb 94 18 ce  78 c1 9b 56  bf 79 01 94  91 08 7c 60  33 4e 7a 73  9d c0 ef 65  e1 34 57 6d  f0 2a b9 50  7e 64 d4 d6  7e b8 2f 3e  47 6d 5d 8d  8b 8f 31 3f
+| CAVP: IKEv2 key derivation with HMAC-SHA1 extracted len 144 bytes at 0x55caa4fb0d70
 | unwrapped:
 |   a1 42 93 67  7c c8 0f f8  f9 cc 0e ee  30 d8 95 da   .B.g|.......0...
 |   9d 8f 40 56  66 e3 0e f0  df cb 63 c6  34 a4 60 02   ..@Vf.....c.4.`.
@@ -12961,29 +12997,29 @@
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 20-bytes
-|     base: base-key@0x556f98771520 (132-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fb0520 (132-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825718
+|     params: 8-bytes@0x7ffc637c7318
 | CONCATENATE_DATA_AND_BASE:
 |     target: EXTRACT_KEY_FROM_KEY
-|     base: base-key@0x556f9876a070 (16-bytes, AES_KEY_GEN)
-|     params: 16-bytes@0x7fffbd825710
+|     base: base-key@0x55caa4fa9070 (16-bytes, AES_KEY_GEN)
+|     params: 16-bytes@0x7ffc637c7310
 |     key-offset: 0, key-size: 32
 | EXTRACT_KEY_FROM_KEY:
 |     target: EXTRACT_KEY_FROM_KEY
 |     key_size: 32-bytes
-|     base: base-key@0x556f9876cfb0 (48-bytes, EXTRACT_KEY_FROM_KEY)
+|     base: base-key@0x55caa4fabfb0 (48-bytes, EXTRACT_KEY_FROM_KEY)
 |     operation: FLAGS_ONLY
-|     params: 8-bytes@0x7fffbd825698
+|     params: 8-bytes@0x7ffc637c7298
 | NSS_IKE_PRF_DERIVE:
 |     target: NSS_IKE_PRF_PLUS_DERIVE
-|     base: base-key@0x556f9876b880 (20-bytes, EXTRACT_KEY_FROM_KEY)
-|     params: 56-bytes@0x7fffbd825700
-| CAVP: IKEv2 key derivation with HMAC-SHA1 extracting all 20 bytes of key@0x556f9876cfb0
-| CAVP: IKEv2 key derivation with HMAC-SHA1: symkey-key@0x556f9876cfb0 (20-bytes, NSS_IKE_PRF_PLUS_DERIVE)
+|     base: base-key@0x55caa4faa880 (20-bytes, EXTRACT_KEY_FROM_KEY)
+|     params: 56-bytes@0x7ffc637c7300
+| CAVP: IKEv2 key derivation with HMAC-SHA1 extracting all 20 bytes of key@0x55caa4fabfb0
+| CAVP: IKEv2 key derivation with HMAC-SHA1: symkey-key@0x55caa4fabfb0 (20-bytes, NSS_IKE_PRF_PLUS_DERIVE)
 | sizeof bytes 32
-| wrapper: (SECItemType)808924466: eb 1e 9d 28  9a 54 b0 45  ba af 97 75  0c df 76 7e  81 82 af 20  90 84 d3 85  67 da 00 4c  95 ce 9c 04
-| CAVP: IKEv2 key derivation with HMAC-SHA1 extracted len 32 bytes at 0x556f987725a0
+| wrapper: (SECItemType)808662883: e1 12 79 9c  bd 18 35 55  0a 19 27 2e  f4 cb f0 f0  3f 96 6e 17  d0 70 ab 3e  51 4b 08 31  92 62 5c 12
+| CAVP: IKEv2 key derivation with HMAC-SHA1 extracted len 32 bytes at 0x55caa4fb15a0
 | unwrapped:
 |   63 e8 11 94  94 6e bd 05  df 7d f5 eb  f5 d8 75 00   c....n...}....u.
 |   56 bf 1f 1d  00 00 00 00  00 00 00 00  00 00 00 00   V...............
@@ -12991,16 +13027,16 @@
 ipsec algparse: leak detective found no leaks
 initializing NSS db
 running pluto selftest
-OBJ.linux.amd64/programs/pluto/pluto:  adjusting nssdir to /tmp/tmp.gc3ygb6YsK
+OBJ.linux.amd64/programs/pluto/pluto:  adjusting nssdir to /tmp/tmp.UBgeIlnVjg
 OBJ.linux.amd64/programs/pluto/pluto: selftest: skipping lock
 OBJ.linux.amd64/programs/pluto/pluto: selftest: skipping control socket
 OBJ.linux.amd64/programs/pluto/pluto: selftest: skipping fork
-Starting Pluto (Libreswan Version 5.2 IKEv2 IKEv1 XFRM XFRMI esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) (NSS-KDF) DNSSEC SYSTEMD_WATCHDOG LABELED_IPSEC (SELINUX) LIBCAP_NG LINUX_AUDIT AUTH_PAM NETWORKMANAGER CURL(non-NSS) LDAP(non-NSS) NFTABLES CAT NFLOG) pid:1558570
-operating system: Linux 6.12.12 [Linux 6.12.12+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1~bpo12+1 (2025-02-23) x86_64]
+Starting Pluto (Libreswan Version 5.2 IKEv2 IKEv1 XFRM XFRMI esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) (NSS-KDF) DNSSEC SYSTEMD_WATCHDOG LABELED_IPSEC (SELINUX) LIBCAP_NG LINUX_AUDIT AUTH_PAM NETWORKMANAGER CURL(non-NSS) LDAP(non-NSS) NFTABLES CAT NFLOG) pid:4019631
+operating system: Linux 6.1.0 [Linux 6.1.0-31-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64]
 core dump dir: /run/pluto
 pluto: warning: chdir("/run/pluto") to dumpdir failed (2: No such file or directory)
 secrets file: /etc/ipsec.secrets
-Initializing NSS using read-only database "sql:/tmp/tmp.gc3ygb6YsK"
+Initializing NSS using read-only database "sql:/tmp/tmp.UBgeIlnVjg"
 FIPS Mode: OFF
 NSS crypto library initialized
 FIPS mode disabled for pluto daemon
@@ -13275,16 +13311,16 @@
 Makefile:48: warning: overriding recipe for target '/build/reproducible-path/libreswan-5.2/debian/libreswan'
 Makefile:45: warning: ignoring old recipe for target '/build/reproducible-path/libreswan-5.2/debian/libreswan'
 install -m 0644 ../../OBJ.linux.amd64/initsystems/systemd/ipsec.service /build/reproducible-path/libreswan-5.2/debian/libreswan
-/bin/sh: 1: test: =: argument expected
+/bin/sh: line 1: test: /build/reproducible-path/libreswan-5.2/debian/libreswan: unary operator expected
 install -m 0644 ../../OBJ.linux.amd64/initsystems/systemd/libreswan.conf /build/reproducible-path/libreswan-5.2/debian/libreswan
-/bin/sh: 1: test: =: argument expected
+/bin/sh: line 1: test: /build/reproducible-path/libreswan-5.2/debian/libreswan: unary operator expected
 System has not been booted with systemd as init system (PID 1). Can't operate.
 Failed to connect to system scope bus via local transport: Host is down
 System has not been booted with systemd as init system (PID 1). Can't operate.
 Failed to connect to system scope bus via local transport: Host is down
-/bin/sh: 1: test: -a: unexpected operator
-/bin/sh: 8: test: =: unexpected operator
-/bin/sh: 12: test: =: unexpected operator
+/bin/sh: line 1: test: too many arguments
+/bin/sh: line 8: test: too many arguments
+/bin/sh: line 12: test: too many arguments
 make[4]: Leaving directory '/build/reproducible-path/libreswan-5.2/initsystems/systemd'
 make[4]: Nothing to be done for 'local-install'.
 make[3]: Leaving directory '/build/reproducible-path/libreswan-5.2/initsystems'
@@ -13400,12 +13436,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/3987186/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/1534544 and its subdirectories
-I: Current time: Thu Apr  9 11:49:15 -12 2026
-I: pbuilder-time-stamp: 1775778555
+I: removing directory /srv/workspace/pbuilder/3987186 and its subdirectories
+I: Current time: Sat Mar  8 07:29:33 +14 2025
+I: pbuilder-time-stamp: 1741368573