anchor.diff:           "--enable-sqlite" ]
       ++ optionals enableNetworkManager [
            "--enable-nm"
  -         "--with-nm-ca-dir=/etc/ssl/certs"
  +         "--with-nm-ca-dir=/etc/ssl/certs" ]
  +    # Taken from: https://wiki.strongswan.org/projects/strongswan/wiki/MacOSX
  +    ++ optionals stdenv.isDarwin [
  +      "--disable-systemd"
  +      "--disable-xauth-pam"
  +      "--disable-kernel-netlink"
  +      "--enable-kernel-pfkey"
  +      "--enable-kernel-pfroute"
  +      "--enable-kernel-libipsec"
  +      "--enable-osx-attr"
  +      "--disable-scripts"
       ];
   
     postInstall = ''
  
positive.code:     echo "include /etc/ipsec.secrets" >> $out/etc/ipsec.secrets
    '';
  
    NIX_LDFLAGS = "-lgcc_s" ;
  
    meta = {
      description = "OpenSource IPsec-based VPN Solution";
  
negative.code:   '';
  
    configureFlags =
      [ "--enable-swanctl"
        "--enable-cmd"
        "--enable-openssl"
        "--enable-eap-sim" "--enable-eap-sim-file" "--enable-eap-simaka-pseudonym"
        "--enable-eap-simaka-reauth" "--enable-eap-identity" "--enable-eap-md5"
        "--enable-eap-gtc" "--enable-eap-aka" "--enable-eap-aka-3gpp2"
        "--enable-eap-mschapv2" "--enable-eap-radius" "--enable-xauth-eap" "--enable-ext-auth"
        "--enable-acert"
        "--enable-pkcs11" "--enable-eap-sim-pcsc" "--enable-dnscert" "--enable-unbound"
        "--enable-chapoly"
        "--enable-curl" ]
      ++ optionals stdenv.isLinux [
        "--enable-farp" "--enable-dhcp"
        "--enable-systemd"
        "--enable-xauth-pam"
        "--enable-forecast"
        "--enable-connmark"
        "--enable-af-alg" ]
      ++ optionals stdenv.isx86_64 [ "--enable-aesni" "--enable-rdrand" ]
      ++ optional (stdenv.hostPlatform.system == "i686-linux") "--enable-padlock"
      ++ optionals enableTNC [
  