anchor.diff:        "--enable-eap-gtc" "--enable-eap-aka" "--enable-eap-aka-3gpp2"
         "--enable-eap-mschapv2" "--enable-xauth-eap" "--enable-ext-auth"
         "--enable-forecast" "--enable-connmark" "--enable-acert"
  +      "--enable-pkcs11" "--enable-eap-sim-pcsc" "--enable-dnscert" "--enable-unbound"
         "--enable-aesni" "--enable-af-alg" "--enable-rdrand" ]
       ++ stdenv.lib.optional (stdenv.system == "i686-linux") "--enable-padlock" 
       ++ stdenv.lib.optionals enableTNC [
  
positive.code:   dontPatchELF = true;
  
    buildInputs =
      [ gmp pkgconfig python autoreconfHook iptables ]
      ++ stdenv.lib.optionals enableTNC [ curl trousers sqlite libxml2 ];
  
    patches = [
  
negative.code: { stdenv, fetchurl, gmp, pkgconfig, python, autoreconfHook
  , curl, trousers, sqlite, iptables, libxml2, openresolv
  , ldns, unbound, pcsclite, openssl
  , enableTNC ? false }:
  
  stdenv.mkDerivation rec {
  