[BACK]Return to 40.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/40.html, Revision 1.111

1.109     bentley     1: <!doctype html>
                      2: <html lang=en id=release>
                      3: <meta charset=utf-8>
                      4:
1.92      deraadt     5: <title>OpenBSD 4.0</title>
1.1       david       6: <meta name="description" content="OpenBSD 4.0">
1.103     tj          7: <meta name="viewport" content="width=device-width, initial-scale=1">
                      8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.105     tb          9: <link rel="canonical" href="https://www.openbsd.org/40.html">
1.109     bentley    10: <style>
                     11: #sourcecode h3 {
                     12:        color: var(--red);
                     13: }
                     14:
                     15: #sourcecode p {
                     16:        margin-left: 2.75em;
                     17: }
                     18:
                     19: #sourcecode blockquote {
                     20:        margin-left: 4.5em;
                     21: }
                     22: </style>
1.1       david      23:
1.109     bentley    24: <h2 id=OpenBSD>
1.1       david      25: <a href="index.html">
1.109     bentley    26: <i>Open</i><b>BSD</b></a>
                     27: 4.0
1.103     tj         28: </h2>
1.1       david      29:
1.109     bentley    30: <table>
                     31: <tr>
                     32: <td>
1.46      deraadt    33: <a href="images/Pufferix.jpg">
1.109     bentley    34: <img width="227" height="343"
                     35: src="images/Pufferix.jpg" alt="Pufferix"></a>
                     36: <td>
1.87      jasper     37: Released Nov 1, 2006<br>
1.1       david      38: Copyright 1997-2006, Theo de Raadt.<br>
1.109     bentley    39: <cite class=isbn>ISBN 0-9731791-8-X</cite>
1.1       david      40: <br>
1.100     deraadt    41: 4.0 Song: <a href="lyrics.html#40">"Humppa Negala"</a>
1.108     deraadt    42: <br>
                     43: <br>
1.1       david      44: <ul>
                     45: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     46:     a list of mirror machines.
1.109     bentley    47: <li>Go to the <code class=reldir>pub/OpenBSD/4.0/</code> directory on
1.1       david      48:     one of the mirror sites.
1.88      deraadt    49: <li>Have a look at <a href="errata40.html">The 4.0 Errata page</a> for a list
1.1       david      50:     of bugs and workarounds.
1.86      deraadt    51: <li>See a <a href="plus40.html">detailed log of changes</a> between the
1.1       david      52:     3.9 and 4.0 releases.
                     53: </ul>
1.103     tj         54: <p>
                     55: All applicable copyrights and credits are in the src.tar.gz,
                     56: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
                     57: files fetched via ports.tar.gz.
1.109     bentley    58: </table>
1.103     tj         59:
                     60: <hr>
1.1       david      61:
1.109     bentley    62: <section id=new>
                     63: <h3>What's New</h3>
                     64:
1.1       david      65: <p>
                     66: This is a partial list of new features and systems included in OpenBSD 4.0.
1.86      deraadt    67: For a comprehensive list, see the <a href="plus40.html">changelog</a> leading
1.1       david      68: to 4.0.
                     69: <p>
                     70:
                     71: <ul>
                     72:
1.66      deraadt    73: <li>New/extended platforms:
1.11      jsg        74: <ul>
                     75: <li><a href="armish.html">OpenBSD/armish</a>.<br>
1.66      deraadt    76:     Various ARM-based appliances, using the Redboot boot loader, currently
                     77:     only supporting the Thecus N2100 and IOData HDL-G.
                     78: <li><a href="sparc64.html">OpenBSD/sparc64</a>.<br>
                     79:     UltraSPARC III based  machines are now supported!
                     80: <li><a href="zaurus.html">OpenBSD/zaurus</a>.<br>
                     81:     Support for the Zaurus SL-C3200.
1.11      jsg        82: </ul>
                     83: <p>
                     84:
1.1       david      85: <li>Improved hardware support, including:
                     86: <ul>
1.109     bentley    87: <li>New <a href="https://man.openbsd.org/msk.4">msk(4)</a> driver for Marvell/SysKonnect Yukon-2 Gigabit Ethernet.
                     88: <li>New <a href="https://man.openbsd.org/bnx.4">bnx(4)</a> driver for Broadcom NetXtreme II Gigabit Ethernet.
                     89: <li>New <a href="https://man.openbsd.org/xge.4">xge(4)</a> driver for Neterion Xframe/Xframe II 10Gb Ethernet.
                     90: <li>New <a href="https://man.openbsd.org/rum.4">rum(4)</a> driver for Ralink Technology 2nd gen USB IEEE 802.11a/b/g wireless.
                     91: <li>New <a href="https://man.openbsd.org/acx.4">acx(4)</a> driver for Texas Instruments ACX100/ACX111 IEEE 802.11a/b/g wireless.
                     92: <li>New <a href="https://man.openbsd.org/pgt.4">pgt(4)</a> driver for Connexant/Intersil Prism GT Full-MAC IEEE 802.11a/b/g wireless.
                     93: <li>New <a href="https://man.openbsd.org/uath.4">uath(4)</a> driver for Atheros USB IEEE 802.11a/b/g wireless.
                     94: <li>New binary blob free <a href="https://man.openbsd.org/wpi.4">wpi(4)</a> driver for Intel PRO/Wireless 3945ABG IEEE 802.11a/b/g wireless.
                     95: <li>New <a href="https://man.openbsd.org/arc.4">arc(4)</a> driver for Areca Technology Corporation SATA RAID; including RAID management via <a href="https://man.openbsd.org/bio.4">bio(4)</a>.
                     96: <li>New <a href="https://man.openbsd.org/mfi.4">mfi(4)</a> driver for LSI Logic &amp; Dell MegaRAID SAS RAID; including RAID management via <a href="https://man.openbsd.org/bio.4">bio(4)</a>.
                     97: <li>New <a href="https://man.openbsd.org/azalia.4">azalia(4)</a> driver for generic High Definition Audio.
                     98: <li>New SD/MMC/SDIO drivers (<a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a>, <a href="https://man.openbsd.org/sdmmc.4">sdmmc(4)</a>), currently supporting SD memory cards as fake SCSI <a href="https://man.openbsd.org/sd.4">sd(4)</a> drives.
                     99: <li>New <a href="https://man.openbsd.org/udcf.4">udcf(4)</a> driver for Gude ADS Expert mouseCLOCK DCF77/HBG time signal station receivers.
                    100: <li>New <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a> driver for Silicon Laboratories CP2101/CP2102 based USB serial adapters.
                    101: <li>New <a href="https://man.openbsd.org/ucycom.4">ucycom(4)</a> driver for Cypress microcontroller based USB serial adapters.
                    102: <li>New <a href="https://man.openbsd.org/uark.4">uark(4)</a> driver for Arkmicro Technologies ARK3116 based USB serial adapters.
                    103: <li>New <a href="https://man.openbsd.org/umsm.4">umsm(4)</a> driver for Qualcomm MSM EVDO based modems.
1.21      jsg       104: <li>New Dallas/Maxim 1-Wire bus support, including:
                    105: <ul>
1.109     bentley   106: <li>New <a href="https://man.openbsd.org/gpioow.4">gpioow(4)</a> driver for 1-Wire bus bit-banging through GPIO pin
                    107: <li>New <a href="https://man.openbsd.org/onewire.4">onewire(4)</a> 1-Wire bus driver
                    108: <li>New <a href="https://man.openbsd.org/owid.4">owid(4)</a> 1-Wire ID family driver
                    109: <li>New <a href="https://man.openbsd.org/owtemp.4">owtemp(4)</a> 1-Wire temperature family driver
1.21      jsg       110: </ul>
1.109     bentley   111: <li>New <a href="https://man.openbsd.org/isagpio.4">isagpio(4)</a> driver for ISA I/O mapped as GPIO.
                    112: <li>New <a href="https://man.openbsd.org/nmea.4">nmea(4)</a>
1.49      mbalmer   113: line discipline for NMEA 0183 (GPS) devices. The new
1.109     bentley   114: <a href="https://man.openbsd.org/nmeaattach.8">nmeaattach(8)</a>
1.49      mbalmer   115: utility can be used to receive NMEA 0183 data and provide the time
                    116: received as a timedelta sensor to be used by, for example,
1.109     bentley   117: <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>.
1.37      jsg       118: <li>New VAX framebuffer drivers:
                    119: <ul>
1.109     bentley   120: <li>New <a href="https://man.openbsd.org/vax/lcg.4">lcg(4)</a> driver for VAXstation 4000/60 and VLC color frame buffers
                    121: <li>New <a href="https://man.openbsd.org/vax/lcspx.4">lcspx(4)</a> driver for Low-Cost SPX color frame buffers
                    122: <li>New <a href="https://man.openbsd.org/vax/gpx.4">gpx(4)</a> driver for GPX color frame buffers
                    123: <li><a href="https://man.openbsd.org/vax/smg.4">smg(4)</a> driver for Small Monochrome Graphics frame buffers heavily updated to be a modern <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> driver
1.37      jsg       124: </ul>
1.52      miod      125: <li>Support for VAX-based Digital VXT2000 and VXT2000+ terminals.
1.109     bentley   126: <li>The <a href="https://man.openbsd.org/bge.4">bge(4)</a> driver supporting newer chipsets, such as the Broadcom BCM5754, BCM5755, BCM5786, and BCM5787.
                    127: <li>The <a href="https://man.openbsd.org/em.4">em(4)</a> driver supporting newer chipsets, such as the Intel ESB2 and ICH8.
                    128: <li>The <a href="https://man.openbsd.org/nfe.4">nfe(4)</a> driver supporting newer chipsets, such as the NVIDIA MCP61 and MCP65.
                    129: <li>The <a href="https://man.openbsd.org/re.4">re(4)</a> driver supporting newer chipsets, such as the Realtek RT8101E, RT8168, and RT8169SC.
                    130: <li>The <a href="https://man.openbsd.org/dc.4">dc(4)</a> driver supporting newer chipsets, such as the ADMtek ADM9511 and ADM9513.
                    131: <li>The <a href="https://man.openbsd.org/pciide.4">pciide(4)</a> driver supporting newer chipsets, such as:
1.6       brad      132: <ul>
1.38      jsg       133: <li>ATI IXP300 SATA, IXP600 IDE
                    134: <li>Intel 6321ESB IDE/SATA, 82801G SATA, and 82801H SATA
                    135: <li>IT Express IT8211F IDE
                    136: <li>NVIDIA MCP61 SATA, MCP65 SATA
1.6       brad      137: <li>Promise PDC205xx SATA
                    138: <li>ServerWorks SATA
1.38      jsg       139: <li>VIA VT8237A SATA
1.6       brad      140: </ul>
1.109     bentley   141: <li>The <a href="https://man.openbsd.org/mpt.4">mpt(4)</a> driver has been replaced with <a href="https://man.openbsd.org/mpi.4">mpi(4)</a>, a more stable driver that supports more hardware.
                    142: <li>The <a href="https://man.openbsd.org/com.4">com(4)</a> driver now supports pcmcia and cardbus cards on macppc.
1.30      niallo    143: <li>Working interrupt routing on Sun Netra t1 105, Ultra 60 and possibly other <a href="sparc64.html">sparc64</a> systems.
                    144: <li>Work around broken VIA and NVIDIA MPBIOSes, fixes interrupt routing with GENERIC.MP on several systems.
1.109     bentley   145: <li>Initial <a href="https://man.openbsd.org/bio.4">bio(4)</a> support for Compaq/HP <a href="https://man.openbsd.org/ciss.4">ciss(4)</a> Smart ARRAY 5/6 SAS/SCSI RAID controllers.
1.61      deraadt   146: <li>Improved speed control on some systems:
                    147: <ul>
1.84      gwk       148: <li>New SpeedStep detection code, also adds support for VIA C7-M, and several newer Pentium M's.
                    149: <li>Support SpeedStep in rudimentary fashion on most unknown CPU's that advertise the feature.
1.61      deraadt   150: <li>Zaurus can be moved into slower speeds now too.
1.84      gwk       151: <li>The Pentium 4 Thermal Clock Control driver now supports more CPU's including the Intel Pentium M and Xeon, and provides an estimated performance impact.
                    152: <li>Numerous improvements to PowerNow K7 and K8 support on i386, and support for K8 was added to amd64.
1.61      deraadt   153: </ul>
1.110     deraadt   154: <li>Support for Intel 945G/GM video chipsets (on i386).
1.68      kettenis  155: <li>Support for additional I2C sensors:
                    156: <ul>
1.109     bentley   157: <li>The <a href="https://man.openbsd.org/adt.4">adt(4)</a> driver now supports the National Semiconductor LM9600, SMSC EMC6D10x and SMSC SCH5017 chips.
                    158: <li>The <a href="https://man.openbsd.org/admtemp.4">admtemp(4)</a> driver now supports the Analog Devices ADM1023, Genesys Logic GL523SM and Global Mixed-mode Technology G781 chips.
1.68      kettenis  159: </ul>
1.1       david     160: </ul>
                    161: <p>
                    162:
                    163: <li>New tools:
                    164: <ul>
1.109     bentley   165: <li>GNU RCS has been replaced with <a href="https://man.openbsd.org/rcs.1">OpenRCS</a>.
1.1       david     166: </ul>
                    167: <p>
                    168:
                    169: <li>New functionality:
                    170: <ul>
1.109     bentley   171: <li><a href="https://man.openbsd.org/ipsec.4">IPsec</a>
1.83      ray       172:  has been greatly improved:
1.75      ray       173: <ul>
1.109     bentley   174: <li><a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a>
1.74      ray       175:  has been greatly extended and completely supersedes ipsecadm(8):
                    176: <ul>
1.83      ray       177: <li>Lots of documentation improvements (man
1.109     bentley   178:  <a href="https://man.openbsd.org/ipsec.conf.5">ipsec.conf</a>)
1.74      ray       179: <li>IPv6 support
                    180: <li>AH support
                    181: <li>Transport mode support
1.76      ray       182: <li>Dynamic IKE support for roaming users
1.74      ray       183: <li>USER_FQDN id support
                    184: </ul>
1.109     bentley   185: <li><a href="https://man.openbsd.org/sasyncd.8">sasyncd(8)</a>
1.83      ray       186:  works much better:
                    187: <ul>
                    188: <li>communicates with
1.109     bentley   189:  <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>,
1.83      ray       190:  telling it to run active or passive depending on the master/slave state of the
1.109     bentley   191:  <a href="https://man.openbsd.org/carp.4">carp(4)</a>
1.83      ray       192:  interfaces.  This makes
1.109     bentley   193:  <a href="https://man.openbsd.org/ipsec.4">IPsec</a>
1.83      ray       194:  failover setups much more robust.
                    195: <li>looks at the
1.109     bentley   196:  <a href="https://man.openbsd.org/carp.4">carp(4)</a>
1.83      ray       197:  interface group by default to suppress preemption of
1.109     bentley   198:  <a href="https://man.openbsd.org/ipsec.4">IPsec</a>
1.83      ray       199:  traffic during system boot.
                    200: </ul>
1.109     bentley   201: <li><a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>
1.75      ray       202:  can now be safely configured by
1.109     bentley   203:  <a href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a>
1.75      ray       204:  on startup.
                    205: </ul>
1.109     bentley   206: <li><a href="https://man.openbsd.org/ftp.1">ftp(1)</a> now supports HTTPS.
                    207: <li><a href="https://man.openbsd.org/cdio.1">cdio(1)</a> can now perform track-at-once burning and rewritable blanking.
1.29      niallo    208: <li>spppcontrol(8) and wicontrol(8) functionality has been merged into
1.109     bentley   209: <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
1.16      steven    210: <li>gcc(1) provides a new warning, -Wstack-larger-than-N, to report functions
                    211: which are too greedy in stack variables, see
1.109     bentley   212: <a href="https://man.openbsd.org/gcc-local.1">gcc-local(1)</a> for details.
                    213: <li>An in-kernel <a href="https://man.openbsd.org/getcwd.3">getcwd(3)</a> implementation.
                    214: <li>A new system call <a href="https://man.openbsd.org/adjfreq.2">adjfreq(2)</a>
                    215: to allow <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
1.12      otto      216: to adjust the tick rate of the system clock automatically.
1.37      jsg       217: <li>Support for X11 on VAX has been added
1.109     bentley   218: <li>Virtual Allocation Table (VAT) support for <a href="https://man.openbsd.org/mount_udf.8">UDF</a>.
1.16      steven    219: <li>C99 functions
1.109     bentley   220: <a href="https://man.openbsd.org/round.3">round(3)</a>,
                    221: <a href="https://man.openbsd.org/roundf.3">roundf(3)</a>,
                    222: <a href="https://man.openbsd.org/trunc.3">trunc(3)</a>, and
                    223: <a href="https://man.openbsd.org/truncf.3">truncf(3)</a>
1.16      steven    224: have been added to libm, the math library.
1.109     bentley   225: <li><a href="https://man.openbsd.org/pf.4">pf(4)</a>
1.34      djm       226:  now supports Unicast Reverse Path Forwarding (uRPF) checks for simplified
1.35      aanriot   227:  ingress filtering.
1.109     bentley   228: <li><a href="https://man.openbsd.org/bpf.4">bpf(4)</a>
1.34      djm       229:  can now ignore packets based on their direction (inbound/outbound) using the
1.35      aanriot   230:  BIOCSDIRFILT ioctl.
1.109     bentley   231: <li><a href="https://man.openbsd.org/mac68k/pdisk.8">pdisk(8)</a>
1.36      martin    232:  can now set up slices on HFS(DPME) partitioned disks on mac68k.
1.58      stevesk   233: <li>New dissectors have been added to
1.109     bentley   234:  <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>:
1.55      reyk      235: <ul>
1.56      reyk      236: <li>Cisco's VQP (VLAN Query Protocol)
                    237: <li>IEEE 802.1AB LLDP (Link Layer Discovery Protocol)
1.55      reyk      238: </ul>
1.109     bentley   239: <li><a href="https://man.openbsd.org/trunk.4">trunk(4)</a> now
1.55      reyk      240:  supports the new loadbalance mode to balance outgoing traffic based on hashed protocol header
                    241:  information.
1.109     bentley   242: <li><a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a> has been extended to provide runtime information on rebuilds, scrubs and initialization.
1.78      david     243: <li>New sysctls to check the system vendor, product, version, serial number, and UUID.
1.65      claudio   244: <li>Equal cost multipath routing support. Needs to be enabled by a sysctl.
1.67      drahn     245: <li>Prebind, a secure implementation of prelinking, has been added to
1.109     bentley   246: <a href="https://man.openbsd.org/ldconfig.8" >ldconfig(8)</a>,
1.67      drahn     247: it speeds up launching of shared binaries. Prebind is compatible with
1.111   ! deraadt   248: address space randomization, unlike prelink.
1.109     bentley   249: <li><a href="https://man.openbsd.org/vnconfig.8">vnconfig(8)</a> can now use PKCS #5 PBKDF2 to create a more secure key when using encryption.
1.1       david     250: </ul>
                    251: <p>
                    252:
                    253: <li>Assorted improvements and code cleanup:
                    254: <ul>
1.13      otto      255: <li>Much better time keeping for multiprocessor <a href="i386.html">OpenBSD/i386</a>
                    256: systems.
1.109     bentley   257: <li>Much improved implementation of <a href="https://man.openbsd.org/telldir.3">telldir(3)</a>
1.13      otto      258: and friends.
1.53      ray       259: <li>Replacement of many
1.109     bentley   260:  <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>
1.34      djm       261:  calls that follow a pattern prone to integer overflow with safer constructs.
1.44      mpf       262: <li>Improved failover handling in
1.109     bentley   263:  <a href="https://man.openbsd.org/carp.4">carp(4)</a>:
1.44      mpf       264:  <ul>
                    265:  <li>Extend the carp protocol with the demotion counter to act smarter on multiple failures.
                    266:  <li>Group failovers now work without carp running preempt mode.
                    267:  <li>Demotion can now be controlled via interface groups.
                    268:  </ul>
1.54      krw       269: <li>
1.109     bentley   270:  <a href="https://man.openbsd.org/chio.1">chio(1)</a>
1.54      krw       271: is now a useful tool for controlling tape changers.
                    272: <li>Much improved
1.109     bentley   273:  <a href="https://man.openbsd.org/st.4">st(4)</a>
1.54      krw       274: device setup, tape handling and error processing.
                    275: <li>Many
1.109     bentley   276:  <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>
1.54      krw       277: fixes, including 'alias' handling and improved interface initialization.
                    278: <li>
1.109     bentley   279:  <a href="https://man.openbsd.org/scsi.4">scsi(4)</a>
1.54      krw       280: devices detect the correct SCSI version.
                    281: <li>More
1.109     bentley   282:  <a href="https://man.openbsd.org/umass.4">umass(4)</a>
1.54      krw       283: devices properly detected.
                    284: <li>Improved detection of fibre channel devices and devices in SCSI enclosures.
1.109     bentley   285: <li>The new RSSI header has been added to the <a href="https://man.openbsd.org/ieee80211_radiotap.9">ieee80211_radiotap(9)</a>
1.56      reyk      286:   framework as a replacement for ANTSIGNAL headers.
1.73      ray       287: <li>Many integer type safety cleanups with
1.109     bentley   288:  <a href="https://man.openbsd.org/lint.1">lint(1)</a>.
1.54      krw       289: </ul>
                    290: <p>
                    291:
                    292: <li>Install/Upgrade process changes
                    293: <ul>
                    294: <li>Host specific site files add easy customization for individual hosts
                    295: <li>X Window aperture support, where available, now defaults to off
1.1       david     296: </ul>
                    297: <p>
                    298:
1.111   ! deraadt   299: <li>New functionality for
1.109     bentley   300:     <a href="https://man.openbsd.org/hostapd.8">hostapd(8)</a>,
1.56      reyk      301:     the Host Access Point Daemon:
                    302: <ul>
                    303: <li>IP based roaming to build wireless networks without the requirement
                    304:     of a single broadcast domain.
                    305: <li>New event rules to match optional elements of radiotap headers:
                    306:     signal percentage, transmit rate and channel frequency.
                    307: <li>Various bug fixes and improvements.
                    308: </ul>
                    309: <p>
                    310:
1.1       david     311: <li>OpenSSH 4.4:
                    312: <ul>
1.40      dtucker   313: <li>Conditional configuration in <a href=
1.109     bentley   314:    "https://man.openbsd.org/sshd_config.5"
1.40      dtucker   315:    >sshd_config(5)</a> using the <b>Match</b> directive.  This allows some
                    316:    configuration options to be selectively overridden if specific criteria
                    317:    (based on user, group, hostname and/or address) are met.
                    318: <li>Add support for Diffie-Hellman group exchange key agreement with a
                    319:    final hash of SHA256.
                    320: <li>Added a <b>ForceCommand</b> directive to <a href=
1.109     bentley   321:    "https://man.openbsd.org/sshd_config.5"
1.40      dtucker   322:    >sshd_config(5)</a>, similar to the command="..." option in
                    323:    ~/.ssh/authorized_keys.
                    324: <li>Added a <b>PermitOpen</b> directive to <a href=
1.109     bentley   325:    "https://man.openbsd.org/sshd_config.5"
1.40      dtucker   326:    >sshd_config(5)</a>, similar to the permitopen="..." option in
                    327:    authorized_keys, to allow control over the port-forwardings that a
                    328:    user is allowed to establish.
                    329: <li>Added an <b>ExitOnForwardFailure</b> option to cause ssh(1) to exit (with
                    330:    a non-zero exit code) when requested port forwardings could not be
                    331:    established.
                    332: <li>Added optional logging of transactions to <a href=
1.109     bentley   333:    "https://man.openbsd.org/sftp-server.8"
1.40      dtucker   334:    >sftp-server(8)</a>.
1.109     bentley   335: <li><a href="https://man.openbsd.org/ssh.1"
1.40      dtucker   336:    >ssh(1)</a> will now record port numbers for hosts stored in
                    337:    ~/.ssh/authorized_keys when a non-standard port has been requested.
                    338: <li>Extended the <a href=
1.109     bentley   339:    "https://man.openbsd.org/sshd_config.5"
1.40      dtucker   340:    >sshd_config(5)</a> "SubSystem" directive to allow the
                    341:    specification of commandline arguments.
                    342: <li>Many manpage fixes and improvements
1.1       david     343: </ul>
                    344: <p>
                    345:
                    346: <li>OpenBGPD 4.0:
                    347: <ul>
1.48      henning   348: <li>new nexthop selection logic ignoring bgpd routes, helps in complex setups
                    349:     with ospfd
                    350: <li>add a &quot;detailed&quot; show rib view to bgpctl, including communities
                    351: <li>allow requesting a route refresh from a peer that supports it
                    352: <li>have bgpd always report back the result of an operation to bgpctl, so
                    353:     the operator can spot errors quicker
                    354: <li>allow bgpd to manipulate carp demotion counters based on session states,
                    355:     gives even greater failover support
                    356: <li>support restarting sessions that reached max-prefix after a given time
                    357: <li>bgpctl can now show all routes received from a neighbor before filters
                    358:     were applied, and routes sent to neighbors
                    359: <li>assorted fixes and improvements, as usual
1.1       david     360: </ul>
                    361: <p>
                    362:
1.41      norby     363: <li>OpenOSPFD 4.0:
1.1       david     364: <ul>
1.41      norby     365: <li>Track uptime of the daemon itself.
                    366: <li>Track uptime of all ospf enabled interfaces.
                    367: <li>Adjust logging behaviour to prevent unwanted logging.
                    368: <li>Delay LSA updates when removing and adding - prevent flapping.
                    369: <li>Fix plaintext authentication.
1.43      brad      370: <li>Improve the output of 'ospfctl show interfaces'.
1.41      norby     371: <li>Support rtlabels when redistributing routes.
1.1       david     372: </ul>
                    373: <p>
1.41      norby     374:
1.50      henning   375: <li>OpenNTPD 4.0:
1.49      mbalmer   376: <ul>
1.50      henning   377: <li>support timedelta sensors, such as DCF77 receivers supported by
1.109     bentley   378:     <a href="https://man.openbsd.org/udcf.4">udcf(4)</a>
1.50      henning   379:     and GPS receivers supported by
1.109     bentley   380:     <a href="https://man.openbsd.org/nmea.4">nmea(4)</a>.
1.111   ! deraadt   381: <li>Adjust the kernel tick frequency, using
1.109     bentley   382:     <a href="https://man.openbsd.org/adjfreq.2">adjfreq(2)</a>,
1.50      henning   383:     improving accuracy on many machines.
                    384: <li>allow for weight to be added to sensors or servers, so that one can
                    385:     weight timedelta sensors higher than ntp peers
1.49      mbalmer   386: </ul>
                    387: <p>
1.1       david     388:
1.9       steven    389: <li>Over 3700 ports, 3400 pre-built packages, improved package tools.
1.57      espie     390: <li>Full support for pkg_add(1) over ssh(1), using one single connection.
1.1       david     391: <p>
                    392:
                    393: <li>As usual, steady improvements in manual pages and other documentation.
                    394: <p>
                    395:
                    396: <li>The system includes the following major components from outside suppliers:
                    397: <ul>
                    398: <li>X.Org 6.9.0 (+ patches, and i386 contains XFree86 3.3.6 servers
                    399: (+ patches) for legacy chipsets not supported by X.Org)
                    400: <li>Gcc 2.95.3
1.109     bentley   401: (+ <a href="https://man.openbsd.org/gcc-local.1">patches</a>)
1.1       david     402: and 3.3.5
1.109     bentley   403: (+ <a href="https://man.openbsd.org/gcc-local.1">patches</a>)
1.1       david     404: <li>Perl 5.8.8 (+ patches)
                    405: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    406: <li>OpenSSL 0.9.7j (+ patches)
                    407: <li>Groff 1.15
                    408: <li>Sendmail 8.13.8, with libmilter
1.26      david     409: <li>Bind 9.3.2-P1 (+ patches)
1.1       david     410: <li>Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
                    411: <li>Sudo 1.6.8p9
                    412: <li>Ncurses 5.2
                    413: <li>Latest KAME IPv6
1.24      biorn     414: <li>Heimdal 0.7.2 (+ patches)
1.1       david     415: <li>Arla 0.35.7
                    416: <li>Binutils 2.15 (+ patches)
1.69      kettenis  417: <li>Gdb 6.3 (+ patches)
1.1       david     418: </ul>
                    419:
                    420: </ul>
1.109     bentley   421: </section>
1.1       david     422:
                    423: <hr>
1.109     bentley   424:
                    425: <section id=install>
                    426: <h3>How to install</h3>
                    427:
1.1       david     428: <p>
                    429: Following this are the instructions which you would have on a piece of
                    430: paper if you had purchased a CDROM set instead of doing an alternate
                    431: form of install.  The instructions for doing an FTP (or other style
                    432: of) install are very similar; the CDROM instructions are left intact
                    433: so that you can see how much easier it would have been if you had
                    434: purchased a CDROM instead.
                    435: <p>
                    436:
                    437: <hr>
                    438: Please refer to the following files on the three CDROMs or FTP mirror for
                    439: extensive details on how to install OpenBSD 4.0 on your machine:
                    440: <p>
                    441: <ul>
                    442: <li>CD1:4.0/i386/INSTALL.i386
                    443: <p>
                    444: <li>CD2:4.0/amd64/INSTALL.amd64
                    445: <li>CD2:4.0/macppc/INSTALL.macppc
                    446: <p>
                    447: <li>CD3:4.0/sparc/INSTALL.sparc
                    448: <li>CD3:4.0/sparc64/INSTALL.sparc64
                    449: <p>
                    450: <li>FTP:.../OpenBSD/4.0/alpha/INSTALL.alpha
1.33      brad      451: <li>FTP:.../OpenBSD/4.0/armish/INSTALL.armish
1.1       david     452: <li>FTP:.../OpenBSD/4.0/cats/INSTALL.cats
                    453: <li>FTP:.../OpenBSD/4.0/hp300/INSTALL.hp300
                    454: <li>FTP:.../OpenBSD/4.0/hppa/INSTALL.hppa
                    455: <li>FTP:.../OpenBSD/4.0/luna88k/INSTALL.luna88k
                    456: <li>FTP:.../OpenBSD/4.0/mac68k/INSTALL.mac68k
                    457: <li>FTP:.../OpenBSD/4.0/mvme68k/INSTALL.mvme68k
                    458: <li>FTP:.../OpenBSD/4.0/mvme88k/INSTALL.mvme88k
                    459: <li>FTP:.../OpenBSD/4.0/sgi/INSTALL.sgi
                    460: <li>FTP:.../OpenBSD/4.0/vax/INSTALL.vax
                    461: <li>FTP:.../OpenBSD/4.0/zaurus/INSTALL.zaurus
                    462: </ul>
                    463: <hr>
                    464:
1.109     bentley   465: <section id=quickinstall>
                    466:
1.1       david     467: <p>
                    468: Quick installer information for people familiar with OpenBSD, and the
                    469: use of the "disklabel -E" command.  If you are at all confused when
                    470: installing OpenBSD, read the relevant INSTALL.* file as listed above!
1.109     bentley   471:
                    472: <h3>OpenBSD/i386:</h3>
                    473:
1.1       david     474: <p>
                    475: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    476: release is on CD1. If your BIOS does not support booting from CD, you will need
                    477: to create a boot floppy to install from. To create a boot floppy write
                    478: <i>CD1:4.0/i386/floppy40.fs</i> to a floppy and boot via the floppy drive.
                    479:
                    480: <p>
                    481: Use <i>CD1:4.0/i386/floppyB40.fs</i> instead for greater SCSI controller
                    482: support, or <i>CD1:4.0/i386/floppyC40.fs</i> for better laptop support.
                    483:
                    484: <p>
                    485: If you can't boot from a CD or a floppy disk,
                    486: you can install across the network using PXE as described in
                    487: the included INSTALL.i386 document.
                    488:
                    489: <p>
                    490: If you are planning on dual booting OpenBSD with another OS, you will need to
                    491: read INSTALL.i386.
                    492:
                    493: <p>
                    494: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
                    495: at <i>CD1:4.0/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
                    496: use the
1.109     bentley   497: <a href="https://man.openbsd.org/dd.1">dd(1)</a>
1.1       david     498: utility. The following is an example usage of
1.109     bentley   499: <a href="https://man.openbsd.org/dd.1">dd(1)</a>,
1.1       david     500: where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    501: &quot;rfd0a&quot;.
                    502:
1.109     bentley   503: <blockquote><pre>
1.1       david     504: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
1.109     bentley   505: </pre></blockquote>
1.1       david     506:
                    507: <p>
                    508: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    509: your install will most likely fail. For more information on creating a boot
                    510: floppy and installing OpenBSD/i386 please refer to
1.104     tj        511: <a href="faq/faq4.html#MkFlop">this page</a>.
1.109     bentley   512:
                    513: <h3>OpenBSD/amd64:</h3>
1.1       david     514:
                    515: <p>
                    516: The 4.0 release of OpenBSD/amd64 is located on CD2.
                    517: Boot from the CD to begin the install - you may need to adjust
                    518: your BIOS options first.
                    519: If you can't boot from the CD, you can create a boot floppy to install from.
                    520: To do this, write <i>CD2:4.0/amd64/floppy40.fs</i> to a floppy, then
                    521: boot from the floppy drive.
                    522:
                    523: <p>
                    524: If you can't boot from a CD or a floppy disk,
                    525: you can install across the network using PXE as described in the included
                    526: INSTALL.amd64 document.
                    527:
                    528: <p>
                    529: If you are planning to dual boot OpenBSD with another OS, you will need to
                    530: read INSTALL.amd64.
1.109     bentley   531:
                    532: <h3>OpenBSD/macppc:</h3>
1.1       david     533:
                    534: <p>
                    535: Put CD2 in your CDROM drive and poweron your machine while holding down the
                    536: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    537:
                    538: <p>
                    539: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    540: /4.0/macppc/bsd.rd</i>
1.109     bentley   541:
                    542: <h3>OpenBSD/sparc:</h3>
1.1       david     543:
                    544: <p>
                    545: The 4.0 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    546: can use one of the two commands listed below, depending on the version of your
                    547: ROM.
                    548:
1.109     bentley   549: <blockquote><pre>
                    550: ok <kbd>boot cdrom 4.0/sparc/bsd.rd</kbd>
1.1       david     551: or
1.109     bentley   552: > <kbd>b sd(0,6,0)4.0/sparc/bsd.rd</kbd>
                    553: </pre></blockquote>
1.1       david     554:
                    555: <p>
                    556: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
                    557: To do so you need to write <i>CD3:4.0/sparc/floppy40.fs</i> to a floppy.
1.104     tj        558: For more information see <a href="faq/faq4.html#MkFlop">this page</a>.
1.1       david     559: To boot from the floppy use one of the two commands listed below,
                    560: depending on the version of your ROM.
                    561:
1.109     bentley   562: <blockquote><pre>
                    563: ok <kbd>boot floppy</kbd>
1.1       david     564: or
1.109     bentley   565: > <kbd>b fd()</kbd>
                    566: </pre></blockquote>
1.1       david     567:
                    568: <p>
                    569: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    570: will most likely fail.
                    571:
                    572: <p>
                    573: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
                    574: setup a bootable tape, or install via network, as told in the
                    575: INSTALL.sparc file.
1.109     bentley   576:
                    577: <h3>OpenBSD/sparc64:</h3>
1.1       david     578:
                    579: <p>
                    580: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    581:
                    582: <p>
                    583: If this doesn't work, or if you don't have a CDROM drive, you can write
                    584: <i>CD3:4.0/sparc64/floppy40.fs</i> or <i>CD3:4.0/sparc64/floppyB40.fs</i>
                    585: (depending on your machine) to a floppy and boot it with <i>boot
                    586: floppy</i>. Refer to INSTALL.sparc64 for details.
                    587:
                    588: <p>
                    589: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    590: will most likely fail.
                    591:
                    592: <p>
                    593: You can also write <i>CD3:4.0/sparc64/miniroot40.fs</i> to the swap partition on
                    594: the disk and boot with <i>boot disk:b</i>.
                    595:
                    596: <p>
                    597: If nothing works, you can boot over the network as described in INSTALL.sparc64.
1.109     bentley   598:
                    599: <h3>OpenBSD/alpha:</h3>
1.1       david     600:
                    601: <p>
1.109     bentley   602: Write <i>FTP:4.0/alpha/floppy40.fs</i> or
1.1       david     603: <i>FTP:4.0/alpha/floppyB40.fs</i> (depending on your machine) to a diskette and
                    604: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    605:
                    606: <p>
                    607: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    608: will most likely fail.
                    609:
1.109     bentley   610: <h3>OpenBSD/armish:</h3>
1.1       david     611:
                    612: <p>
1.67      drahn     613: After connecting a serial port, Thecus can boot directly from the network
                    614: either tftp or http. Configure the network using fconfig, reset,
                    615: then load bsd.rd, see INSTALL.armish for specific details.
1.82      steven    616: IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
1.67      drahn     617: and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
                    618: then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
                    619: More details are available in INSTALL.armish.
1.109     bentley   620:
                    621: <h3>OpenBSD/cats:</h3>
1.1       david     622:
                    623: <p>
                    624: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    625: <i>FTP:4.0/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    626: or an existing FFS or EXT2FS partition).
                    627:
1.109     bentley   628: <h3>OpenBSD/hp300:</h3>
                    629:
1.1       david     630: <p>
                    631: Boot over the network by following the instructions in INSTALL.hp300.
1.109     bentley   632:
                    633: <h3>OpenBSD/hppa:</h3>
1.1       david     634:
                    635: <p>
                    636: Boot over the network by following the instructions in INSTALL.hppa or the
                    637: <a href="hppa.html#install">hppa platform page</a>.
                    638:
1.109     bentley   639: <h3>OpenBSD/luna88k:</h3>
                    640:
1.1       david     641: <p>
                    642: Copy bsd.rd to a Mach or UniOS partition, and boot it from the PROM.
                    643: Alternatively, you can create a bootable tape and boot from it. Refer to
                    644: the instructions in INSTALL.luna88k for more details.
                    645:
1.109     bentley   646: <h3>OpenBSD/mac68k:</h3>
                    647:
1.1       david     648: <p>
                    649: Boot MacOS as normal and extract the Macside "BSD/Mac68k Booter" utility from
                    650: <i>FTP:4.0/mac68k/utils</i> onto your hard disk.  Configure the "BSD/Mac68k
                    651: Booter" with the location of your bsd.rd kernel and boot into the installer.
                    652: Refer to the instructions in INSTALL.mac68k for more details.
1.109     bentley   653:
                    654: <h3>OpenBSD/mvme68k:</h3>
1.1       david     655:
                    656: <p>
                    657: You can create a bootable installation tape or boot over the network.<br>
                    658: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    659: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    660: for more details.
                    661:
1.109     bentley   662: <h3>OpenBSD/mvme88k:</h3>
                    663:
1.1       david     664: <p>
                    665: You can create a bootable installation tape or boot over the network.<br>
                    666: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    667: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    668: for more details.
1.109     bentley   669:
                    670: <h3>OpenBSD/sgi:</h3>
1.1       david     671:
                    672: <p>
                    673: Burn cd40.iso on a CD-R, put it in the CD drive of your machine and
                    674: select <i>Install System Software</i> from the System Maintenance menu.
                    675:
                    676: <p>
                    677: If your machine doesn't have a CD drive, you can
                    678: setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd".
                    679: Refer to the instructions in INSTALL.sgi for more details.
1.109     bentley   680:
                    681: <h3>OpenBSD/vax:</h3>
1.1       david     682:
                    683: <p>
                    684: Boot over the network via mopbooting as described in INSTALL.vax.
                    685:
1.109     bentley   686: <h3>OpenBSD/zaurus:</h3>
                    687:
1.1       david     688: <p>
                    689: Using the Linux built-in graphical ipkg installer, install the
                    690: openbsd40_arm.ipk package.  Reboot, then run it.  Read INSTALL.zaurus
                    691: for a few important details.
1.109     bentley   692:
                    693: </section>
                    694:
                    695: <section id=sourcecode>
                    696: <h3>Notes about the source code:</h3>
1.1       david     697:
                    698: <p>
                    699: src.tar.gz contains a source archive starting at /usr/src.  This file
                    700: contains everything you need except for the kernel sources, which are
                    701: in a separate archive.  To extract:
1.109     bentley   702:
                    703: <blockquote><pre>
                    704: # <kbd>mkdir -p /usr/src</kbd>
                    705: # <kbd>cd /usr/src</kbd>
                    706: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
                    707: </pre></blockquote>
                    708:
1.1       david     709: <p>
                    710: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    711: This file contains all the kernel sources you need to rebuild kernels.
                    712: To extract:
1.109     bentley   713:
                    714: <blockquote><pre>
                    715: # <kbd>mkdir -p /usr/src/sys</kbd>
                    716: # <kbd>cd /usr/src</kbd>
1.1       david     717: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
1.109     bentley   718: </pre></blockquote>
                    719:
1.1       david     720: <p>
                    721: Both of these trees are a regular CVS checkout.  Using these trees it
                    722: is possible to get a head-start on using the anoncvs servers as
                    723: described <a href="anoncvs.html">here</a>.
                    724: Using these files
                    725: results in a much faster initial CVS update than you could expect from
                    726: a fresh checkout of the full OpenBSD source tree.
                    727:
1.109     bentley   728: </section>
                    729: </section>
                    730:
1.1       david     731: <hr>
1.109     bentley   732:
                    733: <section id=upgrade>
                    734: <h3>How to upgrade</h3>
1.1       david     735: <p>
                    736: If you already have an OpenBSD 3.9 system, and do not want to reinstall,
                    737: upgrade instructions and advice can be found in the
1.14      henning   738: <a href="faq/upgrade40.html">Upgrade Guide</a>.
1.109     bentley   739: </section>
1.1       david     740:
                    741: <hr>
1.109     bentley   742:
                    743: <section id=ports>
                    744: <h3>Ports Tree</h3>
1.1       david     745: <p>
                    746: A ports tree archive is also provided.  To extract:
                    747: <p>
1.109     bentley   748: <blockquote><pre>
                    749: # <kbd>cd /usr</kbd>
                    750: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
                    751: # <kbd>cd ports</kbd>
                    752: </pre></blockquote>
1.1       david     753: <p>
                    754: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
1.90      jasper    755: read the <a href="faq/faq15.html">ports</a> page
1.1       david     756: if you know nothing about ports
                    757: at this point.  This text is not a manual of how to use ports.
                    758: Rather, it is a set of notes meant to kickstart the user on the
                    759: OpenBSD ports system.
                    760: <p>
                    761: The <i>ports/</i> directory represents a CVS (see the manpage for
1.109     bentley   762: <a href="https://man.openbsd.org/cvs.1">
1.1       david     763: cvs(1)</a> if
                    764: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    765: source tree, our ports tree is available via anoncvs.  So, in
                    766: order to keep current with it, you must make the <i>ports/</i> tree
                    767: available on a read-write medium and update the tree with a command
                    768: like:
                    769: <p>
1.109     bentley   770: <blockquote><pre>
1.1       david     771: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_4_0</strong>
1.109     bentley   772: </pre></blockquote>
1.1       david     773: <p>
                    774: [Of course, you must replace the local directory and server name here
                    775: with the location of your ports collection and a nearby anoncvs
                    776: server.]
                    777: <p>
                    778: Note that most ports are available as packages through FTP. Updated
                    779: packages for the 4.0 release will be made available if problems arise.
                    780: <p>
                    781: If you're interested in seeing a port added, would like to help out, or just
                    782: would like to know more, the mailing list ports@openbsd.org is a good
                    783: place to know.
1.109     bentley   784: </section>