Annotation of www/43.html, Revision 1.49
1.1 david 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 4.3 Release</title>
5: <link rev=made href="mailto:www@openbsd.org">
6: <meta name="resource-type" content="document">
7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
8: <meta name="description" content="OpenBSD 4.3">
9: <meta name="keywords" content="openbsd,main">
10: <meta name="distribution" content="global">
11: <meta name="copyright" content="This document copyright 2008 by OpenBSD.">
12: </head>
13:
14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
15:
16: <a href="index.html">
17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
18: <hr>
19:
20: <p>
1.26 david 21: <a href="images/Cryptonaut.jpg">
1.1 david 22: <img align="left" width="227" height="343" hspace="24" vspace="30"
1.24 deraadt 23: src="images/Cryptonaut.jpg" alt="OpenBSD 4.3 logo"></a>
1.1 david 24: <h2><font color="#0000e0">The OpenBSD 4.3 Release:</font></h2>
25: <p>
26: To be released May 1, 2008<br>
27: Copyright 1997-2008, Theo de Raadt.<br>
1.16 deraadt 28: <font color="#e00000">ISBN 978-0-9784475-1-9</font>
1.1 david 29: <br>
1.39 deraadt 30: <a href="lyrics.html#43">4.3 Song: not yet titled</a>
1.1 david 31: <p>
32:
33: <a href="#new">What's New</a><br>
34: <a href="#install">How to install</a><br>
35: <a href="#upgrade">How to upgrade</a><br>
36: <a href="#ports">How to use the ports tree</a><br>
37: <a href="orders.html">Ordering a CD set</a><br>
38:
39: <p>
40: <h3><font color="#0000e0">
41: To get the files for this release:
42: <ul>
43: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
44: <li>See the information on <a href="ftp.html">The FTP page</a> for
45: a list of mirror machines.
46: <li>Go to the <font color="#e00000">pub/OpenBSD/4.3/</font> directory on
47: one of the mirror sites.
48: <li>Briefly read the rest of this document.
49: <li>Have a look at <a href="errata43.html">The 4.3 Errata page</a> for a list
50: of bugs and workarounds.
51: <li>See a <a href="plus43.html">detailed log of changes</a> between the
52: 4.2 and 4.3 releases.
53: </ul>
54: </font></h3>
55: <br clear=all>
56:
57: <strong>Note:</strong> All applicable copyrights and credits can be found
58: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
59: xenocara.tar.gz, or in the files fetched via ports.tar.gz. The distribution
60: files used to build packages from the ports.tar.gz file are not included on
61: the CDROM because of lack of space.
62: <p>
63:
64: <a name="new"></a>
65: <hr>
66: <p>
67: <h3><font color="#0000e0">What's New</font></h3>
68: <p>
69: This is a partial list of new features and systems included in OpenBSD 4.3.
70: For a comprehensive list, see the <a href="plus43.html">changelog</a> leading
71: to 4.3.
72: <p>
73:
74: <ul>
75:
76: <li>New/extended platforms:
77: <ul>
1.41 miod 78: <li><a href="sparc64.html">OpenBSD/sparc64</a><br>
1.43 kettenis 79: SMP support. This should work on all supported systems,
80: with the exception of the Sun Enterprise 10000.
1.41 miod 81: <li><a href="hppa.html">OpenBSD/hppa</a><br>
1.3 kettenis 82: K-class servers like the K200 and K410 are supported now.
1.41 miod 83: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
84: SMP support on MVME188 and MVME188A systems.<br>
85: 88110 processor, and thus MVME197LE/SP/DP boards, are supported now.
1.1 david 86: </ul>
87: <p>
88:
89: <li>Improved hardware support, including:
90: <ul>
1.20 kettenis 91: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> driver now supports BCM5906/BCM5906M 10/100 and BCM5755 10/100/Gigabit Ethernet devices.
92: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cas&sektion=4">cas(4)</a> driver now supports Cassini+ 10/100/Gigabit Ethernet devices.
93: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> driver now supports ICH9 10/100 and 10/100/Gigabit Ethernet devices.
94: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gem&sektion=4">gem(4)</a> driver now supports the onboard 1000base-SX interface on the Sun Fire V880 server.
95: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ixgb&sektion=4">ixgb(4)</a> driver now supports the Sun 10Gb PCI-X Ethernet devices.
96: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=msk&sektion=4">msk(4)</a> driver now supports Yukon FE+ 10/100 and Yukon Supreme 10/100/Gigabit Ethernet devices.
97: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfe&sektion=4">nfe(4)</a> driver now supports MCP73, MCP77 and MCP79 10/100/Gigabit Ethernet devices.
1.29 damien 98: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ral&sektion=4">ral(4)</a> driver now supports RT2800 based wireless network devices.
1.20 kettenis 99: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cmpci&sektion=4">cmpci(4)</a> driver now supports CMI8768 based audio adapters.
100: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=it&sektion=4">it(4)</a> driver now supports ITE IT8705F/8712F/8716F/8718F/8726F and SiS SiS950 ICs. Watchdog timer functionality added.
101: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mfi&sektion=4">mfi(4)</a> driver now supports Dell CERC6/PERC6 and LSI SAS1078 RAID controllers.
102: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=viapm&sektion=4">viapm(4)</a> driver now supports the VIA VT8237S south bridges SMBus controller.
1.35 jsg 103: <li>Support for hotplugging ExpressCard devices has been added.
1.20 kettenis 104: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amdpcib&sektion=4&arch=amd64">amdpcib(4)</a> driver for the AMD-8111 series LPC bridge and timecounter on amd64.
105: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pctr&sektion=4&arch=amd64">pctr(4)</a> driver for the CPU performance counters on amd64.
106: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bwi&sektion=4">bwi(4)</a> driver for the Broadcom AirForce IEEE 802.11b/g wireless network device.
107: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=envy&sektion=4">envy(4)</a> driver for the VIA Envy24 audio device.
108: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=et&sektion=4">et(4)</a> driver for the Agere/LSI ET1310 10/100/Gigabit Ethernet device.
109: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=etphy&sektion=4">etphy(4)</a> driver for the Agere/LSI ET1011 TruePHY Gigabit Ethernet PHY.
110: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amdpcib&sektion=4&arch=i386">amdpcib(4)</a> driver for the AMD-8111 series LPC bridge and timecounter on i386.
111: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glxpcib&sektion=4&arch=i386">glxpcib(4)</a> driver for the AMD CS5536 PCI-ISA bridge with timecounter, watchdog timer, and GPIO on i386.
1.29 damien 112: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iwn&sektion=4">iwn(4)</a> driver for the Intel Wireless WiFi Link 4965AGN IEEE 802.11a/b/g/Draft-N wireless network device.
1.20 kettenis 113: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=msts&sektion=4">msts(4)</a> driver for the Meinberg Standard Time String timedelta sensor.
114: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gbe&sektion=4&arch=sgi">gbe(4)</a> driver for the SGI Graphics Back End (GBE) Frame Buffer on sgi.
115: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkbc&sektion=4&arch=sgi">mkbc(4)</a> driver for the Moosehead PS/2 Controller on sgi.
116: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=power&sektion=4&arch=sgi">power(4)</a> driver for the power button on sgi.
117: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ecadc&sektion=4&arch=sparc64">ecadc(4)</a> driver for the Environmental Monitoring Subsystem temperature sensor on sparc64.
118: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tda&sektion=4&arch=sparc64">tda(4)</a> driver for the fan controller on the Sun Blade 1000/2000, making these machines much less noisy.
119: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spdmem&sektion=4">spdmem(4)</a> driver retrieves information about memory modules.
120: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=thmc&sektion=4">thmc(4)</a> driver for the TI THMC50, Analog ADM1022/1028 temperature sensor.
121: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uchcom&sektion=4">uchcom(4)</a> driver for the WinChipHead CH341/340 based USB serial adapter.
122: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umbg&sektion=4">umbg(4)</a> driver for the Meinberg Funkuhren USB5131 timedelta sensor.
123: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=upgt&sektion=4">upgt(4)</a> driver for the Conexant/Intersil PrismGT SoftMAC USB IEEE 802.11b/g wireless network device.
124: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wbng&sektion=4">wbng(4)</a> driver for the Winbond W83793G temperature, voltage, and fan sensor.
125: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wbsio&sektion=4">wbsio(4)</a> driver for the Winbond LPC Super I/O ICs.
126: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adl&sektion=4">adl(4)</a> driver for the Andigilog aSC7621 temperature, voltage, and fan sensor.
1.47 krw 127: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> driver now supports the (non-pci) NCR 53c720/770 in big-endian mode.
1.1 david 128: </ul>
129: <p>
130:
131: <li>New tools:
132: <ul>
1.20 kettenis 133: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&sektion=8">snmpd(8)</a>, implementing the Simple Network Management Protocol.
134: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpctl&sektion=8">snmpctl(8)</a> program controls the SNMP daemon.
135: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcidump&sektion=8">pcidump(8)</a> utility displays the device address, vendor, and product name of PCI devices.
136: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldattach&sektion=8">ldattach(8)</a> is used to attach a line discipline to a serial line to allow for in-kernel processing of the received and/or sent data.
1.1 david 137: </ul>
138: <p>
139:
140: <li>New functionality:
141: <ul>
1.20 kettenis 142: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eeprom&sektion=8&arch=sparc">eeprom(8)</a> is now able to display the OpenPROM device tree on systems that have it.
1.7 jasper 143: <li>Support for X11 on sgi has been added.
1.28 jasper 144: <li>The periodic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> reports now include package changes.
1.25 jakemsr 145: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cmpci&sektion=4">cmpci(4)</a> driver now supports multichannel audio playback if the hardware supports it.
146: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auvia&sektion=4">auvia(4)</a> driver now supports multichannel audio playback if the hardware supports it.
147: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a> driver now supports recording from the microphone as well as full-duplex mode.
148: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eso&sektion=4">eso(4)</a> driver now supports recording as well as full-duplex mode.
1.31 otto 149: <li>The ffs layer is now 64-bit disk block address clean.
150: This means that disks, partitions and filesystems larger than 2TB are
1.32 sobrado 151: now supported, with the exception of statfs(2) and quotas.
1.45 krw 152: <li>DMA is now enabled for 1-sector devices such as flash drives, providing
153: significant speed improvement.
154: <li>Sparc and Sparc64 disklabels now provide automatic recognition of ext2fs
155: partitions.
156: <li>Filesystems on USB devices are automatically dismounted if the device is
157: disconnected.
1.46 mpf 158: <li>The configuration of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> load balancing has
159: been vastly simplified.
1.47 krw 160: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fstab&sektion=5">
161: fstab(5)</a> entries referring to non-existant mount points are now
162: ignored, allowing subsequent entries to be processed.
1.1 david 163: </ul>
164: <p>
165:
166: <li>Assorted improvements and code cleanup:
167: <ul>
1.13 mikeb 168: <li>Improved support for an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lkm&sektion=4">lkm(4)</a> subsystem on amd64.
1.25 jakemsr 169: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ossaudio&sektion=3">ossaudio(3)</a> received several bug fixes and enhancements including but not limited to improved recording and full-duplex support.
170: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=audio&sektion=4">audio(4)</a> received several bug fixes and enhancements including but not limited to improved recording and full-duplex support.
1.22 espie 171: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> was heavily modified, mostly to improve support for parallel build.
172: Parallel builds now run commands in the same way the sequential builds do,
173: and the output from commands is more readable.
174: A large part of the source tree, xenocara, and quite a few ports now build
175: correctly with <code>make -j</code>.
1.34 xsa 176: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs&iamp;sektion=1">rcs</a> tools improvements and bug fixes.
1.36 claudio 177: <li>RTM_VERSION was increased so that all routing messages could be modified
178: to include additional fields for upcoming networking features.
1.42 ray 179: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendbug&sektion=1">sendbug(1)</a>
180: has stricter comment parsing, to avoid mangling diffs.
1.45 krw 181: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">
182: umass(4)</a> devices no longer detect bogus LUNs.
1.47 krw 183: <li>USB<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=st&sektion=4">
184: st(4)</a> devices can now successfully disconnect.
185: <li>More deviant umass devices accommodated.
1.48 krw 186: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=svnd&sektion=4">
187: svnd(4)</a> devices now work on block devices.
188: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">
189: disklabel(8)</a> is now aware of NTFS partitions.
190: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raidctl&sektion=8">
191: raidctl(8)</a> now correctly handles trailing whitespace in configuration files.
192: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mt&sektion=1">
193: mt(1)</a> no longer triggers panics when processing the 'rewoffl' command.
194: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=raid&sektion=4">
195: raid(4)</a> devices no longer hang when searching for components during boot.
196: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&sektion=4">
197: sd(4)</a> devices no longer receive spurious SYNCHRONIZE CACHE commands that
198: confuse some hardware.
199: <li>No longer claim that SYNCRHONIZE CACHE commands are 16 bytes long when they
200: are actually 10 bytes. Some devices took this too literally.
201: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">
202: dhcpd(8)</a> now always issues packets equal or larger than the minimum IP MTU.
1.49 ! krw 203: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a>
! 204: -E mode does not allow manual editing of the 'c' partition, which
! 205: is always set to cover the entire disk.
! 206: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a>
! 207: -E mode does not allow changing the cpg value of a partition.
! 208: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a>
! 209: -E mode command 'r' now displays the list of free chunks on the disk.
! 210: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disklabel&sektion=8">disklabel(8)</a>
! 211: -E mode no longer permits assigning arbitrary sizes to FS_BOOT and FS_UNUSED
! 212: partitions.
! 213: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> driver problems receiving jumbo frames have been resolved.
! 214: <li>Many dangerous unsigned comparisions with -1 when checking the
! 215: results of read and write calls have been eliminated.
! 216: <li>The new M_ZERO flag for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a>
! 217: replaces many malloc+bzero/memset combinations, fixing a number of bugs
! 218: in memory initialization and shrinking the kernel.
1.1 david 219: </ul>
220: <p>
221:
222: <li>Install/Upgrade process changes:
223: <ul>
1.44 krw 224: <li>All platforms now have serial console support when installing.
225: <li>Serial console speed is detected and appropriate /etc/ttys entries
226: automatically created.
1.39 deraadt 227: <li><a href="vax.html">OpenBSD/vax</a> now also has both kinds of install ISO cd images.
1.1 david 228: </ul>
229: <p>
230:
231: <li>OpenBGPD 4.3:
232: <ul>
1.39 deraadt 233: <li>Correctly handle prefixes which would cause a routing loop.
1.36 claudio 234: <li>Bgpctl's detailed RIB output shows additional attributes like extended
235: communities or the cluster id list.
1.1 david 236: </ul>
237: <p>
238:
239: <li>OpenNTPD 4.3:
240: <ul>
1.38 otto 241: <li>Handle IP changes of clients more gracefully.
1.37 otto 242: <li>Log peer and sensor status to syslog if the majority of either is
243: bad, or if a SIGINFO signal is received.
1.38 otto 244: <li>Allow offsetting of time sensors that have a systematic error.
1.1 david 245: </ul>
246: <p>
247:
248: <li>OpenOSPFD 4.3:
249: <ul>
1.40 otto 250: <li>Equal cost multipath support -- don't forget to set the right sysctls.
1.39 deraadt 251: <li>Parser and commandline options are now in sync with bgpd.
1.1 david 252: </ul>
253: <p>
254:
1.30 reyk 255: <li>relayd 4.3:
1.1 david 256: <ul>
1.30 reyk 257: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hoststated&sektion=8&manpath=OpenBSD+4.2">hoststated(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hoststatectl&sektion=8&manpath=OpenBSD+4.2">hoststatectl(8)</a>
258: were renamed to
259: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&sektion=8">relayd(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayctl&sektion=8">relayctl(8)</a>.
260: <li>Improved configuration grammar for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd.conf&sektion=5">relayd.conf(5)</a>.
261: <li>Allow to send SNMP traps via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snmpd&sektion=8">snmpd(8)</a> when host states change.
262: <li>Improved support for URL filtering and protocol actions.
263: <li>Added support for UDP-based DNS relaying with request ID randomisation.
264: <li>Various bug fixes, optimisations, and cleanups.
265: <li>Improved reload support.
1.1 david 266: </ul>
267: <p>
268:
269: <li>OpenSSH 4.8:
270: <ul>
1.33 djm 271: <li>New features:
272: <ul>
273: <li>Added
274: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a>
275: support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>,
276: controlled by a new option
277: <em>"ChrootDirectory"</em>. Please refer to
278: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>
279: for details, and
280: please use this feature carefully.</li>
281: <li>Linked
282: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>
283: into
284: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>. The internal sftp server is
285: used when the command <em>"internal-sftp"</em> is specified in a Subsystem
286: or ForceCommand declaration. When used with <em>ChrootDirectory</em>, the
287: internal sftp server requires no special configuration of files
288: inside the chroot environment. Please refer to
289: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>
290: for more information.</li>
291: <li>Added a protocol extension method "posix-rename@openssh.com" for
292: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>
293: to perform POSIX atomic rename() operations.</li>
294: <li>Removed the fixed limit of 100 file handles in
295: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>.
296: The server will now dynamically allocate handles up to the number of
297: available file descriptors.</li>
298: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
299: will now skip generation of SSH protocol 1 ephemeral server
300: keys when in inetd mode and protocol 2 connections are negotiated.
301: This speeds up protocol 2 connections to inetd-mode servers that
302: also allow Protocol 1.</li>
303: <li>Accept the <em>PermitRootLogin</em> directive in a
304: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>
305: <em>Match</em>
306: block. Allows for, e.g. permitting root only from the local
307: network.</li>
308: <li>Reworked
309: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
310: argument splitting and escaping to be more
311: internally consistent (i.e. between sftp commands) and more
312: consistent with
313: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sh&sektion=1">sh(1)</a>.
314: Please note that this will change the
315: interpretation of some quoted strings, especially those with
316: embedded backslash escape sequences.</li>
317: <li>Support <em>"Banner=none"</em> in
318: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>
319: to disable sending of a
320: pre-login banner (e.g. in a <em>Match</em> block).</li>
321: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
322: <em>ProxyCommand</em>s are now executed with $SHELL rather than
323: /bin/sh.</li>
324: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)'s</a>
325: <em>ConnectTimeout</em> option is now applied to both the TCP
326: connection and the SSH banner exchange (previously it just covered
327: the TCP connection). This allows callers of
328: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
329: to better detect
330: and deal with stuck servers that accept a TCP connection but don't
331: progress the protocol, and also makes <em>ConnectTimeout</em> useful for
332: connections via a <em>ProxyCommand</em>.</li>
333: <li>Many new regression tests, including interop tests against PuTTY's
334: plink</li>
335: </ul></li>
336: <li>The following significant bugs have been fixed in this release:
337: <ul>
338: <li>SSH2_MSG_UNIMPLEMENTED packets did not correctly reset the client
339: keepalive logic, causing disconnections on servers that did not
340: explicitly implement "keepalive@openssh.com".</li>
341: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
342: used the obselete SIG DNS RRtype for host keys in DNS,
343: instead of the current standard RRSIG.</li>
344: <li>Correctly drain ACKs when a
345: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
346: upload write fails midway,
347: avoids a fatal() exit from what should be a recoverable condition.</li>
348: <li>Fixed packet size advertisements. Previously TCP and agent
349: forwarding incorrectly advertised the channel window size as the
350: packet size, causing fatal errors under some conditions.</li>
351: <li><em>Many more bugfixes. Please refer to the
352: <a href="http://www.openssh.com/txt/release-4.8">Release Notes</a>.</em>
353: </li>
354: </ul></li>
1.1 david 355: </ul>
356: <p>
357:
358: <li>Over 4,900 ports, minor robustness improvements in package tools.
359: <li>Many pre-built packages for each architecture:
360: <table border=0 cellspacing=0 cellpadding=2 width="95%">
361: <tr>
362: <td valign="top" width="33%">
363: <ul>
364: <li>i386: XXXX
365: <li>sparc64: XXXX
366: <li>alpha: XXXX
367: <li>sh: XXX
368: </ul></td><td valign=top width="33%"><ul>
369: <li>amd64: XXXX
370: <li>powerpc: XXXX
371: <li>sparc: XXXX
372: <li>m68k: XXXX
373: </ul></td><td valign=top width="33%"><ul>
374: <li>arm: XXXX
375: <li>hppa: XXXX
376: <li>vax: XXX
377: </ul></td></tr></table>
378: Some highlights:
379: <ul>
1.2 jasper 380: <li>Gnome 2.20.3.
381: <li>GNUstep 1.14.2.
382: <li>Mozilla Firefox 2.0.0.12.
383: <li>Mozilla Thunderbird 2.0.0.12.
384: <li>GHC 6.6.1 (amd64 and i386 only).
385: <li>MySQL 5.0.51a.
386: <li>OpenMotif 2.3.0.
387: <li>OpenOffice.org 2.3.1.
388: <li>PostgreSQL 8.2.6.
389: <li>Xfce 4.4.2.
1.1 david 390: <li>...
391: </ul>
392: <p>
393:
394: <li>As usual, steady improvements in manual pages and other documentation.
395: <p>
396:
397: <li>The system includes the following major components from outside suppliers:
398: <ul>
1.4 matthieu 399: <li>Xenocara (based on X.Org 7.3 + patches, freetype 2.3.5, fontconfig
1.1 david 400: 2.4.2, Mesa 7.0.2, xterm 232 and more)
401: <li>Gcc 2.95.3
402: (+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">patches</a>)
403: and 3.3.5
404: (+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">patches</a>)
405: <li>Perl 5.8.8 (+ patches)
406: <li>Our improved and secured version of Apache 1.3, with SSL/TLS and DSO support
407: <li>OpenSSL 0.9.7j (+ patches)
408: <li>Groff 1.15
409: <li>Sendmail 8.14.1, with libmilter
410: <li>Bind 9.4.2 (+ patches)
411: <li>Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
412: <li>Sudo 1.6.9p12
413: <li>Ncurses 5.2
414: <li>Latest KAME IPv6
415: <li>Heimdal 0.7.2 (+ patches)
416: <li>Arla 0.35.7
417: <li>Binutils 2.15 (+ patches)
418: <li>Gdb 6.3 (+ patches)
419: </ul>
420: <p>
421:
422: </ul>
423:
424: <a name="install"></a>
425: <hr>
426: <p>
427: <h3><font color="#0000e0">How to install</font></h3>
428: <p>
429: Following this are the instructions which you would have on a piece of
430: paper if you had purchased a CDROM set instead of doing an alternate
431: form of install. The instructions for doing an FTP (or other style
432: of) install are very similar; the CDROM instructions are left intact
433: so that you can see how much easier it would have been if you had
434: purchased a CDROM instead.
435: <p>
436:
437: <hr>
438: Please refer to the following files on the three CDROMs or FTP mirror for
439: extensive details on how to install OpenBSD 4.3 on your machine:
440: <p>
441: <ul>
442: <li>CD1:4.3/i386/INSTALL.i386
443: <p>
444: <li>CD2:4.3/amd64/INSTALL.amd64
445: <li>CD2:4.3/macppc/INSTALL.macppc
446: <p>
447: <li>CD3:4.3/sparc64/INSTALL.sparc64
448: <p>
449: <li>FTP:.../OpenBSD/4.3/alpha/INSTALL.alpha
450: <li>FTP:.../OpenBSD/4.3/armish/INSTALL.armish
451: <li>FTP:.../OpenBSD/4.3/hp300/INSTALL.hp300
452: <li>FTP:.../OpenBSD/4.3/hppa/INSTALL.hppa
453: <li>FTP:.../OpenBSD/4.3/landisk/INSTALL.landisk
454: <li>FTP:.../OpenBSD/4.3/mac68k/INSTALL.mac68k
455: <li>FTP:.../OpenBSD/4.3/mvme68k/INSTALL.mvme68k
456: <li>FTP:.../OpenBSD/4.3/mvme88k/INSTALL.mvme88k
1.27 david 457: <li>FTP:.../OpenBSD/4.3/sgi/INSTALL.sgi
1.1 david 458: <li>FTP:.../OpenBSD/4.3/sparc/INSTALL.sparc
459: <li>FTP:.../OpenBSD/4.3/vax/INSTALL.vax
460: <li>FTP:.../OpenBSD/4.3/zaurus/INSTALL.zaurus
461: </ul>
462: <hr>
463:
464: <p>
465: Quick installer information for people familiar with OpenBSD, and the
466: use of the "disklabel -E" command. If you are at all confused when
467: installing OpenBSD, read the relevant INSTALL.* file as listed above!
468: <p>
469:
470: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
471: <ul>
472: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
473: release is on CD1. If your BIOS does not support booting from CD, you will need
474: to create a boot floppy to install from. To create a boot floppy write
475: <i>CD1:4.3/i386/floppy43.fs</i> to a floppy and boot via the floppy drive.
476:
477: <p>
478: Use <i>CD1:4.3/i386/floppyB43.fs</i> instead for greater SCSI controller
479: support, or <i>CD1:4.3/i386/floppyC43.fs</i> for better laptop support.
480:
481: <p>
482: If you can't boot from a CD or a floppy disk,
483: you can install across the network using PXE as described in
484: the included INSTALL.i386 document.
485:
486: <p>
487: If you are planning on dual booting OpenBSD with another OS, you will need to
488: read INSTALL.i386.
489:
490: <p>
491: To make a boot floppy under MS-DOS, use the "rawrite" utility located
492: at <i>CD1:4.3/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
493: use the
494: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>
495: utility. The following is an example usage of
496: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>,
497: where the device could be "floppy", "rfd0c", or
498: "rfd0a".
499:
500: <ul><pre>
501: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
502: </pre></ul>
503:
504: <p>
505: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
506: your install will most likely fail. For more information on creating a boot
507: floppy and installing OpenBSD/i386 please refer to
508: <a href="faq/faq4.html#MkFlop">FAQ 4.3.1</a>.
509: </ul>
510:
511: <p>
512: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
513: <ul>
514: The 4.3 release of OpenBSD/amd64 is located on CD2.
515: Boot from the CD to begin the install - you may need to adjust
516: your BIOS options first.
517: If you can't boot from the CD, you can create a boot floppy to install from.
518: To do this, write <i>CD2:4.3/amd64/floppy43.fs</i> to a floppy, then
519: boot from the floppy drive.
520:
521: <p>
522: If you can't boot from a CD or a floppy disk,
523: you can install across the network using PXE as described in the included
524: INSTALL.amd64 document.
525:
526: <p>
527: If you are planning to dual boot OpenBSD with another OS, you will need to
528: read INSTALL.amd64.
529: </ul>
530:
531: <p>
532: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
533: <ul>
534: Put CD2 in your CDROM drive and poweron your machine while holding down the
535: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
536:
537: <p>
538: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
539: /4.3/macppc/bsd.rd</i>
540: </ul>
541:
542: <p>
543: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
544: <ul>
545: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
546:
547: <p>
548: If this doesn't work, or if you don't have a CDROM drive, you can write
549: <i>CD3:4.3/sparc64/floppy43.fs</i> or <i>CD3:4.3/sparc64/floppyB43.fs</i>
550: (depending on your machine) to a floppy and boot it with <i>boot
551: floppy</i>. Refer to INSTALL.sparc64 for details.
552:
553: <p>
554: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
555: will most likely fail.
556:
557: <p>
558: You can also write <i>CD3:4.3/sparc64/miniroot43.fs</i> to the swap partition on
559: the disk and boot with <i>boot disk:b</i>.
560:
561: <p>
562: If nothing works, you can boot over the network as described in INSTALL.sparc64.
563: </ul>
564:
565: <p>
566: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
567: <ul>
568: <p>Write <i>FTP:4.3/alpha/floppy43.fs</i> or
569: <i>FTP:4.3/alpha/floppyB43.fs</i> (depending on your machine) to a diskette and
570: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
571:
572: <p>
573: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
574: will most likely fail.
575:
576: </ul>
577:
578: <p>
579: <h3><font color="#e00000">OpenBSD/armish:</font></h3>
580: <ul>
581: <p>
582: After connecting a serial port, Thecus can boot directly from the network
583: either tftp or http. Configure the network using fconfig, reset,
584: then load bsd.rd, see INSTALL.armish for specific details.
585: IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
586: and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
587: then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
588: More details are available in INSTALL.armish.
589: </ul>
590:
591: <p>
592: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
593: <ul>
594: <p>
595: Boot over the network by following the instructions in INSTALL.hp300.
596: </ul>
597:
598: <p>
599: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
600: <ul>
601: <p>
602: Boot over the network by following the instructions in INSTALL.hppa or the
603: <a href="hppa.html#install">hppa platform page</a>.
604: </ul>
605:
606: <p>
607: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
608: <ul>
609: <p>
610: Write <i>miniroot43.fs</i> to the start of the CF
611: or disk, and boot normally.
612: </ul>
613:
614: <p>
615: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
616: <ul>
617: <p>
618: Boot MacOS as normal and extract the Macside "BSD/Mac68k Booter" utility from
619: <i>FTP:4.3/mac68k/utils</i> onto your hard disk. Configure the "BSD/Mac68k
620: Booter" with the location of your bsd.rd kernel and boot into the installer.
621: Refer to the instructions in INSTALL.mac68k for more details.
622: </ul>
623:
624: <p>
625: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
626: <ul>
627: <p>
628: You can create a bootable installation tape or boot over the network.<br>
629: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
630: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
631: for more details.
632: </ul>
633:
634: <p>
635: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
636: <ul>
637: <p>
638: You can create a bootable installation tape or boot over the network.<br>
639: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
640: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
641: for more details.
642: </ul>
643:
644: <p>
645: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
646: <ul>
647: Boot from one of the provided install ISO images, using one of the two
648: commands listed below, depending on the version of your ROM.
649:
650: <ul><pre>
651: ok <strong>boot cdrom 4.3/sparc/bsd.rd</strong>
652: or
653: > <strong>b sd(0,6,0)4.3/sparc/bsd.rd</strong>
654: </pre></ul>
655:
656: <p>
657: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
658: To do so you need to write <i>floppy43.fs</i> to a floppy.
659: For more information see <a href="faq/faq4.html#MkFlop">FAQ 4.3.1</a>.
660: To boot from the floppy use one of the two commands listed below,
661: depending on the version of your ROM.
662:
663: <ul><pre>
664: ok <strong>boot floppy</strong>
665: or
666: > <strong>b fd()</strong>
667: </pre></ul>
668:
669: <p>
670: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
671: will most likely fail.
672:
673: <p>
674: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
675: setup a bootable tape, or install via network, as told in the
676: INSTALL.sparc file.
677: </ul>
678:
679: <p>
680: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
681: <ul>
682: <p>
683: Burn cd43.iso on a CD-R, put it in the CD drive of your machine and
684: select <i>Install System Software</i> from the System Maintenance menu.
685:
686: <p>
687: If your machine doesn't have a CD drive, you can
688: setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd".
689: Refer to the instructions in INSTALL.sgi for more details.
690: </ul>
691:
692: <p>
693: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
694: <ul>
695: Boot over the network via mopbooting as described in INSTALL.vax.
696: </ul>
697:
698: <p>
699: <h3><font color="#e00000">OpenBSD/zaurus:</font></h3>
700: <ul>
701: <p>
702: Using the Linux built-in graphical ipkg installer, install the
703: openbsd43_arm.ipk package. Reboot, then run it. Read INSTALL.zaurus
704: for a few important details.
705: </ul>
706:
707: <p>
708: <h3><font color="#e00000">Notes about the source code:</font></h3>
709: <ul>
710: src.tar.gz contains a source archive starting at /usr/src. This file
711: contains everything you need except for the kernel sources, which are
712: in a separate archive. To extract:
713: <p>
714: <ul><pre>
715: # <strong>mkdir -p /usr/src</strong>
716: # <strong>cd /usr/src</strong>
717: # <strong>tar xvfz /tmp/src.tar.gz</strong>
718: </pre></ul>
719: <p>
720: sys.tar.gz contains a source archive starting at /usr/src/sys.
721: This file contains all the kernel sources you need to rebuild kernels.
722: To extract:
723: <p>
724: <ul><pre>
725: # <strong>mkdir -p /usr/src/sys</strong>
726: # <strong>cd /usr/src</strong>
727: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
728: </pre></ul>
729: <p>
730: Both of these trees are a regular CVS checkout. Using these trees it
731: is possible to get a head-start on using the anoncvs servers as
732: described <a href="anoncvs.html">here</a>.
733: Using these files
734: results in a much faster initial CVS update than you could expect from
735: a fresh checkout of the full OpenBSD source tree.
736: <p>
737: </ul>
738:
739: <a name="upgrade"></a>
740: <hr>
741: <p>
742: <h3><font color="#0000e0">How to upgrade</font></h3>
743: <p>
744: If you already have an OpenBSD 4.2 system, and do not want to reinstall,
745: upgrade instructions and advice can be found in the
746: <a href="faq/upgrade43.html">Upgrade Guide</a>.
747:
748: <a name="ports"></a>
749: <hr>
750: <p>
751: <h3><font color="#0000e0">Ports Tree</font></h3>
752: <p>
753: A ports tree archive is also provided. To extract:
754: <p>
755: <ul><pre>
756: # <strong>cd /usr</strong>
757: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
758: # <strong>cd ports</strong>
759: </pre></ul>
760: <p>
761: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
762: read the <a href="ports.html">ports</a> page
763: if you know nothing about ports
764: at this point. This text is not a manual of how to use ports.
765: Rather, it is a set of notes meant to kickstart the user on the
766: OpenBSD ports system.
767: <p>
768: The <i>ports/</i> directory represents a CVS (see the manpage for
769: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
770: cvs(1)</a> if
771: you aren't familiar with CVS) checkout of our ports. As with our complete
772: source tree, our ports tree is available via anoncvs. So, in
773: order to keep current with it, you must make the <i>ports/</i> tree
774: available on a read-write medium and update the tree with a command
775: like:
776: <p>
777: <ul><pre>
778: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_4_3</strong>
779: </pre></ul>
780: <p>
781: [Of course, you must replace the local directory and server name here
782: with the location of your ports collection and a nearby anoncvs
783: server.]
784: <p>
785: Note that most ports are available as packages through FTP. Updated
786: packages for the 4.3 release will be made available if problems arise.
787: <p>
788: If you're interested in seeing a port added, would like to help out, or just
789: would like to know more, the mailing list ports@openbsd.org is a good
790: place to know.
791: <p>
792:
793: <hr>
794: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
795: alt="OpenBSD"></a>
796: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
797: <br><small>
1.49 ! krw 798: $OpenBSD: 43.html,v 1.48 2008/03/16 21:08:13 krw Exp $
1.1 david 799: </small>
800:
801: </body>
802: </html>