Annotation of www/43.html, Revision 1.94
1.1 david 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
1.84 deraadt 4: <title>OpenBSD 4.3</title>
1.1 david 5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
6: <meta name="description" content="OpenBSD 4.3">
7: <meta name="copyright" content="This document copyright 2008 by OpenBSD.">
1.94 ! tj 8: <meta name="viewport" content="width=device-width, initial-scale=1">
! 9: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.89 sthen 10: <link rel="canonical" href="http://www.openbsd.org/43.html">
1.1 david 11: </head>
12:
13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
14:
1.94 ! tj 15: <h2>
1.1 david 16: <a href="index.html">
1.94 ! tj 17: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
! 18: <font color="#e00000">4.3</font>
! 19: </h2>
1.86 deraadt 20: <p>
1.1 david 21:
1.26 david 22: <a href="images/Cryptonaut.jpg">
1.84 deraadt 23: <img align="left" width="227" height="343" hspace="24"
1.24 deraadt 24: src="images/Cryptonaut.jpg" alt="OpenBSD 4.3 logo"></a>
1.81 deraadt 25: Released May 1, 2008<br>
1.1 david 26: Copyright 1997-2008, Theo de Raadt.<br>
1.16 deraadt 27: <font color="#e00000">ISBN 978-0-9784475-1-9</font>
1.1 david 28: <br>
1.91 deraadt 29: 4.3 Song: <a href="lyrics.html#43">"Home to Hypocrisy"</a>
1.1 david 30: <p>
31: <ul>
1.88 deraadt 32: <li>Order a CDROM from our <a href="https://openbsdstore.com">ordering system</a>.
1.1 david 33: <li>See the information on <a href="ftp.html">The FTP page</a> for
34: a list of mirror machines.
35: <li>Go to the <font color="#e00000">pub/OpenBSD/4.3/</font> directory on
36: one of the mirror sites.
37: <li>Have a look at <a href="errata43.html">The 4.3 Errata page</a> for a list
38: of bugs and workarounds.
39: <li>See a <a href="plus43.html">detailed log of changes</a> between the
40: 4.2 and 4.3 releases.
41: </ul>
1.94 ! tj 42: <p>
! 43: All applicable copyrights and credits are in the src.tar.gz,
! 44: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
! 45: files fetched via ports.tar.gz.
1.1 david 46: <br clear=all>
1.94 ! tj 47:
! 48: <hr>
1.1 david 49:
50: <a name="new"></a>
51: <p>
52: <h3><font color="#0000e0">What's New</font></h3>
53: <p>
54: This is a partial list of new features and systems included in OpenBSD 4.3.
55: For a comprehensive list, see the <a href="plus43.html">changelog</a> leading
56: to 4.3.
57: <p>
58:
59: <ul>
60:
61: <li>New/extended platforms:
62: <ul>
1.41 miod 63: <li><a href="sparc64.html">OpenBSD/sparc64</a><br>
1.43 kettenis 64: SMP support. This should work on all supported systems,
65: with the exception of the Sun Enterprise 10000.
1.41 miod 66: <li><a href="hppa.html">OpenBSD/hppa</a><br>
1.3 kettenis 67: K-class servers like the K200 and K410 are supported now.
1.41 miod 68: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
69: SMP support on MVME188 and MVME188A systems.<br>
70: 88110 processor, and thus MVME197LE/SP/DP boards, are supported now.
1.74 jsing 71: <li><a href="sgi.html">OpenBSD/sgi</a><br>
72: Contains many new drivers, however the kernel requires an
73: important errata fix.
1.1 david 74: </ul>
75: <p>
76:
77: <li>Improved hardware support, including:
78: <ul>
1.93 sthen 79: <li>The <a href="http://man.openbsd.org/?query=bge&sektion=4">bge(4)</a> driver now supports BCM5906/BCM5906M 10/100 and BCM5755 10/100/Gigabit Ethernet devices.
80: <li>The <a href="http://man.openbsd.org/?query=cas&sektion=4">cas(4)</a> driver now supports Cassini+ 10/100/Gigabit Ethernet devices.
81: <li>The <a href="http://man.openbsd.org/?query=em&sektion=4">em(4)</a> driver now supports ICH9 10/100 and 10/100/Gigabit Ethernet devices.
82: <li>The <a href="http://man.openbsd.org/?query=gem&sektion=4">gem(4)</a> driver now supports the onboard 1000base-SX interface on the Sun Fire V880 server.
83: <li>The <a href="http://man.openbsd.org/?query=ixgb&sektion=4">ixgb(4)</a> driver now supports the Sun 10Gb PCI-X Ethernet devices.
84: <li>The <a href="http://man.openbsd.org/?query=msk&sektion=4">msk(4)</a> driver now supports Yukon FE+ 10/100 and Yukon Supreme 10/100/Gigabit Ethernet devices.
85: <li>The <a href="http://man.openbsd.org/?query=nfe&sektion=4">nfe(4)</a> driver now supports MCP73, MCP77 and MCP79 10/100/Gigabit Ethernet devices.
86: <li>The <a href="http://man.openbsd.org/?query=ral&sektion=4">ral(4)</a> driver now supports RT2800 based wireless network devices.
87: <li>The <a href="http://man.openbsd.org/?query=cmpci&sektion=4">cmpci(4)</a> driver now supports CMI8768 based audio adapters.
88: <li>The <a href="http://man.openbsd.org/?query=it&sektion=4">it(4)</a> driver now supports ITE IT8705F/8712F/8716F/8718F/8726F and SiS SiS950 ICs. Watchdog timer functionality added.
89: <li>The <a href="http://man.openbsd.org/?query=mfi&sektion=4">mfi(4)</a> driver now supports Dell CERC6/PERC6 and LSI SAS1078 RAID controllers.
90: <li>The <a href="http://man.openbsd.org/?query=viapm&sektion=4">viapm(4)</a> driver now supports the VIA VT8237S south bridges SMBus controller.
1.35 jsg 91: <li>Support for hotplugging ExpressCard devices has been added.
1.93 sthen 92: <li>New <a href="http://man.openbsd.org/?query=amdpcib&sektion=4&arch=amd64">amdpcib(4)</a> driver for the AMD-8111 series LPC bridge and timecounter on amd64.
93: <li>New <a href="http://man.openbsd.org/?query=pctr&sektion=4&arch=amd64">pctr(4)</a> driver for the CPU performance counters on amd64.
94: <li>New <a href="http://man.openbsd.org/?query=bwi&sektion=4">bwi(4)</a> driver for the Broadcom AirForce IEEE 802.11b/g wireless network device.
95: <li>New <a href="http://man.openbsd.org/?query=envy&sektion=4">envy(4)</a> driver for the VIA Envy24 audio device.
96: <li>New <a href="http://man.openbsd.org/?query=et&sektion=4">et(4)</a> driver for the Agere/LSI ET1310 10/100/Gigabit Ethernet device.
97: <li>New <a href="http://man.openbsd.org/?query=etphy&sektion=4">etphy(4)</a> driver for the Agere/LSI ET1011 TruePHY Gigabit Ethernet PHY.
98: <li>New <a href="http://man.openbsd.org/?query=amdpcib&sektion=4&arch=i386">amdpcib(4)</a> driver for the AMD-8111 series LPC bridge and timecounter on i386.
99: <li>New <a href="http://man.openbsd.org/?query=glxpcib&sektion=4&arch=i386">glxpcib(4)</a> driver for the AMD CS5536 PCI-ISA bridge with timecounter, watchdog timer, and GPIO on i386.
100: <li>New <a href="http://man.openbsd.org/?query=iwn&sektion=4">iwn(4)</a> driver for the Intel Wireless WiFi Link 4965AGN IEEE 802.11a/b/g/Draft-N wireless network device.
101: <li>New <a href="http://man.openbsd.org/?query=msts&sektion=4">msts(4)</a> line discipline to interface the Meinberg Standard Time String devices to provide a timedelta sensor.
102: <li>New <a href="http://man.openbsd.org/?query=gbe&sektion=4&arch=sgi">gbe(4)</a> driver for the SGI Graphics Back End (GBE) Frame Buffer on sgi.
103: <li>New <a href="http://man.openbsd.org/?query=mkbc&sektion=4&arch=sgi">mkbc(4)</a> driver for the Moosehead PS/2 Controller on sgi.
104: <li>New <a href="http://man.openbsd.org/?query=power&sektion=4&arch=sgi">power(4)</a> driver for the power button on sgi.
105: <li>New <a href="http://man.openbsd.org/?query=ecadc&sektion=4&arch=sparc64">ecadc(4)</a> driver for the Environmental Monitoring Subsystem temperature sensor on sparc64.
106: <li>New <a href="http://man.openbsd.org/?query=tda&sektion=4&arch=sparc64">tda(4)</a> driver for the fan controller on the Sun Blade 1000/2000, making these machines much less noisy.
107: <li>New <a href="http://man.openbsd.org/?query=spdmem&sektion=4">spdmem(4)</a> driver retrieves information about memory modules.
108: <li>New <a href="http://man.openbsd.org/?query=thmc&sektion=4">thmc(4)</a> driver for the TI THMC50, Analog ADM1022/1028 temperature sensor.
109: <li>New <a href="http://man.openbsd.org/?query=uchcom&sektion=4">uchcom(4)</a> driver for the WinChipHead CH341/340 based USB serial adapter.
110: <li>New <a href="http://man.openbsd.org/?query=umbg&sektion=4">umbg(4)</a> driver for the Meinberg Funkuhren USB5131 radio clock to provide
1.69 mbalmer 111: a timedelta sensor.
1.93 sthen 112: <li>New <a href="http://man.openbsd.org/?query=upgt&sektion=4">upgt(4)</a> driver for the Conexant/Intersil PrismGT SoftMAC USB IEEE 802.11b/g wireless network device.
113: <li>New <a href="http://man.openbsd.org/?query=wbng&sektion=4">wbng(4)</a> driver for the Winbond W83793G temperature, voltage, and fan sensor.
114: <li>New <a href="http://man.openbsd.org/?query=wbsio&sektion=4">wbsio(4)</a> driver for the Winbond LPC Super I/O ICs.
115: <li>New <a href="http://man.openbsd.org/?query=adl&sektion=4">adl(4)</a> driver for the Andigilog aSC7621 temperature, voltage, and fan sensor.
116: <li>The <a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a> driver now supports the (non-PCI) NCR 53c720/770 in big-endian mode.
117: <li>New <a href="http://man.openbsd.org/?query=lmn&sektion=4">lmn(4)</a> driver for the National Semiconductor LM93 sensor.
1.1 david 118: </ul>
119: <p>
120:
121: <li>New tools:
122: <ul>
1.93 sthen 123: <li><a href="http://man.openbsd.org/?query=snmpd&sektion=8">snmpd(8)</a>, implementing the Simple Network Management Protocol.
124: <li>The <a href="http://man.openbsd.org/?query=snmpctl&sektion=8">snmpctl(8)</a> program controls the SNMP daemon.
125: <li>The <a href="http://man.openbsd.org/?query=pcidump&sektion=8">pcidump(8)</a> utility displays the device address, vendor, and product name of PCI devices.
126: <li><a href="http://man.openbsd.org/?query=ldattach&sektion=8">ldattach(8)</a> is used to attach a line discipline to a serial line to allow for in-kernel processing of the received and/or sent data.
1.1 david 127: </ul>
128: <p>
129:
130: <li>New functionality:
131: <ul>
1.93 sthen 132: <li><a href="http://man.openbsd.org/?query=eeprom&sektion=8&arch=sparc">eeprom(8)</a> is now able to display the OpenPROM device tree on systems that have it.
1.7 jasper 133: <li>Support for X11 on sgi has been added.
1.93 sthen 134: <li>The periodic <a href="http://man.openbsd.org/?query=security&sektion=8">security(8)</a> reports now include package changes.
135: <li>The <a href="http://man.openbsd.org/?query=cmpci&sektion=4">cmpci(4)</a> driver now supports multichannel audio playback if the hardware supports it.
136: <li>The <a href="http://man.openbsd.org/?query=auvia&sektion=4">auvia(4)</a> driver now supports multichannel audio playback if the hardware supports it.
137: <li>The <a href="http://man.openbsd.org/?query=auich&sektion=4">auich(4)</a> driver now supports recording from the microphone as well as full-duplex mode.
138: <li>The <a href="http://man.openbsd.org/?query=eso&sektion=4">eso(4)</a> driver now supports recording as well as full-duplex mode.
1.31 otto 139: <li>The ffs layer is now 64-bit disk block address clean.
140: This means that disks, partitions and filesystems larger than 2TB are
1.32 sobrado 141: now supported, with the exception of statfs(2) and quotas.
1.45 krw 142: <li>DMA is now enabled for 1-sector devices such as flash drives, providing
143: significant speed improvement.
144: <li>Sparc and Sparc64 disklabels now provide automatic recognition of ext2fs
145: partitions.
146: <li>Filesystems on USB devices are automatically dismounted if the device is
147: disconnected.
1.93 sthen 148: <li>The configuration of <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> load balancing has
1.46 mpf 149: been vastly simplified.
1.93 sthen 150: <li><a href="http://man.openbsd.org/?query=fstab&sektion=5">
1.58 jj 151: fstab(5)</a> entries referring to non-existent mount points are now
1.47 krw 152: ignored, allowing subsequent entries to be processed.
1.50 sthen 153: <li>Additional configuration files can now be included in
1.93 sthen 154: <a href="http://man.openbsd.org/?query=pf.conf&sektion=5">pf.conf(5)</a>.
155: <li><a href="http://man.openbsd.org/?query=sppp&sektion=4&format=html">sppp(4)</a> now has IPv6 support.
156: <li><a href="http://man.openbsd.org/?query=ipsec.conf&sektion=5">ipsec.conf(5)</a> now supports defining 192 and 256 bit keysizes for AES.
1.1 david 157: </ul>
158: <p>
159:
160: <li>Assorted improvements and code cleanup:
161: <ul>
1.93 sthen 162: <li>Improved support for an <a href="http://man.openbsd.org/?query=lkm&sektion=4">lkm(4)</a> subsystem on amd64.
163: <li><a href="http://man.openbsd.org/?query=ossaudio&sektion=3">ossaudio(3)</a> received several bug fixes and enhancements including but not limited to improved recording and full-duplex support.
164: <li><a href="http://man.openbsd.org/?query=audio&sektion=4">audio(4)</a> received several bug fixes and enhancements including but not limited to improved recording and full-duplex support.
165: <li><a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a> was heavily modified, mostly to improve support for parallel build.
1.22 espie 166: Parallel builds now run commands in the same way the sequential builds do,
167: and the output from commands is more readable.
168: A large part of the source tree, xenocara, and quite a few ports now build
169: correctly with <code>make -j</code>.
1.93 sthen 170: <li><a href="http://man.openbsd.org/?query=rcs&sektion=1">rcs</a> tools improvements and bug fixes.
1.36 claudio 171: <li>RTM_VERSION was increased so that all routing messages could be modified
172: to include additional fields for upcoming networking features.
1.93 sthen 173: <li><a href="http://man.openbsd.org/?query=sendbug&sektion=1">sendbug(1)</a>
1.42 ray 174: has stricter comment parsing, to avoid mangling diffs.
1.93 sthen 175: <li><a href="http://man.openbsd.org/?query=umass&sektion=4">
1.45 krw 176: umass(4)</a> devices no longer detect bogus LUNs.
1.93 sthen 177: <li>USB<a href="http://man.openbsd.org/?query=st&sektion=4">
1.47 krw 178: st(4)</a> devices can now successfully disconnect.
179: <li>More deviant umass devices accommodated.
1.93 sthen 180: <li><a href="http://man.openbsd.org/?query=svnd&sektion=4">
1.48 krw 181: svnd(4)</a> devices now work on block devices.
1.93 sthen 182: <li><a href="http://man.openbsd.org/?query=disklabel&sektion=8">
1.48 krw 183: disklabel(8)</a> is now aware of NTFS partitions.
1.93 sthen 184: <li><a href="http://man.openbsd.org/?query=raidctl&sektion=8">
1.48 krw 185: raidctl(8)</a> now correctly handles trailing whitespace in configuration files.
1.93 sthen 186: <li><a href="http://man.openbsd.org/?query=mt&sektion=1">
1.48 krw 187: mt(1)</a> no longer triggers panics when processing the 'rewoffl' command.
1.93 sthen 188: <li><a href="http://man.openbsd.org/?query=raid&sektion=4">
1.48 krw 189: raid(4)</a> devices no longer hang when searching for components during boot.
1.93 sthen 190: <li><a href="http://man.openbsd.org/?query=sd&sektion=4">
1.48 krw 191: sd(4)</a> devices no longer receive spurious SYNCHRONIZE CACHE commands that
192: confuse some hardware.
1.93 sthen 193: <li><a href="http://man.openbsd.org/?query=sd&sektion=4">
1.58 jj 194: sd(4)</a> no longer claim that SYNCHRONIZE CACHE commands are 16 bytes long when they
1.48 krw 195: are actually 10 bytes. Some devices took this too literally.
1.93 sthen 196: <li><a href="http://man.openbsd.org/?query=dhcpd&sektion=8">
1.48 krw 197: dhcpd(8)</a> now always issues packets equal or larger than the minimum IP MTU.
1.93 sthen 198: <li>The <a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>
1.49 krw 199: -E mode does not allow manual editing of the 'c' partition, which
200: is always set to cover the entire disk.
1.93 sthen 201: <li>The <a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>
1.49 krw 202: -E mode does not allow changing the cpg value of a partition.
1.93 sthen 203: <li>The <a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>
1.49 krw 204: -E mode command 'r' now displays the list of free chunks on the disk.
1.93 sthen 205: <li>The <a href="http://man.openbsd.org/?query=disklabel&sektion=8">disklabel(8)</a>
1.49 krw 206: -E mode no longer permits assigning arbitrary sizes to FS_BOOT and FS_UNUSED
207: partitions.
1.93 sthen 208: <li>The <a href="http://man.openbsd.org/?query=bge&sektion=4">bge(4)</a> driver problems receiving jumbo frames have been resolved.
1.55 deraadt 209: <li>Many dangerous unsigned comparisons with -1 when checking the
1.49 krw 210: results of read and write calls have been eliminated.
1.93 sthen 211: <li>The new M_ZERO flag for <a href="http://man.openbsd.org/?query=malloc&sektion=9">malloc(9)</a>
1.49 krw 212: replaces many malloc+bzero/memset combinations, fixing a number of bugs
213: in memory initialization and shrinking the kernel.
1.93 sthen 214: <li><a href="http://man.openbsd.org/?query=dhcpd&sektion=8">
1.54 krw 215: dhcpd(8)</a> now correctly constructs response packets that use the overflow buffers to store options.
216: <li>SCSI drivers are more reliable in MP machines due to better locking
217: around command completion.
218: <li>TCP responses to highly fragmented packets are now constructed without
219: risking corruption of kernel memory.
1.58 jj 220: <li>Sockets now allow 4095 multicast group memberships.
1.1 david 221: </ul>
222: <p>
223:
224: <li>Install/Upgrade process changes:
225: <ul>
1.44 krw 226: <li>All platforms now have serial console support when installing.
227: <li>Serial console speed is detected and appropriate /etc/ttys entries
228: automatically created.
1.55 deraadt 229: <li><a href="vax.html">OpenBSD/vax</a> now also has both kinds of install ISO CD images.
1.54 krw 230: <li>DNS server addresses are remembered if an install is restarted.
1.74 jsing 231: <li><a href="sgi.html">OpenBSD/sgi</a> can now be installed using the glass console.
1.1 david 232: </ul>
233: <p>
234:
235: <li>OpenBGPD 4.3:
236: <ul>
1.39 deraadt 237: <li>Correctly handle prefixes which would cause a routing loop.
1.93 sthen 238: <li><a href="http://man.openbsd.org/?query=bgpctl&sektion=8">bgpctl</a>'s
1.51 sobrado 239: detailed RIB output shows additional attributes like extended
1.36 claudio 240: communities or the cluster id list.
1.1 david 241: </ul>
242: <p>
243:
244: <li>OpenNTPD 4.3:
245: <ul>
1.38 otto 246: <li>Handle IP changes of clients more gracefully.
1.37 otto 247: <li>Log peer and sensor status to syslog if the majority of either is
248: bad, or if a SIGINFO signal is received.
1.38 otto 249: <li>Allow offsetting of time sensors that have a systematic error.
1.1 david 250: </ul>
251: <p>
252:
253: <li>OpenOSPFD 4.3:
254: <ul>
1.40 otto 255: <li>Equal cost multipath support -- don't forget to set the right sysctls.
1.39 deraadt 256: <li>Parser and commandline options are now in sync with bgpd.
1.1 david 257: </ul>
258: <p>
259:
1.30 reyk 260: <li>relayd 4.3:
1.1 david 261: <ul>
1.93 sthen 262: <li><a href="http://man.openbsd.org/?query=hoststated&sektion=8&manpath=OpenBSD+4.2">hoststated(8)</a>/<a href="http://man.openbsd.org/?query=hoststatectl&sektion=8&manpath=OpenBSD+4.2">hoststatectl(8)</a>
1.30 reyk 263: were renamed to
1.93 sthen 264: <a href="http://man.openbsd.org/?query=relayd&sektion=8">relayd(8)</a>/<a href="http://man.openbsd.org/?query=relayctl&sektion=8">relayctl(8)</a>.
265: <li>Improved configuration grammar for <a href="http://man.openbsd.org/?query=relayd.conf&sektion=5">relayd.conf(5)</a>.
266: <li>Allow to send SNMP traps via <a href="http://man.openbsd.org/?query=snmpd&sektion=8">snmpd(8)</a> when host states change.
1.30 reyk 267: <li>Improved support for URL filtering and protocol actions.
268: <li>Added support for UDP-based DNS relaying with request ID randomisation.
269: <li>Various bug fixes, optimisations, and cleanups.
270: <li>Improved reload support.
1.1 david 271: </ul>
272: <p>
273:
274: <li>OpenSSH 4.8:
275: <ul>
1.33 djm 276: <li>New features:
277: <ul>
278: <li>Added
1.93 sthen 279: <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a>
280: support for <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>,
1.33 djm 281: controlled by a new option
282: <em>"ChrootDirectory"</em>. Please refer to
1.93 sthen 283: <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
1.33 djm 284: for details, and
285: please use this feature carefully.</li>
286: <li>Linked
1.93 sthen 287: <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a>
1.33 djm 288: into
1.93 sthen 289: <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>. The internal sftp server is
1.33 djm 290: used when the command <em>"internal-sftp"</em> is specified in a Subsystem
291: or ForceCommand declaration. When used with <em>ChrootDirectory</em>, the
292: internal sftp server requires no special configuration of files
293: inside the chroot environment. Please refer to
1.93 sthen 294: <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
1.33 djm 295: for more information.</li>
296: <li>Added a protocol extension method "posix-rename@openssh.com" for
1.93 sthen 297: <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a>
1.33 djm 298: to perform POSIX atomic rename() operations.</li>
299: <li>Removed the fixed limit of 100 file handles in
1.93 sthen 300: <a href="http://man.openbsd.org/?query=sftp-server&sektion=8">sftp-server(8)</a>.
1.33 djm 301: The server will now dynamically allocate handles up to the number of
302: available file descriptors.</li>
1.93 sthen 303: <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
1.33 djm 304: will now skip generation of SSH protocol 1 ephemeral server
305: keys when in inetd mode and protocol 2 connections are negotiated.
306: This speeds up protocol 2 connections to inetd-mode servers that
307: also allow Protocol 1.</li>
308: <li>Accept the <em>PermitRootLogin</em> directive in a
1.93 sthen 309: <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
1.33 djm 310: <em>Match</em>
311: block. Allows for, e.g. permitting root only from the local
312: network.</li>
313: <li>Reworked
1.93 sthen 314: <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>
1.33 djm 315: argument splitting and escaping to be more
316: internally consistent (i.e. between sftp commands) and more
317: consistent with
1.93 sthen 318: <a href="http://man.openbsd.org/?query=sh&sektion=1">sh(1)</a>.
1.33 djm 319: Please note that this will change the
320: interpretation of some quoted strings, especially those with
321: embedded backslash escape sequences.</li>
322: <li>Support <em>"Banner=none"</em> in
1.93 sthen 323: <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>
1.33 djm 324: to disable sending of a
325: pre-login banner (e.g. in a <em>Match</em> block).</li>
1.93 sthen 326: <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
1.33 djm 327: <em>ProxyCommand</em>s are now executed with $SHELL rather than
328: /bin/sh.</li>
1.93 sthen 329: <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)'s</a>
1.33 djm 330: <em>ConnectTimeout</em> option is now applied to both the TCP
331: connection and the SSH banner exchange (previously it just covered
332: the TCP connection). This allows callers of
1.93 sthen 333: <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
1.33 djm 334: to better detect
335: and deal with stuck servers that accept a TCP connection but don't
336: progress the protocol, and also makes <em>ConnectTimeout</em> useful for
337: connections via a <em>ProxyCommand</em>.</li>
338: <li>Many new regression tests, including interop tests against PuTTY's
1.55 deraadt 339: plink.</li>
1.33 djm 340: </ul></li>
341: <li>The following significant bugs have been fixed in this release:
342: <ul>
343: <li>SSH2_MSG_UNIMPLEMENTED packets did not correctly reset the client
344: keepalive logic, causing disconnections on servers that did not
345: explicitly implement "keepalive@openssh.com".</li>
1.93 sthen 346: <li><a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
1.61 okan 347: used the obsolete SIG DNS RRtype for host keys in DNS,
1.33 djm 348: instead of the current standard RRSIG.</li>
349: <li>Correctly drain ACKs when a
1.93 sthen 350: <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>
1.33 djm 351: upload write fails midway,
352: avoids a fatal() exit from what should be a recoverable condition.</li>
353: <li>Fixed packet size advertisements. Previously TCP and agent
354: forwarding incorrectly advertised the channel window size as the
355: packet size, causing fatal errors under some conditions.</li>
356: <li><em>Many more bugfixes. Please refer to the
357: <a href="http://www.openssh.com/txt/release-4.8">Release Notes</a>.</em>
358: </li>
359: </ul></li>
1.1 david 360: </ul>
361: <p>
362:
363: <li>Over 4,900 ports, minor robustness improvements in package tools.
364: <li>Many pre-built packages for each architecture:
365: <table border=0 cellspacing=0 cellpadding=2 width="95%">
366: <tr>
1.67 deraadt 367: <td valign="top" width="25%">
1.1 david 368: <ul>
1.52 deraadt 369: <li>i386: 4782
1.56 deraadt 370: <li>sparc64: 4613
1.62 deraadt 371: <li>alpha: 4233
1.79 pvalchev 372: <li>sh: 2046
1.67 deraadt 373: </ul></td><td valign=top width="25%"><ul>
1.52 deraadt 374: <li>amd64: 4708
1.57 deraadt 375: <li>powerpc: 4634
1.63 deraadt 376: <li>sparc: 3159
1.73 deraadt 377: <li>m68k: 830
1.67 deraadt 378: </ul></td><td valign=top width="25%"><ul>
1.80 pvalchev 379: <li>arm: 3377
1.65 deraadt 380: <li>hppa: 3971
1.78 pvalchev 381: <li>vax: 296
1.73 deraadt 382: <li>mips64: 1897
1.67 deraadt 383: </ul></td><td valign=top width="25%"><ul>
384: <li>m88k: 27
1.1 david 385: </ul></td></tr></table>
386: Some highlights:
387: <ul>
1.2 jasper 388: <li>Gnome 2.20.3.
389: <li>GNUstep 1.14.2.
1.64 jasper 390: <li>KDE 3.5.8.
1.2 jasper 391: <li>Mozilla Firefox 2.0.0.12.
392: <li>Mozilla Thunderbird 2.0.0.12.
393: <li>MySQL 5.0.51a.
394: <li>OpenMotif 2.3.0.
395: <li>OpenOffice.org 2.3.1.
396: <li>PostgreSQL 8.2.6.
397: <li>Xfce 4.4.2.
1.1 david 398: </ul>
399: <p>
400:
401: <li>As usual, steady improvements in manual pages and other documentation.
402: <p>
403:
404: <li>The system includes the following major components from outside suppliers:
405: <ul>
1.4 matthieu 406: <li>Xenocara (based on X.Org 7.3 + patches, freetype 2.3.5, fontconfig
1.1 david 407: 2.4.2, Mesa 7.0.2, xterm 232 and more)
408: <li>Gcc 2.95.3
1.93 sthen 409: (+ <a href="http://man.openbsd.org/?query=gcc-local&sektion=1">patches</a>)
1.1 david 410: and 3.3.5
1.93 sthen 411: (+ <a href="http://man.openbsd.org/?query=gcc-local&sektion=1">patches</a>)
1.1 david 412: <li>Perl 5.8.8 (+ patches)
413: <li>Our improved and secured version of Apache 1.3, with SSL/TLS and DSO support
414: <li>OpenSSL 0.9.7j (+ patches)
415: <li>Groff 1.15
416: <li>Sendmail 8.14.1, with libmilter
417: <li>Bind 9.4.2 (+ patches)
418: <li>Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
419: <li>Sudo 1.6.9p12
420: <li>Ncurses 5.2
421: <li>Latest KAME IPv6
422: <li>Heimdal 0.7.2 (+ patches)
423: <li>Arla 0.35.7
424: <li>Binutils 2.15 (+ patches)
425: <li>Gdb 6.3 (+ patches)
426: </ul>
427: <p>
428:
429: </ul>
430:
431: <a name="install"></a>
432: <hr>
433: <p>
434: <h3><font color="#0000e0">How to install</font></h3>
435: <p>
436: Following this are the instructions which you would have on a piece of
437: paper if you had purchased a CDROM set instead of doing an alternate
438: form of install. The instructions for doing an FTP (or other style
439: of) install are very similar; the CDROM instructions are left intact
440: so that you can see how much easier it would have been if you had
441: purchased a CDROM instead.
442: <p>
443:
444: <hr>
445: Please refer to the following files on the three CDROMs or FTP mirror for
446: extensive details on how to install OpenBSD 4.3 on your machine:
447: <p>
448: <ul>
449: <li>CD1:4.3/i386/INSTALL.i386
450: <p>
451: <li>CD2:4.3/amd64/INSTALL.amd64
452: <li>CD2:4.3/macppc/INSTALL.macppc
453: <p>
454: <li>CD3:4.3/sparc64/INSTALL.sparc64
455: <p>
456: <li>FTP:.../OpenBSD/4.3/alpha/INSTALL.alpha
457: <li>FTP:.../OpenBSD/4.3/armish/INSTALL.armish
458: <li>FTP:.../OpenBSD/4.3/hp300/INSTALL.hp300
459: <li>FTP:.../OpenBSD/4.3/hppa/INSTALL.hppa
460: <li>FTP:.../OpenBSD/4.3/landisk/INSTALL.landisk
461: <li>FTP:.../OpenBSD/4.3/mac68k/INSTALL.mac68k
462: <li>FTP:.../OpenBSD/4.3/mvme68k/INSTALL.mvme68k
463: <li>FTP:.../OpenBSD/4.3/mvme88k/INSTALL.mvme88k
1.27 david 464: <li>FTP:.../OpenBSD/4.3/sgi/INSTALL.sgi
1.1 david 465: <li>FTP:.../OpenBSD/4.3/sparc/INSTALL.sparc
466: <li>FTP:.../OpenBSD/4.3/vax/INSTALL.vax
467: <li>FTP:.../OpenBSD/4.3/zaurus/INSTALL.zaurus
468: </ul>
469: <hr>
470:
471: <p>
472: Quick installer information for people familiar with OpenBSD, and the
473: use of the "disklabel -E" command. If you are at all confused when
474: installing OpenBSD, read the relevant INSTALL.* file as listed above!
475: <p>
476:
477: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
478: <ul>
479: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
480: release is on CD1. If your BIOS does not support booting from CD, you will need
481: to create a boot floppy to install from. To create a boot floppy write
482: <i>CD1:4.3/i386/floppy43.fs</i> to a floppy and boot via the floppy drive.
483:
484: <p>
485: Use <i>CD1:4.3/i386/floppyB43.fs</i> instead for greater SCSI controller
486: support, or <i>CD1:4.3/i386/floppyC43.fs</i> for better laptop support.
487:
488: <p>
489: If you can't boot from a CD or a floppy disk,
490: you can install across the network using PXE as described in
491: the included INSTALL.i386 document.
492:
493: <p>
494: If you are planning on dual booting OpenBSD with another OS, you will need to
495: read INSTALL.i386.
496:
497: <p>
498: To make a boot floppy under MS-DOS, use the "rawrite" utility located
499: at <i>CD1:4.3/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
500: use the
1.93 sthen 501: <a href="http://man.openbsd.org/?query=dd&sektion=1">dd(1)</a>
1.1 david 502: utility. The following is an example usage of
1.93 sthen 503: <a href="http://man.openbsd.org/?query=dd&sektion=1">dd(1)</a>,
1.1 david 504: where the device could be "floppy", "rfd0c", or
505: "rfd0a".
506:
507: <ul><pre>
508: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
509: </pre></ul>
510:
511: <p>
512: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
513: your install will most likely fail. For more information on creating a boot
514: floppy and installing OpenBSD/i386 please refer to
515: <a href="faq/faq4.html#MkFlop">FAQ 4.3.1</a>.
516: </ul>
517:
518: <p>
519: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
520: <ul>
521: The 4.3 release of OpenBSD/amd64 is located on CD2.
522: Boot from the CD to begin the install - you may need to adjust
523: your BIOS options first.
524: If you can't boot from the CD, you can create a boot floppy to install from.
525: To do this, write <i>CD2:4.3/amd64/floppy43.fs</i> to a floppy, then
526: boot from the floppy drive.
527:
528: <p>
529: If you can't boot from a CD or a floppy disk,
530: you can install across the network using PXE as described in the included
531: INSTALL.amd64 document.
532:
533: <p>
534: If you are planning to dual boot OpenBSD with another OS, you will need to
535: read INSTALL.amd64.
536: </ul>
537:
538: <p>
539: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
540: <ul>
541: Put CD2 in your CDROM drive and poweron your machine while holding down the
542: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
543:
544: <p>
545: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
546: /4.3/macppc/bsd.rd</i>
547: </ul>
548:
549: <p>
550: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
551: <ul>
552: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
553:
554: <p>
555: If this doesn't work, or if you don't have a CDROM drive, you can write
556: <i>CD3:4.3/sparc64/floppy43.fs</i> or <i>CD3:4.3/sparc64/floppyB43.fs</i>
557: (depending on your machine) to a floppy and boot it with <i>boot
558: floppy</i>. Refer to INSTALL.sparc64 for details.
559:
560: <p>
561: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
562: will most likely fail.
563:
564: <p>
565: You can also write <i>CD3:4.3/sparc64/miniroot43.fs</i> to the swap partition on
566: the disk and boot with <i>boot disk:b</i>.
567:
568: <p>
569: If nothing works, you can boot over the network as described in INSTALL.sparc64.
570: </ul>
571:
572: <p>
573: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
574: <ul>
575: <p>Write <i>FTP:4.3/alpha/floppy43.fs</i> or
576: <i>FTP:4.3/alpha/floppyB43.fs</i> (depending on your machine) to a diskette and
577: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
578:
579: <p>
580: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
581: will most likely fail.
582:
583: </ul>
584:
585: <p>
586: <h3><font color="#e00000">OpenBSD/armish:</font></h3>
587: <ul>
588: <p>
589: After connecting a serial port, Thecus can boot directly from the network
590: either tftp or http. Configure the network using fconfig, reset,
591: then load bsd.rd, see INSTALL.armish for specific details.
592: IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
593: and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
594: then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
595: More details are available in INSTALL.armish.
596: </ul>
597:
598: <p>
599: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
600: <ul>
601: <p>
602: Boot over the network by following the instructions in INSTALL.hp300.
603: </ul>
604:
605: <p>
606: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
607: <ul>
608: <p>
609: Boot over the network by following the instructions in INSTALL.hppa or the
610: <a href="hppa.html#install">hppa platform page</a>.
611: </ul>
612:
613: <p>
614: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
615: <ul>
616: <p>
617: Write <i>miniroot43.fs</i> to the start of the CF
618: or disk, and boot normally.
619: </ul>
620:
621: <p>
622: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
623: <ul>
624: <p>
625: Boot MacOS as normal and extract the Macside "BSD/Mac68k Booter" utility from
626: <i>FTP:4.3/mac68k/utils</i> onto your hard disk. Configure the "BSD/Mac68k
627: Booter" with the location of your bsd.rd kernel and boot into the installer.
628: Refer to the instructions in INSTALL.mac68k for more details.
629: </ul>
630:
631: <p>
632: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
633: <ul>
634: <p>
635: You can create a bootable installation tape or boot over the network.<br>
636: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
637: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
638: for more details.
639: </ul>
640:
641: <p>
642: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
643: <ul>
644: <p>
645: You can create a bootable installation tape or boot over the network.<br>
646: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
647: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
648: for more details.
649: </ul>
650:
651: <p>
652: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
653: <ul>
654: Boot from one of the provided install ISO images, using one of the two
655: commands listed below, depending on the version of your ROM.
656:
657: <ul><pre>
658: ok <strong>boot cdrom 4.3/sparc/bsd.rd</strong>
659: or
660: > <strong>b sd(0,6,0)4.3/sparc/bsd.rd</strong>
661: </pre></ul>
662:
663: <p>
664: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
665: To do so you need to write <i>floppy43.fs</i> to a floppy.
666: For more information see <a href="faq/faq4.html#MkFlop">FAQ 4.3.1</a>.
667: To boot from the floppy use one of the two commands listed below,
668: depending on the version of your ROM.
669:
670: <ul><pre>
671: ok <strong>boot floppy</strong>
672: or
673: > <strong>b fd()</strong>
674: </pre></ul>
675:
676: <p>
677: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
678: will most likely fail.
679:
680: <p>
681: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
682: setup a bootable tape, or install via network, as told in the
683: INSTALL.sparc file.
684: </ul>
685:
686: <p>
687: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
688: <ul>
689: <p>
690: Burn cd43.iso on a CD-R, put it in the CD drive of your machine and
691: select <i>Install System Software</i> from the System Maintenance menu.
692:
693: <p>
694: If your machine doesn't have a CD drive, you can
695: setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd".
696: Refer to the instructions in INSTALL.sgi for more details.
697: </ul>
698:
699: <p>
700: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
701: <ul>
702: Boot over the network via mopbooting as described in INSTALL.vax.
703: </ul>
704:
705: <p>
706: <h3><font color="#e00000">OpenBSD/zaurus:</font></h3>
707: <ul>
708: <p>
709: Using the Linux built-in graphical ipkg installer, install the
710: openbsd43_arm.ipk package. Reboot, then run it. Read INSTALL.zaurus
711: for a few important details.
712: </ul>
713:
714: <p>
715: <h3><font color="#e00000">Notes about the source code:</font></h3>
716: <ul>
717: src.tar.gz contains a source archive starting at /usr/src. This file
718: contains everything you need except for the kernel sources, which are
719: in a separate archive. To extract:
720: <p>
721: <ul><pre>
722: # <strong>mkdir -p /usr/src</strong>
723: # <strong>cd /usr/src</strong>
724: # <strong>tar xvfz /tmp/src.tar.gz</strong>
725: </pre></ul>
726: <p>
727: sys.tar.gz contains a source archive starting at /usr/src/sys.
728: This file contains all the kernel sources you need to rebuild kernels.
729: To extract:
730: <p>
731: <ul><pre>
732: # <strong>mkdir -p /usr/src/sys</strong>
733: # <strong>cd /usr/src</strong>
734: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
735: </pre></ul>
736: <p>
737: Both of these trees are a regular CVS checkout. Using these trees it
738: is possible to get a head-start on using the anoncvs servers as
739: described <a href="anoncvs.html">here</a>.
740: Using these files
741: results in a much faster initial CVS update than you could expect from
742: a fresh checkout of the full OpenBSD source tree.
743: <p>
744: </ul>
745:
746: <a name="upgrade"></a>
747: <hr>
748: <p>
749: <h3><font color="#0000e0">How to upgrade</font></h3>
750: <p>
751: If you already have an OpenBSD 4.2 system, and do not want to reinstall,
752: upgrade instructions and advice can be found in the
753: <a href="faq/upgrade43.html">Upgrade Guide</a>.
754:
755: <a name="ports"></a>
756: <hr>
757: <p>
758: <h3><font color="#0000e0">Ports Tree</font></h3>
759: <p>
760: A ports tree archive is also provided. To extract:
761: <p>
762: <ul><pre>
763: # <strong>cd /usr</strong>
764: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
765: # <strong>cd ports</strong>
766: </pre></ul>
767: <p>
768: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
1.82 jasper 769: read the <a href="faq/faq15.html">ports</a> page
1.1 david 770: if you know nothing about ports
771: at this point. This text is not a manual of how to use ports.
772: Rather, it is a set of notes meant to kickstart the user on the
773: OpenBSD ports system.
774: <p>
775: The <i>ports/</i> directory represents a CVS (see the manpage for
1.93 sthen 776: <a href="http://man.openbsd.org/?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
1.1 david 777: cvs(1)</a> if
778: you aren't familiar with CVS) checkout of our ports. As with our complete
779: source tree, our ports tree is available via anoncvs. So, in
780: order to keep current with it, you must make the <i>ports/</i> tree
781: available on a read-write medium and update the tree with a command
782: like:
783: <p>
784: <ul><pre>
785: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_4_3</strong>
786: </pre></ul>
787: <p>
788: [Of course, you must replace the local directory and server name here
789: with the location of your ports collection and a nearby anoncvs
790: server.]
791: <p>
792: Note that most ports are available as packages through FTP. Updated
793: packages for the 4.3 release will be made available if problems arise.
794: <p>
795: If you're interested in seeing a port added, would like to help out, or just
796: would like to know more, the mailing list ports@openbsd.org is a good
797: place to know.
798: <p>
799:
800: </body>
801: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to 43.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www