=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/70.html,v retrieving revision 1.39 retrieving revision 1.40 diff -c -r1.39 -r1.40 *** www/70.html 2021/10/02 14:38:53 1.39 --- www/70.html 2021/10/02 14:39:31 1.40 *************** *** 519,537 ****

Other userland network changes:

Fixed acme-client(1) SAN generation for CSRs. -
Altered slowcgi(8) so it no longer sends debug logging to syslog unless debug logging is requested via the new -v flag.
Added the ability for snmpd(8) to send SNMPv3 traps.
Changed the default snmp(1) version to -v3 and removed the default community.
Allowed "any" to be used as a listen on address in snmpd.conf(5).
Allowed setting of the engineid in snmpd(8).
Switched default snmpd(8) and snmp(1) auth back to hmac-sha1. -
Fixed incorrect status code for expired mails resulting in a misleading bounce report in smtpd(8).
Removed default communities, changed seclevel default from none to enc and only allowed SNMPv3 by default in snmpd(8). Changed default authentication to SHA-256 and privacy protocol to AES in snmpd(8) and snmp(1).
Added TLS options cafile=(path), nosni, noverify and servername=(name) to smtp(1).
Allowed specification of TLS ciphers and protocols in smtp(1). -
Prevented httpd(8) from trying to chunk encode an empty http body coming from an fcgi upstream.
Added pledge(8) for ftpd(8) user processes.
Allowed router solicitations from the unspecified address (::) in rad(8).
Used relative reference URIs in Location header on directory redirects in httpd(8), adding support for front-ending httpd with a TLS-terminating gateway that forwards unencrypted http traffic.
Prevented a crash on strict alignment architectures of tcpdump(8) WireGuard printer.
Made tcpdump(8) split the 802.11 sequence number field into its sequence number and fragment number components rather than printing the whole field in decimal. --- 519,537 ----
Other userland network changes:
- Fixed acme-client(1) SAN generation for CSRs.
- Added the ability for snmpd(8) to send SNMPv3 traps.
- Changed the default snmp(1) version to -v3 and removed the default community.
- Allowed "any" to be used as a listen on address in snmpd.conf(5).
- Allowed setting of the engineid in snmpd(8).
- Switched default snmpd(8) and snmp(1) auth back to hmac-sha1.
- Removed default communities, changed seclevel default from none to enc and only allowed SNMPv3 by default in snmpd(8). Changed default authentication to SHA-256 and privacy protocol to AES in snmpd(8) and snmp(1). +
- Fixed incorrect status code for expired mails resulting in a misleading bounce report in smtpd(8).
- Added TLS options cafile=(path), nosni, noverify and servername=(name) to smtp(1).
- Allowed specification of TLS ciphers and protocols in smtp(1).
- Added pledge(8) for ftpd(8) user processes.
- Allowed router solicitations from the unspecified address (::) in rad(8). +
- Altered slowcgi(8) so it no longer sends debug logging to syslog unless debug logging is requested via the new -v flag. +
- Prevented httpd(8) from trying to chunk encode an empty http body coming from an fcgi upstream.
- Used relative reference URIs in Location header on directory redirects in httpd(8), adding support for front-ending httpd with a TLS-terminating gateway that forwards unencrypted http traffic.
- Prevented a crash on strict alignment architectures of tcpdump(8) WireGuard printer.
- Made tcpdump(8) split the 802.11 sequence number field into its sequence number and fragment number components rather than printing the whole field in decimal.