on (#63H23)
A new version of the OpenBSD rpki-client – RPKI validator to support BGP Origin Validation, version 8.0 has been released.The announcement reads,
OpenBSD Journal
| Link | http://undeadly.org/ |
| Feed | http://undeadly.org/cgi?action=rss |
| Updated | 2025-07-18 21:31 |
on (#63FMN)
Stefan Sperling (stsp@)notedthe release ofversion 0.75ofGame of Trees:
on (#639YM)
We are delighted to have received a report onthe recently-concludedg2k22 hackathon.Martijn van Duren (martijn@) writes:
on (#6365H)
In a September 1st post to tech@ titled immutable userland mappings, Theo de Raadt (deraadt@) gave us a preview of code that may soon land in -current. The message leads in,
on (#63625)
Following adiscussion on tech@,Job Snijders (job@),committedtops(1)support for displaying the parent/child hierarchy of processesas an ASCII art tree:
on (#635Y3)
Antoine Jacoutot (ajacoutot@)hasaddeda "configtest"action torcctl(8):
on (#635WX)
Damien Miller (djm@)notesthat all (new) commits to the portableOpenSSHrepository are now signed usinggit'sSSH signature support.Further details areon the OpenSSH developmentmailing list:
on (#631W6)
Ina pairofcommits,Theo de Raadt (deraadt@)changed many daemons in /sbinto be dynamically linked. First this, which had some of us a little mystified:
on (#62TD9)
Video recordings fromBSDCan 2022are nowavailable.OpenBSD-related sessions include:
on (#62FED)
Stefan Sperling (stsp@)hascommittedsupport for RAID 1C[mirroring and encryption]boot to -current on the amd64 platform:
on (#62E61)
Damien Miller (djm@) has committedhome-directory requesttosftp-server(8):
on (#62BR7)
In -current, /usr/gameshas been removed from the default$PATH.Theo Buehler (tb@)committed the change:
on (#620BD)
Damien Miller (djm@)committed a changerandomising the rekeying interval inarc4random(3)(and friends):
on (#61N56)
With the followingcommit(s),Theo de Raadt (deraadt@) moved -currentto version 7.2-beta:
on (#61MG4)
For those who have been paying attention to the Game of Trees development list, there has been a lot going on with got(1). Apologies here at undeadly for having missed some release announcements!
on (#61FPT)
Our favorite BGP daemon, OpenBGPD, has a new version 7.5 out. The announcement reads,
on (#61DCN)
A fairly critical component of routing security infrastructure, rpki-client, has a new release out, version 7.9.The announcement leads in,
on (#6115X)
Theo de Raadt (deraadt@)committedthe change:
on (#60ZW0)
The first r2k22 hackathon report is in, from Job Snijders (job@), who writes:
on (#60WEW)
Courtney Allen has published a blog post about how to run a website and blog almost exclusively on things that are in the OpenBSD base system already, only adding AsciiDoc to the mix.The lead in reads,
on (#60W2Z)
Christian Ludwig "wrote a tool to statically analyze spl(9) kernel locking in OpenBSD. It even found some bugs."His write up is here: https://medium.com/@chrissicool/analyze-openbsds-kernel-with-domain-specific-knowledge-ca665d92eebbHis code for the Lock Balancing Checker referenced in the write up is available under an ISC license and can be obtained here: https://github.com/chrissicool/lbc
on (#60VDX)
Here are a few recent OpenBSD news items that we almost missed ourselves:
on (#60KMX)
Frederic Cambus (fcambus@)has written ablog entryregarding the significant differences between the versions ofLLVM inbase andports.
on (#60HK3)
We wouldn't blame you if you it slipped under yourRADAR thatOpenBGPD 7.4 was released,since it doesn't appear to have been mentioned on the OpenBGPD website yet.However, the release notes may be found inthis mailing list postfrom June 14th, 2022:
on (#602WF)
Peter Hansteen, Massimiliano Stucchi and Tom Smyth gave a presentation on pf at BSDCan 2022. While a video recording from the event has yet to appear, the slides from their presentation may be viewed here:
on (#5ZPXK)
OpenIKED 7.1 was released on May 23rd, 2022.The complete release notes may be read here:
on (#5ZG0Q)
LibreSSL 3.5.3 was released on May 18th, 2022.The release notes may be found here:
on (#5Z9AB)
Crystal Kolipe writes in about her work on the framebuffer console, and provides an article on
on (#5YVM5)
Following much development and testing,parallel IP forwarding has been enabled in -current.The most recent of the relevant commitsare:
on (#5YVM6)
In -current, the performance ofpkg_add(1)has been greatly enhanced by theenabling of caching by default:
on (#5YTB3)
syspatch71-001_wifi was somewhatbroken(in terms of the housekeeping rather thanthe functionality of the patch).On those systems to which the faulty patch was applied,some manual intervention is required.Instructions for thisare now on theerrata page.
on (#5YG8R)
Hot on the heels of OpenBSD 7.1's release,LibreSSLhas been updated to 3.5.2!The complete release notes may be read here:https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.5.2-relnotes.txt
on (#5YD8Z)
The long spring (or fall) wait is over, the OpenBSD project today formally released OpenBSD 7.1, the 52nd release of our favorite open source operating system.As usual, the release page lists the main highlights of the new release, which include
on (#5Y5S4)
Claudio Jeker (claudio@) has just announced the release of OpenBGPD 7.3. He writes:
on (#5XA7S)
In amessage to tech@(and arm64@),Mark Kettenis (kettenis@) wrote:
on (#5X9JR)
Hrvoje Popovski writes in with some result from his performance tests, like he did a few years ago:
on (#5X85S)
For undeadly readers, our Errata column on the right side of the web site automatically updates and as of March 15th, 2022 some of you may have already noticed that there is a new security fix related to LibreSSL. Salient excerpt from the release notes as follows:
on (#5X440)
Following a request-for-testingthreadon tech@,Stefan Sperling (stsp@)hascommittedsomeIEEE 802.11acsupport toiwx(4):
on (#5WZ37)
James Hastings (hastings@) hascommittedmtw(4),a driver forMediaTek MT7601UUSBWi-Fi devices:
on (#5WM7R)
As of February 24th, 2022, LibreSSL's development branch has been updated to version 3.5.0.
on (#5WBN6)
With the followingcommit,Theo de Raadt (deraadt@) moved -currentto version 7.1-beta:
on (#5VEVD)
Crystal Kolipe has donea four partmulti-part write upabout getting OpenBSD running on aPinePhone here:
on (#5V2PB)
A long list of recent LibreSSLcommits by Theo Buehler (tb@)culminated inbumps to library versions:
on (#5V2CC)
Johathan Gray (jsg@) hasupdatedDRMto Linux 5.15.14 (with support for several additional chips):
on (#5T7E2)
Damien Miller (djm@) justnoted on social media that he has committed(starting here)changes which allow control overssh-agent(1)key-forwarding based on destination host and forwarding path.A detailed description isavailableon theOpenSSH site.
on (#5T7E3)
After much preparatory work in base and ports,clang(1)has been upgraded to version 13.0.0 (on the relevant platforms).Patrick Wildt (patrick@) made thecommits.