on (#5YVM5)
Following much development and testing,parallel IP forwarding has been enabled in -current.The most recent of the relevant commitsare:
OpenBSD Journal
| Link | http://undeadly.org/ |
| Feed | http://undeadly.org/cgi?action=rss |
| Updated | 2025-10-02 19:17 |
on (#5YVM6)
In -current, the performance ofpkg_add(1)has been greatly enhanced by theenabling of caching by default:
on (#5YTB3)
syspatch71-001_wifi was somewhatbroken(in terms of the housekeeping rather thanthe functionality of the patch).On those systems to which the faulty patch was applied,some manual intervention is required.Instructions for thisare now on theerrata page.
on (#5YG8R)
Hot on the heels of OpenBSD 7.1's release,LibreSSLhas been updated to 3.5.2!The complete release notes may be read here:https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.5.2-relnotes.txt
on (#5YD8Z)
The long spring (or fall) wait is over, the OpenBSD project today formally released OpenBSD 7.1, the 52nd release of our favorite open source operating system.As usual, the release page lists the main highlights of the new release, which include
on (#5Y5S4)
Claudio Jeker (claudio@) has just announced the release of OpenBGPD 7.3. He writes:
on (#5XA7S)
In amessage to tech@(and arm64@),Mark Kettenis (kettenis@) wrote:
on (#5X9JR)
Hrvoje Popovski writes in with some result from his performance tests, like he did a few years ago:
on (#5X85S)
For undeadly readers, our Errata column on the right side of the web site automatically updates and as of March 15th, 2022 some of you may have already noticed that there is a new security fix related to LibreSSL. Salient excerpt from the release notes as follows:
on (#5X440)
Following a request-for-testingthreadon tech@,Stefan Sperling (stsp@)hascommittedsomeIEEE 802.11acsupport toiwx(4):
on (#5WZ37)
James Hastings (hastings@) hascommittedmtw(4),a driver forMediaTek MT7601UUSBWi-Fi devices:
on (#5WM7R)
As of February 24th, 2022, LibreSSL's development branch has been updated to version 3.5.0.
on (#5WBN6)
With the followingcommit,Theo de Raadt (deraadt@) moved -currentto version 7.1-beta:
on (#5VEVD)
Crystal Kolipe has donea four partmulti-part write upabout getting OpenBSD running on aPinePhone here:
on (#5V2PB)
A long list of recent LibreSSLcommits by Theo Buehler (tb@)culminated inbumps to library versions:
on (#5V2CC)
Johathan Gray (jsg@) hasupdatedDRMto Linux 5.15.14 (with support for several additional chips):
on (#5T7E2)
Damien Miller (djm@) justnoted on social media that he has committed(starting here)changes which allow control overssh-agent(1)key-forwarding based on destination host and forwarding path.A detailed description isavailableon theOpenSSH site.
on (#5T7E3)
After much preparatory work in base and ports,clang(1)has been upgraded to version 13.0.0 (on the relevant platforms).Patrick Wildt (patrick@) made thecommits.
on (#5QQ8P)
The OpenBSD projecthas releasedOpenBSD 7.0,the project's 51 release.As usual, the release pageoffers highlights, installation and upgrade instructions, as well as links toother resources such as thedetailed changelog.Notable improvements include, but are not limited to:
on (#5QG3J)
In the run-up to the OpenBSD 7.0 release, we note several recent interestingthings previously unreported:
on (#5QA8E)
As a result of a licence change byRealtek,that company's wireless firmware images are now included in the tree.The followingcommitby Kevin Lo (kevlo@)explains the details:Read more…
on (#5Q74V)
Did you just runsyspatch(8)and see it fail?Here's the reason: one of the two root certificatesbehind the (excellent)Let's EncryptCA service has expired.A bug in (the "legacy" verifier of)LibreSSLalso contributed.The syspatches (for OpenBSD 6.8,032, for OpenBSD 6.9,018) mitigate the unfortunate situation.However, your syspatch may fail if your local mirror uses aLet's Encrypt certificate.Patch-22!In that case, the best advice may be to try a mirror that does notuse a Let's Encrypt certificate just to get past this speed bump.Read more…
on (#5Q3JB)
EuroBSDCon 2021was held [virtually] earlier this month.Videos of the presentation arenow available.Amongst the OpenBSD-related presentations is that byMarc Espie (espie@) -Debug Packages in OpenBSD(slides,video).
on (#5PCB7)
Thanks to acommitby Damien Miller (djm@),scp(1) (in -current)now defaults to using theSFTP protocol:
on (#5P9HB)
In a recentmessageto tech@ Martin Pieuchot (mpi@) wrote aboutanalysis of kernel lock contention.We reproduce the message(s) here, reformatted with his permission.
on (#5P447)
Florian Obser (florian@)has committeda significant speed boost fortraceroute(8):
on (#5P448)
With the followingcommit,Matthieu Herrb (matthieu@)gavexterm(1)someunveil(2)goodness:
on (#5P2Y5)
With the followingcommit,Tobias Heider (tobhe@)added client-side support for DNS configurationto iked(8):
on (#5P2Y6)
Job Snijders (job@)importedthetimeout(1)utility from NetBSD:
on (#5NZMD)
OpenBSD Journal co-editor Solène Rapenne (solene@) writes,
on (#5NZDF)
Theo de Raadt (deraadt@)committeda change which significantly reduceshibernatetime on machines with larger amounts of RAM:
on (#5NYCC)
In amessage to tech@Damien Miller (djm@)explained the consequences of his recentcommit:
on (#5NY83)
Claudio Jeker (claudio@) hascommittedsupport for simple include and exclude casesin (open)rsync:
on (#5NT0S)
OpenBSD Journal co-editor Peter Hansteen writes in, saying
on (#5NGPK)
With the followingcommit,Theo de Raadt (deraadt@) moved -currentto version 7.0-beta:
on (#5MF8S)
Now enabled by default on OpenBSD -current is dhcpleased(8), a dynamic host configuration protocol daemon written by florian@ (Florian Obser), who spoke with us about his work:I suppose this is either the KAME project's fault, or if we don't want to go that far back, Theo's fault. At g2k16 he floated the idea of a network configuration daemon. It would collect "proposals" for IP addresses, default routes andDNS configuration from various sources (DHCP,IPv6 router advertisements, umb(4), etc.),make some policy decisions, configure the network, and set resolv.conf(5)Read more…
on (#5MA7V)
Florian Obser (florian@) has enableddhcpleased(8)andresolvd(8)[on both of which wereportedearlier]in base.
on (#5K96Y)
Since ourprevious report,there has been significant progress on support for riscv64:
on (#5JB13)
Sven G is back with another tale of using a Raspberry Pi in his garage:
on (#5J1ST)
Frederic Cambus (fcambus@) hasbloggedabout the recent history and current state of toolchains on OpenBSD.It provides a good explanation of how and why things got to where they stand.
on (#5HA09)
The OpenBSD project has releasedOpenBSD 6.9, the project's 50th release. As usual the release page offers highlights, installation and upgrade instructions as well as links to other resources such as the detailed changelog.Notable improvements include, but are not limited to
on (#5GZ72)
With the followingcommit,Dale Rahn (drahn@)imported initial support for the64-bitRISC-Varchitecture:
on (#5GKYH)
We received a contribution from Sven G, about checking the temperature in the garage where his dog sleeps with OpenBSD:
on (#5FMMK)
Dr. Brian Robert Callahan (bcallah@)blogged about his work in getting D compiler(s) working under OpenBSD.The first paragraph reads:
on (#5FGAM)
Hoping to be able to make a conference in Vienna in September (and doing it digitally if not), the EuroBSDCon is now accepting submissions for presentations and tutorials.