HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability
-
@johnpoz said in HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability:
So you mention openssl, so this brings in 1.1.1 and the ability to to do tls 1.3 I take it? To the gui and with ha proxy ssl offload I would hope.
Yes, the base version of OpenSSL on FreeBSD 12.0-RELEASE is 1.1.1a at the moment, not sure if the one on snapshots will be that or slightly newer.
-
Nice ! And ssh 7.8 sweet! Big jump from 7.5
-
Thanks guys that now pfsense 2.5.0 will not required AES-NI processor. It was driving some us away from pfsense but now is not require, pfsense is the best... I love you guys for listening to us.
-
The most significant impact for users that we can predict at this point will be packages. Several packages are failing to build on FreeBSD 12 due to changes in the base OpenSSL. Notably, squid and net-snmp do not build against the base OpenSSL, as well as relayd in the base system, among others. Some of these will temporarily be built against OpenSSL from ports until the other issues can be addressed.
With regard to net-snmp as per this commit message it was fixed to build with the base openssl version.
-
@vectr0n said in HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability:
With regard to net-snmp as per this commit message it was fixed to build with the base openssl version.
It still fails with DTLS enabled, even with the current port. If that fixed it, it broke again in some other way.
-
@stephenkwabena said in HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability:
Thanks guys that now pfsense 2.5.0 will not required AES-NI processor. It was driving some us away from pfsense but now is not require, pfsense is the best... I love you guys for listening to us.
I am still willing to bet that it will eventually require AES-NI.
https://www.netgate.com/blog/more-on-aes-ni.html
-
Eventually, yes, once we engineer and write the RESTCONF API. That isn't going to be in 2.5.0, however.
-
In System Update, should I leave it set to 2.4 snapshots or should I change it to 2.4 stable.
-
@marcop said in HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability:
In System Update, should I leave it set to 2.4 snapshots or should I change it to 2.4 stable.
Depends on what you want. If you don't want to be offered the 2.5.0 upgrade yet, set it to stable. If you want to pick up 2.5.0 snapshots when they are ready, then leave it set to snapshots.
-
@jimp great thanks, 2.5.0 will be then
-
Out of sheer curiosity, do you guys have any idea of when the 2.5 images will be out for testing?
-
No ETA but it's getting closer. We have it upgrading and booting OK, but still a few more kinks to work out in our internal testing and then it should be ready for wider alpha testing.
-
Can we expect new images by April?
-
@strangegopher said in HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability:
Can we expect new images by April?
Almost certainly sooner than that, but we don't like to overpromise. They're getting closer.
