Current File : //backups/router/usr/local/opnsense/changelog/20.1.r1.htm
<p>Hi there,</p><p>For over 5 years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.</p><p>We thank all of you for helping test, shape and contribute to the project! We know it would not be the same without you.</p><p>Download links, an installation guide[<a target="_blank" href="https://docs.opnsense.org/manual/install.html">1</a>] and the checksums for the images can be found below as well.</p><p><ul><li>Europe: <a target="_blank" href="https://opnsense.c0urier.net/releases/20.1/">https://opnsense.c0urier.net/releases/20.1/</a></li><li>US East Coast: <a target="_blank" href="http://mirrors.nycbug.org/pub/opnsense/releases/20.1/">http://mirrors.nycbug.org/pub/opnsense/releases/20.1/</a></li><li>US West Coast: <a target="_blank" href="https://mirror.sfo12.us.leaseweb.net/opnsense/releases/20.1/">https://mirror.sfo12.us.leaseweb.net/opnsense/releases/20.1/</a></li><li>South America: <a target="_blank" href="http://mirror.upb.edu.co/opnsense/releases/20.1/">http://mirror.upb.edu.co/opnsense/releases/20.1/</a></li><li>South-East Asia: <a target="_blank" href="https://ftp.yzu.edu.tw/opnsense/releases/20.1/">https://ftp.yzu.edu.tw/opnsense/releases/20.1/</a></li><li>Full mirror list: <a target="_blank" href="https://opnsense.org/download/">https://opnsense.org/download/</a></li></ul></p><p>Here are the full patch notes against 19.7.9_1:</p><p><ul><li>system: support for manually removing static route entries</li><li>system: migrated logging to MVC</li><li>system: regenerate default DH parameters</li><li>system: randomize session ID in test cookie</li><li>system: remove legacy XMLRPC push on changes</li><li>system: deprecate the use of services.inc</li><li>system: opt-out on "Allow DNS server list to be overridden by DHCP/PPP on WAN" for selected interfaces</li><li>system: increase PHP memory limit to 512 MB</li><li>system: opnsense-auth can now respond with extended properties in JSON on successful authentication</li><li>interfaces: loopback device support</li><li>interfaces: VXLAN device support</li><li>interfaces: first steps toward fully pluggable device infrastructure</li><li>interfaces: remove default load of netgraph framework on bootup</li><li>interfaces: interfaces: move description into top block and rename titles</li><li>interfaces: only trigger newwanip event for affected interfaces</li><li>firmware: revoke 19.1, trust 20.1 fingerprint</li><li>firmware: new mirror in Zurich, CH contributed by ServerBase AG</li><li>firmware: add live search to mirror selection</li><li>dhcp: add OMAPI configuration support (contributed by Yuri Moens)</li><li>ipsec: add configurable dpdaction (contributed by Marcel Menzel)</li><li>ipsec: refactor tunnel settings page</li><li>unbound: add options for logging queries and extended statistics (contributed by Flightkick)</li><li>mvc: BaseListField ignoring empty selected field</li><li>ui: jQuery 3.4.1</li><li>plugins: os-dyndns 1.19 adds dynv6 and Azure DNS support (contributed by Ralf Zerres and martgras)</li><li>plugins: os-haproxy 2.20[<a target="_blank" href="https://github.com/opnsense/plugins/pull/1646">2</a>]</li><li>plugins: os-zabbix-agent 1.7[<a target="_blank" href="https://github.com/opnsense/plugins/pull/1578">3</a>][<a target="_blank" href="https://github.com/opnsense/plugins/pull/1618">4</a>]</li><li>ports: ca_root_nss 3.49.1</li><li>ports: curl 7.68.0[<a target="_blank" href="https://curl.se/changes.html#7_68_0">5</a>]</li><li>ports: openssl 1.1.1d[<a target="_blank" href="https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md">6</a>]</li></ul></p><p>Known issues and limitations:</p><p><ul><li>HardenedBSD 12.1 has been postponed to the next major release</li><li>Nano growfs does not work on this release candidate, but a fix for 20.1 already exists</li><li>Installer still advertises 19.7, but a fix for 20.1 already exists</li><li>Legacy MPD plugins os-l2tp, os-pppoe and os-pptp have been deprecated and will no longer receive updates</li><li>i386 has not been deprecated for the time being ;)</li></ul></p><p>The public key for the 20.1 series is:</p><p><pre>-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----</pre></p><p>Please let us know about your experience!</p><p><br>Stay safe,<br> Your OPNsense team</p><p><pre>SHA256 (OPNsense-20.1.r1-OpenSSL-dvd-amd64.iso.bz2) = fed43e5cc5092da5adcfcb2ccdddf51a1cea6a69f06b764fcd9c3d36e0705d4a
SHA256 (OPNsense-20.1.r1-OpenSSL-nano-amd64.img.bz2) = bf825455cc09e2a410cbe702a0c1c5b454546c476c7e90ae87ab64fc3eee6a78
SHA256 (OPNsense-20.1.r1-OpenSSL-serial-amd64.img.bz2) = 906103fb4cc3e573a9e2d560a6365baa7162077b8933a253bb45fd23a154dd87
SHA256 (OPNsense-20.1.r1-OpenSSL-vga-amd64.img.bz2) = 3308412597f5b95f9b9e854ddbeb5f49735109d846af553dbe2553dedf73cb9b</pre></p><p><pre>SHA256 (OPNsense-20.1.r1-OpenSSL-dvd-i386.iso.bz2) = a110e2ed48228d918909daca5d93d8acafccdc4426e3e928d8561f7ad4180289
SHA256 (OPNsense-20.1.r1-OpenSSL-nano-i386.img.bz2) = 201b757b0d719e8f3c4aa473b414005a5544a4b1553ca9d79c1743610d67b460
SHA256 (OPNsense-20.1.r1-OpenSSL-serial-i386.img.bz2) = 74a8f6bc5cdf885f5ff906ad2dfd05584f8e217212f90cd2e3a3269a5a9b604a
SHA256 (OPNsense-20.1.r1-OpenSSL-vga-i386.img.bz2) = 1779ca5aeb37d2d97bd7e053421d64206b27189db74711600b93e458d858caff</pre></p>
Mini Shell