Portable build framework for OpenNTPD
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

118 lines
4.8 KiB

7 years ago
10 years ago
  1. For detailed changes, see the changes either in the OpenBSD CVS repository or
  2. the GitHub mirror.
  3. 2017-06-12 OpenNTPD 6.1p1
  4. * Quieted warnings about constraint connection retries.
  5. * Implemented fork+exec for ntpd child processes.
  6. * Added imsg inter-process reliability fixes.
  7. * Fixed memory leaks and reduced heap memory usage.
  8. * Numerous logging improvements and additions.
  9. OpenNTPD portable-specific changes:
  10. * Added macOS 10.12 getentropy support.
  11. * Fixed arc4random blacklist use native implementations where
  12. possible.
  13. 2016-05-30 OpenNTPD 6.0p1
  14. * Fixed a link failure on older Linux distributions and a build
  15. failure on FreeBSD.
  16. * Set MOD_MAXERROR to avoid unsynced time status when using
  17. ntp_adjtime.
  18. * Fixed HTTP Timestamp header parsing to use strptime in a more
  19. portable fashion.
  20. * Hardened TLS for ntpd constraints, enabling server name
  21. verification. Thanks to Luis M. Merino.
  22. 2016-03-29 OpenNTPD 5.9p1
  23. * When a single "constraint" is specified, try all returned addresses
  24. until one succeeds, rather than the first returned address.
  25. * Relaxed the constraint error margin to be proportional to the number
  26. of NTP peers, avoid constant reconnections when there is a bad NTP
  27. peer.
  28. * Removed disabled hotplug sensor support.
  29. * Added support for detecting crashes in constraint subprocesses.
  30. * Moved the execution of constraints from the ntp process to the
  31. parent process, allowing for better privilege separation since the
  32. ntp process can be further restricted.
  33. * Added pledge(2) support.
  34. * Updated to require LibreSSL 2.3.2 or greater.
  35. * Fixed high CPU usage when the network is down.
  36. * Fixed various memory leaks.
  37. * Switched to RMS for jitter calculations.
  38. * Unified logging functions with other OpenBSD base programs.
  39. OpenNTPD portable-specific changes:
  40. * Added support for syncing time with the Realtime Clock (RTC) on OSes
  41. that require it.
  42. * CFLAGS is no longer overridden by the build system.
  43. * FreeBSD RTABLE support is disabled
  44. * FreeBSD is no longer linked with -lmd to avoid hash function
  45. collisions, causing failures in constraint certificate loading.
  46. * Fixed crashes due to __progname being used before initialized.
  47. * Added Solaris 10 compatibility.
  48. * Added --disable-https-constraint build option for explicitly
  49. disabling constraint support.
  50. * Synced build system files with LibreSSL
  51. The libtls library, as shipped with LibreSSL 2.3.2 or later, is
  52. required to use the HTTPS constraint feature, though it is not
  53. required to use OpenNTPD.
  54. 2015-03-24 OpenNTPD 5.7p4
  55. * Added support for HTTPS constraints to validate NTP responses.
  56. See the man page and example config file for how to configure it.
  57. The initial announcement:
  58. http://marc.info/?l=openbsd-tech&m=142356166731390&w=2 is an
  59. explanation of the rationale and how the feature works.
  60. * Workaround an apparent bug in Solaris adjtime that cause the clock
  61. to report sync/unsync continuously.
  62. * Workaround an issue on systems with 32-bit time_t that causes an
  63. overflow if the system time is later than early 2036.
  64. The libtls library, as shipped with LibreSSL 2.1.4 or later, is
  65. required to use the HTTPS constraint feature, though it is not
  66. required to use OpenNTPD.
  67. 2015-01-27 OpenNTPD 5.7p3
  68. * Fixed issue resolving hostnames when the network is initially
  69. unavailable.
  70. * Fixed process name logging on Linux and OS X.
  71. * Fixed adjfreq failures on Solaris due to uninitialized struct timex.
  72. * Support building on Linux musl libc.
  73. * Default privilege separation directory changed from /var/empty/ntp
  74. to /var/empty. Please ensure that if you are using the default from
  75. previous releases that the privsep directory is empty, owned by
  76. root, and has no write privileges for other users.
  77. 2015-01-20 OpenNTPD 5.7p2
  78. * Switched the drift file from an unscaled frequency offset to ppm.
  79. The latter format is compatible with that of ntp.org. This allows
  80. easy switching between ntpd daemons
  81. * Fixed a memory leak in DNS lookups.
  82. * Added support for setting the process title on Linux and OS X.
  83. The different processes are now possible to tell apart by role in
  84. the process list.
  85. * Import NetBSD support.
  86. * Various bugfixes and refinements from the community.
  87. 2015-01-08 OpenNTPD 5.7p1
  88. * Support for a new build infrastructure based on the LibreSSL
  89. framework. Source code is integrated directly from the OpenBSD tree
  90. with few manual changes, easing maintenance.
  91. * Removed support for several OSes pending test reports and updated
  92. portability code.
  93. * Supports the Simple Network Time Protocol version 4 as described in
  94. RFC 5905
  95. * Added route virtualization (rdomain) support.
  96. * Added ntpctl(8), which allows for querying ntpd(8) at runtime.
  97. * Finer-grained clock adjustment via adjfreq / ntp_adjtime where
  98. available.
  99. * Improved latency on heavily-loaded machines.