Version 3.2.0 has now been released. This is the new "feature" branch of v3. All features and bug fixes from 3.0.x are included in the 3.2.0 release. Notable updates include: - Support PEAP and TTLS with TLS 1.3. This has been tested with wpa_supplicant and Windows 11. - Support OpenSSL 3. - Support for the haproxy "PROXY" protocol. Source and tarballs are available on GitHub: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_0 Packages and Docker images will be available shortly. -- Matthew
On Apr 21, 2022, at 7:05 PM, Matthew Newton <mcn@freeradius.org> wrote:
Version 3.2.0 has now been released. This is the new "feature" branch of v3.
All features and bug fixes from 3.0.x are included in the 3.2.0 release.
Notable updates include:
- Support PEAP and TTLS with TLS 1.3. This has been tested with wpa_supplicant and Windows 11. - Support OpenSSL 3. - Support for the haproxy "PROXY" protocol.
Thanks! I'll also note that the LDAP module no longer closes active connections when chasing referrals. This can improve performance. The 3.0 release will remain as the "stable, bug-fix only" release. Other than new features added to 3.2, it will always be possible to upgrade from 3.0 to 3.2, and use the same configuration. Alan DeKok.
W dniu 22.04.2022 o 15:06, Alan DeKok pisze:
On Apr 21, 2022, at 7:05 PM, Matthew Newton <mcn@freeradius.org> wrote:
Version 3.2.0 has now been released. This is the new "feature" branch of v3.
All features and bug fixes from 3.0.x are included in the 3.2.0 release.
Notable updates include:
- Support PEAP and TTLS with TLS 1.3. This has been tested with wpa_supplicant and Windows 11. - Support OpenSSL 3. - Support for the haproxy "PROXY" protocol. Thanks!
I'll also note that the LDAP module no longer closes active connections when chasing referrals. This can improve performance.
The 3.0 release will remain as the "stable, bug-fix only" release.
Other than new features added to 3.2, it will always be possible to upgrade from 3.0 to 3.2, and use the same configuration.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thank you very much for your work on this release and for maintaining decent FreeBSD support from release to release. To test it further I have deployed 3.2.0 on a few servers preserving the old configuration files and so far so good. -- Marek Zarychta
On 22/04/2022 18:45, Marek Zarychta wrote:
W dniu 22.04.2022 o 15:06, Alan DeKok pisze:
I'll also note that the LDAP module no longer closes active connections when chasing referrals. This can improve performance.
Good catch. This is an especially good reason for anyone using Active Directory LDAP lookups which give referrals to upgrade to 3.2.0.
Other than new features added to 3.2, it will always be possible to upgrade from 3.0 to 3.2, and use the same configuration.
I also missed that the "cram" module (experimental for 20 years, insecure) and "otp" module (other required software no longer available) have been removed from 3.2. But due to those same reasons this shouldn't affect anyone.
Thank you very much for your work on this release and for maintaining decent FreeBSD support from release to release. To test it further I have deployed 3.2.0 on a few servers preserving the old configuration files and so far so good.
Great to know, thanks! -- Matthew
On Apr 22, 2022, at 1:45 PM, Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> wrote:
Thank you very much for your work on this release and for maintaining decent FreeBSD support from release to release. To test it further I have deployed 3.2.0 on a few servers preserving the old configuration files and so far so good.
That's good to hear, thanks. Every commit is built against FreeBSD. Because it's a good operating system. Alan DeKok.
On Fri, Apr 22, 2022 at 04:20:34PM -0400, Alan DeKok wrote:
On Apr 22, 2022, at 1:45 PM, Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> wrote:
Thank you very much for your work on this release and for maintaining decent FreeBSD support from release to release. To test it further I have deployed 3.2.0 on a few servers preserving the old configuration files and so far so good.
That's good to hear, thanks.
Every commit is built against FreeBSD. Because it's a good operating system.
Alan DeKok.
I will never move away from FREEBSD!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b If challenge is our enemy, we won't have friends. -unknown Beware https://mindspring.com
participants (4)
-
Alan DeKok -
Marek Zarychta -
Matthew Newton -
The Doctor