pfSense Support Subscription

Author Topic: 2.2.4-RELEASE Now Available!  (Read 4055 times)

0 Members and 1 Guest are viewing this topic.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
2.2.4-RELEASE Now Available!
« on: July 26, 2015, 08:33:48 pm »

Offline kejianshi

  • Hero Member
  • *****
  • Posts: 4949
  • Karma: +195/-40
  • Debugging...
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #1 on: July 26, 2015, 10:27:36 pm »
Thanks!

Offline 91X

  • Full Member
  • ***
  • Posts: 159
  • Karma: +5/-2
  • Keep respect to all people!
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #2 on: July 26, 2015, 10:37:38 pm »
Great!  ;D

Offline phil.davis

  • Hero Member
  • *****
  • Posts: 4612
  • Karma: +550/-3
    • View Profile
    • International Nepal Fellowship
Re: 2.2.4-RELEASE Now Available!
« Reply #3 on: July 26, 2015, 10:41:05 pm »
2 x SG-2440
2 x APU
4 x Alix 2D13
so far
All rebooted fine and site-2-site OpenVPN reconnected... all good.
As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

Offline Bastion

  • Jr. Member
  • **
  • Posts: 27
  • Karma: +1/-0
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #4 on: July 26, 2015, 11:20:15 pm »
Smooth upgrade... THANKS

Offline SisterOfMercy

  • Jr. Member
  • **
  • Posts: 46
  • Karma: +6/-0
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #5 on: July 27, 2015, 02:18:20 pm »
This seems to be the best place  ;D

https://doc.pfsense.org/index.php/2.2.4_New_Features_and_Changes
"Fix dashboard hardware crypto display where AES-NI is enabled. #4832"

I think this refers to the wrong bug; https://redmine.pfsense.org/issues/4809

And can somebody tell me how enable this hardware crypto display on the dashboard?  ;)
Hi, I'm Lance Boyle, and people often wonder if I'm real.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
Re: 2.2.4-RELEASE Now Available!
« Reply #6 on: July 27, 2015, 03:18:57 pm »
https://doc.pfsense.org/index.php/2.2.4_New_Features_and_Changes
"Fix dashboard hardware crypto display where AES-NI is enabled. #4832"

I think this refers to the wrong bug; https://redmine.pfsense.org/issues/4809

And can somebody tell me how enable this hardware crypto display on the dashboard?  ;)

Yeah that was linked to the wrong bug number, fixed.

It automatically displays on the dashboard where AES-NI is enabled under System>Advanced, Misc, and exists on the system.

Offline SisterOfMercy

  • Jr. Member
  • **
  • Posts: 46
  • Karma: +6/-0
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #7 on: July 27, 2015, 04:21:32 pm »
It automatically displays on the dashboard where AES-NI is enabled under System>Advanced, Misc, and exists on the system.

This should be in the 'system information' widget, right? I have an A1SRi-2558F, AES-NI is enabled under the misc settings. It doesn't show for me. I tried to disable AES-NI and then enable it again, but that also did not work.

Status -> System logs does show "kernel: aesni0: <AES-CBC,AES-XTS,AES-GCM> on motherboard"

Oh, now I get it, cat /var/log/dmesg.boot | grep aes doesn't show anything, it only shows something for grep AES.
In /var/log/system.log there is the "kernel: aesni0: <AES-CBC,AES-XTS,AES-GCM> on motherboard" logged.

What to do? Keep complaining here, open a new bug report, continue with 4809 or something else?

Hi, I'm Lance Boyle, and people often wonder if I'm real.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
Re: 2.2.4-RELEASE Now Available!
« Reply #8 on: July 27, 2015, 04:25:37 pm »
Guessing you enabled it after the last boot of the system? That should be the only way it won't show 'aesni0' in dmesg.boot, but it is in the system log. The boot log is the only thing that's retained that can be used for that purpose, so it won't show if it wasn't enabled during the last boot of the system.

Offline SisterOfMercy

  • Jr. Member
  • **
  • Posts: 46
  • Karma: +6/-0
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #9 on: July 27, 2015, 04:31:13 pm »
Guessing you enabled it after the last boot of the system? That should be the only way it won't show 'aesni0' in dmesg.boot, but it is in the system log. The boot log is the only thing that's retained that can be used for that purpose, so it won't show if it wasn't enabled during the last boot of the system.

I enabled aes-ni a while ago. Because of 2.2.4, to make sure I just rebooted, with the same results.
Hi, I'm Lance Boyle, and people often wonder if I'm real.

Offline phil.davis

  • Hero Member
  • *****
  • Posts: 4612
  • Karma: +550/-3
    • View Profile
    • International Nepal Fellowship
Re: 2.2.4-RELEASE Now Available!
« Reply #10 on: July 27, 2015, 09:09:57 pm »
If you are using URL Ports type alias(es) then you will get "Error loading the rules" in 2.2.4 - I broke that (unintentionally) when handling another case of numeric host names.
You will need to apply this patch on top of 2.2.4 to fix it:
https://github.com/pfsense/pfsense/commit/d7b67981909a17f575aaa90f4468b3b9ad1dffde

which can be done easily using the System Patches package.
As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
Re: 2.2.4-RELEASE Now Available!
« Reply #11 on: July 27, 2015, 09:13:18 pm »
Guessing you enabled it after the last boot of the system? That should be the only way it won't show 'aesni0' in dmesg.boot, but it is in the system log. The boot log is the only thing that's retained that can be used for that purpose, so it won't show if it wasn't enabled during the last boot of the system.

I enabled aes-ni a while ago. Because of 2.2.4, to make sure I just rebooted, with the same results.

Start a new thread on that, including the output of:
Code: [Select]
grep -i aesni /var/log/dmesg.boot
and we can troubleshoot there.

Offline pppfsense

  • Jr. Member
  • **
  • Posts: 74
  • Karma: +6/-4
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #12 on: July 28, 2015, 07:35:59 am »
https://blog.pfsense.org/?p=1833

Thank you so much pfSense Team!

I updated yesterday and the new version is working fine, the ONE *recurrent* issue that I believe the Team should look into, is the
Package re-installation:

Package re-installation has had issues in pretty much every single update I have done.
Packages start to get re-installed but the process stops at one point or another.
You have to check your package list as sometimes it deletes the package when the process dies in the middle (can we at least make sure we don't
lose the package when something goes wrong in the update??).

I end up having to either re-install all packages (Diagnostic-Backup/Restore-Reinstall Packages) or to re-install each individual package when
the Reinstall Packages halts and never finishes going through all the package re-installs.

Instead of having a 10 minute painless update, I had to spent a good while re-installing packages and 'hoping' they work...

Can we *please* put some attention and effort to Package re-installation?

Thanks again for a great product!
J.

Offline cmb

  • Hero Member
  • *****
  • Posts: 11230
  • Karma: +893/-7
    • View Profile
    • Chris Buechler
Re: 2.2.4-RELEASE Now Available!
« Reply #13 on: July 28, 2015, 01:11:23 pm »
Indeed package reinstalls getting stuck has been an issue forever. Like there's an ntopng bug ticket open that shows where its reinstall fails and hangs 1 of 3 times IIRC, which causes the package reinstall process to get stuck. Usually some kind of includes mess in the package's code. That's something we'll get some focus towards in 2.3 as we're getting rid of the PBI mess.

Offline pppfsense

  • Jr. Member
  • **
  • Posts: 74
  • Karma: +6/-4
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #14 on: July 29, 2015, 01:50:20 pm »
Indeed package reinstalls getting stuck has been an issue forever. Like there's an ntopng bug ticket open that shows where its reinstall fails and hangs 1 of 3 times IIRC, which causes the package reinstall process to get stuck. Usually some kind of includes mess in the package's code. That's something we'll get some focus towards in 2.3 as we're getting rid of the PBI mess.

Thanks for the reply/ack.
Not only this is screwing peoples config, but it is wasting bandwidth every time the package(s) fail.

Hope it gets fixed sometime soon so I can finally deploy pfsense around my customers.
It is a very small issue, yes, but I don't deploy to my customers any sw that it is not rock-solid.

I do use several packages (pfBlockerNG, squid3, cron, suricata) that are essential to my installs and cannot be babysitting
the package re-installation on each of them after each upgrade.

Thanks again for the great work and I will be contributing to the project.
J

Offline virgiliomi

  • Sr. Member
  • ****
  • Posts: 553
  • Karma: +74/-4
    • View Profile
Re: 2.2.4-RELEASE Now Available!
« Reply #15 on: July 29, 2015, 08:41:07 pm »
Start a new thread on that, including the output of:
Code: [Select]
grep -i aesni /var/log/dmesg.bootand we can troubleshoot there.
Just wanted to point out... I started a thread about this as it's affecting me as well.

https://forum.pfsense.org/index.php?topic=97240.0