Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Aug 2025 15:41:00 GMT
From:      Lexi Winter <ivy@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Subject:   git: 084a3e1e0337 - main - RELNOTES, UPDATING: Document Secure RPC DES removal
Message-ID:  <202508101541.57AFf0vQ079497@gitrepo.freebsd.org>

next in thread | raw e-mail | index | archive | help
The branch main has been updated by ivy:

URL: https://cgit.FreeBSD.org/src/commit/?id=084a3e1e033766eedb88b1cd99d786b4fd692931

commit 084a3e1e033766eedb88b1cd99d786b4fd692931
Author:     Lexi Winter <ivy@FreeBSD.org>
AuthorDate: 2025-08-10 15:40:08 +0000
Commit:     Lexi Winter <ivy@FreeBSD.org>
CommitDate: 2025-08-10 15:40:08 +0000

    RELNOTES, UPDATING: Document Secure RPC DES removal
---
 RELNOTES | 6 ++++++
 UPDATING | 7 +++++++
 2 files changed, 13 insertions(+)

diff --git a/RELNOTES b/RELNOTES
index 96149ad15178..da466b594f60 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -10,6 +10,12 @@ newline.  Entries should be separated by a newline.
 
 Changes to this file should not be MFCed.
 
+7ac276298b72, 7b8c9de17448, 1271b1d747a7, 9dcb984251b3:
+	Support for Secure RPC DES authentication has been removed.  This
+	includes publickey(5), keyserv(8) and the rpc_secure(3) routines which
+	rely on keyserv.  The libc symbols are still present for backward
+	compatibility, but all functions will unconditionally return an error.
+
 37b2cb5ecb0f:
 	Add support to VOP_COPY_FILE_RANGE() for block cloning.
 	At this time, ZFS is the only local file system that supports
diff --git a/UPDATING b/UPDATING
index 161c13a55065..78562d021e37 100644
--- a/UPDATING
+++ b/UPDATING
@@ -27,6 +27,13 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 15.x IS SLOW:
 	world, or to merely disable the most expensive debugging functionality
 	at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".)
 
+20250810:
+	Support for Secure RPC DES authentication has been removed.
+	The keyserv(8) daemon was already removed, but support for it in libc
+	has also been removed, so if you somehow still had keyserv installed,
+	it will now stop working.  There is no workaround for this.  Removing
+	DES is considered a feature.
+
 20250808:
 	The CLEAN option has been switched back from default-off to
 	default-on.  This reverts the 20240729 change below.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202508101541.57AFf0vQ079497>