Annotation of www/65.html, Revision 1.11
1.1 beck 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 6.5</title>
5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
6: <meta name="description" content="OpenBSD 6.5">
7: <meta name="copyright" content="This document copyright 2019 by OpenBSD.">
8: <meta name="viewport" content="width=device-width, initial-scale=1">
9: <link rel="stylesheet" type="text/css" href="openbsd.css">
10: <link rel="canonical" href="https://www.openbsd.org/65.html">
11: </head>
12:
13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
14:
15: <h2>
16: <a href="index.html">
17: <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
1.5 beck 18: <font color="#e00000">6.5</font>
1.1 beck 19: </h2>
20:
21: <a href="images/notyet.jpg">
22: <img align="left" width="227" height="343" hspace="24" src="images/Puffoil.gif"></a>
23: Released XXX XX, 2018<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
27:
28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
32: <li>Go to the <font color="#e00000">pub/OpenBSD/6.5/</font> directory on
33: one of the mirror sites.
1.2 beck 34: <li>Have a look at <a href="errata65.html">the 6.5 errata page</a> for a list
1.1 beck 35: of bugs and workarounds.
1.2 beck 36: <li>See a <a href="plus65.html">detailed log of changes</a> between the
1.1 beck 37: 6.4 and 6.5 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<br>
41: <pre>
42: </pre>
43: <p>
44: All applicable copyrights and credits are in the src.tar.gz,
45: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
46: files fetched via ports.tar.gz.
47: </ul>
48: <br clear=all>
49:
50: <hr>
51:
52: <h3 id="new"><font color="#0000e0">What's New</font></h3>
53:
54: This is a partial list of new features and systems included in OpenBSD 6.5.
1.2 beck 55: For a comprehensive list, see the <a href="plus65.html">changelog</a> leading
1.1 beck 56: to 6.5.
57:
58: <ul>
59:
60: <li>Improved hardware support, including:
1.3 visa 61: <ul>
62: <li><a href="https://man.openbsd.org/clang.1">clang(1)</a>
63: is now provided on mips64.
64: </ul>
1.1 beck 65:
66: <p>
67:
68: <li>IEEE 802.11 wireless stack improvements:
69: <p>
70:
71: <li>Generic network stack improvements:
72: <p>
73:
74: <li>Installer improvements:
75: <p>
76:
77: <li>Security improvements:
78: <p>
79:
80: <li>Routing daemons and other userland network improvements:
1.10 denis 81: <ul>
82: <li><a href="https://man.openbsd.org/bgplg.8">bgplg(8)</a> and
83: <a href="https://man.openbsd.org/bgplgsh.8">bgplgsh(8)</a> can
84: now filter on Origin Validation State and Extended Communities.
85: </ul>
1.1 beck 86: <p>
87:
88: <li>Assorted improvements:
89: <p>
90:
91: <li>OpenSMTPD
92: <p>
93:
1.4 bcook 94: <li>LibreSSL 2.9.X
95: <ul>
96: <li>API and Documentation Enhancements
97: <ul>
98: <li>
99: CRYPTO_LOCK is now automatically initialized, with the legacy
1.9 bcook 100: callbacks stubbed for compatibility.
1.4 bcook 101: <li>
102: Added the SM3 hash function from the Chinese standard GB/T 32905-2016.
1.7 bcook 103: <li>
1.9 bcook 104: Added more OPENSSL_NO_* macros for compatibility with OpenSSL.
1.4 bcook 105: </ul>
106:
107: <li>Testing and Proactive Security
108: <ul>
109: <li>
1.8 bcook 110: Added extensive interoperability tests between LibreSSL and OpenSSL 1.0
1.9 bcook 111: and 1.1.
1.7 bcook 112: <li>
113: Added additional wycheproof tests and related bug fixes.
1.4 bcook 114: </ul>
115:
116: <li>Internal Improvements
117: <ul>
118: <li>
119: Simplified sigalgs option processing and handshake signing algorithm
1.9 bcook 120: selection.
1.4 bcook 121: <li>
1.9 bcook 122: Added the ability to use the RSA PSS algorithm for handshake signatures.
1.4 bcook 123: <li>
124: Added bn_rand_interval() and use it in code needing ranges of random bn
1.9 bcook 125: values.
1.4 bcook 126: <li>
127: Added functionality to derive early, handshake, and application secrets
1.9 bcook 128: as per RFC8446.
1.4 bcook 129: <li>
1.9 bcook 130: Added handshake state machine from RFC8446.
1.7 bcook 131: <li>
132: Removed some ASN.1 related code from libcrypto that had not been used
1.9 bcook 133: since around 2000.
1.7 bcook 134: <li>
135: Unexported internal symbols and internalized more record layer structs.
136:
1.4 bcook 137: </ul>
138:
1.6 bcook 139: <li>Portable Improvements
140: <ul>
141: <li>
1.9 bcook 142: Added support for assembly optimizations on 32-bit ARM ELF targets.
1.6 bcook 143: </ul>
144:
1.4 bcook 145: <li>Bug Fixes
146: <ul>
147: <li>
1.9 bcook 148: Fix timing vulnerability in ECDSA signature generation (CVE-2018-0735).
1.4 bcook 149: <li>
150: Fix for Portsmash vulnerability originally by Brumley, ul Hassan and
1.9 bcook 151: Tuveri.
1.4 bcook 152: <li>
1.9 bcook 153: Ensure transcript handshake is always freed with TLS 1.2.
1.4 bcook 154: </ul>
155: </ul>
1.1 beck 156: <p>
157:
158: <li>Mandoc
159: <p>
160:
161: <li>Ports and packages:
162: <p>
163:
164: <li>As usual, steady improvements in manual pages and other documentation.
165: <p>
166:
167: <li>The system includes the following major components from outside suppliers:
1.4 bcook 168: <p>
1.1 beck 169:
170: </ul>
171:
172: <hr>
173:
174: <h3 id="install"><font color="#0000e0">How to install</font></h3>
175:
176: Please refer to the following files on the mirror site for
177: extensive details on how to install OpenBSD 6.5 on your machine:
178:
179: <ul>
180: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/alpha/INSTALL.alpha">
181: .../OpenBSD/6.5/alpha/INSTALL.alpha</a>
182: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/amd64/INSTALL.amd64">
183: .../OpenBSD/6.5/amd64/INSTALL.amd64</a>
184: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/arm64/INSTALL.arm64">
185: .../OpenBSD/6.5/arm64/INSTALL.arm64</a>
186: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/armv7/INSTALL.armv7">
187: .../OpenBSD/6.5/armv7/INSTALL.armv7</a>
188: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/hppa/INSTALL.hppa">
189: .../OpenBSD/6.5/hppa/INSTALL.hppa</a>
190: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/i386/INSTALL.i386">
191: .../OpenBSD/6.5/i386/INSTALL.i386</a>
192: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/landisk/INSTALL.landisk">
193: .../OpenBSD/6.5/landisk/INSTALL.landisk</a>
194: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/loongson/INSTALL.loongson">
195: .../OpenBSD/6.5/loongson/INSTALL.loongson</a>
196: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/luna88k/INSTALL.luna88k">
197: .../OpenBSD/6.5/luna88k/INSTALL.luna88k</a>
198: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/macppc/INSTALL.macppc">
199: .../OpenBSD/6.5/macppc/INSTALL.macppc</a>
200: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/octeon/INSTALL.octeon">
201: .../OpenBSD/6.5/octeon/INSTALL.octeon</a>
202: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sgi/INSTALL.sgi">
203: .../OpenBSD/6.5/sgi/INSTALL.sgi</a>
204: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sparc64/INSTALL.sparc64">
205: .../OpenBSD/6.5/sparc64/INSTALL.sparc64</a>
206: </ul>
207:
208: <hr>
209:
210: <p>
211: Quick installer information for people familiar with OpenBSD, and the use of
212: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
213: If you are at all confused when installing OpenBSD, read the relevant
214: INSTALL.* file as listed above!
215:
216: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
217:
218: <ul style="list-style-type: none">
219: <li>
1.2 beck 220: Write <i>floppy65.fs</i> or <i>floppyB65.fs</i> (depending on your machine)
1.1 beck 221: to a diskette and enter <i>boot dva0</i>.
222: Refer to INSTALL.alpha for more details.
223: <p>
224: <li>
225: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
226: will most likely fail.
227: </ul>
228:
229: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
230:
231: <ul style="list-style-type: none">
232: <li>
1.2 beck 233: If your machine can boot from CD, you can write <i>install65.iso</i> or
234: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 235: You may need to adjust your BIOS options first.
236: <p>
237: <li>
1.2 beck 238: If your machine can boot from USB, you can write <i>install65.fs</i> or
239: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 240: <p>
241: <li>
242: If you can't boot from a CD, floppy disk, or USB,
243: you can install across the network using PXE as described in the included
244: INSTALL.amd64 document.
245: <p>
246: <li>
247: If you are planning to dual boot OpenBSD with another OS, you will need to
248: read INSTALL.amd64.
249: </ul>
250:
251: <h3><font color="#e00000">OpenBSD/arm64:</font></h3>
252:
253: <ul style="list-style-type: none">
254: <li>
1.2 beck 255: Write <i>miniroot65.fs</i> to a disk and boot from it after connecting
1.1 beck 256: to the serial console. Refer to INSTALL.arm64 for more details.
257: <p>
258: </ul>
259:
260: <h3><font color="#e00000">OpenBSD/armv7:</font></h3>
261:
262: <ul style="list-style-type: none">
263: <li>
264: Write a system specific miniroot to an SD card and boot from it after connecting
265: to the serial console. Refer to INSTALL.armv7 for more details.
266: <p>
267: </ul>
268:
269: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
270:
271: <ul style="list-style-type: none">
272: <li>
273: Boot over the network by following the instructions in INSTALL.hppa or the
274: <a href="hppa.html#install">hppa platform page</a>.
275: </ul>
276:
277: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
278:
279: <ul style="list-style-type: none">
280: <li>
1.2 beck 281: If your machine can boot from CD, you can write <i>install65.iso</i> or
282: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 283: You may need to adjust your BIOS options first.
284: <p>
285: <li>
1.2 beck 286: If your machine can boot from USB, you can write <i>install65.fs</i> or
287: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 288: <p>
289: <li>
290: If you can't boot from a CD, floppy disk, or USB,
291: you can install across the network using PXE as described in
292: the included INSTALL.i386 document.
293: <p>
294: <li>
295: If you are planning on dual booting OpenBSD with another OS, you will need to
296: read INSTALL.i386.
297: </ul>
298:
299: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
300:
301: <ul style="list-style-type: none">
302: <li>
1.2 beck 303: Write <i>miniroot65.fs</i> to the start of the CF
1.1 beck 304: or disk, and boot normally.
305: </ul>
306:
307: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
308:
309: <ul style="list-style-type: none">
310: <li>
1.2 beck 311: Write <i>miniroot65.fs</i> to a USB stick and boot bsd.rd from it
1.1 beck 312: or boot bsd.rd via tftp.
313: Refer to the instructions in INSTALL.loongson for more details.
314: </ul>
315:
316: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
317:
318: <ul style="list-style-type: none">
319: <li>
320: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
321: from the PROM, and then bsd.rd from the bootloader.
322: Refer to the instructions in INSTALL.luna88k for more details.
323: </ul>
324:
325: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
326:
327: <ul style="list-style-type: none">
328: <li>
329: Burn the image from a mirror site to a CDROM, and power on your machine
330: while holding down the <i>C</i> key until the display turns on and
331: shows <i>OpenBSD/macppc boot</i>.
332: <p>
333: <li>
334: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
335: /6.5/macppc/bsd.rd</i>
336: </ul>
337:
338: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
339:
340: <ul style="list-style-type: none">
341: <li>
342: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
343: Refer to the instructions in INSTALL.octeon for more details.
344: </ul>
345:
346: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
347:
348: <ul style="list-style-type: none">
349: <li>
1.2 beck 350: To install, burn cd65.iso on a CD-R, put it in the CD drive of your
1.1 beck 351: machine and select <i>Install System Software</i> from the System Maintenance
352: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
353: CD-ROM, and need a proper invocation from the PROM prompt.
354: Refer to the instructions in INSTALL.sgi for more details.
355:
356: <p>
357: <li>
358: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
359: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
360: system type. Refer to the instructions in INSTALL.sgi for more details.
361: </ul>
362:
363: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
364:
365: <ul style="list-style-type: none">
366: <li>
367: Burn the image from a mirror site to a CDROM, boot from it, and type
368: <i>boot cdrom</i>.
369: <p>
370: <li>
371: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2 beck 372: <i>floppy65.fs</i> or <i>floppyB65.fs</i>
1.1 beck 373: (depending on your machine) to a floppy and boot it with <i>boot
374: floppy</i>. Refer to INSTALL.sparc64 for details.
375: <p>
376: <li>
377: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
378: will most likely fail.
379: <p>
380: <li>
1.2 beck 381: You can also write <i>miniroot65.fs</i> to the swap partition on
1.1 beck 382: the disk and boot with <i>boot disk:b</i>.
383: <p>
384: <li>
385: If nothing works, you can boot over the network as described in INSTALL.sparc64.
386: </ul>
387:
388: <hr>
389:
390: <h3 id="upgrade"><font color="#0000e0">How to upgrade</font></h3>
391:
392: If you already have an OpenBSD 6.4 system, and do not want to reinstall,
393: upgrade instructions and advice can be found in the
1.2 beck 394: <a href="faq/upgrade65.html">Upgrade Guide</a>.
1.1 beck 395: <p>
396:
397: <hr>
398:
399: <h3 id="sourcecode"><font color="#0000e0">Notes about the source code</font></h3>
400:
401: <tt>src.tar.gz</tt> contains a source archive starting at <tt>/usr/src</tt>.
402: This file contains everything you need except for the kernel sources,
403: which are in a separate archive.
404: To extract:
405:
406: <blockquote><pre>
407: # <b>mkdir -p /usr/src</b>
408: # <b>cd /usr/src</b>
409: # <b>tar xvfz /tmp/src.tar.gz</b>
410: </pre></blockquote>
411:
412: <tt>sys.tar.gz</tt> contains a source archive starting at <tt>/usr/src/sys</tt>.
413: This file contains all the kernel sources you need to rebuild kernels.
414: To extract:
415:
416: <blockquote><pre>
417: # <b>mkdir -p /usr/src/sys</b>
418: # <b>cd /usr/src</b>
419: # <b>tar xvfz /tmp/sys.tar.gz</b>
420: </pre></blockquote>
421:
422: Both of these trees are a regular CVS checkout. Using these trees it
423: is possible to get a head-start on using the anoncvs servers as
424: described <a href="anoncvs.html">here</a>.
425: Using these files
426: results in a much faster initial CVS update than you could expect from
427: a fresh checkout of the full OpenBSD source tree.
428: <p>
429:
430: <hr>
431:
432: <h3 id="ports"><font color="#0000e0">Ports Tree</font></h3>
433:
434: A ports tree archive is also provided. To extract:
435:
436: <blockquote><pre>
437: # <b>cd /usr</b>
438: # <b>tar xvfz /tmp/ports.tar.gz</b>
439: </pre></blockquote>
440:
441: Go read the <a href="faq/ports/index.html">ports</a> page
442: if you know nothing about ports
443: at this point. This text is not a manual of how to use ports.
444: Rather, it is a set of notes meant to kickstart the user on the
445: OpenBSD ports system.
446: <p>
447: The <i>ports/</i> directory represents a CVS checkout of our ports.
448: As with our complete source tree, our ports tree is available via
449: <a href="anoncvs.html">AnonCVS</a>.
450: So, in order to keep up to date with the -stable branch, you must make
451: the <i>ports/</i> tree available on a read-write medium and update the tree
452: with a command like:
453:
454: <blockquote><pre>
455: # <b>cd /usr/ports</b>
1.11 ! beck 456: # <b>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_5</b>
1.1 beck 457: </pre></blockquote>
458:
459: [Of course, you must replace the server name here with a nearby anoncvs
460: server.]
461: <p>
462: Note that most ports are available as packages on our mirrors. Updated
463: ports for the 6.5 release will be made available if problems arise.
464: <p>
465: If you're interested in seeing a port added, would like to help out, or just
466: would like to know more, the mailing list
467: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
468: <p>
469: </body>
470: </html>