Annotation of www/65.html, Revision 1.19
1.1 beck 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 6.5</title>
5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
6: <meta name="description" content="OpenBSD 6.5">
7: <meta name="copyright" content="This document copyright 2019 by OpenBSD.">
8: <meta name="viewport" content="width=device-width, initial-scale=1">
9: <link rel="stylesheet" type="text/css" href="openbsd.css">
10: <link rel="canonical" href="https://www.openbsd.org/65.html">
11: </head>
12:
13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
14:
15: <h2>
16: <a href="index.html">
17: <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
1.5 beck 18: <font color="#e00000">6.5</font>
1.1 beck 19: </h2>
20:
21: <a href="images/notyet.jpg">
22: <img align="left" width="227" height="343" hspace="24" src="images/Puffoil.gif"></a>
23: Released XXX XX, 2018<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
27:
28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
32: <li>Go to the <font color="#e00000">pub/OpenBSD/6.5/</font> directory on
33: one of the mirror sites.
1.2 beck 34: <li>Have a look at <a href="errata65.html">the 6.5 errata page</a> for a list
1.1 beck 35: of bugs and workarounds.
1.2 beck 36: <li>See a <a href="plus65.html">detailed log of changes</a> between the
1.1 beck 37: 6.4 and 6.5 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<br>
41: <pre>
42: </pre>
43: <p>
44: All applicable copyrights and credits are in the src.tar.gz,
45: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
46: files fetched via ports.tar.gz.
47: </ul>
48: <br clear=all>
49:
50: <hr>
51:
52: <h3 id="new"><font color="#0000e0">What's New</font></h3>
53:
54: This is a partial list of new features and systems included in OpenBSD 6.5.
1.2 beck 55: For a comprehensive list, see the <a href="plus65.html">changelog</a> leading
1.1 beck 56: to 6.5.
57:
58: <ul>
59:
60: <li>Improved hardware support, including:
1.3 visa 61: <ul>
62: <li><a href="https://man.openbsd.org/clang.1">clang(1)</a>
63: is now provided on mips64.
1.15 visa 64: <li>octeon: Now the system automatically detects the number of available
65: cores. However, manual setting of the numcores, or coremask,
66: boot parameter is still needed to enable secondary cores.
67: <li>octeon: It is now possible to use the root disk's DUID as the value
68: of the rootdev boot parameter.
1.3 visa 69: </ul>
1.1 beck 70:
71: <p>
72:
73: <li>IEEE 802.11 wireless stack improvements:
74: <p>
75:
76: <li>Generic network stack improvements:
77: <p>
78:
79: <li>Installer improvements:
80: <p>
81:
82: <li>Security improvements:
83: <p>
84:
85: <li>Routing daemons and other userland network improvements:
1.10 denis 86: <ul>
87: <li><a href="https://man.openbsd.org/bgplg.8">bgplg(8)</a> and
88: <a href="https://man.openbsd.org/bgplgsh.8">bgplgsh(8)</a> can
89: now filter on Origin Validation State and Extended Communities.
1.12 denis 90: <li><a href="https://man.openbsd.org/pcap-filter.3">pcap-filter(3)</a> can
91: now filter on MPLS packets.
1.10 denis 92: </ul>
1.1 beck 93: <p>
94:
95: <li>Assorted improvements:
96: <p>
97:
98: <li>OpenSMTPD
99: <p>
100:
1.4 bcook 101: <li>LibreSSL 2.9.X
102: <ul>
103: <li>API and Documentation Enhancements
104: <ul>
105: <li>
106: CRYPTO_LOCK is now automatically initialized, with the legacy
1.9 bcook 107: callbacks stubbed for compatibility.
1.4 bcook 108: <li>
109: Added the SM3 hash function from the Chinese standard GB/T 32905-2016.
1.7 bcook 110: <li>
1.9 bcook 111: Added more OPENSSL_NO_* macros for compatibility with OpenSSL.
1.16 beck 112: <li>
113: Added pbkdf2 key derivation support
1.19 ! jsg 114: to <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> enc.
! 115: <li>
! 116: Partial port of the OpenSSL EC_KEY_METHOD API for use by OpenSSH.
! 117: <li>
! 118: Implemented further missing OpenSSL 1.1 API.
! 119: </ul>
! 120:
! 121: <li>Compatibility Changes
! 122: <ul>
! 123: <li>
! 124: Changed the default digest type of
! 125: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> enc
! 126: to sha256.
1.18 naddy 127: <li>
128: Changed the default digest type of
129: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> dgst
130: to sha256.
1.17 tb 131: <li>
1.19 ! jsg 132: Changed the default digest type of
! 133: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
! 134: x509 -fingerprint to sha256.
1.17 tb 135: <li>
1.19 ! jsg 136: Changed the default digest type of
! 137: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
! 138: crl -fingerprint to sha256.
1.4 bcook 139: </ul>
140:
141: <li>Testing and Proactive Security
142: <ul>
143: <li>
1.8 bcook 144: Added extensive interoperability tests between LibreSSL and OpenSSL 1.0
1.9 bcook 145: and 1.1.
1.7 bcook 146: <li>
147: Added additional wycheproof tests and related bug fixes.
1.4 bcook 148: </ul>
149:
150: <li>Internal Improvements
151: <ul>
152: <li>
153: Simplified sigalgs option processing and handshake signing algorithm
1.9 bcook 154: selection.
1.4 bcook 155: <li>
1.9 bcook 156: Added the ability to use the RSA PSS algorithm for handshake signatures.
1.4 bcook 157: <li>
158: Added bn_rand_interval() and use it in code needing ranges of random bn
1.9 bcook 159: values.
1.4 bcook 160: <li>
161: Added functionality to derive early, handshake, and application secrets
1.9 bcook 162: as per RFC8446.
1.4 bcook 163: <li>
1.9 bcook 164: Added handshake state machine from RFC8446.
1.7 bcook 165: <li>
166: Removed some ASN.1 related code from libcrypto that had not been used
1.9 bcook 167: since around 2000.
1.7 bcook 168: <li>
169: Unexported internal symbols and internalized more record layer structs.
170:
1.4 bcook 171: </ul>
172:
1.6 bcook 173: <li>Portable Improvements
174: <ul>
175: <li>
1.9 bcook 176: Added support for assembly optimizations on 32-bit ARM ELF targets.
1.6 bcook 177: </ul>
178:
1.4 bcook 179: <li>Bug Fixes
180: <ul>
181: <li>
1.13 tb 182: Improved protection against timing side channels in ECDSA signature
183: generation.
1.4 bcook 184: <li>
1.14 tb 185: Coordinate blinding was added to some elliptic curves.
1.13 tb 186: This is the last bit of the work by Brumley et al. to protect against
187: the Portsmash vulnerability.
1.4 bcook 188: <li>
1.9 bcook 189: Ensure transcript handshake is always freed with TLS 1.2.
1.4 bcook 190: </ul>
191: </ul>
1.1 beck 192: <p>
193:
194: <li>Mandoc
195: <p>
196:
197: <li>Ports and packages:
198: <p>
199:
200: <li>As usual, steady improvements in manual pages and other documentation.
201: <p>
202:
203: <li>The system includes the following major components from outside suppliers:
1.4 bcook 204: <p>
1.1 beck 205:
206: </ul>
207:
208: <hr>
209:
210: <h3 id="install"><font color="#0000e0">How to install</font></h3>
211:
212: Please refer to the following files on the mirror site for
213: extensive details on how to install OpenBSD 6.5 on your machine:
214:
215: <ul>
216: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/alpha/INSTALL.alpha">
217: .../OpenBSD/6.5/alpha/INSTALL.alpha</a>
218: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/amd64/INSTALL.amd64">
219: .../OpenBSD/6.5/amd64/INSTALL.amd64</a>
220: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/arm64/INSTALL.arm64">
221: .../OpenBSD/6.5/arm64/INSTALL.arm64</a>
222: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/armv7/INSTALL.armv7">
223: .../OpenBSD/6.5/armv7/INSTALL.armv7</a>
224: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/hppa/INSTALL.hppa">
225: .../OpenBSD/6.5/hppa/INSTALL.hppa</a>
226: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/i386/INSTALL.i386">
227: .../OpenBSD/6.5/i386/INSTALL.i386</a>
228: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/landisk/INSTALL.landisk">
229: .../OpenBSD/6.5/landisk/INSTALL.landisk</a>
230: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/loongson/INSTALL.loongson">
231: .../OpenBSD/6.5/loongson/INSTALL.loongson</a>
232: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/luna88k/INSTALL.luna88k">
233: .../OpenBSD/6.5/luna88k/INSTALL.luna88k</a>
234: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/macppc/INSTALL.macppc">
235: .../OpenBSD/6.5/macppc/INSTALL.macppc</a>
236: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/octeon/INSTALL.octeon">
237: .../OpenBSD/6.5/octeon/INSTALL.octeon</a>
238: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sgi/INSTALL.sgi">
239: .../OpenBSD/6.5/sgi/INSTALL.sgi</a>
240: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sparc64/INSTALL.sparc64">
241: .../OpenBSD/6.5/sparc64/INSTALL.sparc64</a>
242: </ul>
243:
244: <hr>
245:
246: <p>
247: Quick installer information for people familiar with OpenBSD, and the use of
248: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
249: If you are at all confused when installing OpenBSD, read the relevant
250: INSTALL.* file as listed above!
251:
252: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
253:
254: <ul style="list-style-type: none">
255: <li>
1.2 beck 256: Write <i>floppy65.fs</i> or <i>floppyB65.fs</i> (depending on your machine)
1.1 beck 257: to a diskette and enter <i>boot dva0</i>.
258: Refer to INSTALL.alpha for more details.
259: <p>
260: <li>
261: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
262: will most likely fail.
263: </ul>
264:
265: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
266:
267: <ul style="list-style-type: none">
268: <li>
1.2 beck 269: If your machine can boot from CD, you can write <i>install65.iso</i> or
270: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 271: You may need to adjust your BIOS options first.
272: <p>
273: <li>
1.2 beck 274: If your machine can boot from USB, you can write <i>install65.fs</i> or
275: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 276: <p>
277: <li>
278: If you can't boot from a CD, floppy disk, or USB,
279: you can install across the network using PXE as described in the included
280: INSTALL.amd64 document.
281: <p>
282: <li>
283: If you are planning to dual boot OpenBSD with another OS, you will need to
284: read INSTALL.amd64.
285: </ul>
286:
287: <h3><font color="#e00000">OpenBSD/arm64:</font></h3>
288:
289: <ul style="list-style-type: none">
290: <li>
1.2 beck 291: Write <i>miniroot65.fs</i> to a disk and boot from it after connecting
1.1 beck 292: to the serial console. Refer to INSTALL.arm64 for more details.
293: <p>
294: </ul>
295:
296: <h3><font color="#e00000">OpenBSD/armv7:</font></h3>
297:
298: <ul style="list-style-type: none">
299: <li>
300: Write a system specific miniroot to an SD card and boot from it after connecting
301: to the serial console. Refer to INSTALL.armv7 for more details.
302: <p>
303: </ul>
304:
305: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
306:
307: <ul style="list-style-type: none">
308: <li>
309: Boot over the network by following the instructions in INSTALL.hppa or the
310: <a href="hppa.html#install">hppa platform page</a>.
311: </ul>
312:
313: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
314:
315: <ul style="list-style-type: none">
316: <li>
1.2 beck 317: If your machine can boot from CD, you can write <i>install65.iso</i> or
318: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 319: You may need to adjust your BIOS options first.
320: <p>
321: <li>
1.2 beck 322: If your machine can boot from USB, you can write <i>install65.fs</i> or
323: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 324: <p>
325: <li>
326: If you can't boot from a CD, floppy disk, or USB,
327: you can install across the network using PXE as described in
328: the included INSTALL.i386 document.
329: <p>
330: <li>
331: If you are planning on dual booting OpenBSD with another OS, you will need to
332: read INSTALL.i386.
333: </ul>
334:
335: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
336:
337: <ul style="list-style-type: none">
338: <li>
1.2 beck 339: Write <i>miniroot65.fs</i> to the start of the CF
1.1 beck 340: or disk, and boot normally.
341: </ul>
342:
343: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
344:
345: <ul style="list-style-type: none">
346: <li>
1.2 beck 347: Write <i>miniroot65.fs</i> to a USB stick and boot bsd.rd from it
1.1 beck 348: or boot bsd.rd via tftp.
349: Refer to the instructions in INSTALL.loongson for more details.
350: </ul>
351:
352: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
353:
354: <ul style="list-style-type: none">
355: <li>
356: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
357: from the PROM, and then bsd.rd from the bootloader.
358: Refer to the instructions in INSTALL.luna88k for more details.
359: </ul>
360:
361: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
362:
363: <ul style="list-style-type: none">
364: <li>
365: Burn the image from a mirror site to a CDROM, and power on your machine
366: while holding down the <i>C</i> key until the display turns on and
367: shows <i>OpenBSD/macppc boot</i>.
368: <p>
369: <li>
370: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
371: /6.5/macppc/bsd.rd</i>
372: </ul>
373:
374: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
375:
376: <ul style="list-style-type: none">
377: <li>
378: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
379: Refer to the instructions in INSTALL.octeon for more details.
380: </ul>
381:
382: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
383:
384: <ul style="list-style-type: none">
385: <li>
1.2 beck 386: To install, burn cd65.iso on a CD-R, put it in the CD drive of your
1.1 beck 387: machine and select <i>Install System Software</i> from the System Maintenance
388: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
389: CD-ROM, and need a proper invocation from the PROM prompt.
390: Refer to the instructions in INSTALL.sgi for more details.
391:
392: <p>
393: <li>
394: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
395: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
396: system type. Refer to the instructions in INSTALL.sgi for more details.
397: </ul>
398:
399: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
400:
401: <ul style="list-style-type: none">
402: <li>
403: Burn the image from a mirror site to a CDROM, boot from it, and type
404: <i>boot cdrom</i>.
405: <p>
406: <li>
407: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2 beck 408: <i>floppy65.fs</i> or <i>floppyB65.fs</i>
1.1 beck 409: (depending on your machine) to a floppy and boot it with <i>boot
410: floppy</i>. Refer to INSTALL.sparc64 for details.
411: <p>
412: <li>
413: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
414: will most likely fail.
415: <p>
416: <li>
1.2 beck 417: You can also write <i>miniroot65.fs</i> to the swap partition on
1.1 beck 418: the disk and boot with <i>boot disk:b</i>.
419: <p>
420: <li>
421: If nothing works, you can boot over the network as described in INSTALL.sparc64.
422: </ul>
423:
424: <hr>
425:
426: <h3 id="upgrade"><font color="#0000e0">How to upgrade</font></h3>
427:
428: If you already have an OpenBSD 6.4 system, and do not want to reinstall,
429: upgrade instructions and advice can be found in the
1.2 beck 430: <a href="faq/upgrade65.html">Upgrade Guide</a>.
1.1 beck 431: <p>
432:
433: <hr>
434:
435: <h3 id="sourcecode"><font color="#0000e0">Notes about the source code</font></h3>
436:
437: <tt>src.tar.gz</tt> contains a source archive starting at <tt>/usr/src</tt>.
438: This file contains everything you need except for the kernel sources,
439: which are in a separate archive.
440: To extract:
441:
442: <blockquote><pre>
443: # <b>mkdir -p /usr/src</b>
444: # <b>cd /usr/src</b>
445: # <b>tar xvfz /tmp/src.tar.gz</b>
446: </pre></blockquote>
447:
448: <tt>sys.tar.gz</tt> contains a source archive starting at <tt>/usr/src/sys</tt>.
449: This file contains all the kernel sources you need to rebuild kernels.
450: To extract:
451:
452: <blockquote><pre>
453: # <b>mkdir -p /usr/src/sys</b>
454: # <b>cd /usr/src</b>
455: # <b>tar xvfz /tmp/sys.tar.gz</b>
456: </pre></blockquote>
457:
458: Both of these trees are a regular CVS checkout. Using these trees it
459: is possible to get a head-start on using the anoncvs servers as
460: described <a href="anoncvs.html">here</a>.
461: Using these files
462: results in a much faster initial CVS update than you could expect from
463: a fresh checkout of the full OpenBSD source tree.
464: <p>
465:
466: <hr>
467:
468: <h3 id="ports"><font color="#0000e0">Ports Tree</font></h3>
469:
470: A ports tree archive is also provided. To extract:
471:
472: <blockquote><pre>
473: # <b>cd /usr</b>
474: # <b>tar xvfz /tmp/ports.tar.gz</b>
475: </pre></blockquote>
476:
477: Go read the <a href="faq/ports/index.html">ports</a> page
478: if you know nothing about ports
479: at this point. This text is not a manual of how to use ports.
480: Rather, it is a set of notes meant to kickstart the user on the
481: OpenBSD ports system.
482: <p>
483: The <i>ports/</i> directory represents a CVS checkout of our ports.
484: As with our complete source tree, our ports tree is available via
485: <a href="anoncvs.html">AnonCVS</a>.
486: So, in order to keep up to date with the -stable branch, you must make
487: the <i>ports/</i> tree available on a read-write medium and update the tree
488: with a command like:
489:
490: <blockquote><pre>
491: # <b>cd /usr/ports</b>
1.11 beck 492: # <b>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_5</b>
1.1 beck 493: </pre></blockquote>
494:
495: [Of course, you must replace the server name here with a nearby anoncvs
496: server.]
497: <p>
498: Note that most ports are available as packages on our mirrors. Updated
499: ports for the 6.5 release will be made available if problems arise.
500: <p>
501: If you're interested in seeing a port added, would like to help out, or just
502: would like to know more, the mailing list
503: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
504: <p>
505: </body>
506: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to 65.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www