Annotation of www/65.html, Revision 1.27
1.1 beck 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 6.5</title>
5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
6: <meta name="description" content="OpenBSD 6.5">
7: <meta name="copyright" content="This document copyright 2019 by OpenBSD.">
8: <meta name="viewport" content="width=device-width, initial-scale=1">
9: <link rel="stylesheet" type="text/css" href="openbsd.css">
10: <link rel="canonical" href="https://www.openbsd.org/65.html">
11: </head>
12:
13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
14:
15: <h2>
16: <a href="index.html">
17: <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
1.5 beck 18: <font color="#e00000">6.5</font>
1.1 beck 19: </h2>
20:
21: <a href="images/notyet.jpg">
22: <img align="left" width="227" height="343" hspace="24" src="images/Puffoil.gif"></a>
23: Released XXX XX, 2018<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
27:
28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
32: <li>Go to the <font color="#e00000">pub/OpenBSD/6.5/</font> directory on
33: one of the mirror sites.
1.2 beck 34: <li>Have a look at <a href="errata65.html">the 6.5 errata page</a> for a list
1.1 beck 35: of bugs and workarounds.
1.2 beck 36: <li>See a <a href="plus65.html">detailed log of changes</a> between the
1.1 beck 37: 6.4 and 6.5 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<br>
41: <pre>
1.26 benno 42: base: RWSZaRmt1LEQT9CtPygf9CvONu8kYPTlVEJdysNoUR62/NkeWgdkc3zY
43: fw: RWQYdGVtTv5IvpH2c+TLQAC4iV7RjoGZ/v75q8MCuC9Mca7nFVCXRefy
44: pkg: RWS5D4+188RI6jULDOFzga0Cm1zrXYUAHT6xu0mLrZidbn6xrMB5aZeR
45: syspatch: RWT8U2yd3Aq5DnetILjmSoCQxmyt3VqfGS7GBh19oh4Xre4ywc31PEpw
1.1 beck 46: </pre>
47: <p>
48: All applicable copyrights and credits are in the src.tar.gz,
49: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
50: files fetched via ports.tar.gz.
51: </ul>
52: <br clear=all>
53:
54: <hr>
55:
56: <h3 id="new"><font color="#0000e0">What's New</font></h3>
57:
58: This is a partial list of new features and systems included in OpenBSD 6.5.
1.2 beck 59: For a comprehensive list, see the <a href="plus65.html">changelog</a> leading
1.1 beck 60: to 6.5.
61:
62: <ul>
63:
64: <li>Improved hardware support, including:
1.3 visa 65: <ul>
66: <li><a href="https://man.openbsd.org/clang.1">clang(1)</a>
67: is now provided on mips64.
1.15 visa 68: <li>octeon: Now the system automatically detects the number of available
69: cores. However, manual setting of the numcores, or coremask,
70: boot parameter is still needed to enable secondary cores.
71: <li>octeon: It is now possible to use the root disk's DUID as the value
72: of the rootdev boot parameter.
1.3 visa 73: </ul>
1.1 beck 74:
75: <p>
76:
77: <li>IEEE 802.11 wireless stack improvements:
78: <p>
79:
80: <li>Generic network stack improvements:
81: <p>
82:
83: <li>Installer improvements:
84: <p>
85:
86: <li>Security improvements:
87: <p>
88:
89: <li>Routing daemons and other userland network improvements:
1.10 denis 90: <ul>
91: <li><a href="https://man.openbsd.org/bgplg.8">bgplg(8)</a> and
92: <a href="https://man.openbsd.org/bgplgsh.8">bgplgsh(8)</a> can
93: now filter on Origin Validation State and Extended Communities.
1.27 ! benno 94: <li><a href="https://man.openbsd.org/bgplgsh.8">bgplgsh(8)</a> can
! 95: now [clear|destroy|down|refresh|up] and show groups of neighbors.
1.12 denis 96: <li><a href="https://man.openbsd.org/pcap-filter.3">pcap-filter(3)</a> can
97: now filter on MPLS packets.
1.10 denis 98: </ul>
1.1 beck 99: <p>
100:
101: <li>Assorted improvements:
1.20 anton 102: <ul>
103: <li>
104: <a href="https://man.openbsd.org/kcov.4">kcov(4)</a>
105: gained support for
106: <a href="https://man.openbsd.org/kcov#KCOV_MODE_TRACE_CMP">KCOV_MODE_TRACE_CMP</a>.
1.24 landry 107: <li>
108: A 'video' promise was added to <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>.
1.25 visa 109: <li>
110: The <code>kern.witnesswatch</code>
111: <a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>
112: has been renamed to <code>kern.witness.watch</code>.
1.20 anton 113: </ul>
1.1 beck 114: <p>
115:
116: <li>OpenSMTPD
117: <p>
118:
1.4 bcook 119: <li>LibreSSL 2.9.X
120: <ul>
121: <li>API and Documentation Enhancements
122: <ul>
123: <li>
124: CRYPTO_LOCK is now automatically initialized, with the legacy
1.9 bcook 125: callbacks stubbed for compatibility.
1.4 bcook 126: <li>
127: Added the SM3 hash function from the Chinese standard GB/T 32905-2016.
1.7 bcook 128: <li>
1.9 bcook 129: Added more OPENSSL_NO_* macros for compatibility with OpenSSL.
1.16 beck 130: <li>
1.19 jsg 131: Partial port of the OpenSSL EC_KEY_METHOD API for use by OpenSSH.
132: <li>
133: Implemented further missing OpenSSL 1.1 API.
1.21 tb 134: <li>
135: Added support for XChaCha20 and XChaCha20-Poly1305.
1.19 jsg 136: </ul>
137:
138: <li>Compatibility Changes
139: <ul>
140: <li>
1.23 beck 141: Added pbkdf2 key derivation support
142: to <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> enc.
143: <li>
1.19 jsg 144: Changed the default digest type of
145: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> enc
146: to sha256.
1.18 naddy 147: <li>
148: Changed the default digest type of
149: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> dgst
150: to sha256.
1.17 tb 151: <li>
1.19 jsg 152: Changed the default digest type of
153: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
154: x509 -fingerprint to sha256.
1.17 tb 155: <li>
1.19 jsg 156: Changed the default digest type of
157: <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
158: crl -fingerprint to sha256.
1.4 bcook 159: </ul>
160:
161: <li>Testing and Proactive Security
162: <ul>
163: <li>
1.8 bcook 164: Added extensive interoperability tests between LibreSSL and OpenSSL 1.0
1.9 bcook 165: and 1.1.
1.7 bcook 166: <li>
167: Added additional wycheproof tests and related bug fixes.
1.4 bcook 168: </ul>
169:
170: <li>Internal Improvements
171: <ul>
172: <li>
173: Simplified sigalgs option processing and handshake signing algorithm
1.9 bcook 174: selection.
1.4 bcook 175: <li>
1.9 bcook 176: Added the ability to use the RSA PSS algorithm for handshake signatures.
1.4 bcook 177: <li>
178: Added bn_rand_interval() and use it in code needing ranges of random bn
1.9 bcook 179: values.
1.4 bcook 180: <li>
181: Added functionality to derive early, handshake, and application secrets
1.9 bcook 182: as per RFC8446.
1.4 bcook 183: <li>
1.9 bcook 184: Added handshake state machine from RFC8446.
1.7 bcook 185: <li>
186: Removed some ASN.1 related code from libcrypto that had not been used
1.9 bcook 187: since around 2000.
1.7 bcook 188: <li>
189: Unexported internal symbols and internalized more record layer structs.
1.23 beck 190: <li>
191: Removed SHA224 based handshake signatures from consideration for use in a TLS 1.2 handshake.
1.4 bcook 192: </ul>
193:
1.6 bcook 194: <li>Portable Improvements
195: <ul>
196: <li>
1.9 bcook 197: Added support for assembly optimizations on 32-bit ARM ELF targets.
1.6 bcook 198: </ul>
199:
1.4 bcook 200: <li>Bug Fixes
201: <ul>
202: <li>
1.13 tb 203: Improved protection against timing side channels in ECDSA signature
204: generation.
1.4 bcook 205: <li>
1.14 tb 206: Coordinate blinding was added to some elliptic curves.
1.13 tb 207: This is the last bit of the work by Brumley et al. to protect against
208: the Portsmash vulnerability.
1.4 bcook 209: <li>
1.9 bcook 210: Ensure transcript handshake is always freed with TLS 1.2.
1.4 bcook 211: </ul>
212: </ul>
1.1 beck 213: <p>
214:
215: <li>Mandoc
216: <p>
217:
218: <li>Ports and packages:
219: <p>
220:
221: <li>As usual, steady improvements in manual pages and other documentation.
222: <p>
223:
224: <li>The system includes the following major components from outside suppliers:
1.4 bcook 225: <p>
1.1 beck 226:
227: </ul>
228:
229: <hr>
230:
231: <h3 id="install"><font color="#0000e0">How to install</font></h3>
232:
233: Please refer to the following files on the mirror site for
234: extensive details on how to install OpenBSD 6.5 on your machine:
235:
236: <ul>
237: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/alpha/INSTALL.alpha">
238: .../OpenBSD/6.5/alpha/INSTALL.alpha</a>
239: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/amd64/INSTALL.amd64">
240: .../OpenBSD/6.5/amd64/INSTALL.amd64</a>
241: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/arm64/INSTALL.arm64">
242: .../OpenBSD/6.5/arm64/INSTALL.arm64</a>
243: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/armv7/INSTALL.armv7">
244: .../OpenBSD/6.5/armv7/INSTALL.armv7</a>
245: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/hppa/INSTALL.hppa">
246: .../OpenBSD/6.5/hppa/INSTALL.hppa</a>
247: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/i386/INSTALL.i386">
248: .../OpenBSD/6.5/i386/INSTALL.i386</a>
249: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/landisk/INSTALL.landisk">
250: .../OpenBSD/6.5/landisk/INSTALL.landisk</a>
251: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/loongson/INSTALL.loongson">
252: .../OpenBSD/6.5/loongson/INSTALL.loongson</a>
253: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/luna88k/INSTALL.luna88k">
254: .../OpenBSD/6.5/luna88k/INSTALL.luna88k</a>
255: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/macppc/INSTALL.macppc">
256: .../OpenBSD/6.5/macppc/INSTALL.macppc</a>
257: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/octeon/INSTALL.octeon">
258: .../OpenBSD/6.5/octeon/INSTALL.octeon</a>
259: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sgi/INSTALL.sgi">
260: .../OpenBSD/6.5/sgi/INSTALL.sgi</a>
261: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sparc64/INSTALL.sparc64">
262: .../OpenBSD/6.5/sparc64/INSTALL.sparc64</a>
263: </ul>
264:
265: <hr>
266:
267: <p>
268: Quick installer information for people familiar with OpenBSD, and the use of
269: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
270: If you are at all confused when installing OpenBSD, read the relevant
271: INSTALL.* file as listed above!
272:
273: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
274:
275: <ul style="list-style-type: none">
276: <li>
1.2 beck 277: Write <i>floppy65.fs</i> or <i>floppyB65.fs</i> (depending on your machine)
1.1 beck 278: to a diskette and enter <i>boot dva0</i>.
279: Refer to INSTALL.alpha for more details.
280: <p>
281: <li>
282: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
283: will most likely fail.
284: </ul>
285:
286: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
287:
288: <ul style="list-style-type: none">
289: <li>
1.2 beck 290: If your machine can boot from CD, you can write <i>install65.iso</i> or
291: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 292: You may need to adjust your BIOS options first.
293: <p>
294: <li>
1.2 beck 295: If your machine can boot from USB, you can write <i>install65.fs</i> or
296: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 297: <p>
298: <li>
299: If you can't boot from a CD, floppy disk, or USB,
300: you can install across the network using PXE as described in the included
301: INSTALL.amd64 document.
302: <p>
303: <li>
304: If you are planning to dual boot OpenBSD with another OS, you will need to
305: read INSTALL.amd64.
306: </ul>
307:
308: <h3><font color="#e00000">OpenBSD/arm64:</font></h3>
309:
310: <ul style="list-style-type: none">
311: <li>
1.2 beck 312: Write <i>miniroot65.fs</i> to a disk and boot from it after connecting
1.1 beck 313: to the serial console. Refer to INSTALL.arm64 for more details.
314: <p>
315: </ul>
316:
317: <h3><font color="#e00000">OpenBSD/armv7:</font></h3>
318:
319: <ul style="list-style-type: none">
320: <li>
321: Write a system specific miniroot to an SD card and boot from it after connecting
322: to the serial console. Refer to INSTALL.armv7 for more details.
323: <p>
324: </ul>
325:
326: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
327:
328: <ul style="list-style-type: none">
329: <li>
330: Boot over the network by following the instructions in INSTALL.hppa or the
331: <a href="hppa.html#install">hppa platform page</a>.
332: </ul>
333:
334: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
335:
336: <ul style="list-style-type: none">
337: <li>
1.2 beck 338: If your machine can boot from CD, you can write <i>install65.iso</i> or
339: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 340: You may need to adjust your BIOS options first.
341: <p>
342: <li>
1.2 beck 343: If your machine can boot from USB, you can write <i>install65.fs</i> or
344: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 345: <p>
346: <li>
347: If you can't boot from a CD, floppy disk, or USB,
348: you can install across the network using PXE as described in
349: the included INSTALL.i386 document.
350: <p>
351: <li>
352: If you are planning on dual booting OpenBSD with another OS, you will need to
353: read INSTALL.i386.
354: </ul>
355:
356: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
357:
358: <ul style="list-style-type: none">
359: <li>
1.2 beck 360: Write <i>miniroot65.fs</i> to the start of the CF
1.1 beck 361: or disk, and boot normally.
362: </ul>
363:
364: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
365:
366: <ul style="list-style-type: none">
367: <li>
1.2 beck 368: Write <i>miniroot65.fs</i> to a USB stick and boot bsd.rd from it
1.1 beck 369: or boot bsd.rd via tftp.
370: Refer to the instructions in INSTALL.loongson for more details.
371: </ul>
372:
373: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
374:
375: <ul style="list-style-type: none">
376: <li>
377: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
378: from the PROM, and then bsd.rd from the bootloader.
379: Refer to the instructions in INSTALL.luna88k for more details.
380: </ul>
381:
382: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
383:
384: <ul style="list-style-type: none">
385: <li>
386: Burn the image from a mirror site to a CDROM, and power on your machine
387: while holding down the <i>C</i> key until the display turns on and
388: shows <i>OpenBSD/macppc boot</i>.
389: <p>
390: <li>
391: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
392: /6.5/macppc/bsd.rd</i>
393: </ul>
394:
395: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
396:
397: <ul style="list-style-type: none">
398: <li>
399: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
400: Refer to the instructions in INSTALL.octeon for more details.
401: </ul>
402:
403: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
404:
405: <ul style="list-style-type: none">
406: <li>
1.2 beck 407: To install, burn cd65.iso on a CD-R, put it in the CD drive of your
1.1 beck 408: machine and select <i>Install System Software</i> from the System Maintenance
409: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
410: CD-ROM, and need a proper invocation from the PROM prompt.
411: Refer to the instructions in INSTALL.sgi for more details.
412:
413: <p>
414: <li>
415: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
416: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
417: system type. Refer to the instructions in INSTALL.sgi for more details.
418: </ul>
419:
420: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
421:
422: <ul style="list-style-type: none">
423: <li>
424: Burn the image from a mirror site to a CDROM, boot from it, and type
425: <i>boot cdrom</i>.
426: <p>
427: <li>
428: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2 beck 429: <i>floppy65.fs</i> or <i>floppyB65.fs</i>
1.1 beck 430: (depending on your machine) to a floppy and boot it with <i>boot
431: floppy</i>. Refer to INSTALL.sparc64 for details.
432: <p>
433: <li>
434: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
435: will most likely fail.
436: <p>
437: <li>
1.2 beck 438: You can also write <i>miniroot65.fs</i> to the swap partition on
1.1 beck 439: the disk and boot with <i>boot disk:b</i>.
440: <p>
441: <li>
442: If nothing works, you can boot over the network as described in INSTALL.sparc64.
443: </ul>
444:
445: <hr>
446:
447: <h3 id="upgrade"><font color="#0000e0">How to upgrade</font></h3>
448:
449: If you already have an OpenBSD 6.4 system, and do not want to reinstall,
450: upgrade instructions and advice can be found in the
1.2 beck 451: <a href="faq/upgrade65.html">Upgrade Guide</a>.
1.1 beck 452: <p>
453:
454: <hr>
455:
456: <h3 id="sourcecode"><font color="#0000e0">Notes about the source code</font></h3>
457:
458: <tt>src.tar.gz</tt> contains a source archive starting at <tt>/usr/src</tt>.
459: This file contains everything you need except for the kernel sources,
460: which are in a separate archive.
461: To extract:
462:
463: <blockquote><pre>
464: # <b>mkdir -p /usr/src</b>
465: # <b>cd /usr/src</b>
466: # <b>tar xvfz /tmp/src.tar.gz</b>
467: </pre></blockquote>
468:
469: <tt>sys.tar.gz</tt> contains a source archive starting at <tt>/usr/src/sys</tt>.
470: This file contains all the kernel sources you need to rebuild kernels.
471: To extract:
472:
473: <blockquote><pre>
474: # <b>mkdir -p /usr/src/sys</b>
475: # <b>cd /usr/src</b>
476: # <b>tar xvfz /tmp/sys.tar.gz</b>
477: </pre></blockquote>
478:
479: Both of these trees are a regular CVS checkout. Using these trees it
480: is possible to get a head-start on using the anoncvs servers as
481: described <a href="anoncvs.html">here</a>.
482: Using these files
483: results in a much faster initial CVS update than you could expect from
484: a fresh checkout of the full OpenBSD source tree.
485: <p>
486:
487: <hr>
488:
489: <h3 id="ports"><font color="#0000e0">Ports Tree</font></h3>
490:
491: A ports tree archive is also provided. To extract:
492:
493: <blockquote><pre>
494: # <b>cd /usr</b>
495: # <b>tar xvfz /tmp/ports.tar.gz</b>
496: </pre></blockquote>
497:
498: Go read the <a href="faq/ports/index.html">ports</a> page
499: if you know nothing about ports
500: at this point. This text is not a manual of how to use ports.
501: Rather, it is a set of notes meant to kickstart the user on the
502: OpenBSD ports system.
503: <p>
504: The <i>ports/</i> directory represents a CVS checkout of our ports.
505: As with our complete source tree, our ports tree is available via
506: <a href="anoncvs.html">AnonCVS</a>.
507: So, in order to keep up to date with the -stable branch, you must make
508: the <i>ports/</i> tree available on a read-write medium and update the tree
509: with a command like:
510:
511: <blockquote><pre>
512: # <b>cd /usr/ports</b>
1.11 beck 513: # <b>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_5</b>
1.1 beck 514: </pre></blockquote>
515:
516: [Of course, you must replace the server name here with a nearby anoncvs
517: server.]
518: <p>
519: Note that most ports are available as packages on our mirrors. Updated
520: ports for the 6.5 release will be made available if problems arise.
521: <p>
522: If you're interested in seeing a port added, would like to help out, or just
523: would like to know more, the mailing list
524: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
525: <p>
526: </body>
527: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to 65.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www