Annotation of www/65.html, Revision 1.3
1.1 beck 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 6.5</title>
5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
6: <meta name="description" content="OpenBSD 6.5">
7: <meta name="copyright" content="This document copyright 2019 by OpenBSD.">
8: <meta name="viewport" content="width=device-width, initial-scale=1">
9: <link rel="stylesheet" type="text/css" href="openbsd.css">
10: <link rel="canonical" href="https://www.openbsd.org/65.html">
11: </head>
12:
13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
14:
15: <h2>
16: <a href="index.html">
17: <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
18: <font color="#e00000">6.4</font>
19: </h2>
20:
21: <a href="images/notyet.jpg">
22: <img align="left" width="227" height="343" hspace="24" src="images/Puffoil.gif"></a>
23: Released XXX XX, 2018<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
27:
28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
32: <li>Go to the <font color="#e00000">pub/OpenBSD/6.5/</font> directory on
33: one of the mirror sites.
1.2 beck 34: <li>Have a look at <a href="errata65.html">the 6.5 errata page</a> for a list
1.1 beck 35: of bugs and workarounds.
1.2 beck 36: <li>See a <a href="plus65.html">detailed log of changes</a> between the
1.1 beck 37: 6.4 and 6.5 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<br>
41: <pre>
42: </pre>
43: <p>
44: All applicable copyrights and credits are in the src.tar.gz,
45: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
46: files fetched via ports.tar.gz.
47: </ul>
48: <br clear=all>
49:
50: <hr>
51:
52: <h3 id="new"><font color="#0000e0">What's New</font></h3>
53:
54: This is a partial list of new features and systems included in OpenBSD 6.5.
1.2 beck 55: For a comprehensive list, see the <a href="plus65.html">changelog</a> leading
1.1 beck 56: to 6.5.
57:
58: <ul>
59:
60: <li>Improved hardware support, including:
1.3 ! visa 61: <ul>
! 62: <li><a href="https://man.openbsd.org/clang.1">clang(1)</a>
! 63: is now provided on mips64.
! 64: </ul>
1.1 beck 65:
66: <p>
67:
68: <li>IEEE 802.11 wireless stack improvements:
69: <p>
70:
71: <li>Generic network stack improvements:
72: <p>
73:
74: <li>Installer improvements:
75: <p>
76:
77: <li>Security improvements:
78: <p>
79:
80: <li>Routing daemons and other userland network improvements:
81: <p>
82:
83: <li>Assorted improvements:
84: <p>
85:
86: <li>OpenSMTPD
87: <p>
88:
89: li>LibreSSL 2.9.X>
90: <li>API and Documentation Enhancements
91: <ul>
92: <li>CRYPTO_LOCK is now automatically initialized, with the
93: legacy callbacks stubbed for compatibility
94: <li>Added SM3 hash function support
95: </ul>
96: <li>Testing and Proactive Security
97: <ul>
98: <li>Added interperability tests between LibreSSL and OpenSSL
99: 1.0 and 1.1
100: </ul>
101:
102: <li>Internal Improvements
103: <ul>
104: <li>Simplified sigalgs option processing and handshake signing algorithm
105: selection.
106: <li>Added the ability to use the RSA PSS algorithm for
107: handshake signatures.
108: <li>Added bn_rand_interval() and use it in code needing
109: ranges of random bn values
110: <li>Added functionaly to derive early, handshake, and
111: application secrets as per RFC8446
112: <li>Added handshake state machine from RFC8446
113: </ul>
114:
115: <li>Bug Fixes
116: <ul>
117: <li> Fix timing vulnerability in ECDSA signature generation
118: (CVE-2018-0735)
119: <li> Fix for Portsmash vulnerability originally by Brumley,
120: ul Hassan and Tuveri
121: <li>
122: </ul>
123: </ul>
124: <p>
125:
126: <li>Mandoc
127: <p>
128:
129: <li>Ports and packages:
130: <p>
131:
132: <li>As usual, steady improvements in manual pages and other documentation.
133: <p>
134:
135: <li>The system includes the following major components from outside suppliers:
136: <p>
137:
138: </ul>
139:
140: <hr>
141:
142: <h3 id="install"><font color="#0000e0">How to install</font></h3>
143:
144: Please refer to the following files on the mirror site for
145: extensive details on how to install OpenBSD 6.5 on your machine:
146:
147: <ul>
148: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/alpha/INSTALL.alpha">
149: .../OpenBSD/6.5/alpha/INSTALL.alpha</a>
150: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/amd64/INSTALL.amd64">
151: .../OpenBSD/6.5/amd64/INSTALL.amd64</a>
152: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/arm64/INSTALL.arm64">
153: .../OpenBSD/6.5/arm64/INSTALL.arm64</a>
154: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/armv7/INSTALL.armv7">
155: .../OpenBSD/6.5/armv7/INSTALL.armv7</a>
156: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/hppa/INSTALL.hppa">
157: .../OpenBSD/6.5/hppa/INSTALL.hppa</a>
158: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/i386/INSTALL.i386">
159: .../OpenBSD/6.5/i386/INSTALL.i386</a>
160: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/landisk/INSTALL.landisk">
161: .../OpenBSD/6.5/landisk/INSTALL.landisk</a>
162: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/loongson/INSTALL.loongson">
163: .../OpenBSD/6.5/loongson/INSTALL.loongson</a>
164: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/luna88k/INSTALL.luna88k">
165: .../OpenBSD/6.5/luna88k/INSTALL.luna88k</a>
166: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/macppc/INSTALL.macppc">
167: .../OpenBSD/6.5/macppc/INSTALL.macppc</a>
168: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/octeon/INSTALL.octeon">
169: .../OpenBSD/6.5/octeon/INSTALL.octeon</a>
170: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sgi/INSTALL.sgi">
171: .../OpenBSD/6.5/sgi/INSTALL.sgi</a>
172: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sparc64/INSTALL.sparc64">
173: .../OpenBSD/6.5/sparc64/INSTALL.sparc64</a>
174: </ul>
175:
176: <hr>
177:
178: <p>
179: Quick installer information for people familiar with OpenBSD, and the use of
180: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
181: If you are at all confused when installing OpenBSD, read the relevant
182: INSTALL.* file as listed above!
183:
184: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
185:
186: <ul style="list-style-type: none">
187: <li>
1.2 beck 188: Write <i>floppy65.fs</i> or <i>floppyB65.fs</i> (depending on your machine)
1.1 beck 189: to a diskette and enter <i>boot dva0</i>.
190: Refer to INSTALL.alpha for more details.
191: <p>
192: <li>
193: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
194: will most likely fail.
195: </ul>
196:
197: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
198:
199: <ul style="list-style-type: none">
200: <li>
1.2 beck 201: If your machine can boot from CD, you can write <i>install65.iso</i> or
202: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 203: You may need to adjust your BIOS options first.
204: <p>
205: <li>
1.2 beck 206: If your machine can boot from USB, you can write <i>install65.fs</i> or
207: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 208: <p>
209: <li>
210: If you can't boot from a CD, floppy disk, or USB,
211: you can install across the network using PXE as described in the included
212: INSTALL.amd64 document.
213: <p>
214: <li>
215: If you are planning to dual boot OpenBSD with another OS, you will need to
216: read INSTALL.amd64.
217: </ul>
218:
219: <h3><font color="#e00000">OpenBSD/arm64:</font></h3>
220:
221: <ul style="list-style-type: none">
222: <li>
1.2 beck 223: Write <i>miniroot65.fs</i> to a disk and boot from it after connecting
1.1 beck 224: to the serial console. Refer to INSTALL.arm64 for more details.
225: <p>
226: </ul>
227:
228: <h3><font color="#e00000">OpenBSD/armv7:</font></h3>
229:
230: <ul style="list-style-type: none">
231: <li>
232: Write a system specific miniroot to an SD card and boot from it after connecting
233: to the serial console. Refer to INSTALL.armv7 for more details.
234: <p>
235: </ul>
236:
237: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
238:
239: <ul style="list-style-type: none">
240: <li>
241: Boot over the network by following the instructions in INSTALL.hppa or the
242: <a href="hppa.html#install">hppa platform page</a>.
243: </ul>
244:
245: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
246:
247: <ul style="list-style-type: none">
248: <li>
1.2 beck 249: If your machine can boot from CD, you can write <i>install65.iso</i> or
250: <i>cd65.iso</i> to a CD and boot from it.
1.1 beck 251: You may need to adjust your BIOS options first.
252: <p>
253: <li>
1.2 beck 254: If your machine can boot from USB, you can write <i>install65.fs</i> or
255: <i>miniroot65.fs</i> to a USB stick and boot from it.
1.1 beck 256: <p>
257: <li>
258: If you can't boot from a CD, floppy disk, or USB,
259: you can install across the network using PXE as described in
260: the included INSTALL.i386 document.
261: <p>
262: <li>
263: If you are planning on dual booting OpenBSD with another OS, you will need to
264: read INSTALL.i386.
265: </ul>
266:
267: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
268:
269: <ul style="list-style-type: none">
270: <li>
1.2 beck 271: Write <i>miniroot65.fs</i> to the start of the CF
1.1 beck 272: or disk, and boot normally.
273: </ul>
274:
275: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
276:
277: <ul style="list-style-type: none">
278: <li>
1.2 beck 279: Write <i>miniroot65.fs</i> to a USB stick and boot bsd.rd from it
1.1 beck 280: or boot bsd.rd via tftp.
281: Refer to the instructions in INSTALL.loongson for more details.
282: </ul>
283:
284: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
285:
286: <ul style="list-style-type: none">
287: <li>
288: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
289: from the PROM, and then bsd.rd from the bootloader.
290: Refer to the instructions in INSTALL.luna88k for more details.
291: </ul>
292:
293: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
294:
295: <ul style="list-style-type: none">
296: <li>
297: Burn the image from a mirror site to a CDROM, and power on your machine
298: while holding down the <i>C</i> key until the display turns on and
299: shows <i>OpenBSD/macppc boot</i>.
300: <p>
301: <li>
302: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
303: /6.5/macppc/bsd.rd</i>
304: </ul>
305:
306: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
307:
308: <ul style="list-style-type: none">
309: <li>
310: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
311: Refer to the instructions in INSTALL.octeon for more details.
312: </ul>
313:
314: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
315:
316: <ul style="list-style-type: none">
317: <li>
1.2 beck 318: To install, burn cd65.iso on a CD-R, put it in the CD drive of your
1.1 beck 319: machine and select <i>Install System Software</i> from the System Maintenance
320: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
321: CD-ROM, and need a proper invocation from the PROM prompt.
322: Refer to the instructions in INSTALL.sgi for more details.
323:
324: <p>
325: <li>
326: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
327: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
328: system type. Refer to the instructions in INSTALL.sgi for more details.
329: </ul>
330:
331: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
332:
333: <ul style="list-style-type: none">
334: <li>
335: Burn the image from a mirror site to a CDROM, boot from it, and type
336: <i>boot cdrom</i>.
337: <p>
338: <li>
339: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2 beck 340: <i>floppy65.fs</i> or <i>floppyB65.fs</i>
1.1 beck 341: (depending on your machine) to a floppy and boot it with <i>boot
342: floppy</i>. Refer to INSTALL.sparc64 for details.
343: <p>
344: <li>
345: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
346: will most likely fail.
347: <p>
348: <li>
1.2 beck 349: You can also write <i>miniroot65.fs</i> to the swap partition on
1.1 beck 350: the disk and boot with <i>boot disk:b</i>.
351: <p>
352: <li>
353: If nothing works, you can boot over the network as described in INSTALL.sparc64.
354: </ul>
355:
356: <hr>
357:
358: <h3 id="upgrade"><font color="#0000e0">How to upgrade</font></h3>
359:
360: If you already have an OpenBSD 6.4 system, and do not want to reinstall,
361: upgrade instructions and advice can be found in the
1.2 beck 362: <a href="faq/upgrade65.html">Upgrade Guide</a>.
1.1 beck 363: <p>
364:
365: <hr>
366:
367: <h3 id="sourcecode"><font color="#0000e0">Notes about the source code</font></h3>
368:
369: <tt>src.tar.gz</tt> contains a source archive starting at <tt>/usr/src</tt>.
370: This file contains everything you need except for the kernel sources,
371: which are in a separate archive.
372: To extract:
373:
374: <blockquote><pre>
375: # <b>mkdir -p /usr/src</b>
376: # <b>cd /usr/src</b>
377: # <b>tar xvfz /tmp/src.tar.gz</b>
378: </pre></blockquote>
379:
380: <tt>sys.tar.gz</tt> contains a source archive starting at <tt>/usr/src/sys</tt>.
381: This file contains all the kernel sources you need to rebuild kernels.
382: To extract:
383:
384: <blockquote><pre>
385: # <b>mkdir -p /usr/src/sys</b>
386: # <b>cd /usr/src</b>
387: # <b>tar xvfz /tmp/sys.tar.gz</b>
388: </pre></blockquote>
389:
390: Both of these trees are a regular CVS checkout. Using these trees it
391: is possible to get a head-start on using the anoncvs servers as
392: described <a href="anoncvs.html">here</a>.
393: Using these files
394: results in a much faster initial CVS update than you could expect from
395: a fresh checkout of the full OpenBSD source tree.
396: <p>
397:
398: <hr>
399:
400: <h3 id="ports"><font color="#0000e0">Ports Tree</font></h3>
401:
402: A ports tree archive is also provided. To extract:
403:
404: <blockquote><pre>
405: # <b>cd /usr</b>
406: # <b>tar xvfz /tmp/ports.tar.gz</b>
407: </pre></blockquote>
408:
409: Go read the <a href="faq/ports/index.html">ports</a> page
410: if you know nothing about ports
411: at this point. This text is not a manual of how to use ports.
412: Rather, it is a set of notes meant to kickstart the user on the
413: OpenBSD ports system.
414: <p>
415: The <i>ports/</i> directory represents a CVS checkout of our ports.
416: As with our complete source tree, our ports tree is available via
417: <a href="anoncvs.html">AnonCVS</a>.
418: So, in order to keep up to date with the -stable branch, you must make
419: the <i>ports/</i> tree available on a read-write medium and update the tree
420: with a command like:
421:
422: <blockquote><pre>
423: # <b>cd /usr/ports</b>
424: # <b>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_4</b>
425: </pre></blockquote>
426:
427: [Of course, you must replace the server name here with a nearby anoncvs
428: server.]
429: <p>
430: Note that most ports are available as packages on our mirrors. Updated
431: ports for the 6.5 release will be made available if problems arise.
432: <p>
433: If you're interested in seeing a port added, would like to help out, or just
434: would like to know more, the mailing list
435: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
436: <p>
437: </body>
438: </html>