File: [local] / www / 65.html (download) (as text)
Revision 1.21, Tue Jan 22 01:25:02 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.20: +4 -2 lines
dlg added support for xchacha20 and xchacha20-poly1305
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>OpenBSD 6.5</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="description" content="OpenBSD 6.5">
<meta name="copyright" content="This document copyright 2019 by OpenBSD.">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/65.html">
</head>
<body bgcolor="#ffffff" text="#000000" link="#24248E">
<h2>
<a href="index.html">
<i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
<font color="#e00000">6.5</font>
</h2>
<a href="images/notyet.jpg">
<img align="left" width="227" height="343" hspace="24" src="images/Puffoil.gif"></a>
Released XXX XX, 2018<br>
Copyright 1997-2019, Theo de Raadt.<br>
<br>
<br>
<br>
<ul>
<li>See the information on <a href="ftp.html">the FTP page</a> for
a list of mirror machines.
<li>Go to the <font color="#e00000">pub/OpenBSD/6.5/</font> directory on
one of the mirror sites.
<li>Have a look at <a href="errata65.html">the 6.5 errata page</a> for a list
of bugs and workarounds.
<li>See a <a href="plus65.html">detailed log of changes</a> between the
6.4 and 6.5 releases.
<p>
<li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
pubkeys for this release:<br>
<pre>
</pre>
<p>
All applicable copyrights and credits are in the src.tar.gz,
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
files fetched via ports.tar.gz.
</ul>
<br clear=all>
<hr>
<h3 id="new"><font color="#0000e0">What's New</font></h3>
This is a partial list of new features and systems included in OpenBSD 6.5.
For a comprehensive list, see the <a href="plus65.html">changelog</a> leading
to 6.5.
<ul>
<li>Improved hardware support, including:
<ul>
<li><a href="https://man.openbsd.org/clang.1">clang(1)</a>
is now provided on mips64.
<li>octeon: Now the system automatically detects the number of available
cores. However, manual setting of the numcores, or coremask,
boot parameter is still needed to enable secondary cores.
<li>octeon: It is now possible to use the root disk's DUID as the value
of the rootdev boot parameter.
</ul>
<p>
<li>IEEE 802.11 wireless stack improvements:
<p>
<li>Generic network stack improvements:
<p>
<li>Installer improvements:
<p>
<li>Security improvements:
<p>
<li>Routing daemons and other userland network improvements:
<ul>
<li><a href="https://man.openbsd.org/bgplg.8">bgplg(8)</a> and
<a href="https://man.openbsd.org/bgplgsh.8">bgplgsh(8)</a> can
now filter on Origin Validation State and Extended Communities.
<li><a href="https://man.openbsd.org/pcap-filter.3">pcap-filter(3)</a> can
now filter on MPLS packets.
</ul>
<p>
<li>Assorted improvements:
<ul>
<li>
<a href="https://man.openbsd.org/kcov.4">kcov(4)</a>
gained support for
<a href="https://man.openbsd.org/kcov#KCOV_MODE_TRACE_CMP">KCOV_MODE_TRACE_CMP</a>.
</ul>
<p>
<li>OpenSMTPD
<p>
<li>LibreSSL 2.9.X
<ul>
<li>API and Documentation Enhancements
<ul>
<li>
CRYPTO_LOCK is now automatically initialized, with the legacy
callbacks stubbed for compatibility.
<li>
Added the SM3 hash function from the Chinese standard GB/T 32905-2016.
<li>
Added more OPENSSL_NO_* macros for compatibility with OpenSSL.
<li>
Added pbkdf2 key derivation support
to <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> enc.
<li>
Partial port of the OpenSSL EC_KEY_METHOD API for use by OpenSSH.
<li>
Implemented further missing OpenSSL 1.1 API.
<li>
Added support for XChaCha20 and XChaCha20-Poly1305.
</ul>
<li>Compatibility Changes
<ul>
<li>
Changed the default digest type of
<a href="https://man.openbsd.org/openssl.1">openssl(1)</a> enc
to sha256.
<li>
Changed the default digest type of
<a href="https://man.openbsd.org/openssl.1">openssl(1)</a> dgst
to sha256.
<li>
Changed the default digest type of
<a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
x509 -fingerprint to sha256.
<li>
Changed the default digest type of
<a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
crl -fingerprint to sha256.
</ul>
<li>Testing and Proactive Security
<ul>
<li>
Added extensive interoperability tests between LibreSSL and OpenSSL 1.0
and 1.1.
<li>
Added additional wycheproof tests and related bug fixes.
</ul>
<li>Internal Improvements
<ul>
<li>
Simplified sigalgs option processing and handshake signing algorithm
selection.
<li>
Added the ability to use the RSA PSS algorithm for handshake signatures.
<li>
Added bn_rand_interval() and use it in code needing ranges of random bn
values.
<li>
Added functionality to derive early, handshake, and application secrets
as per RFC8446.
<li>
Added handshake state machine from RFC8446.
<li>
Removed some ASN.1 related code from libcrypto that had not been used
since around 2000.
<li>
Unexported internal symbols and internalized more record layer structs.
</ul>
<li>Portable Improvements
<ul>
<li>
Added support for assembly optimizations on 32-bit ARM ELF targets.
</ul>
<li>Bug Fixes
<ul>
<li>
Improved protection against timing side channels in ECDSA signature
generation.
<li>
Coordinate blinding was added to some elliptic curves.
This is the last bit of the work by Brumley et al. to protect against
the Portsmash vulnerability.
<li>
Ensure transcript handshake is always freed with TLS 1.2.
</ul>
</ul>
<p>
<li>Mandoc
<p>
<li>Ports and packages:
<p>
<li>As usual, steady improvements in manual pages and other documentation.
<p>
<li>The system includes the following major components from outside suppliers:
<p>
</ul>
<hr>
<h3 id="install"><font color="#0000e0">How to install</font></h3>
Please refer to the following files on the mirror site for
extensive details on how to install OpenBSD 6.5 on your machine:
<ul>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/alpha/INSTALL.alpha">
.../OpenBSD/6.5/alpha/INSTALL.alpha</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/amd64/INSTALL.amd64">
.../OpenBSD/6.5/amd64/INSTALL.amd64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/arm64/INSTALL.arm64">
.../OpenBSD/6.5/arm64/INSTALL.arm64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/armv7/INSTALL.armv7">
.../OpenBSD/6.5/armv7/INSTALL.armv7</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/hppa/INSTALL.hppa">
.../OpenBSD/6.5/hppa/INSTALL.hppa</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/i386/INSTALL.i386">
.../OpenBSD/6.5/i386/INSTALL.i386</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/landisk/INSTALL.landisk">
.../OpenBSD/6.5/landisk/INSTALL.landisk</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/loongson/INSTALL.loongson">
.../OpenBSD/6.5/loongson/INSTALL.loongson</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/luna88k/INSTALL.luna88k">
.../OpenBSD/6.5/luna88k/INSTALL.luna88k</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/macppc/INSTALL.macppc">
.../OpenBSD/6.5/macppc/INSTALL.macppc</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/octeon/INSTALL.octeon">
.../OpenBSD/6.5/octeon/INSTALL.octeon</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sgi/INSTALL.sgi">
.../OpenBSD/6.5/sgi/INSTALL.sgi</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.5/sparc64/INSTALL.sparc64">
.../OpenBSD/6.5/sparc64/INSTALL.sparc64</a>
</ul>
<hr>
<p>
Quick installer information for people familiar with OpenBSD, and the use of
the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
If you are at all confused when installing OpenBSD, read the relevant
INSTALL.* file as listed above!
<h3><font color="#e00000">OpenBSD/alpha:</font></h3>
<ul style="list-style-type: none">
<li>
Write <i>floppy65.fs</i> or <i>floppyB65.fs</i> (depending on your machine)
to a diskette and enter <i>boot dva0</i>.
Refer to INSTALL.alpha for more details.
<p>
<li>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
</ul>
<h3><font color="#e00000">OpenBSD/amd64:</font></h3>
<ul style="list-style-type: none">
<li>
If your machine can boot from CD, you can write <i>install65.iso</i> or
<i>cd65.iso</i> to a CD and boot from it.
You may need to adjust your BIOS options first.
<p>
<li>
If your machine can boot from USB, you can write <i>install65.fs</i> or
<i>miniroot65.fs</i> to a USB stick and boot from it.
<p>
<li>
If you can't boot from a CD, floppy disk, or USB,
you can install across the network using PXE as described in the included
INSTALL.amd64 document.
<p>
<li>
If you are planning to dual boot OpenBSD with another OS, you will need to
read INSTALL.amd64.
</ul>
<h3><font color="#e00000">OpenBSD/arm64:</font></h3>
<ul style="list-style-type: none">
<li>
Write <i>miniroot65.fs</i> to a disk and boot from it after connecting
to the serial console. Refer to INSTALL.arm64 for more details.
<p>
</ul>
<h3><font color="#e00000">OpenBSD/armv7:</font></h3>
<ul style="list-style-type: none">
<li>
Write a system specific miniroot to an SD card and boot from it after connecting
to the serial console. Refer to INSTALL.armv7 for more details.
<p>
</ul>
<h3><font color="#e00000">OpenBSD/hppa:</font></h3>
<ul style="list-style-type: none">
<li>
Boot over the network by following the instructions in INSTALL.hppa or the
<a href="hppa.html#install">hppa platform page</a>.
</ul>
<h3><font color="#e00000">OpenBSD/i386:</font></h3>
<ul style="list-style-type: none">
<li>
If your machine can boot from CD, you can write <i>install65.iso</i> or
<i>cd65.iso</i> to a CD and boot from it.
You may need to adjust your BIOS options first.
<p>
<li>
If your machine can boot from USB, you can write <i>install65.fs</i> or
<i>miniroot65.fs</i> to a USB stick and boot from it.
<p>
<li>
If you can't boot from a CD, floppy disk, or USB,
you can install across the network using PXE as described in
the included INSTALL.i386 document.
<p>
<li>
If you are planning on dual booting OpenBSD with another OS, you will need to
read INSTALL.i386.
</ul>
<h3><font color="#e00000">OpenBSD/landisk:</font></h3>
<ul style="list-style-type: none">
<li>
Write <i>miniroot65.fs</i> to the start of the CF
or disk, and boot normally.
</ul>
<h3><font color="#e00000">OpenBSD/loongson:</font></h3>
<ul style="list-style-type: none">
<li>
Write <i>miniroot65.fs</i> to a USB stick and boot bsd.rd from it
or boot bsd.rd via tftp.
Refer to the instructions in INSTALL.loongson for more details.
</ul>
<h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
<ul style="list-style-type: none">
<li>
Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
from the PROM, and then bsd.rd from the bootloader.
Refer to the instructions in INSTALL.luna88k for more details.
</ul>
<h3><font color="#e00000">OpenBSD/macppc:</font></h3>
<ul style="list-style-type: none">
<li>
Burn the image from a mirror site to a CDROM, and power on your machine
while holding down the <i>C</i> key until the display turns on and
shows <i>OpenBSD/macppc boot</i>.
<p>
<li>
Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
/6.5/macppc/bsd.rd</i>
</ul>
<h3><font color="#e00000">OpenBSD/octeon:</font></h3>
<ul style="list-style-type: none">
<li>
After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
Refer to the instructions in INSTALL.octeon for more details.
</ul>
<h3><font color="#e00000">OpenBSD/sgi:</font></h3>
<ul style="list-style-type: none">
<li>
To install, burn cd65.iso on a CD-R, put it in the CD drive of your
machine and select <i>Install System Software</i> from the System Maintenance
menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
CD-ROM, and need a proper invocation from the PROM prompt.
Refer to the instructions in INSTALL.sgi for more details.
<p>
<li>
If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
system type. Refer to the instructions in INSTALL.sgi for more details.
</ul>
<h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
<ul style="list-style-type: none">
<li>
Burn the image from a mirror site to a CDROM, boot from it, and type
<i>boot cdrom</i>.
<p>
<li>
If this doesn't work, or if you don't have a CDROM drive, you can write
<i>floppy65.fs</i> or <i>floppyB65.fs</i>
(depending on your machine) to a floppy and boot it with <i>boot
floppy</i>. Refer to INSTALL.sparc64 for details.
<p>
<li>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
<p>
<li>
You can also write <i>miniroot65.fs</i> to the swap partition on
the disk and boot with <i>boot disk:b</i>.
<p>
<li>
If nothing works, you can boot over the network as described in INSTALL.sparc64.
</ul>
<hr>
<h3 id="upgrade"><font color="#0000e0">How to upgrade</font></h3>
If you already have an OpenBSD 6.4 system, and do not want to reinstall,
upgrade instructions and advice can be found in the
<a href="faq/upgrade65.html">Upgrade Guide</a>.
<p>
<hr>
<h3 id="sourcecode"><font color="#0000e0">Notes about the source code</font></h3>
<tt>src.tar.gz</tt> contains a source archive starting at <tt>/usr/src</tt>.
This file contains everything you need except for the kernel sources,
which are in a separate archive.
To extract:
<blockquote><pre>
# <b>mkdir -p /usr/src</b>
# <b>cd /usr/src</b>
# <b>tar xvfz /tmp/src.tar.gz</b>
</pre></blockquote>
<tt>sys.tar.gz</tt> contains a source archive starting at <tt>/usr/src/sys</tt>.
This file contains all the kernel sources you need to rebuild kernels.
To extract:
<blockquote><pre>
# <b>mkdir -p /usr/src/sys</b>
# <b>cd /usr/src</b>
# <b>tar xvfz /tmp/sys.tar.gz</b>
</pre></blockquote>
Both of these trees are a regular CVS checkout. Using these trees it
is possible to get a head-start on using the anoncvs servers as
described <a href="anoncvs.html">here</a>.
Using these files
results in a much faster initial CVS update than you could expect from
a fresh checkout of the full OpenBSD source tree.
<p>
<hr>
<h3 id="ports"><font color="#0000e0">Ports Tree</font></h3>
A ports tree archive is also provided. To extract:
<blockquote><pre>
# <b>cd /usr</b>
# <b>tar xvfz /tmp/ports.tar.gz</b>
</pre></blockquote>
Go read the <a href="faq/ports/index.html">ports</a> page
if you know nothing about ports
at this point. This text is not a manual of how to use ports.
Rather, it is a set of notes meant to kickstart the user on the
OpenBSD ports system.
<p>
The <i>ports/</i> directory represents a CVS checkout of our ports.
As with our complete source tree, our ports tree is available via
<a href="anoncvs.html">AnonCVS</a>.
So, in order to keep up to date with the -stable branch, you must make
the <i>ports/</i> tree available on a read-write medium and update the tree
with a command like:
<blockquote><pre>
# <b>cd /usr/ports</b>
# <b>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_5</b>
</pre></blockquote>
[Of course, you must replace the server name here with a nearby anoncvs
server.]
<p>
Note that most ports are available as packages on our mirrors. Updated
ports for the 6.5 release will be made available if problems arise.
<p>
If you're interested in seeing a port added, would like to help out, or just
would like to know more, the mailing list
<a href="mail.html">ports@openbsd.org</a> is a good place to know.
<p>
</body>
</html>
![[BACK]](/icons/back.gif){kind=icon}
Return to 65.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www