Annotation of www/66.html, Revision 1.20
1.7 bentley 1: <!doctype html>
2: <html lang=en id=release>
3: <meta charset=utf-8>
4:
1.1 beck 5: <title>OpenBSD 6.6</title>
6: <meta name="description" content="OpenBSD 6.6">
7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
9: <link rel="canonical" href="https://www.openbsd.org/66.html">
10:
1.7 bentley 11: <h2 id=OpenBSD>
1.1 beck 12: <a href="index.html">
1.7 bentley 13: <i>Open</i><b>BSD</b></a>
14: 6.6
1.1 beck 15: </h2>
16:
1.7 bentley 17: <table>
18: <tr>
19: <td>
1.1 beck 20: <a href="images/Puffystock.gif">
1.7 bentley 21: <img alt="Puffystock" width="227" height="343" src="images/Puffystock-s.gif"></a>
22: <td>
1.1 beck 23: Released XXX, 2019<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
27: Artwork by Hans Tseng, Efrain Farias, and Natasha Allegri.
28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
1.7 bentley 32: <li>Go to the <code class=reldir>pub/OpenBSD/6.6/</code> directory on
1.1 beck 33: one of the mirror sites.
34: <li>Have a look at <a href="errata66.html">the 6.6 errata page</a> for a list
35: of bugs and workarounds.
36: <li>See a <a href="plus66.html">detailed log of changes</a> between the
37: 6.5 and 6.6 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<p>
41:
1.7 bentley 42: <table class=signify>
43: <tr><td>
44: openbsd-66-base.pub:
1.1 beck 45: <td>
46: <a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/openbsd-66-base.pub">
47: RWSZaRmt1LEQT9CtPygf9CvONu8kYPTlVEJdysNoUR62/NkeWgdkc3zY</a>
1.7 bentley 48: <tr><td>
1.1 beck 49: openbsd-66-fw.pub:
1.7 bentley 50: <td>
1.1 beck 51: RWQYdGVtTv5IvpH2c+TLQAC4iV7RjoGZ/v75q8MCuC9Mca7nFVCXRefy
1.7 bentley 52: <tr><td>
1.1 beck 53: openbsd-66-pkg.pub:
1.7 bentley 54: <td>
1.1 beck 55: RWS5D4+188RI6jULDOFzga0Cm1zrXYUAHT6xu0mLrZidbn6xrMB5aZeR
1.7 bentley 56: <tr><td>
1.1 beck 57: openbsd-66-syspatch.pub:
1.7 bentley 58: <td>
1.1 beck 59: RWT8U2yd3Aq5DnetILjmSoCQxmyt3VqfGS7GBh19oh4Xre4ywc31PEpw
60: </table>
1.7 bentley 61: </ul>
1.1 beck 62: <p>
63: All applicable copyrights and credits are in the src.tar.gz,
64: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
1.9 deraadt 65: files fetched via <code>ports.tar.gz</code>.
1.7 bentley 66: </table>
1.1 beck 67:
68: <hr>
69:
1.7 bentley 70: <section id=new>
71: <h3>What's New</h3>
72: <p>
1.1 beck 73: This is a partial list of new features and systems included in OpenBSD 6.6.
74: For a comprehensive list, see the <a href="plus66.html">changelog</a> leading
75: to 6.6.
76:
77: <ul>
78:
79: <li>Improved hardware support, including:
80: <ul>
1.4 sthen 81: <li><a href="https://man.openbsd.org/clang.1">clang(1)</a>
82: is now provided on powerpc.
1.1 beck 83: </ul>
84:
85: <li>IEEE 802.11 wireless stack improvements:
86: <ul>
87: </ul>
88:
89: <li>Generic network stack improvements:
90: <ul>
91: </ul>
92:
93: <li>Installer improvements:
94: <ul>
95: </ul>
96:
97: <li>Security improvements:
98: <ul>
99: </ul>
100:
101: <li>Routing daemons and other userland network improvements:
102: <ul>
1.16 otto 103: <li>The <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
104: daemon now gets and sets the clock in a secure way when booting
105: even when a battery-backed clock is absent.
1.1 beck 106: </ul>
107:
108: <li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> improvements:
109: <ul>
110: </ul>
111:
112: <li>Assorted improvements:
113: <ul>
114: <li> The filesystem buffer cache now more aggressively uses memory
115: outside the DMA region, to improve cache performance on amd64
116: machines.
1.5 rob 117: <li> The BER API previously internal to
118: <a href="https://man.openbsd.org/ldap.1">ldap(1)</a>,
119: <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
120: <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>, and
121: <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> has been moved into
122: libutil.
1.6 anton 123: See <a href="https://man.openbsd.org/ber_read_elements.3">ber_read_elements(3)</a>.
124: <li>Support for specifying boot device in
125: <a href="https://man.openbsd.org/vm.conf#boot_device">vm.conf(5)</a>.
1.17 rob 126: <li> <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports
127: binary protocol health checking. See
128: <a href="https://man.openbsd.org/relayd.conf.5">relayd.conf(5)</a>.
1.1 beck 129: </ul>
130:
131: <li>OpenSMTPD 6.6.0
132: <ul>
1.18 gilles 133: <li>New Features
134: <ul>
135: <li>Introduced support for ECDSA certificates with an ECDSA privsep engine.
136: <li>Introduced builtin filters to allow basic filtering of incoming sessions in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
137: <li>Introduced option to deliver junk to a Junk folder in <a href="https://man.openbsd.org/mail.maildir.8">mail.maildir(8)</a>.
138: </ul>
139: <li>Bug fixes
140: <ul>
141: <li>Fixed the <a href="https://man.openbsd.org/smtp.1">smtp(1)</a> client so it uses correct default port for SMTPS.
142: <li>Fixed an <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> crash on excessively large input.
143: <li>Ensured mail rejected by an LMTP server will stay queued rather than bouncing.
144: </ul>
145: <li>Experimental Features
146: <ul>
147: <li>Introduced a filters API to allow writing standalone filters for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
148: with multiple filters made available in ports.
1.19 gilles 149: <li>Introduced support for proxy-v2 protocol allowing <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to operate behind proxy.
1.18 gilles 150: </ul>
1.1 beck 151: </ul>
152:
153: <li>LibreSSL 3.0.X
154: <ul>
155: <li>API and Documentation Enhancements
156: <ul>
1.11 tb 157: <li>Completed the port of RSA_METHOD accessors from the
1.13 tb 158: OpenSSL 1.1 API.
1.12 inoguchi 159: <li>Documented undescribed options and
160: removed unfunctional options description in openssl(1) manual.
1.1 beck 161: </ul>
162:
163: <li>Compatibility Changes
164: <ul>
165: </ul>
166:
167: <li>Testing and Proactive Security
168: <ul>
169: <li>
1.2 tb 170: A plethora of small fixes due to regular oss-fuzz testing.
1.13 tb 171: <li>
172: Various side channels in DSA and ECDSA were addressed.
173: These are some of the many issues found in an extensive systematic
174: analysis of bignum usage by Samuel Weiser, David Schrammel et al.
1.20 ! tb 175: <li>
! 176: Try to compute the cofactor if a nonsensical value was provided
! 177: for ECC parameters.
! 178: Fix from Billy Brumley.
1.1 beck 179: </ul>
180:
181: <li>Internal Improvements
182: <ul>
183: </ul>
184:
185: <li>Portable Improvements
186: <ul>
1.14 bcook 187: <li>Enabled performance optimizations when building with Visual Studio on Windows.
1.12 inoguchi 188: <li>Enabled openssl(1) speed subcommand on Windows platform.
1.1 beck 189: </ul>
190:
191: <li>Bug Fixes
192: <ul>
193: <li>
1.2 tb 194: Fixed issue where SRTP extension would not be sent by server.
1.3 tb 195: <li>
1.13 tb 196: Fixed incorrect carry operation in 512 addition for Streebog.
1.12 inoguchi 197: <li>Fixed -modulus option with openssl(1) dsa subcommand.
198: <li>Fixed PVK format output issue with openssl(1) dsa and rsa subcommand.
1.1 beck 199: </ul>
200: </ul>
201:
202: <li>OpenSSH 8.X
203: <ul>
204: <li>New Features
205: <li>Bugfixes
206: </ul>
207:
208: <li>Mandoc XXX
209: <ul>
210: </ul>
211:
212: <li>Xenocara
213: <ul>
214: </ul>
215:
1.7 bentley 216: <li><p>Ports and packages:
1.1 beck 217: <ul>
218: </ul>
1.7 bentley 219: <p>Many pre-built packages for each architecture:
1.1 beck 220: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
1.7 bentley 221: <ul style="column-count: 3">
1.1 beck 222: <li>aarch64: XXXX
223: <li>amd64: XXXX
224: <li>arm: XXXX
225: <li>i386: XXXX
226: <li>mips64: XXXX
227: <li>mips64el: XXXX
228: <li>powerpc: XXXX
229: <li>sparc64: XXXX
1.7 bentley 230: </ul>
1.1 beck 231:
1.7 bentley 232: <p>Some highlights:
233: <ul style="column-count: 3">
234: </ul>
1.1 beck 235:
236: <li>As usual, steady improvements in manual pages and other documentation.
237:
238: <li>The system includes the following major components from outside suppliers:
239: <ul>
240: </ul>
241: </ul>
1.7 bentley 242: </section>
1.1 beck 243:
244: <hr>
245:
1.7 bentley 246: <section id=install>
247: <h3>How to install</h3>
248: <p>
1.1 beck 249: Please refer to the following files on the mirror site for
250: extensive details on how to install OpenBSD 6.6 on your machine:
251:
252: <ul>
253: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/alpha/INSTALL.alpha">
254: .../OpenBSD/6.6/alpha/INSTALL.alpha</a>
255: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/amd64/INSTALL.amd64">
256: .../OpenBSD/6.6/amd64/INSTALL.amd64</a>
257: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/arm64/INSTALL.arm64">
258: .../OpenBSD/6.6/arm64/INSTALL.arm64</a>
259: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/armv7/INSTALL.armv7">
260: .../OpenBSD/6.6/armv7/INSTALL.armv7</a>
261: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/hppa/INSTALL.hppa">
262: .../OpenBSD/6.6/hppa/INSTALL.hppa</a>
263: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/i386/INSTALL.i386">
264: .../OpenBSD/6.6/i386/INSTALL.i386</a>
265: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/landisk/INSTALL.landisk">
266: .../OpenBSD/6.6/landisk/INSTALL.landisk</a>
267: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/loongson/INSTALL.loongson">
268: .../OpenBSD/6.6/loongson/INSTALL.loongson</a>
269: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/luna88k/INSTALL.luna88k">
270: .../OpenBSD/6.6/luna88k/INSTALL.luna88k</a>
271: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/macppc/INSTALL.macppc">
272: .../OpenBSD/6.6/macppc/INSTALL.macppc</a>
273: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/octeon/INSTALL.octeon">
274: .../OpenBSD/6.6/octeon/INSTALL.octeon</a>
275: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/sgi/INSTALL.sgi">
276: .../OpenBSD/6.6/sgi/INSTALL.sgi</a>
277: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/sparc64/INSTALL.sparc64">
278: .../OpenBSD/6.6/sparc64/INSTALL.sparc64</a>
279: </ul>
1.8 deraadt 280: </section>
1.1 beck 281:
282: <hr>
283:
1.7 bentley 284: <section id=quickinstall>
1.1 beck 285: <p>
286: Quick installer information for people familiar with OpenBSD, and the use of
287: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
288: If you are at all confused when installing OpenBSD, read the relevant
289: INSTALL.* file as listed above!
290:
1.7 bentley 291: <h3>OpenBSD/alpha:</h3>
1.1 beck 292:
1.7 bentley 293: <p>
1.1 beck 294: Write <i>floppy66.fs</i> or <i>floppyB66.fs</i> (depending on your machine)
295: to a diskette and enter <i>boot dva0</i>.
296: Refer to INSTALL.alpha for more details.
1.7 bentley 297:
1.1 beck 298: <p>
299: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
300: will most likely fail.
301:
1.7 bentley 302: <h3>OpenBSD/amd64:</h3>
1.1 beck 303:
1.7 bentley 304: <p>
1.1 beck 305: If your machine can boot from CD, you can write <i>install66.iso</i> or
306: <i>cd66.iso</i> to a CD and boot from it.
307: You may need to adjust your BIOS options first.
1.7 bentley 308:
1.1 beck 309: <p>
310: If your machine can boot from USB, you can write <i>install66.fs</i> or
311: <i>miniroot66.fs</i> to a USB stick and boot from it.
1.7 bentley 312:
1.1 beck 313: <p>
314: If you can't boot from a CD, floppy disk, or USB,
315: you can install across the network using PXE as described in the included
316: INSTALL.amd64 document.
1.7 bentley 317:
1.1 beck 318: <p>
319: If you are planning to dual boot OpenBSD with another OS, you will need to
320: read INSTALL.amd64.
321:
1.7 bentley 322: <h3>OpenBSD/arm64:</h3>
1.1 beck 323:
1.7 bentley 324: <p>
1.1 beck 325: Write <i>miniroot66.fs</i> to a disk and boot from it after connecting
326: to the serial console. Refer to INSTALL.arm64 for more details.
327:
1.7 bentley 328: <h3>OpenBSD/armv7:</h3>
1.1 beck 329:
1.7 bentley 330: <p>
1.1 beck 331: Write a system specific miniroot to an SD card and boot from it after connecting
332: to the serial console. Refer to INSTALL.armv7 for more details.
333:
1.7 bentley 334: <h3>OpenBSD/hppa:</h3>
1.1 beck 335:
1.7 bentley 336: <p>
1.1 beck 337: Boot over the network by following the instructions in INSTALL.hppa or the
338: <a href="hppa.html#install">hppa platform page</a>.
339:
1.7 bentley 340: <h3>OpenBSD/i386:</h3>
1.1 beck 341:
1.7 bentley 342: <p>
1.1 beck 343: If your machine can boot from CD, you can write <i>install66.iso</i> or
344: <i>cd66.iso</i> to a CD and boot from it.
345: You may need to adjust your BIOS options first.
1.7 bentley 346:
1.1 beck 347: <p>
348: If your machine can boot from USB, you can write <i>install66.fs</i> or
349: <i>miniroot66.fs</i> to a USB stick and boot from it.
1.7 bentley 350:
1.1 beck 351: <p>
352: If you can't boot from a CD, floppy disk, or USB,
353: you can install across the network using PXE as described in
354: the included INSTALL.i386 document.
1.7 bentley 355:
1.1 beck 356: <p>
357: If you are planning on dual booting OpenBSD with another OS, you will need to
358: read INSTALL.i386.
359:
1.7 bentley 360: <h3>OpenBSD/landisk:</h3>
1.1 beck 361:
1.7 bentley 362: <p>
1.1 beck 363: Write <i>miniroot66.fs</i> to the start of the CF
364: or disk, and boot normally.
365:
1.7 bentley 366: <h3>OpenBSD/loongson:</h3>
1.1 beck 367:
1.7 bentley 368: <p>
1.1 beck 369: Write <i>miniroot66.fs</i> to a USB stick and boot bsd.rd from it
370: or boot bsd.rd via tftp.
371: Refer to the instructions in INSTALL.loongson for more details.
372:
1.7 bentley 373: <h3>OpenBSD/luna88k:</h3>
1.1 beck 374:
1.7 bentley 375: <p>
376: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
1.1 beck 377: from the PROM, and then bsd.rd from the bootloader.
378: Refer to the instructions in INSTALL.luna88k for more details.
379:
1.7 bentley 380: <h3>OpenBSD/macppc:</h3>
1.1 beck 381:
1.7 bentley 382: <p>
1.1 beck 383: Burn the image from a mirror site to a CDROM, and power on your machine
384: while holding down the <i>C</i> key until the display turns on and
385: shows <i>OpenBSD/macppc boot</i>.
1.7 bentley 386:
1.1 beck 387: <p>
388: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
389: /6.6/macppc/bsd.rd</i>
390:
1.7 bentley 391: <h3>OpenBSD/octeon:</h3>
1.1 beck 392:
1.7 bentley 393: <p>
1.1 beck 394: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
395: Refer to the instructions in INSTALL.octeon for more details.
396:
1.7 bentley 397: <h3>OpenBSD/sgi:</h3>
1.1 beck 398:
1.7 bentley 399: <p>
1.1 beck 400: To install, burn cd66.iso on a CD-R, put it in the CD drive of your
401: machine and select <i>Install System Software</i> from the System Maintenance
402: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
403: CD-ROM, and need a proper invocation from the PROM prompt.
404: Refer to the instructions in INSTALL.sgi for more details.
405:
406: <p>
407: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
408: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
409: system type. Refer to the instructions in INSTALL.sgi for more details.
410:
1.7 bentley 411: <h3>OpenBSD/sparc64:</h3>
1.1 beck 412:
1.7 bentley 413: <p>
1.1 beck 414: Burn the image from a mirror site to a CDROM, boot from it, and type
415: <i>boot cdrom</i>.
1.7 bentley 416:
1.1 beck 417: <p>
418: If this doesn't work, or if you don't have a CDROM drive, you can write
419: <i>floppy66.fs</i> or <i>floppyB66.fs</i>
420: (depending on your machine) to a floppy and boot it with <i>boot
421: floppy</i>. Refer to INSTALL.sparc64 for details.
1.7 bentley 422:
1.1 beck 423: <p>
424: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
425: will most likely fail.
1.7 bentley 426:
1.1 beck 427: <p>
428: You can also write <i>miniroot66.fs</i> to the swap partition on
429: the disk and boot with <i>boot disk:b</i>.
1.7 bentley 430:
1.1 beck 431: <p>
432: If nothing works, you can boot over the network as described in INSTALL.sparc64.
1.7 bentley 433: </section>
1.1 beck 434:
435: <hr>
436:
1.7 bentley 437: <section id=upgrade>
438: <h3>How to upgrade</h3>
439: <p>
1.1 beck 440: If you already have an OpenBSD 6.5 system, and do not want to reinstall,
441: upgrade instructions and advice can be found in the
442: <a href="faq/upgrade66.html">Upgrade Guide</a>.
1.7 bentley 443: </section>
1.1 beck 444:
445: <hr>
446:
1.7 bentley 447: <section id=sourcecode>
448: <h3>Notes about the source code</h3>
449: <p>
450: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
1.1 beck 451: This file contains everything you need except for the kernel sources,
452: which are in a separate archive.
453: To extract:
454: <blockquote><pre>
1.7 bentley 455: # <kbd>mkdir -p /usr/src</kbd>
456: # <kbd>cd /usr/src</kbd>
457: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
1.1 beck 458: </pre></blockquote>
1.7 bentley 459: <p>
460: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
1.1 beck 461: This file contains all the kernel sources you need to rebuild kernels.
462: To extract:
463: <blockquote><pre>
1.7 bentley 464: # <kbd>mkdir -p /usr/src/sys</kbd>
465: # <kbd>cd /usr/src</kbd>
466: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
1.1 beck 467: </pre></blockquote>
1.7 bentley 468: <p>
1.1 beck 469: Both of these trees are a regular CVS checkout. Using these trees it
470: is possible to get a head-start on using the anoncvs servers as
471: described <a href="anoncvs.html">here</a>.
472: Using these files
473: results in a much faster initial CVS update than you could expect from
474: a fresh checkout of the full OpenBSD source tree.
1.7 bentley 475: </section>
1.1 beck 476:
477: <hr>
478:
1.7 bentley 479: <section id=ports>
480: <h3>Ports Tree</h3>
481: <p>
1.1 beck 482: A ports tree archive is also provided. To extract:
483: <blockquote><pre>
1.7 bentley 484: # <kbd>cd /usr</kbd>
485: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
1.1 beck 486: </pre></blockquote>
1.7 bentley 487: <p>
1.1 beck 488: Go read the <a href="faq/ports/index.html">ports</a> page
489: if you know nothing about ports
490: at this point. This text is not a manual of how to use ports.
491: Rather, it is a set of notes meant to kickstart the user on the
492: OpenBSD ports system.
493: <p>
494: The <i>ports/</i> directory represents a CVS checkout of our ports.
495: As with our complete source tree, our ports tree is available via
496: <a href="anoncvs.html">AnonCVS</a>.
497: So, in order to keep up to date with the -stable branch, you must make
498: the <i>ports/</i> tree available on a read-write medium and update the tree
499: with a command like:
500: <blockquote><pre>
1.7 bentley 501: # <kbd>cd /usr/ports</kbd>
1.15 jsg 502: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_6</kbd>
1.1 beck 503: </pre></blockquote>
1.7 bentley 504: <p>
1.1 beck 505: [Of course, you must replace the server name here with a nearby anoncvs
506: server.]
507: <p>
508: Note that most ports are available as packages on our mirrors. Updated
509: ports for the 6.6 release will be made available if problems arise.
510: <p>
511: If you're interested in seeing a port added, would like to help out, or just
512: would like to know more, the mailing list
513: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
1.7 bentley 514: </section>
![[BACK]](/icons/back.gif){kind=icon}
Return to 66.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www