OPNsense Files

OPNsense images
===============

Welcome!  This document describes images types, SSL flavours and frequency
of image releases.  It is kept up to date.  You are reading the latest one.

Our release schedule
====================

We release images only when they are absolutely needed and otherwise stick
to our reliable firmware update process through either the GUI (System:
Settings: Firmware) or the root console (Option 12).

This does not always work, so there may be revoked images and images built
on stable updates, e.g. 18.1.6 as opposed to only 18.1.

The latest stable release image for OPNsense is 19.1.4 (March 12, 2019).

The next scheduled release image for OPNsense is 19.7 (July, 2019).

It is advised to update to the latest version immediately after installation.
All intermediate stable update changelogs can be found in the GUI or here:

https://forum.opnsense.org/index.php?board=11.0
https://lists.opnsense.org/pipermail/announce/

Available image types
=====================

o dvd: ISO installer image with live system capabilities running in
  VGA mode.  On amd64, UEFI boot is supported as well.
o vga: USB installer image with live system capabilities running in
  VGA mode as GPT boot.  On amd64, UEFI boot is supported as well.
o serial: USB installer image with live system capabilities running in
  serial console (115200) mode as MBR boot.
o nano: a preinstalled serial image for USB sticks, SD or CF cards
  as MBR boot.  These images are 3G in size and automatically adapt to
  the installed media size after first boot.  Configuration defaults
  have been adapted for embedded use.

Checksum verification
=====================

Checksum files next to the images may not prove authenticity of images
on any particular mirror.  The checksums can also be found in the forum
annoucements, mailing lists, blog posts or GitHub.  Please double-check.

https://github.com/opnsense/changelog/doc/
https://lists.opnsense.org/pipermail/announce/
https://opnsense.org/blog/

Signature verification
======================

All images also have OpenSSL SHA-256 signatures, which can be verified
against the distributed public key.  For instructions please visit:

https://docs.opnsense.org/manual/install.html

The public key for version 19.1 is:

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

OpenSSL vs. LibreSSL
====================

Both SSL flavours are considered stable, but the images only offer
OpenSSL for the inital setup.  To switch to LibreSSL afterwards,
simply go to System: Firmware: Updates and select the cryptography
flavour of your choice.

Reinvoking a firmware upgrade afterwards will switch the necessary
packages.

More help needed?
=================

Find our source code and issue tracker: https://github.com/opnsense

Browse the docs: https://docs.opnsense.org/

Visit the forum: https://forum.opnsense.org/

Or drop us a tweet: https://twitter.com/opnsense


Stay safe,
Your OPNsense team