OpenBSD 5.6

Related to OpenBSD, and BSD in general. Peter N. M. Hansteen is auctioning off the first signed copy The Book of PF, 3rd edition. He will be supporting the OpenBSD Foundation by donating the amount raised.<p><a href="http://bsdly.blogspot.ca/2014/10/the-book-of-pf-3rd-edition-is-here.html" rel="nofollow">http:&#x2F;&#x2F;bsdly.blogspot.ca&#x2F;2014&#x2F;10&#x2F;the-book-of-pf-3rd-edition-...</a>

It seems this is the last version to have Nginx in the base install. 5.7 Will only ship their in-house httpd(8) as the default web server, although Nginx will still be available in ports. Reyk explained the reasoning : <a href="http://undeadly.org/cgi?action=article&amp;sid=20140827065755&amp;pid=24" rel="nofollow">http:&#x2F;&#x2F;undeadly.org&#x2F;cgi?action=article&amp;sid=20140827065755&amp;pi...</a><p>And the httpd(8) manual shows there are some similarities in the configuration to Nginx. <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8" rel="nofollow">http:&#x2F;&#x2F;www.openbsd.org&#x2F;cgi-bin&#x2F;man.cgi&#x2F;OpenBSD-current&#x2F;man8&#x2F;...</a> It seems to be a much more simplified and streamlined setup.

And brings LibreSSL: - This release forks OpenSSL into LibreSSL, a version of the TLS&#x2F;crypto stack with goals of modernizing the codebase, improving security, and applying best practice development processes.

Semi-related: is anyone here using OpenBSD in their daily DevOps setup? If so, why did you choose it (say, over Linux or FreeBSD)?

You can order the 5.6 CD set from the new OpenBSD Store, there&#x27;s also older sets and other swag.<p><a href="https://www.openbsdstore.com/cgi-bin/live/ecommerce.pl?site=shop_openbsdeurope_dollar&amp;state=department" rel="nofollow">https:&#x2F;&#x2F;www.openbsdstore.com&#x2F;cgi-bin&#x2F;live&#x2F;ecommerce.pl?site=...</a><p>I want a Wireframe Puffy Coffee Mug.

OpenBSD 5.6 isn&#x27;t quite released yet, it&#x27;s still not on the master site. The announcement will undoubtedly be going out soon though, and it&#x27;s on a few mirrors if you wish to jump the gun.

Hm, ripping kerberos from libssl I can understand -- but from base? Does that mean that openssh certificate is what people are using for federated authentication? While kerberos <i>is</i> complex and complected -- are there any solutions that are better, if you require administrating a non-trivial number of users, along with a good way to immediatly revoke access as users leave the organization?

Is installing openbsd securely possible using hash checks and signing?