OPNsense images
===============

Welcome!  This document describes images types, SSL flavours and frequency
of image releases.  It is kept up to date.  You are reading the latest one.

Our release schedule
====================

We release images only when they are absolutely needed and otherwise stick
to our reliable firmware update process through either the GUI (System:
Settings: Firmware) or the root console (Option 12).

This does not always work, so there may be revoked images and images built
on stable updates, e.g. 18.1.6 as opposed to only 18.1.

The latest stable release image for OPNsense is 22.1.2 (March 15, 2022).

The next scheduled release image for OPNsense is 22.7 (July, 2022).

It is advised to update to the latest version immediately after installation.

Available image types
=====================

o dvd: ISO installer UEFI hybrid image with live system capabilities
  running in VGA mode.
o vga: USB installer UEFI hybrid image with live system capabilities
  running in VGA mode.
o serial: USB installer UEFI hybrid image with live system capabilities
  running in serial console (115200) mode.
o nano: A preinstalled serial image for USB sticks, SD/CF cards, SSD
  with secondary VGA console enabled.  These images are 3G in size and
  automatically adapt to the installed media size after first boot.

Checksum verification
=====================

Checksum files next to the images may not prove authenticity of images
on any particular mirror.  The checksums can also be found in the forum
annoucements, GitHub or blog posts.  Please double-check.

https://github.com/opnsense/changelog/tree/master/community
https://forum.opnsense.org/index.php?board=11.0
https://opnsense.org/blog/

Signature verification
======================

All images also have OpenSSL SHA-256 signatures, which can be verified
against the distributed public key.  For instructions please visit:

https://docs.opnsense.org/manual/install.html

The public key for version 22.1 is:

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1o1Bk31AcX5xsqgVAoWQ
1fTDznz22ojsK+qCkhW7MKSWlCyEZYEueUtq7hOt/gqttc3qT0WgHjhjI/WE2RQ4
53yfSw/2DDdt3v2WRoupaMzu2Px6I0A+dzo/DM0UWHHsjUaa1HnTvrC14W2vy9wY
rdotDpp6vSA3WoBmpz+6cpAOlOMTboJouaZy2gSAAcFUmnmP6KDE+lQEqudENTpr
wb/tIILTE3s6HMBrnmyTNz3Oyy77qH0Xq4mU0r+GS3If0LN+zIr3evt/hhS80otG
4WA2ifFeoZVUC//ArAqRiuOJKWvDe5455W1tOuoLkVKVwWMUd1YjaLq8/SRNtTVT
jRWO6znUHJa7LKtwY7SJvJ8bl8kR8QnrEBRLqT3IA+FcRH+8RaeCivPV7oS1tMiV
7hUmu4yXkiMU9c/RrUj7UGZfPKa6K1yP2p3pRvHwCpMclhlVdaiAGNQ8X1GmUAmg
3hsoay1ximpj0Yzs+ynDdT1WPkjx8+mDWI08qTuVX+KN3xiohzjxUyD6kBbw2N4z
EkKTu36KLxo+Hs2iHh4iPWV+EZ5pBn/BseUeHha+V76xM/fPU3H2htwF6/lAz3KH
J6cevsMenCaYBAqpUsQMBjxhDgMmpCcjiZRPijFpe5zsNSUD1NJ8QMpecBZCE6Vt
YHWiWxZTN13z4mPqA4uebakCAwEAAQ==
-----END PUBLIC KEY-----

OpenSSL vs. LibreSSL
====================

Both SSL flavours are considered stable, but the images only offer
OpenSSL for the inital setup.  To switch to LibreSSL afterwards,
simply go to System: Firmware: Updates and select the cryptography
flavour of your choice.

Reinvoking a firmware update afterwards will replace the necessary
packages.

More help needed?
=================

Find our source code and issue trackers: https://github.com/opnsense

Browse the docs: https://docs.opnsense.org/

Visit the forum: https://forum.opnsense.org/

Discuss on Reddit: https://www.reddit.com/r/OPNsense

Or drop us a tweet: https://twitter.com/opnsense


Stay safe,
Your OPNsense team