This is an old revision of the document!
FreeBSD Update is a binary update mechanism for FreeBSD's “base” distribution. It consists of a server and client component
How to check for latest available version
$ fetch http://update.freebsd.org/12.0-RELEASE/amd64/pub.ssl # Get public key. Verify the signature yourself [*] $ fetch http://update.freebsd.org/12.0-RELEASE/amd64/latest.ssl # Get metadata $ openssl rsautl -pubin -inkey pub.ssl -verify <latest.ssl
Output looks like:
freebsd-update|amd64|12.0-RELEASE|10|cae42a89f90be555b530a759cd400925bce03ed73ee78e665bef3fe5293e872f|1576022400
“10” in the output of this example refers to p10, the 10th patch level for 12.0-RELEASE amd64
Verify freebsd-update server signature
The following compares the servers pub.ssl with the hash value that exists on the system:
$ sha256 -q pub.ssl $ grep KeyPrint /etc/freebsd-update.conf | cut -f 2 -w
The outputs of the commands should be identical, indicating the signature is “good” (verified)