notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details
certmonger Daemon to enrol with a CA and renew SSL certificates
0.79.20_1 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout Package not present on quarterly.This port was created during this quarter. It will be in the next quarterly branch but not the current one.
Maintainer: crees@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-06-13 19:36:05
Last Update: 2025-06-30 15:00:17
Commit Hash: 8f9f373
License: GPLv3
WWW:
https://pagure.io/certmonger
Description:
Certmonger is primarily concerned with getting you or your system enrolled with a certificate authority (CA) and keeping you enrolled. To do this, the certmonger daemon runs in the background, taking guidance from client tools (via a D-Bus API, a command-line tool is provided which uses it). The daemon: can generate key pairs if you don't already have one can use a key pair to generate a certificate signing request can submit the signing request to a CA can wait for the CA to decide whether or not to issue the certificate can store an issued certificate in a specified location can monitor the certificate to see if it's about to expire can warn you or simply log that a certificate is about to expire can attempt to get a new certificate when a certificate is about to expire The goal is to have certmonger do what you need it to do based on what you've told it you need. If you already have a certificate, it will be happy to just check on it periodically and warn you when it's about to expire. If you tell it where the private key is, and where the CA is, it can go ahead and try to re-enroll if you like. Keys and certificates can be stored and read in any of these formats: PEM-formatted files NSS database (dbm or sql)
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (77 items)
Collapse this list.
  1. /usr/local/share/licenses/certmonger-0.79.20_1/catalog.mk
  2. /usr/local/share/licenses/certmonger-0.79.20_1/LICENSE
  3. /usr/local/share/licenses/certmonger-0.79.20_1/GPLv3
  4. bin/getcert
  5. bin/ipa-getcert
  6. bin/local-getcert
  7. bin/selfsign-getcert
  8. @sample etc/certmonger/certmonger.conf.sample
  9. etc/dbus-1/system.d/org.fedorahosted.certmonger.conf
  10. libexec/certmonger/certmonger-session
  11. libexec/certmonger/dogtag-ipa-renew-agent-submit
  12. libexec/certmonger/dogtag-submit
  13. libexec/certmonger/ipa-submit
  14. libexec/certmonger/local-submit
  15. libexec/certmonger/scep-submit
  16. sbin/certmonger
  17. share/dbus-1/services/org.fedorahosted.certmonger.service
  18. share/locale/bg/LC_MESSAGES/certmonger.mo
  19. share/locale/ca/LC_MESSAGES/certmonger.mo
  20. share/locale/cs_CZ/LC_MESSAGES/certmonger.mo
  21. share/locale/da/LC_MESSAGES/certmonger.mo
  22. share/locale/de/LC_MESSAGES/certmonger.mo
  23. share/locale/es/LC_MESSAGES/certmonger.mo
  24. share/locale/eu/LC_MESSAGES/certmonger.mo
  25. share/locale/fr/LC_MESSAGES/certmonger.mo
  26. share/locale/gu/LC_MESSAGES/certmonger.mo
  27. share/locale/hu/LC_MESSAGES/certmonger.mo
  28. share/locale/id/LC_MESSAGES/certmonger.mo
  29. share/locale/it/LC_MESSAGES/certmonger.mo
  30. share/locale/ja/LC_MESSAGES/certmonger.mo
  31. share/locale/ka/LC_MESSAGES/certmonger.mo
  32. share/locale/ko/LC_MESSAGES/certmonger.mo
  33. share/locale/lt/LC_MESSAGES/certmonger.mo
  34. share/locale/nb/LC_MESSAGES/certmonger.mo
  35. share/locale/nl/LC_MESSAGES/certmonger.mo
  36. share/locale/pl/LC_MESSAGES/certmonger.mo
  37. share/locale/pt/LC_MESSAGES/certmonger.mo
  38. share/locale/pt_BR/LC_MESSAGES/certmonger.mo
  39. share/locale/ru/LC_MESSAGES/certmonger.mo
  40. share/locale/si/LC_MESSAGES/certmonger.mo
  41. share/locale/sv/LC_MESSAGES/certmonger.mo
  42. share/locale/ta/LC_MESSAGES/certmonger.mo
  43. share/locale/tr/LC_MESSAGES/certmonger.mo
  44. share/locale/uk/LC_MESSAGES/certmonger.mo
  45. share/locale/zh_CN/LC_MESSAGES/certmonger.mo
  46. share/locale/zh_TW/LC_MESSAGES/certmonger.mo
  47. share/man/man1/getcert-add-ca.1.gz
  48. share/man/man1/getcert-add-scep-ca.1.gz
  49. share/man/man1/getcert-list-cas.1.gz
  50. share/man/man1/getcert-list.1.gz
  51. share/man/man1/getcert-modify-ca.1.gz
  52. share/man/man1/getcert-refresh-ca.1.gz
  53. share/man/man1/getcert-refresh.1.gz
  54. share/man/man1/getcert-rekey.1.gz
  55. share/man/man1/getcert-remove-ca.1.gz
  56. share/man/man1/getcert-request.1.gz
  57. share/man/man1/getcert-resubmit.1.gz
  58. share/man/man1/getcert-start-tracking.1.gz
  59. share/man/man1/getcert-status.1.gz
  60. share/man/man1/getcert-stop-tracking.1.gz
  61. share/man/man1/getcert.1.gz
  62. share/man/man1/ipa-getcert.1.gz
  63. share/man/man1/local-getcert.1.gz
  64. share/man/man1/selfsign-getcert.1.gz
  65. share/man/man5/certmonger.conf.5.gz
  66. share/man/man8/certmonger-dogtag-ipa-renew-agent-submit.8.gz
  67. share/man/man8/certmonger-dogtag-submit.8.gz
  68. share/man/man8/certmonger-ipa-submit.8.gz
  69. share/man/man8/certmonger-local-submit.8.gz
  70. share/man/man8/certmonger-scep-submit.8.gz
  71. share/man/man8/certmonger.8.gz
  72. @dir /var/lib/certmonger/local
  73. @dir /var/lib/certmonger
  74. @dir /var/lib
  75. @owner
  76. @group
  77. @mode
Collapse this list.
Dependency lines:
  • certmonger>0:security/certmonger
To install the port:
cd /usr/ports/security/certmonger/ && make install clean
To add the package, run one of these commands:
  • pkg install security/certmonger
  • pkg install certmonger
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: certmonger
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1747746478 SHA256 (certmonger-0.79.20.tar.gz) = 23645a5c1b284d73df448dbb97366c1b6e639223fc9465e7834fa5c5fef3f01e SIZE (certmonger-0.79.20.tar.gz) = 962445

Packages (timestamps in pop-ups are UTC):
certmonger
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest-0.79.20_1--0.79.20_1---
FreeBSD:13:quarterly-0.79.20_1--0.79.20_1---
FreeBSD:14:latest0.79.200.79.20_1-0.79.200.79.20_1---
FreeBSD:14:quarterly-0.79.20_1--0.79.20_1---
FreeBSD:15:latest0.79.200.79.20n/a-n/a---
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. gettext-runtime>=0.22_1 : devel/gettext-runtime
  2. msgfmt : devel/gettext-tools
  3. libkrb5support.so : security/krb5
  4. pkgconf>=1.3.0_1 : devel/pkgconf
  5. autoconf>=2.72 : devel/autoconf
  6. automake>=1.17 : devel/automake
Runtime dependencies:
  1. libkrb5support.so : security/krb5
Library dependencies:
  1. libcurl.so : ftp/curl
  2. libdbus-1.so : devel/dbus
  3. libidn2.so : dns/libidn2
  4. libjansson.so : devel/jansson
  5. libldap.so : net/openldap26-client
  6. libnspr4.so : devel/nspr
  7. libnss3.so : security/nss
  8. libpopt.so : devel/popt
  9. libtalloc.so : devel/talloc
  10. libtevent.so : devel/tevent
  11. libuuid.so : misc/libuuid
  12. libintl.so : devel/gettext-runtime
  13. libxml2.so : textproc/libxml2
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
security_certmonger
USES:
autoreconf gettext gnome gssapi:mit iconv pkgconfig ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://pagure.io/certmonger/archive/0.79.20/
Collapse this list.

Number of commits found: 4

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
0.79.20_1
30 Jun 2025 15:00:17
commit hash: 8f9f37306004332adca421de36dd941b6204b6fccommit hash: 8f9f37306004332adca421de36dd941b6204b6fccommit hash: 8f9f37306004332adca421de36dd941b6204b6fccommit hash: 8f9f37306004332adca421de36dd941b6204b6fc files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
*/e2fsprogs-lib*: switch three more users to the util-linux based ports

PR:		251489
0.79.20_1
30 Jun 2025 09:04:22
commit hash: 3068854dd0263c7ccc8d62569081d3e150a21651commit hash: 3068854dd0263c7ccc8d62569081d3e150a21651commit hash: 3068854dd0263c7ccc8d62569081d3e150a21651commit hash: 3068854dd0263c7ccc8d62569081d3e150a21651 files touched by this commit Sanity Test Failure
Baptiste Daroussin (bapt) search for other commits by this committer
libxml2: chase libxml soversion bump
0.79.20
16 Jun 2025 09:45:41
commit hash: 26c251cf04b151ac7de3e95d0ed8a82f0acb61a5commit hash: 26c251cf04b151ac7de3e95d0ed8a82f0acb61a5commit hash: 26c251cf04b151ac7de3e95d0ed8a82f0acb61a5commit hash: 26c251cf04b151ac7de3e95d0ed8a82f0acb61a5 files touched by this commit
Chris Rees (crees) search for other commits by this committer
security/certmonger: Fix for old OpenSSL
0.79.20
13 Jun 2025 19:33:08
commit hash: 9dedd058b1bd0a21c942bdc9f56fa1aeef602449commit hash: 9dedd058b1bd0a21c942bdc9f56fa1aeef602449commit hash: 9dedd058b1bd0a21c942bdc9f56fa1aeef602449commit hash: 9dedd058b1bd0a21c942bdc9f56fa1aeef602449 files touched by this commit
Chris Rees (crees) search for other commits by this committer
security/certmonger: New port

Certmonger is primarily concerned with getting you or your system
enrolled with a certificate authority (CA) and keeping you enrolled.

To do this, the certmonger daemon runs in the background, taking guidance from
client tools (via a D-Bus API, a command-line tool is provided which uses it).

The daemon:

    can generate key pairs if you don't already have one
    can use a key pair to generate a certificate signing request
    can submit the signing request to a CA
    can wait for the CA to decide whether or not to issue the certificate
    can store an issued certificate in a specified location
(Only the first 15 lines of the commit message are shown above View all of this commit message)

Number of commits found: 4