Port details
create-cert Create openssl client key and certificates
2.12 security Σ =1 2.12Version of this port present on the latest quarterly branch. Maintainer: leres@FreeBSD.org Port Added: 2011-03-19 06:07:36
Last Update: 2025-12-31 22:31:02
Commit Hash: 5f287e0
People watching this port, also watch: libgd , txt2html , oidentd , syslog-ng , consolehm License: BSD3CLAUSE
WWW: https://ee.lbl.gov/downloads/create-cert/ Description: # create-cert is a script that uses openssl(1) to create self-signed host
certificates and private keys for fully qualified domain names (FQDNs). ¦ ¦ ¦ ¦
Manual pages: #
pkg-plist: as obtained via: make generate-plist # USE_RC_SUBR (Service Scripts)
no SUBR information found for this port
Dependency lines :
create-cert>0:security/create-cert To install the port : # cd /usr/ports/security/create-cert/ && make install clean To add the package , run one of these commands: pkg install security/create-cert pkg install create-cert NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.PKGNAME: create-cert Flavors: # there is no flavor information for this port. distinfo: # TIMESTAMP = 1767219737
SHA256 (create-cert-2.12.tar.gz) = 41ba246fbaf1b1438e24b00a4dba0b73d6ff8d471145c3f4f0cdef89f1e8df33
SIZE (create-cert-2.12.tar.gz) = 75404
Packages (timestamps in pop-ups are UTC): #
This port has no dependencies. # There are no ports dependent upon this port #
Configuration Options : #
No options to configure Options name : #
security_create-cert pkg-message: # FreshPorts was unable to extract/find any pkg message Master Sites: #
Commit History - (may be incomplete: for full details, see links to repositories near top of page)
Commit Credits Log message
2.12 31 Dec 2025 22:31:02
Craig Leres (leres)
security/create-cert: Update to 2.12
While here add WWW.
Changes since 2.11:
- Try to avoid leaking temp files after switching to mktemp.
- getopt -> getopts
- Cleanup key if cert creation fails.
- Update to autoconf 2.72.
- Prefer "openssl rehash" (newer openssl) to c_rehash (sometimes
missing) using a patch from Michael Proto.
- Minor consession to ubuntu (where /bin/sh is dash).
PR: 292063
Reported by: Michael Proto
Obtained from: Michael Proto
2.11 21 Jan 2024 20:59:03
Craig Leres (leres)
security/create-cert: Update to 2.11
Install man page in share/man.
Changes since 2.10:
- Remove unconditional FreeBSD mandir hack.
2.10 09 May 2023 23:21:05
Craig Leres (leres)
security/create-cert: Update to 2.10
Changes since 2.9:
- Disallow FQDNs to end with .key or .pem (-f overrides).
- Update to autoconf 2.71.
2.9 20 Jul 2022 14:22:56
Tobias C. Berner (tcberner)
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net >
* Aaron Dalton <aaron@FreeBSD.org >
* Adam Weinberger <adamw@FreeBSD.org >
* Ade Lovett <ade@FreeBSD.org >
* Aldis Berjoza <aldis@bsdroot.lv >
* Alex Dupre <ale@FreeBSD.org >
* Alex Kapranoff <kappa@rambler-co.ru >
* Alex Samorukov <samm@freebsd.org >
* Alexander Botero-Lowry <alex@foxybanana.com >
* Alexander Kriventsov <avk@vl.ru >
* Alexander Leidinger <netchild@FreeBSD.org > (Only the first 15 lines of the commit message are shown above )
2.9 06 Apr 2021 14:31:07
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
2.9 27 Mar 2021 23:16:15
leres
security/create-cert: Update to 2.9.
- Add missing line escape for multiline conditional.
- Add support for Subject Alt Names including IP addresses.
2.8 26 Dec 2020 18:09:27
leres
security/create-cert: Update to 2.8.
- Add overrides for size of the key (-b bits), the certificate
duration (-d days), and the digest (-D digest).
- Fix a bug that ignored config file certificate duration and
always used 3650 days.
2.7 17 Feb 2018 02:28:50
leres
Update to 2.7:
- Enable additional cert usage types otherwise the generated
certs can't be used for servers.
Reviewed by: ler (mentor)
Approved by: ler (mentor)
Differential Revision: https://reviews.freebsd.org/D14404
2.6 16 Feb 2018 00:58:12
leres
Update to 2.6:
- Add subjectAltName to the v3_req section as per RFC 2818
Move the primary download site and add LOCAL/leres as a secondary.
Reviewed by: ler (mentor)
Approved by: ler (mentor)
Differential Revision: https://reviews.freebsd.org/D14393
2.5 15 Sep 2017 18:18:26
leres
Update MAINTAINER on my ports and "Created by" on the ones I created
to use my @FreeBSD.org email address.
- devel/arduino
- devel/arduino-glcd
- devel/arduino-irremote
- devel/arduino-mk
- devel/arduino-sevseg
- net/hostapd
- net/py-pcap
- security/bro
- security/broccoli
- security/create-cert
- sysutils/lbl-cf
- sysutils/lbl-hf
- www/mini_httpd
Reviewed by: ler (mentor)
Approved by: ler (mentor)
Differential Revision: https://reviews.freebsd.org/D12374
2.5 10 Dec 2014 14:04:24
feld
Update "BSD" license in security category
2.5 09 Nov 2014 22:04:32
madpilot
Update to 2.5
PR: 194411
Submitted by: leres at ee.lbl.gov (maintainer)
2.4 19 May 2014 08:03:49
culot
- Update to 2.4
PR: ports/189324
Submitted by: Craig Leres <leres@ee.lbl.gov > (maintainer)
2.3 31 Jan 2014 15:54:10
miwi
- Stage support
- Convert to USES
2.3 20 Sep 2013 22:55:26
bapt
Add NO_STAGE all over the place in preparation for the staging support (cat:
security)
2.3 03 May 2013 11:09:56
ehaupt
- Update to 2.3
- Trim header
PR: 178305
Submitted by: Craig Leres <leres@ee.lbl.gov > (maintainer)
2.2 23 Apr 2012 04:05:09
jgh
- Update to 2.2
Changes since 2.0 include:
* Add -C flag which creates a create-cert.conf by parsing
an existing pem file. This is a handy way to bootstrap
a config from an old tree of self-signed certs.
* Add "bits" and "digest" to config file.
* Change default bits from 1024 to 2048.
Change default digest from md5 to sha1.
PR: ports/167216
Submitted by: maintainer, leres@ee.lbl.gov
2.0 19 Mar 2011 06:07:08
sunpoet
- Add create-cert 2.0
create-cert is a script that uses openssl(1) to create self-signed host
certificates and private keys for fully qualified domain names (FQDNs).
PR: ports/155014
Submitted by: Craig Leres <leres@ee.lbl.gov >