Port details
openssl41 TLSv1.3 capable SSL and crypto library
4.1.0 security Σ =0 4.1.0.b1Version of this port present on the latest quarterly branch. Maintainer: brnrd@FreeBSD.org Port Added: 2026-09-12 10:12:04
Last Update: 2026-10-23 17:04:03
Commit Hash: 6347ef6
Also Listed In: devel
License: APACHE20
WWW: https://www.openssl.org/ Description: # The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, full-featured, and Open Source toolkit implementing
the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1,
v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide.
The project is managed by a worldwide community of volunteers that use
the Internet to communicate, plan, and develop the OpenSSL tookit
and its related documentation.
OpenSSL is based on the excellent SSLeay library developed by Eric
A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under
an Apache-style licence, which basically means that you are free
to get and use it for commercial and non-commercial purposes subject
to some simple license conditions. ¦ ¦ ¦ ¦
Manual pages: #
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist # USE_RC_SUBR (Service Scripts)
no SUBR information found for this port
Dependency lines :
For RUN/BUILD depends:openssl41>0:security/openssl41
For LIB depends:libcrypto.so:security/openssl41 libssl.so:security/openssl41
Conflicts: # CONFLICTS_INSTALL:
boringssl
libressl
libressl-devel
openssl
openssl3?
openssl40
To install the port : # cd /usr/ports/security/openssl41/ && make install clean To add the package , run one of these commands: pkg install security/openssl41 pkg install openssl41 NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.PKGNAME: openssl41 Flavors: there is no flavor information for this port. # distinfo: # TIMESTAMP = 1792772969
SHA256 (openssl-4.1.0.tar.gz) = 50c17baf54cb008f6ce42d50deb4b28050a1aad711636cabd4b241c7e90cc2fd
SIZE (openssl-4.1.0.tar.gz) = 55738000
Packages (timestamps in pop-ups are UTC): #
Dependencies # NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered. Build dependencies: #
perl5>=5.42.r<5.43 : lang/perl5.42
There are no ports dependent upon this port #
Configuration Options : #
===> The following configuration options are available for openssl41-4.1.0:
ASYNC=on: Asynchronous mode
CT=on: Certificate Transparency Support
FIPS-JITTER=off: Use JITTER seed source in FIPS provider
KTLS=off: Use in-kernel TLS (FreeBSD >13)
MAN3=on: Install API manpages (section 3, 7)
RFC3779=on: RFC3779 support (BGP)
SHARED=on: Build shared libraries
====> Block Cipher Support
ARIA=off: ARIA (South Korean standard)
DES=on: (Triple) Data Encryption Standard
GOST=on: GOST (Russian standard)
IDEA=off: International Data Encryption Algorithm
SM4=off: SM4 128bit (Chinese standard)
RC2=on: RC2 (unsafe)
RC4=on: RC4 (unsafe)
RC5=off: RC5 (patented)
TLS-DEPRECATED-EC=off: Deprecated elliptic curve groups in TLS (unsafe)
WEAK-SSL-CIPHERS=off: Weak cipher support (unsafe)
====> Compression Support
BROTLI=off: Brotli compression support
ZLIB=off: zlib compression support
ZSTD=off: Zstandard compression support
====> Hash Function Support
MD2=off: MD2 (obsolete) (requires LEGACY)
MD4=on: MD4 (unsafe)
MD5=off: MD5 (unsafe)
MDC2=off: MDC-2 (patented, requires DES)
RMD160=on: RIPEMD-160
SM2=off: SM2 Elliptic Curve DH (Chinese standard)
SM3=off: SM3 256bit (Chinese standard)
====> Provider modules
FIPS=on: Build FIPS provider (Note: NOT yet FIPS validated)
LEGACY=off: Older algorithms
====> Optimizations
ASM=on: Assembler code
SSE2=on: Runtime SSE2 detection
THREADS=on: Threading support
THREADPOOL=on: Thread Pooling support
EC=on: Optimize NIST elliptic curves
====> Post-Quantum Cryptography
ML-DSA=on: ML-DSA CRYSTALS-Dilithium Digital Signature Algorithm
ML-KEM=on: ML-KEM Kyber Key Encapsulation Method
SLH-DSA=on: SLH-DSA Sphinx+ Digital Signature Algorithm
====> Protocol Support
NEXTPROTONEG=on: Next Protocol Negotiation (SPDY)
QUIC=on: HTTP/3
SCTP=on: SCTP (Stream Control Transmission)
TLS1=on: TLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1=on: TLSv1.1 (requires TLS1_2)
TLS1_2=on: TLSv1.2
===> Use 'make config' to modify these settings Options name : #
security_openssl41 USES: #
cpe perl5
pkg-message: # If upgrading This OpenSSL version is a non-LTS release.
Master Sites: #
Commit History - (may be incomplete: for full details, see links to repositories near top of page)
Commit Credits Log message
4.1.0 23 Oct 2026 17:04:03
Bernard Spil (brnrd)
security/openssl41: Update to 4.1.0
4.1.0.b2 11 Oct 2026 19:43:38
Bernard Spil (brnrd)
security/openssl41: Update to 4.1.0 Beta 2
Fix build without MAN3 [1]
PR: 298814 [1]
Reported by: Ivan Rozhuk <rozhuk.im gmail com>
4.1.0.b1 30 Sep 2026 12:19:51
Bernard Spil (brnrd)
security/openssl30: update CONFLICTS
4.1.0.b1 23 Sep 2026 18:42:58
Bernard Spil (brnrd)
security/openssl41: Update to 4.1.0 BETA 1
4.1.0.a1 12 Sep 2026 10:08:26
Bernard Spil (brnrd)
security/openssl41: New OpenSSL non-LTS version
This is ALPHA stage software, use for testing
not for production.