notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Newsfeed changes

The news feed page[s] were not laid out well. Two pages, disjointed information, hard to figure out how to use the optional parameters...

Thankfully, someone told me.

The new page is ready for your review. Please compare these two:

You may also be interested in the Github issue.
Port details on branch 2025Q2
openvpn-devel Secure IP/Ethernet tunnel daemon
g20250402,1 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout g20250402,1Version of this port present on the latest quarterly branch.
Maintainer: gert@greenie.muc.de search for ports maintained by this maintainer
Port Added: 2025-04-02 19:36:03
Last Update: 2025-04-02 19:34:18
Commit Hash: 68b6c92
Also Listed In: net net-vpn
License: GPLv2
WWW:
https://openvpn.net/community/
Description:
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet. It can operate over UDP or TCP, can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one server can handle many clients. This development port is updated frequently and is likely NOT STABLE. This is an untested tar of the source tree. We attempt to omit inoperable states, but there is a good chance this program will not run. DO NOT USE IN PRODUCTION WITHOUT CAUTION
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (16 items)
Collapse this list.
  1. /usr/local/share/licenses/openvpn-devel-g20250402,1/catalog.mk
  2. /usr/local/share/licenses/openvpn-devel-g20250402,1/LICENSE
  3. /usr/local/share/licenses/openvpn-devel-g20250402,1/GPLv2
  4. include/openvpn-msg.h
  5. include/openvpn-plugin.h
  6. lib/openvpn/plugins/openvpn-plugin-auth-pam.so
  7. lib/openvpn/plugins/openvpn-plugin-down-root.so
  8. share/man/man5/openvpn-examples.5.gz
  9. share/man/man8/openvpn.8.gz
  10. sbin/openvpn
  11. libexec/openvpn-client.down
  12. libexec/openvpn-client.up
  13. sbin/openvpn-client
  14. @owner
  15. @group
  16. @mode
Collapse this list.
Dependency lines:
  • openvpn-devel>0:security/openvpn-devel
Conflicts:
CONFLICTS_INSTALL:
  • openvpn-2.*
To install the port:
cd /usr/ports/security/openvpn-devel/ && make install clean
To add the package, run one of these commands:
  • pkg install security/openvpn-devel
  • pkg install openvpn-devel
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: openvpn-devel
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1743619255 SHA256 (openvpn-openvpn-b75849ba36433331227ff66430ea06423fab8148_GL0.tar.gz) = 402e312f3d6be0a881ae068e3a52b96dece7d49cdddb0fd876ea7f06e4cff5dd SIZE (openvpn-openvpn-b75849ba36433331227ff66430ea06423fab8148_GL0.tar.gz) = 1292100

Packages (timestamps in pop-ups are UTC):
openvpn-devel
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latestg20250212,1g20250212,1202049g20250212,1g20250212,1-202049-
FreeBSD:13:quarterlyg20240211_2,1g20240211_2,1g20230331,1g20240211_2,1g20240211_2,1g20231109,1g20231109,1g20231109,1
FreeBSD:14:latestg20250212,1g20250212,1g20221228,1g20250212,1g20250212,1g20230331,1-g20230331,1
FreeBSD:14:quarterlyg20240211_2,1g20240211_2,1-g20240211_2,1g20240211_2,1g20231109,1g20231109,1g20231109,1
FreeBSD:15:latestg20250212,1g20250212,1n/ag20250212,1n/ag20231109_1,1g20231109_1,1g20240211_1,1
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmocka>=0 : sysutils/cmocka
  2. rst2man : textproc/py-docutils@py311
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. python3.11 : lang/python311
  5. autoconf>=2.72 : devel/autoconf
  6. automake>=1.17 : devel/automake
  7. libtoolize : devel/libtool
Runtime dependencies:
  1. easy-rsa>=0 : security/easy-rsa
Library dependencies:
  1. liblzo2.so : archivers/lzo2
  2. liblz4.so : archivers/liblz4
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for openvpn-devel-g20250402,1: DCO=on: Build with Data Channel Offload (ovpn(4)) support DOCS=on: Build and/or install documentation EASYRSA=on: Install security/easy-rsa RSA helper package EXAMPLES=on: Build and/or install examples LZ4=on: LZ4 compression support PKCS11=off: Use security/pkcs11-helper SMALL=off: Build a smaller executable with fewer features TEST=on: Build and/or run tests X509ALTUSERNAME=off: Enable --x509-username-field (OpenSSL only) ====> SSL protocol support: you have to select exactly one of them MBEDTLS=off: SSL/TLS via mbedTLS (lacks TLS v1.3) OPENSSL=on: SSL/TLS support via OpenSSL ===> Use 'make config' to modify these settings
Options name:
security_openvpn-devel
USES:
autoreconf cpe libtool pkgconfig python:build shebangfix tar:xz ssl
pkg-message:
For install:
Edit /etc/rc.conf[.local] to start OpenVPN automatically at system startup. See /usr/local/etc/rc.d/openvpn for details. Connect to VPN server as a client with this command to include the client.up/down scripts in the initialization: openvpn-client <spec>.ovpn For compatibility notes when interoperating with older OpenVPN versions, please, see <http://openvpn.net/relnotes.html>
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://gitlab.com/openvpn/openvpn/-/archive/b75849ba36433331227ff66430ea06423fab8148.tar.gz?dummy=/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
g20250402,1
02 Apr 2025 19:34:18
commit hash: 68b6c92718cc8d95a56fb947acb2a36c0e04cae2commit hash: 68b6c92718cc8d95a56fb947acb2a36c0e04cae2commit hash: 68b6c92718cc8d95a56fb947acb2a36c0e04cae2commit hash: 68b6c92718cc8d95a56fb947acb2a36c0e04cae2 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
Author: Gert Doering
security/openvpn-devel: upgrade port to git commit b75849ba36 (2025-04-02)

Fixes CVE-2025-2704 (servers using --tls-crypt-v2 can be made to ASSERT()
by sending a particular sequence of authenticated and malformed packets).

New feature: Multisocket support (listening to multiple sockets, UDP and
TCP, in one server) - with a number of minor bug fixes to that.

New feature: --override-username (see manpage for details)

Other minor features, polishing and bugfixes.

Security:       2cad4541-0f5b-11f0-89f8-411aefea0df9
Security:       CVE-2025-2704
MFH:            2025Q2
(cherry picked from commit a73af948cdbfea8096fcaff9819227be822a9530)

Number of commits found: 1