Port details |
- openvpn-devel Secure IP/Ethernet tunnel daemon
- g20250212,1 security
=10 g20240211_1,1Version of this port present on the latest quarterly branch. - Maintainer: gert@greenie.muc.de
 - Port Added: 2006-08-19 14:30:20
- Last Update: 2025-02-13 21:44:09
- Commit Hash: 850363d
- People watching this port, also watch:: rsync, sudo, openvpn, postfix, screen
- Also Listed In: net net-vpn
- License: GPLv2
- WWW:
- https://openvpn.net/community/
- Description:
- OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private
Network) daemon which can be used to securely link two or more private networks
using an encrypted tunnel over the internet. It can operate over UDP or TCP,
can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one
server can handle many clients.
This development port is updated frequently and is likely NOT STABLE. This is
an untested tar of the source tree. We attempt to omit inoperable states, but
there is a good chance this program will not run.
DO NOT USE IN PRODUCTION WITHOUT CAUTION
¦ ¦ ¦ ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- openvpn-devel>0:security/openvpn-devel
- Conflicts:
- CONFLICTS_INSTALL:
- openvpn-2.[!4].*
- openvpn-[!2].*
- openvpn-beta
- openvpn-devel
- openvpn-mbedtls
- To install the port:
- cd /usr/ports/security/openvpn-devel/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openvpn-devel
- pkg install openvpn-devel
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: openvpn-devel
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1739383450
SHA256 (openvpn-openvpn-9f4670fc718a8c16280d60c3e2d4ad29cffa04c4_GL0.tar.gz) = 0052abacae815b70f5438974288b4356245fe69cd59ac2b8b00ef4f4a59f8443
SIZE (openvpn-openvpn-9f4670fc718a8c16280d60c3e2d4ad29cffa04c4_GL0.tar.gz) = 1277992
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- cmocka>=0 : sysutils/cmocka
- rst2man : textproc/py-docutils@py311
- pkgconf>=1.3.0_1 : devel/pkgconf
- python3.11 : lang/python311
- autoconf>=2.72 : devel/autoconf
- automake>=1.17 : devel/automake
- libtoolize : devel/libtool
- Runtime dependencies:
-
- easy-rsa>=0 : security/easy-rsa
- Library dependencies:
-
- liblzo2.so : archivers/lzo2
- liblz4.so : archivers/liblz4
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for openvpn-devel-g20250212,1:
DCO=on: Build with Data Channel Offload (ovpn(4)) support
DOCS=on: Build and/or install documentation
EASYRSA=on: Install security/easy-rsa RSA helper package
EXAMPLES=on: Build and/or install examples
LZ4=on: LZ4 compression support
PKCS11=off: Use security/pkcs11-helper
SMALL=off: Build a smaller executable with fewer features
TEST=on: Build and/or run tests
X509ALTUSERNAME=off: Enable --x509-username-field (OpenSSL only)
====> SSL protocol support: you have to select exactly one of them
MBEDTLS=off: SSL/TLS via mbedTLS (lacks TLS v1.3)
OPENSSL=on: SSL/TLS support via OpenSSL
===> Use 'make config' to modify these settings
- Options name:
- security_openvpn-devel
- USES:
- autoreconf cpe libtool pkgconfig python:build shebangfix tar:xz ssl
- pkg-message:
- For install:
- Edit /etc/rc.conf[.local] to start OpenVPN automatically at system
startup. See /usr/local/etc/rc.d/openvpn for details.
Connect to VPN server as a client with this command to include
the client.up/down scripts in the initialization:
openvpn-client <spec>.ovpn
For compatibility notes when interoperating with older OpenVPN
versions, please, see <http://openvpn.net/relnotes.html>
- Master Sites:
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
201126 25 Jul 2011 20:01:06
 |
mandree  |
Fix Pointyhat build failures by skipping (not failing) network-based tests.
Approved by: ecrist@secure-computing.net (maintainer) |
201126 05 Jul 2011 15:20:01
 |
jpaetzel  |
Unbreak port by adjusting plist to match reality of new version. |
201126 01 Jul 2011 17:59:41
 |
jpaetzel  |
Update to week 26 snapshot.
PR: ports/158568
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Sponsored by: ClaimLynx, Inc |
201124 15 Jun 2011 08:43:54
 |
culot  |
- Update to 201124
PR: ports/157812
Submitted by: Jin-Sih Lin <linpct@gmail.com>
Approved by: Eric Crist <ecrist@secure-computing.net> (maintainer) |
201118 15 May 2011 02:49:17
 |
dougb  |
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps |
201118 04 May 2011 18:12:27
 |
dhn  |
- Update to 201118
PR: ports/156812
Submitted by: Eric F Crist <ecrist@secure-computing.net> (maintainer) |
201111 22 Mar 2011 13:34:12
 |
jpaetzel  |
Update to latest snapshot.
PR: ports/155770
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Sponsored by: ClaimLynx, Inc |
201104 25 Jan 2011 23:31:23
 |
jpaetzel  |
Update to week 4 snapshot
PR: ports/154296
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Feature safe: yes
Sponsored by: ClaimLynx, Inc |
201049 10 Dec 2010 15:04:29
 |
jpaetzel  |
Update to latest snapshot.
PR: ports/152992
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Sponsored by: ClaimLynx, Inc |
201041 14 Oct 2010 20:27:16
 |
jpaetzel  |
Update to latest snapshot
PR: ports/151462
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Sponsored by: ClaimLynx, Inc |
201034 22 Aug 2010 15:22:05
 |
lwhsu  |
- Update to the latest week 34 snapshot.
- While here, resolve portlint(1) warning: Package conflicts with itself.
PR: ports/149878
Submitted by: Eric F Crist <ecrist@secure-computing.net> |
201031 14 Aug 2010 15:39:42
 |
jpaetzel  |
Update CONFLICTS in preperation for new port security/openvpn-beta
PR: ports/149618
Submitted by: Eric F Crist <ecrist@secure-computing.net> |
201031 04 Aug 2010 16:02:48
 |
jpaetzel  |
Update to latest weekly snapshot.
Add softrestart command to rc script.
PR: ports/149272
Submitted by: Eric F Crist <ecrist@secure-computing.net> |
201029 20 Jul 2010 15:55:22
 |
jpaetzel  |
Update weekly snapshot
PR: ports/148787
Submitted by: Eric F Crist <ecrist@secure-computing.net> |
201026 28 Jun 2010 17:54:59
 |
jpaetzel  |
Update to weekly snapshot
PR: 148212
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Approved by: itetcu@ (mentor)
Feature safe: yes |
201024 16 Jun 2010 22:35:14
 |
jpaetzel  |
Update to week 24 snapshot
PR: 147850
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Approved by: itetcu@ (mentor) |
201022 03 Jun 2010 17:20:30
 |
jpaetzel  |
Update to latest snapshot
PR: ports/147330
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Approved by: itetcu@ (mentor) |
201019 14 May 2010 21:17:42
 |
jpaetzel  |
Update to week 19 tarball
PR: ports/146594
Submitted by: Eric F Crist <ecrist@secure-computing.net>
Approved by: itetcu@ (mentor) |
201017 26 Apr 2010 03:02:20
 |
sylvio  |
- Update to 201017
PR: ports/145762
Submitted by: Eric F Crist <ecrist@secure-computing.net> (maintainer) |
201012 27 Mar 2010 06:14:03
 |
dougb  |
RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name. |
201012 27 Mar 2010 00:15:24
 |
dougb  |
Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr# |
201012 24 Mar 2010 13:17:32
 |
niels  |
This is the bi-weekly update of openvpn-devel (week 12)
PR: ports/144945
Submitted by: Eric F Crist <ecrist@secure-computing.net> (maintainer)
Approved by: miwi (mentor) |
201010 15 Mar 2010 14:13:14
 |
niels  |
Maintainer updated to 201010 snapshot
PR: ports/144699
Submitted by: Eric F Crist <ecrist@secure-computing.net> (maintainer)
Approved by: itetcu (mentor) |
201007 23 Feb 2010 12:22:15
 |
mandree  |
Revive openvpn-devel port and pass maintainership to Eric F. Christ.
NOTE that the port is more of a development snapshot than it used to be,
so it should be used SOLELY for testing and development, NOT IN PRODUCTION.
PR: ports/144115
Approved by: mandree@ (previous maintainer)
Approved by: garga@ (mentor)
Feature safe: yes |
2.1.r20 07 Jan 2010 16:28:57
 |
mandree  |
Move security/openvpn to security/openvpn20 (after previous repocopy).
Update security/openvpn20 to 2.0.9, revising pkg-message.
Move security/openvpn-devel to security/openvpn and
update security/openvpn to 2.1.1.
Remove security/openvpn-devel, adding a MOVED entry.
Update security/Makefile to remove openvpn-devel and add openvpn20 to
SUBDIRS.
Add a UPDATING entry for this shuffle. Currently without upgrade
instructions since neither portupgrade nor portmaster are up to the
task (because of the CONFLICTS).
Approved by: garga@ (mentor) |
2.1.r20 14 Oct 2009 10:34:55
 |
miwi  |
- Update to 2.1_rc20
PR: 139584
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r19 07 Aug 2009 17:47:28
 |
amdmi3  |
- Update to 2.1_rc19
- Fix on FreeBSD 8.x
PR: 137516
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r18 15 Jul 2009 16:56:10
 |
dougb  |
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops. |
2.1.r18 13 Jun 2009 22:55:19
 |
miwi  |
- Update to 2.1_rc18
PR: 135392
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r17 02 Jun 2009 21:41:36
 |
miwi  |
- Update to 2.1_rc17
PR: 135148
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r15 25 Jan 2009 08:10:59
 |
beech  |
- Add logging knob
PR: ports/130893
Submitted by: Michael Scheidell <scheidell@secnap.net>
Approved by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r15 22 Nov 2008 22:29:16
 |
miwi  |
- Update to 2.1_rc15
PR: 129062
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r13 11 Oct 2008 14:00:52
 |
miwi  |
- Update to 2.1-rc13
PR: 128007
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r11 15 Sep 2008 23:13:22
 |
miwi  |
- Update to 2.1_rc11
Changelog:
This release fixes a serious (though not security-related) bug in the
SSL/TLS negotiation over UDP that can cause SSL/TLS handshake failures.
PR: 127392
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by: portmgr (pav) |
2.1.r9 21 Aug 2008 06:18:49
 |
rafan  |
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk (Only the first 15 lines of the commit message are shown above ) |
2.1.r9 10 Aug 2008 21:52:04
 |
miwi  |
- Add missing patch (forgot in previous commit) |
2.1.r9 10 Aug 2008 21:48:26
 |
miwi  |
- Security update to version 2.1_rc9 to fix CVE-2008-3459
(arbitrary code execution).
- VulnDB update was submitted in a previous PR.
- Add PKCS#11 option which explicitly disables PKCS11 at
build time if not desired to avoid invisible pkcs11-helper
dependency, else openvpn would silently pick up security/pkcs11-helper.
PR: 126356
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r8_1 18 Jul 2008 12:16:20
 |
miwi  |
- Force commit to correct the previous commit log:
Correct permissions/owner of DOCSDIR-installed files
PR: 125726 / 125727
Request by: maintainer via im |
2.1.r8_1 18 Jul 2008 10:48:06
 |
miwi  |
- Respect NOPORTDOCS
PR: 125727
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer) |
2.1.r8 15 Jun 2008 18:30:58
 |
jadawin  |
- Update to 2.1-rc8
PR: ports/124574
Submitted by: Matthias Andree <matthias.andree gmx.de> (maintainer)
Approved by: mentor (implicit) |
2.1.r7_1 20 Feb 2008 01:16:09
 |
rafan  |
- Run opensvn with --daemon ${name} in order to get distinguishable and
useful syslog tags
PR: ports/120863
Submitted by: Matthias Andree <matthias.andree at gmx.de> (maintainer) |
2.1.r7 31 Jan 2008 04:46:55
 |
tabthorpe  |
- Update to 2.1_rc7
PR: ports/120174
Submitted by: Matthias Andree <matthias.andree gmx.de> (maintainer) |
2.1.r6 26 Jan 2008 15:40:06
 |
araujo  |
- Update to 2.1_rc6.
PR: ports/119953
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by: stas (mentor, implicit) |
2.1.r4 26 May 2007 15:47:21
 |
araujo  |
- Update to new upstream version 2.1-rc4.
- Override new automake default dir.
PR: ports/112414
Submitted by: Matthias Andree <matthias.andree@gmx.de>
Approved by: stas (mentor) |
2.1.r2 04 Apr 2007 14:40:36
 |
rafan  |
- Fix build on pointyhat if openvpn and openvpn-devel are built at the
same time. Rearrange the ports used in self-test to different ones.
PR: ports/111207
Submitted by: Matthias Andree <matthias.andree at gmx.de> (maintainer) |
2.1.r2 08 Mar 2007 07:16:33
 |
dougb  |
Remove spurious empty BEFORE: lines
Approved by: maintainer |
2.1.r2 06 Mar 2007 13:00:02
 |
rafan  |
- Update to 2.1 RC2
- Port rc script changes from security/openvpn 2.0.6_7 to support multiple
instances
PR: ports/109909
Submitted by: Matthias Andree <matthias.andree at gmx.de> (maintainer) |
2.1.r1 04 Feb 2007 19:14:20
 |
rafan  |
- Use newly added RC_SUBR_SUFFIX
Approved by: Matthias Andree <matthias.andree at gmx.de> (maintainer) |
2.1.r1 12 Nov 2006 19:22:50
 |
itetcu  |
Update to 2.1_rc1.
PR: ports/105449
Submitted by: Matthias Andree (maintainer) |
2.1.b16 07 Oct 2006 07:04:23
 |
rafan  |
- Update to 2.1 beta 16
- Build auth-pam module
- Remove patch that got merged upstream
PR: ports/103994
Submitted by: Matthias Andree <matthias.andree at gmx.de> (maintainer) |
2.1.b15 14 Sep 2006 05:59:57
 |
rafan  |
- Update to 2.1.beta15
PR: ports/103244
Submitted by: Matthias Andree <matthias.andree at gmx.de> (maintainer) |
2.1.b14_1 20 Aug 2006 07:08:18
 |
itetcu  |
- conflicts with openvpn-[0-9]*
- bump PORTREVISION
PR: ports/102302
Submitted by: Matthias Andree (maintainer) |
2.1.b14 19 Aug 2006 14:29:37
 |
shaun  |
Convert the repocopied security/openvpn into openvpn-devel.
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private
Network) daemon which can be used to securely link two or more private networks
using an encrypted tunnel over the internet. It can operate over UDP or TCP,
can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one
server can handle many clients.
PR: ports/101802
Submitted by: Matthias Andree <matthias.andree@gmx.de> (openvpn maintainer) |