notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
NOW FIXED. We had a known problem with lists of packages - they were out of date. The fix has been applied to production. See packages-import/issues/3 & packages-import/issues/4
Port details on branch 2025Q1
openvpn Secure IP/Ethernet tunnel daemon
2.6.13 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.6.13Version of this port present on the latest quarterly branch.
Maintainer: mandree@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-01-17 01:48:07
Last Update: 2025-01-17 01:41:32
Commit Hash: ea08b2e
Also Listed In: net net-vpn
License: GPLv2
WWW:
https://openvpn.net/community/
Description:
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet. It can operate over UDP or TCP, can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one server can handle many clients.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (16 items)
Collapse this list.
  1. /usr/local/share/licenses/openvpn-2.6.13/catalog.mk
  2. /usr/local/share/licenses/openvpn-2.6.13/LICENSE
  3. /usr/local/share/licenses/openvpn-2.6.13/GPLv2
  4. include/openvpn-msg.h
  5. include/openvpn-plugin.h
  6. lib/openvpn/plugins/openvpn-plugin-auth-pam.so
  7. lib/openvpn/plugins/openvpn-plugin-down-root.so
  8. libexec/openvpn-client.down
  9. libexec/openvpn-client.up
  10. share/man/man5/openvpn-examples.5.gz
  11. share/man/man8/openvpn.8.gz
  12. sbin/openvpn
  13. sbin/openvpn-client
  14. @owner
  15. @group
  16. @mode
Collapse this list.
Dependency lines:
  • openvpn>0:security/openvpn
Conflicts:
CONFLICTS_INSTALL:
  • openvpn-2*
  • openvpn-devel
  • openvpn-mbedtls
To install the port:
cd /usr/ports/security/openvpn/ && make install clean
To add the package, run one of these commands:
  • pkg install security/openvpn
  • pkg install openvpn
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: openvpn
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1737076293 SHA256 (openvpn-2.6.13.tar.gz) = 1af10b86922bd7c99827cc0f151dfe9684337b8e5ebdb397539172841ac24a6a SIZE (openvpn-2.6.13.tar.gz) = 1911719

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmocka>=0 : sysutils/cmocka
  2. rst2man : textproc/py-docutils@py311
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. python3.11 : lang/python311
Runtime dependencies:
  1. easy-rsa>=0 : security/easy-rsa
Library dependencies:
  1. liblz4.so : archivers/liblz4
  2. liblzo2.so : archivers/lzo2
  3. libpkcs11-helper.so : security/pkcs11-helper
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for openvpn-2.6.13: ASYNC_PUSH=off: Enable async-push support DCO=on: Data Channel Offload/ovpn(4) support->README.dco.md DOCS=on: Build and/or install documentation EASYRSA=on: Install security/easy-rsa RSA helper package EXAMPLES=on: Build and/or install examples LZ4=on: LZ4 compression support LZO=on: LZO compression (incompatible with LibreSSL) PKCS11=on: Use security/pkcs11-helper, needs same SSL lib! SMALL=off: Build a smaller executable with fewer features TEST=on: Build and/or run tests UNITTESTS=off: Enable unit tests X509ALTUSERNAME=off: Enable --x509-username-field ===> Use 'make config' to modify these settings
Options name:
security_openvpn
USES:
cpe libtool localbase:ldflags pkgconfig python:build shebangfix ssl
pkg-message:
For install:
Edit /etc/rc.conf[.local] to start OpenVPN automatically at system startup. See /usr/local/etc/rc.d/openvpn for details. Connect to VPN server as a client with this command to include the client.up/down scripts in the initialization: openvpn-client <spec>.ovpn For compatibility notes when interoperating with older OpenVPN versions, please see <http://openvpn.net/relnotes.html> Note that OpenVPN does not officially support LibreSSL. Note that OpenVPN configures a separate user and group "openvpn", which should be used instead of the NFS user "nobody" when an unprivileged user account is desired. You may want to add user openvpn and group openvpn when creating your configuration files, the example configuration shows this only as comments.
If upgrading
Note that OpenVPN now configures a separate user and group "openvpn", which should be used instead of the NFS user "nobody" when an unprivileged user account is desired. It is advisable to review existing configuration files and to consider adding/changing user openvpn and group openvpn.
Master Sites:
Expand this list (6 items)
Collapse this list.
  1. http://distcache.FreeBSD.org/local-distfiles/mandree/
  2. http://distcache.eu.FreeBSD.org/local-distfiles/mandree/
  3. http://distcache.us-east.FreeBSD.org/local-distfiles/mandree/
  4. http://distcache.us-west.FreeBSD.org/local-distfiles/mandree/
  5. https://build.openvpn.net/downloads/releases/
  6. https://swupdate.openvpn.org/community/releases/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.6.13
17 Jan 2025 01:41:32
commit hash: ea08b2ed7336931b9f25b46299098ab444b35e72commit hash: ea08b2ed7336931b9f25b46299098ab444b35e72commit hash: ea08b2ed7336931b9f25b46299098ab444b35e72commit hash: ea08b2ed7336931b9f25b46299098ab444b35e72 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/openvpn: critical update to 2.6.13

ChangeLog:	https://github.com/OpenVPN/openvpn/blob/v2.6.13/Changes.rst#overview-of-changes-in-2613

Notably: Security fixes

improve server-side handling of clients sending usernames or
passwords longer than USER_PASS_LEN - this would not result in a crash,
buffer overflow or other security issues, but the server would then
misparse incoming IV_* variables and produce misleading error messages.

Security:	47bc292a-d472-11ef-aaab-7d43732cb6f5
MFH:		2025Q1
(cherry picked from commit 874ce689efb62c57af37c11df691d549a54027dc)

Number of commits found: 1