notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
Port details
openvpn Secure IP/Ethernet tunnel daemon
2.6.14 security on this many watch lists=136 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.6.14Version of this port present on the latest quarterly branch.
Maintainer: mandree@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2002-06-24 16:19:12
Last Update: 2025-04-02 19:33:45
Commit Hash: e20a69e
People watching this port, also watch:: sudo, nmap, unzip, rsync, libiconv
Also Listed In: net net-vpn
License: GPLv2
WWW:
https://openvpn.net/community/
Description:
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet. It can operate over UDP or TCP, can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one server can handle many clients.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (16 items)
Collapse this list.
  1. /usr/local/share/licenses/openvpn-2.6.14/catalog.mk
  2. /usr/local/share/licenses/openvpn-2.6.14/LICENSE
  3. /usr/local/share/licenses/openvpn-2.6.14/GPLv2
  4. include/openvpn-msg.h
  5. include/openvpn-plugin.h
  6. lib/openvpn/plugins/openvpn-plugin-auth-pam.so
  7. lib/openvpn/plugins/openvpn-plugin-down-root.so
  8. libexec/openvpn-client.down
  9. libexec/openvpn-client.up
  10. share/man/man5/openvpn-examples.5.gz
  11. share/man/man8/openvpn.8.gz
  12. sbin/openvpn
  13. sbin/openvpn-client
  14. @owner
  15. @group
  16. @mode
Collapse this list.
Dependency lines:
  • openvpn>0:security/openvpn
Conflicts:
CONFLICTS_INSTALL:
  • openvpn-devel
To install the port:
cd /usr/ports/security/openvpn/ && make install clean
To add the package, run one of these commands:
  • pkg install security/openvpn
  • pkg install openvpn
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: openvpn
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1743554391 SHA256 (openvpn-2.6.14.tar.gz) = 9eb6a6618352f9e7b771a9d38ae1631b5edfeed6d40233e243e602ddf2195e7a SIZE (openvpn-2.6.14.tar.gz) = 1926343

Packages (timestamps in pop-ups are UTC):
openvpn
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest2.6.132.6.142.5.02.6.132.6.14-2.5.0-
FreeBSD:13:quarterly2.6.142.6.142.6.52.6.142.6.142.6.8_12.6.8_12.6.9
FreeBSD:14:latest2.6.132.6.142.5.82.6.132.6.142.6.5-2.6.5
FreeBSD:14:quarterly2.6.132.6.14-2.6.132.6.142.6.8_12.6.8_12.6.9
FreeBSD:15:latest2.6.132.6.13n/a2.6.13n/a2.6.8_22.6.8_22.6.9
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmocka>=0 : sysutils/cmocka
  2. rst2man : textproc/py-docutils@py311
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. python3.11 : lang/python311
Runtime dependencies:
  1. easy-rsa>=0 : security/easy-rsa
Library dependencies:
  1. liblz4.so : archivers/liblz4
  2. liblzo2.so : archivers/lzo2
  3. libpkcs11-helper.so : security/pkcs11-helper
This port is required by:
for Build
  1. security/openvpn-auth-ldap
  2. security/openvpn-auth-script
for Run
  1. security/duo_openvpn
  2. security/openvpn-admin
  3. security/openvpn-auth-radius

Deleted ports which required this port:

Expand this list of 2 deleted ports
  1. security/kovpn*
  2. security/protonvpn-cli*
  3. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for openvpn-2.6.14: ASYNC_PUSH=off: Enable async-push support DCO=on: Data Channel Offload/ovpn(4) support->README.dco.md DOCS=on: Build and/or install documentation EASYRSA=on: Install security/easy-rsa RSA helper package EXAMPLES=on: Build and/or install examples LZ4=on: LZ4 compression support LZO=on: LZO compression (incompatible with LibreSSL) PKCS11=on: Use security/pkcs11-helper, needs same SSL lib! SMALL=off: Build a smaller executable with fewer features TEST=on: Build and/or run tests UNITTESTS=off: Enable unit tests X509ALTUSERNAME=off: Enable --x509-username-field ===> Use 'make config' to modify these settings
Options name:
security_openvpn
USES:
cpe libtool localbase:ldflags pkgconfig python:build shebangfix ssl
pkg-message:
For install:
Edit /etc/rc.conf[.local] to start OpenVPN automatically at system startup. See /usr/local/etc/rc.d/openvpn for details. Connect to VPN server as a client with this command to include the client.up/down scripts in the initialization: openvpn-client <spec>.ovpn For compatibility notes when interoperating with older OpenVPN versions, please see <http://openvpn.net/relnotes.html> Note that OpenVPN does not officially support LibreSSL. Note that OpenVPN configures a separate user and group "openvpn", which should be used instead of the NFS user "nobody" when an unprivileged user account is desired. You may want to add user openvpn and group openvpn when creating your configuration files, the example configuration shows this only as comments.
If upgrading
Note that OpenVPN now configures a separate user and group "openvpn", which should be used instead of the NFS user "nobody" when an unprivileged user account is desired. It is advisable to review existing configuration files and to consider adding/changing user openvpn and group openvpn.
Master Sites:
Expand this list (6 items)
Collapse this list.
  1. http://distcache.FreeBSD.org/local-distfiles/mandree/
  2. http://distcache.eu.FreeBSD.org/local-distfiles/mandree/
  3. http://distcache.us-east.FreeBSD.org/local-distfiles/mandree/
  4. http://distcache.us-west.FreeBSD.org/local-distfiles/mandree/
  5. https://build.openvpn.net/downloads/releases/
  6. https://swupdate.openvpn.org/community/releases/
Collapse this list.
Notes from UPDATING
These upgrade notes are taken from /usr/ports/UPDATING
  • 2023-01-27
    Affects: users of security/openvpn
    Author: mandree@freebsd.org
    Reason: 
      OpenVPN has been updated to the new upstream release v2.6.0, which
      is quite compatible with v2.5 versions.
    
      A copy of the latest v2.5.8 port is being kept as security/openvpn25 (or
      openvpn25 package) until end of March 2023.
    
    
Port Moves
  • port moved here from security/openvpn25 on 2023-03-31
    REASON: Has expired: replaced by new upstream release 2.6.0

Number of commits found: 219 (showing only 19 on this page)

«  1 | 2 | 3 

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.0.2
29 Aug 2005 18:52:19
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- Update to 2.0.2 that brings these upstream changes:

  - fix bug that would exhaust file descriptors as the routing table was
modified
    (this had already been part of the port previously)
  - fix bug that would block the management socket until the peer connected
  - fix pkitool sh incompatibilities (from NetBSD)

PR:             ports/85299
Submitted by:   maintainer
2.0.1_1
22 Aug 2005 10:31:35
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
Fix a typo in the new rc file, where documentation didn't match the
actual variables.

PR:             ports/85156
Submitted by:   maintainer
Reported by:    Benjamin Lutz <benlutz@datacomm.ch>
Approved by:    portmgr (krion)
2.0.1
19 Aug 2005 18:48:34
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- Security update to version 2.0.1, fixing four denial of service bugs,
  CAN-2005-2531, CAN-2005-2532, CAN-2005-2533, CAN-2005-2534
- Drop old init script and add a modern rcNG script in its place,
  requested by Matthias Grimm and Dirk Gouders (although the script below is
  one I, Matthias Andree, wrote). It can automatically load tun/tap drivers.
- move pkg-message to files/pkg-message.in, revise it, list it in SUB_FILES
  to expand ${PREFIX}.
- print pkg-message after installation from port
- switch to official "make check" as smoke-test, rather than wiring our own.
- prefer LZO2 in most situations, as OpenVPN will pick up LZO2 rather than
  LZO1 if both are installed.

PR:             ports/85109
Submitted by:   maintainer
Approved by:    portmgr (krion)
2.0_3
14 Jul 2005 13:15:47
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
Add PW_PASS option to compile with --enable-pass-save

PR:             82494
Submitted by:   Landon Fuller <landonf@threerings.net>
Reviewed by:    Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by:    mantainer, flz (mentor)
2.0_3
31 May 2005 19:58:33
Original commit files touched by this commit This port version is marked as vulnerable.
flz search for other commits by this committer
- Backout latest commit, it needs a repocopy due to API change.

Noticed by:     Matthias Andree <matthias.andree@gmx.de>
2.0_2
31 May 2005 17:57:11
Original commit files touched by this commit This port version is marked as vulnerable.
flz search for other commits by this committer
- Bump lzo lib version.
- Bump PORTREVISION.
2.0_1
19 May 2005 16:22:21
Original commit files touched by this commit This port version is marked as vulnerable.
vs search for other commits by this committer
Plug socket (file descriptor) leak.

PR:             ports/81267
Submitted by:   Jaroslav Klaus via maintainer
2.0
24 Apr 2005 13:26:52
Original commit files touched by this commit This port version is marked as vulnerable.
vs search for other commits by this committer
Revise pkg-message to mark more prominently that the default
port is now 1194 rather than 5000, and refer users to the
online release notes if looking for information WRT older versions.

PR:             80300
Submitted by:   maintainer
2.0
21 Apr 2005 14:04:41
Original commit files touched by this commit This port version is marked as vulnerable.
jylefort search for other commits by this committer
Update to 2.0

PR:             ports/80082
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by:    adamw (mentor, implicit)
1.6.0
03 Sep 2004 16:17:04
Original commit files touched by this commit This port version is marked as vulnerable.
vs search for other commits by this committer
Add CONFLICTS with openvpn-devel

PR:             ports/71337
Submitted by:   maintainer
1.6.0
10 May 2004 15:51:24
Original commit files touched by this commit This port version is marked as vulnerable.
vs search for other commits by this committer
Update to latest stable version.

PR:             ports/66473
Submitted by:   Matthias Andree (maintainer)
1.5.0
18 Mar 2004 02:27:55
Original commit files touched by this commit This port version is marked as vulnerable.
trevor search for other commits by this committer
Add size data.

Approved by:    maintainers
1.5.0
21 Nov 2003 12:19:01
Original commit files touched by this commit This port version is marked as vulnerable.
krion search for other commits by this committer
- Support for TCP as the tunnel transport was added
- Change maintainer email

PR:             59543
Submitted by:   maintainer
1.4.2
18 Jul 2003 00:16:06
Original commit files touched by this commit This port version is marked as vulnerable.
leeym search for other commits by this committer
updates the OpenVPN port from 1.4.0 to 1.4.2.

PR:             54597
Submitted by:   Matthias Andree <matthias.andree@gmx.de>
1.4.0
09 May 2003 07:34:00
Original commit files touched by this commit This port version is marked as vulnerable.
ijliao search for other commits by this committer
upgrade to 1.4.0

PR:             51956
Submitted by:   maintainer
1.3.2
21 Feb 2003 13:26:58
Original commit files touched by this commit This port version is marked as vulnerable.
knu search for other commits by this committer
De-pkg-comment.
1.3.2
25 Oct 2002 20:55:29
Original commit files touched by this commit This port version is marked as vulnerable.
obraun search for other commits by this committer
* Upgrade to 1.3.2.
* Add init script.

PR:             44436
Submitted by:   maintainer
1.3.0
11 Jul 2002 16:51:06
Original commit files touched by this commit This port version is marked as vulnerable.
ijliao search for other commits by this committer
upgrade to 1.3.0

PR:             40424
Submitted by:   maintainer
1.2.1
24 Jun 2002 16:13:10
Original commit files touched by this commit This port version is marked as vulnerable.
pat search for other commits by this committer
Add new port openvpn: Secure IP/Ethernet tunnel daemon

PR:             ports/39750
Submitted by:   Matthias Andree <matthias.andree@web.de>

Number of commits found: 219 (showing only 19 on this page)

«  1 | 2 | 3