As an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photos
All times are UTCnotbug
Ukraine
Menu ☰ Menu
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Volunteers wanted to help translate FreshPorts
Searches without login should now work. You must get asked to click a button.
Port details
mbedtls4 Embedded SSL/TLS and cryptography library
4.2.0 security Σ=1 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 4.2.0Version of this port present on the latest quarterly branch.
Maintainer: pkaipila@gmail.com search for ports maintained by this maintainer
Port Added: 2026-03-01 16:39:08
Last Update: 2026-07-08 13:57:33
Commit Hash: 2162d1d
People watching this port, also watch: busybox, php84-composer, toybox, mbedtls3, fusefs-s3fs
Also Listed In: devel
License: APACHE20 GPLv2+
WWW:
https://www.trustedfirmware.org/projects/mbed-tls/
Description: #
mbed TLS is a lightweight, portable, fully featured and standards compliant SSL/TLS and cryptography library.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages: #
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist #
Expand this list (177 items)
Collapse this list.
  1. @ldconfig
  2. /usr/local/share/licenses/mbedtls4-4.2.0/catalog.mk
  3. /usr/local/share/licenses/mbedtls4-4.2.0/LICENSE
  4. /usr/local/share/licenses/mbedtls4-4.2.0/APACHE20
  5. /usr/local/share/licenses/mbedtls4-4.2.0/GPLv2+
  6. bin/mbedtls_aead_demo
  7. bin/mbedtls_cert_app
  8. bin/mbedtls_cert_req
  9. bin/mbedtls_cert_write
  10. bin/mbedtls_crl_app
  11. bin/mbedtls_crypto_examples
  12. bin/mbedtls_dtls_client
  13. bin/mbedtls_dtls_server
  14. bin/mbedtls_generate_random_uuid
  15. bin/mbedtls_hmac_demo
  16. bin/mbedtls_key_ladder_demo
  17. bin/mbedtls_key_ladder_demo.sh
  18. bin/mbedtls_load_roots
  19. bin/mbedtls_metatest
  20. bin/mbedtls_mini_client
  21. bin/mbedtls_pem2der
  22. bin/mbedtls_psa_constant_names
  23. bin/mbedtls_psa_hash
  24. bin/mbedtls_query_compile_time_config
  25. bin/mbedtls_query_included_headers
  26. bin/mbedtls_req_app
  27. bin/mbedtls_selftest
  28. bin/mbedtls_ssl_client1
  29. bin/mbedtls_ssl_client2
  30. bin/mbedtls_ssl_context_info
  31. bin/mbedtls_ssl_fork_server
  32. bin/mbedtls_ssl_mail_client
  33. bin/mbedtls_ssl_pthread_server
  34. bin/mbedtls_ssl_server
  35. bin/mbedtls_ssl_server2
  36. bin/mbedtls_strerror
  37. bin/mbedtls_udp_proxy
  38. bin/mbedtls_zeroize
  39. include/mbedtls/asn1.h
  40. include/mbedtls/asn1write.h
  41. include/mbedtls/base64.h
  42. include/mbedtls/build_info.h
  43. include/mbedtls/compat-3-crypto.h
  44. include/mbedtls/constant_time.h
  45. include/mbedtls/debug.h
  46. include/mbedtls/error.h
  47. include/mbedtls/lms.h
  48. include/mbedtls/mbedtls_config.h
  49. include/mbedtls/md.h
  50. include/mbedtls/memory_buffer_alloc.h
  51. include/mbedtls/net_sockets.h
  52. include/mbedtls/nist_kw.h
  53. include/mbedtls/oid.h
  54. include/mbedtls/pem.h
  55. include/mbedtls/pk.h
  56. include/mbedtls/pkcs7.h
  57. include/mbedtls/platform.h
  58. include/mbedtls/platform_time.h
  59. include/mbedtls/platform_util.h
  60. include/mbedtls/private/aes.h
  61. include/mbedtls/private/aria.h
  62. include/mbedtls/private/bignum.h
  63. include/mbedtls/private/block_cipher.h
  64. include/mbedtls/private/camellia.h
  65. include/mbedtls/private/ccm.h
  66. include/mbedtls/private/chacha20.h
  67. include/mbedtls/private/chachapoly.h
  68. include/mbedtls/private/cipher.h
  69. include/mbedtls/private/cmac.h
  70. include/mbedtls/private/config_adjust_ssl.h
  71. include/mbedtls/private/config_adjust_test_accelerators.h
  72. include/mbedtls/private/config_adjust_x509.h
  73. include/mbedtls/private/crypto_adjust_config_enable_builtins.h
  74. include/mbedtls/private/crypto_adjust_config_tweak_builtins.h
  75. include/mbedtls/private/crypto_builtin_composites.h
  76. include/mbedtls/private/crypto_builtin_key_derivation.h
  77. include/mbedtls/private/crypto_builtin_primitives.h
  78. include/mbedtls/private/ctr_drbg.h
  79. include/mbedtls/private/ecdsa.h
  80. include/mbedtls/private/ecjpake.h
  81. include/mbedtls/private/ecp.h
  82. include/mbedtls/private/entropy.h
  83. include/mbedtls/private/error_common.h
  84. include/mbedtls/private/gcm.h
  85. include/mbedtls/private/hmac_drbg.h
  86. include/mbedtls/private/md5.h
  87. include/mbedtls/private/pk_private.h
  88. include/mbedtls/private/pkcs5.h
  89. include/mbedtls/private/poly1305.h
  90. include/mbedtls/private/ripemd160.h
  91. include/mbedtls/private/rsa.h
  92. include/mbedtls/private/sha1.h
  93. include/mbedtls/private/sha256.h
  94. include/mbedtls/private/sha3.h
  95. include/mbedtls/private/sha512.h
  96. include/mbedtls/private_access.h
  97. include/mbedtls/psa_util.h
  98. include/mbedtls/ssl.h
  99. include/mbedtls/ssl_cache.h
  100. include/mbedtls/ssl_ciphersuites.h
  101. include/mbedtls/ssl_cookie.h
  102. include/mbedtls/ssl_ticket.h
  103. include/mbedtls/threading.h
  104. include/mbedtls/timing.h
  105. include/mbedtls/version.h
  106. include/mbedtls/x509.h
  107. include/mbedtls/x509_crl.h
  108. include/mbedtls/x509_crt.h
  109. include/mbedtls/x509_csr.h
  110. include/psa/crypto.h
  111. include/psa/crypto_compat.h
  112. include/psa/crypto_config.h
  113. include/psa/crypto_driver_common.h
  114. include/psa/crypto_driver_contexts_composites.h
  115. include/psa/crypto_driver_contexts_key_derivation.h
  116. include/psa/crypto_driver_contexts_primitives.h
  117. include/psa/crypto_driver_random.h
  118. include/psa/crypto_extra.h
  119. include/psa/crypto_platform.h
  120. include/psa/crypto_sizes.h
  121. include/psa/crypto_struct.h
  122. include/psa/crypto_types.h
  123. include/psa/crypto_values.h
  124. include/tf-psa-crypto/build_info.h
  125. include/tf-psa-crypto/private/crypto_adjust_config_auto_enabled.h
  126. include/tf-psa-crypto/private/crypto_adjust_config_dependencies.h
  127. include/tf-psa-crypto/private/crypto_adjust_config_derived.h
  128. include/tf-psa-crypto/private/crypto_adjust_config_key_pair_types.h
  129. include/tf-psa-crypto/private/crypto_adjust_config_support.h
  130. include/tf-psa-crypto/private/crypto_adjust_config_synonyms.h
  131. include/tf-psa-crypto/private/crypto_struct_pqcp.h
  132. include/tf-psa-crypto/private/everest/Hacl_Curve25519.h
  133. include/tf-psa-crypto/private/everest/kremlib.h
  134. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt128.h
  135. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
  136. include/tf-psa-crypto/private/everest/kremlin/c_endianness.h
  137. include/tf-psa-crypto/private/everest/kremlin/internal/builtin.h
  138. include/tf-psa-crypto/private/everest/kremlin/internal/callconv.h
  139. include/tf-psa-crypto/private/everest/kremlin/internal/compat.h
  140. include/tf-psa-crypto/private/everest/kremlin/internal/debug.h
  141. include/tf-psa-crypto/private/everest/kremlin/internal/target.h
  142. include/tf-psa-crypto/private/everest/kremlin/internal/types.h
  143. include/tf-psa-crypto/private/everest/kremlin/internal/wasmsupport.h
  144. include/tf-psa-crypto/private/everest/vs2013/Hacl_Curve25519.h
  145. include/tf-psa-crypto/private/everest/x25519.h
  146. include/tf-psa-crypto/version.h
  147. lib/cmake/MbedTLS/MbedTLSConfig.cmake
  148. lib/cmake/MbedTLS/MbedTLSConfigVersion.cmake
  149. lib/cmake/MbedTLS/MbedTLSTargets-release.cmake
  150. lib/cmake/MbedTLS/MbedTLSTargets.cmake
  151. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfig.cmake
  152. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfigVersion.cmake
  153. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets-release.cmake
  154. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets.cmake
  155. lib/libmbedcrypto.a
  156. lib/libmbedcrypto.so
  157. lib/libmbedcrypto.so.4.2.0
  158. lib/libmbedcrypto.so.18
  159. lib/libmbedtls.a
  160. lib/libmbedtls.so
  161. lib/libmbedtls.so.4.2.0
  162. lib/libmbedtls.so.23
  163. lib/libmbedx509.a
  164. lib/libmbedx509.so
  165. lib/libmbedx509.so.4.2.0
  166. lib/libmbedx509.so.9
  167. lib/libtfpsacrypto.a
  168. lib/libtfpsacrypto.so
  169. lib/libtfpsacrypto.so.1.2.0
  170. lib/libtfpsacrypto.so.2
  171. libdata/pkgconfig/mbedcrypto.pc
  172. libdata/pkgconfig/mbedtls.pc
  173. libdata/pkgconfig/mbedx509.pc
  174. libdata/pkgconfig/tfpsacrypto.pc
  175. @owner
  176. @group
  177. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • For RUN/BUILD depends:
    • mbedtls4>0:security/mbedtls4
  • For LIB depends:
    • libmbedcrypto.so:security/mbedtls4
    • libmbedtls.so:security/mbedtls4
    • libmbedx509.so:security/mbedtls4
    • libtfpsacrypto.so:security/mbedtls4
Conflicts: #
CONFLICTS_INSTALL:
  • mbedtls3
To install the port: #
cd /usr/ports/security/mbedtls4/ && make install clean
To add the package, run one of these commands:
  • pkg install security/mbedtls4
  • pkg install mbedtls4
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: mbedtls4
Flavors: there is no flavor information for this port. #
distinfo: #
TIMESTAMP = 1783502665 SHA256 (mbedtls-4.2.0.tar.bz2) = 2bed9d713b4668f76553b097e72b8aa30bc8f112a940d7ae228d524bbde6ffea SIZE (mbedtls-4.2.0.tar.bz2) = 7395873
Packages (timestamps in pop-ups are UTC): #
mbedtls4
ABIaarch64amd64armv6armv7i386
FreeBSD:14:latest4.2.04.2.0--4.2.0
FreeBSD:14:quarterly4.2.04.2.0--4.2.0
FreeBSD:15:latest4.2.04.2.0n/a-n/a
FreeBSD:15:quarterly4.2.04.2.0n/a-n/a
FreeBSD:16:latest4.2.04.2.0n/a-n/a
Dependencies #
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies: #
  1. cmake : devel/cmake-core
  2. ninja : devel/ninja
  3. python3.12 : lang/python312
Test dependencies: #
  1. python3.12 : lang/python312
This port is required by: #
for Libraries #
  1. www/hiawatha
Configuration Options: #
===> The following configuration options are available for mbedtls4-4.2.0: DEBUG=off: Build with debugging support ===> Use 'make config' to modify these settings
Options name: #
security_mbedtls4
USES: #
cmake:testing python:build,test shebangfix tar:bz2
FreshPorts was unable to extract/find any pkg message #
Master Sites: #
Expand this list (1 items)
Collapse this list.
  1. https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-4.2.0/
Collapse this list.

Number of commits found: 6 #

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
4.2.0
08 Jul 2026 13:57:33
commit hash: 2162d1df3425fc85695529db4ba754c57766aab1commit hash: 2162d1df3425fc85695529db4ba754c57766aab1commit hash: 2162d1df3425fc85695529db4ba754c57766aab1commit hash: 2162d1df3425fc85695529db4ba754c57766aab1 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.1.0 => 4.2.0 (fix 10 CVEs)

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.2.0

- Parametrize PKGNAMESUFFIX.
- Improve PORTSCOUT.

PR:		296595
Security:	CVE-2026-50581
Security:	CVE-2026-50640
Security:	CVE-2026-50580
Security:	CVE-2026-50586
Security:	CVE-2026-50588
Security:	CVE-2026-50579
Security:	CVE-2026-54441
Security:	CVE-2026-50585
Security:	CVE-2026-25832
Security:	CVE-2026-49300
Sponsored by:	UNIS Labs
MFH:		2026Q2
4.1.0_1
30 Apr 2026 15:13:39
commit hash: 12d2ebc10b688232d9e0928c180512d30d445414commit hash: 12d2ebc10b688232d9e0928c180512d30d445414commit hash: 12d2ebc10b688232d9e0928c180512d30d445414commit hash: 12d2ebc10b688232d9e0928c180512d30d445414 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Fabian Keil		 
security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

TLS 1.2 client regression that caused valid ServerKeyExchange signatures
using rsa_pss_rsae_* to be rejected:
https://github.com/Mbed-TLS/mbedtls/issues/10668
https://github.com/Mbed-TLS/mbedtls/commit/5fc28f401666f3ab3338168f6dcee71e6b468a4e

While at it, add a DEBUG option that was useful to figure out the
problem.

PR:		294776
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q2
4.1.0
10 Apr 2026 16:40:20
commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9 files touched by this commit		 Yusuf Yaman (nxjoseph) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.0.0 => 4.1.0 (security)

While here, sort pkg-plist.

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.1.0

PR:		294301
Reported by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
Approved by:	osa, vvd (mentors)
MFH:		2026Q2
Security:	CVE-2026-25833
Security:	CVE-2026-25834
4.0.0_1
07 Mar 2026 23:41:25
commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9 files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer 
security/mbedtls4: Fix upstream libmbedcrypto.so installation bug

Not respect DESTDIR during create symlinks libmbedcrypto.so*.
Upstream issue: https://github.com/Mbed-TLS/mbedtls/issues/10627

- Add fix for installing libmbedcrypto.so from upstream pool request:
  https://github.com/Mbed-TLS/mbedtls/pull/10631
- Add strip for libmbedcrypto.so.
- Sort pkg-plist.

PR:		293653
Approved by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
4.0.0
01 Mar 2026 16:36:37
commit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995c files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: New port 4.0.0

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.0.0

PR:	293527
3.6.5
01 Mar 2026 16:36:36
commit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345ba files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer 
security/mbedtls4: Repocopy from security/mbedtls3

PR:	293527

Number of commits found: 6

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Latest Vulnerabilities
drupal10Oct 18
drupal11Oct 18
libX11Oct 17
libXpmOct 17
libXrenderOct 17
libXtstOct 17
traefikOct 17
erlangOct 16
erlang-runtime27Oct 16
erlang-runtime28Oct 16
erlang-runtime29Oct 16
erlang-runtime29Oct 16
miniupnpdOct 16
mod_wsgiOct 16
p5-Text-CSV_XSOct 16

37 vulnerabilities affecting 421 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-10-18 16:38:06 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 35268
Broken 73
Deprecated 339
Ignore 190
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 44
Expired 8
Set to expire 264
Interactive 0
new 24 hours 1
new 48 hours12
new 7 days38
new fortnight92
new month218
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.