notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
Port details
mbedtls4 Embedded SSL/TLS and cryptography library
4.1.0 security on this many watch lists=1 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 4.1.0Version of this port present on the latest quarterly branch.
Maintainer: pkaipila@gmail.com search for ports maintained by this maintainer
Port Added: 2026-03-01 16:39:08
Last Update: 2026-04-10 16:40:20
Commit Hash: 0f67f38
People watching this port, also watch:: busybox, fusefs-s3fs, toybox, php84-adminer, tarbsd-builder-php84
Also Listed In: devel
License: APACHE20 GPLv2+
WWW:
https://www.trustedfirmware.org/projects/mbed-tls/
Description:
mbed TLS is a lightweight, portable, fully featured and standards compliant SSL/TLS and cryptography library.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (177 items)
Collapse this list.
  1. @ldconfig
  2. /usr/local/share/licenses/mbedtls4-4.1.0/catalog.mk
  3. /usr/local/share/licenses/mbedtls4-4.1.0/LICENSE
  4. /usr/local/share/licenses/mbedtls4-4.1.0/APACHE20
  5. /usr/local/share/licenses/mbedtls4-4.1.0/GPLv2+
  6. bin/mbedtls_aead_demo
  7. bin/mbedtls_cert_app
  8. bin/mbedtls_cert_req
  9. bin/mbedtls_cert_write
  10. bin/mbedtls_crl_app
  11. bin/mbedtls_crypto_examples
  12. bin/mbedtls_dtls_client
  13. bin/mbedtls_dtls_server
  14. bin/mbedtls_generate_random_uuid
  15. bin/mbedtls_hmac_demo
  16. bin/mbedtls_key_ladder_demo
  17. bin/mbedtls_key_ladder_demo.sh
  18. bin/mbedtls_load_roots
  19. bin/mbedtls_metatest
  20. bin/mbedtls_mini_client
  21. bin/mbedtls_pem2der
  22. bin/mbedtls_psa_constant_names
  23. bin/mbedtls_psa_hash
  24. bin/mbedtls_query_compile_time_config
  25. bin/mbedtls_query_included_headers
  26. bin/mbedtls_req_app
  27. bin/mbedtls_selftest
  28. bin/mbedtls_ssl_client1
  29. bin/mbedtls_ssl_client2
  30. bin/mbedtls_ssl_context_info
  31. bin/mbedtls_ssl_fork_server
  32. bin/mbedtls_ssl_mail_client
  33. bin/mbedtls_ssl_pthread_server
  34. bin/mbedtls_ssl_server
  35. bin/mbedtls_ssl_server2
  36. bin/mbedtls_strerror
  37. bin/mbedtls_udp_proxy
  38. bin/mbedtls_zeroize
  39. include/mbedtls/asn1.h
  40. include/mbedtls/asn1write.h
  41. include/mbedtls/base64.h
  42. include/mbedtls/build_info.h
  43. include/mbedtls/compat-3-crypto.h
  44. include/mbedtls/constant_time.h
  45. include/mbedtls/debug.h
  46. include/mbedtls/error.h
  47. include/mbedtls/lms.h
  48. include/mbedtls/mbedtls_config.h
  49. include/mbedtls/md.h
  50. include/mbedtls/memory_buffer_alloc.h
  51. include/mbedtls/net_sockets.h
  52. include/mbedtls/nist_kw.h
  53. include/mbedtls/oid.h
  54. include/mbedtls/pem.h
  55. include/mbedtls/pk.h
  56. include/mbedtls/pkcs7.h
  57. include/mbedtls/platform.h
  58. include/mbedtls/platform_time.h
  59. include/mbedtls/platform_util.h
  60. include/mbedtls/private/aes.h
  61. include/mbedtls/private/aria.h
  62. include/mbedtls/private/bignum.h
  63. include/mbedtls/private/block_cipher.h
  64. include/mbedtls/private/camellia.h
  65. include/mbedtls/private/ccm.h
  66. include/mbedtls/private/chacha20.h
  67. include/mbedtls/private/chachapoly.h
  68. include/mbedtls/private/cipher.h
  69. include/mbedtls/private/cmac.h
  70. include/mbedtls/private/config_adjust_ssl.h
  71. include/mbedtls/private/config_adjust_test_accelerators.h
  72. include/mbedtls/private/config_adjust_x509.h
  73. include/mbedtls/private/crypto_adjust_config_enable_builtins.h
  74. include/mbedtls/private/crypto_adjust_config_tweak_builtins.h
  75. include/mbedtls/private/crypto_builtin_composites.h
  76. include/mbedtls/private/crypto_builtin_key_derivation.h
  77. include/mbedtls/private/crypto_builtin_primitives.h
  78. include/mbedtls/private/ctr_drbg.h
  79. include/mbedtls/private/ecdsa.h
  80. include/mbedtls/private/ecjpake.h
  81. include/mbedtls/private/ecp.h
  82. include/mbedtls/private/entropy.h
  83. include/mbedtls/private/error_common.h
  84. include/mbedtls/private/gcm.h
  85. include/mbedtls/private/hmac_drbg.h
  86. include/mbedtls/private/md5.h
  87. include/mbedtls/private/pk_private.h
  88. include/mbedtls/private/pkcs5.h
  89. include/mbedtls/private/poly1305.h
  90. include/mbedtls/private/ripemd160.h
  91. include/mbedtls/private/rsa.h
  92. include/mbedtls/private/sha1.h
  93. include/mbedtls/private/sha256.h
  94. include/mbedtls/private/sha3.h
  95. include/mbedtls/private/sha512.h
  96. include/mbedtls/private_access.h
  97. include/mbedtls/psa_util.h
  98. include/mbedtls/ssl.h
  99. include/mbedtls/ssl_cache.h
  100. include/mbedtls/ssl_ciphersuites.h
  101. include/mbedtls/ssl_cookie.h
  102. include/mbedtls/ssl_ticket.h
  103. include/mbedtls/threading.h
  104. include/mbedtls/timing.h
  105. include/mbedtls/version.h
  106. include/mbedtls/x509.h
  107. include/mbedtls/x509_crl.h
  108. include/mbedtls/x509_crt.h
  109. include/mbedtls/x509_csr.h
  110. include/psa/crypto.h
  111. include/psa/crypto_compat.h
  112. include/psa/crypto_config.h
  113. include/psa/crypto_driver_common.h
  114. include/psa/crypto_driver_contexts_composites.h
  115. include/psa/crypto_driver_contexts_key_derivation.h
  116. include/psa/crypto_driver_contexts_primitives.h
  117. include/psa/crypto_driver_random.h
  118. include/psa/crypto_extra.h
  119. include/psa/crypto_platform.h
  120. include/psa/crypto_sizes.h
  121. include/psa/crypto_struct.h
  122. include/psa/crypto_types.h
  123. include/psa/crypto_values.h
  124. include/tf-psa-crypto/build_info.h
  125. include/tf-psa-crypto/private/crypto_adjust_config_auto_enabled.h
  126. include/tf-psa-crypto/private/crypto_adjust_config_dependencies.h
  127. include/tf-psa-crypto/private/crypto_adjust_config_derived.h
  128. include/tf-psa-crypto/private/crypto_adjust_config_key_pair_types.h
  129. include/tf-psa-crypto/private/crypto_adjust_config_support.h
  130. include/tf-psa-crypto/private/crypto_adjust_config_synonyms.h
  131. include/tf-psa-crypto/private/crypto_struct_pqcp.h
  132. include/tf-psa-crypto/private/everest/Hacl_Curve25519.h
  133. include/tf-psa-crypto/private/everest/kremlib.h
  134. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt128.h
  135. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
  136. include/tf-psa-crypto/private/everest/kremlin/c_endianness.h
  137. include/tf-psa-crypto/private/everest/kremlin/internal/builtin.h
  138. include/tf-psa-crypto/private/everest/kremlin/internal/callconv.h
  139. include/tf-psa-crypto/private/everest/kremlin/internal/compat.h
  140. include/tf-psa-crypto/private/everest/kremlin/internal/debug.h
  141. include/tf-psa-crypto/private/everest/kremlin/internal/target.h
  142. include/tf-psa-crypto/private/everest/kremlin/internal/types.h
  143. include/tf-psa-crypto/private/everest/kremlin/internal/wasmsupport.h
  144. include/tf-psa-crypto/private/everest/vs2013/Hacl_Curve25519.h
  145. include/tf-psa-crypto/private/everest/x25519.h
  146. include/tf-psa-crypto/version.h
  147. lib/cmake/MbedTLS/MbedTLSConfig.cmake
  148. lib/cmake/MbedTLS/MbedTLSConfigVersion.cmake
  149. lib/cmake/MbedTLS/MbedTLSTargets-release.cmake
  150. lib/cmake/MbedTLS/MbedTLSTargets.cmake
  151. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfig.cmake
  152. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfigVersion.cmake
  153. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets-release.cmake
  154. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets.cmake
  155. lib/libmbedcrypto.a
  156. lib/libmbedcrypto.so
  157. lib/libmbedcrypto.so.4.1.0
  158. lib/libmbedcrypto.so.18
  159. lib/libmbedtls.a
  160. lib/libmbedtls.so
  161. lib/libmbedtls.so.4.1.0
  162. lib/libmbedtls.so.23
  163. lib/libmbedx509.a
  164. lib/libmbedx509.so
  165. lib/libmbedx509.so.4.1.0
  166. lib/libmbedx509.so.9
  167. lib/libtfpsacrypto.a
  168. lib/libtfpsacrypto.so
  169. lib/libtfpsacrypto.so.1.1.0
  170. lib/libtfpsacrypto.so.2
  171. libdata/pkgconfig/mbedcrypto.pc
  172. libdata/pkgconfig/mbedtls.pc
  173. libdata/pkgconfig/mbedx509.pc
  174. libdata/pkgconfig/tfpsacrypto.pc
  175. @owner
  176. @group
  177. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • mbedtls4>0:security/mbedtls4
Conflicts:
CONFLICTS_INSTALL:
  • mbedtls3
To install the port:
cd /usr/ports/security/mbedtls4/ && make install clean
To add the package, run one of these commands:
  • pkg install security/mbedtls4
  • pkg install mbedtls4
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: mbedtls4
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1775565640 SHA256 (mbedtls-4.1.0.tar.bz2) = 377a09cf8eb81b5fb2707045e5522d5489d3309fed5006c9874e60558fc81d10 SIZE (mbedtls-4.1.0.tar.bz2) = 7009629
Packages (timestamps in pop-ups are UTC):
mbedtls4
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest4.0.0_14.0.0_1--4.0.0_1n/an/an/a
FreeBSD:13:quarterly-4.0.0_1---n/an/an/a
FreeBSD:14:latest4.0.0_14.0.0_1--4.0.0_1---
FreeBSD:14:quarterly4.0.0_14.0.0_1--4.0.0_1---
FreeBSD:15:latest4.0.0_14.0.0_1n/a-n/an/a--
FreeBSD:15:quarterly4.0.0_14.0.0_1n/a-n/an/a--
FreeBSD:16:latest4.0.0_14.0.0_1n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmake : devel/cmake-core
  2. ninja : devel/ninja
  3. python3.11 : lang/python311
Test dependencies:
  1. python3.11 : lang/python311
This port is required by:
for Libraries
  1. www/hiawatha
Configuration Options:
No options to configure
Options name:
security_mbedtls4
USES:
cmake:testing python:build,test shebangfix tar:bz2
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-4.1.0/
Collapse this list.

Number of commits found: 4

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
4.1.0
10 Apr 2026 16:40:20
commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9 files touched by this commit		 Yusuf Yaman (nxjoseph) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.0.0 => 4.1.0 (security)

While here, sort pkg-plist.

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.1.0

PR:		294301
Reported by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
Approved by:	osa, vvd (mentors)
MFH:		2026Q2
Security:	CVE-2026-25833
Security:	CVE-2026-25834
4.0.0_1
07 Mar 2026 23:41:25
commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9 files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer 
security/mbedtls4: Fix upstream libmbedcrypto.so installation bug

Not respect DESTDIR during create symlinks libmbedcrypto.so*.
Upstream issue: https://github.com/Mbed-TLS/mbedtls/issues/10627

- Add fix for installing libmbedcrypto.so from upstream pool request:
  https://github.com/Mbed-TLS/mbedtls/pull/10631
- Add strip for libmbedcrypto.so.
- Sort pkg-plist.

PR:		293653
Approved by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
4.0.0
01 Mar 2026 16:36:37
commit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995c files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: New port 4.0.0

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.0.0

PR:	293527
3.6.5
01 Mar 2026 16:36:36
commit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345ba files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer 
security/mbedtls4: Repocopy from security/mbedtls3

PR:	293527

Number of commits found: 4
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
tiffApr 11
chromiumApr 10
dnsdistApr 10
mbedtls3Apr 10
mbedtls4Apr 10
ungoogled-chromiumApr 10
firefoxApr 09
firefoxApr 09
firefoxApr 09
firefoxApr 09
firefox-esrApr 09
firefox-esrApr 09
gitlabApr 09
thunderbirdApr 09
thunderbirdApr 09

20 vulnerabilities affecting 360 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-04-11 08:28:37 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34331
Broken 99
Deprecated 179
Ignore 216
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 39
Expired 9
Set to expire 108
Interactive 0
new 24 hours 1
new 48 hours3
new 7 days59
new fortnight95
new month245
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.