notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
openvpn Secure IP/Ethernet tunnel daemon
2.6.9 security on this many watch lists=130 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.6.9Version of this port present on the latest quarterly branch.
Maintainer: mandree@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2002-06-24 16:19:12
Last Update: 2024-02-13 07:09:05
Commit Hash: a84abd0
People watching this port, also watch:: sudo, unzip, nmap, rsync, wget
Also Listed In: net net-vpn
License: GPLv2
WWW:
https://openvpn.net/community/
Description:
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet. It can operate over UDP or TCP, can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one server can handle many clients.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (16 items)
Collapse this list.
  1. /usr/local/share/licenses/openvpn-2.6.9/catalog.mk
  2. /usr/local/share/licenses/openvpn-2.6.9/LICENSE
  3. /usr/local/share/licenses/openvpn-2.6.9/GPLv2
  4. include/openvpn-msg.h
  5. include/openvpn-plugin.h
  6. lib/openvpn/plugins/openvpn-plugin-auth-pam.so
  7. lib/openvpn/plugins/openvpn-plugin-down-root.so
  8. libexec/openvpn-client.down
  9. libexec/openvpn-client.up
  10. share/man/man5/openvpn-examples.5.gz
  11. share/man/man8/openvpn.8.gz
  12. sbin/openvpn
  13. sbin/openvpn-client
  14. @owner
  15. @group
  16. @mode
Collapse this list.
Dependency lines:
  • openvpn>0:security/openvpn
Conflicts:
CONFLICTS_INSTALL:
  • openvpn-2*
  • openvpn-devel
  • openvpn-mbedtls
Conflicts Matches:
There are no Conflicts Matches for this port. This is usually an error.
To install the port:
cd /usr/ports/security/openvpn/ && make install clean
To add the package, run one of these commands:
  • pkg install security/openvpn
  • pkg install openvpn
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: openvpn
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1707807057 SHA256 (openvpn-2.6.9.tar.gz) = e08d147e15b4508dfcd1d6618a1f21f1495f9817a8dadc1eddf0532fa116d7e3 SIZE (openvpn-2.6.9.tar.gz) = 1901193

Packages (timestamps in pop-ups are UTC):
openvpn
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest2.6.92.6.92.5.02.6.92.6.9-2.5.0-
FreeBSD:13:quarterly2.6.92.6.92.6.52.6.92.6.92.6.8_12.6.8_12.6.9
FreeBSD:14:latest2.6.92.6.92.5.82.6.92.6.92.6.5-2.6.5
FreeBSD:14:quarterly2.6.92.6.9-2.6.92.6.92.6.8_12.6.8_12.6.9
FreeBSD:15:latest2.6.92.6.9n/a2.6.8_2n/a2.6.8_22.6.8_22.6.9
FreeBSD:15:quarterly--n/a-n/a---
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmocka>=0 : sysutils/cmocka
  2. rst2man : textproc/py-docutils@py39
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. python3.9 : lang/python39
Runtime dependencies:
  1. easy-rsa>=0 : security/easy-rsa
Library dependencies:
  1. liblz4.so : archivers/liblz4
  2. liblzo2.so : archivers/lzo2
  3. libpkcs11-helper.so : security/pkcs11-helper
This port is required by:
for Build
  1. security/openvpn-auth-ldap
  2. security/openvpn-auth-script
for Run
  1. security/duo_openvpn
  2. security/openvpn-admin
  3. security/openvpn-auth-radius

Deleted ports which required this port:

Expand this list of 2 deleted ports
  1. security/kovpn*
  2. security/protonvpn-cli*
  3. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for openvpn-2.6.9: ASYNC_PUSH=off: Enable async-push support DCO=on: Data Channel Offload/ovpn(4) support->README.dco.md DOCS=on: Build and/or install documentation EASYRSA=on: Install security/easy-rsa RSA helper package EXAMPLES=on: Build and/or install examples LZ4=on: LZ4 compression support LZO=on: LZO compression (incompatible with LibreSSL) PKCS11=on: Use security/pkcs11-helper, needs same SSL lib! SMALL=off: Build a smaller executable with fewer features TEST=on: Build and/or run tests UNITTESTS=off: Enable unit tests X509ALTUSERNAME=off: Enable --x509-username-field ===> Use 'make config' to modify these settings
Options name:
security_openvpn
USES:
cpe libtool localbase:ldflags pkgconfig python:build shebangfix ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (6 items)
Collapse this list.
  1. http://distcache.FreeBSD.org/local-distfiles/mandree/
  2. http://distcache.eu.FreeBSD.org/local-distfiles/mandree/
  3. http://distcache.us-east.FreeBSD.org/local-distfiles/mandree/
  4. http://distcache.us-west.FreeBSD.org/local-distfiles/mandree/
  5. https://build.openvpn.net/downloads/releases/
  6. https://swupdate.openvpn.org/community/releases/
Collapse this list.
Notes from UPDATING
These upgrade notes are taken from /usr/ports/UPDATING
  • 2023-01-27
    Affects: users of security/openvpn
    Author: mandree@freebsd.org
    Reason: 
      OpenVPN has been updated to the new upstream release v2.6.0, which
      is quite compatible with v2.5 versions.
    
      A copy of the latest v2.5.8 port is being kept as security/openvpn25 (or
      openvpn25 package) until end of March 2023.
    
    
Port Moves
  • port moved here from security/openvpn25 on 2023-03-31
    REASON: Has expired: replaced by new upstream release 2.6.0

Number of commits found: 213 (showing only 100 on this page)

«  1 | 2 | 3  »  

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.3.11
13 May 2016 16:07:26
Revision:415116Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Fix PolarSSL-based builds.

The upstream backported a change from the master branch that fixes the
PolarSSL-based builds to go with the PolarSSL 1.3.X built-in defaults.

Add a patch picked from the upstream's release/2.3 branch.
Remove the BROKEN= line and conditional.

No PORTREVISION bump because the patch only affects an option that was
formerly marked BROKEN.

(TRYBROKEN users need to force a rebuild and reinstallation manually.)
2.3.11
12 May 2016 23:38:15
Revision:415093Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Security upgrade to OpenVPN 2.3.11, breaking POLARSSL option.

Quoting upstream maintainers' release notes:
"This release fixes two vulnerabilities: a port-share bug with DoS
potential and a buffer overflow by user supplied data when using pam
authentication. In addition a number of small fixes and improvements are
included."

WARNING: this upgrade breaks the PolarSSL-based build due to an
oversight in the cipher suite selection hardening, crashing
PolarSSL-based builds with a 0-pointer deferences.
Marking port BROKEN if POLARSSL is set.

Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23
2.3.10_2
05 Apr 2016 02:17:40
Revision:412541Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
One more fix for /usr/sbin/service -R.
2.3.10_1
05 Apr 2016 02:08:04
Revision:412540Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Work around 10.3-RELEASE's service(8) shortcomings

PR:		208534
Reported by:	allan@saddi.com
2.3.10
01 Apr 2016 14:25:18
Revision:412349Original commit files touched by this commit This port version is marked as vulnerable.
mat search for other commits by this committer
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
2.3.10
12 Jan 2016 09:07:45
Revision:405841Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add an 'up' script for resolvconf integration, ...

contributed by Bapt@, but not yet touched up.
Needs proper license notice and documentation.
Therefore not yet linked to the build/install.
2.3.10
08 Jan 2016 09:03:49
Revision:405536Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Upgrade to new upstream release 2.3.10.

Now requires PolarSSL/mbedTLS 1.3.X with X >= 8, PolarSSL 1.2 is EOL.
Match help text to the change.

Make sure the build uses the local unpacked includes before the system
includes, such that portmaster/portupgrade upgrades for PolarSSL work if
2.3.9 or older is pre-installed on the build system.
2.3.9
20 Dec 2015 14:35:13
Revision:404054Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream release 2.3.9.

Removes the PW_SAVE option, the upstream code always permits saving
passwords to files now (so the feature is always enabled).

ChangeLog:
<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.9>
2.3.8
20 Nov 2015 18:41:15
Revision:402095Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add optional extra patch for Tunnelblick obfuscation.

Adds a --scramble method to the executable but not documentation.
Requires careful review of implications before enabling, and has not
been accepted upstream.  https://tunnelblick.net/cOpenvpn_xorpatch.html

PR:		200215
Submitted by:	Franco Fichtner
2.3.8
24 Oct 2015 11:18:04
Revision:400118Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Handle OpenSSL/PolarSSL options in the right way,

such that it is maintainable if we add more SSL libs in the future.

To fix fall-out from r399858 and r399982.
2.3.8
22 Oct 2015 14:07:10
Revision:399982Original commit files touched by this commit This port version is marked as vulnerable.
mat search for other commits by this committer
Fix build without POLARSSL.

Pointy hat to:	mat
Sponsored by:	Absolight
2.3.8
20 Oct 2015 15:03:44
Revision:399858Original commit files touched by this commit This port version is marked as vulnerable.
mat search for other commits by this committer
Use options helpers.

Sponsored by:	Absolight
2.3.8
05 Aug 2015 19:10:16
Revision:393606Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Bugfix upgrade to new upstream release 2.3.8.

ChangeLog:
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.8
2.3.7_1
02 Aug 2015 15:03:20
Revision:393429Original commit files touched by this commit This port version is marked as vulnerable.
tijl search for other commits by this committer
By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same
(Only the first 15 lines of the commit message are shown above View all of this commit message)
2.3.7
15 Jul 2015 00:11:00
Revision:392112Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add an openvpn-polarssl that selects PolarSSL for its default TLS provider.
2.3.7
10 Jun 2015 19:18:57
Revision:389128Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream release 2.3.7.

Fixes
PR:		194745
2.3.6_5
22 May 2015 21:39:38
Revision:387083Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add experimental patch by Gert Doring to fix PR #194745.
Must be enabled through the options framework ("make config").

PR:		194745
2.3.6_4
04 May 2015 23:08:03
Revision:385432Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
+ Update patch set for crypto engine fix [1].
  Change option name so it is presented anew, default disabled.

+ Add openvpn-client wrapper script and up/down scripts to trigger
  resolvconf, with minor edits. [2]

+ Set proper PLUGIN_LIBDIR so that plugins in the default directory can
  be found with relative paths.

+ Compile shipped plugins with -fPIC.

PR:		195004 [1]
PR:		199529 [2]
Submitted by:	yuri@rawbw.com [2]
Obtained from:	https://community.openvpn.net/openvpn/ticket/480#comment:21
2.3.6_3
17 Apr 2015 13:37:37
Revision:384160Original commit files touched by this commit This port version is marked as vulnerable.
tijl search for other commits by this committer
Specify library version when depending on libpolarssl and switch ports to
PolarSSL 1.3 when they fail to build with 1.2.
2.3.6_3
30 Mar 2015 18:37:24
Revision:382705Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add an experimental patch for bug #195004.
Needs to be enabled through a port option.

PR: 195004
2.3.6_2
25 Mar 2015 20:06:21
Revision:382265Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add a X509ALTUSERNAME port option to enable the --x509-username-field
run-time option.

Bump PORTREVISION.

PR:		198896
Submitted by:	bastian+freebsd.org@waldi.eu.org
2.3.6_1
02 Dec 2014 18:53:39
Revision:373780Original commit files touched by this commit This port version is marked as vulnerable.
delphij search for other commits by this committer
Add CPE data.

Requested by:	des
2.3.6
02 Dec 2014 05:54:07
Revision:373752Original commit files touched by this commit This port version is marked as vulnerable.
delphij search for other commits by this committer
Security Update to 2.3.6.

Approved by:	so
MFH:		2014Q4
Security:	23ab5c3e-79c3-11e4-8b1e-d050992ecde8
2.3.5_1
24 Nov 2014 18:26:24
Revision:373256Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add three patches from Git to unwedge the build after certs expired,
and two other fixes (bumping PORTREVISION):

44294568 Fix assertion error when using --cipher none
e9b07dc9 Fix to --shaper documentation on the man-page
b77c27a1 Modernize sample keys and sample configs
2.3.5
29 Oct 2014 18:30:54
Revision:371694Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Upgrade to new upstream release 2.3.5.

Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23

While here, drop @dirrm from pkg-plist.
2.3.4
15 Jul 2014 16:57:39
Revision:361977Original commit files touched by this commit This port version is marked as vulnerable.
adamw search for other commits by this committer
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.
2.3.4
10 May 2014 23:35:00
Revision:353631Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream release 2.3.4.
Changes:
<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.4>

Add USES=libtool and drop .la files.
2.3.3
10 Apr 2014 20:20:35
Revision:350847Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Upgrade to new upstream 2.3.3 release. Misc bugfixes.

Changes:
<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.3>

Note that PKCS#11 helper support requires a pkcs11-helper upgrade from
<http://www.freebsd.org/cgi/query-pr.cgi?pr=188442> to be committed.
2.3.2_1
28 Feb 2014 16:24:41
Revision:346556Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Fix several compilation issues where the upstream's configure script
required pkg-config, for instance, the PKCS11 option.

Submitted by:	mat@
2.3.2_1
18 Feb 2014 09:03:59
Revision:344847Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
- Repair PKCS11 option [1].
- Use the opportunity to simplify Makefile: leverage some of the
  OptionsNG and Staging features, removing our homebrew predecessors.
- QA: Strip .so libraries, fix shebang paths in samples.

Obtained from:	<https://forums.freebsd.org/viewtopic.php?f=7&t=44866> [1]
2.3.2
27 Jan 2014 19:00:08
Revision:341442Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Fix self-tests and their non-fatal auto-skip on RedPorts.

Add patch-tests__t_cltsrv.sh to properly skip self-tests when no
inet/inet6 addresses are available, and to properly use udp6 when only
inet6 is available (for instance, on RedPorts).

Drop patch-src__openvpn__syshead.h, had already been integrated upstream.

PR:		ports/185439 (related)
2.3.2
01 Oct 2013 14:43:26
Revision:328954Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Convert from port-specific to official STAGEDIR support.
2.3.2
20 Sep 2013 22:55:26
Revision:327769Original commit files touched by this commit This port version is marked as vulnerable.
bapt search for other commits by this committer
Add NO_STAGE all over the place in preparation for the staging support (cat:
security)
2.3.2
31 May 2013 23:06:39
Revision:319549Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream release

2013.05.31 -- Version 2.3.2
Arne Schwabe (3):
      Only print script warnings when a script is used. Remove stray mention of
script-security system.
      Move settings of user script into set_user_script function
      Move checking of script file access into set_user_script

Davide Brini (1):
      Provide more accurate warning message

Gert Doering (2):
      Fix NULL-pointer crash in route_list_add_vpn_gateway().
      Fix problem with UDP tunneling due to mishandled pktinfo structures.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
2.3.1
31 Mar 2013 16:00:02
Revision:315640Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
security upgrade to OpenVPN 2.3.1; upstream release notes are

  "This release adds supports for PolarSSL 1.2. It also adds a fix to
  prevent potential side-channel attacks by switching to a constant-time
  memcmp when comparing HMACs in the openvpn_decrypt function. In
  addition, it contains several bugfixes and documentation updates, as
  well as some minor enhancements."

Full ChangeLog:
<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23>

The port upgrade also offers an option to use the GPLv2+-licensed
PolarSSL instead of OpenSSL (which brings in a license mix).

PR:		ports/177517
Reviewed by:	miwi
Approved by:	portmgr (miwi)
Security:	92f30415-9935-11e2-ad4c-080027ef73ec
2.3.0_3
20 Jan 2013 02:55:49
Revision:310670Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
- When installing from port, do not tamper with permissions of other files
  in ${PREFIX}/sbin and ${PREFIX}/lib. [1]

- Do not install plugin .la/.so files with the executable bit set, they
  are not executable.

PR:		ports/175434 [1]
Submitted by:	Benjamin Lorenz [1]
2.3.0_2
17 Jan 2013 23:12:24
Revision:310575Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
- Fix NOPORTDOCS regression [1], by installing to DESTDIR= and then installing
from
  there, rather than tweaking the Makefiles.
- Move examples to EXAMPLESDIR, and heed NOPORTEXAMPLES
- Remove a leftover SUB_LIST addition.
- Switch comment to my FreeBSD e-mail address.
- Use PORTDOCS=* and PORTEXAMPLES=* to remove pkg-plist cruft
- Sort PORT_OPTIONS .ifs and stuff.

PR:		ports/175283 [1]
Submitted by:	Alexey Markov [1]
2.3.0_1
13 Jan 2013 21:35:06
Revision:310340Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add a new security/easy-rsa package that contains the bits that got
split out of OpenVPN prior to the current 2.3.0 release, and make that
security/openvpn RUN_DEPENDS on it. Also update UPDATING record.
2.3.0
11 Jan 2013 23:09:37
Revision:310252Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
OpenVPN changes, upgrades and fixes:

- Upgrade security/openvpn to v2.3.0 (changes installed layout a bit),
  splitting and re-diffing patches.
- Retain v2.2.2 as security/openvpn22
- Mark security/openvpn20 as deprecated and to expire 6 months from now
- Fix TCP_NODELAY option (openvpn 2.3, 2.2), see
  <http://community.openvpn.net/openvpn/ticket/158>
- Fix PassTOS option (openvpn 2.2, 2.0), see
  http://community.openvpn.net/openvpn/ticket/135
2.2.2
06 Jan 2013 11:29:44
Revision:309978Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
- Convert to OptionsNG
- Strip Makefile header
- Drop LIB_DEPENDS ABI versions
2.2.2
05 Aug 2012 23:19:40
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
2.2.2
14 Jan 2012 08:57:23
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
2.2.2
28 Dec 2011 20:43:49
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream release v2.2.2.

Changelog:
http://openvpn.net/index.php/open-source/documentation/change-log/425-changelog-for-openvpn-22.html
2.2.1_1
24 Oct 2011 04:17:38
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Remove more tags from pkg-descr files fo the form:

- Name
em@i.l

or variations thereof. While I'm here also fix some whitespace and other
formatting errors, including moving WWW: to the last line in the file.
2.2.1_1
04 Oct 2011 21:58:09
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update and demote CONFLICTS to CONFLICTS_INSTALL.
2.2.1_1
30 Aug 2011 17:11:57
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Use required_modules rather than _precmd.

To fix failures with 'restart'.

Reported by: Miroslav Lachman
2.2.1
16 Aug 2011 22:33:30
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Fix skipping t_cltsrv when IP missing. Really this time.

Cause was a   trap "... ; exit 1" 0   shell construct that needs to be
cancelled for the exit 77 to take effect. trap 0 inserted to that end.
2.2.1
08 Aug 2011 22:38:44
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Fix NOPORTDOCS support, though differently than suggested

Reported by: pgollucci
PR:          ports/159610
2.2.1
07 Aug 2011 18:05:35
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Skip self-test more readily without addresses.
2.2.1
07 Aug 2011 17:23:40
Original commit files touched by this commit This port version is marked as vulnerable.
pav search for other commits by this committer
- Turn off self-tests on pointyhat, they fail

Reported by:    pointyhat
2.2.1
20 Jul 2011 20:37:43
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Avoid jamming the build if the jail is without address, skip self-test.
2.2.1
07 Jul 2011 00:16:57
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to upstream release 2.2.1.

NOTE: the easy-rsa/2.0 openssl.cnf file has been removed and replaced by
an openssl-0.9.8.cnf and an openssl-1.0.0.cnf file.

Changelog URL:
http://openvpn.net/index.php/open-source/documentation/change-log/425-changelog-for-openvpn-22.html
2.2.0
20 Jun 2011 21:14:23
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Patch hardwired gcc to ${CC}, fixing clang-ports builds [1].
Use full ${MAKE} environment from do-build, for consistency.

Found by: -exp run [1].
2.2.0
15 May 2011 02:49:17
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""

These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.

In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.

In a few places, add $FreeBSD$

No functional changes, so no PORTREVISION bumps
2.2.0
11 May 2011 09:20:45
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Remove support for lzo-1.
2.2.0
03 May 2011 19:24:48
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to 2.2.0. Add LICENSE (GPLv2). Add a local mirror of the distfile (file
has been uploaded and will propagate soonish).

Changelog:
http://openvpn.net/index.php/open-source/documentation/change-log/425-changelog-for-openvpn-22.html
2.1.4
08 Jan 2011 10:04:58
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Streamline a bit:
- remove subshell to use basename, and use ## substitution [1]
- remove FreeBSD 5.X compatibility comment [1]
- remove FreeBSD 5.X compatibility code

The parts marked with [1] above were
Submitted by: dougb (Doug Barton)
2.1.4
09 Nov 2010 20:25:58
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Switch to XZ distribution format.
2.1.4
09 Nov 2010 18:55:56
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream release 2.1.4.
Update MASTER_SITES.

Submitted by: Eric F. Crist <ecrist@secure-computing.net>
PR: ports/151962
2.1.3
27 Aug 2010 20:03:12
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to 2.1.3

No functional changes, but avoids 'have you seen new release'
type mail flood. :)
2.1.2
17 Aug 2010 19:19:31
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Update to new upstream version 2.1.2.

Contains various bugfixes and improvements.
2.1.1_2
13 Aug 2010 15:49:09
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Add openvpn-beta-[0-9]* to CONFLICTS variable.

Submitted by: Eric F. Crist
PR: ports/149617
2.1.1_2
04 Aug 2010 19:53:56
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Support /etc/rc.d/openvpn softrestart
to send SIGUSR1 (rather than SIGHUP) to OpenVPN processes.

Suggested by: Nick Hibma (in private email)
2.1.1_1
05 Jun 2010 14:12:29
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Fix bashisms (source FILE -> . FILE)
replace shebang-lines /bin/bash -> /bin/sh
bump portrevision (changed files)

based on:
PR: ports/147472
Submitted by: Olli Hauer <ohauer@gmx.de>

Approved by: miwi (mentor)
2.1.1
27 Mar 2010 06:14:03
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.
2.1.1
27 Mar 2010 00:15:24
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#
2.1.1
07 Jan 2010 16:28:57
Original commit files touched by this commit This port version is marked as vulnerable.
mandree search for other commits by this committer
Move security/openvpn to security/openvpn20 (after previous repocopy).
Update security/openvpn20 to 2.0.9, revising pkg-message.

Move security/openvpn-devel to security/openvpn and
update security/openvpn to 2.1.1.

Remove security/openvpn-devel, adding a MOVED entry.

Update security/Makefile to remove openvpn-devel and add openvpn20 to
SUBDIRS.

Add a UPDATING entry for this shuffle.  Currently without upgrade
instructions since neither portupgrade nor portmaster are up to the
task (because of the CONFLICTS).

Approved by:  garga@ (mentor)
2.0.6_9
15 Jul 2009 16:56:10
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.

1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).

No PORTREVISION bumps because all of these changes are noops.
2.0.6_9
25 Jan 2009 08:10:59
Original commit files touched by this commit This port version is marked as vulnerable.
beech search for other commits by this committer
- Add logging knob

PR:             ports/130893
Submitted by:   Michael Scheidell <scheidell@secnap.net>
Approved by:    Matthias Andree <matthias.andree@gmx.de> (maintainer)
2.0.6_9
21 Aug 2008 06:18:49
Original commit files touched by this commit This port version is marked as vulnerable.
rafan search for other commits by this committer
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
(Only the first 15 lines of the commit message are shown above View all of this commit message)
2.0.6_9
18 Jul 2008 12:16:20
Original commit files touched by this commit This port version is marked as vulnerable.
miwi search for other commits by this committer
- Force commit to correct the previous commit log:

Correct permissions/owner of DOCSDIR-installed files

PR:             125726 / 125727
Request by:     maintainer via im
2.0.6_9
18 Jul 2008 10:49:40
Original commit files touched by this commit This port version is marked as vulnerable.
miwi search for other commits by this committer
- Respect NOPORTDOCS

PR:             125726
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
2.0.6_8
20 Feb 2008 01:15:28
Original commit files touched by this commit This port version is marked as vulnerable.
rafan search for other commits by this committer
- Run opensvn with --daemon ${name} in order to get distinguishable and
  useful syslog tags

PR:             ports/120862
Submitted by:   Matthias Andree <matthias.andree at gmx.de> (maintainer)
2.0.6_7
08 Mar 2007 07:16:33
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Remove spurious empty BEFORE: lines

Approved by:    maintainer
2.0.6_7
04 Mar 2007 19:12:37
Original commit files touched by this commit This port version is marked as vulnerable.
nox search for other commits by this committer
rcfile:
- fix for FreeBSD releases before rcorder integration
- update copyright notice
- replace shell backticks by $().

Port:
- bump revision
- reformat comment

PR:             ports/109856
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by:    miwi (mentor)
2.0.6_6
25 Feb 2007 19:42:55
Original commit files touched by this commit This port version is marked as vulnerable.
vd search for other commits by this committer
Fix a bug I introduced with last commit which resulted in openvpn not
being started during boot. The reason for this is that at boot $0 is not
/usr/local/etc/rc.d/openvpn but /etc/rc. The fix is a bit hackish because
it retrieves the script name from $_file - variable used in run_rc_script().

Reported by:    bazzoola <bazzoola@gmail.com>
2.0.6_4
23 Feb 2007 11:41:46
Original commit files touched by this commit This port version is marked as vulnerable.
vd search for other commits by this committer
use $() instead of ``

Requested by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
2.0.6_5
23 Feb 2007 08:38:53
Original commit files touched by this commit This port version is marked as vulnerable.
vd search for other commits by this committer
* Add support for running multiple instances of openvpn to the startup script
  Inspired by [1]
* Bump PORTREVISION
* Update the comment which says not to send notices about 2.0.8 to 2.0.9 since
  2.0.9 also introduces only Windows changes. Remove maintainer's name from
  this comment since he did not explicitly state this.

PR:             ports/108371 [1]
Submitted by:   Denis Shaposhnikov <dsh@vlink.ru>, Gleb Kozyrev
<gkozyrev@gmail.com> [1]
Approved by:    matthias.andree@gmx.de (maintainer timeout, 28 days)
2.0.6_4
04 Feb 2007 19:14:20
Original commit files touched by this commit This port version is marked as vulnerable.
rafan search for other commits by this committer
- Use newly added RC_SUBR_SUFFIX

Approved by:    Matthias Andree <matthias.andree at gmx.de> (maintainer)
2.0.6_4
02 Oct 2006 17:47:32
Original commit files touched by this commit This port version is marked as vulnerable.
alepulver search for other commits by this committer
- Fix build failures that arose from an accidentally omitted -fPIC.
- Portrevision bumped since the change affects all architectures,
  not just those that were failing.

PR:             ports/103863
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
Reported by:    pointyhat
2.0.6_3
30 Sep 2006 07:48:24
Original commit files touched by this commit This port version is marked as vulnerable.
rafan search for other commits by this committer
- Install additional auth-pam plugin

PR:             ports/103833
Submitted by:   Matthias Andree <matthias.andree at gmx.de> (maintainer)
Suggested by:   Michael Helmeste
Tested by:      Michael Helmeste
2.0.6_2
14 Sep 2006 01:22:01
Original commit files touched by this commit This port version is marked as vulnerable.
rafan search for other commits by this committer
- Update comments for OpenVPN 2.0.8

PR:             ports/103243
Submitted by:   Matthias Andree <matthias.andree at gmx.de> (maintainer)
2.0.6_2
20 Aug 2006 07:06:37
Original commit files touched by this commit This port version is marked as vulnerable.
itetcu search for other commits by this committer
- conflicts with openvpn-devel-[0-9]*
- bump PORTREVISION

PR:             ports/102301
Submitted by:   Matthias Andree (maintainer)
2.0.6_1
28 Jul 2006 09:56:54
Original commit files touched by this commit This port version is marked as vulnerable.
itetcu search for other commits by this committer
1 - build and install lib/openvpn-down-root.so plugin (see --plugin option in
    the man page) and README.openvpn-down-root
2 - match rc.d filename as printed post install in pkg-message to actual file
    name on newer systems (which use openvpn rather than openvpn.sh)
Reported by:    Jean-Baptiste Quenot (Bcc'd)
The maintainer wishes to thank Jean-Baptiste for his report and patience.
3 - add a pkg-req script to prevent installation of 6.1 packages on older
    machines, which is a frequent source of "rc.d script doesn't work"
    complaints.

Added file(s):
- files/pkg-req.in

PR:             ports/100917
Submitted by:   Matthias Andree (maintainer)
2.0.6
27 Apr 2006 12:53:55
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
Add a message explaining why it won't be upgraded to 2.0.7 version, to
prevent a lot of people asking maintainer about it:

# -----------------------------------------------------
# DO NOT BOTHER TO SEND NOTICES ABOUT 2.0.7 AS IT FIXES
# A WINDOWS-ONLY BUG THAT DOESN'T AFFECT *BSD AND THUS
# DOES NOT WARRANT A PORT UPGRADE! AND UPGRADE REQUESTS
# WILL BE DROPPED.       -- Matthias Andree, 2006-04-26
# -----------------------------------------------------

PR:             ports/96383
Submitted by:   maintainer
2.0.6
05 Apr 2006 14:57:25
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- Update to 2.0.6
  * security fix for client LD_PRELOAD code injection vulnerability
    through compromised upstream servers
    (FreeBSD VuXML Vuln VID be4ccb7b-c48b-11da-ae12-0002b3b60e4c,
     filed in separate PR)
    CVE id not known yet
  * 2 other changes only relevant for Linux and NetBSD, not detailed here.

PR:             ports/95345
Submitted by:   maintainer
Security:       VuXML be4ccb7b-c48b-11da-ae12-0002b3b60e4c
2.0.5_1
28 Feb 2006 16:25:43
Original commit files touched by this commit This port version is marked as vulnerable.
vd search for other commits by this committer
Fix FreeBSD 4 jail build

PR:             ports/93833
Patch by:       dinoex
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by:    portmgr (marcus)
2.0.5_1
20 Feb 2006 20:47:50
Original commit files touched by this commit This port version is marked as vulnerable.
dougb search for other commits by this committer
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
2.0.5_1
10 Nov 2005 15:05:42
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- CATEGORY CHANGE: add "net" secondary category
- fix jail build on FreeBSD 4 (no security.jail.jailed oid in sysctl)
- catch jail IP misconfiguration and print clear error message
- add SHA256 checksum
- revise pkg-message and pkg-descr

PR:             ports/88785
Submitted by:   maintainer
2.0.5_1
05 Nov 2005 01:24:15
Original commit files touched by this commit This port version is marked as vulnerable.
mnag search for other commits by this committer
Enables self-tests with WITH_JAIL
Bump PORTREVISION

PR:             88488
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
2.0.5
03 Nov 2005 15:22:44
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- Update to 2.0.5

PR:             ports/88437
Submitted by:   maintainer
2.0.4
02 Nov 2005 01:52:51
Original commit files touched by this commit This port version is marked as vulnerable.
mnag search for other commits by this committer
Update to 2.0.4

PR:             88379
Submitted by:   Matthias Andree <matthias.andree@gmx.de> (maintainer)
Security:       CVE-2005-3393, CVE-2005-3409
2.0.2_1
25 Oct 2005 08:03:55
Original commit files touched by this commit This port version is marked as vulnerable.
dinoex search for other commits by this committer
- fix build in jail

maintainer emailed 2005-10-04
Approved by:    (maintainer timeout)
2.0.2_1
18 Sep 2005 12:01:57
Original commit files touched by this commit This port version is marked as vulnerable.
vs search for other commits by this committer
FreeBSD 6 no longer adds debug.if_* sysctl variables in its default kernel
(according to the release notes), so our heuristic assumes the module is
missing and tries to load it, which fails as the module already exists.

PR:             ports/86286
Submitted by:   maintainer
2.0.2
29 Aug 2005 18:52:19
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- Update to 2.0.2 that brings these upstream changes:

  - fix bug that would exhaust file descriptors as the routing table was
modified
    (this had already been part of the port previously)
  - fix bug that would block the management socket until the peer connected
  - fix pkitool sh incompatibilities (from NetBSD)

PR:             ports/85299
Submitted by:   maintainer
2.0.1_1
22 Aug 2005 10:31:35
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
Fix a typo in the new rc file, where documentation didn't match the
actual variables.

PR:             ports/85156
Submitted by:   maintainer
Reported by:    Benjamin Lutz <benlutz@datacomm.ch>
Approved by:    portmgr (krion)
2.0.1
19 Aug 2005 18:48:34
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
- Security update to version 2.0.1, fixing four denial of service bugs,
  CAN-2005-2531, CAN-2005-2532, CAN-2005-2533, CAN-2005-2534
- Drop old init script and add a modern rcNG script in its place,
  requested by Matthias Grimm and Dirk Gouders (although the script below is
  one I, Matthias Andree, wrote). It can automatically load tun/tap drivers.
- move pkg-message to files/pkg-message.in, revise it, list it in SUB_FILES
  to expand ${PREFIX}.
- print pkg-message after installation from port
- switch to official "make check" as smoke-test, rather than wiring our own.
- prefer LZO2 in most situations, as OpenVPN will pick up LZO2 rather than
  LZO1 if both are installed.

PR:             ports/85109
Submitted by:   maintainer
Approved by:    portmgr (krion)
2.0_3
14 Jul 2005 13:15:47
Original commit files touched by this commit This port version is marked as vulnerable.
garga search for other commits by this committer
Add PW_PASS option to compile with --enable-pass-save

PR:             82494
Submitted by:   Landon Fuller <landonf@threerings.net>
Reviewed by:    Matthias Andree <matthias.andree@gmx.de> (maintainer)
Approved by:    mantainer, flz (mentor)
2.0_3
31 May 2005 19:58:33
Original commit files touched by this commit This port version is marked as vulnerable.
flz search for other commits by this committer
- Backout latest commit, it needs a repocopy due to API change.

Noticed by:     Matthias Andree <matthias.andree@gmx.de>
2.0_2
31 May 2005 17:57:11
Original commit files touched by this commit This port version is marked as vulnerable.
flz search for other commits by this committer
- Bump lzo lib version.
- Bump PORTREVISION.

Number of commits found: 213 (showing only 100 on this page)

«  1 | 2 | 3  »