FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us

We also have a status page:

Port details
opendnssec2 Tool suite for maintaining DNSSEC
2.1.3 dns on this many watch lists=2 search for ports that depend on this port Find issues related to this port Report an issue related to this port
Maintainer: search for ports maintained by this maintainer
Port Added: 13 Jul 2016 13:29:25
OpenDNSSEC was created as an open-source turn-key solution for
DNSSEC. It secures zone data just before it is published in an
authoritative name server.

SVNWeb : Homepage : PortsMon
    Pseudo-pkg-plist information, but much better, from make generate-plist
    Expand this list (72 items)
  1. /usr/local/share/licenses/opendnssec2-2.1.3/
  2. /usr/local/share/licenses/opendnssec2-2.1.3/LICENSE
  3. /usr/local/share/licenses/opendnssec2-2.1.3/BSD3CLAUSE
  4. bin/ods-hsmspeed
  5. bin/ods-hsmutil
  6. bin/ods-kasp2html
  7. bin/ods-kaspcheck
  8. @sample etc/opendnssec/addns.xml.sample
  9. @sample etc/opendnssec/conf.xml.sample
  10. @sample etc/opendnssec/kasp.xml.sample
  11. @sample etc/opendnssec/zonelist.xml.sample
  12. man/man1/ods-hsmspeed.1.gz
  13. man/man1/ods-hsmutil.1.gz
  14. man/man1/ods-kaspcheck.1.gz
  15. man/man5/ods-kasp.5.gz
  16. man/man5/ods-timing.5.gz
  17. man/man7/opendnssec.7.gz
  18. man/man8/ods-control.8.gz
  19. man/man8/ods-enforcer-db-setup.8.gz
  20. man/man8/ods-enforcer.8.gz
  21. man/man8/ods-enforcerd.8.gz
  22. man/man8/ods-signer.8.gz
  23. man/man8/ods-signerd.8.gz
  24. sbin/ods-control
  25. sbin/ods-enforcer
  26. sbin/ods-enforcer-db-setup
  27. sbin/ods-enforcerd
  28. sbin/ods-migrate
  29. sbin/ods-signer
  30. sbin/ods-signerd
  31. share/doc/opendnssec/1.4-2.0_db_convert/
  32. share/doc/opendnssec/1.4-2.0_db_convert/convert_mysql
  33. share/doc/opendnssec/1.4-2.0_db_convert/convert_sqlite
  34. share/doc/opendnssec/1.4-2.0_db_convert/find_problematic_zones.sql
  35. share/doc/opendnssec/1.4-2.0_db_convert/mysql_convert.sql
  36. share/doc/opendnssec/1.4-2.0_db_convert/sqlite_convert.sql
  37. share/doc/opendnssec/convert_mysql_to_sqlite
  38. share/doc/opendnssec/convert_sqlite_to_mysql
  39. share/doc/opendnssec/schema.mysql
  40. share/doc/opendnssec/schema.sqlite
  41. share/opendnssec/addns.rnc
  42. share/opendnssec/addns.rng
  43. share/opendnssec/conf.rnc
  44. share/opendnssec/conf.rng
  45. share/opendnssec/enforcerstate.rnc
  46. share/opendnssec/enforcerstate.rng
  47. share/opendnssec/kasp.rnc
  48. share/opendnssec/kasp.rng
  49. share/opendnssec/kasp2html.xsl
  50. @comment share/opendnssec/migrate_1_4_8.sqlite3
  51. @comment share/opendnssec/migrate_adapters_1.sqlite3
  52. @comment share/opendnssec/
  53. @comment share/opendnssec/
  54. @comment @comment share/opendnssec/migrate_1_4_8.mysql
  55. @comment @comment share/opendnssec/migrate_adapters_1.mysql
  56. @comment @comment share/opendnssec/
  57. @comment @comment share/opendnssec/migrate_zone_delete.mysql
  58. @comment @comment share/opendnssec/
  59. @comment @comment share/opendnssec/
  60. share/opendnssec/signconf.rnc
  61. share/opendnssec/signconf.rng
  62. share/opendnssec/zonelist.rnc
  63. share/opendnssec/zonelist.rng
  64. @dir(opendnssec,opendnssec,) var/opendnssec
  65. @dir(opendnssec,opendnssec,) var/opendnssec/enforcer
  66. @dir(opendnssec,opendnssec,) var/opendnssec/signconf
  67. @dir(opendnssec,opendnssec,) var/opendnssec/signed
  68. @dir(opendnssec,opendnssec,) var/opendnssec/signer
  69. @dir(opendnssec,opendnssec,) var/opendnssec/unsigned
  70. @dir(opendnssec,opendnssec,) var/run/opendnssec
  71. @postexec /sbin/ldconfig -m /usr/local/lib
  72. @postunexec /sbin/ldconfig -R
  73. Collapse this list.

To install the port: cd /usr/ports/dns/opendnssec2/ && make install clean
To add the package: pkg install opendnssec2

PKGNAME: opendnssec2


TIMESTAMP = 1502370115
SHA256 (opendnssec-2.1.3.tar.gz) = 3de2a03edc9e2b8c366bf0ab541004f984777d4813057cbba7a78045d8cbfe7e
SIZE (opendnssec-2.1.3.tar.gz) = 1107073

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:
  1. ldns>=1.6.16 : dns/ldns
  2. sqlite3>=3.3.9 : databases/sqlite3
Library dependencies:
  1. : dns/ldns
  2. : databases/sqlite3
  3. : textproc/libxml2
There are no ports dependent upon this port

Configuration Options
===> The following configuration options are available for opendnssec2-2.1.3:
     DOCS=on: Build and/or install documentation
     SOFTHSM=off: SoftHSM cryptographic store for PKCS #11 interface
====> Options available for the single DB: you have to select exactly one of them
     SQLITE=on: Use SQLite backend
     MYSQL=off: Use MYSQL backend
===> Use 'make config' to modify these settings

ssl sqlite gnome

Master Sites:

Number of commits found: 10

Commit History - (may be incomplete: see SVNWeb link above for full details)
14 Aug 2017 14:46:31
Original commit files touched by this commit  2.1.3
matthew search for other commits by this committer
Update to 2.1.3:

As of today version 2.1.3 of OpenDNSSEC has been released. No special
migration steps are required when upgrading from a previous 2.x.x
release. It includes fixes to the build system, some regressions w.r.t.
OpenDNSSEC 1.4 and a signing bug. Please note that version 2.1.2 was
skipped for release.

Build fixes:

* OPENDNSSEC-904: autoconfigure fails to properly identify functions in
  ssl library on some distributions. This caused the "tsig unknown
  algorithm hmac-sha256" error.
* OPENDNSSEC-894: repair configuration script to allow excluding the
  build of the enforcer.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
08 Aug 2017 18:02:54
Original commit files touched by this commit  2.1.1_1
ultima search for other commits by this committer
* Bump Revision
* Fix typo in the Port's Makefile, causes a failure in a conversion script
* Added license file
* Cleanup Makefile

PR:		221144
Submitted by:	<> (maintainer)
Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
MFH:		2017Q3
Differential Revision:
28 May 2017 23:17:00
Original commit files touched by this commit  2.1.1
sunpoet search for other commits by this committer
Fix OPTIONS_DEFAULT: remove DOCS which is added by framework

Approved by:	portmgr (blanket)
02 May 2017 19:33:34
Original commit files touched by this commit  2.1.1
pi search for other commits by this committer
dns/opendnssec2: update 2.1.0 -> 2.1.1

- OPENDNSSEC-889: MySQL migration script didnt work for all database
  and MySQL versions.
- OPENDNSSEC-887: Segfault on extraneous tag.
- OPENDNSSEC-880: Command line parsing for import key command failed.
- OPENDNSSEC-890: Bogus signatures upon wrong zone input when TTLs
  for same rrset are mismatching.

PR:		218995
Submitted by:	Jaap Akkerhuis <> (maintainer)
08 Mar 2017 11:04:53
Original commit files touched by this commit  2.1.0
robak search for other commits by this committer
dns/opendnssec2: update 2.0.3 -> 2.1.0

- Fix DB scripts from docs

PR:		217563
Submitted by:	Jaap Akkerhuis <> (maintainer)
MFH:		2017Q1
03 Mar 2017 04:12:21
Original commit files touched by this commit  2.0.3_1
miwi search for other commits by this committer
- Chase ldns shlip bump

PR:		217495
25 Oct 2016 08:23:25
Original commit files touched by this commit  2.0.3
robak search for other commits by this committer
dns/opendnssec2: update 2.0.1 -> 2.0.3

PR:		213610
Submitted by:	Jaap Akkerhuis <> (maintainer)
MFH:		2016Q4
12 Sep 2016 02:41:09
Original commit files touched by this commit  2.0.1
marino search for other commits by this committer
dns/opendnssecs: Add SSL flags and honor them, configure SSL base too

Approved by:	SSL blanket
29 Jul 2016 07:45:18
Original commit files touched by this commit  2.0.1
erwin search for other commits by this committer
- Update to 2.0.1
- Switch to options helpers

This release is primarily focused on ironing out the issues on the migration
path from 1.4 to 2.0. Besides that there are no functional changes.

* Fixed crash and linking issue in ods-migrate.
* Fixed case where 2.0.0 could not read backup files from 1.4.10.
* Fixed bug in migration script where key state in the database wasn't
transformed properly.

PR:		211403
Submitted by:	Jaap Akkerhuis <> (maintainer)
Sponsored by:	DK Hostmaster A/S
13 Jul 2016 13:29:18
Original commit files touched by this commit  2.0.0
erwin search for other commits by this committer
The current opendnssec porthas seen a massive rewrite by the upstream
so it was rechristened opendnssec Version 2.
To quote the announcement at <>:

"OpenDNSSEC got a entire re-write of the enforcer. This part of
OpenDNSSEC controls changing signing keys in the right way to perform
a roll-over. Before, the enforcer would perform a roll-over according
to a strict paradigm. One scenario in which deviations would not be

The new enforcer is more aware of the zone changes being propagated in
the Internet. It can therefore decide when it is safe to make changes,
rather than to rely upon a given scenario.

PR:		211018
Submitted by:	Jaap Akkerhuis <>
Sponsored by:	DK Hostmaster A/S

Number of commits found: 10

User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
How big is it?
The latest upgrade!

Enter Keywords:

Latest Vulnerabilities
wiresharkDec 10
procmail*Dec 08
opensslDec 07
firefoxDec 05
firefox-esrDec 05
linux-firefoxDec 05
linux-seamonkeyDec 05
seamonkeyDec 05
waterfoxDec 05
mybbDec 02
varnish4Dec 02
varnish5Dec 02
asterisk13Dec 01
wordpressDec 01
wordpressDec 01

14 vulnerabilities affecting 77 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Deleted ports
Sanity Test Failures

NEW Graphs (Javascript)

Calculated hourly:
Port count 32078
Broken 122
Deprecated 39
Ignore 357
Forbidden 0
Restricted 173
Vulnerable 44
Expired 11
Set to expire 31
Interactive 0
new 24 hours 5
new 48 hours50
new 7 days76
new fortnight35603
new month50865

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2017 Dan Langille. All rights reserved.