notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
easy-rsa Small RSA key management package based on openssl
3.2.0 security on this many watch lists=17 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.1.7Version of this port present on the latest quarterly branch.
Maintainer: mandree@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2013-01-13 21:35:17
Last Update: 2024-05-18 14:02:17
Commit Hash: 8cc207c
People watching this port, also watch:: pkg, ca_root_nss, openvpn, curl, sqlite3
Also Listed In: net-mgmt
License: GPLv2
WWW:
https://github.com/OpenVPN/easy-rsa
Description:
Easy-RSA is a small RSA key management package, based on the openssl command line tool, that can be found in the easy-rsa subdirectory of the OpenVPN distribution. While this tool is primary concerned with key management for the SSL VPN application space, it can also be used for building web certificates.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (10 items)
Collapse this list.
  1. /usr/local/share/licenses/easy-rsa-3.2.0/catalog.mk
  2. /usr/local/share/licenses/easy-rsa-3.2.0/LICENSE
  3. /usr/local/share/licenses/easy-rsa-3.2.0/GPLv2
  4. bin/easyrsa
  5. bin/easy-rsa
  6. @sample share/easy-rsa/openssl-easyrsa.cnf.example share/easy-rsa/openssl-easyrsa.cnf
  7. share/easy-rsa/vars.example
  8. @owner
  9. @group
  10. @mode
Collapse this list.
Dependency lines:
  • easy-rsa>0:security/easy-rsa
Conflicts:
CONFLICTS_INSTALL:
  • easy-rsa2
Conflicts Matches:
There are no Conflicts Matches for this port. This is usually an error.
To install the port:
cd /usr/ports/security/easy-rsa/ && make install clean
To add the package, run one of these commands:
  • pkg install security/easy-rsa
  • pkg install easy-rsa
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: easy-rsa
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1716037822 SHA256 (EasyRSA-3.2.0.tgz) = db8164165a109bf1f6dbf578c3341349821bb4fde5629398d82918330134b43c SIZE (EasyRSA-3.2.0.tgz) = 73675

Packages (timestamps in pop-ups are UTC):
easy-rsa
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.2.03.2.03.0.83.2.03.2.0-3.0.8-
FreeBSD:13:quarterly3.1.73.1.73.1.53.1.73.1.73.1.73.1.73.1.7
FreeBSD:14:latest3.2.03.2.03.1.13.2.03.2.03.1.5-3.1.5
FreeBSD:14:quarterly3.1.73.1.7-3.1.73.1.73.1.73.1.73.1.7
FreeBSD:15:latest3.2.03.2.0n/a3.1.7n/a3.1.73.1.73.1.7
This port has no dependencies.
This port is required by:
for Run
  1. security/openvpn
  2. security/openvpn-devel

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. security/openvpn-mbedtls*
  2. security/openvpn-polarssl*
  3. security/openvpn23*
  4. security/openvpn23-polarssl*
  5. security/openvpn25*
  6. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for easy-rsa-3.2.0: DOCS=on: Build and/or install documentation EXAMPLES=on: Build and/or install examples ===> Use 'make config' to modify these settings
Options name:
security_easy-rsa
USES:
tar:tgz
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (5 items)
Collapse this list.
  1. http://distcache.FreeBSD.org/local-distfiles/mandree/
  2. http://distcache.eu.FreeBSD.org/local-distfiles/mandree/
  3. http://distcache.us-east.FreeBSD.org/local-distfiles/mandree/
  4. http://distcache.us-west.FreeBSD.org/local-distfiles/mandree/
  5. https://github.com/OpenVPN/easy-rsa/releases/download/v3.2.0/
Collapse this list.

Number of commits found: 35

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
3.2.0
18 May 2024 14:02:17
commit hash: 8cc207c94a7da01330b482080d8720dc87b8429ccommit hash: 8cc207c94a7da01330b482080d8720dc87b8429ccommit hash: 8cc207c94a7da01330b482080d8720dc87b8429ccommit hash: 8cc207c94a7da01330b482080d8720dc87b8429c files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to 3.2.0; fix pkg-message [1]

ChangeLog:	https://github.com/OpenVPN/easy-rsa/releases/tag/v3.2.0

[1] pkg-message issue
Reported by:	mikael@
PR:		277573
3.1.7
16 Oct 2023 20:25:02
commit hash: 026d3f6b86e67f2c36ea26bafa2596661473b125commit hash: 026d3f6b86e67f2c36ea26bafa2596661473b125commit hash: 026d3f6b86e67f2c36ea26bafa2596661473b125commit hash: 026d3f6b86e67f2c36ea26bafa2596661473b125 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to 3.1.7

Changelog:	https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.7
3.1.6
18 Aug 2023 17:15:07
commit hash: fb40173923789263a57d3a9a393f220b73a72c70commit hash: fb40173923789263a57d3a9a393f220b73a72c70commit hash: fb40173923789263a57d3a9a393f220b73a72c70commit hash: fb40173923789263a57d3a9a393f220b73a72c70 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to 3.1.6

Quoting its changes:
   * New commands: 'inline' and 'x509-eku' (#993)
     inline: Build an inline file for a commonName
     x509-eku: Extract X509v3 extended key usage from a certificate
   * Expose serial-check, display-dn, display-san and default-san to
     command line. (#980) (Debugging functions, which remain undocumented)
   * Expand default status to include vars-file and CA status (#973)
   * sign-req: Allow the CSR DN-field order to be preserved (#970)
3.1.5
11 Jun 2023 14:27:43
commit hash: de944977f775c60b80bf0ff50537aa192ab187a7commit hash: de944977f775c60b80bf0ff50537aa192ab187a7commit hash: de944977f775c60b80bf0ff50537aa192ab187a7commit hash: de944977f775c60b80bf0ff50537aa192ab187a7 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to v3.1.5

Changelog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.5
3.1.4
25 May 2023 00:23:55
commit hash: 027131ba5188f07f4c7dc948c7611089e9330a90commit hash: 027131ba5188f07f4c7dc948c7611089e9330a90commit hash: 027131ba5188f07f4c7dc948c7611089e9330a90commit hash: 027131ba5188f07f4c7dc948c7611089e9330a90 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to v3.1.4

ChangeLog: 	https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.4
MFH:		2023Q2
3.1.3
19 May 2023 13:07:53
commit hash: b0225f44c91017d637efb9f57c72ec57b0500f2fcommit hash: b0225f44c91017d637efb9f57c72ec57b0500f2fcommit hash: b0225f44c91017d637efb9f57c72ec57b0500f2fcommit hash: b0225f44c91017d637efb9f57c72ec57b0500f2f files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update 3.1.2 → 3.1.3

ChangeLog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.3
3.1.2
13 Jan 2023 23:01:42
commit hash: ba184d24fdd33d431847e8de77c6de80d5ccb2d1commit hash: ba184d24fdd33d431847e8de77c6de80d5ccb2d1commit hash: ba184d24fdd33d431847e8de77c6de80d5ccb2d1commit hash: ba184d24fdd33d431847e8de77c6de80d5ccb2d1 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to v3.1.2

ChangeLog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.2
3.1.1
15 Oct 2022 08:21:21
commit hash: 22ecf341139a2015b94b6e1a8da15239e5119732commit hash: 22ecf341139a2015b94b6e1a8da15239e5119732commit hash: 22ecf341139a2015b94b6e1a8da15239e5119732commit hash: 22ecf341139a2015b94b6e1a8da15239e5119732 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to v3.1.1

Changelog:	https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.1
Detailed:	https://github.com/OpenVPN/easy-rsa/compare/v3.1.0...v3.1.1

also fixes
PR:		266727
Reported by:	topical@gmx.net
3.1.0_3
02 Oct 2022 09:08:17
commit hash: 5d062d5c18a1de48b8c30bf69929e1e3cb37679fcommit hash: 5d062d5c18a1de48b8c30bf69929e1e3cb37679fcommit hash: 5d062d5c18a1de48b8c30bf69929e1e3cb37679fcommit hash: 5d062d5c18a1de48b8c30bf69929e1e3cb37679f files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: sed \s -> [[:space:]]

Fix https://github.com/OpenVPN/easy-rsa/issues/714

Patch suggested (needed to be integrated) and
Reported by:	topical@gmx.net
PR:		266726
MFH:		2022Q4
07 Sep 2022 21:58:51
commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
3.1.0_2
07 Sep 2022 21:10:59
commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
3.1.0_2
05 Jun 2022 12:57:25
commit hash: 32877d0369a1bf4ac1cbd0a6c11ac3347bb5653bcommit hash: 32877d0369a1bf4ac1cbd0a6c11ac3347bb5653bcommit hash: 32877d0369a1bf4ac1cbd0a6c11ac3347bb5653bcommit hash: 32877d0369a1bf4ac1cbd0a6c11ac3347bb5653b files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: fix EASYRSA override and locale

* remove our own wrapper, overriding the EASYRSA folder is no
  longer working since 3.1.0.

* patch EasyRSA to unset LC_ALL and override LC_TIME, to avoid
  date command failures

* bump PORTREVISION=2

see comment #7 ff. of
PR:		264415
3.1.0_1
02 Jun 2022 21:29:43
commit hash: 0a0dd568d8ab0a5598b7d0ccc6d560102418f512commit hash: 0a0dd568d8ab0a5598b7d0ccc6d560102418f512commit hash: 0a0dd568d8ab0a5598b7d0ccc6d560102418f512commit hash: 0a0dd568d8ab0a5598b7d0ccc6d560102418f512 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: fix confusion of vars file

...and no longer package it as @sample. It is per-PKI, and easyrsa init-pki
will copy vars.example from the distribution, and create a PKI-local copy
named vars.  Should fix grembo@'s bug report [1]

add a new pkg-message file to explain this.

while here, add a convenience hardlink easy-rsa to the easyrsa wrapper,
to have an executable matching the package name.

PR:		264415
Reported by:	grembo@ (Michael Gmelin)
3.1.0
21 May 2022 13:10:05
commit hash: 3ec62b06e2c63703aba5944a0dbe58824a982299commit hash: 3ec62b06e2c63703aba5944a0dbe58824a982299commit hash: 3ec62b06e2c63703aba5944a0dbe58824a982299commit hash: 3ec62b06e2c63703aba5944a0dbe58824a982299 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: update to 3.1.0

3.1.0 (2022-05-18)
   * Introduce basic support for OpenSSL version 3 (#492)
   * Update regex in grep to be POSIX compliant (#556)
   * Introduce status reporting tools (#555 & #557)
   * Display certificates using UTF8 (#551)
   * Allow certificates to be created with fixed date offset (#550)
   * Add 'verify' to verify certificate against CA (#549)
   * Add PKCS#12 alias 'friendlyName' (#544)
   * Disallow use of '--vars=FILE init-pki' (#566)
   * Support multiple IP-Addresses in SAN (#564)
   * Add option '--renew-days=NN', custom renew grace period (#557)
   * Add 'nopass' option to the 'export-pkcs' functions (#411)
   * Add support for 'busybox' (#543)
(Only the first 15 lines of the commit message are shown above View all of this commit message)
3.0.8_1
06 May 2022 17:34:51
commit hash: 8e0b9d2d558fe1cdab743ca0b954ef5a3f578bc2commit hash: 8e0b9d2d558fe1cdab743ca0b954ef5a3f578bc2commit hash: 8e0b9d2d558fe1cdab743ca0b954ef5a3f578bc2commit hash: 8e0b9d2d558fe1cdab743ca0b954ef5a3f578bc2 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
security/easy-rsa: fix cert issuance with BSD grep

easyrsa running on systems with bsdgrep for grep
fails issuing certs because it attempts \d as shorthand for
[[:digit:]] or [0-9] and triggers a grep failure with diagnostic

    grep: trailing backslash (\)

Filed upstream: https://github.com/OpenVPN/easy-rsa/issues/556

PR:		263812
Submitted by:	grembo@
3.0.8
25 Nov 2021 21:40:11
commit hash: 04b9da414081a733478d3def4e1e3777908536c6commit hash: 04b9da414081a733478d3def4e1e3777908536c6commit hash: 04b9da414081a733478d3def4e1e3777908536c6commit hash: 04b9da414081a733478d3def4e1e3777908536c6 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
*/*: Remove redundant '-*' from CONFLICTS definitions

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
3.0.8
07 Apr 2021 08:09:01
commit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455c files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
One more small cleanup, forgotten yesterday.
Reported by:	lwhsu
3.0.8
06 Apr 2021 14:31:07
commit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344eb files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
Remove # $FreeBSD$ from Makefiles.
3.0.8
19 Sep 2020 07:49:11
Revision:548946Original commit files touched by this commit
mandree search for other commits by this committer
security/easy-rsa: update to 3.0.8

   * Provide --version option (#372)
   * Version information now within generated certificates like on *nix
   * Fixed issue where gen-dh overwrote existing files without warning (#373)
   * Fixed issue with ED/EC certificates were still signed by RSA (#374)
   * Added support for export-p8 (#339)
   * Clarified error message (#384)
   * 2->3 upgrade now errors and prints message when vars isn't found (#377)
3.0.7
31 Mar 2020 00:36:54
Revision:529928Original commit files touched by this commit
mandree search for other commits by this committer
security/easy-rsa: Update to v3.0.7

FreeBSD-relevant ChangeLog extract since 3.0.6:
   * Remove RANDFILE environment variable (#261)
   * Workaround for bug in win32 mktemp (#247, #305, PR #312)
   * Handle IP address in SAN and renewals (#317)
   * Workaround for ash and no set -o echo (#319)
   * Shore up windows testing framework (#314)
   * Provide upgrade mechanism for older versions of EasyRSA (#349)
   * Add support for KDC certificates (#322)
   * Add support for Edward Curves (#354, #350)
   * Add support for EASYRSA_PASSIN and EASYRSA_PASSOUT env vars (#368)
   * Add support for RID to SAN (#362)

Update WWW: link in pkg-descr.

Remove patches that have been integrated upstream.

Shuffle USES=-line to please portlint.

Add NO_ARCH=yes, since this is all scripts and text.

Reported by:	Eric F Crist (upstream maintainer)
3.0.6
23 Mar 2019 11:11:25
Revision:496638Original commit files touched by this commit
mandree search for other commits by this committer
security/easy-rsa: update to 3.0.6

ChangeLog: <https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.6>

This also includes a cherry-pick for Issue #261 that happened
only after v3.0.6, <https://github.com/OpenVPN/easy-rsa/issues/261>
3.0.5_1
15 Sep 2018 15:30:23
Revision:479838Original commit files touched by this commit
mandree search for other commits by this committer
Fix security/easy-rsa regression that broke bootstrapping.

v3.0.5 added code that expanded variables, for compatibility with LibreSSL.
This code assumed that the source configuration file could be variable-
expanded and the result could be saved next to the source - which it
cannot, since the latter is under ${PREFIX} where the unprivileged users
should not be able to write.

Add a patch provided by Eric Crist, and rename another file to keep
a sane patch order.
3.0.5
15 Sep 2018 13:22:32
Revision:479835Original commit files touched by this commit
mandree search for other commits by this committer
Mark broken pending a band-aid fix from upstream.
3.0.5
15 Sep 2018 12:55:34
Revision:479834Original commit files touched by this commit
mandree search for other commits by this committer
Update security/easy-rsa to 3.0.5 release.

ChangeLog: <https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.5>
3.0.4
25 Jun 2018 19:00:26
Revision:473331Original commit files touched by this commit
mandree search for other commits by this committer
Upgrade Easy-RSA to v3.0.4

Upstream's ChangeLog (without Windows-/Travis related changes) since v3.0.1:

* Remove use of egrep (#154)
* Remove "local" from variable assignment (#165)
* Assign values to variables defined previously w/local
* Finally(?) fix the subjectAltName issues presented earlier (really fixes #168)
* copy CSR extensions into signed certificate
3.0.1_1
11 Jan 2018 14:18:01
Revision:458739Original commit files touched by this commit
danfe search for other commits by this committer
Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files that are not actually manual pages (part 2).
3.0.1_1
17 Feb 2016 20:36:46
Revision:409070Original commit files touched by this commit
mandree search for other commits by this committer
Install openssl-1.0.cnf as well (EasyRSA-3.0 specific).

Originally install it as ${DATADIR}/*.example and mark it as @sample in
pkg-plist, so that it gets copied to the real file name on installation,
and will not be removed if modified by the user.

Submitted by:	Michele Possamai (e-mail kept private)
3.0.1
11 Jan 2016 23:27:56
Revision:405814Original commit files touched by this commit
mandree search for other commits by this committer
Repair breakage on older make implementations (FreeBSD 9.3).
3.0.1
11 Jan 2016 23:23:01
Revision:405813Original commit files touched by this commit
mandree search for other commits by this committer
Update security/easy-rsa to major release 3.0.1.

Move a copy of the older package to security/easy-rsa2,
add CONFLICTS_INSTALL markers, and an UPDATING entry.

Changelog: <https://github.com/OpenVPN/easy-rsa/releases>
2.2.2
21 May 2015 05:08:49
Revision:386906Original commit files touched by this commit
bdrewery search for other commits by this committer
Update to 2.2.2.

Changes:
  - Default KEY_SIZE to 2048 bits
  - Default the signing hash to SHA256 rather than SHA1 and MD5
  - vars cleanups
  - pkitool cleanups
  - pkitool -days fix for https://community.openvpn.net/openvpn/ticket/198

Approved by:	2 year old fix for SHA1->SHA256.
2.2.0.m
13 Nov 2014 09:02:57
Revision:372514Original commit files touched by this commit
antoine search for other commits by this committer
Cleanup plist
2.2.0.m
25 Sep 2013 00:54:09
Revision:328226Original commit files touched by this commit
bdrewery search for other commits by this committer
- Remove NO_STAGE as these have been tested to be safe

With hat:	portmgr
2.2.0.m
20 Sep 2013 22:55:26
Revision:327769Original commit files touched by this commit
bapt search for other commits by this committer
Add NO_STAGE all over the place in preparation for the staging support (cat:
security)
2.2.0.m
29 Mar 2013 19:33:42
Revision:315566Original commit files touched by this commit
cs search for other commits by this committer
- Remove A/An in COMMENT
- Trim Header where applicable
2.2.0.m
13 Jan 2013 21:35:06
Revision:310340Original commit files touched by this commit
mandree search for other commits by this committer
Add a new security/easy-rsa package that contains the bits that got
split out of OpenVPN prior to the current 2.3.0 release, and make that
security/openvpn RUN_DEPENDS on it. Also update UPDATING record.

Number of commits found: 35