notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details
mbedtls4 Embedded SSL/TLS and cryptography library
4.2.0 security on this many watch lists=1 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 4.1.0_1Version of this port present on the latest quarterly branch.
Maintainer: pkaipila@gmail.com search for ports maintained by this maintainer
Port Added: 2026-03-01 16:39:08
Last Update: 2026-07-08 13:57:33
Commit Hash: 2162d1d
People watching this port, also watch:: busybox, fusefs-s3fs, toybox, tarbsd-builder-php84
Also Listed In: devel
License: APACHE20 GPLv2+
WWW:
https://www.trustedfirmware.org/projects/mbed-tls/
Description:
mbed TLS is a lightweight, portable, fully featured and standards compliant SSL/TLS and cryptography library.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (177 items)
Collapse this list.
  1. @ldconfig
  2. /usr/local/share/licenses/mbedtls4-4.2.0/catalog.mk
  3. /usr/local/share/licenses/mbedtls4-4.2.0/LICENSE
  4. /usr/local/share/licenses/mbedtls4-4.2.0/APACHE20
  5. /usr/local/share/licenses/mbedtls4-4.2.0/GPLv2+
  6. bin/mbedtls_aead_demo
  7. bin/mbedtls_cert_app
  8. bin/mbedtls_cert_req
  9. bin/mbedtls_cert_write
  10. bin/mbedtls_crl_app
  11. bin/mbedtls_crypto_examples
  12. bin/mbedtls_dtls_client
  13. bin/mbedtls_dtls_server
  14. bin/mbedtls_generate_random_uuid
  15. bin/mbedtls_hmac_demo
  16. bin/mbedtls_key_ladder_demo
  17. bin/mbedtls_key_ladder_demo.sh
  18. bin/mbedtls_load_roots
  19. bin/mbedtls_metatest
  20. bin/mbedtls_mini_client
  21. bin/mbedtls_pem2der
  22. bin/mbedtls_psa_constant_names
  23. bin/mbedtls_psa_hash
  24. bin/mbedtls_query_compile_time_config
  25. bin/mbedtls_query_included_headers
  26. bin/mbedtls_req_app
  27. bin/mbedtls_selftest
  28. bin/mbedtls_ssl_client1
  29. bin/mbedtls_ssl_client2
  30. bin/mbedtls_ssl_context_info
  31. bin/mbedtls_ssl_fork_server
  32. bin/mbedtls_ssl_mail_client
  33. bin/mbedtls_ssl_pthread_server
  34. bin/mbedtls_ssl_server
  35. bin/mbedtls_ssl_server2
  36. bin/mbedtls_strerror
  37. bin/mbedtls_udp_proxy
  38. bin/mbedtls_zeroize
  39. include/mbedtls/asn1.h
  40. include/mbedtls/asn1write.h
  41. include/mbedtls/base64.h
  42. include/mbedtls/build_info.h
  43. include/mbedtls/compat-3-crypto.h
  44. include/mbedtls/constant_time.h
  45. include/mbedtls/debug.h
  46. include/mbedtls/error.h
  47. include/mbedtls/lms.h
  48. include/mbedtls/mbedtls_config.h
  49. include/mbedtls/md.h
  50. include/mbedtls/memory_buffer_alloc.h
  51. include/mbedtls/net_sockets.h
  52. include/mbedtls/nist_kw.h
  53. include/mbedtls/oid.h
  54. include/mbedtls/pem.h
  55. include/mbedtls/pk.h
  56. include/mbedtls/pkcs7.h
  57. include/mbedtls/platform.h
  58. include/mbedtls/platform_time.h
  59. include/mbedtls/platform_util.h
  60. include/mbedtls/private/aes.h
  61. include/mbedtls/private/aria.h
  62. include/mbedtls/private/bignum.h
  63. include/mbedtls/private/block_cipher.h
  64. include/mbedtls/private/camellia.h
  65. include/mbedtls/private/ccm.h
  66. include/mbedtls/private/chacha20.h
  67. include/mbedtls/private/chachapoly.h
  68. include/mbedtls/private/cipher.h
  69. include/mbedtls/private/cmac.h
  70. include/mbedtls/private/config_adjust_ssl.h
  71. include/mbedtls/private/config_adjust_test_accelerators.h
  72. include/mbedtls/private/config_adjust_x509.h
  73. include/mbedtls/private/crypto_adjust_config_enable_builtins.h
  74. include/mbedtls/private/crypto_adjust_config_tweak_builtins.h
  75. include/mbedtls/private/crypto_builtin_composites.h
  76. include/mbedtls/private/crypto_builtin_key_derivation.h
  77. include/mbedtls/private/crypto_builtin_primitives.h
  78. include/mbedtls/private/ctr_drbg.h
  79. include/mbedtls/private/ecdsa.h
  80. include/mbedtls/private/ecjpake.h
  81. include/mbedtls/private/ecp.h
  82. include/mbedtls/private/entropy.h
  83. include/mbedtls/private/error_common.h
  84. include/mbedtls/private/gcm.h
  85. include/mbedtls/private/hmac_drbg.h
  86. include/mbedtls/private/md5.h
  87. include/mbedtls/private/pk_private.h
  88. include/mbedtls/private/pkcs5.h
  89. include/mbedtls/private/poly1305.h
  90. include/mbedtls/private/ripemd160.h
  91. include/mbedtls/private/rsa.h
  92. include/mbedtls/private/sha1.h
  93. include/mbedtls/private/sha256.h
  94. include/mbedtls/private/sha3.h
  95. include/mbedtls/private/sha512.h
  96. include/mbedtls/private_access.h
  97. include/mbedtls/psa_util.h
  98. include/mbedtls/ssl.h
  99. include/mbedtls/ssl_cache.h
  100. include/mbedtls/ssl_ciphersuites.h
  101. include/mbedtls/ssl_cookie.h
  102. include/mbedtls/ssl_ticket.h
  103. include/mbedtls/threading.h
  104. include/mbedtls/timing.h
  105. include/mbedtls/version.h
  106. include/mbedtls/x509.h
  107. include/mbedtls/x509_crl.h
  108. include/mbedtls/x509_crt.h
  109. include/mbedtls/x509_csr.h
  110. include/psa/crypto.h
  111. include/psa/crypto_compat.h
  112. include/psa/crypto_config.h
  113. include/psa/crypto_driver_common.h
  114. include/psa/crypto_driver_contexts_composites.h
  115. include/psa/crypto_driver_contexts_key_derivation.h
  116. include/psa/crypto_driver_contexts_primitives.h
  117. include/psa/crypto_driver_random.h
  118. include/psa/crypto_extra.h
  119. include/psa/crypto_platform.h
  120. include/psa/crypto_sizes.h
  121. include/psa/crypto_struct.h
  122. include/psa/crypto_types.h
  123. include/psa/crypto_values.h
  124. include/tf-psa-crypto/build_info.h
  125. include/tf-psa-crypto/private/crypto_adjust_config_auto_enabled.h
  126. include/tf-psa-crypto/private/crypto_adjust_config_dependencies.h
  127. include/tf-psa-crypto/private/crypto_adjust_config_derived.h
  128. include/tf-psa-crypto/private/crypto_adjust_config_key_pair_types.h
  129. include/tf-psa-crypto/private/crypto_adjust_config_support.h
  130. include/tf-psa-crypto/private/crypto_adjust_config_synonyms.h
  131. include/tf-psa-crypto/private/crypto_struct_pqcp.h
  132. include/tf-psa-crypto/private/everest/Hacl_Curve25519.h
  133. include/tf-psa-crypto/private/everest/kremlib.h
  134. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt128.h
  135. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
  136. include/tf-psa-crypto/private/everest/kremlin/c_endianness.h
  137. include/tf-psa-crypto/private/everest/kremlin/internal/builtin.h
  138. include/tf-psa-crypto/private/everest/kremlin/internal/callconv.h
  139. include/tf-psa-crypto/private/everest/kremlin/internal/compat.h
  140. include/tf-psa-crypto/private/everest/kremlin/internal/debug.h
  141. include/tf-psa-crypto/private/everest/kremlin/internal/target.h
  142. include/tf-psa-crypto/private/everest/kremlin/internal/types.h
  143. include/tf-psa-crypto/private/everest/kremlin/internal/wasmsupport.h
  144. include/tf-psa-crypto/private/everest/vs2013/Hacl_Curve25519.h
  145. include/tf-psa-crypto/private/everest/x25519.h
  146. include/tf-psa-crypto/version.h
  147. lib/cmake/MbedTLS/MbedTLSConfig.cmake
  148. lib/cmake/MbedTLS/MbedTLSConfigVersion.cmake
  149. lib/cmake/MbedTLS/MbedTLSTargets-release.cmake
  150. lib/cmake/MbedTLS/MbedTLSTargets.cmake
  151. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfig.cmake
  152. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfigVersion.cmake
  153. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets-release.cmake
  154. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets.cmake
  155. lib/libmbedcrypto.a
  156. lib/libmbedcrypto.so
  157. lib/libmbedcrypto.so.4.2.0
  158. lib/libmbedcrypto.so.18
  159. lib/libmbedtls.a
  160. lib/libmbedtls.so
  161. lib/libmbedtls.so.4.2.0
  162. lib/libmbedtls.so.23
  163. lib/libmbedx509.a
  164. lib/libmbedx509.so
  165. lib/libmbedx509.so.4.2.0
  166. lib/libmbedx509.so.9
  167. lib/libtfpsacrypto.a
  168. lib/libtfpsacrypto.so
  169. lib/libtfpsacrypto.so.1.2.0
  170. lib/libtfpsacrypto.so.2
  171. libdata/pkgconfig/mbedcrypto.pc
  172. libdata/pkgconfig/mbedtls.pc
  173. libdata/pkgconfig/mbedx509.pc
  174. libdata/pkgconfig/tfpsacrypto.pc
  175. @owner
  176. @group
  177. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • mbedtls4>0:security/mbedtls4
Conflicts:
CONFLICTS_INSTALL:
  • mbedtls3
To install the port:
cd /usr/ports/security/mbedtls4/ && make install clean
To add the package, run one of these commands:
  • pkg install security/mbedtls4
  • pkg install mbedtls4
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: mbedtls4
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1783502665 SHA256 (mbedtls-4.2.0.tar.bz2) = 2bed9d713b4668f76553b097e72b8aa30bc8f112a940d7ae228d524bbde6ffea SIZE (mbedtls-4.2.0.tar.bz2) = 7395873
No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmake : devel/cmake-core
  2. ninja : devel/ninja
  3. python3.12 : lang/python312
Test dependencies:
  1. python3.12 : lang/python312
This port is required by:
for Libraries
  1. www/hiawatha
Configuration Options:
===> The following configuration options are available for mbedtls4-4.2.0: DEBUG=off: Build with debugging support ===> Use 'make config' to modify these settings
Options name:
security_mbedtls4
USES:
cmake:testing python:build,test shebangfix tar:bz2
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-4.2.0/
Collapse this list.

Number of commits found: 6

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
4.2.0
08 Jul 2026 13:57:33
commit hash: 2162d1df3425fc85695529db4ba754c57766aab1commit hash: 2162d1df3425fc85695529db4ba754c57766aab1commit hash: 2162d1df3425fc85695529db4ba754c57766aab1commit hash: 2162d1df3425fc85695529db4ba754c57766aab1 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.1.0 => 4.2.0 (fix 10 CVEs)

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.2.0

- Parametrize PKGNAMESUFFIX.
- Improve PORTSCOUT.

PR:		296595
Security:	CVE-2026-50581
Security:	CVE-2026-50640
Security:	CVE-2026-50580
Security:	CVE-2026-50586
Security:	CVE-2026-50588
Security:	CVE-2026-50579
Security:	CVE-2026-54441
Security:	CVE-2026-50585
Security:	CVE-2026-25832
Security:	CVE-2026-49300
Sponsored by:	UNIS Labs
MFH:		2026Q2
4.1.0_1
30 Apr 2026 15:13:39
commit hash: 12d2ebc10b688232d9e0928c180512d30d445414commit hash: 12d2ebc10b688232d9e0928c180512d30d445414commit hash: 12d2ebc10b688232d9e0928c180512d30d445414commit hash: 12d2ebc10b688232d9e0928c180512d30d445414 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Fabian Keil		 
security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

TLS 1.2 client regression that caused valid ServerKeyExchange signatures
using rsa_pss_rsae_* to be rejected:
https://github.com/Mbed-TLS/mbedtls/issues/10668
https://github.com/Mbed-TLS/mbedtls/commit/5fc28f401666f3ab3338168f6dcee71e6b468a4e

While at it, add a DEBUG option that was useful to figure out the
problem.

PR:		294776
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q2
4.1.0
10 Apr 2026 16:40:20
commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9commit hash: 0f67f38ce6bf226f8a8414c6950d5f90e75499e9 files touched by this commit		 Yusuf Yaman (nxjoseph) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.0.0 => 4.1.0 (security)

While here, sort pkg-plist.

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.1.0

PR:		294301
Reported by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
Approved by:	osa, vvd (mentors)
MFH:		2026Q2
Security:	CVE-2026-25833
Security:	CVE-2026-25834
4.0.0_1
07 Mar 2026 23:41:25
commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9commit hash: 857657c905d3970fba189eec8b60e7472681aaa9 files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer 
security/mbedtls4: Fix upstream libmbedcrypto.so installation bug

Not respect DESTDIR during create symlinks libmbedcrypto.so*.
Upstream issue: https://github.com/Mbed-TLS/mbedtls/issues/10627

- Add fix for installing libmbedcrypto.so from upstream pool request:
  https://github.com/Mbed-TLS/mbedtls/pull/10631
- Add strip for libmbedcrypto.so.
- Sort pkg-plist.

PR:		293653
Approved by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
4.0.0
01 Mar 2026 16:36:37
commit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995ccommit hash: 0f99c33e2fe4e88b7db6064de4f27e7e5912995c files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: New port 4.0.0

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.0.0

PR:	293527
3.6.5
01 Mar 2026 16:36:36
commit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345bacommit hash: a28c15d65ec9a9b13ce417ec62b38d27065345ba files touched by this commit This port version is marked as vulnerable.		 Vladimir Druzenko (vvd) search for other commits by this committer 
security/mbedtls4: Repocopy from security/mbedtls3

PR:	293527

Number of commits found: 6
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
gitlabJul 09
mailpitJul 09
xorg-serverJul 08
xwaylandJul 08
emacsJul 06
emacs-develJul 06
xrdpJul 06
xrdp-develJul 06
zeekJul 06
roundcubeJul 05
weechatJul 05
p5-CGI-SessionJul 04
traefikJul 04
chromiumJul 02
ungoogled-chromiumJul 02

27 vulnerabilities affecting 442 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-07-09 06:59:09 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34830
Broken 89
Deprecated 282
Ignore 205
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 45
Expired 19
Set to expire 207
Interactive 0
new 24 hours 56
new 48 hours97
new 7 days176
new fortnight339
new month397
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.