notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details on branch 2026Q2
mbedtls4 Embedded SSL/TLS and cryptography library
4.2.0 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 4.1.0_1Version of this port present on the latest quarterly branch.
Maintainer: pkaipila@gmail.com search for ports maintained by this maintainer
Port Added: 2026-04-10 18:17:40
Last Update: 2026-07-08 13:58:19
Commit Hash: 9a070ee
Also Listed In: devel
License: APACHE20 GPLv2+
WWW:
https://www.trustedfirmware.org/projects/mbed-tls/
Description:
mbed TLS is a lightweight, portable, fully featured and standards compliant SSL/TLS and cryptography library.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (177 items)
Collapse this list.
  1. @ldconfig
  2. /usr/local/share/licenses/mbedtls4-4.2.0/catalog.mk
  3. /usr/local/share/licenses/mbedtls4-4.2.0/LICENSE
  4. /usr/local/share/licenses/mbedtls4-4.2.0/APACHE20
  5. /usr/local/share/licenses/mbedtls4-4.2.0/GPLv2+
  6. bin/mbedtls_aead_demo
  7. bin/mbedtls_cert_app
  8. bin/mbedtls_cert_req
  9. bin/mbedtls_cert_write
  10. bin/mbedtls_crl_app
  11. bin/mbedtls_crypto_examples
  12. bin/mbedtls_dtls_client
  13. bin/mbedtls_dtls_server
  14. bin/mbedtls_generate_random_uuid
  15. bin/mbedtls_hmac_demo
  16. bin/mbedtls_key_ladder_demo
  17. bin/mbedtls_key_ladder_demo.sh
  18. bin/mbedtls_load_roots
  19. bin/mbedtls_metatest
  20. bin/mbedtls_mini_client
  21. bin/mbedtls_pem2der
  22. bin/mbedtls_psa_constant_names
  23. bin/mbedtls_psa_hash
  24. bin/mbedtls_query_compile_time_config
  25. bin/mbedtls_query_included_headers
  26. bin/mbedtls_req_app
  27. bin/mbedtls_selftest
  28. bin/mbedtls_ssl_client1
  29. bin/mbedtls_ssl_client2
  30. bin/mbedtls_ssl_context_info
  31. bin/mbedtls_ssl_fork_server
  32. bin/mbedtls_ssl_mail_client
  33. bin/mbedtls_ssl_pthread_server
  34. bin/mbedtls_ssl_server
  35. bin/mbedtls_ssl_server2
  36. bin/mbedtls_strerror
  37. bin/mbedtls_udp_proxy
  38. bin/mbedtls_zeroize
  39. include/mbedtls/asn1.h
  40. include/mbedtls/asn1write.h
  41. include/mbedtls/base64.h
  42. include/mbedtls/build_info.h
  43. include/mbedtls/compat-3-crypto.h
  44. include/mbedtls/constant_time.h
  45. include/mbedtls/debug.h
  46. include/mbedtls/error.h
  47. include/mbedtls/lms.h
  48. include/mbedtls/mbedtls_config.h
  49. include/mbedtls/md.h
  50. include/mbedtls/memory_buffer_alloc.h
  51. include/mbedtls/net_sockets.h
  52. include/mbedtls/nist_kw.h
  53. include/mbedtls/oid.h
  54. include/mbedtls/pem.h
  55. include/mbedtls/pk.h
  56. include/mbedtls/pkcs7.h
  57. include/mbedtls/platform.h
  58. include/mbedtls/platform_time.h
  59. include/mbedtls/platform_util.h
  60. include/mbedtls/private/aes.h
  61. include/mbedtls/private/aria.h
  62. include/mbedtls/private/bignum.h
  63. include/mbedtls/private/block_cipher.h
  64. include/mbedtls/private/camellia.h
  65. include/mbedtls/private/ccm.h
  66. include/mbedtls/private/chacha20.h
  67. include/mbedtls/private/chachapoly.h
  68. include/mbedtls/private/cipher.h
  69. include/mbedtls/private/cmac.h
  70. include/mbedtls/private/config_adjust_ssl.h
  71. include/mbedtls/private/config_adjust_test_accelerators.h
  72. include/mbedtls/private/config_adjust_x509.h
  73. include/mbedtls/private/crypto_adjust_config_enable_builtins.h
  74. include/mbedtls/private/crypto_adjust_config_tweak_builtins.h
  75. include/mbedtls/private/crypto_builtin_composites.h
  76. include/mbedtls/private/crypto_builtin_key_derivation.h
  77. include/mbedtls/private/crypto_builtin_primitives.h
  78. include/mbedtls/private/ctr_drbg.h
  79. include/mbedtls/private/ecdsa.h
  80. include/mbedtls/private/ecjpake.h
  81. include/mbedtls/private/ecp.h
  82. include/mbedtls/private/entropy.h
  83. include/mbedtls/private/error_common.h
  84. include/mbedtls/private/gcm.h
  85. include/mbedtls/private/hmac_drbg.h
  86. include/mbedtls/private/md5.h
  87. include/mbedtls/private/pk_private.h
  88. include/mbedtls/private/pkcs5.h
  89. include/mbedtls/private/poly1305.h
  90. include/mbedtls/private/ripemd160.h
  91. include/mbedtls/private/rsa.h
  92. include/mbedtls/private/sha1.h
  93. include/mbedtls/private/sha256.h
  94. include/mbedtls/private/sha3.h
  95. include/mbedtls/private/sha512.h
  96. include/mbedtls/private_access.h
  97. include/mbedtls/psa_util.h
  98. include/mbedtls/ssl.h
  99. include/mbedtls/ssl_cache.h
  100. include/mbedtls/ssl_ciphersuites.h
  101. include/mbedtls/ssl_cookie.h
  102. include/mbedtls/ssl_ticket.h
  103. include/mbedtls/threading.h
  104. include/mbedtls/timing.h
  105. include/mbedtls/version.h
  106. include/mbedtls/x509.h
  107. include/mbedtls/x509_crl.h
  108. include/mbedtls/x509_crt.h
  109. include/mbedtls/x509_csr.h
  110. include/psa/crypto.h
  111. include/psa/crypto_compat.h
  112. include/psa/crypto_config.h
  113. include/psa/crypto_driver_common.h
  114. include/psa/crypto_driver_contexts_composites.h
  115. include/psa/crypto_driver_contexts_key_derivation.h
  116. include/psa/crypto_driver_contexts_primitives.h
  117. include/psa/crypto_driver_random.h
  118. include/psa/crypto_extra.h
  119. include/psa/crypto_platform.h
  120. include/psa/crypto_sizes.h
  121. include/psa/crypto_struct.h
  122. include/psa/crypto_types.h
  123. include/psa/crypto_values.h
  124. include/tf-psa-crypto/build_info.h
  125. include/tf-psa-crypto/private/crypto_adjust_config_auto_enabled.h
  126. include/tf-psa-crypto/private/crypto_adjust_config_dependencies.h
  127. include/tf-psa-crypto/private/crypto_adjust_config_derived.h
  128. include/tf-psa-crypto/private/crypto_adjust_config_key_pair_types.h
  129. include/tf-psa-crypto/private/crypto_adjust_config_support.h
  130. include/tf-psa-crypto/private/crypto_adjust_config_synonyms.h
  131. include/tf-psa-crypto/private/crypto_struct_pqcp.h
  132. include/tf-psa-crypto/private/everest/Hacl_Curve25519.h
  133. include/tf-psa-crypto/private/everest/kremlib.h
  134. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt128.h
  135. include/tf-psa-crypto/private/everest/kremlib/FStar_UInt64_FStar_UInt32_FStar_UInt16_FStar_UInt8.h
  136. include/tf-psa-crypto/private/everest/kremlin/c_endianness.h
  137. include/tf-psa-crypto/private/everest/kremlin/internal/builtin.h
  138. include/tf-psa-crypto/private/everest/kremlin/internal/callconv.h
  139. include/tf-psa-crypto/private/everest/kremlin/internal/compat.h
  140. include/tf-psa-crypto/private/everest/kremlin/internal/debug.h
  141. include/tf-psa-crypto/private/everest/kremlin/internal/target.h
  142. include/tf-psa-crypto/private/everest/kremlin/internal/types.h
  143. include/tf-psa-crypto/private/everest/kremlin/internal/wasmsupport.h
  144. include/tf-psa-crypto/private/everest/vs2013/Hacl_Curve25519.h
  145. include/tf-psa-crypto/private/everest/x25519.h
  146. include/tf-psa-crypto/version.h
  147. lib/cmake/MbedTLS/MbedTLSConfig.cmake
  148. lib/cmake/MbedTLS/MbedTLSConfigVersion.cmake
  149. lib/cmake/MbedTLS/MbedTLSTargets-release.cmake
  150. lib/cmake/MbedTLS/MbedTLSTargets.cmake
  151. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfig.cmake
  152. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoConfigVersion.cmake
  153. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets-release.cmake
  154. lib/cmake/TF-PSA-Crypto/TF-PSA-CryptoTargets.cmake
  155. lib/libmbedcrypto.a
  156. lib/libmbedcrypto.so
  157. lib/libmbedcrypto.so.4.2.0
  158. lib/libmbedcrypto.so.18
  159. lib/libmbedtls.a
  160. lib/libmbedtls.so
  161. lib/libmbedtls.so.4.2.0
  162. lib/libmbedtls.so.23
  163. lib/libmbedx509.a
  164. lib/libmbedx509.so
  165. lib/libmbedx509.so.4.2.0
  166. lib/libmbedx509.so.9
  167. lib/libtfpsacrypto.a
  168. lib/libtfpsacrypto.so
  169. lib/libtfpsacrypto.so.1.2.0
  170. lib/libtfpsacrypto.so.2
  171. libdata/pkgconfig/mbedcrypto.pc
  172. libdata/pkgconfig/mbedtls.pc
  173. libdata/pkgconfig/mbedx509.pc
  174. libdata/pkgconfig/tfpsacrypto.pc
  175. @owner
  176. @group
  177. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • mbedtls4>0:security/mbedtls4
Conflicts:
CONFLICTS_INSTALL:
  • mbedtls3
To install the port:
cd /usr/ports/security/mbedtls4/ && make install clean
To add the package, run one of these commands:
  • pkg install security/mbedtls4
  • pkg install mbedtls4
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: mbedtls4
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1783502665 SHA256 (mbedtls-4.2.0.tar.bz2) = 2bed9d713b4668f76553b097e72b8aa30bc8f112a940d7ae228d524bbde6ffea SIZE (mbedtls-4.2.0.tar.bz2) = 7395873
No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmake : devel/cmake-core
  2. ninja : devel/ninja
  3. python3.11 : lang/python311
Test dependencies:
  1. python3.11 : lang/python311
This port is required by:
for Libraries
  1. www/hiawatha
Configuration Options:
===> The following configuration options are available for mbedtls4-4.2.0: DEBUG=off: Build with debugging support ===> Use 'make config' to modify these settings
Options name:
security_mbedtls4
USES:
cmake:testing python:build,test shebangfix tar:bz2
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-4.2.0/
Collapse this list.

Number of commits found: 3

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
4.2.0
08 Jul 2026 13:58:19
commit hash: 9a070ee6d3e149080ca6c37eb9d1dcb6f0273310commit hash: 9a070ee6d3e149080ca6c37eb9d1dcb6f0273310commit hash: 9a070ee6d3e149080ca6c37eb9d1dcb6f0273310commit hash: 9a070ee6d3e149080ca6c37eb9d1dcb6f0273310 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.1.0 => 4.2.0 (fix 10 CVEs)

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.2.0

- Parametrize PKGNAMESUFFIX.
- Improve PORTSCOUT.

PR:		296595
Security:	CVE-2026-50581
Security:	CVE-2026-50640
Security:	CVE-2026-50580
Security:	CVE-2026-50586
Security:	CVE-2026-50588
Security:	CVE-2026-50579
Security:	CVE-2026-54441
Security:	CVE-2026-50585
Security:	CVE-2026-25832
Security:	CVE-2026-49300
Sponsored by:	UNIS Labs
MFH:		2026Q2

(cherry picked from commit 2162d1df3425fc85695529db4ba754c57766aab1)
4.1.0_1
30 Apr 2026 15:17:37
commit hash: bf7564b4446f06df6236331fcf11179e500ee374commit hash: bf7564b4446f06df6236331fcf11179e500ee374commit hash: bf7564b4446f06df6236331fcf11179e500ee374commit hash: bf7564b4446f06df6236331fcf11179e500ee374 files touched by this commit		 Vladimir Druzenko (vvd) search for other commits by this committer
Author: Fabian Keil		 
security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

TLS 1.2 client regression that caused valid ServerKeyExchange signatures
using rsa_pss_rsae_* to be rejected:
https://github.com/Mbed-TLS/mbedtls/issues/10668
https://github.com/Mbed-TLS/mbedtls/commit/5fc28f401666f3ab3338168f6dcee71e6b468a4e

While at it, add a DEBUG option that was useful to figure out the
problem.

PR:		294776
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q2

(cherry picked from commit 12d2ebc10b688232d9e0928c180512d30d445414)
4.1.0
10 Apr 2026 16:48:18
commit hash: 798c1e2680cf84f9185644e44077b56526ef505acommit hash: 798c1e2680cf84f9185644e44077b56526ef505acommit hash: 798c1e2680cf84f9185644e44077b56526ef505acommit hash: 798c1e2680cf84f9185644e44077b56526ef505a files touched by this commit		 Yusuf Yaman (nxjoseph) search for other commits by this committer
Author: Paavo-Einari Kaipila		 
security/mbedtls4: Update 4.0.0 => 4.1.0 (security)

While here, sort pkg-plist.

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-4.1.0

PR:		294301
Reported by:	Paavo-Einari Kaipila <pkaipila@gmail.com> (maintainer)
Approved by:	osa, vvd (mentors)
MFH:		2026Q2
Security:	CVE-2026-25833
Security:	CVE-2026-25834

(cherry picked from commit 0f67f38ce6bf226f8a8414c6950d5f90e75499e9)

Number of commits found: 3
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
apache-commons-httpclientJul 10
apache-commons-httpclientJul 10
httpclientJul 10
gitlabJul 09
mailpitJul 09
xorg-serverJul 08
xwaylandJul 08
emacsJul 06
emacs-develJul 06
xrdpJul 06
xrdp-develJul 06
zeekJul 06
roundcubeJul 05
weechatJul 05
p5-CGI-SessionJul 04

28 vulnerabilities affecting 437 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-07-10 13:37:26 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34836
Broken 88
Deprecated 283
Ignore 204
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 47
Expired 19
Set to expire 207
Interactive 0
new 24 hours 5
new 48 hours44
new 7 days117
new fortnight297
new month399
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.