Port details
openssl40 TLSv1.3 capable SSL and crypto library
4.0.3 security Σ 4.0.2Version of this port present on the latest quarterly branch. Maintainer: brnrd@FreeBSD.org Port Added: 2026-03-11 12:12:07Last Update: 2026-09-30 12:16:43Commit Hash: 9dfde2f Also Listed In: devel License: APACHE20WWW: https://www.openssl.org/ Description: # The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, full-featured, and Open Source toolkit implementing
the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1,
v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide.
The project is managed by a worldwide community of volunteers that use
the Internet to communicate, plan, and develop the OpenSSL tookit
and its related documentation.
OpenSSL is based on the excellent SSLeay library developed by Eric
A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under
an Apache-style licence, which basically means that you are free
to get and use it for commercial and non-commercial purposes subject
to some simple license conditions. Manual pages: # FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist # USE_RC_SUBR (Service Scripts)
no SUBR information found for this port
Dependency lines :
openssl40>0:security/openssl40 Conflicts: # CONFLICTS_INSTALL:
boringssl
libressl
libressl-devel
openssl
openssl3?
openssl41
To install the port : # cd /usr/ports/security/openssl40/ && make install clean To add the package , run one of these commands: pkg install security/openssl40 pkg install openssl40 PKGNAME: openssl40 Flavors: there is no flavor information for this port. # distinfo: # TIMESTAMP = 1790767332
SHA256 (openssl-4.0.3.tar.gz) = 325b5c806167c13b40b1ffeadfe0248197c00eccc4cf123ec1e28d2d2fd216d9
SIZE (openssl-4.0.3.tar.gz) = 55235667
Packages (timestamps in pop-ups are UTC): #
Dependencies # NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered. Build dependencies: #
perl5>=5.42.r<5.43 : lang/perl5.42
There are no ports dependent upon this port # Configuration Options : # ===> The following configuration options are available for openssl40-4.0.3:
ASYNC=on: Asynchronous mode
CT=on: Certificate Transparency Support
FIPS-JITTER=off: Use JITTER seed source in FIPS provider
KTLS=off: Use in-kernel TLS (FreeBSD >13)
MAN3=on: Install API manpages (section 3, 7)
RFC3779=on: RFC3779 support (BGP)
SHARED=on: Build shared libraries
====> Block Cipher Support
ARIA=off: ARIA (South Korean standard)
DES=on: (Triple) Data Encryption Standard
GOST=on: GOST (Russian standard)
IDEA=off: International Data Encryption Algorithm
SM4=off: SM4 128bit (Chinese standard)
RC2=on: RC2 (unsafe)
RC4=on: RC4 (unsafe)
RC5=off: RC5 (patented)
TLS-DEPRECATED-EC=off: Deprecated elliptic curve groups in TLS (unsafe)
WEAK-SSL-CIPHERS=off: Weak cipher support (unsafe)
====> Compression Support
BROTLI=off: Brotli compression support
ZLIB=off: zlib compression support
ZSTD=off: Zstandard compression support
====> Hash Function Support
MD2=off: MD2 (obsolete) (requires LEGACY)
MD4=on: MD4 (unsafe)
MDC2=off: MDC-2 (patented, requires DES)
RMD160=on: RIPEMD-160
SM2=off: SM2 Elliptic Curve DH (Chinese standard)
SM3=off: SM3 256bit (Chinese standard)
====> Provider modules
FIPS=on: Build FIPS provider (Note: NOT yet FIPS validated)
LEGACY=off: Older algorithms
====> Optimizations
ASM=on: Assembler code
SSE2=on: Runtime SSE2 detection
THREADS=on: Threading support
THREADPOOL=on: Thread Pooling support
EC=on: Optimize NIST elliptic curves
====> Post-Quantum Cryptography
ML-DSA=on: ML-DSA CRYSTALS-Dilithium Digital Signature Algorithm
ML-KEM=on: ML-KEM Kyber Key Encapsulation Method
SLH-DSA=on: SLH-DSA Sphinx+ Digital Signature Algorithm
====> Protocol Support
NEXTPROTONEG=on: Next Protocol Negotiation (SPDY)
QUIC=on: HTTP/3
SCTP=on: SCTP (Stream Control Transmission)
TLS1=on: TLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1=on: TLSv1.1 (requires TLS1_2)
TLS1_2=on: TLSv1.2
===> Use 'make config' to modify these settings Options name : # security_openssl40 USES: # cpe perl5
pkg-message: # If upgrading This OpenSSL version is a non-LTS release.
Master Sites: #
Commit History - (may be incomplete: for full details, see links to repositories near top of page) Commit Credits Log message 4.0.3 Bernard Spil (brnrd) security/openssl40: Security update to 4.0.3
Security: 0d183075-bcb5-11f1-b09d-8447094a420f
MFH: 2026Q3 4.0.2 Bernard Spil (brnrd) security/openssl40: Security update to 4.0.2
Security: 9008d14d-a0af-11f1-8144-8447094a420f
MFH: 2026Q3 4.0.1 Bernard Spil (brnrd) security/openssl40: Security update to 4.0.1
Security: 259b562f-64ab-11f1-8607-8447094a420f
MFH: 2026Q2 4.0.0 Bernard Spil (brnrd) security/openssl40: Update to 4.0.0
This is now a release version 4.0.0.b1 Bernard Spil (brnrd) security/openssl40: Update to 4.0.0.b1 4.0.0.a1 Bernard Spil (brnrd) security/openssl40: Add new OpenSSL ECH capable port
* This is ALPHA level software, for testing only
* Adds Encrypted Client Hello feature
* Removes SSLv3
