| Port details on branch 2026Q2 |
- openvpn-devel Secure IP/Ethernet tunnel daemon
- g20270422,1 security
=0 g20260721,2Version of this port present on the latest quarterly branch. - Maintainer: gert@greenie.muc.de
 - Port Added: 2026-07-02 02:15:09
- Last Update: 2026-07-02 02:13:22
- Commit Hash: ced5ef8
- Also Listed In: net net-vpn
- License: GPLv2
- WWW:
- https://openvpn.net/community/
- Description:
- OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private
Network) daemon which can be used to securely link two or more private networks
using an encrypted tunnel over the internet. It can operate over UDP or TCP,
can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one
server can handle many clients.
This development port is updated frequently and is much less well tested
than the formal releases, and functionality and APIs may change without
warning.
DO NOT USE IN PRODUCTION WITHOUT PRIOR TESTING FOR YOUR USE CASE.
¦ ¦ ¦ ¦ 
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- openvpn-devel>0:security/openvpn-devel
- Conflicts:
- CONFLICTS_INSTALL:
- To install the port:
- cd /usr/ports/security/openvpn-devel/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openvpn-devel
- pkg install openvpn-devel
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: openvpn-devel
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1776872343
SHA256 (openvpn-openvpn-64fae9d82989ede6c92e230c594ab9335c05df8d_GL0.tar.gz) = 799aea2ab9d4d42784402e4438a465f86e94f61884b0b54e81ede3e89c2ca08b
SIZE (openvpn-openvpn-64fae9d82989ede6c92e230c594ab9335c05df8d_GL0.tar.gz) = 1343378
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- cmocka>=0 : sysutils/cmocka
- rst2man : textproc/py-docutils@py311
- pkgconf>=1.3.0_1 : devel/pkgconf
- python3.11 : lang/python311
- autoconf>=2.73 : devel/autoconf
- automake>=1.18.1 : devel/automake
- libtoolize : devel/libtool
- Runtime dependencies:
-
- easy-rsa>=0 : security/easy-rsa
- Library dependencies:
-
- liblzo2.so : archivers/lzo2
- liblz4.so : archivers/liblz4
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for openvpn-devel-g20270422,1:
ASYNC_PUSH=off: Enable async-push support
DCO=on: Build with Data Channel Offload (ovpn(4)) support
DOCS=on: Build and/or install documentation
EASYRSA=on: Install security/easy-rsa RSA helper package
EXAMPLES=on: Build and/or install examples
LZ4=on: LZ4 compression support
PKCS11=off: Use security/pkcs11-helper
SMALL=off: Build a smaller executable with fewer features
TEST=on: Build and/or run tests
UNITTESTS=off: Enable unit tests
====> SSL protocol support: you have to select exactly one of them
MBEDTLS=off: SSL/TLS support via mbed TLS
OPENSSL=on: SSL/TLS support via OpenSSL
===> Use 'make config' to modify these settings
- Options name:
- security_openvpn-devel
- USES:
- autoreconf cpe libtool pkgconfig python:build shebangfix tar:xz ssl
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
g20270422,1 02 Jul 2026 02:13:22
    |
Vladimir Druzenko (vvd)  Author: Gert Doering |
security/openvpn-devel: upgrade to commit 64fae9d829
this brings in the upstream development work that has happened over
the last two months, plus two CVE fixes:
- fix race condition in TLS handshake that could lead to leaking of
packet data from a previous handshake under specific circumstances
(CVE-2026-40215)
(Bug found by XlabAI Team of Tencent Xuanwu Lab (xlabai@tencent.com))
- fix server ASSERT() on receiving a suitably malformed packet with
a valid tls-crypt-v2 key (CVE-2026-35058)
(Bug found by XlabAI Team of Tencent Xuanwu Lab (xlabai@tencent.com)(Only the first 15 lines of the commit message are shown above ) |
g20270220,1 02 Jul 2026 02:13:15
    |
Vladimir Druzenko (vvd)  Author: Gert Doering |
security/openvpn-devel: Update 2.7_rc6 -> post-2.7 commit 38243844
OpenVPN 2.7.0 has been released and will show up as "security/openvpn"
soon.
This port skips 2.7.0 release and continues to track development versions,
which will focus on code cleanup / refactoring for the next few months.
Use this opportunity to bring option and dependency handling more in
line with main port
- X509ALTUSERNAME is gone (always-on now in upstream source)
- ASYNC_PUSH added, with freebsd-version dependent handling of
libinotify dependency (see PR 293176)
- UNITTEST added, with libcmocka dependency if unit tests are desired
(cherry picked from commit da00fa0ed292ff71ea1eeaa6902f70d53de9d512) |