| Port details on branch 2026Q3 |
- openvpn Secure IP/Ethernet tunnel daemon
- 2.7.7 security
=0 2.7.7Version of this port present on the latest quarterly branch. - Maintainer: mandree@FreeBSD.org
 - Port Added: 2026-07-27 21:53:29
- Last Update: 2026-09-04 23:05:47
- Commit Hash: c60a189
- Also Listed In: net net-vpn
- License: GPLv2
- WWW:
- https://openvpn.net/community/
- Description:
- OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private
Network) daemon which can be used to securely link two or more private networks
using an encrypted tunnel over the internet. It can operate over UDP or TCP,
can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one
server can handle many clients.
¦ ¦ ¦ ¦ 
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- openvpn>0:security/openvpn
- Conflicts:
- CONFLICTS_INSTALL:
- To install the port:
- cd /usr/ports/security/openvpn/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openvpn
- pkg install openvpn
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: openvpn
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1788462723
SHA256 (openvpn-2.7.7.tar.gz) = 3ab8f48fd6c26d49ba2333a092433949afdb5c85c0e6a1ff265784fbc04a2463
SIZE (openvpn-2.7.7.tar.gz) = 2128305
No package information for this port in our database- Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link:

- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- cmocka>=0 : sysutils/cmocka
- rst2man : textproc/py-docutils@py312
- pkgconf>=1.3.0_1 : devel/pkgconf
- python3.12 : lang/python312
- Test dependencies:
-
- fping : net/fping
- Runtime dependencies:
-
- easy-rsa>=0 : security/easy-rsa
- Library dependencies:
-
- liblz4.so : archivers/liblz4
- liblzo2.so : archivers/lzo2
- libpkcs11-helper.so : security/pkcs11-helper
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for openvpn-2.7.7:
ASYNC_PUSH=off: Enable async-push support
DCO=on: Data Channel Offload/ovpn(4) support->README.dco.md
DOCS=on: Build and/or install documentation
EASYRSA=on: Install security/easy-rsa RSA helper package
EXAMPLES=on: Build and/or install examples
LZ4=on: LZ4 compression support
LZO=on: LZO compression (incompatible with LibreSSL)
PKCS11=on: Use security/pkcs11-helper, needs same SSL lib!
SMALL=off: Build a smaller executable with fewer features
TEST=on: Build and/or run tests
UNITTESTS=off: Enable unit tests
X509ALTUSERNAME=off: Enable --x509-username-field
===> Use 'make config' to modify these settings
- Options name:
- security_openvpn
- USES:
- cpe libtool localbase:ldflags pkgconfig python:build shebangfix ssl
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
2.7.7 04 Sep 2026 23:05:47
    |
Yusuf Yaman (nxjoseph)  Author: Matthias Andree |
security/openvpn: Security update 2.7.6 => 2.7.7
Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst
PR: 298152
Pull request: https://github.com/freebsd/freebsd-ports/pull/610
Reported by: mandree (maintainer)
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2026-84732
MFH: 2026Q3
(cherry picked from commit 3d91d57f7f093d62e9f98322455b828aef2a5e0f) |
2.7.6 17 Aug 2026 08:29:57
    |
Gleb Popov (arrowd)  Author: Matthias Andree |
security/openvpn: bugfix update to 2.7.6
This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.
Note that the --dev option defaults to "tun" (if not specified).
Note that --ping and --keepalive settings are now capped at 24 h.
TCP-based configurations now always enable TCP_NODELAY.
Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH: 2026Q3
Pull Request: https://github.com/freebsd/freebsd-ports/pull/584
(cherry picked from commit bbddd98141d38561ab0c715c737ed7dbd87688d6) |
2.7.5_1 25 Jul 2026 02:04:42
    |
Vladimir Druzenko (vvd)  Author: Matthias Andree |
security/openvpn: Needs addition to SHEBANG_FILES and some cleanup
- Remove unnecessary GNU_CONFIGURE_MANPREFIX.
- Improve post-install-EXAMPLES-on.
PR: 296890
Sponsored by: UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
MFH: 2026Q3
(cherry picked from commit 83283c284c4a9dd90ba4ce23a50d1cfb1005dbdf) |