notbug ipv6 ready As an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photos
All times are UTC
Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
After the ports freeze to fix some stuff, the freeze is over. I have some work to do before FreshPorts can start processing commits again before it can start processing again. I've created an issue for that.
Port details on branch 2026Q3
openvpn Secure IP/Ethernet tunnel daemon
2.7.7 security on this many watch lists=0 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.7.7Version of this port present on the latest quarterly branch.
Maintainer: mandree@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-07-27 21:53:29
Last Update: 2026-09-04 23:05:47
Commit Hash: c60a189
Also Listed In: net net-vpn
License: GPLv2
WWW:
https://openvpn.net/community/
Description:
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet. It can operate over UDP or TCP, can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one server can handle many clients.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (15 items)
Collapse this list.
  1. /usr/local/share/licenses/openvpn-2.7.7/catalog.mk
  2. /usr/local/share/licenses/openvpn-2.7.7/LICENSE
  3. /usr/local/share/licenses/openvpn-2.7.7/GPLv2
  4. include/openvpn-msg.h
  5. include/openvpn-plugin.h
  6. lib/openvpn/plugins/openvpn-plugin-auth-pam.so
  7. lib/openvpn/plugins/openvpn-plugin-down-root.so
  8. libexec/openvpn/dns-updown
  9. share/man/man5/openvpn-examples.5.gz
  10. share/man/man8/openvpn.8.gz
  11. sbin/openvpn
  12. sbin/openvpn-client
  13. @owner
  14. @group
  15. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • openvpn
Dependency lines:
  • openvpn>0:security/openvpn
Conflicts:
CONFLICTS_INSTALL:
  • openvpn-devel
To install the port:
cd /usr/ports/security/openvpn/ && make install clean
To add the package, run one of these commands:
  • pkg install security/openvpn
  • pkg install openvpn
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: openvpn
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1788462723 SHA256 (openvpn-2.7.7.tar.gz) = 3ab8f48fd6c26d49ba2333a092433949afdb5c85c0e6a1ff265784fbc04a2463 SIZE (openvpn-2.7.7.tar.gz) = 2128305

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. cmocka>=0 : sysutils/cmocka
  2. rst2man : textproc/py-docutils@py312
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. python3.12 : lang/python312
Test dependencies:
  1. fping : net/fping
Runtime dependencies:
  1. easy-rsa>=0 : security/easy-rsa
Library dependencies:
  1. liblz4.so : archivers/liblz4
  2. liblzo2.so : archivers/lzo2
  3. libpkcs11-helper.so : security/pkcs11-helper
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for openvpn-2.7.7: ASYNC_PUSH=off: Enable async-push support DCO=on: Data Channel Offload/ovpn(4) support->README.dco.md DOCS=on: Build and/or install documentation EASYRSA=on: Install security/easy-rsa RSA helper package EXAMPLES=on: Build and/or install examples LZ4=on: LZ4 compression support LZO=on: LZO compression (incompatible with LibreSSL) PKCS11=on: Use security/pkcs11-helper, needs same SSL lib! SMALL=off: Build a smaller executable with fewer features TEST=on: Build and/or run tests UNITTESTS=off: Enable unit tests X509ALTUSERNAME=off: Enable --x509-username-field ===> Use 'make config' to modify these settings
Options name:
security_openvpn
USES:
cpe libtool localbase:ldflags pkgconfig python:build shebangfix ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://build.openvpn.net/downloads/releases/
  2. https://swupdate.openvpn.org/community/releases/
Collapse this list.

Number of commits found: 3

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.7.7
04 Sep 2026 23:05:47
commit hash: c60a1898b335f2b7f27c2032c9b5ea41d7427011commit hash: c60a1898b335f2b7f27c2032c9b5ea41d7427011commit hash: c60a1898b335f2b7f27c2032c9b5ea41d7427011commit hash: c60a1898b335f2b7f27c2032c9b5ea41d7427011 files touched by this commit
Yusuf Yaman (nxjoseph) search for other commits by this committer
Author: Matthias Andree
security/openvpn: Security update 2.7.6 => 2.7.7

Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst

PR:		298152
Pull request:   https://github.com/freebsd/freebsd-ports/pull/610
Reported by:	mandree (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
Security:	CVE-2026-84732
MFH:		2026Q3

(cherry picked from commit 3d91d57f7f093d62e9f98322455b828aef2a5e0f)
2.7.6
17 Aug 2026 08:29:57
commit hash: 0a6000ab6881aee662dfd18148b6275ff0fe1cffcommit hash: 0a6000ab6881aee662dfd18148b6275ff0fe1cffcommit hash: 0a6000ab6881aee662dfd18148b6275ff0fe1cffcommit hash: 0a6000ab6881aee662dfd18148b6275ff0fe1cff files touched by this commit This port version is marked as vulnerable.
Gleb Popov (arrowd) search for other commits by this committer
Author: Matthias Andree
security/openvpn: bugfix update to 2.7.6

This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.

Note that the --dev option defaults to "tun" (if not specified).

Note that --ping and --keepalive settings are now capped at 24 h.

TCP-based configurations now always enable TCP_NODELAY.

Changelog:	https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH:		2026Q3
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/584

(cherry picked from commit bbddd98141d38561ab0c715c737ed7dbd87688d6)
2.7.5_1
25 Jul 2026 02:04:42
commit hash: ba512460613a7dec1c2f0409e9c5b875f30469e5commit hash: ba512460613a7dec1c2f0409e9c5b875f30469e5commit hash: ba512460613a7dec1c2f0409e9c5b875f30469e5commit hash: ba512460613a7dec1c2f0409e9c5b875f30469e5 files touched by this commit This port version is marked as vulnerable.
Vladimir Druzenko (vvd) search for other commits by this committer
Author: Matthias Andree
security/openvpn: Needs addition to SHEBANG_FILES and some cleanup

- Remove unnecessary GNU_CONFIGURE_MANPREFIX.
- Improve post-install-EXAMPLES-on.

PR:		296890
Sponsored by:	UNIS Labs
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
MFH:		2026Q3

(cherry picked from commit 83283c284c4a9dd90ba4ce23a50d1cfb1005dbdf)

Number of commits found: 3