notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
Port details
opkssh Tool which enables SSH to be used with OpenID Connect
0.10.0_1 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 0.10.0Version of this port present on the latest quarterly branch.
Maintainer: dtxdf@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-11-16 00:27:04
Last Update: 2026-01-16 17:49:03
Commit Hash: 013f2d3
License: APACHE20
WWW:
https://github.com/openpubkey/opkssh/
Description:
opkssh is a tool which enables ssh to be used with OpenID Connect allowing SSH access to be managed via identities like alice@example.com instead of long-lived SSH keys. It does not replace SSH, but instead generates SSH public keys containing PK Tokens and configures sshd to verify them. These PK Tokens contain standard OpenID Connect ID Tokens. This protocol builds on the OpenPubkey which adds user public keys to OpenID Connect without breaking compatibility with existing OpenID Provider.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (4 items)
Collapse this list.
  1. bin/opkssh
  2. /usr/local/share/licenses/opkssh-0.10.0_1/catalog.mk
  3. /usr/local/share/licenses/opkssh-0.10.0_1/LICENSE
  4. /usr/local/share/licenses/opkssh-0.10.0_1/APACHE20
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • opkssh>0:security/opkssh
To install the port:
cd /usr/ports/security/opkssh/ && make install clean
To add the package, run one of these commands:
  • pkg install security/opkssh
  • pkg install opkssh
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: opkssh
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1763233259 SHA256 (opkssh-v0.10.0.vendor.tar.gz) = 038566589aa4db1bd890b20e074d0b9b995a2b766b30c72f97b35dd2afa4168e SIZE (opkssh-v0.10.0.vendor.tar.gz) = 5490704

Expand this list (2 items)

Collapse this list.

SHA256 (openpubkey-opkssh-v0.10.0_GH0.tar.gz) = 71796c060705411e98fc7d11d944c531cea1d09df14cc1331c5647a31483de41 SIZE (openpubkey-opkssh-v0.10.0_GH0.tar.gz) = 573801

Collapse this list.


Packages (timestamps in pop-ups are UTC):
opkssh
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest0.10.0_10.10.0_1--0.10.0_1n/an/an/a
FreeBSD:13:quarterly-0.10.0--0.10.0_1n/an/an/a
FreeBSD:14:latest0.10.0_10.10.0_1--0.10.0_1---
FreeBSD:14:quarterly0.10.00.10.0_1--0.10.0_1---
FreeBSD:15:latest0.10.0_10.10.0_1n/a-n/an/a--
FreeBSD:15:quarterly0.10.00.10.0n/a-n/an/a--
FreeBSD:16:latest0.10.0_10.10.0_1n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go124 : lang/go124
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
security_opkssh
USES:
go:modules
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (5 items)
Collapse this list.
  1. http://distcache.FreeBSD.org/local-distfiles/dtxdf/opkssh/
  2. http://distcache.eu.FreeBSD.org/local-distfiles/dtxdf/opkssh/
  3. http://distcache.us-east.FreeBSD.org/local-distfiles/dtxdf/opkssh/
  4. http://distcache.us-west.FreeBSD.org/local-distfiles/dtxdf/opkssh/
  5. https://codeload.github.com/openpubkey/opkssh/tar.gz/v0.10.0?dummy=/
Collapse this list.

Number of commits found: 5

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
0.10.0_1
16 Jan 2026 17:49:03
commit hash: 013f2d30b04bfe9e8d278b7bfad96a64b72c36dacommit hash: 013f2d30b04bfe9e8d278b7bfad96a64b72c36dacommit hash: 013f2d30b04bfe9e8d278b7bfad96a64b72c36dacommit hash: 013f2d30b04bfe9e8d278b7bfad96a64b72c36da files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
various: Bump Go ports for 1.24.12
0.10.0
05 Dec 2025 23:52:36
commit hash: af0fd30cf618cd775f906c642a78e9da6834eab8commit hash: af0fd30cf618cd775f906c642a78e9da6834eab8commit hash: af0fd30cf618cd775f906c642a78e9da6834eab8commit hash: af0fd30cf618cd775f906c642a78e9da6834eab8 files touched by this commit
Jesús Daniel Colmenares Oviedo (dtxdf) search for other commits by this committer
security/opkssh: unpin the Go version number

Reported by:        go (adamw)
0.10.0
05 Dec 2025 14:07:28
commit hash: f45b1d07f50b64cebbcd416af8d7ddf265db3de1commit hash: f45b1d07f50b64cebbcd416af8d7ddf265db3de1commit hash: f45b1d07f50b64cebbcd416af8d7ddf265db3de1commit hash: f45b1d07f50b64cebbcd416af8d7ddf265db3de1 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
many: Unsupported Go dep; deprecate and schedule for removal

There are about 75 ports that depend on old, unsupported Go
versions. I've scheduled those Go versions for deletions on
2025/01/01, and so these ports are scheduled for removal on
that same day.

HOWEVER....

Likely NONE or VERY VERY FEW of these ports will actually need
to be deleted! This stems from a misunderstanding:

When go.mod says "go 1.23", it means that it requires AT LEAST
go-1.23. Locking a port to a specific go version should almost
never happen; it is reserved for when a package absolutely
(Only the first 15 lines of the commit message are shown above View all of this commit message)
0.10.0
16 Nov 2025 07:21:11
commit hash: c868fe1f9fcd8ce7352e11d490534d1742a8d24acommit hash: c868fe1f9fcd8ce7352e11d490534d1742a8d24acommit hash: c868fe1f9fcd8ce7352e11d490534d1742a8d24acommit hash: c868fe1f9fcd8ce7352e11d490534d1742a8d24a files touched by this commit
Jesús Daniel Colmenares Oviedo (dtxdf) search for other commits by this committer
security/opkssh: Add note for jails
0.10.0
16 Nov 2025 00:24:19
commit hash: db1d18b39a6ad50d354a301831716c246b4c57e4commit hash: db1d18b39a6ad50d354a301831716c246b4c57e4commit hash: db1d18b39a6ad50d354a301831716c246b4c57e4commit hash: db1d18b39a6ad50d354a301831716c246b4c57e4 files touched by this commit
Jesús Daniel Colmenares Oviedo (dtxdf) search for other commits by this committer
security/opkssh: New port: Tool which enables SSH to be used with OpenID Connect

opkssh is a tool which enables ssh to be used with OpenID Connect
allowing SSH access to be managed via identities like alice@example.com
instead of long-lived SSH keys. It does not replace SSH, but instead
generates SSH public keys containing PK Tokens and configures sshd
to verify them. These PK Tokens contain standard OpenID Connect ID
Tokens. This protocol builds on the OpenPubkey which adds user
public keys to OpenID Connect without breaking compatibility with
existing OpenID Provider.

Number of commits found: 5