notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
I started running short on disk space for the non-production FreshPorts hosts. This time, I have decided to ask for donations. See my recent blog post which points to my Patreon account.
Port details
p5-openxpki-clca Toolkit for basic PKI operations in small CA like root CA
1.19 securitynew! on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout Package not present on quarterly.This port was created during this quarter. It will be in the next quarterly branch but not the current one.
Maintainer: svysh.fbsd@gmail.com search for ports maintained by this maintainer
Port Added: 2025-09-28 09:36:40
Last Update: 2025-09-28 09:29:33
Commit Hash: 1ff18ad
Also Listed In: perl5
License: GPLv2
WWW:
https://github.com/openxpki/clca/
Description:
Command Line Certificate Authority (clca) is a collection of tools (written in Bash and Perl atop of OpenSSL or LibreSSL) that allow for basic PKI operations such as Sub CA certificate issuance (signing certificate requests), certificate revocation and CRL issuance. Originally designed to be used for a Root CA, it may also be used for lower level CAs or even end entity certificates as well. Ideal solution for off-line low-traffic CA, residing on a notebook, which is most of the time kept in a vault. CA private keys can be held either in encrypted files (encrypted either with a simple passphrase or using Shamir's Secret Sharing) or stored in an HSM. Port security/p5-openxpki-clca is an overly lightweight command-line alternative to its elder brother, a full-featured server-born port security/p5-openxpki designed for universal PKI solutions. These two ports are mutually independent and can coexist on the same host.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (25 items)
Collapse this list.
  1. /usr/local/share/licenses/p5-openxpki-clca-1.19/catalog.mk
  2. /usr/local/share/licenses/p5-openxpki-clca-1.19/LICENSE
  3. /usr/local/share/licenses/p5-openxpki-clca-1.19/GPLv2
  4. bin/change-quorum.sh
  5. bin/clca
  6. share/doc/openxpki-clca/README.keyceremony-shared-interactive.md
  7. share/doc/openxpki-clca/README.keyceremony-simple-noninteractive.md
  8. share/doc/openxpki-clca/README.md
  9. share/examples/openxpki-clca/bin/change-quorum.sh
  10. share/examples/openxpki-clca/bin/clca
  11. share/examples/openxpki-clca/bin/provision
  12. share/examples/openxpki-clca/bin/secret
  13. share/examples/openxpki-clca/etc/clca.cfg
  14. share/examples/openxpki-clca/etc/openssl.cnf
  15. share/examples/openxpki-clca/lib/OpenXPKI/Crypto/Secret.pm
  16. share/examples/openxpki-clca/lib/OpenXPKI/Crypto/Secret/Plain.pm
  17. share/examples/openxpki-clca/lib/OpenXPKI/Crypto/Secret/Split.pm
  18. share/examples/openxpki-clca/lib/OpenXPKI/Debug.pm
  19. share/examples/openxpki-clca/lib/OpenXPKI/Exception.pm
  20. share/examples/openxpki-clca/lib/OpenXPKI/Serialization/Simple.pm
  21. share/examples/openxpki-clca/lib/OpenXPKI/Server/Context.pm
  22. share/examples/openxpki-clca/lib/OpenXPKI/VERSION.pm
  23. @owner
  24. @group
  25. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • p5-openxpki-clca>0:security/p5-openxpki-clca
To install the port:
cd /usr/ports/security/p5-openxpki-clca/ && make install clean
To add the package, run one of these commands:
  • pkg install security/p5-openxpki-clca
  • pkg install p5-openxpki-clca
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: p5-openxpki-clca
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1758658331 SHA256 (openxpki-clca-v1.19_GH0.tar.gz) = 31c0a552b48c870cdfc63537c0b90f0cab0acc096f101a37571c94bda4a85727 SIZE (openxpki-clca-v1.19_GH0.tar.gz) = 46303

No package information for this port in our database
Sometimes this happens. Not all ports have packages. This is doubly so for new ports, like this one.
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. bash : shells/bash
  2. p5-Class-Std>=0 : devel/p5-Class-Std
  3. p5-Regexp-Common>=0 : textproc/p5-Regexp-Common
  4. p5-Template-Toolkit>=0 : www/p5-Template-Toolkit
  5. p5-YAML>=0 : textproc/p5-YAML
  6. perl5>=5.42.r<5.43 : lang/perl5.42
Runtime dependencies:
  1. bash : shells/bash
  2. p5-Class-Std>=0 : devel/p5-Class-Std
  3. p5-Regexp-Common>=0 : textproc/p5-Regexp-Common
  4. p5-Template-Toolkit>=0 : www/p5-Template-Toolkit
  5. p5-YAML>=0 : textproc/p5-YAML
  6. perl5>=5.42.r<5.43 : lang/perl5.42
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for p5-openxpki-clca-1.19: DOCS=on: Build and/or install documentation ===> Use 'make config' to modify these settings
Options name:
security_p5-openxpki-clca
USES:
perl5 shebangfix ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/openxpki/clca/tar.gz/v1.19?dummy=/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.19
28 Sep 2025 09:29:33
commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7 files touched by this commit
Robert Clausecker (fuz) search for other commits by this committer
Author: Sergei Vyshenski
security/p5-openxpki-clca: Toolkit for root CA

Command Line Certificate Authority (clca) is a collection of tools (written in
Bash and Perl atop of OpenSSL or LibreSSL) that allow for basic PKI operations
such as Sub CA certificate issuance (signing certificate requests), certificate
revocation and CRL issuance. Originally designed to be used for a Root CA, it
may also be used for lower level CAs or even end entity certificates as well.

https://github.com/openxpki/clca

PR:		272312
Event:		EuroBSDcon 2025

Number of commits found: 1