notbug ipv6 ready As an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
Port details
p5-openxpki-clca Toolkit for basic PKI operations in small CA like root CA
1.21 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.19Version of this port present on the latest quarterly branch.
Maintainer: svysh.fbsd@gmail.com search for ports maintained by this maintainer
Port Added: 2025-09-28 09:36:40
Last Update: 2026-02-26 20:08:30
Commit Hash: 4302ce7
Also Listed In: perl5
License: GPLv2
WWW:
https://github.com/openxpki/clca/
Description:
Command Line Certificate Authority (clca) is a collection of tools (written in Bash and Perl atop of OpenSSL or LibreSSL) that allow for basic PKI operations such as Sub CA certificate issuance (signing certificate requests), certificate revocation and CRL issuance. Originally designed to be used for a Root CA, it may also be used for lower level CAs or even end entity certificates as well. Ideal solution for off-line low-traffic CA, residing on a notebook, which is most of the time kept in a vault. CA private keys can be held either in encrypted files (encrypted either with a simple passphrase or using Shamir's Secret Sharing) or stored in an HSM. Port security/p5-openxpki-clca is an overly lightweight command-line alternative to its elder brother, a full-featured server-born port security/p5-openxpki designed for universal PKI solutions. These two ports are mutually independent and can coexist on the same host.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (25 items)
Collapse this list.
  1. /usr/local/share/licenses/p5-openxpki-clca-1.21/catalog.mk
  2. /usr/local/share/licenses/p5-openxpki-clca-1.21/LICENSE
  3. /usr/local/share/licenses/p5-openxpki-clca-1.21/GPLv2
  4. bin/change-quorum.sh
  5. bin/clca
  6. share/doc/openxpki-clca/README.keyceremony-shared-interactive.md
  7. share/doc/openxpki-clca/README.keyceremony-simple-noninteractive.md
  8. share/doc/openxpki-clca/README.md
  9. share/examples/openxpki-clca/bin/change-quorum.sh
  10. share/examples/openxpki-clca/bin/clca
  11. share/examples/openxpki-clca/bin/provision
  12. share/examples/openxpki-clca/bin/secret
  13. share/examples/openxpki-clca/etc/clca.cfg
  14. share/examples/openxpki-clca/etc/openssl.cnf
  15. share/examples/openxpki-clca/lib/OpenXPKI/Crypto/Secret.pm
  16. share/examples/openxpki-clca/lib/OpenXPKI/Crypto/Secret/Plain.pm
  17. share/examples/openxpki-clca/lib/OpenXPKI/Crypto/Secret/Split.pm
  18. share/examples/openxpki-clca/lib/OpenXPKI/Debug.pm
  19. share/examples/openxpki-clca/lib/OpenXPKI/Exception.pm
  20. share/examples/openxpki-clca/lib/OpenXPKI/Serialization/Simple.pm
  21. share/examples/openxpki-clca/lib/OpenXPKI/Server/Context.pm
  22. share/examples/openxpki-clca/lib/OpenXPKI/VERSION.pm
  23. @owner
  24. @group
  25. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • p5-openxpki-clca>0:security/p5-openxpki-clca
To install the port:
cd /usr/ports/security/p5-openxpki-clca/ && make install clean
To add the package, run one of these commands:
  • pkg install security/p5-openxpki-clca
  • pkg install p5-openxpki-clca
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: p5-openxpki-clca
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1772015985 SHA256 (openxpki-clca-v1.21_GH0.tar.gz) = f0ba1aaca37d31b6963d117fa1d695d3153b85c0e87d0069406292515986261c SIZE (openxpki-clca-v1.21_GH0.tar.gz) = 46590

Packages (timestamps in pop-ups are UTC):
p5-openxpki-clca
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest1.201.21--1.21n/an/an/a
FreeBSD:13:quarterly1.201.20--1.20n/an/an/a
FreeBSD:14:latest1.211.21--1.21---
FreeBSD:14:quarterly1.201.20--1.20---
FreeBSD:15:latest1.211.21n/a-n/an/a--
FreeBSD:15:quarterly1.201.20n/a-n/an/a--
FreeBSD:16:latest1.201.21n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. bash : shells/bash
  2. p5-Class-Std>=0 : devel/p5-Class-Std
  3. p5-Regexp-Common>=0 : textproc/p5-Regexp-Common
  4. p5-Template-Toolkit>=0 : www/p5-Template-Toolkit
  5. p5-YAML>=0 : textproc/p5-YAML
  6. perl5>=5.42.r<5.43 : lang/perl5.42
Runtime dependencies:
  1. bash : shells/bash
  2. p5-Class-Std>=0 : devel/p5-Class-Std
  3. p5-Regexp-Common>=0 : textproc/p5-Regexp-Common
  4. p5-Template-Toolkit>=0 : www/p5-Template-Toolkit
  5. p5-YAML>=0 : textproc/p5-YAML
  6. perl5>=5.42.r<5.43 : lang/perl5.42
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for p5-openxpki-clca-1.21: DOCS=on: Build and/or install documentation ===> Use 'make config' to modify these settings
Options name:
security_p5-openxpki-clca
USES:
perl5 shebangfix ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/openxpki/clca/tar.gz/v1.21?dummy=/
Collapse this list.

Number of commits found: 3

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.21
26 Feb 2026 20:08:30
commit hash: 4302ce7b0dcd2899a7190f92c0e640eaf4f25b74commit hash: 4302ce7b0dcd2899a7190f92c0e640eaf4f25b74commit hash: 4302ce7b0dcd2899a7190f92c0e640eaf4f25b74commit hash: 4302ce7b0dcd2899a7190f92c0e640eaf4f25b74 files touched by this commit
Vladimir Druzenko (vvd) search for other commits by this committer
Author: Sergei Vyshenski
security/p5-openxpki-clca: Update 1.20 => 1.21

Commit log:
https://github.com/openxpki/clca/compare/v1.20...v1.21

PR:	293444
1.20
12 Jan 2026 21:00:44
commit hash: 833a0d48124db8ad5d28d7352ebe0fcd8888bc41commit hash: 833a0d48124db8ad5d28d7352ebe0fcd8888bc41commit hash: 833a0d48124db8ad5d28d7352ebe0fcd8888bc41commit hash: 833a0d48124db8ad5d28d7352ebe0fcd8888bc41 files touched by this commit
Vladimir Druzenko (vvd) search for other commits by this committer
Author: Sergei Vyshenski
security/p5-openxpki-clca: Update 1.19 => 1.20

Commit log:
https://github.com/openxpki/clca/compare/v1.19...v1.20

Optimize do-install and post-install-DOCS-on:
- Merge INSTALL_SCRIPTs.
- Remove unnecessary MKDIRs.

PR:	292365
1.19
28 Sep 2025 09:29:33
commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7commit hash: 1ff18addddfe2b75bcb2176b90559061359236e7 files touched by this commit
Robert Clausecker (fuz) search for other commits by this committer
Author: Sergei Vyshenski
security/p5-openxpki-clca: Toolkit for root CA

Command Line Certificate Authority (clca) is a collection of tools (written in
Bash and Perl atop of OpenSSL or LibreSSL) that allow for basic PKI operations
such as Sub CA certificate issuance (signing certificate requests), certificate
revocation and CRL issuance. Originally designed to be used for a Root CA, it
may also be used for lower level CAs or even end entity certificates as well.

https://github.com/openxpki/clca

PR:		272312
Event:		EuroBSDcon 2025

Number of commits found: 3