notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details on branch 2026Q3
step-certificates Smallstep step_ca certificates server
0.30.2_2 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 0.30.2_2Version of this port present on the latest quarterly branch.
Maintainer: mw@wipp.bayern search for ports maintained by this maintainer
Port Added: 2026-07-10 08:24:41
Last Update: 2026-07-10 08:00:52
Commit Hash: c328c3d
License: APACHE20
WWW:
https://smallstep.com/certificates/
Description:
This port contains the Smallstep step-ca certificates component It can be used together with the Smallstep step-ca client. step-ca is a local CA. It can be used to create your own local PKI Infrastructure and includes things like e.g. the possibility to have your own ACME server. A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (53 items)
Collapse this list.
  1. /usr/local/share/licenses/step-certificates-0.30.2_2/catalog.mk
  2. /usr/local/share/licenses/step-certificates-0.30.2_2/LICENSE
  3. /usr/local/share/licenses/step-certificates-0.30.2_2/APACHE20
  4. sbin/step-ca
  5. @dir etc/step
  6. share/doc/step-certificates/CHANGELOG.md
  7. share/doc/step-certificates/CONTRIBUTING.md
  8. share/doc/step-certificates/README.md
  9. share/doc/step-certificates/SECURITY.md
  10. share/doc/step-certificates/basic-client/client.go
  11. share/doc/step-certificates/basic-federation/client/main.go
  12. share/doc/step-certificates/basic-federation/pki/cloud/certs/intermediate_ca.crt
  13. share/doc/step-certificates/basic-federation/pki/cloud/certs/kubernetes_root_ca.crt
  14. share/doc/step-certificates/basic-federation/pki/cloud/certs/root_ca.crt
  15. share/doc/step-certificates/basic-federation/pki/cloud/config/ca.federated.json
  16. share/doc/step-certificates/basic-federation/pki/cloud/config/ca.json
  17. share/doc/step-certificates/basic-federation/pki/cloud/secrets/intermediate_ca_key
  18. share/doc/step-certificates/basic-federation/pki/cloud/secrets/root_ca_key
  19. share/doc/step-certificates/basic-federation/pki/kubernetes/certs/cloud_root_ca.crt
  20. share/doc/step-certificates/basic-federation/pki/kubernetes/certs/intermediate_ca.crt
  21. share/doc/step-certificates/basic-federation/pki/kubernetes/certs/root_ca.crt
  22. share/doc/step-certificates/basic-federation/pki/kubernetes/config/ca.federated.json
  23. share/doc/step-certificates/basic-federation/pki/kubernetes/config/ca.json
  24. share/doc/step-certificates/basic-federation/pki/kubernetes/secrets/intermediate_ca_key
  25. share/doc/step-certificates/basic-federation/pki/kubernetes/secrets/root_ca_key
  26. share/doc/step-certificates/basic-federation/server/main.go
  27. share/doc/step-certificates/bootstrap-client/client.go
  28. share/doc/step-certificates/bootstrap-mtls-server/server.go
  29. share/doc/step-certificates/bootstrap-tls-server/server.go
  30. share/doc/step-certificates/docker/ca/pki/secrets/root_ca.crt
  31. share/doc/step-certificates/docker/ca/pki/secrets/root_ca_key
  32. share/doc/step-certificates/docker/docker-compose.yml
  33. share/doc/step-certificates/docker/nginx/Dockerfile
  34. share/doc/step-certificates/docker/nginx/certwatch.sh
  35. share/doc/step-certificates/docker/nginx/entrypoint.sh
  36. share/doc/step-certificates/docker/nginx/site.conf
  37. share/doc/step-certificates/docker/password.txt
  38. share/doc/step-certificates/docker/renewer/Dockerfile
  39. share/doc/step-certificates/docker/renewer/crontab
  40. share/doc/step-certificates/docker/renewer/entrypoint.sh
  41. share/doc/step-certificates/pki/config/ca.json
  42. share/doc/step-certificates/pki/secrets/intermediate_ca.crt
  43. share/doc/step-certificates/pki/secrets/intermediate_ca_key
  44. share/doc/step-certificates/pki/secrets/root_ca.crt
  45. share/doc/step-certificates/pki/secrets/root_ca_key
  46. share/doc/step-certificates/puppet/ca.json.erb
  47. share/doc/step-certificates/puppet/defaults.json.erb
  48. share/doc/step-certificates/puppet/step.pp
  49. share/doc/step-certificates/puppet/step_ca.pp
  50. share/doc/step-certificates/puppet/tls_server.pp
  51. @owner
  52. @group
  53. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • step_ca
Dependency lines:
  • step-certificates>0:security/step-certificates
To install the port:
cd /usr/ports/security/step-certificates/ && make install clean
To add the package, run one of these commands:
  • pkg install security/step-certificates
  • pkg install step-certificates
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: step-certificates
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1780398417 SHA256 (go/security_step-certificates/step-certificates-v0.30.2/v0.30.2.mod) = c4a90f197698ed952946c25f6ed180770513deeb0f900d8e17a58e3519c22fb1 SIZE (go/security_step-certificates/step-certificates-v0.30.2/v0.30.2.mod) = 8646

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_step-certificates/step-certificates-v0.30.2/v0.30.2.zip) = 7f8d8b9bc0ff69bed8334750b41a486f1d942c5993be8ab3b399a6b8a3d790e4 SIZE (go/security_step-certificates/step-certificates-v0.30.2/v0.30.2.zip) = 1186952

Collapse this list.

Packages (timestamps in pop-ups are UTC):
step-certificates
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest0.29.0_50.29.0_5-0.28.40.29.0_5n/an/an/a
FreeBSD:13:quarterly0.29.0_50.29.0_5-0.28.1_40.29.0_5n/an/an/a
FreeBSD:14:latest0.30.2_10.30.2_2-0.28.40.30.2_2---
FreeBSD:14:quarterly0.29.0_70.30.2_1-0.28.1_40.30.2_2---
FreeBSD:15:latest0.30.2_20.30.2_2n/a0.28.4n/an/a--
FreeBSD:15:quarterly0.30.2_10.30.2_2n/a-n/an/a--
FreeBSD:16:latest0.30.2_10.30.2_2n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go125 : lang/go125
Runtime dependencies:
  1. step : security/step-cli
Library dependencies:
  1. libpcsclite.so : devel/pcsc-lite
Fetch dependencies:
  1. go125 : lang/go125
There are no ports dependent upon this port
Configuration Options:
No options to configure
Options name:
security_step-certificates
USES:
go:modules zip
pkg-message:
For install:
================================================================================ Step Certificates requires additional configuration: The simple way is via the service start script step_ca with: service step_ca configure When there is no configuration it will be created. User input is required!!! The hard way would be manually via the step command. Ensure to set the STEPPATH environment variable. This makes using the commands much simpler. Following are the defaults for step certificates and can be overridden by rc.conf variables:: * The service is run under user step customizable by step_ca_user * The service is run inder group step customizable by step_ca_group * The base directory used for storing CA information is step_ca_stepdir (%%PREFIX%%/etc/step) * The CA informations is held under step_ca_steppath (%%PREFIX%%/etc/step/ca) * The password required for automatic startup is in step_ca_password (%%PREFIX%%/etc/step/password.txt) * By default step certificates logs to syslog with a tag of step_ca Due to an inconsistency between this message and the rc-script, the rc-script has been renamed from step-ca to step_ca in v0.28.1. Please be aware of this if you call the rc-script from a custom script. ================================================================================
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://proxy.golang.org/github.com/smallstep/certificates/@v/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
0.30.2_2
10 Jul 2026 08:00:52
commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487commit hash: c328c3d404abdecbaf1429067d07fa84f6de3487 files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.12 / 1.26.5

Number of commits found: 1
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
apache-commons-httpclientJul 10
apache-commons-httpclientJul 10
httpclientJul 10
gitlabJul 09
mailpitJul 09
xorg-serverJul 08
xwaylandJul 08
emacsJul 06
emacs-develJul 06
xrdpJul 06
xrdp-develJul 06
zeekJul 06
roundcubeJul 05
weechatJul 05
p5-CGI-SessionJul 04

28 vulnerabilities affecting 437 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-07-10 13:37:26 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34855
Broken 89
Deprecated 288
Ignore 205
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 45
Expired 19
Set to expire 213
Interactive 0
new 24 hours 9
new 48 hours24
new 7 days132
new fortnight276
new month418
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.