BSD Ports

security/openssl 3.5.9 MidnightBSD

TLSv1.3 capable SSL and crypto library

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
63b3dbc818
License
Apache-2.0
Categories
security, devel

Description

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1, v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL toolkit and its related documentation.

OpenSSL is based on the excellent SSLeay library developed by Eric A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an Apache-style licence, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions.

In the other systems

SystemPortVersion
MidnightBSDsecurity/openssl3.5.9
FreeBSDsecurity/openssl3.5.9,1
NetBSDsecurity/openssl3.6.5
DragonFlysecurity/openssl3.0.16,1

Install

Binary package:

mport install openssl

From mports:

cd /usr/mports/security/openssl && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	openssl>0:security/openssl
LIB_DEPENDS=	libcrypto.so:security/openssl

Dependencies

Configuration

Options name: security_openssl

OptionDefaultDescription
ARIAoffARIA (South Korean standard)
ASMonAssembler code
ASYNConAsynchronous mode
BROTLIoff
CTonCertificate Transparency Support
DESon(Triple) Data Encryption Standard
FIPSonBuild FIPS provider (Note: NOT yet FIPS validated)
GOSTonGOST (Russian standard)
IDEAoffInternational Data Encryption Algorithm
KTLSonUse in-kernel TLS (MidnightBSD >4)
LEGACYonOlder algorithms
MAN3onInstall API manpages (section 3, 7)
MD2offMD2 (obsolete) (requires LEGACY)
MD4onMD4 (unsafe)
MDC2offMDC-2 (patented, requires DES)
ML-DSAon
ML-KEMon
NEXTPROTONEGonNext Protocol Negotiation (SPDY)
QUIConHTTP/3
RC2onRC2 (unsafe)
RC4onRC4 (unsafe)
RC5offRC5 (patented)
RFC3779onRFC3779 support (BGP)
RMD160onRIPEMD-160
SCTPoffSCTP (Stream Control Transmission)
SHAREDonBuild shared libraries
SLH-DSAon
SM2offSM2 Elliptic Curve DH (Chinese standard)
SM3offSM3 256bit (Chinese standard)
SM4offSM4 128bit (Chinese standard)
SSE2onRuntime SSE2 detection
SSL3offSSLv3 (unsafe)
THREADPOOLonThread Pooling support
THREADSon
TLS-DEPRECATED-ECoff
TLS1onTLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1onTLSv1.1 (requires TLS1_2)
TLS1_2onTLSv1.2
WEAK-SSL-CIPHERSoff
ZLIBoff
ZSTDoff
USES
cpe perl5
Service scripts
none
Conflicts with
boringssl libressl libressl-devel openssl111 openssl3[0-9] openssl*-quictls

Files

Manual pages 115
  • CA.pl(1)
  • asn1parse(1)
  • c_rehash(1)
  • ca(1)
  • ciphers(1)
  • cmp(1)
  • cms(1)
  • config(5)
  • crl(1)
  • crl2pkcs7(1)
  • dgst(1)
  • dhparam(1)
  • dsa(1)
  • dsaparam(1)
  • ec(1)
  • ecparam(1)
  • enc(1)
  • engine(1)
  • errstr(1)
  • fips_config(5)
  • gendsa(1)
  • genpkey(1)
  • genrsa(1)
  • info(1)
  • kdf(1)
  • mac(1)
  • nseq(1)
  • ocsp(1)
  • openssl(1)
  • openssl-asn1parse(1)
  • openssl-ca(1)
  • openssl-ciphers(1)
  • openssl-cmds(1)
  • openssl-cmp(1)
  • openssl-cms(1)
  • openssl-crl(1)
  • openssl-crl2pkcs7(1)
  • openssl-dgst(1)
  • openssl-dhparam(1)
  • openssl-dsa(1)
  • openssl-dsaparam(1)
  • openssl-ec(1)
  • openssl-ecparam(1)
  • openssl-enc(1)
  • openssl-engine(1)
  • openssl-errstr(1)
  • openssl-fipsinstall(1)
  • openssl-format-options(1)
  • openssl-gendsa(1)
  • openssl-genpkey(1)
  • openssl-genrsa(1)
  • openssl-info(1)
  • openssl-kdf(1)
  • openssl-list(1)
  • openssl-mac(1)
  • openssl-namedisplay-options(1)
  • openssl-nseq(1)
  • openssl-ocsp(1)
  • openssl-passphrase-options(1)
  • openssl-passwd(1)
  • openssl-pkcs12(1)
  • openssl-pkcs7(1)
  • openssl-pkcs8(1)
  • openssl-pkey(1)
  • openssl-pkeyparam(1)
  • openssl-pkeyutl(1)
  • openssl-prime(1)
  • openssl-rand(1)
  • openssl-rehash(1)
  • openssl-req(1)
  • openssl-rsa(1)
  • openssl-rsautl(1)
  • openssl-s_client(1)
  • openssl-s_server(1)
  • openssl-s_time(1)
  • openssl-sess_id(1)
  • openssl-skeyutl(1)
  • openssl-smime(1)
  • openssl-speed(1)
  • openssl-spkac(1)
  • openssl-srp(1)
  • openssl-storeutl(1)
  • openssl-ts(1)
  • openssl-verification-options(1)
  • openssl-verify(1)
  • openssl-version(1)
  • openssl-x509(1)
  • passwd(1)
  • pkcs12(1)
  • pkcs7(1)
  • pkcs8(1)
  • pkey(1)
  • pkeyparam(1)
  • pkeyutl(1)
  • prime(1)
  • rand(1)
  • rehash(1)
  • req(1)
  • rsa(1)
  • rsautl(1)
  • s_client(1)
  • s_server(1)
  • s_time(1)
  • sess_id(1)
  • smime(1)
  • speed(1)
  • spkac(1)
  • srp(1)
  • storeutl(1)
  • ts(1)
  • tsget(1)
  • verify(1)
  • version(1)
  • x509(1)
  • x509v3_config(5)
pkg-plist 284
  • bin/c_rehash
  • bin/openssl
  • include/openssl/aes.h
  • include/openssl/asn1.h
  • include/openssl/asn1err.h
  • include/openssl/asn1t.h
  • include/openssl/async.h
  • include/openssl/asyncerr.h
  • include/openssl/bio.h
  • include/openssl/bioerr.h
  • include/openssl/blowfish.h
  • include/openssl/bn.h
  • include/openssl/bnerr.h
  • include/openssl/buffer.h
  • include/openssl/buffererr.h
  • include/openssl/byteorder.h
  • include/openssl/camellia.h
  • include/openssl/cast.h
  • include/openssl/cmac.h
  • include/openssl/cmp.h
  • include/openssl/cmp_util.h
  • include/openssl/cmperr.h
  • include/openssl/cms.h
  • include/openssl/cmserr.h
  • include/openssl/comp.h
  • include/openssl/comperr.h
  • include/openssl/conf.h
  • include/openssl/conf_api.h
  • include/openssl/conferr.h
  • include/openssl/configuration.h
  • include/openssl/conftypes.h
  • include/openssl/core.h
  • include/openssl/core_dispatch.h
  • include/openssl/core_names.h
  • include/openssl/core_object.h
  • include/openssl/crmf.h
  • include/openssl/crmferr.h
  • include/openssl/crypto.h
  • include/openssl/cryptoerr.h
  • include/openssl/cryptoerr_legacy.h
  • include/openssl/ct.h
  • include/openssl/cterr.h
  • include/openssl/decoder.h
  • include/openssl/decodererr.h
  • include/openssl/des.h
  • include/openssl/dh.h
  • include/openssl/dherr.h
  • include/openssl/dsa.h
  • include/openssl/dsaerr.h
  • include/openssl/dtls1.h
  • include/openssl/e_os2.h
  • include/openssl/e_ostime.h
  • include/openssl/ebcdic.h
  • include/openssl/ec.h
  • include/openssl/ecdh.h
  • include/openssl/ecdsa.h
  • include/openssl/ecerr.h
  • include/openssl/encoder.h
  • include/openssl/encodererr.h
  • include/openssl/engine.h
  • include/openssl/engineerr.h
  • include/openssl/err.h
  • include/openssl/ess.h
  • include/openssl/esserr.h
  • include/openssl/evp.h
  • include/openssl/evperr.h
  • include/openssl/fips_names.h
  • include/openssl/fipskey.h
  • include/openssl/hmac.h
  • include/openssl/hpke.h
  • include/openssl/http.h
  • include/openssl/httperr.h
  • include/openssl/idea.h
  • include/openssl/indicator.h
  • include/openssl/kdf.h
  • include/openssl/kdferr.h
  • include/openssl/lhash.h
  • include/openssl/macros.h
  • include/openssl/md2.h
  • include/openssl/md4.h
  • include/openssl/md5.h
  • include/openssl/mdc2.h
  • include/openssl/ml_kem.h
  • include/openssl/modes.h
  • include/openssl/obj_mac.h
  • include/openssl/objects.h
  • include/openssl/objectserr.h
  • include/openssl/ocsp.h
  • include/openssl/ocsperr.h
  • include/openssl/opensslconf.h
  • include/openssl/opensslv.h
  • include/openssl/ossl_typ.h
  • include/openssl/param_build.h
  • include/openssl/params.h
  • include/openssl/pem.h
  • include/openssl/pem2.h
  • include/openssl/pemerr.h
  • include/openssl/pkcs12.h
  • include/openssl/pkcs12err.h
  • include/openssl/pkcs7.h

The first 100 are listed.

distinfo 1
FileSizeSHA256
openssl-3.5.9.tar.gz5.3279637e+07603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a
Master sites 1
  • https://github.com/openssl/openssl/releases/download/${DISTNAME}/

Commit history 2

DateCommitCreditsLog message
63b3dbc818 Lucas Holt security/openssl: update to 3.5.9, retire openssl35 (#1861)
## Summary - Rename `security/openssl35` → `security/openssl` and update it 3.5.7 → 3.5.9. The old 3.0 port is removed because OpenSSL 3.0 is EOL. This follows FreeBSD 2fbe83698d37. - `OPENSSL_SHLIBVER` 12 → 17 (`libcrypto.so.12` → `libcrypto.so.17`). - Bump `PORTREVISION` on ports that depend on `security/openssl` directly: - `net-p2p/qbittorrent` - `net/xmlrpc-c` - `devel/libgit2-glib` (its hard-coded `libcrypto.so.12` path also changed to `.17`) - Add a `MOVED` entry (`security/openssl35|security/openssl|2026-10-21`), an `UPDATING` entry, and an upgrade `pkg-message`. Drop `openssl35` from `security/Makefile`. ## Option defaults - **LEGACY**: stays on, as in the old 3.0 port (cd9420d621). python-cryptography needs `legacy.so`. …
24b7214940 Lucas Holt security/openssl: update to 3.0.21 (#745)