BSD Portsnet/ocserv 1.3.0_4 FreeBSD
Server implementing the AnyConnect SSL VPN protocol
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- GPLv2+
- Categories
- net, net-vpn, security
- Package size
- 452.8 KiB, 1828.6 KiB installed
Description
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect protocol provides a dual TCP/UDP VPN channel, and uses the standard IETF security protocols to secure it. Both IPv4 and IPv6 are supported.
Ocserv's main features are security through privilege separation and sandboxing, accounting, and resilience due to a combined use of TCP and UDP. Authentication occurs in an isolated security module process, and each user is assigned an unprivileged worker process, and a networking (tun) device. That not only eases the control of the resources of each user or group of users, but also prevents data leak (e.g., heartbleed-style attacks), and privilege escalation due to any bug on the VPN handling (worker) process. A management interface allows for viewing and querying logged-in users.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | net/ocserv | 1.3.0_4 |
| OpenBSD | net/ocserv | 1.4.0p0 |
| DragonFly | net/ocserv | 1.3.0_2 |
Install
Binary package:
pkg install ocservFrom the ports tree:
cd /usr/ports/net/ocserv/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= ocserv>0:net/ocservPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 1.3.0_4 | 1.3.0_4 | - | 1.3.0_3 | 1.3.0_4 |
| FreeBSD:14:quarterly | 1.3.0_4 | 1.3.0_4 | n/a | 1.3.0_3 | 1.3.0_4 |
| FreeBSD:15:latest | 1.3.0_4 | 1.3.0_4 | n/a | 1.3.0_3 | 1.3.0_3 |
| FreeBSD:15:quarterly | 1.3.0_4 | 1.3.0_4 | n/a | n/a | n/a |
| FreeBSD:16:latest | 1.3.0_4 | 1.3.0_4 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Build 3
bash: shells/bashgsed: textproc/gsedipcalc: net-mgmt/ipcalc
Library 10
libev.so: devel/libevlibgnutls.so: security/gnutlslibiconv.so: converters/libiconvliblz4.so: archivers/liblz4libnettle.so: security/nettleliboath.so: security/oath-toolkitlibpcl.so: devel/pcllibprotobuf-c.so: devel/protobuf-clibtalloc.so: devel/talloclibtasn1.so: security/libtasn1
The full lists below include those, and their dependencies in turn.
Build dependencies 51
- archivers/brotli
- archivers/liblz4
- archivers/zstd
- converters/libiconv
- databases/sqlite3
- devel/abseil
- devel/autoconf
- devel/autoconf-switch
- devel/automake
- devel/gettext-runtime
- devel/gettext-tools
- devel/gperf
- devel/jsoncpp
- devel/libedit
- devel/libev
- devel/libffi
- devel/libltdl
- devel/libtextstyle
- devel/libtool
- devel/libunistring
- devel/m4
- devel/nspr
- devel/pcl
- devel/pkgconf
- devel/protobuf
- devel/protobuf-c
- devel/readline
- devel/talloc
- dns/libidn2
- lang/perl5.42
- lang/python312
- lang/tcl86
- math/gmp
- math/libtommath
- math/mpdecimal
- net-mgmt/ipcalc
- print/indexinfo
- security/gnutls
- security/libgcrypt
- security/libgpg-error
- security/libtasn1
- security/nettle
- security/nss
- security/oath-toolkit
- security/p11-kit
- security/xmlsec1
- shells/bash
- textproc/expat2
- textproc/gsed
- textproc/libxml2
- textproc/libxslt
Run dependencies 38
- archivers/brotli
- archivers/liblz4
- archivers/zstd
- converters/libiconv
- databases/sqlite3
- devel/abseil
- devel/gettext-runtime
- devel/jsoncpp
- devel/libedit
- devel/libev
- devel/libffi
- devel/libltdl
- devel/libunistring
- devel/nspr
- devel/pcl
- devel/protobuf
- devel/protobuf-c
- devel/readline
- devel/talloc
- dns/libidn2
- lang/python312
- lang/tcl86
- math/gmp
- math/libtommath
- math/mpdecimal
- print/indexinfo
- security/gnutls
- security/libgcrypt
- security/libgpg-error
- security/libtasn1
- security/nettle
- security/nss
- security/oath-toolkit
- security/p11-kit
- security/xmlsec1
- textproc/expat2
- textproc/libxml2
- textproc/libxslt
No port depends on this one.
Configuration
Options name: net_ocserv
| Option | Default | Description |
|---|---|---|
| DOCS | off | Build and/or install documentation |
| EXAMPLES | off | Build and/or install examples |
| GSSAPI | off | GSSAPI Security API support |
| MAXMIND | off | Use Maxmind GeoIP library |
| RADIUS | off | RADIUS protocol support |
- USES
- autoreconf cpe gettext-tools gperf libtool localbase ncurses pathfix pkgconfig readline tar:xz
- Service scripts
ocserv
Message after installing
SECURITY NOTE: ocserv cannot isolate workers processes on FreeBSD, it only supports Linux's seccomp, but not FreeBSD's capsicum.
Files
Manual pages 3
- occtl(8)
- ocpasswd(8)
- ocserv(8)
pkg-plist 10
- bin/occtl
- bin/ocpasswd
- libexec/ocserv-fw
- share/man/man8/occtl.8.gz
- share/man/man8/ocpasswd.8.gz
- share/man/man8/ocserv.8.gz
- @sample etc/ocserv/ocserv.conf.sample
- sbin/ocserv
- sbin/ocserv-worker
- @dir(,,750) /var/run/ocserv
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| ocserv-1.3.0.tar.xz | 770596 | 5c562c3ea1032065ef43d6075e5722f94ce6a7a780d6a2b4c6d54c1ce3921965 |
Master sites 1
- https://www.infradead.org/ocserv/download/
Commit history 0
No commits in the history this site was built from.