BSD Ports

security/cfssl 1.6.5nb25 NetBSD

CloudFlare PKI toolkit

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
309977eb40
License
mit
Categories
security
Package size
28259.6 KiB, 101231.2 KiB installed

Description

CFSSL is CloudFlare's PKI/TLS swiss army knife. It is both a command line tool and an HTTP API server for signing, verifying, and bundling TLS certificates. It requires Go 1.16+ to build.

Note that certain linux distributions have certain algorithms removed (RHEL-based distributions in particular), so the golang from the official repositories will not work. Users of these distributions should install go manually to install CFSSL.

CFSSL consists of:

* a set of packages useful for building custom TLS PKI tools * the cfssl program, which is the canonical command line utility using the CFSSL packages. * the multirootca program, which is a certificate authority server that can use multiple signing keys. * the mkbundle program is used to build certificate pool bundles. * the cfssljson program, which takes the JSON output from the cfssl and multirootca programs and writes certificates, keys, CSRs, and bundles to disk.

In the other systems

SystemPortVersion
NetBSDsecurity/cfssl1.6.5nb25
FreeBSDsecurity/cfssl1.7.1_1
OpenBSDsecurity/cfssl1.6.5
DragonFlysecurity/cfssl1.6.5_7

Install

Binary package:

pkgin install cfssl

From pkgsrc:

cd /usr/pkgsrc/security/cfssl && make install clean

Dependencies

No port depends on this one.

Commit history 9

DateCommitCreditsLog message
309977eb40 bsiegert Revbump all Go packages after go127 security update
1911f2760c iquiw cfssl: update to 1.7.1
* build releases for riscv64 and ppc64le
96dc94755d bsiegert Revbump all Go packages after go127 security update
1625334d27 iquiw cfssl: update to 1.7.0
* Add scripts to regenerate {api,bundler,ubiquity}'s testdata * Create semgrep.yml * Fixes #1237 partially by updating test data certificates to be valid * Github actions linter uses [email protected] * Migrate goreleaser config to v2 and limit build parallelism * Regenerate api's testdata * Regenerate bundler's testdata * Regenerate ubiquity's testdata * Revert "Upgrade certificate-transparency-go from v1.1.8 to v1.3.1" * SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support * Update README * Update READMe * Update certstore_development and sqlit_test dbs after testdata update * Update repository to reflect required min go version of 1.20 * Update semgrep.yml * Upgrade certificate-transparency-go from v1.1.8 to v1.3.1 …
866d2b73e9 bsiegert Revbump all Go packages after go127 update

The latest 5 of 9 in the history this site was built from.