BSD Portssecurity/easy-rsa 3.2.6,1 FreeBSD
Small RSA key management package based on openssl
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- GPLv2
- Categories
- security, net-mgmt
- Package size
- 81.5 KiB, 306.4 KiB installed
Description
Easy-RSA is a small RSA key management package, based on the openssl command line tool, that can be found in the easy-rsa subdirectory of the OpenVPN distribution. While this tool is primary concerned with key management for the SSL VPN application space, it can also be used for building web certificates.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/easy-rsa | 3.2.6,1 |
| OpenBSD | security/easy-rsa | 3.2.7 |
| NetBSD | security/easy-rsa | 3.2.6 |
| DragonFly | security/easy-rsa | 3.2.2,1 |
| MidnightBSD | security/easy-rsa | 3.2.5,1 |
Install
Binary package:
pkg install easy-rsaFrom the ports tree:
cd /usr/ports/security/easy-rsa/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= easy-rsa>0:security/easy-rsaPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 3.2.6,1 | 3.2.6,1 | 3.1.1 | 3.2.4,1 | 3.2.6,1 |
| FreeBSD:14:quarterly | 3.2.6,1 | 3.2.6,1 | n/a | 3.2.3,1 | 3.2.6,1 |
| FreeBSD:15:latest | 3.2.6,1 | 3.2.6,1 | n/a | 3.2.3,1 | 3.2.4,1 |
| FreeBSD:15:quarterly | 3.2.6,1 | 3.2.6,1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 3.2.6,1 | 3.2.6,1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
Configuration
Options name: security_easy-rsa
| Option | Default | Description |
|---|---|---|
| DOCS | off | Build and/or install documentation |
| EXAMPLES | off | Build and/or install examples |
- USES
- tar:tgz
- Service scripts
- none
Message after installing
NOTE: easyrsa will require you to initialize a PKI upon first use. ONLY for the very first run for a new PKI, do something such as this, assuming you will have its data in $HOME/my_new_pki: easyrsa --pki-dir=$HOME/my_new_pki init-pki # DANGEROUS - DESTROYS ~/my_new_pki See /usr/local/share/doc/easy-rsa/README.quickstart.md for further information. An on-line help is available, you can run: easyrsa help # for help on commands and options **** SECURITY WARNING FOR PAST security/easy-rsa versions **** **** easyrsa may have encrypted your CA private key with a weak cipher Per CVE-2024-13454, Easy-RSA 3.0.5 inclusively up to and including 3.1.7, when used with OpenSSL 3, may have accidentally encrypted the CA private key with a weak cipher, des-ede3-cbc, instead of the intended aes-256-cbc, when a CA was created with the easyrsa build-ca command. Such mistakes cannot be corrected by upgrading Easy-RSA alone. The standing recommendation for CA private keys is to re-encrypt the CA private keys with the aes-256-cbc cipher, by using the easyrsa set-pass ca command. For details, see https://community.openvpn.net/openvpn/wiki/CVE-2024-13454. **** END SECURITY WARNING FOR PAST security/easy-rsa versions ****
Files
pkg-plist 4
- bin/easyrsa
- bin/easy-rsa
- @sample share/easy-rsa/openssl-easyrsa.cnf.example share/easy-rsa/openssl-easyrsa.cnf
- share/easy-rsa/vars.example
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| EasyRSA-3.2.6.tgz | 93543 | c2572990ce91112eef8d1b8e4a3b58790da95b68501785c621f69121dfbd22d7 |
Master sites 2
- https://github.com/OpenVPN/easy-rsa/releases/download/v3.2.6/
- LOCAL/mandree/
Commit history 0
No commits in the history this site was built from.