BSD Ports

Deprecated: Please use security/openssl (LTS)

Expires: 2028-11-30

Vulnerable: version 3.0.22 is affected by 1 known vulnerability. See below.

security/openssl30 3.0.22 FreeBSD

TLSv1.3 capable SSL and crypto library

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Port added
Last update
Commit
1c8ff82f8d
License
APACHE20
Categories
security, devel
Package size
5731.1 KiB, 20291.7 KiB installed

Description

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1, v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL tookit and its related documentation.

OpenSSL is based on the excellent SSLeay library developed by Eric A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an Apache-style licence, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions.

Install

Binary package:

pkg install openssl30

From the ports tree:

cd /usr/ports/security/openssl30/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	openssl30>0:security/openssl30
LIB_DEPENDS=	libcrypto.so:security/openssl30

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest3.0.223.0.22--3.0.22
FreeBSD:14:quarterly3.0.223.0.22n/a-3.0.22
FreeBSD:15:latest3.0.223.0.22n/a--
FreeBSD:15:quarterly3.0.223.0.22n/an/an/a
FreeBSD:16:latest3.0.223.0.22n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 1

No port depends on this one.

Configuration

Options name: security_openssl

OptionDefaultDescription
ARIAoffARIA (South Korean standard)
ASMonAssembler code
ASYNConAsynchronous mode
CTonCertificate Transparency Support
DESon(Triple) Data Encryption Standard
FIPSonBuild FIPS provider
GOSTonGOST (Russian standard)
IDEAoffInternational Data Encryption Algorithm
KTLSonUse in-kernel TLS (FreeBSD >13)
LEGACYoffOlder algorithms
MAN3onInstall API manpages (section 3, 7)
MD2offMD2 (obsolete) (requires LEGACY)
MD4onMD4 (unsafe)
MDC2offMDC-2 (patented, requires DES)
NEXTPROTONEGonNext Protocol Negotiation (SPDY)
RC2onRC2 (unsafe)
RC4onRC4 (unsafe)
RC5offRC5 (patented)
RFC3779onRFC3779 support (BGP)
RMD160onRIPEMD-160
SCTPonSCTP (Stream Control Transmission)
SHAREDonBuild shared libraries
SM2offSM2 Elliptic Curve DH (Chinese standard)
SM3offSM3 256bit (Chinese standard)
SM4offSM4 128bit (Chinese standard)
SSE2onRuntime SSE2 detection
SSL3offSSLv3 (unsafe)
THREADSonThreading support
TLS1onTLSv1.0 (requires TLS1_1, TLS1_2)
TLS1_1onTLSv1.1 (requires TLS1_2)
TLS1_2onTLSv1.2
WEAK-SSL-CIPHERSoff
ZLIBoffzlib compression support
USES
cpe perl5
Service scripts
none
Conflicts with
boringssl libressl libressl-devel openssl3[46] openssl4?

Message after installing

This port was created for the remainder of the lifespan
of FreeBSD 14.

OpenSSL 3.0 has known vulnerabilities, all users of the
3.0 port are encouraged to update to OpenSSL 3.5 from
security/openssl

This port was created for the remainder of the lifespan
of FreeBSD 14.

OpenSSL 3.0 has known vulnerabilities, all users of the
3.0 port are encouraged to update to OpenSSL 3.5 from
security/openssl

===>   NOTICE:

This port is deprecated; you may wish to reconsider installing it:

Please use security/openssl (LTS).

It is scheduled to be removed on or after 2028-11-30.

Files

Manual pages 114
  • CA.pl(1)
  • asn1parse(1)
  • c_rehash(1)
  • ca(1)
  • ciphers(1)
  • cmp(1)
  • cms(1)
  • config(5)
  • crl(1)
  • crl2pkcs7(1)
  • dgst(1)
  • dhparam(1)
  • dsa(1)
  • dsaparam(1)
  • ec(1)
  • ecparam(1)
  • enc(1)
  • engine(1)
  • errstr(1)
  • fips_config(5)
  • gendsa(1)
  • genpkey(1)
  • genrsa(1)
  • info(1)
  • kdf(1)
  • mac(1)
  • nseq(1)
  • ocsp(1)
  • openssl(1)
  • openssl-asn1parse(1)
  • openssl-ca(1)
  • openssl-ciphers(1)
  • openssl-cmds(1)
  • openssl-cmp(1)
  • openssl-cms(1)
  • openssl-crl(1)
  • openssl-crl2pkcs7(1)
  • openssl-dgst(1)
  • openssl-dhparam(1)
  • openssl-dsa(1)
  • openssl-dsaparam(1)
  • openssl-ec(1)
  • openssl-ecparam(1)
  • openssl-enc(1)
  • openssl-engine(1)
  • openssl-errstr(1)
  • openssl-fipsinstall(1)
  • openssl-format-options(1)
  • openssl-gendsa(1)
  • openssl-genpkey(1)
  • openssl-genrsa(1)
  • openssl-info(1)
  • openssl-kdf(1)
  • openssl-list(1)
  • openssl-mac(1)
  • openssl-namedisplay-options(1)
  • openssl-nseq(1)
  • openssl-ocsp(1)
  • openssl-passphrase-options(1)
  • openssl-passwd(1)
  • openssl-pkcs12(1)
  • openssl-pkcs7(1)
  • openssl-pkcs8(1)
  • openssl-pkey(1)
  • openssl-pkeyparam(1)
  • openssl-pkeyutl(1)
  • openssl-prime(1)
  • openssl-rand(1)
  • openssl-rehash(1)
  • openssl-req(1)
  • openssl-rsa(1)
  • openssl-rsautl(1)
  • openssl-s_client(1)
  • openssl-s_server(1)
  • openssl-s_time(1)
  • openssl-sess_id(1)
  • openssl-smime(1)
  • openssl-speed(1)
  • openssl-spkac(1)
  • openssl-srp(1)
  • openssl-storeutl(1)
  • openssl-ts(1)
  • openssl-verification-options(1)
  • openssl-verify(1)
  • openssl-version(1)
  • openssl-x509(1)
  • passwd(1)
  • pkcs12(1)
  • pkcs7(1)
  • pkcs8(1)
  • pkey(1)
  • pkeyparam(1)
  • pkeyutl(1)
  • prime(1)
  • rand(1)
  • rehash(1)
  • req(1)
  • rsa(1)
  • rsautl(1)
  • s_client(1)
  • s_server(1)
  • s_time(1)
  • sess_id(1)
  • smime(1)
  • speed(1)
  • spkac(1)
  • srp(1)
  • storeutl(1)
  • ts(1)
  • tsget(1)
  • verify(1)
  • version(1)
  • x509(1)
  • x509v3_config(5)
pkg-plist 274
  • bin/c_rehash
  • bin/openssl
  • include/openssl/aes.h
  • include/openssl/asn1.h
  • include/openssl/asn1_mac.h
  • include/openssl/asn1err.h
  • include/openssl/asn1t.h
  • include/openssl/async.h
  • include/openssl/asyncerr.h
  • include/openssl/bio.h
  • include/openssl/bioerr.h
  • include/openssl/blowfish.h
  • include/openssl/bn.h
  • include/openssl/bnerr.h
  • include/openssl/buffer.h
  • include/openssl/buffererr.h
  • include/openssl/camellia.h
  • include/openssl/cast.h
  • include/openssl/cmac.h
  • include/openssl/cmp.h
  • include/openssl/cmp_util.h
  • include/openssl/cmperr.h
  • include/openssl/cms.h
  • include/openssl/cmserr.h
  • include/openssl/comp.h
  • include/openssl/comperr.h
  • include/openssl/conf.h
  • include/openssl/conf_api.h
  • include/openssl/conferr.h
  • include/openssl/configuration.h
  • include/openssl/conftypes.h
  • include/openssl/core.h
  • include/openssl/core_dispatch.h
  • include/openssl/core_names.h
  • include/openssl/core_object.h
  • include/openssl/crmf.h
  • include/openssl/crmferr.h
  • include/openssl/crypto.h
  • include/openssl/cryptoerr.h
  • include/openssl/cryptoerr_legacy.h
  • include/openssl/ct.h
  • include/openssl/cterr.h
  • include/openssl/decoder.h
  • include/openssl/decodererr.h
  • include/openssl/des.h
  • include/openssl/dh.h
  • include/openssl/dherr.h
  • include/openssl/dsa.h
  • include/openssl/dsaerr.h
  • include/openssl/dtls1.h
  • include/openssl/e_os2.h
  • include/openssl/ebcdic.h
  • include/openssl/ec.h
  • include/openssl/ecdh.h
  • include/openssl/ecdsa.h
  • include/openssl/ecerr.h
  • include/openssl/encoder.h
  • include/openssl/encodererr.h
  • include/openssl/engine.h
  • include/openssl/engineerr.h
  • include/openssl/err.h
  • include/openssl/ess.h
  • include/openssl/esserr.h
  • include/openssl/evp.h
  • include/openssl/evperr.h
  • include/openssl/fips_names.h
  • include/openssl/fipskey.h
  • include/openssl/hmac.h
  • include/openssl/http.h
  • include/openssl/httperr.h
  • include/openssl/idea.h
  • include/openssl/kdf.h
  • include/openssl/kdferr.h
  • include/openssl/lhash.h
  • include/openssl/macros.h
  • include/openssl/md2.h
  • include/openssl/md4.h
  • include/openssl/md5.h
  • include/openssl/mdc2.h
  • include/openssl/modes.h
  • include/openssl/obj_mac.h
  • include/openssl/objects.h
  • include/openssl/objectserr.h
  • include/openssl/ocsp.h
  • include/openssl/ocsperr.h
  • include/openssl/opensslconf.h
  • include/openssl/opensslv.h
  • include/openssl/ossl_typ.h
  • include/openssl/param_build.h
  • include/openssl/params.h
  • include/openssl/pem.h
  • include/openssl/pem2.h
  • include/openssl/pemerr.h
  • include/openssl/pkcs12.h
  • include/openssl/pkcs12err.h
  • include/openssl/pkcs7.h
  • include/openssl/pkcs7err.h
  • include/openssl/prov_ssl.h
  • include/openssl/proverr.h
  • include/openssl/provider.h

The first 100 are listed.

distinfo 1
FileSizeSHA256
openssl-3.0.22.tar.gz1.5330396e+0767ebca7e50d17383028045486653492195b83db95f8558709701bb47b5c1ef81
Master sites 1
  • https://github.com/openssl/openssl/releases/download/${DISTNAME}/

Known vulnerabilities 1

Commit history 3

DateCommitCreditsLog message
1c8ff82f8d Bernard Spil security/openssl30: Fix collision with security/openssl
7195ad32e0 Bernard Spil security/openssl30: update CONFLICTS
ae3d4a75ab Bernard Spil security/openssl30: Resurrect OpenSSL 3.0 port
For FreeBSD 14, expires 2028-11-30 Has known vulnerabilities, users are encouraged to move to OpenSSL 3.5 from security/openssl