security/openvpn 2.7.8 FreeBSD
Secure IP/Ethernet tunnel daemon
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
4fbd626e70- License
- GPLv2
- Categories
- security, net, net-vpn
- Package size
- 657.5 KiB, 1930.1 KiB installed
Description
OpenVPN is a robust, scalable and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet. It can operate over UDP or TCP, can use SSL or a pre-shared secret to authenticate peers, and in SSL mode, one server can handle many clients.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/openvpn | 2.7.8 |
| OpenBSD | net/openvpn | 2.7.8 |
| NetBSD | net/openvpn | 2.7.7 |
| DragonFly | security/openvpn | 2.6.14 |
| MidnightBSD | security/openvpn | 2.6.14_1 |
Install
Binary package:
pkg install openvpn
From the ports tree:
cd /usr/ports/security/openvpn/ && make install clean
To depend on this port in another port's Makefile:
RUN_DEPENDS= openvpn>0:security/openvpn
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 2.7.8 | 2.7.8 | 2.5.8 | 2.6.14_1 | 2.7.8 |
| FreeBSD:14:quarterly | 2.7.8 | 2.7.8 | n/a | 2.6.14 | 2.7.8 |
| FreeBSD:15:latest | 2.7.8 | 2.7.8 | n/a | - | 2.6.14_1 |
| FreeBSD:15:quarterly | 2.7.8 | 2.7.8 | n/a | n/a | n/a |
| FreeBSD:16:latest | 2.7.7 | 2.7.8 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Build 2
cmocka>=0: sysutils/cmockarst2man: textproc/py-docutils
Test 1
fping: net/fping
The full lists below include those, and their dependencies in turn.
Build dependencies 13
Run dependencies 4
Configuration
Options name: security_openvpn
| Option | Default | Description |
|---|---|---|
| ASYNC_PUSH | off | Enable async-push support |
| DCO | on | Data Channel Offload/ovpn(4) support->README.dco.md |
| DOCS | off | Build and/or install documentation |
| EASYRSA | on | Install security/easy-rsa RSA helper package |
| EXAMPLES | off | Build and/or install examples |
| LZ4 | on | LZ4 compression support |
| LZO | on | LZO compression (incompatible with LibreSSL) |
| PKCS11 | on | Use security/pkcs11-helper, needs same SSL lib! |
| SMALL | off | Build a smaller executable with fewer features |
| TEST | on | Build and/or run tests |
| UNITTESTS | off | Enable unit tests |
| X509ALTUSERNAME | off | Enable --x509-username-field |
- USES
- cpe libtool localbase:ldflags pkgconfig python:build shebangfix ssl
- Service scripts
openvpn- Conflicts with
- openvpn-devel
Message after installing
Files
Manual pages 2
- openvpn(8)
- openvpn-examples(5)
pkg-plist 9
- include/openvpn-msg.h
- include/openvpn-plugin.h
- lib/openvpn/plugins/openvpn-plugin-auth-pam.so
- lib/openvpn/plugins/openvpn-plugin-down-root.so
- libexec/openvpn/dns-updown
- share/man/man5/openvpn-examples.5.gz
- share/man/man8/openvpn.8.gz
- sbin/openvpn
- sbin/openvpn-client
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| openvpn-2.7.8.tar.gz | 2.123466e+06 | c070d1d2440b5a6fca6c2c68645c98cd492116ac36ef4f0946177115532c8e36 |
Master sites 2
- https://swupdate.openvpn.org/community/releases/
- https://build.openvpn.net/downloads/releases/
Commit history 5
| Date | Commit | Credits | Log message |
|---|---|---|---|
4fbd626e70 |
Matthias Andree | security/openvpn: Security update 2.7.7 => 2.7.8 Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst
PR: 299261
Security: CVE-2026-84790
Security: CVE-2026-88964
Security: CVE-2026-84256
Sponsored by: UNIS Labs (vvd, commit patch)
Pull request: https://github.com/freebsd/freebsd-ports/pull/637
MFH: 2026Q4 |
|
3d91d57f7f |
Matthias Andree | security/openvpn: Security update 2.7.6 => 2.7.7 Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst
PR: 298152
Pull request: https://github.com/freebsd/freebsd-ports/pull/610
Reported by: mandree (maintainer)
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2026-84732
MFH: 2026Q3 |
|
bbddd98141 |
Matthias Andree | security/openvpn: bugfix update to 2.7.6 This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.
Note that the --dev option defaults to "tun" (if not specified).
Note that --ping and --keepalive settings are now capped at 24 h.
TCP-based configurations now always enable TCP_NODELAY.
Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH: 2026Q3
Pull Request: https://github.com/freebsd/freebsd-ports/pull/584 |
|
83283c284c |
Matthias Andree | security/openvpn: Needs addition to SHEBANG_FILES and some cleanup - Remove unnecessary GNU_CONFIGURE_MANPREFIX.
- Improve post-install-EXAMPLES-on.
PR: 296890
Sponsored by: UNIS Labs
Co-authored-by: Vladimir Druzenko <[email protected]>
MFH: 2026Q3 |
|
7bcce8a1bb |
Matthias Andree | security/openvpn: Update 2.7.4 => 2.7.5 (fix 6 CVEs) Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.5/Changes.rst
The upstream's signing sub-key expired yesterday, new key provided via
https://swupdate.openvpn.net/community/keys/gpgkey-F554A3687412CFFEBDEFE0A312F5F7B42F2B01E7.gpg
PR: 296429
Security: ffa897a0-756f-11f1-b291-a74de6bb0320
Security: CVE-2026-11771
Security: CVE-2026-12932
Security: CVE-2026-12996
Security: CVE-2026-13117
Security: CVE-2026-13122
Security: CVE-2026-13698
Sponsored by: UNIS Labs
MFH: 2026Q2 |