BSD Ports

security/p5-openxpki 3.24.2_1 FreeBSD

Perl based trustcenter for PKI: universal server building block

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
License
APACHE20
Categories
security, perl5
Package size
2247.8 KiB, 7438.1 KiB installed

Description

Perl based trustcenter software for private key infrastructure (PKI): universal server building block

In the other systems

SystemPortVersion
FreeBSDsecurity/p5-openxpki3.24.2_1
DragonFlysecurity/p5-openxpki3.24.2_1

Install

Binary package:

pkg install p5-openxpki

From the ports tree:

cd /usr/ports/security/p5-openxpki/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	p5-openxpki>0:security/p5-openxpki

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest3.24.2_13.24.2_13.22.23.24.2_13.24.2_1
FreeBSD:14:quarterly3.24.2_13.24.2_1n/a3.24.2_13.24.2_1
FreeBSD:15:latest3.24.2_13.24.2_1n/a3.24.2_13.24.2_1
FreeBSD:15:quarterly3.24.2_13.24.2_1n/an/an/a
FreeBSD:16:latest3.24.2_13.24.2_1n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Build 73

Runtime 73

Test 1

The full lists below include those, and their dependencies in turn.

Build dependencies 265

The first 100 are listed.

Run dependencies 264

The first 100 are listed.

No port depends on this one.

Configuration

Options name: security_openxpki

OptionDefaultDescription
DOCSoffBuild and/or install documentation
EXAMPLESoffBuild and/or install examples
GRAPHVIZoffWith graphical visualization of workflows?
USES
gmake perl5 shebangfix ssl
Service scripts
openxpki

Message after installing

- Universal server building block (OpenXPKI) for arbitrary PKI: installed.
- i18n tools for UI: installed.
- Enable utf8 locale (e.g. en_US.utf8) for the translation staff to operate
  (translation is needed even for English language).
- Using database
  = Install your favorite database (enable utf8 support), e.g.
    databases/postgresql15-server 
    and perl interface for it, e.g. databases/p5-DBD-Pg
  = Examples, demos and tutorials of OpenXPKI traditionally use MariaDB 
    database. But its use with OpenXPKI on FreeBSD is a bit tricky:
      - Install e.g. databases/mariadb106-server
      - Add value mysql to file /etc/make.conf like this:
        DEFAULT_VERSIONS+= mysql=10.6m
      - cd /usr/ports/databases/p5-DBD-mysql4 && make reinstall
        Note that installing of databases/p5-DBD-MariaDB here may hinder
        operation of your OpeXPKI setup. 
- Install your favorite web server.
  Copy FastCGI scripts from /usr/local/share/examples/openxpki/cgi-bin to the location
  where your web server can use them. Set executable permissions for them.
  Copy htdocs files from /usr/local/share/examples/openxpki/htdocs to the location
  where your web server can use them.
  You can see some samples in /usr/local/share/examples/openxpki/config/apache.
- If you want your server to act just as the simplest CA,
  then the basic deployment procedure is all you need:
  copy sample configuration for this case with
    cp -pR /usr/local/share/examples/openxpki/config/* /usr/local/etc/openxpki/
  and follow advice at:
  https://openxpki.readthedocs.org/en/latest/quickstart.html
  Without this deployment procedure OpenXPKI server would not start.
- If you want more complex role for your server inside the PKI infrastructure,
  then perform further deployment procedure for your server atop
  the basic deployment.
- Oversimplified example scripts and configs are provided herewith for 
  illustration only, and not for production use. All features of OpenXPI in 
  production should be acquired by setting up an appropriate server with 
  needed deployment procedure.  
- This port has created user:group as openxpki:openxpki, which owns
  the OpenXPKI server.
- After first fresh installation, create empty log files as follows
  (assuming your web server is owned by user www):

install -m 660 -o openxpki -g openxpki /dev/null /var/log/openxpki/openxpki.log
install -m 660 -o www -g www /dev/null /var/log/openxpki/webui.log
install -m 660 -o www -g www /dev/null /var/log/openxpki/scep.log
install -m 660 -o www -g www /dev/null /var/log/openxpki/soap.log

- It is essential that www and openpki are two different users in your system.

- Start daemons in this order:
    1) database server,
    2) OpenXPKI server (/usr/local/etc/rc.d/openxpki start),
    3) web server.
- Docs installed (if you opted so) into /usr/local/share/doc/openxpki
- Mind FreeBSD specific file structure:
    /usr/local/etc/openxpki: server configuration, logs configuration.
    /var/openxpki: pid file, socket file, ...
    /var/openxpki/session: session files.
    /var/log/openxpki: server log files.
    /var/tmp: temporary directory.
- Use of openssl/libressl
  = This package comes (from FreeBSD build cluster) bound with 
  openssl from base system, cf: /usr/ports/Mk/Uses/ssl.mk
  If you want to use openssl or libressl from ports instead, then:
    1) add the name of respective port 
       (openssl, openssl30, openssl31, libressl, libressl-devel...)
       to /etc/make.conf file e.g. like this:
       DEFAULT_VERSIONS+= ssl=openssl31
    2) install security/openssl31
    3) cd /usr/ports/security/p5-openxpki && make reinstall
       you do not need to rebuild dependencies, installed from packages.
  = Using versions OpenSSL 1.0 or less can restrict features of the OpenXPI.
  = OpenXPKI builds just fine with any available versions of OpenSSL or 
    LibreSSL. But its operation with LibreSSL, or with OpenSSL 3+ has not
    been fully tested. Report your respective story to the list
      https://sourceforge.net/p/openxpki/mailman/
    or use OpenSSL 1.1.1 instead.

If you update existing installation, please check if extra handwork 
is needed in your case:
http://openxpki.readthedocs.io/en/latest/upgrading.html
https://sourceforge.net/p/openxpki/mailman/message/37607700/

Files

pkg-plist 1492
  • bin/openxpkiadm
  • bin/openxpkicli
  • bin/openxpkicmd
  • bin/openxpkictl
  • %%SITE_PERL%%/OpenXPKI.pm
  • %%SITE_PERL%%/OpenXPKI/Client.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Config.pm
  • %%SITE_PERL%%/OpenXPKI/Client/SCEP.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Service/Base.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Service/RPC.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Service/Response.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Service/Role/PickupWorkflow.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Service/SCEP.pm
  • %%SITE_PERL%%/OpenXPKI/Client/Simple.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Bootstrap.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Bulk.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Cache.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Certificate.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Crl.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Handle/Profile.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Handle/Report.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Handle/Status.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Home.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Information.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Login.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Profile.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Request.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/DTO.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/DTORole.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/Menu.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/OnException.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/OnException/Handler.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/PageInfo.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/Redirect.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/Refresh.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/Section/Form.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/SectionRole.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/Sections.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/Status.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Response/User.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Result.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Secret.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/SessionCookie.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Source.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Users.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Workflow.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Workflow/Action.pm
  • %%SITE_PERL%%/OpenXPKI/Client/UI/Workflow/Init.pm
  • %%SITE_PERL%%/OpenXPKI/Config.pm
  • %%SITE_PERL%%/OpenXPKI/Config/Backend.pm
  • %%SITE_PERL%%/OpenXPKI/Config/Lint/Dummy.pm
  • %%SITE_PERL%%/OpenXPKI/Config/Lint/Role.pm
  • %%SITE_PERL%%/OpenXPKI/Config/Loader.pm
  • %%SITE_PERL%%/OpenXPKI/Connector/DataPool.pm
  • %%SITE_PERL%%/OpenXPKI/Connector/FakeValidity.pm
  • %%SITE_PERL%%/OpenXPKI/Connector/Regex.pm
  • %%SITE_PERL%%/OpenXPKI/Connector/Secret.pm
  • %%SITE_PERL%%/OpenXPKI/Connector/WorkflowContext.pm
  • %%SITE_PERL%%/OpenXPKI/Control.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/CRL.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/DN.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/PKCS10.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/PKCS7.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/PKCS7/CertificateList.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/PKCS7/SCEP.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/PubKey.pm
  • %%SITE_PERL%%/OpenXPKI/Crypt/X509.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/API.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/API.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/CLI.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/asn1_genconf.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_cert.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_crl.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_pkcs10.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_pkcs8.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_pkey.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_params.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_pkcs10.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_pkcs12.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_pkey.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_random.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/decrypt_digest.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/get_pkcs8_keytype.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/get_pubkey.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/is_issuer.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/is_prime.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/issue_cert.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/issue_crl.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/list_algorithms.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_decrypt.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_encrypt.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_get_chain.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_get_payload.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_sign.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_verify.pm
  • %%SITE_PERL%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/sign_digest.pm

The first 100 are listed.

distinfo 2
FileSizeSHA256
openxpki-openxpki-v3.24.2_GH0.tar.gz3.4969529e+07b7528d3dde96c33c56a5e99a44fb2896190625bf9abc9a8597d25ceabbba8531
openxpki-openxpki-config-v3.24_GH0.tar.gz153657677adc87fa8ccbf85ca7c0b42b61c3a628acc18fa57d091df9bfaf5a3ee86704

Commit history 0

No commits in the history this site was built from.