BSD Ports

security/step-certificates 0.30.2_7 FreeBSD

Smallstep step_ca certificates server

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
d81b7ba3c3
License
APACHE20
Categories
security
Package size
10804.3 KiB, 45515.4 KiB installed

Description

This port contains the Smallstep step-ca certificates component

It can be used together with the Smallstep step-ca client. step-ca is a local CA. It can be used to create your own local PKI Infrastructure and includes things like e.g. the possibility to have your own ACME server.

A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Install

Binary package:

pkg install step-certificates

From the ports tree:

cd /usr/ports/security/step-certificates/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	step-certificates>0:security/step-certificates

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest0.30.2_60.30.2_6-0.28.40.30.2_6
FreeBSD:14:quarterly0.30.2_60.30.2_6n/a0.28.1_40.30.2_6
FreeBSD:15:latest0.30.2_60.30.2_6n/a0.28.40.28.4
FreeBSD:15:quarterly0.30.2_60.30.2_6n/an/an/a
FreeBSD:16:latest0.30.2_50.30.2_6n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Library 1

Runtime 1

The full lists below include those, and their dependencies in turn.

Build dependencies 28
Run dependencies 28

No port depends on this one.

Configuration

No options to configure.

USES
go:modules
Service scripts
step_ca

Message after installing

================================================================================
Step Certificates requires additional configuration:

The simple way is via the service start script step_ca with:
service step_ca configure
When there is no configuration it will be created. User input is required!!!

The hard way would be manually via the step command.

Ensure to set the STEPPATH environment variable. This makes using the
commands much simpler.

Following are the defaults for step certificates and can be overridden by rc.conf variables::
* The service is run under user step customizable by step_ca_user
* The service is run inder group step customizable by step_ca_group
* The base directory used for storing CA information is step_ca_stepdir (%%PREFIX%%/etc/step)
* The CA informations is held under step_ca_steppath (%%PREFIX%%/etc/step/ca)
* The password required for automatic startup is in step_ca_password (%%PREFIX%%/etc/step/password.txt)
* By default step certificates logs to syslog with a tag of step_ca

Due to an inconsistency between this message and the rc-script, the rc-script has been renamed from step-ca to step_ca in v0.28.1.
Please be aware of this if you call the rc-script from a custom script.
================================================================================

Files

pkg-plist 47
  • sbin/step-ca
  • @dir etc/step
  • share/doc/step-certificates/CHANGELOG.md
  • share/doc/step-certificates/CONTRIBUTING.md
  • share/doc/step-certificates/README.md
  • share/doc/step-certificates/SECURITY.md
  • share/doc/step-certificates/basic-client/client.go
  • share/doc/step-certificates/basic-federation/client/main.go
  • share/doc/step-certificates/basic-federation/pki/cloud/certs/intermediate_ca.crt
  • share/doc/step-certificates/basic-federation/pki/cloud/certs/kubernetes_root_ca.crt
  • share/doc/step-certificates/basic-federation/pki/cloud/certs/root_ca.crt
  • share/doc/step-certificates/basic-federation/pki/cloud/config/ca.federated.json
  • share/doc/step-certificates/basic-federation/pki/cloud/config/ca.json
  • share/doc/step-certificates/basic-federation/pki/cloud/secrets/intermediate_ca_key
  • share/doc/step-certificates/basic-federation/pki/cloud/secrets/root_ca_key
  • share/doc/step-certificates/basic-federation/pki/kubernetes/certs/cloud_root_ca.crt
  • share/doc/step-certificates/basic-federation/pki/kubernetes/certs/intermediate_ca.crt
  • share/doc/step-certificates/basic-federation/pki/kubernetes/certs/root_ca.crt
  • share/doc/step-certificates/basic-federation/pki/kubernetes/config/ca.federated.json
  • share/doc/step-certificates/basic-federation/pki/kubernetes/config/ca.json
  • share/doc/step-certificates/basic-federation/pki/kubernetes/secrets/intermediate_ca_key
  • share/doc/step-certificates/basic-federation/pki/kubernetes/secrets/root_ca_key
  • share/doc/step-certificates/basic-federation/server/main.go
  • share/doc/step-certificates/bootstrap-client/client.go
  • share/doc/step-certificates/bootstrap-mtls-server/server.go
  • share/doc/step-certificates/bootstrap-tls-server/server.go
  • share/doc/step-certificates/docker/ca/pki/secrets/root_ca.crt
  • share/doc/step-certificates/docker/ca/pki/secrets/root_ca_key
  • share/doc/step-certificates/docker/docker-compose.yml
  • share/doc/step-certificates/docker/nginx/Dockerfile
  • share/doc/step-certificates/docker/nginx/certwatch.sh
  • share/doc/step-certificates/docker/nginx/entrypoint.sh
  • share/doc/step-certificates/docker/nginx/site.conf
  • share/doc/step-certificates/docker/password.txt
  • share/doc/step-certificates/docker/renewer/Dockerfile
  • share/doc/step-certificates/docker/renewer/crontab
  • share/doc/step-certificates/docker/renewer/entrypoint.sh
  • share/doc/step-certificates/pki/config/ca.json
  • share/doc/step-certificates/pki/secrets/intermediate_ca.crt
  • share/doc/step-certificates/pki/secrets/intermediate_ca_key
  • share/doc/step-certificates/pki/secrets/root_ca.crt
  • share/doc/step-certificates/pki/secrets/root_ca_key
  • share/doc/step-certificates/puppet/ca.json.erb
  • share/doc/step-certificates/puppet/defaults.json.erb
  • share/doc/step-certificates/puppet/step.pp
  • share/doc/step-certificates/puppet/step_ca.pp
  • share/doc/step-certificates/puppet/tls_server.pp
distinfo 2
FileSizeSHA256
go/security_step-certificates/step-certificates-v0.30.2/v0.30.2.mod8646c4a90f197698ed952946c25f6ed180770513deeb0f900d8e17a58e3519c22fb1
go/security_step-certificates/step-certificates-v0.30.2/v0.30.2.zip1.186952e+067f8d8b9bc0ff69bed8334750b41a486f1d942c5993be8ab3b399a6b8a3d790e4

Commit history 6

DateCommitCreditsLog message
d81b7ba3c3 Dag-Erling Smørgrav various: Bump Go ports for Go 1.26.10 / 1.27.3
031fc6bfbf Dag-Erling Smørgrav various: Bump Go ports
dd0905142a Adam Weinberger many: Bump go ports for 1.26.8 and 1.27.1
4867821cd6 Dag-Erling Smørgrav various: Bump go ports for go-1.25.14 / 1.26.7
6d39dcf04e Dag-Erling Smørgrav various: Bump go ports for go-1.25.13 / 1.26.6

The latest 5 of 6 in the history this site was built from.