FreeBSD Ports

www/mod_gnutls 0.13.0

Extension for Apache httpd using GnuTLS library to provide HTTPS

Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
f6c827424a
License
APACHE20
Categories
www, security
Package size
44.9 KiB, 125.9 KiB installed

Description

mod_gnutls uses the GnuTLS library to provide SSL 3.0, TLS 1.0, TLS 1.1 and 1.2 encryption for Apache HTTPD. It is similar to mod_ssl in purpose, but does not use OpenSSL.

Install

As a binary package — by origin, or by package name:

pkg install www/mod_gnutls
pkg install ap24-mod_gnutls

From the ports tree:

cd /usr/ports/www/mod_gnutls/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	ap24-mod_gnutls>0:www/mod_gnutls

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest0.13.00.13.00.12.00.12.1_10.13.0
FreeBSD:14:quarterly0.13.00.13.0n/a0.12.1_10.13.0
FreeBSD:15:latest0.13.00.13.0n/a0.12.1_10.12.1_1
FreeBSD:15:quarterly0.13.00.13.0n/an/an/a
FreeBSD:16:latest0.13.00.13.0n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Build 1

Library 2

The full lists below include those, and their dependencies in turn.

All build dependencies 33
All run dependencies 26

No port depends on this one.

Configuration

No options to configure.

USES
apache compiler:c11 cpe meson pkgconfig python:build,test tar:bzip2
Service scripts
none

Message after installing

Sample /usr/local/etc/apache24/httpd.conf:

    #LoadModule ssl_module libexec/apache24/mod_ssl.so
    LoadModule gnutls_module libexec/apache24/mod_gnutls.so

    <IfModule gnutls_module>
        Include etc/apache24/extra/httpd-gnutls.conf
    </IfModule>

Sample /usr/local/etc/apache24/extra/httpd-gnutls.conf:

    Listen 443

    GnuTLSCache dbm /usr/local/var/db/mod_gnutls/tls-cache
    GnuTLSCacheTimeout 500

    <VirtualHost _default_:443>
        GnuTLSEnable on
        GnuTLSKeyFile /usr/local/etc/ssl/certs/private/example_com.key.pem
        GnuTLSCertificateFile /usr/local/etc/ssl/certs/example_com.crt.pem
        GnuTLSClientCAFile /usr/local/etc/ssl/certs/example_com.ca.pem
        GnuTLSPriorities NORMAL:%COMPAT
    </VirtualHost>

Files

pkg-plist 5
  • %%APACHEMODDIR%%/
  • @postexec %D/sbin/apxs -e -n %D/%F
  • @postunexec -i '' -E '/LoadModule[[:blank:]]+_module/d' %D/%%APACHEETCDIR%%/httpd.conf
  • @postunexec echo "Don't forget to remove all mod_-related directives in your httpd.conf"
  • @dir(,,750) var/db/mod_
distinfo 1
FileSizeSHA256
mod_gnutls-0.13.0.tar.bz2130405544ad610712034e212d3f3502c9d822d6643640696ab504a154543701e4acdbe
Master sites 1
  • https://github.com/airtower-luna/mod_gnutls/releases/download/mod_gnutls/0.13.0/

Commit history 1

DateCommitCreditsLog message
f6c827424a Jochen Neumeister www/mod_gnutls: Update to 0.13.0
Fixes CVE-2026-33307 and CVE-2026-33308. Upstream switched to Meson and moved off the now dead mod.gnutls.org, so the port follows. 0.13.0 also drops SRP and Monkeysphere support and enforces the client certificate Key Purpose, see GnuTLSClientKeyPurpose. Changelog: https://github.com/airtower-luna/mod_gnutls/releases/tag/mod_gnutls/0.13.0 Security: a7b4cdfc-9f9d-11f1-a655-3497f65b111b Sponsored by: Netzkommune GmbH