| Port details |
- easy-rsa Small RSA key management package based on openssl
- 3.1.7 security
 =17      3.1.7Version of this port present on the latest quarterly branch. - Maintainer: mandree@FreeBSD.org
- Port Added: 2013-01-13 21:35:17
- Last Update: 2023-10-16 20:25:02
- Commit Hash: 026d3f6
- People watching this port, also watch:: pkg, openvpn, ca_root_nss, curl, sqlite3
- Also Listed In: net-mgmt
- License: GPLv2
- WWW:
- https://github.com/OpenVPN/easy-rsa
- Description:
- Easy-RSA is a small RSA key management package, based on the openssl
command line tool, that can be found in the easy-rsa subdirectory of the
OpenVPN distribution. While this tool is primary concerned with key
management for the SSL VPN application space, it can also be used for
building web certificates.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- easy-rsa>0:security/easy-rsa
- Conflicts:
- CONFLICTS_INSTALL:
- Conflicts Matches:
-
There are no Conflicts Matches for this port. This is usually an error.
- To install the port:
- cd /usr/ports/security/easy-rsa/ && make install clean
- To add the package, run one of these commands:
- pkg install security/easy-rsa
- pkg install easy-rsa
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: easy-rsa
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1697487333
SHA256 (EasyRSA-3.1.7.tgz) = aaa48fadcbb77511b9c378554ef3eae09f8c7bc149d6f56ba209f1c9bab98c6e
SIZE (EasyRSA-3.1.7.tgz) = 81373
Packages (timestamps in pop-ups are UTC):
- This port has no dependencies.
- This port is required by:
- for Run
-
- security/openvpn
- security/openvpn-devel
-
Deleted ports which required this port:
- * - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...
Configuration Options:- ===> The following configuration options are available for easy-rsa-3.1.7:
DOCS=on: Build and/or install documentation
EXAMPLES=on: Build and/or install examples
===> Use 'make config' to modify these settings
- Options name:
- security_easy-rsa
- USES:
- tar:tgz
- pkg-message:
- NOTE: easy-rsa will require you to initialize a pki ONLY UPON FIRST USE.
The packaging itself no longer does this because that would confuse easy-rsa,
and easy-rsa expects the vars not to be per-installation, but per-PKI.
ONLY for the very first run for a new PKI, do something such as:
easyrsa --pki-dir=~/my_new_pki init-pki # DANGEROUS - DESTROYS ~/my_new_pki
which will copy vars.example both into ~/my_new_pki
and create another copy named ~/my/new_pki/vars for you to edit for this PKI.
Then, edit ~/my/new_pki/vars to set the defaults.
After upgrades, use other commands, explained by running: easyrsa help.
to explain options such as --pki-dir (see above), run: easyrsa help options
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
3.1.7
16 Oct 2023 20:25:02
 |
Matthias Andree (mandree) |
security/easy-rsa: update to 3.1.7
Changelog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.7 |
3.1.6
18 Aug 2023 17:15:07
|
Matthias Andree (mandree) |
security/easy-rsa: update to 3.1.6
Quoting its changes:
* New commands: 'inline' and 'x509-eku' (#993)
inline: Build an inline file for a commonName
x509-eku: Extract X509v3 extended key usage from a certificate
* Expose serial-check, display-dn, display-san and default-san to
command line. (#980) (Debugging functions, which remain undocumented)
* Expand default status to include vars-file and CA status (#973)
* sign-req: Allow the CSR DN-field order to be preserved (#970) |
3.1.5
11 Jun 2023 14:27:43
|
Matthias Andree (mandree) |
security/easy-rsa: update to v3.1.5
Changelog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.5 |
3.1.4
25 May 2023 00:23:55
|
Matthias Andree (mandree) |
security/easy-rsa: update to v3.1.4
ChangeLog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.4
MFH: 2023Q2 |
3.1.3
19 May 2023 13:07:53
|
Matthias Andree (mandree) |
security/easy-rsa: update 3.1.2 → 3.1.3
ChangeLog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.3 |
3.1.2
13 Jan 2023 23:01:42
|
Matthias Andree (mandree) |
security/easy-rsa: update to v3.1.2
ChangeLog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.2 |
3.1.1
15 Oct 2022 08:21:21
|
Matthias Andree (mandree) |
security/easy-rsa: update to v3.1.1
Changelog: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.1
Detailed: https://github.com/OpenVPN/easy-rsa/compare/v3.1.0...v3.1.1
also fixes
PR: 266727
Reported by: topical@gmx.net |
3.1.0_3
02 Oct 2022 09:08:17
|
Matthias Andree (mandree) |
security/easy-rsa: sed \s -> [[:space:]]
Fix https://github.com/OpenVPN/easy-rsa/issues/714
Patch suggested (needed to be integrated) and
Reported by: topical@gmx.net
PR: 266726
MFH: 2022Q4 |
07 Sep 2022 21:58:51
|
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
3.1.0_2
07 Sep 2022 21:10:59
|
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above  ) |
3.1.0_2
05 Jun 2022 12:57:25
|
Matthias Andree (mandree) |
security/easy-rsa: fix EASYRSA override and locale
* remove our own wrapper, overriding the EASYRSA folder is no
longer working since 3.1.0.
* patch EasyRSA to unset LC_ALL and override LC_TIME, to avoid
date command failures
* bump PORTREVISION=2
see comment #7 ff. of
PR: 264415 |
3.1.0_1
02 Jun 2022 21:29:43
|
Matthias Andree (mandree) |
security/easy-rsa: fix confusion of vars file
...and no longer package it as @sample. It is per-PKI, and easyrsa init-pki
will copy vars.example from the distribution, and create a PKI-local copy
named vars. Should fix grembo@'s bug report [1]
add a new pkg-message file to explain this.
while here, add a convenience hardlink easy-rsa to the easyrsa wrapper,
to have an executable matching the package name.
PR: 264415
Reported by: grembo@ (Michael Gmelin) |
3.1.0
21 May 2022 13:10:05
|
Matthias Andree (mandree) |
security/easy-rsa: update to 3.1.0
3.1.0 (2022-05-18)
* Introduce basic support for OpenSSL version 3 (#492)
* Update regex in grep to be POSIX compliant (#556)
* Introduce status reporting tools (#555 & #557)
* Display certificates using UTF8 (#551)
* Allow certificates to be created with fixed date offset (#550)
* Add 'verify' to verify certificate against CA (#549)
* Add PKCS#12 alias 'friendlyName' (#544)
* Disallow use of '--vars=FILE init-pki' (#566)
* Support multiple IP-Addresses in SAN (#564)
* Add option '--renew-days=NN', custom renew grace period (#557)
* Add 'nopass' option to the 'export-pkcs' functions (#411)
* Add support for 'busybox' (#543) (Only the first 15 lines of the commit message are shown above ) |
3.0.8_1
06 May 2022 17:34:51
|
Matthias Andree (mandree) |
security/easy-rsa: fix cert issuance with BSD grep
easyrsa running on systems with bsdgrep for grep
fails issuing certs because it attempts \d as shorthand for
[[:digit:]] or [0-9] and triggers a grep failure with diagnostic
grep: trailing backslash (\)
Filed upstream: https://github.com/OpenVPN/easy-rsa/issues/556
PR: 263812
Submitted by: grembo@ |
3.0.8
25 Nov 2021 21:40:11
|
Stefan Eßer (se) |
*/*: Remove redundant '-*' from CONFLICTS definitions
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket) |
3.0.8
07 Apr 2021 08:09:01
|
Mathieu Arnold (mat) |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
3.0.8
06 Apr 2021 14:31:07
|
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
3.0.8
19 Sep 2020 07:49:11
 |
mandree |
security/easy-rsa: update to 3.0.8
* Provide --version option (#372)
* Version information now within generated certificates like on *nix
* Fixed issue where gen-dh overwrote existing files without warning (#373)
* Fixed issue with ED/EC certificates were still signed by RSA (#374)
* Added support for export-p8 (#339)
* Clarified error message (#384)
* 2->3 upgrade now errors and prints message when vars isn't found (#377) |
3.0.7
31 Mar 2020 00:36:54
|
mandree |
security/easy-rsa: Update to v3.0.7
FreeBSD-relevant ChangeLog extract since 3.0.6:
* Remove RANDFILE environment variable (#261)
* Workaround for bug in win32 mktemp (#247, #305, PR #312)
* Handle IP address in SAN and renewals (#317)
* Workaround for ash and no set -o echo (#319)
* Shore up windows testing framework (#314)
* Provide upgrade mechanism for older versions of EasyRSA (#349)
* Add support for KDC certificates (#322)
* Add support for Edward Curves (#354, #350)
* Add support for EASYRSA_PASSIN and EASYRSA_PASSOUT env vars (#368)
* Add support for RID to SAN (#362)
Update WWW: link in pkg-descr.
Remove patches that have been integrated upstream.
Shuffle USES=-line to please portlint.
Add NO_ARCH=yes, since this is all scripts and text.
Reported by: Eric F Crist (upstream maintainer) |
3.0.6
23 Mar 2019 11:11:25
|
mandree |
security/easy-rsa: update to 3.0.6
ChangeLog: <https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.6>
This also includes a cherry-pick for Issue #261 that happened
only after v3.0.6, <https://github.com/OpenVPN/easy-rsa/issues/261> |
3.0.5_1
15 Sep 2018 15:30:23
|
mandree |
Fix security/easy-rsa regression that broke bootstrapping.
v3.0.5 added code that expanded variables, for compatibility with LibreSSL.
This code assumed that the source configuration file could be variable-
expanded and the result could be saved next to the source - which it
cannot, since the latter is under ${PREFIX} where the unprivileged users
should not be able to write.
Add a patch provided by Eric Crist, and rename another file to keep
a sane patch order. |
3.0.5
15 Sep 2018 13:22:32
|
mandree |
Mark broken pending a band-aid fix from upstream. |
3.0.5
15 Sep 2018 12:55:34
|
mandree |
Update security/easy-rsa to 3.0.5 release.
ChangeLog: <https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.5> |
3.0.4
25 Jun 2018 19:00:26
|
mandree |
Upgrade Easy-RSA to v3.0.4
Upstream's ChangeLog (without Windows-/Travis related changes) since v3.0.1:
* Remove use of egrep (#154)
* Remove "local" from variable assignment (#165)
* Assign values to variables defined previously w/local
* Finally(?) fix the subjectAltName issues presented earlier (really fixes #168)
* copy CSR extensions into signed certificate |
3.0.1_1
11 Jan 2018 14:18:01
|
danfe |
Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files that are not actually manual pages (part 2). |
3.0.1_1
17 Feb 2016 20:36:46
|
mandree |
Install openssl-1.0.cnf as well (EasyRSA-3.0 specific).
Originally install it as ${DATADIR}/*.example and mark it as @sample in
pkg-plist, so that it gets copied to the real file name on installation,
and will not be removed if modified by the user.
Submitted by: Michele Possamai (e-mail kept private) |
3.0.1
11 Jan 2016 23:27:56
|
mandree |
Repair breakage on older make implementations (FreeBSD 9.3). |
3.0.1
11 Jan 2016 23:23:01
|
mandree |
Update security/easy-rsa to major release 3.0.1.
Move a copy of the older package to security/easy-rsa2,
add CONFLICTS_INSTALL markers, and an UPDATING entry.
Changelog: <https://github.com/OpenVPN/easy-rsa/releases> |
2.2.2
21 May 2015 05:08:49
|
bdrewery |
Update to 2.2.2.
Changes:
- Default KEY_SIZE to 2048 bits
- Default the signing hash to SHA256 rather than SHA1 and MD5
- vars cleanups
- pkitool cleanups
- pkitool -days fix for https://community.openvpn.net/openvpn/ticket/198
Approved by: 2 year old fix for SHA1->SHA256. |
2.2.0.m
13 Nov 2014 09:02:57
|
antoine |
Cleanup plist |
2.2.0.m
25 Sep 2013 00:54:09
|
bdrewery |
- Remove NO_STAGE as these have been tested to be safe
With hat: portmgr |
2.2.0.m
20 Sep 2013 22:55:26
|
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
security) |
2.2.0.m
29 Mar 2013 19:33:42
|
cs |
- Remove A/An in COMMENT
- Trim Header where applicable |
2.2.0.m
13 Jan 2013 21:35:06
|
mandree |
Add a new security/easy-rsa package that contains the bits that got
split out of OpenVPN prior to the current 2.3.0 release, and make that
security/openvpn RUN_DEPENDS on it. Also update UPDATING record. |
As an Amazon Associate I earn from qualifying purchases.