net-im/openfire: Update 5.1.1 => 5.1.2 Changelog: https://download.igniterealtime.org/openfire/docs/5.1.2/changelog.html PR: 298043 Sponsored by: UNIS Labsbbe0b14349
Openfire administration console authentication bypassentered 2024-05-21
Enterprise instant messaging server
# pkg install openfireinstalls 5.1.2,1 from latest; from quarterly (2026Q4) 5.1.2,1# cd /usr/ports/net-im/openfire && make install clean# make -C /usr/ports/net-im/openfire config # change options first
openfire, group openfireTo enable the openfire startup script please add openfire_enable="YES" to your /etc/rc.conf file. The following sample configuration files have been placed in /usr/local/etc/openfire: openfire.xml.sample security.xml.sample java.security.sample keystore.sample truststore.sample client.truststore.sample crowd.properties.sample
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 5.1.2,1 | 5.1.2,1 | – |
| FreeBSD 15 | 5.1.2,1 | 5.1.2,1 | – |
| FreeBSD 14 | 5.1.2,1 | 5.1.2,1 | 5.1.2,1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 5.1.2,1 | 5.1.2,1 | – |
| FreeBSD 14 | 5.1.2,1 | 5.1.2,1 | 5.1.2,1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 5.1.2,1.CVE-2008-1728, CVE-2008-6508, CVE-2008-6509, CVE-2008-6510, CVE-2008-6511, CVE-2009-1595
| PR | Summary | Status | Changed |
|---|---|---|---|
| 296413 | maintainer-feedback? net-im/openfire: compile with openjdk25 | New | 2026-07-02 |
net-im/openfire: Update 5.1.1 => 5.1.2 Changelog: https://download.igniterealtime.org/openfire/docs/5.1.2/changelog.html PR: 298043 Sponsored by: UNIS Labsbbe0b14349
net-im/openfire: Update 5.1.0 => 5.1.1 Changelog: https://download.igniterealtime.org/openfire/docs/5.1.1/changelog.html - Parametrize version in plist. PR: 296981 Sponsored by: UNIS Labs Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org> MFH: 2026Q358376fbc0d
net-im/openfire: Update 5.0.5 => 5.1.0 Changelog: https://download.igniterealtime.org/openfire/docs/5.1.0/changelog.html PR: 296063 Sponsored by: UNIS Labs4716519457
net-im/openfire: Update to 5.0.5 ChangeLog: https://download.igniterealtime.org/openfire/docs/5.0.5/changelog.html Improvement * Display newlines in details of logged SecurityAuditManager events * Do not show 'max users' count for a MUC when it is 0 (unlimited) * Bump BouncyCastle.version from 1.78.1 to 1.84 * LDAP context-close failures are logged without their exception stack trace * Upgrade MySQL Connector/J driver to 8.4.0 release * Upgrade Jetty webserver library to 12.0.35 release * Update org.glassfish.jaxb:jaxb-runtime to the latest of the 2.3.x line Task * Disabled performance benchmark in IQEntityTimeHandlerTest should be removed or converted * Fix malformed link markup in upgrade guide (hre instead of href) * Update postgresql driver to 42.7.11 * MultiUserChatServiceImpl#setIdleUserTaskInterval ignores value Bug * A user's User Group page cannot be used to remove user from group * LDAP authentication logs the wrong exception when the alternate base-DN also fails * PluginIconServlet does not set HTTP Content-Type header for gif * xffHostHeader values not updated * Wrong getter used in ConnectionListenser#setAcceptSelfSignedCertificates PR: 295361 Reported by: nikita@druba.su (maintainer)e39255b2ed
*/*: Pin build dependency to devel/maven38b6f9a7d72b
net-im/openfire: Update 5.0.3 => 5.0.4 Changelog: https://download.igniterealtime.org/openfire/docs/5.0.4/changelog.html PR: 294453 Sponsored by: UNIS Labs Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>af6fc72016
*/*: bump portrevision after java_default=25 update Included all ports that have USES=java. PR: 29355986813e9ccf
*/*: bump portrevision after java_default=21 update PR: 2728552baaf16375
net-im/openfire: Update 5.0.2 => 5.0.3 Changelog: https://download.igniterealtime.org/openfire/docs/5.0.3/changelog.html https://github.com/igniterealtime/Openfire/releases/tag/v5.0.3 PR: 292133ed0fb946e7
net-im/openfire: Fix distinfo Fix hash for openfire-5.0.2-deps.tar.gz. PR: 289984 Approved by: Nikita Druba <nikita@druba.su> (maintainer) Fixes: fbecc2146ffe (Update 5.0.1 => 5.0.2) MFH: 2025Q43d37a84c57
net-im/openfire: Update 5.0.1 => 5.0.2 Changelog: https://download.igniterealtime.org/openfire/docs/5.0.2/changelog.html PR: 289984 Security: CVE-2025-59154 MFH: 2025Q4fbecc2146f
net-im/openfire: Update to 5.0.1 ChangeLog: https://download.igniterealtime.org/openfire/docs/5.0.1/changelog.html Improvement * [OF-3095] - Do not warn about cache max lifetime settings with default values Task * [OF-3096] - Update bundled Search plugin Bug * [OF-3093] - Windows Launcher failure (missing images) * [OF-3094] - Client-to-Server SASL EXTERNAL incorrectly queries for authzid * [OF-3098] - Federated occupants get incorrectly identified as 'ghost' PR: 288030 Reported by: nikita@druba.su (maintainer)6352cebcda
net-im/openfire: Update to 5.0.0 ChangeLog: https://download.igniterealtime.org/openfire/docs/5.0.0/changelog.html PR: 287922 Reported by: nikita@druba.su (maintainer)a73becf371
Mk/**java.mk: Convert bsd.java.mk to USES The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D482010835676e36
net-im/openfire: Update to 4.9.2 ChangeLog: https://download.igniterealtime.org/openfire/docs/4.9.2/changelog.html Bug * LocalIncomingServerSessionTest.incomingTest failures on Rocky Linux 9 / openjdk 11 * Reduce noisy logging of insecure LDAP * Cannot proceed with setup error PR: 283622 Reported by: nikita@druba.su (maintainer)4c607e3646
net-im/openfire: update to 4.9.1 Changelog: https://download.igniterealtime.org/openfire/docs/4.9.1/changelog.html PR: 282552c35c1e16f2
net-im/openfire: Update to 4.8.3 ChangeLog: https://download.igniterealtime.org/openfire/docs/4.8.3/changelog.html Improvement * [OF-2846] - Update zh\_CN translation Bug * [OF-2843] - When admin attempts to ban owner, incorrect error condition is returned * [OF-2844] - Admins and owners must not be able to ban themselves * [OF-2845] - Failing close listener can severely delay closure of connection PR: 280578 Reported by: nikita@druba.su (maintainer)edd162e425
net-im/openfire: Update to 4.8.1 ChangeLog: https://download.igniterealtime.org/openfire/docs/4.8.1/changelog.html Improvement * Give explict names to Netty's threads * Have distinct thread pools for each type of connection * Announce support for PubSub delete-item * Admin Console should warn end-user if plugin installation failed * Guard against a surplus of database connection errors being logged * Upgrade postgresql database driver for CVE-2024-1597 New Feature * Add service administration support Bug * When deleting a user, remove it from transient MUC rooms * Cache data inconsistency: MUC * Deleting an admin user does not remove the name from \`admin.authorizedJIDs\` * Do not use default value for user's creation / last modified date * 4.8.0 not counting "whitespace ping" as session activity * RSS News Feed appears empty * Misbehaving Shared-With-Group option for Contact List sharing * Duplicate \(group\)chat messages are received * SerializableCache appears to be unusable \(ClassCastException on creation\) * SerializableCache instances do not get recreated on cluster switch * Cache-summary page shows wrong stats when using Clustering * Delete MUC-based authorization when deleting user * OccupantManager doesn't remove all items when clustering * Session details shows 'resource' column, but does not show resources * Routing Servers cache inconsistency doesn't list the missing items * Contact List \(Roster\) Sharing changes are not immediately applied * Stream Management Resume fails * Disabling client idle time breaks websockets * Resumed stream is no longer resumable PR: 279237 Reported by: nikita@druba.su (maintainer)bf091cdd79
net-im/openfire: Update to 4.8.0 ChangeLog: https://download.igniterealtime.org/openfire/docs/4.8.0/changelog.html PR: 277054 Reported by: nikita@druba.su (maintainer) Reviewed by: polarian@polarian.dev MFH: 2024Q2 (security fixes) Security: CVE-2023-32315d5618a3ac4
*/*: properly depend on Maven package devel/maven and devel/maven39 do not provide mvn(1) from LOCALBASE that one comes from devel/maven-wrapper instead. Therefore, one should depend on the package rather than a non-existing executable/script. Approved by: jrm (mentor), otis (mentor), vvd Differential Revision: https://reviews.freebsd.org/D4422990e44770f5
net-im/openfire: Update to 4.7.5
ChangeLog: http://download.igniterealtime.org/openfire/docs/4.7.5/changelog.html
Improvement
* Admin console CSS tweaks
* Validate JIDs that are sent by remote servers
* Apply nodeprep on S2S stanza addresses
* Do not default to Chinese locale
* Name threads
* Plugins should have updated SCM references
Task
* Ensure that MUC Room names are nodeprepped
* Update dependency-check to 8.1.2
* Update commons-fileupload to 1.5
* Update mysql-connector from 8.0.28 to 8.0.32
* Update twelvemonkeys imageio-core from 3.5 to 3.7.1 or higher
* Update SQL Server JDBC driver from 7.4.1 to 9.4.1
* Remove protobuf-java from mysql-connector-j
Story
* Update postgresql to 42.4.1
Sub-task
* Improve detection of path traversal
* Add config option for using wildcards in AuthCheckFilter
* Remove wildcard usage in AuthCheckFilter
* Avoid having setup-specific auth-excludes after install
Bug
* Overzealous deletion of child properties
* pubsub should always deliver payloads when items are retrieved.
* Fallback of verifyCertificateValidity for connection listener uses
incorrect setting
* Text formatting error in registration settings
* Fix failing aioxmpp tests
* CVE-2023-32315 Admin Console Auth Bypass
PR: 271922
Reported by: nikita@druba.su (maintainer)eea019d959*/*: Refactor java/openjdk7 removal - java/openjdk7* has been removed from the tree since 2022-09-03 however the relevant codebases in bsd.java.mk has not been removed and the consumers has also not been updated to use the next jdk version. This commit updates all relevant consumers to use JAVA_VERSION=8 instead of JAVA_VERSION=1.7 - Since the introduction of jdk version 18 it looks like similar with jdk version 8(java version string 1.8). This is prone to error as it looks similar and is only seperated by a '.'. Remove using JAVA_VERSION with dotted fomat of java version string and update all consumers to utilize version 8 instead of 1.8. Approved by: portmgr (blanket)4cda17ab14
net-im/openfire: Update to 4.7.4 ChangeLog: http://download.igniterealtime.org/openfire/docs/4.7.4/changelog.html Improvement * Improve performance of MUC, based on stress test profiling * MUC Room history shouldn't be serialized as part of a MUC Room * Reduce resource usage of MUC stats collection * Re-instate MINA JMX monitoring * Prevent retrieving more MUC messages from DB than needed * Add TX/RX, Remove Priority from session summary page * Try loading favicons over HTTPS and HTTP * Improve MUC history load time for single rooms * Deprecate XMLProperties constructors that can't write back * Remove unneeded JID-based lock in MUC * Advertise support for pubsub's "multi-item" feature. Story * Migrate usages of set-output in Github Actions * Upgrade Apache Commons Text from 1.6 to 1.10 Bug * Openfire Docker image fails to start if an empty plugins directory exists * Websocket onError handler prevents earlier data to be processed * openfirectl does not store PID * User lock-out with custom value does not take effect * "Packet sent" session stat remains 0 for BOSH sessions * Group JIDs in MUC rooms without preloading causes issues PR: 268945 Reported by: nikita@druba.su (maintainer)5868d67e16
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
Remove created by lines from multiple ports Approved by: portmgr (implicit)2b6a81259d
net-im/openfire: Update to 4.7.3 ChangeLog: http://download.igniterealtime.org/openfire/docs/4.7.3/changelog.html PR: 266148 Reported by: nikita@druba.su (maintainer)5126e0e613
net-im: remove 'Created by' lines A big Thank You to the original contributors of these ports: * <ports@c0decafe.net> * Adam Weinberger <adamw@FreeBSD.org> * Alberto Villa <avilla@FreeBSD.org> * Alexander Logvinov <ports@logvinov.com> * Alexander Timoshenko <gonzo@univ.kiev.ua> * Andrew Lewis <freeghb@gmail.com> * Andrey Akhmichin <sepulkarium45@yahoo.com> * Bartek Rutkowski <r@robakdesign.com> * Bernard Spil <brnrd@freebsd.org> * Brendan Molloy <brendan+freebsd@bbqsrc.net> * Denis Shaposhnikov <dsh@vlink.ru> * Dennis Herrmann <dhn@FreeBSD.org> * Dmitry Sivachenko <demon@FreeBSD.org> * Emanuel Haupt <ehaupt@FreeBSD.org> * Eugene Grosbein <eugen@FreeBSD.org> * Florent Thoumie <flz@FreeBSD.org> * Frank Altpeter <frank@altpeter.de> * Gea-Suan Lin <gslin@gslin.org> * Geoffrey Mainland <mainland@apeiron.net> * Henry Hu <henry.hu.sh@gmail.com> * Jim Mock <jim@FreeBSD.org> * Joe Marcus Clarke <marcus@FreeBSD.org> * John Prather * Jonathan Chen <jonc@chen.org.nz> * Joseph S. Atkinson <jsatkinson@embarqmail.com> * Junji NAKANISHI <jun-g@daemonfreaks.com> * Kelly Cochran <kcochran@trolans.net> * Koop Mast <kwm@FreeBSD.org> * Kris Moore <kmoore@FreeBSD.org> * Kris Moore <kmoore@freebsd.org> * Lars Eggert <lars.eggert@gmx.net> * Marc Bruenink * Matthew West <mwest@uct.ac.za> * Matthias Fechner <mfechner@FreeBSD.org> * Max E. Kuznecov <mek@mek.uz.ua> * Meethune Bhowmick <meethune@gmail.com> * Michael Johnson <ahze@FreeBSD.org> * Nicola Stanislao Vitale <nivit@FreeBSD.org> * Nicola Vitale <nivit@email.it> * Nikolay Pavlov <qpadla@gmail.com> * Oleg Ginzburg (olevole@olevole.ru) * Pavel Andreev * Saulius Menkevicius <bob@nulis.lt> * SeaD * Seamus Venasse <svenasse@polaris.ca> * Sergey Skvortsov <skv@protey.ru> * Steve Wills <swills@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * TAKATSU Tomonari <tota@FreeBSD.org> * Thierry Thomas <thierry@pompo.net> * Tsung-Han Yeh <snowfly@yuntech.edu.tw> * Vsevolod Stakhov <vsevolod@highsecure.ru> * Wen Heping <wen@FreeBSD.org> * Yen-Ming Lee <leeym@cae.ce.ntu.edu.tw> * Yuri <yuri@tsoft.com> * Yuri Victorovich * Yuri Victorovich <yuri@rawbw.com> * dd * gahr * gnome@freebsd.org * jodocus <jodocus@jodocus.org> * mph * trasz * vsevolod With hat: portmgr103413d55f
net-im/openfire: Update to 4.7.1 ChangeLog: http://download.igniterealtime.org/openfire/docs/4.7.1/changelog.html PR: 262166 Reported by: nikita@druba.su (maintainer) MFH: 2022Q1 many bugfixes7c49399434
net-im/openfire: Update to 4.6.7 ChangeLog: http://download.igniterealtime.org/openfire/docs/4.6.7/changelog.html PR: 261084 Reported by: nikita@druba.su (maintainer)ba15454f17
net-im/openfire: Update to 4.6.6 ChangeLog: https://github.com/igniterealtime/Openfire/releases/tag/v4.5.6 Change MASTER_SITES to point to my LOCAL PR: 260585 Reported by: nikita@druba.su (maintainer)3b1b6f70f5
net-im/openfire: Update to 4.6.5 - Change option names to be more readable - Pet portclippy and portfmt Changes: http://download.igniterealtime.org/openfire/docs/4.6.5/changelog.html PR: 260428 Approved by: philip (mentor) Differential Revision: https://reviews.freebsd.org/D335567c3d90bc94
net-im/openfire: revert commit 138948297672f43af0fa75647288abc84602385d This commit broke the build.65673fb381
net-im/openfire: Switch to USE_GITHUB PR: 256748 Reported by: Daniel Engberg <daniel.engberg.lists AT pyret DOT net>1389482976
net-im/openfire: Update to 4.6.4 PR: 2567483968e59f6c
net-im/openfire: update 4.6.2 -> 4.6.3 PR: 256719 Changes: http://download.igniterealtime.org/openfire/docs/4.6.3/changelog.htmla348ded19d
Clean up some things - Fix typos - Remove duplicate variables - Remove nop variables - Clean up commented PORTREVISION - Add missing USES Reported by: portscan6707a3c942
Remove # $FreeBSD$ from Makefiles.305f148f48
net-im/openfire: update 4.6.1 -> 4.6.2 PR: 253534 Submitted by: Nikita Druba <nikita@druba.su> (maintainer) Relnotes: http://download.igniterealtime.org/openfire/docs/4.6.2/changelog.html50c4894a5c
net-im/openfire: update 4.6.0 -> 4.6.1 PR: 252798 Submitted by: Nikita Druba <nikita@druba.su> (maintainer) Relnotes: http://download.igniterealtime.org/openfire/docs/4.6.1/changelog.html285b42fa30
net-im/openfire: update 4.5.4 -> 4.6.0 PR: 251172 Submitted by: Nikita Druba <nikita@druba.su> (maintainer) Reviewed by: fernape Relnotes: http://download.igniterealtime.org/openfire/docs/4.6.0/changelog.htmlb014de2b89
net-im/openfire: update 4.5.3 -> 4.5.4 PR: 250284 Submitted by: Nikita Druba <nikita@druba.su> (maintainer) Relnotes: http://download.igniterealtime.org/openfire/docs/4.5.4/changelog.htmla9b553dae1
net-im/openfire: Update 4.5.2 -> 4.5.3 There are intermittent build failures in poudriere that need to be investigated. PR: 249442 Submitted by: nikita@druba.su (maintainer)67f110277f
net-im/openfire: update 4.2.3 -> 4.5.2 - submitter becomes maintainer PR: 247090 Submitted by: Nikita Druba <nikita@druba.su> Relnotes: http://download.igniterealtime.org/openfire/docs/latest/changelog.html66bbb54675
Convert to UCL & cleanup pkg-message (categories n) (and missed 3 missed files from previous categories.)2614c95748
net-im/openfire: release maintainership Unfortunately, I can't keep up with the changes happening upstream, especially with the switch to Maven as a build system. See my call for help [1] and please get in touch if you want to help keep this port alive. [1] https://lists.freebsd.org/pipermail/freebsd-ports/2019-January/115404.html1a0b876ea6
net-im/openfire: update to 4.2.3 Changelog: http://download.igniterealtime.org/openfire/docs/4.2.3/changelog.html PR: 229165 Submitted by: dougs@dawnsign.com88c6d799ff
net-im/openfire: update to 4.2.2 Changelog: http://download.igniterealtime.org/openfire/docs/4.2.2/changelog.html63625947d9
net-im/openfire: update to 4.2.1 Changelog: http://download.igniterealtime.org/openfire/docs/4.2.1/changelog.htmlb9ba1ff8da
net-im/openfire: update to 4.2.0 Changelog: http://download.igniterealtime.org/openfire/docs/latest/changelog.htmlaea59f974f