- Update to 0.11.3 - Add LIB_DEPENDS for security/nettle - Switch to USES=localbase framework ChangeLog: http://lists.infradead.org/pipermail/openconnect-devel/2016-June/003720.html Reviewed by: amdmi3, junovitch (mentors) Approved by: amdmi3, junovitch (mentors) Differential Revision: D689000902906d4
Port details
net/ocserv 1.3.0_4
Server implementing the AnyConnect SSL VPN protocol
Port info
- Maintainer
- otis@FreeBSD.org
- Packages
- latest: 1.3.0_4
- Upstream
- Higher version available: 1.6.0
- Last update
- to 1.3.0_4 · 9cde0cef1a
- Quarterly
- 2026Q4: 1.3.0_4
- WWW
- https://ocserv.gitlab.io/www/index.html
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install ocservinstalls 1.3.0_4 fromlatest; fromquarterly(2026Q4) 1.3.0_4- Port
# cd /usr/ports/net/ocserv && make install clean# make -C /usr/ports/net/ocserv config # change options first
- Size
- 454 KiB download · 1.8 MiB installed
- Depends on
- archivers/liblz4 1.10.0_2,1, converters/libiconv 1.18_1, devel/libev 4.33_1,1, devel/pcl 1.6_2, devel/protobuf-c 1.5.2, devel/readline 8.3.6, devel/talloc 2.4.1_1, security/gnutls 3.8.13, security/libtasn1 4.21.0, security/nettle 3.10.2, security/oath-toolkit 2.6.14
- License
- GPLv2+
- Creates
- user
_ocserv, group_ocserv - Options
- 2 of 5 on in the package: DOCS EXAMPLES
Show the 3 options that are off
GSSAPI MAXMIND RADIUS - pkg-message
Shown always
SECURITY NOTE: ocserv cannot isolate workers processes on FreeBSD, it only supports Linux's seccomp, but not FreeBSD's capsicum.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.3.0_4 | 1.3.0_4 | – |
| FreeBSD 15 | 1.3.0_4 | 1.3.0_4 | – |
| FreeBSD 14 | 1.3.0_4 | 1.3.0_4 | 1.3.0_4 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.3.0_4 | 1.3.0_4 | – |
| FreeBSD 14 | 1.3.0_4 | 1.3.0_4 | 1.3.0_4 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.3.0_4.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (61)
- Update to 0.11.2 release - Remove unneeded patch (applied upstream) Changelog: http://www.infradead.org/ocserv/changelog.html Approved by: junovitch (mentor) Differential Revision: D6122591ec4af87
- Update to 0.11.1 release - Convert LICENSE= "GPLxx# or later" to "GPLxx+" - Add dependency on libev - Regenerate patches - Add MAKE_JOBS_UNSAFE; port attempts to modify man page before generation sed: ocpasswd.8: No such file or directory Changelog: http://lists.infradead.org/pipermail/openconnect-devel/2016-March/003551.html Approved by: junovitch (mentor) Differential Revision: D589020aa0af3f2
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.
With hat: portmgr
Sponsored by: Absolight8d6597e0bb- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol supported by libgnutls-dane and gnutls-cli. Also clarify the option description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4. Some ports used this library in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed. Ports t net-im/jabber: This port used the old API to give users fine grained control over which crypto algorithms were used via a configuration file. It's not immediately obvious how to port this to the new API so the port always uses the defaults now. www/hydra: Mark BROKEN. This uses more removed calls than the other ports, is said to be alpha quality and not fully functional and has been abandoned 10 years ago. PR: 207768 Exp-run by: antoine Approved by: portmgr (antoine)6bc6f3a9e0
- Update to 0.10.12 - Update MAINTAINER to my @FreeBSD.org address PR: 207824 Approved by: junovitch (mentor)69c2420a58
- Update to 0.10.11 Changes: http://lists.infradead.org/pipermail/openconnect-devel/2016-January/003362.html PR: 205244 Submitted by: Carlos J. Puga Medina <cpm@fbsd.es> Approved by: junovitch (mentor)6fdae35bd2
net/ocserv: 0.10.8 -> 0.10.9 Changes: http://www.infradead.org/ocserv/changelog.html PR: 203739 Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer)4d9ce8f9cd
- Switch to options helpers - Pet portlint Approved by: portmgr blanket340b0dbddc
net/ocserv: 0.10.7 -> 0.10.8 - Update to 0.10.8 release - Add libtasn1 dependency - Fix patches PR: 202936 Submitted by: Carlos J Puga Medina <cpm@fbsd.es> (maintainer)6319169a79
New port: net/ocserv: server implementing the AnyConnect SSL VPN protocol OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect protocol provides a dual TCP/UDP VPN channel, and uses the standard IETF security protocols to secure it. Both IPv4 and IPv6 are supported. Ocserv's main features are security through provilege separation and sandboxing, accounting, and resilience due to a combined use of TCP and UDP. Authentication occurs in an isolated security module process, and each user is assigned an unprivileged worker process, and a networking (tun) device. That not only eases the control of the resources of each user or group of users, but also prevents data leak (e.g., heartbleed-style attacks), and privilege escalation due to any bug on the VPN handling (worker) process. A management interface allows for viewing and querying logged-in users. WWW: http://www.infradead.org/ocserv/ PR: 202253 Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es> Reviewed by: pi81bf447722