CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/ocserv 1.3.0_4

Server implementing the AnyConnect SSL VPN protocol

Port info

Maintainer
otis@FreeBSD.org
Packages
latest: 1.3.0_4
Upstream
Higher version available: 1.6.0
Last update
to 1.3.0_4 · 9cde0cef1a
Quarterly
2026Q4: 1.3.0_4
WWW
https://ocserv.gitlab.io/www/index.html
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install ocserv
installs 1.3.0_4 from latest; from quarterly (2026Q4) 1.3.0_4
Port
# cd /usr/ports/net/ocserv && make install clean
# make -C /usr/ports/net/ocserv config  # change options first
Size
454 KiB download · 1.8 MiB installed
Depends on
archivers/liblz4 1.10.0_2,1, converters/libiconv 1.18_1, devel/libev 4.33_1,1, devel/pcl 1.6_2, devel/protobuf-c 1.5.2, devel/readline 8.3.6, devel/talloc 2.4.1_1, security/gnutls 3.8.13, security/libtasn1 4.21.0, security/nettle 3.10.2, security/oath-toolkit 2.6.14
License
GPLv2+
Creates
user _ocserv, group _ocserv
Options
2 of 5 on in the package: DOCS EXAMPLES
Show the 3 options that are off
GSSAPI MAXMIND RADIUS
pkg-message
Shown always
SECURITY NOTE: ocserv cannot isolate workers processes on FreeBSD,
it only supports Linux's seccomp, but not FreeBSD's capsicum.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.3.0_41.3.0_4–
FreeBSD 151.3.0_41.3.0_4–
FreeBSD 141.3.0_41.3.0_41.3.0_4

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.3.0_41.3.0_4–
FreeBSD 141.3.0_41.3.0_41.3.0_4

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.3.0_4.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (61)

Carlos J. Puga Medina (cpm) · 0.11.3
- Update to 0.11.3 - Add LIB_DEPENDS for security/nettle - Switch to USES=localbase framework

ChangeLog:
  http://lists.infradead.org/pipermail/openconnect-devel/2016-June/003720.html

Reviewed by:	amdmi3, junovitch (mentors)
Approved by:	amdmi3, junovitch (mentors)
Differential Revision:	D6890
00902906d4
Carlos J. Puga Medina (cpm) · 0.11.2
- Update to 0.11.2 release - Remove unneeded patch (applied upstream)

Changelog: http://www.infradead.org/ocserv/changelog.html

Approved by:	junovitch (mentor)
Differential Revision:	D6122
591ec4af87
Carlos J. Puga Medina (cpm) · 0.11.1
- Update to 0.11.1 release - Convert LICENSE= "GPLxx# or later" to "GPLxx+" - Add dependency on libev - Regenerate patches - Add MAKE_JOBS_UNSAFE; port attempts to modify man page before generation   sed: ocpasswd.8: No such file or directory

Changelog:	http://lists.infradead.org/pipermail/openconnect-devel/2016-March/003551.html

Approved by:	junovitch (mentor)
Differential Revision:	D5890
20aa0af3f2
Mathieu Arnold (mat) · 0.10.12_1
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Tijl Coosemans (tijl) · 0.10.12_1
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol   supported by libgnutls-dane and gnutls-cli.  Also clarify the option   description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4.  Some ports used this library   in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed.  Ports t

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)
6bc6f3a9e0
Carlos J. Puga Medina (cpm) · 0.10.12
- Update to 0.10.12 - Update MAINTAINER to my @FreeBSD.org address

PR:		207824
Approved by:	junovitch (mentor)
69c2420a58
Carlos J. Puga Medina (cpm) · 0.10.11
- Update to 0.10.11

Changes:
   http://lists.infradead.org/pipermail/openconnect-devel/2016-January/003362.html

PR:		205244
Submitted by:	Carlos J. Puga Medina <cpm@fbsd.es>
Approved by:	junovitch (mentor)
6fdae35bd2
Kurt Jaeger (pi) · 0.10.9
net/ocserv: 0.10.8 -> 0.10.9

Changes: http://www.infradead.org/ocserv/changelog.html

PR:		203739
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
4d9ce8f9cd
Dmitry Marakasov (amdmi3) · 0.10.8
- Switch to options helpers - Pet portlint

Approved by:	portmgr blanket
340b0dbddc
Kurt Jaeger (pi) · 0.10.8
net/ocserv: 0.10.7 -> 0.10.8

- Update to 0.10.8 release
- Add libtasn1 dependency
- Fix patches

PR:		202936
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
6319169a79
Kurt Jaeger (pi) · 0.10.7
New port: net/ocserv: server implementing the AnyConnect SSL VPN protocol

OpenConnect server (ocserv) is an SSL VPN server. Its purpose is
to be a secure, small, fast and configurable VPN server. It implements
the OpenConnect SSL VPN protocol, and has also (currently experimental)
compatibility with clients using the AnyConnect SSL VPN protocol.
The OpenConnect protocol provides a dual TCP/UDP VPN channel, and
uses the standard IETF security protocols to secure it. Both IPv4
and IPv6 are supported.

Ocserv's main features are security through provilege separation
and sandboxing, accounting, and resilience due to a combined use
of TCP and UDP.  Authentication occurs in an isolated security
module process, and each user is assigned an unprivileged worker
process, and a networking (tun) device. That not only eases the
control of the resources of each user or group of users, but also
prevents data leak (e.g., heartbleed-style attacks), and privilege
escalation due to any bug on the VPN handling (worker) process. A
management interface allows for viewing and querying logged-in
users.

WWW: http://www.infradead.org/ocserv/

PR:		202253
Submitted by:	Carlos Jacobo Puga Medina <cpm@fbsd.es>
Reviewed by:	pi
81bf447722