CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/lego 5.5.2_2

Let's Encrypt client and ACME library written in Go

Port info

Maintainer
matt@matthoran.com
Packages
latest: 5.5.2_2
Upstream
up to date
Last update
to 5.5.2_2 · d81b7ba3c3
Quarterly
2026Q4: 5.5.2_2 · last MFH 60647eff54
WWW
https://github.com/go-acme/lego
Links
cgit · VuXML

Install

Package
# pkg install lego
installs 5.5.2_2 from latest; from quarterly (2026Q4) 5.5.2_2
Port
# cd /usr/ports/security/lego && make install clean
Size
15 MiB download · 65 MiB installed
Depends on
security/ca_root_nss 3.132
License
MIT
Creates
user _lego, group _lego, www
pkg-message
Shown after installing
There are sample scripts in
    /usr/local/etc/lego
that you can use for renewing and deploying certificates.

In order to run the script regularly to update the certificates add this line
to /etc/periodic.conf:

    weekly_lego_enable="YES"

Additionally the following parameters may be added to /etc/periodic.conf:

Script to run to renew certificates, will be run as _lego (required)
    weekly_lego_renewscript="/usr/local/etc/lego/lego.sh"

To run a script after the renewal to deploy certificates
    weekly_lego_deployscript="/usr/local/etc/lego/deploy.sh"

Note that the deploy script is provided as a sample and may need to be modified
for your environment. The script will attempt to deploy certificates to
    /usr/local/etc/ssl/certs
and private keys to
    /usr/local/etc/ssl/private.
The script also tries to restart nginx.

If using the sample renew script, lego will load its configuration from
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details.

To run lego for the first time, configure an account and certificate in
    /usr/local/etc/lego/lego.yml.
Then execute lego as the _lego user:
    $ lego --config /usr/local/etc/lego/lego.yml
Shown after upgrading
To migrate from lego v4 to v5 run

    $ lego migrate --path /usr/local/etc/ssl/lego

as the _lego user. This command migrates to a new file structure and
outputs configuration that can be used as the basis for
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details on the configuration file format.

    /usr/local/etc/lego/lego.sh
will need to be updated as well, as the renew command has been
removed. The script can also be simplified when a configuration file is used.
See
    /usr/local/etc/lego/lego.sh.sample
for an example.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.5.2_25.5.2_1–
FreeBSD 155.5.2_25.5.2_1–
FreeBSD 145.5.2_25.5.2_15.5.2_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.5.2_25.5.2_1–
FreeBSD 145.5.2_25.5.2_15.5.2_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.5.2_2.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (118)

Dag-Erling Smørgrav (des) · 5.5.2_2 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Daniel Engberg (diizzy) · 5.5.2
security/lego: Update to 5.5.2

Changelog: https://github.com/go-acme/lego/releases/tag/v5.5.2

PR:		298892
3351eb189f
Daniel Engberg (diizzy) · 5.5.1
security/lego: Update to 5.5.1

Changelog: https://github.com/go-acme/lego/releases/tag/v5.5.1
f2fc7427f3
Yusuf Yaman (nxjoseph) · 5.4.1
security/lego: Update 5.4.0 => 5.4.1

Changelog:
https://github.com/go-acme/lego/blob/v5.4.1/CHANGELOG.md

PR:		298212
Approved by:	osa, vvd (Mentors, implicit)
114198b2bc
Adam Weinberger (adamw) · 5.4.0_1
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Vladimir Druzenko (vvd) · 5.4.0
security/lego: Update 5.3.1 => 5.4.0

Changelog:
https://github.com/go-acme/lego/blob/v5.4.0/CHANGELOG.md

PR:		297764
Sponsored by:	UNIS Labs
0aefd8a48a
Dag-Erling Smørgrav (des) · 5.3.1_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 5.3.1_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 5.3.1
various: Drop Go 1.25+ version pin

This is a nop since 1.25 is the oldest version we support.
4a24b8eb7f
Daniel Engberg (diizzy) · 5.3.1
security/lego: Update to 5.3.1

Additionally to submitted patch define "min" version of go(lang) and
use GO_LDFLAGS

Changelog: https://github.com/go-acme/lego/blob/HEAD/CHANGELOG.md#v531

PR:		297048
7b0ecf53bd
Dag-Erling Smørgrav (des) · 5.2.2_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Daniel Engberg (diizzy) · 5.2.2
security/lego: Update to 5.2.2

Changelog: https://github.com/go-acme/lego/releases/tag/v5.2.2

PR:		295898
62832b0e10
Dag-Erling Smørgrav (des) · 5.2.1_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Vladimir Druzenko (vvd) · 5.2.1
security/lego: Update 4.35.2 => 5.2.1

Changelog:
https://github.com/go-acme/lego/releases/tag/v5.0.0
https://github.com/go-acme/lego/releases/tag/v5.0.1
https://github.com/go-acme/lego/releases/tag/v5.0.2
https://github.com/go-acme/lego/releases/tag/v5.0.3
https://github.com/go-acme/lego/releases/tag/v5.0.4
https://github.com/go-acme/lego/releases/tag/v5.1.0
https://github.com/go-acme/lego/releases/tag/v5.2.0
https://github.com/go-acme/lego/releases/tag/v5.2.1

While here sort plist.

PR:		295779
Sponsored by:	UNIS Labs
d09c2fdb88
Adam Weinberger (adamw) · 4.35.2_1
various: Bump ports for Go 1.25.10
4e243a83f8
Robert Clausecker (fuz) · 4.35.2
security/lego: Update 4.34.0 => 4.35.2

Changelog: https://github.com/go-acme/lego/blob/v4.35.2/CHANGELOG.md

PR:		294785
Event:		Wiesbaden Hackathon 202604
8e901cfcfc
Vladimir Druzenko (vvd) · 4.34.0
security/lego: Update 4.33.0 => 4.34.0

Changelog:
https://github.com/go-acme/lego/blob/v4.34.0/CHANGELOG.md

PR:		294617
Sponsored by:	UNIS Labs
8a3c0effb9
Dag-Erling Smørgrav (des) · 4.33.0_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Vladimir Druzenko (vvd) · 4.33.0
security/lego: Update 4.32.0 => 4.33.0

Changelog:
https://github.com/go-acme/lego/blob/v4.33.0/CHANGELOG.md

PR:	293965
4a7c793eca
Adam Weinberger (adamw) · 4.32.0_1
various: Bump ports for Go 1.25.8
a8d318da7c
Philippe Audeoud (jadawin) · 4.32.0
security/lego: update to 4.32.0

PR:		293374
ad356652cd
Adam Weinberger (adamw) · 4.31.0_1
various: Bump ports for Go default 1.24->1.25
97685c1886
Vladimir Druzenko (vvd) · 4.31.0
security/lego: Update 4.30.1 => 4.31.0

Changelog:
https://github.com/go-acme/lego/blob/v4.31.0/CHANGELOG.md

PR:	292986
54efdacf35
Adam Weinberger (adamw) · 4.30.1_2
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 4.30.1_1
various: Bump Go ports for 1.24.12
013f2d30b0
Philippe Audeoud (jadawin) · 4.30.1
security/lego: update to 4.31.0

PR:		291758
762aa293ee
Philippe Audeoud (jadawin) · 4.29.0
security/lego: update to 4.29.0

PR:		291350
0856bd7f35
Adam Weinberger (adamw) · 4.28.1_1
various: Bump Go ports for 1.24.11
b24429e3ed
Daniel Engberg (diizzy) · 4.28.1
security/lego: Update to 4.28.1

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4281

PR:		290897
2de7709670
Adam Weinberger (adamw) · 4.28.0_1
various: Bump Go ports for 1.24.10
0dfced16fb
Hiroki Tagato (tagattie) · 4.28.0
security/lego: Update to 4.28.0

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4280

PR:		290720
Reported by:	Matthew Horan <matt@matthoran.com> (maintainer)
a684b78f7a
Vladimir Druzenko (vvd) · 4.27.0
security/lego: Update 4.26.0 => 4.27.0

Changelog:
https://github.com/go-acme/lego/blob/v4.27.0/CHANGELOG.md

PR:	290356
46e6491a94
Adam Weinberger (adamw) · 4.26.0_2
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 4.26.0_1
many: Bump dependent ports after go124 update
2e7587aaf8
Vladimir Druzenko (vvd) · 4.26.0
security/lego: Update 4.25.2 => 4.26.0

Changelog:
https://github.com/go-acme/lego/blob/v4.26.0/CHANGELOG.md

- Fix using custom user.
- Optimize post-install - reduce MKDIR and INSTALL_SCRIPT calls.
- Fix user parametrization in periodic script.

PR:		289636
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
43eed48b66
Adam Weinberger (adamw) · 4.25.2_1
many: Bump go ports for go-1.24.7
31a5a229a7
Älven (alven) · 4.25.2
security/lego: Update 4.25.1 => 4.25.2

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4252-2025-08-06

PR:		288717
Approved by:	yuri@ (Mentor)
a2b29e939c
Adam Weinberger (adamw) · 4.25.1_1
go ports: Bump for 1.24.6
53610681ea
Vladimir Druzenko (vvd) · 4.25.1
security/lego: Update 4.24.0 => 4.25.1

Changelogs:
https://github.com/go-acme/lego/blob/v4.25.1/CHANGELOG.md

While here remove go version from USES.

PR:	288394
29d2f4be24
Hiroki Tagato (tagattie) · 4.24.0
security/lego: update to 4.24.0

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4240-2025-07-07

PR:		288326
Reported by:	Matthew Horan <matt@matthoran.com> (maintainer)
7b4b533524
Zsolt Udvari (uzsolt) · 4.23.1
security/lego: Update to 4.23.1

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4231-2025-04-16

PR:		286163
Approved by:	submitter is maintainer
50a66168da
Adam Weinberger (adamw) · 4.22.2_3
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 4.22.2_2
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 4.22.2_1
all: Bump after lang/go123 update

PR:		284681
f9fbe03c69
Vladimir Druzenko (vvd) · 4.22.2
security/lego: Update 4.21.0 => 4.22.2

Changelogs:
https://github.com/go-acme/lego/blob/v4.22.2/CHANGELOG.md

PR:	284867
35ee704e21
Ashish SHUKLA (ashish) · 4.21.0_1
all: Bump after lang/go123 update

MFH:		2025Q1
ca07a602a8
Daniel Engberg (diizzy) · 4.21.0
security/lego: Update to 4.21.0

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4210-2024-12-20

PR:		283474
cd976e5e82
Robert Clausecker (fuz) · 4.20.4
security/lego: update to 4.20.4

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4204-2024-11-21

PR:		282900
69562de3eb
Zsolt Udvari (uzsolt) · 4.20.2
security/lego: Update to 4.20.2

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4202-2024-11-11

PR:		282719
Approved by:	submitter is maintainer
bbdac7e3b1