CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/lego 5.5.2_2

Let's Encrypt client and ACME library written in Go

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
matt@matthoran.com
Packages
latest: 5.5.2_2
Upstream
up to date
Last update
to 5.5.2_2 · d81b7ba3c3
Quarterly
2026Q4: 5.5.2_2 · last MFH 60647eff54
WWW
https://github.com/go-acme/lego
Links
cgit · VuXML

Install

Package
# pkg install lego
installs 5.5.2_2 from latest; from quarterly (2026Q4) 5.5.2_2
Port
# cd /usr/ports/security/lego && make install clean
Size
15 MiB download · 65 MiB installed
Depends on
security/ca_root_nss 3.132
License
MIT
Creates
user _lego, group _lego, www
pkg-message
Shown after installing
There are sample scripts in
    /usr/local/etc/lego
that you can use for renewing and deploying certificates.

In order to run the script regularly to update the certificates add this line
to /etc/periodic.conf:

    weekly_lego_enable="YES"

Additionally the following parameters may be added to /etc/periodic.conf:

Script to run to renew certificates, will be run as _lego (required)
    weekly_lego_renewscript="/usr/local/etc/lego/lego.sh"

To run a script after the renewal to deploy certificates
    weekly_lego_deployscript="/usr/local/etc/lego/deploy.sh"

Note that the deploy script is provided as a sample and may need to be modified
for your environment. The script will attempt to deploy certificates to
    /usr/local/etc/ssl/certs
and private keys to
    /usr/local/etc/ssl/private.
The script also tries to restart nginx.

If using the sample renew script, lego will load its configuration from
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details.

To run lego for the first time, configure an account and certificate in
    /usr/local/etc/lego/lego.yml.
Then execute lego as the _lego user:
    $ lego --config /usr/local/etc/lego/lego.yml
Shown after upgrading
To migrate from lego v4 to v5 run

    $ lego migrate --path /usr/local/etc/ssl/lego

as the _lego user. This command migrates to a new file structure and
outputs configuration that can be used as the basis for
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details on the configuration file format.

    /usr/local/etc/lego/lego.sh
will need to be updated as well, as the renew command has been
removed. The script can also be simplified when a configuration file is used.
See
    /usr/local/etc/lego/lego.sh.sample
for an example.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.5.2_25.5.2_1–
FreeBSD 155.5.2_25.5.2_1–
FreeBSD 145.5.2_25.5.2_15.5.2_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.5.2_25.5.2_1–
FreeBSD 145.5.2_25.5.2_15.5.2_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.5.2_2.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (118)

Ashish SHUKLA (ashish) · 4.19.1_1
all: Bump after lang/go123 update
9ac7419a49
Philippe Audeoud (jadawin) · 4.19.1
security/lego: update to 4.19.1

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4191---2024-10-06

PR:		281907
69b6794950
Daniel Engberg (diizzy) · 4.18.0
security/lego: Update to 4.18.0

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4180---2024-08-30

PR:		281170
ac4375a9de
Ashish SHUKLA (ashish) · 4.17.4_2
all: Bump after lang/go122 update
aeb0113515
Ashish SHUKLA (ashish) · 4.17.4_1
all: Bump after lang/go122 update
f36b85a91c
Joel Bodenmann (jbo) · 4.17.4
security/lego: Update to 4.17.4

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4174---2024-06-12

PR:		279818
Approved by:	tcberner (mentor, implicit)
a329465fc1
Ashish SHUKLA (ashish) · 4.17.3_1
all: Bump after lang/go122 update

MFH:		2024Q2
b24868e7be
Gabriel M. Dutra (dutra) · 4.17.3
security/lego: Update to 4.17.3

changeLog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4173---2024-05-28

PR:		279375
Approved by:	submitter is maintainer
db856da95f
Ashish SHUKLA (ashish) · 4.16.1_2
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 4.16.1_1
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Daniel Engberg (diizzy) · 4.16.1
security/lego: Update to 4.16.1

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4161---2024-03-10

PR:		277721
9289a4bfe6
Ashish SHUKLA (ashish) · 4.15.0_1
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Daniel Engberg (diizzy) · 4.15.0
security/lego: Update to 4.15.0

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4150---2024-01-28

PR:		276899
fee0a19718
Ashish SHUKLA (ashish) · 4.14.2_1
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Robert Clausecker (fuz) · 4.14.2
security/lego: update to 4.14.4

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4141---2023-09-20

PR:		273974
815ade2bb2
Dmitri Goutnik (dmgk) · 4.14.0_1
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Koichiro Iwao (meta) · 4.14.0
security/lego: Update to 4.14.0

PR:		273384
Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4140---2023-08-20
e227b4deb6
Dmitri Goutnik (dmgk) · 4.13.3_1
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Daniel Engberg (diizzy) · 4.13.3
security/lego: Update to 4.13.3

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4133---2023-07-25

PR:		272665
e63ad897be
Daniel Engberg (diizzy) · 4.12.1
security/lego: Update to 4.12.1

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4121---2023-06-06

PR:		271957
70fd9dfd1c
Robert Clausecker (fuz) · 4.12.0
security/lego: update to 4.12.0

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4120---2023-05-28

PR:		271806
87a8053dbf
Daniel Engberg (diizzy) · 4.11.0
security/lego: Update to 4.11.0

Changelog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4110---2023-05-02

PR:		271279
ea1a2cf61c
Dmitri Goutnik (dmgk) · 4.10.2_2
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Dmitri Goutnik (dmgk) · 4.10.2_1
all: Bump PORTREVISION after Go ports update
09079730e9
Fernando Apesteguía (fernape) · 4.10.2
security/lego: Update to 4.10.2

ChangeLog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4102---2023-02-26

 * Fix Docker image builds.
 * Fix CNAME support
 * Fix subdomain support

PR:		269867
Reported by:	matt@matthoran.com (maintainer)
470aaa77c1
Dmitri Goutnik (dmgk) · 4.10.0_1
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Daniel Engberg (diizzy) · 4.10.0
security/lego: Update to 4.10.0

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v4100---2023-02-10

PR:		269495
274ca7ad6d
Dmitri Goutnik (dmgk) · 4.9.1_3
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 4.9.1_2
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 4.9.1_1
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Koichiro Iwao (meta) · 4.9.1
security/lego: Update to 4.9.1

PR:		268004
Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v491---2022-11-25
9c424418c3
Dmitri Goutnik (dmgk) · 4.9.0_1
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Fernando Apesteguía (fernape) · 4.9.0
security/lego: Update to 4.9.0

ChangeLog:
https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v490---2022-10-03

Added:

 * Add DNS provider for CIVO
 * Add DNS provider for VK Cloud
 * Add DNS provider for YandexCloud
 * digitalocean: configurable base URL
 * loopia: add configurable API endpoint
 * pdns: notify secondary servers after updates

Changed:

 * allinkl: removed deprecated sha1 hashing
 * auroradns: update authentification
 * dnspod: deprecated. Use Tencent Cloud instead.
 * exoscale: migrate to API v2 endpoints
 * gcloud: update golang.org/x/oauth2
 * lightsail: cleanup
 * sakuracloud: update api client library
 * take out CNAME support from experimental features
 * add recursive CNAME lookup support
 * Remove embedded issuer certificates from issued certificate if bundle is
   false

Fixed:

 * luadns: fix cname support
 * njalla: fix record id unmarshal error
 * tencentcloud: fix subdomain error

PR:		266807
Reported by:	matt@matthoran.com (maintainer)
c4e07980c8
Dmitri Goutnik (dmgk) · 4.8.0_3
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 4.8.0_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.8.0_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 4.8.0_2
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 4.8.0_1
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Nuno Teixeira (eduardo) · 4.8.0
security/lego: Update to 4.8.0

- switch to GO_MODULE

ChangeLog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v480---2022-06-30

PR:		265016
9da465ca0f
Dmitri Goutnik (dmgk) · 4.7.0_1
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Dmitri Goutnik (dmgk) · 4.7.0
security/lego: Update to 4.7.0

Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v470---2022-05-27

PR:		264351
c03f87ac51
Guangyuan Yang (ygy) · 4.6.0_1
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Guangyuan Yang (ygy) · 4.6.0
security/lego: Update to 4.6.0

Changelog:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v460---2022-01-18

PR:		261389
d3b4dae196
Guangyuan Yang (ygy) · 4.5.3
security/lego: Update to 4.5.3

Changelog:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v453---2021-09-06

PR:		259031
c7dae1809a
Daniel Engberg (diizzy) · 4.5.2
security/lego: Update to 4.5.2

Changelog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v452---2021-09-01

PR:		258844
Approved by:	arrowd (mentor)
Differential Revision:	https://reviews.freebsd.org/D32331
95c13b71e3
Guangyuan Yang (ygy) · 4.4.0
security/lego: Update to 4.4.0

Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v440---2021-06-08

PR:		256517
Approved by:	lwhsu (mentor, implicit)
711587f77b
Mathieu Arnold (mat) · 4.3.1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 4.3.1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Lewis Cook (lcook) · 4.3.1
security/lego: Update to 4.3.1

Changes:                https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v431---2021-03-12
PR:                     254228
Submitted by:           Matthew Horan <matt@matthoran.com> (maintainer)
Approved by:            fernape (mentor)
Differential Revision:  https://reviews.freebsd.org/D29241
afba33982e
Dmitri Goutnik (dmgk) · 4.2.0
security/lego: Update to 4.2.0

Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v420---2021-01-24
PR:		253001
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
bfa220e4b0
« newest← newerpage 2 of 3older →oldest »