CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/lego 5.5.2_2

Let's Encrypt client and ACME library written in Go

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
matt@matthoran.com
Packages
latest: 5.5.2_2
Upstream
up to date
Last update
to 5.5.2_2 · d81b7ba3c3
Quarterly
2026Q4: 5.5.2_2 · last MFH 60647eff54
WWW
https://github.com/go-acme/lego
Links
cgit · VuXML

Install

Package
# pkg install lego
installs 5.5.2_2 from latest; from quarterly (2026Q4) 5.5.2_2
Port
# cd /usr/ports/security/lego && make install clean
Size
15 MiB download · 65 MiB installed
Depends on
security/ca_root_nss 3.132
License
MIT
Creates
user _lego, group _lego, www
pkg-message
Shown after installing
There are sample scripts in
    /usr/local/etc/lego
that you can use for renewing and deploying certificates.

In order to run the script regularly to update the certificates add this line
to /etc/periodic.conf:

    weekly_lego_enable="YES"

Additionally the following parameters may be added to /etc/periodic.conf:

Script to run to renew certificates, will be run as _lego (required)
    weekly_lego_renewscript="/usr/local/etc/lego/lego.sh"

To run a script after the renewal to deploy certificates
    weekly_lego_deployscript="/usr/local/etc/lego/deploy.sh"

Note that the deploy script is provided as a sample and may need to be modified
for your environment. The script will attempt to deploy certificates to
    /usr/local/etc/ssl/certs
and private keys to
    /usr/local/etc/ssl/private.
The script also tries to restart nginx.

If using the sample renew script, lego will load its configuration from
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details.

To run lego for the first time, configure an account and certificate in
    /usr/local/etc/lego/lego.yml.
Then execute lego as the _lego user:
    $ lego --config /usr/local/etc/lego/lego.yml
Shown after upgrading
To migrate from lego v4 to v5 run

    $ lego migrate --path /usr/local/etc/ssl/lego

as the _lego user. This command migrates to a new file structure and
outputs configuration that can be used as the basis for
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details on the configuration file format.

    /usr/local/etc/lego/lego.sh
will need to be updated as well, as the renew command has been
removed. The script can also be simplified when a configuration file is used.
See
    /usr/local/etc/lego/lego.sh.sample
for an example.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.5.2_25.5.2_1–
FreeBSD 155.5.2_25.5.2_1–
FreeBSD 145.5.2_25.5.2_15.5.2_2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.5.2_25.5.2_1–
FreeBSD 145.5.2_25.5.2_15.5.2_2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.5.2_2.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (118)

Fernando Apesteguía (fernape) · 4.1.3
security/lego: Update to 4.1.3

ChangeLog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v413---2020-11-25

PR:	251388
Submitted by:	matt@matthoran.com (maintainer)
6cebfb8984
Fernando Apesteguía (fernape) · 4.1.2
security/lego: Update to 4.1.2

ChangeLog: https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v412---2020-11-21

PR:	251323
Submitted by:	matt@matthoran.com (maintainer)
effb3ff40e
Dmitri Goutnik (dmgk) · 4.1.1
security/lego: Update to 4.1.1

Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v411---2020-11-19
PR:		250963
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
1c12122198
Dmitri Goutnik (dmgk) · 4.0.1
security/lego: Update to 4.0.1

Changes:	https://github.com/go-acme/lego/blob/master/CHANGELOG.md#v401---2020-09-03
PR:		249091
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
530f25b903
Steve Wills (swills) · 3.9.0
security/lego: Update to 3.9.0

PR:		249057
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
884765d9fd
Li-Wen Hsu (lwhsu) · 3.8.0
Update to 3.8.0

PR:		247816
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
97fb2a4037
Jochen Neumeister (joneum) · 3.7.0
Update to 3.7.0

PR:		246379
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
Sponsored by:	Netzkommune GmbH
ea15c33039
Dmitri Goutnik (dmgk) · 3.6.0
security/lego: Update to 3.6.0

Changes:	https://github.com/go-acme/lego/releases/tag/v3.6.0
PR:		245886
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
485d987b14
Dmitri Goutnik (dmgk) · 3.5.0
security/lego: Update to 3.5.0

Changes:	https://github.com/go-acme/lego/releases/tag/v3.5.0
PR:		244891
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
78f4ae201b
Dmitri Goutnik (dmgk) · 3.4.0
security/lego: Update to 3.4.0

Changes:	https://github.com/go-acme/lego/releases/tag/v3.4.0
PR:		244570
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
c2e23f5edd
Dmitri Goutnik (dmgk) · 3.3.0
security/lego: Update to 3.3.0

PR:		243269
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
8db7c52c88
Dmitri Goutnik (dmgk) · 3.2.0_1
security/lego: Unbreak on aarch64

===>  Building lego from ./cmd/lego
# golang.org/x/sys/unix
vendor/golang.org/x/sys/unix/ztypes_freebsd_arm64.go:400:12: undefined: uint128

http://thunderx1.nyi.freebsd.org/data/head-arm64-default/p518685_s355218/logs/errors/lego-3.2.0.log

Unbreak by updating golang.org/x/sys to 33540a1f6037 and golang.org/x/net to
83d349e8ac1a which adds support for freebsd/arm64.

PR:		242581
Approved by:	Matthew Horan <matt@matthoran.com> (maintainer)
6890965aab
Dmitri Goutnik (dmgk) · 3.2.0
security/lego: Update to 3.2.0

Changes:	https://github.com/go-acme/lego/releases/tag/v3.2.0

PR:		241864
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
Approved by:	tz (mentor, implicit)
aaa04ea398
Dmitri Goutnik (dmgk) · 3.1.0
security/lego: Update to 3.1.0

Changes:	https://github.com/go-acme/lego/releases/tag/v3.1.0

PR:		241155
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21957
ccdb8b07fc
Steve Wills (swills) · 3.0.2
security/lego: update to 2.7.2

PR:		239574
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
85e61b03b7
Mathieu Arnold (mat) · 2.7.1
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Steve Wills (swills) · 2.7.1
security/lego: Update to 2.7.1

PR:		239433
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
03d77c478b
Rodrigo Osorio (rodrigo) · 2.6.0
Add new port security/lego

Lego is a new let's encrypt client write in Go with
support for number of ACME challenges and no external
dependencies.

PR:		237349
Submitted by:	Matthew Horan <matt@matthoran.com>
9b6f8163df
« newest← newerpage 3 of 3