CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/libpki 0.9.2_7

OpenCA PKI library (libpki) and tools

Port info

Maintainer
bruno@ruomad.net
Packages
latest: 0.9.2_7
Upstream
up to date
Last update
to 0.9.2_7 · 3068854dd0
Quarterly
2026Q4: 0.9.2_7
WWW
https://www.openca.org/projects/libpki
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install libpki
installs 0.9.2_7 from latest; from quarterly (2026Q4) 0.9.2_7
Port
# cd /usr/ports/security/libpki && make install clean
# make -C /usr/ports/security/libpki config  # change options first
Size
446 KiB download · 2.4 MiB installed
Depends on
textproc/libxml2 2.15.4
License
APACHE20
Options
0 of 4 on in the package
Show the 4 options that are off
DNS LDAP MYSQL PGSQL
pkg-message
Shown after installing
Sample Configuration files have been installed in /usr/local/share/libpki/etc, in a
hierachy that mimics the one created in /usr/local/etc.
They may be used as templates to be copied into the corresponding subdirectory
under /usr/local/etc and customized according to user context.
Shown after removing
User-installed configuration files under /usr/local/etc/libpki have been preserved and
must be removed manually if needed, as well as this directory.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.9.2_70.9.2_7–
FreeBSD 150.9.2_70.9.2_7–
FreeBSD 140.9.2_70.9.2_70.9.2_7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.9.2_70.9.2_7–
FreeBSD 140.9.2_70.9.2_70.9.2_7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.9.2_7.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (15)

Baptiste Daroussin (bapt) · 0.9.2_7
libxml2: chase libxml soversion bump
3068854dd0
Daniel Engberg (diizzy) · 0.9.2_6
security/libpki: Fix build with libxml2 2.13

Backports from upstream repo and adapted to current release

PR:		279954
db203a9d7a
Muhammad Moinur Rahman (bofh) · 0.9.2_5
security/libpki: Runtime fix

The previous patch did build on FreeBSD 14.0 but the OCSP responder was
segfaulting.

This fixes the previous incorrect patch through backporting changes from
upstream.

OCSP responder (openca-ocspd) now works on FreeBSD 14.0.

PR:		276951
Approved by:	submitter is maintainer
08beae7b96
Muhammad Moinur Rahman (bofh) · 0.9.2_4
security/libpki: Fix build with openssl3

Fixes :
- detection of OpenSSL version (a bit hacky IMHO)
- changes breaking compilation

Doesn't cover the replacement of obsoleted functions (specially the move
from engines to providers) which is way above my paygrade.

This patch has been upstream as a PR
(https://github.com/openca/libpki/pull/74).

PR:		272280
Approved by:	bruno@ruomad.net (submitter is maintainer)
a07283aae1
Muhammad Moinur Rahman (bofh) · 0.9.2_3
security/libpki: Mark BROKEN_SSL

- Fails to detect OpenSSL 3.0 or later

Approved by:	portmgr (blanket)
ea4cf0d151
Robert Clausecker (fuz) · 0.9.2_3
security/libpki: unbreak (again) on armv7

Apparently both arm and armv? are now needed to correctly handle
arm targets.

Fixes:		fae3c318a10e6fc9870fd1f2a41611ceafe11cc4
Approved by:	flo (mentor)
Differential Revision: https://reviews.freebsd.org/D38726
3a9acb2b4d
Muhammad Moinur Rahman (bofh) · 0.9.2_3
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Piotr Kubaj (pkubaj) · 0.9.2_3
security/libpki: fix build on powerpc
1ce8721f0c
Nuno Teixeira (eduardo) · 0.9.2_3
security/libpki: Fix build on armv7 and arm64

- add case for armv7 to configure script
- adapt aarch64 case to arm64
  https://github.com/openca/libpki/issues/57
- while we are at it, hook up test suite
- bump PORTREVISION

PR:		266955
MFH:		2022Q4
e5a5d9c727
Stefan Eßer (se) · 0.9.2_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.9.2_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Nuno Teixeira (eduardo) · 0.9.2_2
security/libpki: Fix LDAP option build

- use LDAP_USE= OPENLDAP=yes instead of LIB_DEPENDS on
   net/openldap24-client
 - remove LDAP_LDFLAGS+= llber  causing build to fail

PR:		265293
d1d115cf3b
Nuno Teixeira (eduardo) · 0.9.2_1
security/libpki: new location for sample files

- not install any configuration files AT ALL
 - put all provided samples in ${PREFIX}/share/libpki/etc
 - add a message to the user to refer to these samples
 - mark the port as BROKEN on arm64 (according to pullout message received)
 - add options to allow configure to enable DNS, LDAP, MySQL and
   PostgreSQL if asked for
 - bump PORTREVISION

PR:		265189
ea1086f14d
Nuno Teixeira (eduardo) · 0.9.2
security/libpki: fix pkg-plist sample files

- use @sample in pkg-plist sample files

Reviewed by:	0mp
Approved by:	portmgr (blanket)
3d25658a6b
Nuno Teixeira (eduardo) · 0.9.2
security/libpki: New port: OpenCA PKI library (libpki) and tools

- submitter becomes maintainer

OpenCA LibPKI provides an easy-to-use PKI library for PKI enabled
application development.
The library provides the developer with all the needed functionalities
to manage certificates, from generation to validation.

WWW: https://www.openca.org/projects/libpki

PR:		264474
Reviewed by:	diizzy
93db311c5f