CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/pkcs11-tools 3.1.0

Tools for managing PKCS11 cryptographic tokens

Port info

Maintainer
eric.devolder@gmail.com
Packages
latest: 3.1.0
Upstream
up to date
Last update
to 3.1.0 · 6307a54ab6
Quarterly
2026Q4: 3.1.0
WWW
https://github.com/Mastercard/pkcs11-tools
Links
cgit · VuXML

Install

Package
# pkg install pkcs11-tools
installs 3.1.0 from latest; from quarterly (2026Q4) 3.1.0
Port
# cd /usr/ports/security/pkcs11-tools && make install clean
# make -C /usr/ports/security/pkcs11-tools config  # change options first
Size
526 KiB download · 3.7 MiB installed
Depends on
nothing
License
APACHE20 and THIRDPARTY
Options
4 of 4 on in the package: BASH DOCS MANPAGES ZSH

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.1.03.1.0–
FreeBSD 153.1.03.1.0–
FreeBSD 143.1.03.1.03.1.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.1.03.1.0–
FreeBSD 143.1.03.1.03.1.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.1.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (20)

Rene Ladan (rene) · 3.1.0
all: update for expired security/openssl34
6307a54ab6
Yusuf Yaman (nxjoseph) · 3.1.0
security/pkcs11-tools: Update 3.0.0 => 3.1.0

Port Changes:
- Use distribution tarball rather than pure source code
  for prebuilt manpages instead of depending on Pandoc.

Changelog:
https://github.com/Mastercard/pkcs11-tools/blob/v3.1.0/CHANGELOG.md

PR:		297826
Approved by:	osa, vvd (Mentors, implicit)
Co-authored-by:	Yusuf Yaman <nxjoseph@FreeBSD.org>
799b961c8c
Yusuf Yaman (nxjoseph) · 3.0.0
security/pkcs11-tools: Update 2.6.0 => 3.0.0

Port changes:
- Pet portclippy.
- Remove dependency on shells/bash.
- Remove DOCS from OPTIONS_DEFAULT since it's enabled by default.
- Add BASH and ZSH options for shell completions.
- Update description in pkg-descr.

Changelog:
https://github.com/Mastercard/pkcs11-tools/blob/v3.0.0/CHANGELOG.md

PR:		296565
Approved by:	osa, vvd (Mentors, implicit)
60f4322555
Muhammad Moinur Rahman (bofh) · 2.6.0
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
bbab7f59e9
Bernard Spil (brnrd) · 2.6.0
security/openssl: Update BROKEN_SSL ports referring to openssl30
c558035841
Li-Wen Hsu (lwhsu) · 2.6.0
security/pkcs11-tools: Update to 2.6.0

ChangeLog: https://github.com/Mastercard/pkcs11-tools/blob/v2.6.0/CHANGELOG.md

PR:		272848
63de22df71
Robert Clausecker (fuz) · 2.5.1
security/pkcs11-tools: update to 2.5.1

Changelog: https://github.com/Mastercard/pkcs11-tools/blob/v2.5.1/CHANGELOG.md

PR:		271617
9f37b23710
Muhammad Moinur Rahman (bofh) · 2.5.0
security/pkcs11-tools: Mark BROKEN_SSL

- Fails to build with OpenSSL 3.0.0 and later with error: undefined
  symbol: EVP_PKEY_*

Approved by:	portmgr (blanket)
f0951423cc
Stefan Eßer (se) · 2.5.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.5.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Nuno Teixeira (eduardo) · 2.5.0
security/pkcs11-tools: update to 2.5.0

- Use USES=autoreconf:build instead of BUILD_DEPENDS autoconf and
   automake.
 - Remove ".include <bsd.port.options.mk>" from Makefile
 - Reorder some variables and put it in correct blocks

ChangeLog:
https://github.com/Mastercard/pkcs11-tools/blob/v2.5.0/CHANGELOG.md

PR:		258979
c4e05fc73c
Rene Ladan (rene) · 2.4.2
cleanup: drop support for EOL FreeBSD 11.X

Search criteria used:
- 11.4
- OSREL*
- OSVER*
- *_FreeBSD_11

Input from:
- adridg: devel/qca-legacy
- jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds
- sunpoet: security/p5-*OpenSSL*

Reviewed by:	doceng, kde, multimedia, perl, python, ruby, rust
Differential Revision: https://reviews.freebsd.org/D32008
Test Plan: make index
620968a43a
Li-Wen Hsu (lwhsu) · 2.4.2
security/pkcs11-tools: Update to 2.4.2

Changelog: https://github.com/Mastercard/pkcs11-tools/blob/v2.4.2/CHANGELOG.md

PR:		258708
6f26ec6d92
Li-Wen Hsu (lwhsu) · 2.4.1
security/pkcs11-tools: Update to 2.4.1

Changelog: https://github.com/Mastercard/pkcs11-tools/blob/v2.4.1/CHANGELOG.md

PR:		257697
a14f7c8a10
Guangyuan Yang (ygy) · 2.4.0
security/pkcs11-tools: Update to 2.4.0

Changelog:	https://github.com/Mastercard/pkcs11-tools/blob/v2.4.0/CHANGELOG.md

PR:		257348
Approved by:	lwhsu (mentor, implicit)
b72fdc8176
Nuno Teixeira (eduardo) · 2.3.1
security/pkcs11-tools: Update to 2.3.1

* reformat Makefile with portfmt

ChangeLog: https://github.com/Mastercard/pkcs11-tools/blob/v2.3.1/CHANGELOG.md

PR:		256990
b35a59ce21
Tobias Kortkamp (tobik) · 2.3.0
security/pkcs11-tools: Properly set BROKEN on 11.x with OpenSSL 1.0.x

Another case of wishful thinking.  In reality the framework does
not support a BROKEN_SSL_11 at the moment.

Reported by:	portscan
6fbfa31c0a
Yuri Victorovich (yuri) · 2.3.0
security/pkcs11-tools: Broken on 11 with base OpenSSL due to version being too old

Also add comment about the workaround for missing symbols in /usr/lib/libcrypto.so.

Reported by:	fallout
97b9d2f58f
Yuri Victorovich (yuri) · 2.3.0
security/pkcs11-tools: Broken with libressl

Reported by:	eric.devolder@gmail.com (maintainer)
2765d6e9a7
Yuri Victorovich (yuri) · 2.3.0
New port: security/pkcs11-tools: Tools for managing PKCS11 cryptographic tokens

PR:		255058
Submitted by:	Eric Devolder <eric.devolder@gmail.com>
a6d0c2f4e2