CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/step-certificates 0.30.2_7

Smallstep step_ca certificates server

0
unaddressed
0
VuXML only
1
fixed
2
open problem reports

Port info

Maintainer
mw@wipp.bayern
Packages
latest: 0.30.2_7
Upstream
up to date
Last update
to 0.30.2_7 · d81b7ba3c3
Quarterly
2026Q4: 0.30.2_7 · last MFH 60647eff54
WWW
https://smallstep.com/certificates/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install step-certificates
installs 0.30.2_7 from latest; from quarterly (2026Q4) 0.30.2_7
Port
# cd /usr/ports/security/step-certificates && make install clean
Size
12 MiB download · 48 MiB installed
Depends on
devel/pcsc-lite 2.5.2_1,2, security/step-cli 0.30.2_7
License
APACHE20
Creates
user step, group step
pkg-message
Shown after installing
================================================================================
Step Certificates requires additional configuration:

The simple way is via the service start script step_ca with:
service step_ca configure
When there is no configuration it will be created. User input is required!!!

The hard way would be manually via the step command.

Ensure to set the STEPPATH environment variable. This makes using the
commands much simpler.

Following are the defaults for step certificates and can be overridden by rc.conf variables::
* The service is run under user step customizable by step_ca_user
* The service is run inder group step customizable by step_ca_group
* The base directory used for storing CA information is step_ca_stepdir (%%PREFIX%%/etc/step)
* The CA informations is held under step_ca_steppath (%%PREFIX%%/etc/step/ca)
* The password required for automatic startup is in step_ca_password (%%PREFIX%%/etc/step/password.txt)
* By default step certificates logs to syslog with a tag of step_ca

Due to an inconsistency between this message and the rc-script, the rc-script has been renamed from step-ca to step_ca in v0.28.1.
Please be aware of this if you call the rc-script from a custom script.
================================================================================

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.30.2_70.30.2_6–
FreeBSD 150.30.2_70.30.2_6–
FreeBSD 140.30.2_70.30.2_60.30.2_7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.30.2_70.30.2_6–
FreeBSD 140.30.2_70.30.2_60.30.2_7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.30.2_7.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (2) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
279583maintainer-feedback+ security/step-certificates: support various password-related startup optionsNew2026-09-20
291146maintainer-feedback? security/step-certificates: rc.d sanity check ignores portaclNew2026-06-03

Commits (80)

Neel Chauhan (nc) · 0.22.0
security/step-certificates: update to version 0.22.0

PR:	266056
9c702f3c30
Dmitri Goutnik (dmgk) · 0.21.0_2
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 0.21.0_1
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Fernando Apesteguía (fernape) · 0.21.0
security/step-certificates: update to 0.21.0

PR:	265170
Reported by:	mw@wipp.bayern (maintainer)
90d3d02ee3
Dmitri Goutnik (dmgk) · 0.18.1_2
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Guangyuan Yang (ygy) · 0.18.1_1
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Larry Rosenman (ler) · 0.18.1
security/step-certificates: update to 0.18.1

PR: 262053
2dcad5e31f
Guangyuan Yang (ygy) · 0.18.0
security/step-certificates: Update to 0.18.0

Changelog:	https://github.com/smallstep/certificates/releases/tag/v0.18.0

PR:		259919
897308a6db
Guangyuan Yang (ygy) · 0.17.6
security/step-certificates: Update to 0.17.6

Changelog:	https://github.com/smallstep/certificates/releases/tag/v0.17.6

PR:		259743
8de2b48551
Guangyuan Yang (ygy) · 0.17.4
security/step-certificates: Update to 0.17.4

Changelog:	https://github.com/smallstep/certificates/releases/tag/v0.17.4

PR:		258831
c39794fd53
Guangyuan Yang (ygy) · 0.17.2
security/step-certificates: Update to 0.17.2

Changelog:	https://github.com/smallstep/certificates/releases/tag/v0.17.2

PR:		258661
f93b17faea
Nuno Teixeira (eduardo) · 0.16.2
security/step-certificates: Update to 0.16.2

ChangeLog: https://github.com/smallstep/certificates/releases

PR:		258044
aa428d90ac
Guangyuan Yang (ygy) · 0.16.0
security/step-certificates: Update to 0.16.0

Changelog:	https://github.com/smallstep/certificates/releases/tag/v0.16.0

PR:		257266
e78cbe7391
Neel Chauhan (nc) · 0.15.15
security/step-certificates: Update to 0.15.15

PR:	255618
ec2de3b2ea
Neel Chauhan (nc) · 0.15.14
security/step-certificates: Update to 0.15.14

PR:		255246
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
ba87c139a2
Neel Chauhan (nc) · 0.15.11
security/step-certificates: Update to 0.15.11

PR:		255004
Submitted by:	Markus Wipp <mw AT wipp DOT bayern> (maintainer)
b81e185ffe
Mathieu Arnold (mat) · 0.15.8
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.15.8
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 0.15.8
Remove # $FreeBSD$ from Makefiles.
305f148f48
Fernando Apesteguía (fernape) · 0.15.8
security/step-certificates: distfile size mismatch

PR:	254163
Submitted by:	leeb@ratnaling.org
7df29f1c91
Neel Chauhan (nc) · 0.15.8
security/step-certificates: update to 0.15.8

PR:		253686
Submitted by:	Markus Wipp <mw AT wipp DOT bayern> (maintainer)
44bb8dce17
Guangyuan Yang (ygy) · 0.15.6
security/step-certificates: Update to 0.15.6

PR:		252004
Submitted by:	Markus Wipp <mw@wipp.bayern>
Approved by:	lwhsu
eb499aa908
Dmitri Goutnik (dmgk) · 0.15.4
security/step-certificates: Update to 0.15.4

Changes:	https://github.com/smallstep/certificates/releases/tag/v0.15.4
PR:		249208
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
257395629b
Dmitri Goutnik (dmgk) · 0.15.0
security/step-certificates: Update to 0.15.0

- pet portclippy while here

Changes:	https://github.com/smallstep/certificates/releases/tag/v0.15.0
PR:		248709
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
fb02c17ae9
Li-Wen Hsu (lwhsu) · 0.14.6_1
Fix build on i386

PR:		247855
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
5e6d3976f6
Li-Wen Hsu (lwhsu) · 0.14.6
Update to 0.14.6

PR:		247734
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
4c1e49c5ef
Li-Wen Hsu (lwhsu) · 0.14.5
Update to 0.14.5

PR:		247704
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
c10c0128be
Tobias C. Berner (tcberner) · 0.14.4
security/step-certificates: update to 0.14.4

PR:		246078
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
7c9d7389ef
Bernhard Froehlich (decke) · 0.14.3
security/step-certificates: Update to 0.14.3

PR:		245794
Submitted by:	Markus Wipp <mw@wipp.bayern> (maintainer)
8883f72b37
Bernhard Froehlich (decke) · 0.14.2
This port contains the Smallstep step-ca certificates component

It can be used together with the Smallstep step-ca client.
step-ca is a local CA. It can be used to create your own local PKI
Infrastructure and includes things like e.g. the possibility to have your
own ACME server.

A private certificate authority (X.509 & SSH) & ACME server for secure
automated certificate management, so you can use TLS everywhere & SSO for SSH.

WWW: https://smallstep.com/certificates/

PR:		245535
Submitted by:	Markus Wipp <mw@wipp.bayern>
ae1c7c19c4
« newest← newerpage 2 of 2