When installing openvpn via pkg PKCS11 options remain disabled. They are not listed by `openvpn --help` contrary to `man openvpn`. The only option to use openvpn with eg. Yubikey is to build the package from ports. How about enabling PKCS11 option by default?
Good idea, added in openvpn-2.5.4_3
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=f77789f296dd797bf008a895ed71abcc603c0374 commit f77789f296dd797bf008a895ed71abcc603c0374 Author: Matthias Andree <mandree@FreeBSD.org> AuthorDate: 2021-12-12 10:57:43 +0000 Commit: Matthias Andree <mandree@FreeBSD.org> CommitDate: 2021-12-12 11:00:22 +0000 security/openvpn: Default-enable PKCS#11 option Bump PORTREVISION. PR: 260352 Reported by: Marcin Wojtas security/openvpn/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
Thanks!