Credential-Zugriff
Reads VPN profiles, private keys, certificates, passwords, and auth files.
brew
openvpn mit Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, zypper, scoop, winget installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für openvpn in AI-Agent-Workflows.
Agent-Sicherheit
Antwort zur Agent-Sicherheit
openvpn controls VPN connectivity and can route agent traffic through private networks.
Änderungen an Remote-Zustand
Primarily changes network reachability, not application data.
Publish-/Artefakt-Risiko
Can expose private network access to downstream tools.
Empfohlene Kontrolle
Gate VPN start, config reads, and private-key handling.
Hinweise für Agent-Nutzung
Allow config validation; require approval before connecting or reading credential material.
Installation
Weitere Installationsbefehle
macOS
Homebrewverifiziert · 100%
brew install openvpnlocal Homebrew formula metadata
Linux
Alpine Linux apkverifiziert · 92%
sudo apk add openvpnAlpine Linux edge package indexes · openvpn · Quelle: dl-cdn.alpinelinux.org
Debian aptverifiziert · 92%
sudo apt install openvpnDebian stable package indexes · openvpn · Quelle: deb.debian.org
Fedora dnfverifiziert · 92%
sudo dnf install openvpnFedora Rawhide package metadata · openvpn · Quelle: dl.fedoraproject.org
Nixverifiziert · 92%
nix profile install nixpkgs#openvpnnixpkgs package indexes · openvpn · Quelle: raw.githubusercontent.com
Arch Linux pacmanverifiziert · 92%
sudo pacman -S openvpnArch Linux sync databases · openvpn · Quelle: geo.mirror.pkgbuild.com
openSUSE zypperverifiziert · 92%
sudo zypper install openvpnopenSUSE Tumbleweed package metadata · openvpn · Quelle: download.opensuse.org
Windows
Chocolateyverifiziert · 92%
choco install openvpnChocolatey community package catalog · openvpn · Quelle: community.chocolatey.org
Scoopverifiziert · 92%
scoop install extras/openvpnScoop official bucket manifest trees · bucket/openvpn.json · Quelle: api.github.com
Windows Package Managerverifiziert · 92%
winget install --id OpenVPNTechnologies.OpenVPN -eWindows Package Manager source index · OpenVPNTechnologies.OpenVPN · Quelle: cdn.winget.microsoft.com
Überblick
Paketzusammenfassung
SSL/TLS VPN implementing OSI layer 2 or 3 secure network extension
Projektlinks
Befehle und Aliase
- openvpn
Verlauf
Projektgeschichte und Nutzung
OpenVPN is a long-running open source VPN implementation built around SSL/TLS, TUN/TAP virtual network interfaces, and a single userspace daemon that can act as client or server. It became one of the default choices for self-hosted and commercial VPN deployments because it crossed operating-system, firewall, NAT, and package-manager boundaries better than many older VPN stacks.
Projektgeschichte
OpenVPN was created by James Yonan and traces its public history to 2001. The project chose a custom VPN protocol using SSL/TLS for key exchange and OpenSSL for cryptography rather than implementing IPsec, PPTP, or L2TP.
OpenVPN 1.x was mainly a point-to-point tool. OpenVPN 2.0 was the major architectural step: the official how-to and manual describe scalable multi-client TCP/UDP server mode, where many clients connect to a single server process and share one TUN or TAP interface.
The 2.x line added features that made OpenVPN practical in mixed networks: certificate-based TLS deployments, username/password authentication hooks, pushed routes and DNS options, management interfaces, plugins and scripts, IPv6 support, Windows service improvements, and continued crypto and platform updates.
Adoptionsgeschichte
OpenVPN spread through Unix and Linux distributions, router firmware, VPN providers, and enterprise remote-access setups because it used ordinary TCP or UDP ports, worked through many NAT and firewall environments, and could be configured with plain text profile files. Package availability across Linux, BSD, macOS, Windows package managers, and router-oriented ecosystems made .ovpn profiles a portable operational artifact.
OpenVPN Inc. built commercial products such as Access Server and OpenVPN Connect around the open source Community Edition while continuing to support the community project. That split gave the protocol a dual life: a free daemon for administrators and a managed product line for organizations.
Wie es verwendet wird
Operators use OpenVPN to build routed layer-3 VPNs with TUN devices, bridged layer-2 VPNs with TAP devices, site-to-site tunnels, road-warrior remote access, lab networks, router-based VPN clients, and compatibility endpoints for commercial VPN services. A typical deployment combines server and client configuration files, certificates or username/password credentials, route pushes, firewall rules, and system services.
Package users care about the single openvpn executable because it is both the client and the server. That keeps scripting, service supervision, and container use straightforward, while configuration complexity lives in profile files and PKI assets.
Warum Paket-Nerds sich dafür interessieren
OpenVPN is one of the canonical networking packages where packaging is operations: binaries, services, sample configs, plugin paths, systemd or launchd integration, certificate locations, and kernel TUN/TAP support all affect whether the package is usable.
Its long history also makes it a compatibility anchor. Even as WireGuard changed expectations for small VPN codebases, OpenVPN remains important for existing .ovpn profiles, mature server deployments, commercial-provider compatibility, and environments that need TLS-style transport flexibility.
Zeitleiste
- 2001: James Yonan releases the first OpenVPN versions.
- 2005: OpenVPN 2.0 establishes multi-client server mode as the core scalable deployment pattern.
- 2013-era 2.3 line: OpenVPN documentation notes complete IPv6 and PolarSSL support among 2.3 improvements.
- 2017-era 2.4 line: the project adds modern client/server negotiation features and continues improving Windows service behavior.
- 2020s: OpenVPN Community Edition continues through the 2.5, 2.6, and 2.7 lines while OpenVPN Inc. maintains commercial Access Server and OpenVPN Connect products around the protocol.
Related projects
- OpenVPN is related to OpenVPN Access Server, OpenVPN Connect, EasyRSA, Tunnelblick, NetworkManager-openvpn, OpenWrt and other router firmware integrations, SoftEther VPN's OpenVPN protocol support, WireGuard, IPsec, and TLS libraries such as OpenSSL and mbed TLS.
Quellen
- https://blog.openvpn.net/the-history-of-openvpn/
- https://community.openvpn.net/
- https://github.com/OpenVPN/openvpn
- https://openvpn.net/access-server-or-community/
- https://openvpn.net/community-docs/community-articles/openvpn-2-6-manual.html
- https://openvpn.net/community-docs/how-to.html
- https://openvpn.net/community/
Sicherheitslage
Risikostufe: orange
broad file, network, media, or database tool signal. formula declares a Homebrew service.
Risikoklassifikator
orange Risiko · mittel Konfidenz · infrastructure
Warum
- broad file, network, media, or database tool signal
- formula declares a Homebrew service
Signale
- metadata:service
- text:network
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Formelmetadaten deklarieren einen Service- oder Daemon-Block.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Installiert mit 4 Laufzeitabhängigkeiten.
- Build-Metadaten listen 1 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- macOS
~/Library/Application Support/OpenVPN~/Library/Application Support/Tunnelblick/Configurations- Unix
~/.openvpn$XDG_CONFIG_HOME/openvpn~/.config/openvpn
Credential files
Credential-bearing paths to review before unattended agent runs.
- macOS
~/Library/Application Support/OpenVPN~/Library/Application Support/Tunnelblick/Configurations- Unix
~/.openvpn$XDG_CONFIG_HOME/openvpn~/.config/openvpn
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
openvpn | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version2.7.5
Manager aktualisiert2026-07-02
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://openvpn.net/community/
- InfoRelease/tag comparison is only available for GitHub repositories.https://openvpn.net/community/none Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:openvpn |
|---|---|
| Version | 2.7.5 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/openvpn |
| Homepage | https://openvpn.net/community/ |
| Repository | https://github.com/OpenVPN/openvpn |
| Upstream-Dokumentation | https://openvpn.github.io/openvpn |
| Lizenz | GPL-2.0-only WITH openvpn-openssl-exception |
| Quellarchiv | https://swupdate.openvpn.net/community/releases/openvpn-2.7.5.tar.gz |
| Zuletzt aktualisiert | 2026-07-02T16:40:57Z |
| Pulse | updated |
| Abhängigkeiten | lz4, lzo, openssl@3, pkcs11-helper |
| Build-Abhängigkeiten | pkgconf |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | declared |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | openvpn |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Debian apt95%
openvpn 2.6.14-1+deb13u1
virtual private network daemon
sudo apt install openvpn- Section: net
- Architecture: amd64
- 12 Abhängigkeiten
- 5 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Openvpn
Nix95%
openvpn
nix profile install nixpkgs#openvpn- normalized package name match
- Abgeglichen nach: Openvpn
Ubuntu apt95%
openvpn 2.6.9-1ubuntu4
virtual private network daemon
sudo apt install openvpn- Section: net
- Architecture: amd64
- 12 Abhängigkeiten
- 5 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Openvpn
apk95%
openvpn 2.7.3-r0
Robust, and highly configurable VPN (Virtual Private Network)
sudo apk add openvpn- License: GPL-2.0-only WITH openvpn-openssl-exception
- Architecture: x86_64
- Source Package: openvpn
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
apk95%
openvpn-auth-pam 2.7.3-r0
OpenVPN plugin for PAM authentication
sudo apk add openvpn-auth-pam- License: GPL-2.0-only WITH openvpn-openssl-exception
- Architecture: x86_64
- Source Package: openvpn
- 1 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Openvpn
apk95%
openvpn-dev 2.7.3-r0
Robust, and highly configurable VPN (Virtual Private Network) (development files)
sudo apk add openvpn-dev- License: GPL-2.0-only WITH openvpn-openssl-exception
- Architecture: x86_64
- Source Package: openvpn
- 1 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Openvpn
apk95%
openvpn-doc 2.7.3-r0
Robust, and highly configurable VPN (Virtual Private Network) (documentation)
sudo apk add openvpn-doc- License: GPL-2.0-only WITH openvpn-openssl-exception
- Architecture: x86_64
- Source Package: openvpn
- normalized package name match
- Abgeglichen nach: Openvpn
apk95%
openvpn-openrc 2.7.3-r0
Robust, and highly configurable VPN (Virtual Private Network) (OpenRC init scripts)
sudo apk add openvpn-openrc- License: GPL-2.0-only WITH openvpn-openssl-exception
- Architecture: x86_64
- Source Package: openvpn
- normalized package name match
- Abgeglichen nach: Openvpn
dnf95%
openvpn 2.7.4-1.fc45
A full-featured TLS VPN solution
https://community.openvpn.net/
sudo dnf install openvpn- License: GPL-2.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: openvpn
- 19 Abhängigkeiten
- 3 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
dnf95%
openvpn-devel 2.7.4-1.fc45
Development headers and examples for OpenVPN plug-ins
https://community.openvpn.net/
sudo dnf install openvpn-devel- License: GPL-2.0-only
- Category: Unspecified
- Architecture: i686
- Source Package: openvpn
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
pacman95%
openvpn 2.7.4-1
An easy-to-use, robust and highly configurable VPN (Virtual Private Network)
https://openvpn.net/index.php/open-source.html
sudo pacman -S openvpn- License: GPL-2.0-only
- Architecture: x86_64
- 15 Abhängigkeiten
- 2 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Openvpn
zypper95%
openvpn 2.6.14-2.3
Full-featured SSL VPN solution using a TUN/TAP Interface
sudo zypper install openvpn- License: GPL-2.0-only WITH openvpn-openssl-exception
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: openvpn
- 13 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
zypper95%
openvpn-auth-pam-plugin 2.6.14-2.3
OpenVPN auth-pam plugin
sudo zypper install openvpn-auth-pam-plugin- License: GPL-2.0-only WITH openvpn-openssl-exception
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: openvpn
- 3 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
zypper95%
openvpn-devel 2.6.14-2.3
OpenVPN plugin header
sudo zypper install openvpn-devel- License: GPL-2.0-only WITH openvpn-openssl-exception
- Category: Development/Libraries/C and C++
- Architecture: x86_64
- Source Package: openvpn
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
zypper95%
openvpn-down-root-plugin 2.6.14-2.3
OpenVPN down-root plugin
sudo zypper install openvpn-down-root-plugin- License: GPL-2.0-only WITH openvpn-openssl-exception
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: openvpn
- 2 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Openvpn
Chocolatey95%
openvpn
choco install openvpn- normalized package name match
- Abgeglichen nach: Openvpn
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment