Accès aux identifiants
Can read private keys, certificates, encrypted files, and passphrases.
brew / portes d'approbation
Installer openssl@3 avec Homebrew, zypper, apk, MacPorts, chocolatey, apt, dnf, Nix, pacman, scoop, winget
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de openssl@3 pour les workflows d'agents IA.
sécurité des agents
Réponse sur la sécurité des agents
openssl handles cryptographic keys, certificates, secrets, and encrypted payloads.
Modification distante
Does not mutate remote systems directly but can prepare credentials used elsewhere.
Risque de publication ou d'artéfact
Can produce keys, CSRs, signatures, and artifacts used in releases.
Contrôle recommandé
Gate private-key reads, key generation, signing, and decryption commands.
Conseils d'utilisation par les agents
Allow public certificate inspection; require approval before reading or producing secret key material.
installation
Commandes d'installation supplémentaires
macOS
Homebrewvérifié · 100%
brew install openssl@3local Homebrew formula metadata
MacPortsvérifié · 94%
sudo port install openssl3MacPorts ports tree · devel/openssl3/Portfile · Source: api.github.com
Linux
openSUSE zyppervérifié · 92%
sudo zypper install openssl-3openSUSE Tumbleweed package metadata · openssl-3 · Source: download.opensuse.org
Alpine Linux apkvérifié · 92%
sudo apk add libssl3Alpine Linux edge package indexes · libssl3 · Source: dl-cdn.alpinelinux.org
Debian aptvérifié · 92%
sudo apt install opensslDebian stable package indexes · openssl · Source: deb.debian.org
Fedora dnfvérifié · 92%
sudo dnf install opensslFedora Rawhide package metadata · openssl · Source: dl.fedoraproject.org
Nixvérifié · 92%
nix profile install nixpkgs#opensslnixpkgs package indexes · openssl · Source: raw.githubusercontent.com
Arch Linux pacmanvérifié · 92%
sudo pacman -S opensslArch Linux sync databases · openssl · Source: geo.mirror.pkgbuild.com
Windows
Chocolateyvérifié · 92%
choco install opensslChocolatey community package catalog · openssl · Source: community.chocolatey.org
Scoopvérifié · 92%
scoop install main/opensslScoop official bucket manifest trees · bucket/openssl.json · Source: api.github.com
Windows Package Managervérifié · 92%
winget install --id ShiningLight.OpenSSL.Dev -eWindows Package Manager source index · ShiningLight.OpenSSL.Dev · Source: cdn.winget.microsoft.com
aperçu
Résumé du paquet
Cryptography and SSL/TLS Toolkit
Liens du projet
Commandes et alias
Aucun alias exécutable n'a été trouvé dans la base locale des paquets.
historique
Historique du projet et usages
Homebrew's `openssl@3` is the main OpenSSL 3 formula, providing the OpenSSL command-line tool plus libssl and libcrypto for TLS, SSL, certificate, and general cryptography workloads. The formula follows the default OpenSSL 3 branch while separate formulae such as `openssl@3.0` and `openssl@3.5` preserve branch-specific targets.
Historique du projet
OpenSSL was founded in 1998 as an open-source successor to SSLeay, the SSL library by Eric A. Young and Tim J. Hudson. The first OpenSSL release, 0.9.1c, shipped on December 23, 1998 after the initial project team chose the OpenSSL name to signal continuity for users of SSL-era tooling.
The library became a default dependency for secure internet software, from Apache modules and mail servers to package managers, language runtimes, and appliance firmware. Heartbleed in 2014 revealed both the scale of OpenSSL deployment and the fragility of its funding and maintenance model, prompting foundation and governance changes.
The OpenSSL 3 generation began with 3.0.0 on September 7, 2021. Its provider architecture, Apache-2.0 licensing, FIPS provider support, and deprecation of low-level APIs reshaped how applications link, configure, and certify OpenSSL-based cryptography.
Historique d'adoption
`openssl@3` is the broad Homebrew adoption path for OpenSSL 3. The cited formula page lists it as also known as `openssl` and `openssl@3.6`, bottled across macOS and Linux, with yearly installs in the millions.
Homebrew's page also shows the package-manager policy dimension: `openssl@3` can move between OpenSSL 3 minor branches, while `openssl@3.5` and `openssl@3.0` exist for consumers that need a pinned branch. That split lets Homebrew balance default freshness against downstream reproducibility.
Modes d'utilisation
Users invoke the `openssl` CLI to inspect and generate certificates, create CSRs, test TLS endpoints, hash and sign data, convert PEM/DER/PKCS formats, and manage CA directories. Build systems link against libssl and libcrypto when compiling software that needs TLS, X.509, ASN.1, message digests, public-key cryptography, or provider-backed algorithms.
On Homebrew systems, dependent formulae use `openssl@3` as the normal OpenSSL 3 dependency, while users may need the formula's prefix, include path, library path, and certificate directory when compiling software outside Homebrew.
Pourquoi les passionnés de paquets s'y intéressent
`openssl@3` is one of the packages that makes a package manager feel like infrastructure. A minor OpenSSL branch change can affect build flags, test suites, compliance assumptions, certificate lookup, and runtime behavior for a large dependency graph.
It is also a clean example of why versioned formula names matter. The package name encodes a compatibility promise at the major-version level, while sibling formulae encode stricter branch promises for software that cannot simply follow the default.
Chronologie
- December 23, 1998: OpenSSL 0.9.1c is released.
- 2014: Heartbleed becomes a watershed event for OpenSSL maintenance and funding.
- September 7, 2021: OpenSSL 3.0.0 launches the OpenSSL 3 line.
- April 8, 2025: OpenSSL 3.5.0 is released in the OpenSSL 3 family.
- October 1, 2025: OpenSSL 3.6.0 appears in the OpenSSL release timeline.
- 2026: Homebrew lists `openssl@3` stable at 3.6.3 and notes a planned downgrade to 3.5 LTS before the 3.6 support window ends.
Related projects
- OpenSSL's ecosystem includes LibreSSL, BoringSSL, AWS-LC, GnuTLS, NSS, wolfSSL, and platform TLS stacks. Downstream packages such as OpenSSH, curl, web servers, database clients, and programming-language runtimes make OpenSSL branch choices visible far beyond cryptography specialists.
Sources
- https://docs.openssl.org/3.0/man7/migration_guide/
- https://formulae.brew.sh/formula/openssl@3
- https://github.com/openssl/openssl
- https://openssl-library.org/news/openssl-3.0-notes/
- https://openssl-library.org/news/openssl-3.5-notes/
- https://openssl-library.org/news/timeline/
- https://openssl-library.org/post/2018-12-20-20years/index.html
- https://openssl.foundation/about/history
portes d'approbation
Métadonnées de revue humaine pour commandes risquées
La graine locale de portes d'approbation contient 5 règles pour openssl@3. Points d'entrée couverts : openssl. Niveaux de sévérité : critique, élevé, moyen. Couverture : partial, revu le 2026-05-21.
Exemples d'actions contrôlées
- Generate private keys or key pairs.
- Print private key details in text form.
- Export certificates and keys into PKCS#12 bundles.
- Connect to a remote TLS service and print handshake material.
- Encrypt or decrypt data to an output file.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$OPENSSLDIR/openssl.cnf
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.ssl~/.certs~/certs~/.config/openssl
exécutables
Exécutables installés
| Commande | Type | Exposition | Note |
|---|---|---|---|
| Aucune donnée d'exécutable n'était présente. | |||
fraîcheur
Version et fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
page générée2026-07-10
version du gestionnaire3.6.3
gestionnaire mis à jour2026-07-06
données localesOK
amontnot checked
dernière version détectéenon détecté
https://github.com/openssl/openssl
- infoNo cached GitHub release or tag data was available.https://github.com/openssl/opensslconfiance none
métadonnées d'installation
Métadonnées du paquet
| Clé du paquet | brew:openssl@3 |
|---|---|
| Version | 3.6.3 |
| Gestionnaire de paquets | Homebrew |
| Page du gestionnaire de paquets | https://formulae.brew.sh/formula/openssl@3 |
| Page d'accueil | https://openssl-library.org |
| Dépôt | https://github.com/openssl/openssl |
| Docs amont | https://docs.openssl.org/3.6/man1/openssl |
| Licence | Apache-2.0 |
| Archive source | https://github.com/openssl/openssl/releases/download/openssl-3.6.3/openssl-3.6.3.tar.gz |
| Dernière mise à jour | 2026-07-06T17:12:11Z |
| Pulse | updated |
| Dépendances | ca-certificates |
| Bouteille | disponible (sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux) |
| post-install Homebrew | non défini |
| Service | aucun déclaré |
| Précautions | To add additional certificates, place .pem files in $HOMEBREW_PREFIX/etc/openssl@3/certs and run $HOMEBREW_PREFIX/opt/openssl@3/bin/c_rehash OpenSSL 3.6 is only supported until 2026-11-01 so the `openssl@3` formula will be downgraded to OpenSSL 3.5 (LTS) in a future update. |
faits du registre
Détails de la base source
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | openssl@3 |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
correspondances dans les bases sources
Autres enregistrements de gestionnaires de paquets
Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.
apk95%
libssl3 3.5.7-r0
SSL shared libraries
sudo apk add libssl3- License: Apache-2.0
- Architecture: x86_64
- Source Package: openssl
- 1 Dépendances
- 1 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl-3-devel 3.5.3-5.1
Development files for OpenSSL
sudo zypper install libopenssl-3-devel- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 Dépendances
- 3 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl-3-devel-32bit 3.5.3-5.1
Development files for OpenSSL
sudo zypper install libopenssl-3-devel-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 2 Dépendances
- 2 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl-3-fips-provider 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 Dépendances
- 2 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl-3-fips-provider-32bit 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 Dépendances
- 1 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl-3-fips-provider-x86-64-v3 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider-x86-64-v3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 3 Dépendances
- 1 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 7 Dépendances
- 5 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl3-32bit 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 Dépendances
- 4 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
libopenssl3-x86-64-v3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3-x86-64-v3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 2 Dépendances
- 2 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
openssl-3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install openssl-3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 8 Dépendances
- 2 fournit
- normalized package name match
- Correspondance par : Openssl 3
zypper95%
openssl-3-doc 3.5.3-5.1
Manpages and additional documentation for openssl
sudo zypper install openssl-3-doc- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: openssl-3
- 2 fournit
- normalized package name match
- Correspondance par : Openssl 3
MacPorts95%
openssl3
sudo port install openssl3- normalized package name match
- Correspondance par : Openssl 3
Debian apt88%
libssl-dev 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - development files
sudo apt install libssl-dev- Section: libdevel
- Architecture: amd64
- Source Package: openssl
- 1 Dépendances
- 1 dépendances optionnelles
- versioned package alias match
- Correspondance par : Openssl
Debian apt88%
libssl-doc 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - development documentation
sudo apt install libssl-doc- Section: doc
- Architecture: all
- Source Package: openssl
- versioned package alias match
- Correspondance par : Openssl
Debian apt88%
libssl3t64 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - shared libraries
sudo apt install libssl3t64- Section: libs
- Architecture: amd64
- Source Package: openssl
- 4 Dépendances
- 1 fournit
- versioned package alias match
- Correspondance par : Openssl
Debian apt88%
openssl 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - cryptographic utility
sudo apt install openssl- Section: utils
- Architecture: amd64
- 2 Dépendances
- 1 dépendances optionnelles
- versioned package alias match
- Correspondance par : Openssl
piste source
Généré depuis les données du dépôt
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Sources utilisées
- Nucleus package database
- approval-gate seed metadata
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment