認証情報アクセス
Can read private keys, certificates, encrypted files, and passphrases.
brew / 承認ゲート
openssl@3 を Homebrew, zypper, apk, MacPorts, chocolatey, apt, dnf, Nix, pacman, scoop, winget でインストール
openssl@3 のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
エージェント安全性
エージェント安全性の回答
openssl handles cryptographic keys, certificates, secrets, and encrypted payloads.
リモート変更
Does not mutate remote systems directly but can prepare credentials used elsewhere.
公開/成果物リスク
Can produce keys, CSRs, signatures, and artifacts used in releases.
推奨コントロール
Gate private-key reads, key generation, signing, and decryption commands.
エージェント利用ガイダンス
Allow public certificate inspection; require approval before reading or producing secret key material.
インストール
追加のインストールコマンド
macOS
Homebrew確認済み · 100%
brew install openssl@3local Homebrew formula metadata
MacPorts確認済み · 94%
sudo port install openssl3MacPorts ports tree · devel/openssl3/Portfile · ソース: api.github.com
Linux
openSUSE zypper確認済み · 92%
sudo zypper install openssl-3openSUSE Tumbleweed package metadata · openssl-3 · ソース: download.opensuse.org
Alpine Linux apk確認済み · 92%
sudo apk add libssl3Alpine Linux edge package indexes · libssl3 · ソース: dl-cdn.alpinelinux.org
Debian apt確認済み · 92%
sudo apt install opensslDebian stable package indexes · openssl · ソース: deb.debian.org
Fedora dnf確認済み · 92%
sudo dnf install opensslFedora Rawhide package metadata · openssl · ソース: dl.fedoraproject.org
Nix確認済み · 92%
nix profile install nixpkgs#opensslnixpkgs package indexes · openssl · ソース: raw.githubusercontent.com
Arch Linux pacman確認済み · 92%
sudo pacman -S opensslArch Linux sync databases · openssl · ソース: geo.mirror.pkgbuild.com
Windows
Chocolatey確認済み · 92%
choco install opensslChocolatey community package catalog · openssl · ソース: community.chocolatey.org
Scoop確認済み · 92%
scoop install main/opensslScoop official bucket manifest trees · bucket/openssl.json · ソース: api.github.com
Windows Package Manager確認済み · 92%
winget install --id ShiningLight.OpenSSL.Dev -eWindows Package Manager source index · ShiningLight.OpenSSL.Dev · ソース: cdn.winget.microsoft.com
概要
パッケージ概要
Cryptography and SSL/TLS Toolkit
プロジェクトリンク
コマンドとエイリアス
ローカルパッケージデータベースに実行可能エイリアスは見つかりませんでした。
履歴
プロジェクトの歴史と使われ方
Homebrew's `openssl@3` is the main OpenSSL 3 formula, providing the OpenSSL command-line tool plus libssl and libcrypto for TLS, SSL, certificate, and general cryptography workloads. The formula follows the default OpenSSL 3 branch while separate formulae such as `openssl@3.0` and `openssl@3.5` preserve branch-specific targets.
プロジェクトの歴史
OpenSSL was founded in 1998 as an open-source successor to SSLeay, the SSL library by Eric A. Young and Tim J. Hudson. The first OpenSSL release, 0.9.1c, shipped on December 23, 1998 after the initial project team chose the OpenSSL name to signal continuity for users of SSL-era tooling.
The library became a default dependency for secure internet software, from Apache modules and mail servers to package managers, language runtimes, and appliance firmware. Heartbleed in 2014 revealed both the scale of OpenSSL deployment and the fragility of its funding and maintenance model, prompting foundation and governance changes.
The OpenSSL 3 generation began with 3.0.0 on September 7, 2021. Its provider architecture, Apache-2.0 licensing, FIPS provider support, and deprecation of low-level APIs reshaped how applications link, configure, and certify OpenSSL-based cryptography.
採用の歴史
`openssl@3` is the broad Homebrew adoption path for OpenSSL 3. The cited formula page lists it as also known as `openssl` and `openssl@3.6`, bottled across macOS and Linux, with yearly installs in the millions.
Homebrew's page also shows the package-manager policy dimension: `openssl@3` can move between OpenSSL 3 minor branches, while `openssl@3.5` and `openssl@3.0` exist for consumers that need a pinned branch. That split lets Homebrew balance default freshness against downstream reproducibility.
使われ方
Users invoke the `openssl` CLI to inspect and generate certificates, create CSRs, test TLS endpoints, hash and sign data, convert PEM/DER/PKCS formats, and manage CA directories. Build systems link against libssl and libcrypto when compiling software that needs TLS, X.509, ASN.1, message digests, public-key cryptography, or provider-backed algorithms.
On Homebrew systems, dependent formulae use `openssl@3` as the normal OpenSSL 3 dependency, while users may need the formula's prefix, include path, library path, and certificate directory when compiling software outside Homebrew.
パッケージ好きにとっての重要性
`openssl@3` is one of the packages that makes a package manager feel like infrastructure. A minor OpenSSL branch change can affect build flags, test suites, compliance assumptions, certificate lookup, and runtime behavior for a large dependency graph.
It is also a clean example of why versioned formula names matter. The package name encodes a compatibility promise at the major-version level, while sibling formulae encode stricter branch promises for software that cannot simply follow the default.
タイムライン
- December 23, 1998: OpenSSL 0.9.1c is released.
- 2014: Heartbleed becomes a watershed event for OpenSSL maintenance and funding.
- September 7, 2021: OpenSSL 3.0.0 launches the OpenSSL 3 line.
- April 8, 2025: OpenSSL 3.5.0 is released in the OpenSSL 3 family.
- October 1, 2025: OpenSSL 3.6.0 appears in the OpenSSL release timeline.
- 2026: Homebrew lists `openssl@3` stable at 3.6.3 and notes a planned downgrade to 3.5 LTS before the 3.6 support window ends.
Related projects
- OpenSSL's ecosystem includes LibreSSL, BoringSSL, AWS-LC, GnuTLS, NSS, wolfSSL, and platform TLS stacks. Downstream packages such as OpenSSH, curl, web servers, database clients, and programming-language runtimes make OpenSSL branch choices visible far beyond cryptography specialists.
ソース
- https://docs.openssl.org/3.0/man7/migration_guide/
- https://formulae.brew.sh/formula/openssl@3
- https://github.com/openssl/openssl
- https://openssl-library.org/news/openssl-3.0-notes/
- https://openssl-library.org/news/openssl-3.5-notes/
- https://openssl-library.org/news/timeline/
- https://openssl-library.org/post/2018-12-20-20years/index.html
- https://openssl.foundation/about/history
承認ゲート
危険なコマンドの人手レビュー用メタデータ
ローカルの承認ゲートシードには openssl@3 用のルールが 5 件含まれます。対象エントリポイント: openssl。重大度ラベル: 重大, 高, 中。カバレッジ: partial、レビュー日: 2026-05-21。
ゲート対象アクション例
- Generate private keys or key pairs.
- Print private key details in text form.
- Export certificates and keys into PKCS#12 bundles.
- Connect to a remote TLS service and print handshake material.
- Encrypt or decrypt data to an output file.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$OPENSSLDIR/openssl.cnf
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.ssl~/.certs~/certs~/.config/openssl
実行可能ファイル
インストールされる実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
| 実行可能ファイルのデータはありません。 | |||
鮮度
バージョンと鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
ページ生成日2026-07-10
マネージャ版3.6.3
マネージャ更新日2026-07-06
ローカルデータOK
上流not checked
検出された最新未検出
https://github.com/openssl/openssl
- 情報No cached GitHub release or tag data was available.https://github.com/openssl/openssl信頼度 none
インストールメタデータ
パッケージメタデータ
| パッケージキー | brew:openssl@3 |
|---|---|
| バージョン | 3.6.3 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/openssl@3 |
| ホームページ | https://openssl-library.org |
| リポジトリ | https://github.com/openssl/openssl |
| 上流ドキュメント | https://docs.openssl.org/3.6/man1/openssl |
| ライセンス | Apache-2.0 |
| ソースアーカイブ | https://github.com/openssl/openssl/releases/download/openssl-3.6.3/openssl-3.6.3.tar.gz |
| 最終更新 | 2026-07-06T17:12:11Z |
| Pulse | updated |
| 依存関係 | ca-certificates |
| Bottle | 利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
| 注意点 | To add additional certificates, place .pem files in $HOMEBREW_PREFIX/etc/openssl@3/certs and run $HOMEBREW_PREFIX/opt/openssl@3/bin/c_rehash OpenSSL 3.6 is only supported until 2026-11-01 so the `openssl@3` formula will be downgraded to OpenSSL 3.5 (LTS) in a future update. |
レジストリ情報
ソースデータベース詳細
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | openssl@3 |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
他のパッケージマネージャ記録
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
apk95%
libssl3 3.5.7-r0
SSL shared libraries
sudo apk add libssl3- License: Apache-2.0
- Architecture: x86_64
- Source Package: openssl
- 1 依存関係
- 1 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl-3-devel 3.5.3-5.1
Development files for OpenSSL
sudo zypper install libopenssl-3-devel- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依存関係
- 3 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl-3-devel-32bit 3.5.3-5.1
Development files for OpenSSL
sudo zypper install libopenssl-3-devel-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 2 依存関係
- 2 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl-3-fips-provider 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依存関係
- 2 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl-3-fips-provider-32bit 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依存関係
- 1 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl-3-fips-provider-x86-64-v3 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider-x86-64-v3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 3 依存関係
- 1 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 7 依存関係
- 5 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl3-32bit 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依存関係
- 4 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
libopenssl3-x86-64-v3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3-x86-64-v3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 2 依存関係
- 2 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
openssl-3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install openssl-3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 8 依存関係
- 2 提供
- normalized package name match
- 一致条件: Openssl 3
zypper95%
openssl-3-doc 3.5.3-5.1
Manpages and additional documentation for openssl
sudo zypper install openssl-3-doc- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: openssl-3
- 2 提供
- normalized package name match
- 一致条件: Openssl 3
MacPorts95%
openssl3
sudo port install openssl3- normalized package name match
- 一致条件: Openssl 3
Debian apt88%
libssl-dev 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - development files
sudo apt install libssl-dev- Section: libdevel
- Architecture: amd64
- Source Package: openssl
- 1 依存関係
- 1 任意依存関係
- versioned package alias match
- 一致条件: Openssl
Debian apt88%
libssl-doc 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - development documentation
sudo apt install libssl-doc- Section: doc
- Architecture: all
- Source Package: openssl
- versioned package alias match
- 一致条件: Openssl
Debian apt88%
libssl3t64 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - shared libraries
sudo apt install libssl3t64- Section: libs
- Architecture: amd64
- Source Package: openssl
- 4 依存関係
- 1 提供
- versioned package alias match
- 一致条件: Openssl
Debian apt88%
openssl 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - cryptographic utility
sudo apt install openssl- Section: utils
- Architecture: amd64
- 2 依存関係
- 1 任意依存関係
- versioned package alias match
- 一致条件: Openssl
ソース経路
リポジトリデータから生成
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
Combined YAML source
View the package source record on GitHub.
使用ソース
- Nucleus package database
- approval-gate seed metadata
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment