Automic VaultAutomic Vault

brew

Install libressl with Homebrew, apk, MacPorts, Nix, pacman, zypper, chocolatey, apt, dnf, scoop, winget

Version of the SSL/TLS protocol forked from OpenSSL. Version 4.3.2 via Homebrew; verified 2026-07-05.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install libressl

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install libressl

MacPorts ports tree · security/libressl/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add libressl

Alpine Linux edge package indexes · libressl · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#libressl

nixpkgs package indexes · pkgs/by-name/li/libressl/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S libressl

Arch Linux sync databases · libressl · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install libcrypto57

openSUSE Tumbleweed package metadata · libcrypto57 · source: download.opensuse.org

Debian aptverified · 92%
sudo apt install libssl-dev

Debian stable package indexes · libssl-dev · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install openssl

Fedora Rawhide package metadata · openssl · source: dl.fedoraproject.org

Windows

Chocolateyverified · 92%
choco install openssl

Chocolatey community package catalog · openssl · source: community.chocolatey.org

Scoopverified · 92%
scoop install main/openssl

Scoop official bucket manifest trees · bucket/openssl.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id ShiningLight.OpenSSL.Dev -e

Windows Package Manager source index · ShiningLight.OpenSSL.Dev · source: cdn.winget.microsoft.com

overview

Package summary

Version of the SSL/TLS protocol forked from OpenSSL

Commands and aliases

  • ocspcheck
  • openssl

history

Project history and usage

LibreSSL is the OpenBSD project's fork of the OpenSSL TLS and crypto stack, started in 2014 with goals of modernization, auditability, security, and OpenBSD-style development practice. It ships libcrypto, libssl, libtls, and command-line utilities such as openssl and ocspcheck.

Project history

The official site describes LibreSSL as forked from OpenSSL in 2014, with primary development inside the OpenBSD source tree and regular portable repackaging for other operating systems. The portable repository states the fork point as OpenSSL 1.0.1g and explains that the GitHub project contains the build scaffold and compatibility layer for building OpenBSD's LibreSSL code outside OpenBSD.

The project goals are deliberately conservative: modernize the OpenSSL codebase, apply code review and frequent releases, remove obsolete or broken features and operating-system support, and encourage safer programming interfaces. The portable README also makes clear that LibreSSL is not ABI-compatible with OpenSSL and that API compatibility is limited by the projects' different priorities.

Adoption history

LibreSSL was adopted first as part of OpenBSD and then as a portable package for Linux, BSDs, macOS, Windows, and other systems. Its wider package-manager life has been shaped by a trade-off: users wanted a cleaned-up OpenSSL-compatible stack, but many large ecosystems remained tied to OpenSSL ABI/API expectations.

For Unix distributions and Homebrew, LibreSSL became a useful alternate TLS implementation and a source of the libtls API, while also serving as a practical stress test for software that claimed OpenSSL portability but depended on OpenSSL-specific behavior.

How it is used

Packaged LibreSSL is used either by linking applications to libcrypto, libssl, or libtls, or through command-line tools such as openssl and ocspcheck. The release process tracks OpenBSD development: stable portable branches are derived from OpenBSD releases and receive security updates for a defined support window.

Why package nerds care

LibreSSL is package-nerd significant because it is a security fork with real downstream consequences. It forces maintainers to separate OpenSSL-the-API from OpenSSL-the-implementation, exposes accidental ABI assumptions, and gives package managers a second TLS stack whose release cadence is tied to OpenBSD rather than the OpenSSL project.

Timeline

  • 2014: LibreSSL forked from OpenSSL.
  • 2014-07-11: LibreSSL 2.0.0 released, based on an OpenBSD 5.6 development snapshot.
  • 2014-08-08: LibreSSL 2.0.5 tied to OpenBSD 5.6 release.
  • 2015-09-23: LibreSSL 2.3.0 released.
  • 2024-10-14: LibreSSL 4.0.0 released.
  • 2026-05-25: LibreSSL 4.3.2 released.

Related projects

  • Related projects include OpenSSL, OpenBSD's libcrypto/libssl/libtls trees, BoringSSL, AWS-LC, wolfSSL, mbedTLS, and downstream software such as OpenSSH and curl that depend on TLS libraries.

security posture

Risk level: green

library-like package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • library-like package without higher-risk signals

Signals

  • metadata:library-like

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/ssl/openssl.cnf

executables

Installed executables

CommandKindExposureNote
ocspcheckcliglobal executable
opensslcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version4.3.2
manager updated2026-07-05
local dataok
upstreamnot checked
latest detectednot detected

https://www.libressl.org/

install metadata

Package metadata

Package keybrew:libressl
Version4.3.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/libressl
Homepagehttps://www.libressl.org/
Repositoryhttps://github.com/libressl/portable
Upstream docshttps://github.com/libressl/portable#readme
LicenseOpenSSL
Source archivehttps://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.3.2.tar.gz
Last updated2026-07-05T04:22:04Z
Pulseupdated
Dependenciesca-certificates
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared
CaveatsA CA file has been bootstrapped using certificates from the SystemRoots keychain. To add additional certificates (e.g. the certificates added in the System keychain), place .pem files in $HOMEBREW_PREFIX/etc/libressl/certs and run $HOMEBREW_PREFIX/opt/libressl/bin/openssl certhash $HOMEBREW_PREFIX/etc/libressl/certs

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namelibressl
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyyes
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

libressl

nix profile install nixpkgs#libressl
  • normalized package name match
  • Matched by: Libressl
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/li/libressl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

libressl 4.3.1-r0

Version of the TLS/crypto stack forked from OpenSSL

https://www.libressl.org/

sudo apk add libressl
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl-dbg 4.3.1-r0

Version of the TLS/crypto stack forked from OpenSSL (debug symbols)

https://www.libressl.org/

sudo apk add libressl-dbg
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl-dev 4.3.1-r0

Version of the TLS/crypto stack forked from OpenSSL (development files)

https://www.libressl.org/

sudo apk add libressl-dev
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl-doc 4.3.1-r0

Version of the TLS/crypto stack forked from OpenSSL (documentation)

https://www.libressl.org/

sudo apk add libressl-doc
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl-nc 4.3.1-r0

libressl TLS-enabled nc(1)

https://www.libressl.org/

sudo apk add libressl-nc
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl-nc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl-static 4.3.1-r0

Version of the TLS/crypto stack forked from OpenSSL (static library)

https://www.libressl.org/

sudo apk add libressl-static
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl4.3-libcrypto 4.3.1-r0

libressl libcrypto library

https://www.libressl.org/

sudo apk add libressl4.3-libcrypto
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl4.3-libcrypto from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl4.3-libssl 4.3.1-r0

libressl libssl library

https://www.libressl.org/

sudo apk add libressl4.3-libssl
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl4.3-libssl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libressl4.3-libtls 4.3.1-r0

libressl libtls library

https://www.libressl.org/

sudo apk add libressl4.3-libtls
  • License: custom
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Libressl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libressl4.3-libtls from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

libressl 4.3.2-1

Free version of the TLS/crypto stack forked from OpenSSL

https://www.libressl.org/

sudo pacman -S libressl
  • License: ISC AND custom:OpenSSL
  • Architecture: x86_64
  • 1 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Libressl
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: libressl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

libcrypto57 4.3.2-1.1

An SSL/TLS protocol implementation

https://www.libressl.org/

sudo zypper install libcrypto57
  • License: OpenSSL
  • Category: System/Libraries
  • Architecture: x86_64
  • Source Package: libressl
  • 2 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Libressl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libcrypto57 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

libressl 4.3.2-1.1

An SSL/TLS protocol implementation

https://www.libressl.org/

sudo zypper install libressl
  • License: OpenSSL
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: libressl
  • 1 dependencies
  • 4 provides
  • normalized package name match
  • Matched by: Libressl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libressl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

libressl-devel 4.3.2-1.1

Development files for LibreSSL, an SSL/TLS protocol implementation

https://www.libressl.org/

sudo zypper install libressl-devel
  • License: OpenSSL
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: libressl
  • 5 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Libressl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libressl-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

libressl-devel-doc 4.3.2-1.1

Documentation for the LibreSSL API

https://www.libressl.org/

sudo zypper install libressl-devel-doc
  • License: OpenSSL
  • Category: Documentation/Man
  • Architecture: noarch
  • Source Package: libressl
  • 2 provides
  • normalized package name match
  • Matched by: Libressl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libressl-devel-doc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

libssl60 4.3.2-1.1

An SSL/TLS protocol implementation

https://www.libressl.org/

sudo zypper install libssl60
  • License: OpenSSL
  • Category: System/Libraries
  • Architecture: x86_64
  • Source Package: libressl
  • 3 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Libressl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: libssl60 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

Same workflow

  • gnutlsShares av.db curated category or tags: cli, cryptography, security, ssl, tls.
  • wolfsslShares av.db curated category or tags: cli, cryptography, security, ssl, tls.
  • nssShares av.db curated category or tags: cli, cryptography, security, tls.
  • gmsslShares av.db curated category or tags: cli, cryptography, security, ssl, tls.
  • mbedtlsShares av.db curated category or tags: cli, cryptography, security, ssl, tls.
  • botanShares av.db curated category or tags: cli, cryptography, security, tls.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment