install

Additional install commands

macOS

Homebrewverified · 100%

brew install openfortivpn

local Homebrew formula metadata

MacPortsverified · 94%

sudo port install openfortivpn

MacPorts ports tree · net/openfortivpn/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%

sudo apk add openfortivpn

Alpine Linux edge package indexes · openfortivpn · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%

sudo apt install openfortivpn

Debian stable package indexes · openfortivpn · source: deb.debian.org

Fedora dnfverified · 92%

sudo dnf install openfortivpn

Fedora Rawhide package metadata · openfortivpn · source: dl.fedoraproject.org

Nixverified · 92%

nix profile install nixpkgs#openfortivpn

nixpkgs package indexes · pkgs/by-name/op/openfortivpn/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%

sudo pacman -S openfortivpn

Arch Linux sync databases · openfortivpn · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%

sudo zypper install openfortivpn

openSUSE Tumbleweed package metadata · openfortivpn · source: download.opensuse.org

overview

Package summary

Open Fortinet client for PPP+TLS VPN tunnel services

Project links

Commands and aliases

openfortivpn

history

Project history and usage

openfortivpn is a command-line client for Fortinet-compatible PPP-over-TLS VPN services. It launches pppd, handles the TLS session to the gateway, and bridges that gateway communication to a local point-to-point network interface.

Project history

The GitHub repository was created in January 2015 to provide an open client for Fortinet VPNs, filling a practical gap for Unix-like users who wanted a scriptable FortiGate SSL VPN client without relying on proprietary GUI tooling.

The changelog shows the project evolving around real VPN compatibility work: OpenSSL compatibility, resolvconf integration, DNS suffix handling, smartcard support, one-time-password and FortiToken-push handling, host-check support, systemd notification, TLS certificate fixes, and later SAML login support in the 1.23.0 series.

Adoption history

openfortivpn spread through operating-system package repositories because it solves a narrow but common enterprise problem. The README lists packages for Fedora/CentOS, openSUSE/SLE, Gentoo, NixOS, Arch Linux, Debian, Ubuntu, Solus, Alpine Linux, Homebrew, and MacPorts.

How it is used

Operators run openfortivpn with a gateway, username, optional realm, certificate settings, or a config file such as /etc/openfortivpn/my-config. Because it spawns pppd, changes routes, and may update DNS configuration, the README documents the need for elevated privileges and warns administrators to restrict who can run it as root.

The tool is used most often as a small terminal-oriented VPN connector: connect to a FortiGate endpoint, authenticate with password, OTP, smartcard, certificate, SAML, or an externally supplied cookie, then let pppd establish the tunnel and route traffic.

Why package nerds care

openfortivpn is package-nerd interesting because it is infrastructure glue at the exact boundary where proprietary network appliances meet open Unix clients. Its value is less in a broad framework and more in being a small, maintained binary that distro maintainers can ship for a specific corporate VPN protocol.

Timeline

January 2015: the openfortivpn GitHub repository was created.
Version 1.12.0: the changelog records fixes for CVE-2020-7041, CVE-2020-7042, and CVE-2020-7043 around TLS certificate handling.
Version 1.23.0: SAML login authentication was added.
Version 1.24.0: OpenSSL 3 PKCS#11 support and OpenSSL engine support were updated.

Related projects

openfortivpn is related to Fortinet FortiGate/FortiClient SSL VPN deployments, pppd, OpenSSL, resolvconf, OpenFortiGUI, and other open VPN clients such as OpenConnect, though its focus is Fortinet's PPP+TLS VPN behavior.

Sources

security posture

Risk level: orange

broad file, network, media, or database tool signal. formula declares a Homebrew service.

Risk classifier

orange risk · medium confidence · infrastructure

Why

broad file, network, media, or database tool signal
formula declares a Homebrew service

Signals

metadata:service
text:client

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Formula metadata declares a service or daemon block.
Homebrew bottle metadata is available for 6 platform targets.
Installs with 1 runtime dependencies.
Build metadata lists 3 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: /etc/openfortivpn/my-config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: /etc/openfortivpn/my-config

executables

Installed executables

Command	Kind	Exposure	Note
`openfortivpn`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version1.24.1

manager updated2026-05-12

local dataok

upstreamcurrent

latest detectedv1.24.1

https://github.com/adrienverge/openfortivpn

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:openfortivpn
Version	1.24.1
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/openfortivpn
Homepage	https://github.com/adrienverge/openfortivpn
Repository	https://github.com/adrienverge/openfortivpn
Upstream docs	https://github.com/adrienverge/openfortivpn#readme
License	GPL-3.0-or-later WITH cryptsetup-OpenSSL-exception
Source archive	https://github.com/adrienverge/openfortivpn/archive/refs/tags/v1.24.1.tar.gz
Last updated	2026-05-12T11:33:36-04:00
Pulse	updated
Dependencies	openssl@4
Build dependencies	autoconf, automake, pkgconf
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	openfortivpn
Version Scheme	0
Revision	1
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

openfortivpn 1.23.1-1

Fortinet client for PPP+SSL VPN tunnel services

https://github.com/adrienverge/openfortivpn

sudo apt install openfortivpn

Section: net
Architecture: amd64
4 dependencies
1 optional deps
normalized package name match
Matched by: Openfortivpn

Debian stable package indexes · deb.debian.org · Debian stable package indexes: openfortivpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

Nix95%

openfortivpn

nix profile install nixpkgs#openfortivpn

normalized package name match
Matched by: Openfortivpn

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/op/openfortivpn/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Ubuntu apt95%

openfortivpn 1.21.0-2build2

Fortinet client for PPP+SSL VPN tunnel services

https://github.com/adrienverge/openfortivpn

sudo apt install openfortivpn

Section: universe/net
Architecture: amd64
4 dependencies
1 optional deps
normalized package name match
Matched by: Openfortivpn

Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: openfortivpn from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

apk95%

openfortivpn 1.24.1-r0

Openfortivpn is a client for PPP+SSL VPN tunnel services

https://github.com/adrienverge/openfortivpn

sudo apk add openfortivpn

License: GPL-3.0-only
Architecture: x86_64
Source Package: openfortivpn
1 dependencies
1 provides
normalized package name match
Matched by: Openfortivpn

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openfortivpn from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

apk95%

openfortivpn-doc 1.24.1-r0

Openfortivpn is a client for PPP+SSL VPN tunnel services (documentation)

https://github.com/adrienverge/openfortivpn

sudo apk add openfortivpn-doc

License: GPL-3.0-only
Architecture: x86_64
Source Package: openfortivpn
normalized package name match
Matched by: Openfortivpn

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openfortivpn-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

dnf95%

openfortivpn 1.23.1-3.fc44

Client for PPP+SSL VPN tunnel services

https://github.com/adrienverge/openfortivpn

sudo dnf install openfortivpn

License: GPL-3.0-or-later
Category: Unspecified
Architecture: x86_64
Source Package: openfortivpn
5 dependencies
2 provides
normalized package name match
Matched by: Openfortivpn

Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: openfortivpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

pacman95%

openfortivpn 1.24.1-1

An open implementation of Fortinet's proprietary PPP+SSL VPN solution

https://github.com/adrienverge/openfortivpn

sudo pacman -S openfortivpn

License: GPL-3.0-only
Architecture: x86_64
5 dependencies
normalized package name match
Matched by: Openfortivpn

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: openfortivpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

zypper95%

openfortivpn 1.24.1-1.2

Client for PPP+SSL VPN tunnel services

https://github.com/adrienverge/openfortivpn

sudo zypper install openfortivpn

License: GPL-3.0-or-later
Category: Productivity/Networking/Security
Architecture: x86_64
Source Package: openfortivpn
5 dependencies
2 provides
normalized package name match
Matched by: Openfortivpn

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: openfortivpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

MacPorts95%

openfortivpn

sudo port install openfortivpn

normalized package name match
Matched by: Openfortivpn

MacPorts ports tree · api.github.com · MacPorts ports tree: net/openfortivpn/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/openfortivpn.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install openfortivpn with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

Additional install commands

macOS

Linux

Package summary

Project links

Commands and aliases

Project history and usage

Project history

Adoption history

How it is used

Why package nerds care

Timeline

Related projects

Sources

Risk level: orange

Risk classifier

Why

Signals

Install behavior

Recommended review

Configuration and credential file locations

Configuration files

Credential files

Installed executables

Version and freshness

Package metadata

Source database details

Other package-manager records

Internal package links

Topical hubs

Related tools

Same workflow

Agent security guides

Generated from repository data

Combined YAML source

Used sources