# Install openssl@3.5 with Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper Cryptography and SSL/TLS Toolkit. Version 3.5.7 via Homebrew; verified 2026-07-06. ## Install ```sh sudo av install brew:openssl@3.5 ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install openssl@3.5 ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install openssl ``` Evidence: MacPorts ports tree: devel/openssl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add libcrypto3 ``` Evidence: Alpine Linux edge package indexes: libcrypto3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install libssl-dev ``` Evidence: Debian stable package indexes: libssl-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install openssl ``` Evidence: Fedora Rawhide package metadata: openssl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#openssl ``` Evidence: nixpkgs package indexes: openssl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S openssl ``` Evidence: Arch Linux sync databases: openssl from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - zypper (92%): ```sh sudo zypper install libopenssl-devel ``` Evidence: openSUSE Tumbleweed package metadata: libopenssl-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install openssl ``` Evidence: Chocolatey community package catalog: openssl from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openssh' - Scoop (92%): ```sh scoop install main/openssl ``` Evidence: Scoop official bucket manifest trees: bucket/openssl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id ShiningLight.OpenSSL.Dev -e ``` Evidence: Windows Package Manager source index: ShiningLight.OpenSSL.Dev from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:openssl@3.5 - **Package manager:** Homebrew - **Package manager page:** - **Version:** 3.5.7 - **Source summary:** Cryptography and SSL/TLS Toolkit - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-06T03:09:43Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Dependencies - ca-certificates ## Install behavior - Post-install hook: not defined - Caveats: To add additional certificates, place .pem files in $HOMEBREW_PREFIX/etc/openssl@3.5/certs and run $HOMEBREW_PREFIX/opt/openssl@3.5/bin/c_rehash - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 3.5.7 - Package-manager updated: 2026-07-06 - Local data: ok - Upstream repository: https://github.com/openssl/openssl - info: No cached GitHub release or tag data was available. ## Project history and usage OpenSSL 3.5 is a later OpenSSL 3 branch packaged by Homebrew as `openssl@3.5`. It carries the same OpenSSL toolkit identity -- libssl, libcrypto, providers, FIPS-oriented architecture, and the `openssl` CLI -- while giving packagers a versioned target distinct from the moving `openssl@3` formula and older 3.0 line. ### Project history OpenSSL began as the successor to SSLeay in December 1998, when Apache and SSL practitioners organized a maintained open-source TLS/SSL toolkit after Eric Young and Tim Hudson left C2Net for RSA. The project released OpenSSL 0.9.1c on December 23, 1998 and grew into one of the internet's most reused cryptographic libraries. The OpenSSL 3 family started with 3.0.0 on September 7, 2021. That major release introduced providers, Apache-2.0 licensing, a FIPS provider path, and deprecation of low-level algorithm APIs, creating the architecture that later 3.x branches such as 3.5 continue to evolve. OpenSSL 3.5.0 appears in the OpenSSL release timeline on April 8, 2025. The 3.5 series release notes track subsequent security and bug-fix releases in that branch, including 3.5.7 on June 9, 2026. ### Adoption history Versioned OpenSSL formulae exist because cryptographic libraries are high-blast-radius dependencies. Homebrew packages `openssl@3.5` separately so projects can pin a 3.5 ABI/runtime expectation while `openssl@3` follows the default OpenSSL 3 branch. Homebrew's formula page lists `openssl@3.5` as keg-only, bottled for macOS and Linux, and stable at 3.5.7. The same page shows tens of thousands of yearly installs, much smaller than `openssl@3` but substantial for a branch-pinned formula. ### How it is used Developers and operators use `openssl@3.5` for the same jobs as other OpenSSL 3 packages: building TLS-enabled software, linking libssl/libcrypto, managing certificates and CSRs, testing TLS endpoints, converting key and certificate formats, and configuring provider behavior. The branch is useful when a project wants newer OpenSSL 3 fixes and behavior than 3.0 without taking whatever branch Homebrew's `openssl@3` alias targets. That matters for CI reproducibility, binary packaging, and applications with crypto compliance or performance testing tied to a specific series. ### Why package nerds care OpenSSL 3.5 demonstrates the packaging tension around foundational libraries: users want security updates and new protocol work, while downstream builds want stable headers, ABIs, providers, and configuration directories. The separate Homebrew formula makes that tension explicit. For package nerds, `openssl@3.5` is also a reminder that OpenSSL packaging is rarely just `brew install openssl`. Keg-only paths, CA certificate directories, `c_rehash`, branch support windows, and dependent formula relinking all become part of the package's real behavior. ### Timeline - December 23, 1998: OpenSSL 0.9.1c is released as the SSLeay successor. - September 7, 2021: OpenSSL 3.0.0 launches the provider-based OpenSSL 3 architecture. - April 8, 2025: OpenSSL 3.5.0 is released. - June 9, 2026: OpenSSL 3.5.7 is released as a security patch release. - 2026: Homebrew lists `openssl@3.5` as a keg-only formula with stable version 3.5.7. ### Related projects - OpenSSL 3.5 sits among a family of TLS/crypto libraries and forks or alternatives including LibreSSL, BoringSSL, AWS-LC, GnuTLS, NSS, and wolfSSL. It is consumed by command-line tools, servers, language runtimes, databases, and package-manager build systems. ### Sources - - - - - - - ## Security Notes No matching local secret-handling manifest was found for openssl@3.5. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: $OPENSSLDIR/openssl.cnf ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** openssl@3.5 - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** yes - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - libssl-dev - 3.5.6-1~deb13u1: versioned package alias match | Debian stable package indexes: libssl-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - development files | https://openssl-library.org - Debian apt - libssl-doc - 3.5.6-1~deb13u1: versioned package alias match | Debian stable package indexes: libssl-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - development documentation | https://openssl-library.org - Debian apt - libssl3t64 - 3.5.6-1~deb13u1: versioned package alias match | Debian stable package indexes: libssl3t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - shared libraries | https://openssl-library.org - Debian apt - openssl - 3.5.6-1~deb13u1: versioned package alias match | Debian stable package indexes: openssl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - cryptographic utility | https://openssl-library.org - Debian apt - openssl-provider-fips - 3.5.6-1~deb13u1: versioned package alias match | Debian stable package indexes: openssl-provider-fips from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - cryptographic utility | https://openssl-library.org - Debian apt - openssl-provider-legacy - 3.5.6-1~deb13u1: versioned package alias match | Debian stable package indexes: openssl-provider-legacy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - cryptographic utility | https://openssl-library.org - Nix - openssl: versioned package alias match | nixpkgs package indexes: openssl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - libssl-dev - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: libssl-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - development files | https://www.openssl.org/ - Ubuntu apt - libssl-doc - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: libssl-doc from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - development documentation | https://www.openssl.org/ - Ubuntu apt - libssl3t64 - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: libssl3t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - shared libraries | https://www.openssl.org/ - Ubuntu apt - openssl - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: openssl from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - cryptographic utility | https://www.openssl.org/ - apk - libcrypto3 - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: libcrypto3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Crypto library from openssl | https://www.openssl.org/ - apk - libssl3 - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: libssl3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | SSL shared libraries | https://www.openssl.org/ - apk - openssl - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: openssl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Toolkit for Transport Layer Security (TLS) | https://www.openssl.org/ - apk - openssl-dbg - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: openssl-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Toolkit for Transport Layer Security (TLS) (debug symbols) | https://www.openssl.org/ - apk - openssl-dev - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: openssl-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Toolkit for Transport Layer Security (TLS) (development files) | https://www.openssl.org/ ## Related links - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [ca-certificates](https://www.automicvault.com/pkg/brew/ca-certificates/) - Runtime dependency declared by Homebrew. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Package name indicates the same formula family. - [openssl@3.0](https://www.automicvault.com/pkg/brew/openssl-3-0/) - Package name indicates the same formula family. - [openssl@4](https://www.automicvault.com/pkg/brew/openssl-4/) - Package name indicates the same formula family. ## Combined YAML source View the package source record on GitHub. [combined/openssl@3.5.yml](https://github.com/automic-vault/db/blob/main/combined/openssl@3.5.yml) ## Sources - Nucleus package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - package relationship graph - external package-manager database matches - cross-ecosystem install command graph