凭据访问
Can read private keys, certificates, encrypted files, and passphrases.
代理安全
代理安全回答
openssl handles cryptographic keys, certificates, secrets, and encrypted payloads.
远程变更
Does not mutate remote systems directly but can prepare credentials used elsewhere.
发布/制品风险
Can produce keys, CSRs, signatures, and artifacts used in releases.
推荐控制
Gate private-key reads, key generation, signing, and decryption commands.
代理使用指南
Allow public certificate inspection; require approval before reading or producing secret key material.
安装
其他安装命令
macOS
Homebrew已验证 · 100%
brew install openssl@3local Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install openssl3MacPorts ports tree · devel/openssl3/Portfile · 来源: api.github.com
Linux
openSUSE zypper已验证 · 92%
sudo zypper install openssl-3openSUSE Tumbleweed package metadata · openssl-3 · 来源: download.opensuse.org
Alpine Linux apk已验证 · 92%
sudo apk add libssl3Alpine Linux edge package indexes · libssl3 · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install opensslDebian stable package indexes · openssl · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install opensslFedora Rawhide package metadata · openssl · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#opensslnixpkgs package indexes · openssl · 来源: raw.githubusercontent.com
Arch Linux pacman已验证 · 92%
sudo pacman -S opensslArch Linux sync databases · openssl · 来源: geo.mirror.pkgbuild.com
Windows
Chocolatey已验证 · 92%
choco install opensslChocolatey community package catalog · openssl · 来源: community.chocolatey.org
Scoop已验证 · 92%
scoop install main/opensslScoop official bucket manifest trees · bucket/openssl.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id ShiningLight.OpenSSL.Dev -eWindows Package Manager source index · ShiningLight.OpenSSL.Dev · 来源: cdn.winget.microsoft.com
概览
软件包摘要
Cryptography and SSL/TLS Toolkit
历史
项目历史与用法
Homebrew's `openssl@3` is the main OpenSSL 3 formula, providing the OpenSSL command-line tool plus libssl and libcrypto for TLS, SSL, certificate, and general cryptography workloads. The formula follows the default OpenSSL 3 branch while separate formulae such as `openssl@3.0` and `openssl@3.5` preserve branch-specific targets.
项目历史
OpenSSL was founded in 1998 as an open-source successor to SSLeay, the SSL library by Eric A. Young and Tim J. Hudson. The first OpenSSL release, 0.9.1c, shipped on December 23, 1998 after the initial project team chose the OpenSSL name to signal continuity for users of SSL-era tooling.
The library became a default dependency for secure internet software, from Apache modules and mail servers to package managers, language runtimes, and appliance firmware. Heartbleed in 2014 revealed both the scale of OpenSSL deployment and the fragility of its funding and maintenance model, prompting foundation and governance changes.
The OpenSSL 3 generation began with 3.0.0 on September 7, 2021. Its provider architecture, Apache-2.0 licensing, FIPS provider support, and deprecation of low-level APIs reshaped how applications link, configure, and certify OpenSSL-based cryptography.
采用历史
`openssl@3` is the broad Homebrew adoption path for OpenSSL 3. The cited formula page lists it as also known as `openssl` and `openssl@3.6`, bottled across macOS and Linux, with yearly installs in the millions.
Homebrew's page also shows the package-manager policy dimension: `openssl@3` can move between OpenSSL 3 minor branches, while `openssl@3.5` and `openssl@3.0` exist for consumers that need a pinned branch. That split lets Homebrew balance default freshness against downstream reproducibility.
使用方式
Users invoke the `openssl` CLI to inspect and generate certificates, create CSRs, test TLS endpoints, hash and sign data, convert PEM/DER/PKCS formats, and manage CA directories. Build systems link against libssl and libcrypto when compiling software that needs TLS, X.509, ASN.1, message digests, public-key cryptography, or provider-backed algorithms.
On Homebrew systems, dependent formulae use `openssl@3` as the normal OpenSSL 3 dependency, while users may need the formula's prefix, include path, library path, and certificate directory when compiling software outside Homebrew.
为什么软件包爱好者会关心
`openssl@3` is one of the packages that makes a package manager feel like infrastructure. A minor OpenSSL branch change can affect build flags, test suites, compliance assumptions, certificate lookup, and runtime behavior for a large dependency graph.
It is also a clean example of why versioned formula names matter. The package name encodes a compatibility promise at the major-version level, while sibling formulae encode stricter branch promises for software that cannot simply follow the default.
时间线
- December 23, 1998: OpenSSL 0.9.1c is released.
- 2014: Heartbleed becomes a watershed event for OpenSSL maintenance and funding.
- September 7, 2021: OpenSSL 3.0.0 launches the OpenSSL 3 line.
- April 8, 2025: OpenSSL 3.5.0 is released in the OpenSSL 3 family.
- October 1, 2025: OpenSSL 3.6.0 appears in the OpenSSL release timeline.
- 2026: Homebrew lists `openssl@3` stable at 3.6.3 and notes a planned downgrade to 3.5 LTS before the 3.6 support window ends.
Related projects
- OpenSSL's ecosystem includes LibreSSL, BoringSSL, AWS-LC, GnuTLS, NSS, wolfSSL, and platform TLS stacks. Downstream packages such as OpenSSH, curl, web servers, database clients, and programming-language runtimes make OpenSSL branch choices visible far beyond cryptography specialists.
来源
- https://docs.openssl.org/3.0/man7/migration_guide/
- https://formulae.brew.sh/formula/openssl@3
- https://github.com/openssl/openssl
- https://openssl-library.org/news/openssl-3.0-notes/
- https://openssl-library.org/news/openssl-3.5-notes/
- https://openssl-library.org/news/timeline/
- https://openssl-library.org/post/2018-12-20-20years/index.html
- https://openssl.foundation/about/history
审批门
高风险命令的人工审核元数据
本地审批门种子包含 5 条适用于 openssl@3 的规则。覆盖的入口点：openssl。严重级别：严重, 高, 中。覆盖状态：partial，审核于 2026-05-21。
受控操作示例
- Generate private keys or key pairs.
- Print private key details in text form.
- Export certificates and keys into PKCS#12 bundles.
- Connect to a remote TLS service and print handshake material.
- Encrypt or decrypt data to an output file.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$OPENSSLDIR/openssl.cnf
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.ssl~/.certs~/certs~/.config/openssl
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
| 没有可执行文件数据。 | |||
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-10
管理器版本3.6.3
管理器更新时间2026-07-06
本地数据OK
上游not checked
检测到的最新版本未检测到
https://github.com/openssl/openssl
- 信息No cached GitHub release or tag data was available.https://github.com/openssl/opensslnone 置信度
安装元数据
软件包元数据
| 软件包键 | brew:openssl@3 |
|---|---|
| 版本 | 3.6.3 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/openssl@3 |
| 主页 | https://openssl-library.org |
| 仓库 | https://github.com/openssl/openssl |
| 上游文档 | https://docs.openssl.org/3.6/man1/openssl |
| 许可证 | Apache-2.0 |
| 源码归档 | https://github.com/openssl/openssl/releases/download/openssl-3.6.3/openssl-3.6.3.tar.gz |
| 最后更新 | 2026-07-06T17:12:11Z |
| Pulse | updated |
| 依赖 | ca-certificates |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
| 注意事项 | To add additional certificates, place .pem files in $HOMEBREW_PREFIX/etc/openssl@3/certs and run $HOMEBREW_PREFIX/opt/openssl@3/bin/c_rehash OpenSSL 3.6 is only supported until 2026-11-01 so the `openssl@3` formula will be downgraded to OpenSSL 3.5 (LTS) in a future update. |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | openssl@3 |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
apk95%
libssl3 3.5.7-r0
SSL shared libraries
sudo apk add libssl3- License: Apache-2.0
- Architecture: x86_64
- Source Package: openssl
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl-3-devel 3.5.3-5.1
Development files for OpenSSL
sudo zypper install libopenssl-3-devel- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依赖
- 3 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl-3-devel-32bit 3.5.3-5.1
Development files for OpenSSL
sudo zypper install libopenssl-3-devel-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 2 依赖
- 2 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl-3-fips-provider 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依赖
- 2 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl-3-fips-provider-32bit 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依赖
- 1 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl-3-fips-provider-x86-64-v3 3.5.3-5.1
OpenSSL FIPS provider
sudo zypper install libopenssl-3-fips-provider-x86-64-v3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 3 依赖
- 1 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 7 依赖
- 5 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl3-32bit 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3-32bit- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 4 依赖
- 4 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
libopenssl3-x86-64-v3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install libopenssl3-x86-64-v3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 2 依赖
- 2 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
openssl-3 3.5.3-5.1
Secure Sockets and Transport Layer Security
sudo zypper install openssl-3- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: openssl-3
- 8 依赖
- 2 提供
- normalized package name match
- 匹配方式：Openssl 3
zypper95%
openssl-3-doc 3.5.3-5.1
Manpages and additional documentation for openssl
sudo zypper install openssl-3-doc- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: openssl-3
- 2 提供
- normalized package name match
- 匹配方式：Openssl 3
MacPorts95%
openssl3
sudo port install openssl3- normalized package name match
- 匹配方式：Openssl 3
Debian apt88%
libssl-dev 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - development files
sudo apt install libssl-dev- Section: libdevel
- Architecture: amd64
- Source Package: openssl
- 1 依赖
- 1 可选依赖
- versioned package alias match
- 匹配方式：Openssl
Debian apt88%
libssl-doc 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - development documentation
sudo apt install libssl-doc- Section: doc
- Architecture: all
- Source Package: openssl
- versioned package alias match
- 匹配方式：Openssl
Debian apt88%
libssl3t64 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - shared libraries
sudo apt install libssl3t64- Section: libs
- Architecture: amd64
- Source Package: openssl
- 4 依赖
- 1 提供
- versioned package alias match
- 匹配方式：Openssl
Debian apt88%
openssl 3.5.6-1~deb13u1
Secure Sockets Layer toolkit - cryptographic utility
sudo apt install openssl- Section: utils
- Architecture: amd64
- 2 依赖
- 1 可选依赖
- versioned package alias match
- 匹配方式：Openssl
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Nucleus package database
- approval-gate seed metadata
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment