Automic VaultAutomic Vault

brew

使用 Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, zypper, scoop, winget 安装 openvpn

查看 openvpn 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

代理安全

代理安全回答

openvpn controls VPN connectivity and can route agent traffic through private networks.

凭据访问

Reads VPN profiles, private keys, certificates, passwords, and auth files.

远程变更

Primarily changes network reachability, not application data.

发布/制品风险

Can expose private network access to downstream tools.

推荐控制

Gate VPN start, config reads, and private-key handling.

代理使用指南

Allow config validation; require approval before connecting or reading credential material.

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install openvpn

local Homebrew formula metadata

Linux

Alpine Linux apk已验证 · 92%
sudo apk add openvpn

Alpine Linux edge package indexes · openvpn · 来源: dl-cdn.alpinelinux.org

Debian apt已验证 · 92%
sudo apt install openvpn

Debian stable package indexes · openvpn · 来源: deb.debian.org

Fedora dnf已验证 · 92%
sudo dnf install openvpn

Fedora Rawhide package metadata · openvpn · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#openvpn

nixpkgs package indexes · openvpn · 来源: raw.githubusercontent.com

Arch Linux pacman已验证 · 92%
sudo pacman -S openvpn

Arch Linux sync databases · openvpn · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%
sudo zypper install openvpn

openSUSE Tumbleweed package metadata · openvpn · 来源: download.opensuse.org

Windows

Chocolatey已验证 · 92%
choco install openvpn

Chocolatey community package catalog · openvpn · 来源: community.chocolatey.org

Scoop已验证 · 92%
scoop install extras/openvpn

Scoop official bucket manifest trees · bucket/openvpn.json · 来源: api.github.com

Windows Package Manager已验证 · 92%
winget install --id OpenVPNTechnologies.OpenVPN -e

Windows Package Manager source index · OpenVPNTechnologies.OpenVPN · 来源: cdn.winget.microsoft.com

概览

软件包摘要

SSL/TLS VPN implementing OSI layer 2 or 3 secure network extension

命令和别名

  • openvpn

历史

项目历史与用法

OpenVPN is a long-running open source VPN implementation built around SSL/TLS, TUN/TAP virtual network interfaces, and a single userspace daemon that can act as client or server. It became one of the default choices for self-hosted and commercial VPN deployments because it crossed operating-system, firewall, NAT, and package-manager boundaries better than many older VPN stacks.

项目历史

OpenVPN was created by James Yonan and traces its public history to 2001. The project chose a custom VPN protocol using SSL/TLS for key exchange and OpenSSL for cryptography rather than implementing IPsec, PPTP, or L2TP.

OpenVPN 1.x was mainly a point-to-point tool. OpenVPN 2.0 was the major architectural step: the official how-to and manual describe scalable multi-client TCP/UDP server mode, where many clients connect to a single server process and share one TUN or TAP interface.

The 2.x line added features that made OpenVPN practical in mixed networks: certificate-based TLS deployments, username/password authentication hooks, pushed routes and DNS options, management interfaces, plugins and scripts, IPv6 support, Windows service improvements, and continued crypto and platform updates.

采用历史

OpenVPN spread through Unix and Linux distributions, router firmware, VPN providers, and enterprise remote-access setups because it used ordinary TCP or UDP ports, worked through many NAT and firewall environments, and could be configured with plain text profile files. Package availability across Linux, BSD, macOS, Windows package managers, and router-oriented ecosystems made .ovpn profiles a portable operational artifact.

OpenVPN Inc. built commercial products such as Access Server and OpenVPN Connect around the open source Community Edition while continuing to support the community project. That split gave the protocol a dual life: a free daemon for administrators and a managed product line for organizations.

使用方式

Operators use OpenVPN to build routed layer-3 VPNs with TUN devices, bridged layer-2 VPNs with TAP devices, site-to-site tunnels, road-warrior remote access, lab networks, router-based VPN clients, and compatibility endpoints for commercial VPN services. A typical deployment combines server and client configuration files, certificates or username/password credentials, route pushes, firewall rules, and system services.

Package users care about the single openvpn executable because it is both the client and the server. That keeps scripting, service supervision, and container use straightforward, while configuration complexity lives in profile files and PKI assets.

为什么软件包爱好者会关心

OpenVPN is one of the canonical networking packages where packaging is operations: binaries, services, sample configs, plugin paths, systemd or launchd integration, certificate locations, and kernel TUN/TAP support all affect whether the package is usable.

Its long history also makes it a compatibility anchor. Even as WireGuard changed expectations for small VPN codebases, OpenVPN remains important for existing .ovpn profiles, mature server deployments, commercial-provider compatibility, and environments that need TLS-style transport flexibility.

时间线

  • 2001: James Yonan releases the first OpenVPN versions.
  • 2005: OpenVPN 2.0 establishes multi-client server mode as the core scalable deployment pattern.
  • 2013-era 2.3 line: OpenVPN documentation notes complete IPv6 and PolarSSL support among 2.3 improvements.
  • 2017-era 2.4 line: the project adds modern client/server negotiation features and continues improving Windows service behavior.
  • 2020s: OpenVPN Community Edition continues through the 2.5, 2.6, and 2.7 lines while OpenVPN Inc. maintains commercial Access Server and OpenVPN Connect products around the protocol.

Related projects

  • OpenVPN is related to OpenVPN Access Server, OpenVPN Connect, EasyRSA, Tunnelblick, NetworkManager-openvpn, OpenWrt and other router firmware integrations, SoftEther VPN's OpenVPN protocol support, WireGuard, IPsec, and TLS libraries such as OpenSSL and mbed TLS.

安全态势

风险级别:orange

broad file, network, media, or database tool signal. formula declares a Homebrew service.

风险分类器

orange 风险 · 中 置信度 · infrastructure

原因

  • broad file, network, media, or database tool signal
  • formula declares a Homebrew service

信号

  • metadata:service
  • text:network

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • formula 元数据声明了服务或守护进程块。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 4 个运行时依赖。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

macOS
~/Library/Application Support/OpenVPN~/Library/Application Support/Tunnelblick/Configurations
Unix
~/.openvpn$XDG_CONFIG_HOME/openvpn~/.config/openvpn

Credential files

Credential-bearing paths to review before unattended agent runs.

macOS
~/Library/Application Support/OpenVPN~/Library/Application Support/Tunnelblick/Configurations
Unix
~/.openvpn$XDG_CONFIG_HOME/openvpn~/.config/openvpn

可执行文件

已安装的可执行文件

命令类型暴露范围备注
openvpncli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-25
管理器版本2.7.5
管理器更新时间2026-07-02
本地数据OK
上游not checked
检测到的最新版本未检测到

https://openvpn.net/community/

安装元数据

软件包元数据

软件包键brew:openvpn
版本2.7.5
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/openvpn
主页https://openvpn.net/community/
仓库https://github.com/OpenVPN/openvpn
上游文档https://openvpn.github.io/openvpn
许可证GPL-2.0-only WITH openvpn-openssl-exception
源码归档https://swupdate.openvpn.net/community/releases/openvpn-2.7.5.tar.gz
最后更新2026-07-02T16:40:57Z
Pulseupdated
依赖lz4, lzo, openssl@3, pkcs11-helper
构建依赖pkgconf
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务declared

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameopenvpn
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

openvpn 2.6.14-1+deb13u1

virtual private network daemon

https://openvpn.net/

sudo apt install openvpn
  • Section: net
  • Architecture: amd64
  • 12 依赖
  • 5 可选依赖
  • normalized package name match
  • 匹配方式:Openvpn
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

openvpn

nix profile install nixpkgs#openvpn
  • normalized package name match
  • 匹配方式:Openvpn
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

openvpn 2.6.9-1ubuntu4

virtual private network daemon

https://openvpn.net/

sudo apt install openvpn
  • Section: net
  • Architecture: amd64
  • 12 依赖
  • 5 可选依赖
  • normalized package name match
  • 匹配方式:Openvpn
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: openvpn from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
apk95%

openvpn 2.7.3-r0

Robust, and highly configurable VPN (Virtual Private Network)

https://openvpn.net/

sudo apk add openvpn
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Architecture: x86_64
  • Source Package: openvpn
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Openvpn
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

openvpn-auth-pam 2.7.3-r0

OpenVPN plugin for PAM authentication

https://openvpn.net/

sudo apk add openvpn-auth-pam
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Architecture: x86_64
  • Source Package: openvpn
  • 1 依赖
  • normalized package name match
  • 匹配方式:Openvpn
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openvpn-auth-pam from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

openvpn-dev 2.7.3-r0

Robust, and highly configurable VPN (Virtual Private Network) (development files)

https://openvpn.net/

sudo apk add openvpn-dev
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Architecture: x86_64
  • Source Package: openvpn
  • 1 依赖
  • normalized package name match
  • 匹配方式:Openvpn
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openvpn-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

openvpn-doc 2.7.3-r0

Robust, and highly configurable VPN (Virtual Private Network) (documentation)

https://openvpn.net/

sudo apk add openvpn-doc
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Architecture: x86_64
  • Source Package: openvpn
  • normalized package name match
  • 匹配方式:Openvpn
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openvpn-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

openvpn-openrc 2.7.3-r0

Robust, and highly configurable VPN (Virtual Private Network) (OpenRC init scripts)

https://openvpn.net/

sudo apk add openvpn-openrc
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Architecture: x86_64
  • Source Package: openvpn
  • normalized package name match
  • 匹配方式:Openvpn
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openvpn-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
dnf95%

openvpn 2.7.4-1.fc45

A full-featured TLS VPN solution

https://community.openvpn.net/

sudo dnf install openvpn
  • License: GPL-2.0-only
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: openvpn
  • 19 依赖
  • 3 提供
  • normalized package name match
  • 匹配方式:Openvpn
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

openvpn-devel 2.7.4-1.fc45

Development headers and examples for OpenVPN plug-ins

https://community.openvpn.net/

sudo dnf install openvpn-devel
  • License: GPL-2.0-only
  • Category: Unspecified
  • Architecture: i686
  • Source Package: openvpn
  • 1 提供
  • normalized package name match
  • 匹配方式:Openvpn
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: openvpn-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

openvpn 2.7.4-1

An easy-to-use, robust and highly configurable VPN (Virtual Private Network)

https://openvpn.net/index.php/open-source.html

sudo pacman -S openvpn
  • License: GPL-2.0-only
  • Architecture: x86_64
  • 15 依赖
  • 2 可选依赖
  • normalized package name match
  • 匹配方式:Openvpn
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

openvpn 2.6.14-2.3

Full-featured SSL VPN solution using a TUN/TAP Interface

https://openvpn.net/

sudo zypper install openvpn
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Category: Productivity/Networking/Security
  • Architecture: x86_64
  • Source Package: openvpn
  • 13 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Openvpn
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

openvpn-auth-pam-plugin 2.6.14-2.3

OpenVPN auth-pam plugin

https://openvpn.net/

sudo zypper install openvpn-auth-pam-plugin
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Category: Productivity/Networking/Security
  • Architecture: x86_64
  • Source Package: openvpn
  • 3 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Openvpn
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: openvpn-auth-pam-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

openvpn-devel 2.6.14-2.3

OpenVPN plugin header

https://openvpn.net/

sudo zypper install openvpn-devel
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Category: Development/Libraries/C and C++
  • Architecture: x86_64
  • Source Package: openvpn
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Openvpn
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: openvpn-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

openvpn-down-root-plugin 2.6.14-2.3

OpenVPN down-root plugin

https://openvpn.net/

sudo zypper install openvpn-down-root-plugin
  • License: GPL-2.0-only WITH openvpn-openssl-exception
  • Category: Productivity/Networking/Security
  • Architecture: x86_64
  • Source Package: openvpn
  • 2 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Openvpn
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: openvpn-down-root-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
Chocolatey95%

openvpn

choco install openvpn
  • normalized package name match
  • 匹配方式:Openvpn
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openssh'

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment