# Install openvpn SSL/TLS VPN implementing OSI layer 2 or 3 secure network extension. Version 2.7.4 via Homebrew; verified 2026-05-01. ## Install ```sh sudo av install brew:openvpn ``` ## Agent safety answer openvpn controls VPN connectivity and can route agent traffic through private networks. - **Credential access:** Reads VPN profiles, private keys, certificates, passwords, and auth files. - **Remote mutation:** Primarily changes network reachability, not application data. - **Publish/artifact risk:** Can expose private network access to downstream tools. - **Recommended control:** Gate VPN start, config reads, and private-key handling. - **Agent-use guidance:** Allow config validation; require approval before connecting or reading credential material. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install openvpn ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add openvpn ``` Evidence: Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install openvpn ``` Evidence: Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install openvpn ``` Evidence: Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#openvpn ``` Evidence: nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S openvpn ``` Evidence: Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install openvpn ``` Evidence: openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install openvpn ``` Evidence: Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','ojdkbuild8' - Scoop (92%): ```sh scoop install extras/openvpn ``` Evidence: Scoop official bucket manifest trees: bucket/openvpn.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id OpenVPNTechnologies.OpenVPN -e ``` Evidence: Windows Package Manager source index: OpenVPNTechnologies.OpenVPN from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:openvpn - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 2.7.4 - **Source summary:** SSL/TLS VPN implementing OSI layer 2 or 3 secure network extension - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-only WITH openvpn-openssl-exception - **Source archive:** - **Last updated:** 2026-05-01T15:33:03Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - openvpn (cli) - openvpn (alias) ## Dependencies - lz4 - lzo - openssl@3 - pkcs11-helper ## Build Dependencies - pkgconf ## Install Behavior - Post-install hook: not defined - Service: declared - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 2.7.4 - Package-manager updated: 2026-05-01 - Local data status: ok - Upstream repository: https://openvpn.net/community/ - info: Release/tag comparison is only available for GitHub repositories. ## 安全说明 broad file, network, media, or database tool signal. formula declares a Homebrew service. - **Protected-tool coverage:** Plain Text OpenVPN Client Secrets - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - formula declares a Homebrew service ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** openvpn - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - openvpn - 2.6.14-1+deb13u1: normalized package name match | Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | virtual private network daemon | https://openvpn.net/ - Nix - openvpn: normalized package name match | nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - openvpn - 2.6.9-1ubuntu4: normalized package name match | Ubuntu 24.04 LTS package indexes: openvpn from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | virtual private network daemon | https://openvpn.net/ - apk - openvpn - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) | https://openvpn.net/ - apk - openvpn-auth-pam - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-auth-pam from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | OpenVPN plugin for PAM authentication | https://openvpn.net/ - apk - openvpn-dev - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (development files) | https://openvpn.net/ - apk - openvpn-doc - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (documentation) | https://openvpn.net/ - apk - openvpn-openrc - 2.7.3-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (OpenRC init scripts) | https://openvpn.net/ - dnf - openvpn - 2.7.4-1.fc45: normalized package name match | Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | A full-featured TLS VPN solution | https://community.openvpn.net/ - dnf - openvpn-devel - 2.7.4-1.fc45: normalized package name match | Fedora Rawhide package metadata: openvpn-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Development headers and examples for OpenVPN plug-ins | https://community.openvpn.net/ - pacman - openvpn - 2.7.4-1: normalized package name match | Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | An easy-to-use, robust and highly configurable VPN (Virtual Private Network) | https://openvpn.net/index.php/open-source.html - zypper - openvpn - 2.6.14-2.3: normalized package name match | openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Full-featured SSL VPN solution using a TUN/TAP Interface | https://openvpn.net/ - zypper - openvpn-auth-pam-plugin - 2.6.14-2.3: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-auth-pam-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | OpenVPN auth-pam plugin | https://openvpn.net/ - zypper - openvpn-devel - 2.6.14-2.3: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | OpenVPN plugin header | https://openvpn.net/ - zypper - openvpn-down-root-plugin - 2.6.14-2.3: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-down-root-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | OpenVPN down-root plugin | https://openvpn.net/ - Chocolatey - openvpn: normalized package name match | Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','ojdkbuild8' ## Related Links - [Secret-risk packages](https://www.automicvault.com/zh-hans/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/zh-hans/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/zh-hans/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/zh-hans/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [openssl@3](https://www.automicvault.com/zh-hans/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [lz4](https://www.automicvault.com/zh-hans/pkg/brew/lz4/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/zh-hans/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [wireguard-tools](https://www.automicvault.com/zh-hans/pkg/brew/wireguard-tools/) - Shares av.db curated category or tags: cli, network-security, networking, tunneling, vpn. - [sshuttle](https://www.automicvault.com/zh-hans/pkg/brew/sshuttle/) - Shares av.db curated category or tags: cli, networking, tunneling, vpn. - [openfortivpn](https://www.automicvault.com/zh-hans/pkg/brew/openfortivpn/) - Shares av.db curated category or tags: cli, networking, tls, vpn. - [tinc](https://www.automicvault.com/zh-hans/pkg/brew/tinc/) - Shares av.db curated category or tags: cli, networking, tunneling, vpn. - [fastd](https://www.automicvault.com/zh-hans/pkg/brew/fastd/) - Shares av.db curated category or tags: cli, networking, tunneling, vpn. - [dsvpn](https://www.automicvault.com/zh-hans/pkg/brew/dsvpn/) - Shares av.db curated category or tags: cli, networking, tunneling, vpn. - [openiked](https://www.automicvault.com/zh-hans/pkg/brew/openiked/) - Shares av.db curated category or tags: cli, network-security, networking, vpn. - [onioncat](https://www.automicvault.com/zh-hans/pkg/brew/onioncat/) - Shares av.db curated category or tags: cli, networking, tunneling, vpn. - [pure-ftpd](https://www.automicvault.com/zh-hans/pkg/brew/pure-ftpd/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, networking, openssl, openssl-3, secure. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer