# mbedtls mit Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für mbedtls in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:mbedtls
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install mbedtls
```

  Evidenz: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install mbedtls
```

  Evidenz: MacPorts ports tree: devel/mbedtls/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add mbedtls
```

  Evidenz: Alpine Linux edge package indexes: mbedtls from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install mbedtls
```

  Evidenz: Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#mbedtls
```

  Evidenz: nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S mbedtls
```

  Evidenz: Arch Linux sync databases: mbedtls from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- Debian apt (92%):

```sh
sudo apt install libmbedcrypto16
```

  Evidenz: Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Ubuntu apt (92%):

```sh
sudo apt install libmbedcrypto7t64
```

  Evidenz: Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

- zypper (92%):

```sh
sudo zypper install libmbedtls23
```

  Evidenz: openSUSE Tumbleweed package metadata: libmbedtls23 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Paketfakten

- **Paketschlüssel:** brew:mbedtls
- **Paketmanager:** Homebrew
- **Version:** 4.2.0
- **Quellzusammenfassung:** Cryptographic & SSL/TLS library
- **Homepage:** <https://www.trustedfirmware.org/projects/mbed-tls/>
- **Repository:** <https://github.com/Mbed-TLS/mbedtls>
- **Zuletzt aktualisiert:** 2026-07-07T16:39:09Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- aead_demo (Alias)
- cert_app (Alias)
- cert_req (Alias)
- cert_write (Alias)
- crl_app (Alias)
- crypto_examples (Alias)
- dtls_client (Alias)
- dtls_server (Alias)
- generate_random_uuid (Alias)
- hmac_demo (Alias)
- key_ladder_demo (Alias)
- key_ladder_demo.sh (Alias)
- load_roots (Alias)
- metatest (Alias)
- mini_client (Alias)
- pem2der (Alias)
- psa_constant_names (Alias)
- psa_hash (Alias)
- query_compile_time_config (Alias)
- query_included_headers (Alias)
- req_app (Alias)
- selftest (Alias)
- ssl_client1 (Alias)
- ssl_client2 (Alias)
- ssl_context_info (Alias)
- ssl_fork_server (Alias)
- ssl_mail_client (Alias)
- ssl_pthread_server (Alias)
- ssl_server (Alias)
- ssl_server2 (Alias)
- strerror (Alias)
- udp_proxy (Alias)
- zeroize (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 4.2.0
## Projektgeschichte und Nutzung

Mbed TLS is a portable C TLS, DTLS, X.509, and cryptography library now hosted under TrustedFirmware.org, with TF-PSA-Crypto providing its PSA Crypto implementation.

### Projektgeschichte

TrustedFirmware.org presents Mbed TLS and TF-PSA-Crypto together: Mbed TLS implements TLS, DTLS, and X.509 certificate handling, while TF-PSA-Crypto implements the PSA Cryptography API and related driver interfaces. The licensing documentation records the earlier PolarSSL name and says the project is owned by TrustedFirmware.org.

The official GitHub repository describes the library as open source, portable, readable, flexible, and a reference implementation of the PSA Cryptography API. Current releases are made on a roughly three-to-six-month cadence, with the repository tracking dozens of releases.

### Adoptionsgeschichte

Mbed TLS is adopted where TLS and crypto need to fit into small systems. TrustedFirmware.org explicitly notes its small code footprint and names TF-A, TF-M, and OP-TEE among its users, placing it in the embedded firmware and secure software supply chain rather than only in server-side TLS stacks.

### Wie es verwendet wird

Package users typically consume Mbed TLS as C libraries and headers plus example utilities. Build-time feature selection is central to its use: the default configuration is `include/mbedtls/mbedtls_config.h`, and PSA crypto mechanisms can be selected in `tf-psa-crypto/include/psa/crypto_config.h` or overridden with compile-time configuration macros.

### Warum Paket-Nerds sich dafür interessieren

Mbed TLS is important to package maintainers because small compile-time choices alter ABI surface, algorithm availability, footprint, and security posture. Its examples and utilities also make Homebrew-style packages useful for testing certificates, TLS clients, servers, and cryptographic primitives from the shell.

### Zeitleiste

- Pre-2015: Project is known as PolarSSL before the Mbed TLS name.
- 2020: Official mailing-list archive references the transition from PolarSSL-era private history to public Git history.
- 2026: TrustedFirmware.org lists Mbed TLS with TF-PSA-Crypto and notes users including TF-A, TF-M, and OP-TEE.
- 2026: GitHub repository lists Mbed TLS 4.1.0 as a latest release.

### Related projects

- PolarSSL, TF-PSA-Crypto, PSA Crypto API, Trusted Firmware-A, Trusted Firmware-M, OP-TEE, OpenSSL, wolfSSL

### Quellen

- <https://github.com/Mbed-TLS/mbedtls>
- <https://mbed-tls.readthedocs.io/en/latest/kb/compiling-and-building/how-do-i-configure-mbedtls/>
- <https://mbed-tls.readthedocs.io/en/latest/kb/licensing/how-is-mbedtls-protected/>
- <https://mbed-tls.readthedocs.io/projects/api/en/v4.0.0-beta/api/file/crypto__config_8h/>
- <https://www.trustedfirmware.org/projects/mbed-tls/>


## Sicherheitshinweise

broad file, network, media, or database tool signal.

- **Geiger-Risiko:** blue / mittel
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: include/mbedtls/mbedtls_config.h, tf-psa-crypto/include/psa/crypto_config.h
## Andere Paketmanager-Einträge

- Debian apt - libmbedcrypto16 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedcrypto16 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedtls-dev - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedtls-doc - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedtls21 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedtls21 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/
- Debian apt - libmbedx509-7 - 3.6.5-0.1~deb13u1: normalized package name match | Debian stable package indexes: libmbedx509-7 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/
- Nix - mbedtls: normalized package name match | nixpkgs package indexes: pkgs/by-name/mb/mbedtls/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libmbedcrypto7t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedcrypto7t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - crypto library | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedtls-dev - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - development files | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedtls-doc - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - documentation | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedtls14t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedtls14t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - tls library | https://www.trustedfirmware.org/projects/mbed-tls/
- Ubuntu apt - libmbedx509-1t64 - 2.28.8-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libmbedx509-1t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight crypto and SSL/TLS library - x509 certificate library | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls-dev - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (development files) | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls-static - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Light-weight cryptographic and SSL/TLS library (static library) | https://www.trustedfirmware.org/projects/mbed-tls/
- apk - mbedtls-utils - 4.1.1-r0: normalized package name match | Alpine Linux edge package indexes: mbedtls-utils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Utilities for mbedtls (including gen_key / cert_write) | https://www.trustedfirmware.org/projects/mbed-tls/
- dnf - mbedtls - 3.6.7-2.fc45: normalized package name match | Fedora Rawhide package metadata: mbedtls from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Light-weight cryptographic and SSL/TLS library | https://www.trustedfirmware.org/projects/mbed-tls


## Combined YAML source

View the package source record on GitHub. [combined/mbedtls.yml](https://github.com/mxcl/pkgdb/blob/main/combined/mbedtls.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph