# Installer openvpn avec Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, zypper, scoop, winget

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de openvpn pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:openvpn
```

## Réponse sur la sécurité des agents

openvpn controls VPN connectivity and can route agent traffic through private networks.

- **Accès aux identifiants:** Reads VPN profiles, private keys, certificates, passwords, and auth files.
- **Modification distante:** Primarily changes network reachability, not application data.
- **Risque de publication ou d'artéfact:** Can expose private network access to downstream tools.
- **Contrôle recommandé:** Gate VPN start, config reads, and private-key handling.
- **Conseils d'utilisation par les agents:** Allow config validation; require approval before connecting or reading credential material.

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install openvpn
```

  Preuve: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add openvpn
```

  Preuve: Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install openvpn
```

  Preuve: Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install openvpn
```

  Preuve: Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#openvpn
```

  Preuve: nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- pacman (92%):

```sh
sudo pacman -S openvpn
```

  Preuve: Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install openvpn
```

  Preuve: openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install openvpn
```

  Preuve: Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openconnect-gui'

- Scoop (92%):

```sh
scoop install extras/openvpn
```

  Preuve: Scoop official bucket manifest trees: bucket/openvpn.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id OpenVPNTechnologies.OpenVPN -e
```

  Preuve: Windows Package Manager source index: OpenVPNTechnologies.OpenVPN from https://cdn.winget.microsoft.com/cache/source.msix

## Faits du paquet

- **Clé du paquet:** brew:openvpn
- **Gestionnaire de paquets:** Homebrew
- **Version:** 2.7.5
- **Résumé source:** SSL/TLS VPN implementing OSI layer 2 or 3 secure network extension
- **Page d'accueil:** <https://openvpn.net/community/>
- **Dernière mise à jour:** 2026-07-02T16:40:57Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- openvpn (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 2.7.5
## Historique du projet et usages

OpenVPN is a long-running open source VPN implementation built around SSL/TLS, TUN/TAP virtual network interfaces, and a single userspace daemon that can act as client or server. It became one of the default choices for self-hosted and commercial VPN deployments because it crossed operating-system, firewall, NAT, and package-manager boundaries better than many older VPN stacks.

### Historique du projet

OpenVPN was created by James Yonan and traces its public history to 2001. The project chose a custom VPN protocol using SSL/TLS for key exchange and OpenSSL for cryptography rather than implementing IPsec, PPTP, or L2TP.

OpenVPN 1.x was mainly a point-to-point tool. OpenVPN 2.0 was the major architectural step: the official how-to and manual describe scalable multi-client TCP/UDP server mode, where many clients connect to a single server process and share one TUN or TAP interface.

The 2.x line added features that made OpenVPN practical in mixed networks: certificate-based TLS deployments, username/password authentication hooks, pushed routes and DNS options, management interfaces, plugins and scripts, IPv6 support, Windows service improvements, and continued crypto and platform updates.

### Historique d'adoption

OpenVPN spread through Unix and Linux distributions, router firmware, VPN providers, and enterprise remote-access setups because it used ordinary TCP or UDP ports, worked through many NAT and firewall environments, and could be configured with plain text profile files. Package availability across Linux, BSD, macOS, Windows package managers, and router-oriented ecosystems made .ovpn profiles a portable operational artifact.

OpenVPN Inc. built commercial products such as Access Server and OpenVPN Connect around the open source Community Edition while continuing to support the community project. That split gave the protocol a dual life: a free daemon for administrators and a managed product line for organizations.

### Modes d'utilisation

Operators use OpenVPN to build routed layer-3 VPNs with TUN devices, bridged layer-2 VPNs with TAP devices, site-to-site tunnels, road-warrior remote access, lab networks, router-based VPN clients, and compatibility endpoints for commercial VPN services. A typical deployment combines server and client configuration files, certificates or username/password credentials, route pushes, firewall rules, and system services.

Package users care about the single openvpn executable because it is both the client and the server. That keeps scripting, service supervision, and container use straightforward, while configuration complexity lives in profile files and PKI assets.

### Pourquoi les passionnés de paquets s'y intéressent

OpenVPN is one of the canonical networking packages where packaging is operations: binaries, services, sample configs, plugin paths, systemd or launchd integration, certificate locations, and kernel TUN/TAP support all affect whether the package is usable.

Its long history also makes it a compatibility anchor. Even as WireGuard changed expectations for small VPN codebases, OpenVPN remains important for existing .ovpn profiles, mature server deployments, commercial-provider compatibility, and environments that need TLS-style transport flexibility.

### Chronologie

- 2001: James Yonan releases the first OpenVPN versions.
- 2005: OpenVPN 2.0 establishes multi-client server mode as the core scalable deployment pattern.
- 2013-era 2.3 line: OpenVPN documentation notes complete IPv6 and PolarSSL support among 2.3 improvements.
- 2017-era 2.4 line: the project adds modern client/server negotiation features and continues improving Windows service behavior.
- 2020s: OpenVPN Community Edition continues through the 2.5, 2.6, and 2.7 lines while OpenVPN Inc. maintains commercial Access Server and OpenVPN Connect products around the protocol.

### Related projects

- OpenVPN is related to OpenVPN Access Server, OpenVPN Connect, EasyRSA, Tunnelblick, NetworkManager-openvpn, OpenWrt and other router firmware integrations, SoftEther VPN's OpenVPN protocol support, WireGuard, IPsec, and TLS libraries such as OpenSSL and mbed TLS.

### Sources

- <https://blog.openvpn.net/the-history-of-openvpn/>
- <https://community.openvpn.net/>
- <https://github.com/OpenVPN/openvpn>
- <https://openvpn.net/access-server-or-community/>
- <https://openvpn.net/community-docs/community-articles/openvpn-2-6-manual.html>
- <https://openvpn.net/community-docs/how-to.html>
- <https://openvpn.net/community/>


## Notes de sécurité

broad file, network, media, or database tool signal. formula declares a Homebrew service.

- **Risque Geiger:** orange / moyen
- broad file, network, media, or database tool signal
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- macOS: ~/Library/Application Support/OpenVPN, ~/Library/Application Support/Tunnelblick/Configurations
- Unix: ~/.openvpn, $XDG_CONFIG_HOME/openvpn, ~/.config/openvpn

## Credential files

- macOS: ~/Library/Application Support/OpenVPN, ~/Library/Application Support/Tunnelblick/Configurations
- Unix: ~/.openvpn, $XDG_CONFIG_HOME/openvpn, ~/.config/openvpn
## Autres enregistrements de gestionnaires de paquets

- Debian apt - openvpn - 2.6.14-1+deb13u3: normalized package name match | Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | virtual private network daemon | https://openvpn.net/
- Nix - openvpn: normalized package name match | nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - openvpn - 2.6.9-1ubuntu4: normalized package name match | Ubuntu 24.04 LTS package indexes: openvpn from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | virtual private network daemon | https://openvpn.net/
- apk - openvpn - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) | https://openvpn.net/
- apk - openvpn-auth-pam - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-auth-pam from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | OpenVPN plugin for PAM authentication | https://openvpn.net/
- apk - openvpn-dev - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (development files) | https://openvpn.net/
- apk - openvpn-doc - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (documentation) | https://openvpn.net/
- apk - openvpn-openrc - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (OpenRC init scripts) | https://openvpn.net/
- dnf - openvpn - 2.7.5-2.fc45: normalized package name match | Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A full-featured TLS VPN solution | https://community.openvpn.net/
- dnf - openvpn-devel - 2.7.5-2.fc45: normalized package name match | Fedora Rawhide package metadata: openvpn-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development headers and examples for OpenVPN plug-ins | https://community.openvpn.net/
- pacman - openvpn - 2.7.5-1: normalized package name match | Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | An easy-to-use, robust and highly configurable VPN (Virtual Private Network) | https://openvpn.net/index.php/open-source.html
- zypper - openvpn - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Full-featured SSL VPN solution using a TUN/TAP Interface | https://openvpn.net/
- zypper - openvpn-auth-pam-plugin - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-auth-pam-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenVPN auth-pam plugin | https://openvpn.net/
- zypper - openvpn-devel - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenVPN plugin header | https://openvpn.net/
- zypper - openvpn-down-root-plugin - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-down-root-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenVPN down-root plugin | https://openvpn.net/
- Chocolatey - openvpn: normalized package name match | Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openconnect-gui'


## Combined YAML source

View the package source record on GitHub. [combined/openvpn.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openvpn.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
- curated agent safety answer