# openssl@3 を Homebrew, zypper, apk, MacPorts, dnf, chocolatey, apt, Nix, pacman, scoop, winget でインストール openssl@3 のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:openssl@3 ``` ## エージェント安全性の回答 openssl handles cryptographic keys, certificates, secrets, and encrypted payloads. - **認証情報アクセス:** Can read private keys, certificates, encrypted files, and passphrases. - **リモート変更:** Does not mutate remote systems directly but can prepare credentials used elsewhere. - **公開/成果物リスク:** Can produce keys, CSRs, signatures, and artifacts used in releases. - **推奨コントロール:** Gate private-key reads, key generation, signing, and decryption commands. - **エージェント利用ガイダンス:** Allow public certificate inspection; require approval before reading or producing secret key material. 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install openssl@3 ``` 証拠: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install openssl3 ``` 証拠: MacPorts ports tree: devel/openssl3/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - zypper (92%): ```sh sudo zypper install openssl-3 ``` 証拠: openSUSE Tumbleweed package metadata: openssl-3 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst - apk (92%): ```sh sudo apk add libssl3 ``` 証拠: Alpine Linux edge package indexes: libssl3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install openssl3-devel ``` 証拠: Fedora Rawhide package metadata: openssl3-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Debian apt (92%): ```sh sudo apt install openssl ``` 証拠: Debian stable package indexes: openssl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#openssl ``` 証拠: nixpkgs package indexes: openssl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S openssl ``` 証拠: Arch Linux sync databases: openssl from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz ### Windows - Chocolatey (92%): ```sh choco install openssl ``` 証拠: Chocolatey community package catalog: openssl from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openconnect-gui' - Scoop (92%): ```sh scoop install main/openssl ``` 証拠: Scoop official bucket manifest trees: bucket/openssl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id ShiningLight.OpenSSL.Dev -e ``` 証拠: Windows Package Manager source index: ShiningLight.OpenSSL.Dev from https://cdn.winget.microsoft.com/cache/source.msix ## パッケージ情報 - **パッケージキー:** brew:openssl@3 - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 3.6.3 - **ソース概要:** Cryptography and SSL/TLS Toolkit - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-08-04T13:11:25+01:00 - **生成日時:** 2026-08-04T22:13:35+00:00 ## 依存関係 - ca-certificates ## インストール挙動 - post-install フック: 未定義 - 注意点: To add additional certificates, place .pem files in $HOMEBREW_PREFIX/etc/openssl@3/certs and run $HOMEBREW_PREFIX/opt/openssl@3/bin/c_rehash OpenSSL 3.6 is only supported until 2026-11-01 so the `openssl@3` formula will be downgraded to OpenSSL 3.5 (LTS) in a future update. - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 3.6.3 - マネージャ更新日: 2026-08-04 - ローカルデータ: OK - 上流リポジトリ: https://github.com/openssl/openssl - 情報: No cached GitHub release or tag data was available. ## プロジェクトの歴史と使われ方 Homebrew's `openssl@3` is the main OpenSSL 3 formula, providing the OpenSSL command-line tool plus libssl and libcrypto for TLS, SSL, certificate, and general cryptography workloads. The formula follows the default OpenSSL 3 branch while separate formulae such as `openssl@3.0` and `openssl@3.5` preserve branch-specific targets. ### プロジェクトの歴史 OpenSSL was founded in 1998 as an open-source successor to SSLeay, the SSL library by Eric A. Young and Tim J. Hudson. The first OpenSSL release, 0.9.1c, shipped on December 23, 1998 after the initial project team chose the OpenSSL name to signal continuity for users of SSL-era tooling. The library became a default dependency for secure internet software, from Apache modules and mail servers to package managers, language runtimes, and appliance firmware. Heartbleed in 2014 revealed both the scale of OpenSSL deployment and the fragility of its funding and maintenance model, prompting foundation and governance changes. The OpenSSL 3 generation began with 3.0.0 on September 7, 2021. Its provider architecture, Apache-2.0 licensing, FIPS provider support, and deprecation of low-level APIs reshaped how applications link, configure, and certify OpenSSL-based cryptography. ### 採用の歴史 `openssl@3` is the broad Homebrew adoption path for OpenSSL 3. The cited formula page lists it as also known as `openssl` and `openssl@3.6`, bottled across macOS and Linux, with yearly installs in the millions. Homebrew's page also shows the package-manager policy dimension: `openssl@3` can move between OpenSSL 3 minor branches, while `openssl@3.5` and `openssl@3.0` exist for consumers that need a pinned branch. That split lets Homebrew balance default freshness against downstream reproducibility. ### 使われ方 Users invoke the `openssl` CLI to inspect and generate certificates, create CSRs, test TLS endpoints, hash and sign data, convert PEM/DER/PKCS formats, and manage CA directories. Build systems link against libssl and libcrypto when compiling software that needs TLS, X.509, ASN.1, message digests, public-key cryptography, or provider-backed algorithms. On Homebrew systems, dependent formulae use `openssl@3` as the normal OpenSSL 3 dependency, while users may need the formula's prefix, include path, library path, and certificate directory when compiling software outside Homebrew. ### パッケージ好きにとっての重要性 `openssl@3` is one of the packages that makes a package manager feel like infrastructure. A minor OpenSSL branch change can affect build flags, test suites, compliance assumptions, certificate lookup, and runtime behavior for a large dependency graph. It is also a clean example of why versioned formula names matter. The package name encodes a compatibility promise at the major-version level, while sibling formulae encode stricter branch promises for software that cannot simply follow the default. ### タイムライン - December 23, 1998: OpenSSL 0.9.1c is released. - 2014: Heartbleed becomes a watershed event for OpenSSL maintenance and funding. - September 7, 2021: OpenSSL 3.0.0 launches the OpenSSL 3 line. - April 8, 2025: OpenSSL 3.5.0 is released in the OpenSSL 3 family. - October 1, 2025: OpenSSL 3.6.0 appears in the OpenSSL release timeline. - 2026: Homebrew lists `openssl@3` stable at 3.6.3 and notes a planned downgrade to 3.5 LTS before the 3.6 support window ends. ### Related projects - OpenSSL's ecosystem includes LibreSSL, BoringSSL, AWS-LC, GnuTLS, NSS, wolfSSL, and platform TLS stacks. Downstream packages such as OpenSSH, curl, web servers, database clients, and programming-language runtimes make OpenSSL branch choices visible far beyond cryptography specialists. ### ソース - - - - - - - - ## セキュリティノート openssl@3 に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、パッケージメタデータはここに公開されています。 - **承認ゲートルール:** 5 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: $OPENSSLDIR/openssl.cnf ## Credential files - Unix: ~/.ssl, ~/.certs, ~/certs, ~/.config/openssl ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** openssl@3 - **Aliases:** openssl, openssl@3.6 - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 他のパッケージマネージャ記録 - apk - libssl3 - 3.5.7-r0: normalized package name match | Alpine Linux edge package indexes: libssl3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | SSL shared libraries | https://www.openssl.org/ - zypper - libopenssl-3-devel - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl-3-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Development files for OpenSSL | https://www.openssl.org/ - zypper - libopenssl-3-devel-32bit - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl-3-devel-32bit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Development files for OpenSSL | https://www.openssl.org/ - zypper - libopenssl-3-fips-provider - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl-3-fips-provider from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenSSL FIPS provider | https://www.openssl.org/ - zypper - libopenssl-3-fips-provider-32bit - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl-3-fips-provider-32bit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenSSL FIPS provider | https://www.openssl.org/ - zypper - libopenssl-3-fips-provider-x86-64-v3 - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl-3-fips-provider-x86-64-v3 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenSSL FIPS provider | https://www.openssl.org/ - zypper - libopenssl3 - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl3 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Secure Sockets and Transport Layer Security | https://www.openssl.org/ - zypper - libopenssl3-32bit - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl3-32bit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Secure Sockets and Transport Layer Security | https://www.openssl.org/ - zypper - libopenssl3-x86-64-v3 - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: libopenssl3-x86-64-v3 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Secure Sockets and Transport Layer Security | https://www.openssl.org/ - zypper - openssl-3 - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: openssl-3 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Secure Sockets and Transport Layer Security | https://www.openssl.org/ - zypper - openssl-3-doc - 3.5.3-7.2: normalized package name match | openSUSE Tumbleweed package metadata: openssl-3-doc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Manpages and additional documentation for openssl | https://www.openssl.org/ - MacPorts - openssl3: normalized package name match | MacPorts ports tree: devel/openssl3/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - dnf - openssl3-devel - 3.5.7-2.fc45: package manager index match | Fedora Rawhide package metadata: openssl3-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Files for development of applications which will use OpenSSL | http://www.openssl.org/ - dnf - openssl3-devel-engine - 3.5.7-2.fc45: package manager index match | Fedora Rawhide package metadata: openssl3-devel-engine from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Files for development of applications which will use OpenSSL and use deprecated ENGINE API. | http://www.openssl.org/ - dnf - openssl3-libs - 3.5.7-2.fc45: package manager index match | Fedora Rawhide package metadata: openssl3-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | A general purpose cryptography library with TLS implementation | http://www.openssl.org/ - Debian apt - libssl-dev - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: libssl-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - development files | https://openssl-library.org ## 関連リンク - [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/ja/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [node](https://pkg.so/ja/brew/node/) - Popular package that depends on this formula. - [python@3.14](https://pkg.so/ja/brew/python-3-14/) - Popular package that depends on this formula. - [awscli](https://pkg.so/ja/brew/awscli/) - Popular package that depends on this formula. - [ffmpeg](https://pkg.so/ja/brew/ffmpeg/) - Popular package that depends on this formula. - [python@3.13](https://pkg.so/ja/brew/python-3-13/) - Popular package that depends on this formula. - [unbound](https://pkg.so/ja/brew/unbound/) - Popular package that depends on this formula. - [krb5](https://pkg.so/ja/brew/krb5/) - Popular package that depends on this formula. - [openssl@4](https://pkg.so/ja/brew/openssl-4/) - Package name indicates the same formula family. - [openssl@3.5](https://pkg.so/ja/brew/openssl-3-5/) - Package name indicates the same formula family. - [openssl@3.0](https://pkg.so/ja/brew/openssl-3-0/) - Package name indicates the same formula family. - [gnutls](https://pkg.so/ja/brew/gnutls/) - Shares pkgdb curated category or tags: cli, cryptography, security, ssl, tls. - [mbedtls](https://pkg.so/ja/brew/mbedtls/) - Shares pkgdb curated category or tags: cli, cryptography, security, ssl, tls. - [libressl](https://pkg.so/ja/brew/libressl/) - Shares pkgdb curated category or tags: cli, cryptography, security, ssl, tls. - [cfssl](https://pkg.so/ja/brew/cfssl/) - Shares pkgdb curated category or tags: certificates, cli, cryptography, security, tls. - [wolfssl](https://pkg.so/ja/brew/wolfssl/) - Shares pkgdb curated category or tags: cli, cryptography, security, ssl, tls. ## Combined YAML source View the package source record on GitHub. [combined/openssl@3.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openssl@3.yml) ## ソース - pkg.so package database - approval-gate seed metadata - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer