macOS
Homebrewverified · 100%
brew install openfortivpnprovider-native install command
brew / rank 1666
Install openfortivpn with Homebrew
Open Fortinet client for PPP+TLS VPN tunnel services. Version 1.24.1 via Homebrew; verified 2026-05-12.
install
Additional install commands
overview
Package summary
Open Fortinet client for PPP+TLS VPN tunnel services
Project links
Commands and aliases
- openfortivpn
history
Project history and usage
openfortivpn is a command-line client for Fortinet-compatible PPP-over-TLS VPN services. It launches pppd, handles the TLS session to the gateway, and bridges that gateway communication to a local point-to-point network interface.
Project history
The GitHub repository was created in January 2015 to provide an open client for Fortinet VPNs, filling a practical gap for Unix-like users who wanted a scriptable FortiGate SSL VPN client without relying on proprietary GUI tooling.
The changelog shows the project evolving around real VPN compatibility work: OpenSSL compatibility, resolvconf integration, DNS suffix handling, smartcard support, one-time-password and FortiToken-push handling, host-check support, systemd notification, TLS certificate fixes, and later SAML login support in the 1.23.0 series.
Adoption history
openfortivpn spread through operating-system package repositories because it solves a narrow but common enterprise problem. The README lists packages for Fedora/CentOS, openSUSE/SLE, Gentoo, NixOS, Arch Linux, Debian, Ubuntu, Solus, Alpine Linux, Homebrew, and MacPorts.
How it is used
Operators run openfortivpn with a gateway, username, optional realm, certificate settings, or a config file such as /etc/openfortivpn/my-config. Because it spawns pppd, changes routes, and may update DNS configuration, the README documents the need for elevated privileges and warns administrators to restrict who can run it as root.
The tool is used most often as a small terminal-oriented VPN connector: connect to a FortiGate endpoint, authenticate with password, OTP, smartcard, certificate, SAML, or an externally supplied cookie, then let pppd establish the tunnel and route traffic.
Why package nerds care
openfortivpn is package-nerd interesting because it is infrastructure glue at the exact boundary where proprietary network appliances meet open Unix clients. Its value is less in a broad framework and more in being a small, maintained binary that distro maintainers can ship for a specific corporate VPN protocol.
Timeline
- January 2015: the openfortivpn GitHub repository was created.
- Version 1.12.0: the changelog records fixes for CVE-2020-7041, CVE-2020-7042, and CVE-2020-7043 around TLS certificate handling.
- Version 1.23.0: SAML login authentication was added.
- Version 1.24.0: OpenSSL 3 PKCS#11 support and OpenSSL engine support were updated.
Related projects
- openfortivpn is related to Fortinet FortiGate/FortiClient SSL VPN deployments, pppd, OpenSSL, resolvconf, OpenFortiGUI, and other open VPN clients such as OpenConnect, though its focus is Fortinet's PPP+TLS VPN behavior.
Sources
- https://api.github.com/repos/adrienverge/openfortivpn
- https://archlinux.org/packages/extra/x86_64/openfortivpn/
- https://formulae.brew.sh/formula/openfortivpn
- https://github.com/adrienverge/openfortivpn
- https://raw.githubusercontent.com/adrienverge/openfortivpn/master/CHANGELOG.md
- https://raw.githubusercontent.com/adrienverge/openfortivpn/master/README.md
security posture
Risk level: orange
broad file, network, media, or database tool signal. formula declares a Homebrew service.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- broad file, network, media, or database tool signal
- formula declares a Homebrew service
Signals
- metadata:service
- text:client
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/etc/openfortivpn/my-config
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
/etc/openfortivpn/my-config
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
openfortivpn | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version1.24.1
manager updated2026-05-12
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:openfortivpn |
|---|---|
| Version | 1.24.1 |
| Package manager | Homebrew |
| Homepage | https://github.com/adrienverge/openfortivpn |
| Repository | https://github.com/adrienverge/openfortivpn |
| Last updated | 2026-05-12T11:33:36-04:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation