# 使用 Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget 安装 openssl@3.0 查看 openssl@3.0 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:openssl@3.0 ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install openssl@3.0 ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install openssl ``` 证据: MacPorts ports tree: devel/openssl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add openssl ``` 证据: Alpine Linux edge package indexes: openssl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install openssl ``` 证据: Debian stable package indexes: openssl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install openssl ``` 证据: Fedora Rawhide package metadata: openssl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#openssl ``` 证据: nixpkgs package indexes: openssl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S openssl ``` 证据: Arch Linux sync databases: openssl from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - zypper (92%): ```sh sudo zypper install openssl ``` 证据: openSUSE Tumbleweed package metadata: openssl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install openssl ``` 证据: Chocolatey community package catalog: openssl from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openconnect-gui' - Scoop (92%): ```sh scoop install main/openssl ``` 证据: Scoop official bucket manifest trees: bucket/openssl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id ShiningLight.OpenSSL.Dev -e ``` 证据: Windows Package Manager source index: ShiningLight.OpenSSL.Dev from https://cdn.winget.microsoft.com/cache/source.msix ## 软件包事实 - **软件包键:** brew:openssl@3.0 - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 3.0.21 - **来源摘要:** Cryptography and SSL/TLS Toolkit - **主页:** - **仓库:** - **上游文档:** - **许可证:** Apache-2.0 - **源码归档:** - **最后更新:** 2026-08-04T13:11:25+01:00 - **已生成:** 2026-08-04T22:13:35+00:00 ## 依赖 - ca-certificates ## 安装行为 - post-install 钩子: 未定义 - 注意事项: A CA file has been bootstrapped using certificates from the system keychain. To add additional certificates, place .pem files in $HOMEBREW_PREFIX/etc/openssl@3.0/certs and run $HOMEBREW_PREFIX/opt/openssl@3.0/bin/c_rehash - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 3.0.21 - 管理器更新时间: 2026-08-04 - 本地数据: OK - 上游仓库: https://github.com/openssl/openssl - 信息: No cached GitHub release or tag data was available. ## 项目历史与用法 OpenSSL 3.0 is the first OpenSSL 3 major-release line: a TLS, SSL, and general-purpose cryptography toolkit with a command-line program, libssl, libcrypto, providers, and an Apache-2.0 license. Homebrew's `openssl@3.0` formula packages the 3.0 long-lived branch separately for software that must stay on that ABI and behavior profile. ### 项目历史 OpenSSL traces back to SSLeay, the open-source SSL library by Eric A. Young and Tim J. Hudson. In December 1998, after Young and Hudson moved to RSA and SSLeay's future became uncertain, Mark Cox, Ralf Engelschall, Stephen Henson, Ben Laurie, and Paul Sutton organized a successor project, changed the planned name from OpenTLS to OpenSSL, and released OpenSSL 0.9.1c on December 23, 1998. For two decades OpenSSL became a central TLS and cryptography dependency for web servers, language runtimes, package managers, mail software, VPNs, databases, and countless command-line workflows. The 2014 Heartbleed vulnerability exposed how much internet infrastructure depended on a small maintenance team and led to governance, funding, and foundation changes around the project. OpenSSL 3.0, released on September 7, 2021, was a major architectural and licensing reset. The migration guide highlights the switch from the dual OpenSSL/SSLeay licenses to Apache License 2.0, the provider model for algorithm implementations, FIPS provider support, and formal deprecation of many low-level cryptographic APIs in favor of high-level EVP APIs. ### 采用历史 OpenSSL 3.0 became the compatibility anchor for the OpenSSL 3 generation because it preserved source compatibility for many 1.1.1 applications while requiring recompilation and, in some cases, API migration. Distributions and package managers adopted it as the route from OpenSSL 1.1.1 into the provider-based OpenSSL architecture. Homebrew's `openssl@3.0` is keg-only and versioned, which matters for build reproducibility: a formula can link to the 3.0 branch without being silently moved to newer OpenSSL 3 minor releases. The cited Homebrew page lists a 2026-09-07 deprecation date and stable version 3.0.21. ### 使用方式 Developers use OpenSSL 3.0 through C APIs in libssl/libcrypto, through language bindings that wrap those libraries, and through the `openssl` CLI for certificates, keys, CSRs, testing TLS endpoints, hashing, signing, and format conversion. The 3.0 branch adds provider configuration and FIPS-module choices to those familiar workflows. Packagers use `openssl@3.0` when an application has been certified, tested, or constrained against the 3.0 line. The branch is less about new features and more about maintaining predictable OpenSSL 3 behavior while security fixes continue for that line. ### 为什么软件包爱好者会关心 OpenSSL 3.0 is a packaging landmark because it changed more than a version number. The provider architecture, FIPS integration, license switch, and low-level API deprecations affected build flags, downstream patches, runtime configuration paths, and compatibility promises across huge dependency graphs. The `openssl@3.0` formula is package-manager archaeology in action: even after newer OpenSSL 3 branches exist, the old branch remains packaged because TLS libraries are sticky dependencies and some consumers need exact branch semantics. ### 时间线 - December 23, 1998: OpenSSL 0.9.1c is released. - 2014: Heartbleed triggers governance and funding changes around OpenSSL. - September 7, 2021: OpenSSL 3.0.0 is released. - 2021 onward: OpenSSL 3.0 receives security and bug-fix releases in its own series. - 2026: Homebrew lists `openssl@3.0` as a keg-only formula with stable version 3.0.21 and a 2026-09-07 deprecation date. ### Related projects - OpenSSL descends from SSLeay and competes or coexists with LibreSSL, BoringSSL, AWS-LC, GnuTLS, NSS, wolfSSL, and platform TLS libraries. OpenSSH, curl, web servers, programming-language runtimes, and certificate tooling are among the downstream ecosystems affected by OpenSSL branch choices. ### 来源 - - - - - - - ## 安全说明 没有找到 openssl@3.0 的匹配本地密钥处理 manifest。软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: openssl.cnf ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** openssl@3.0 - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** yes - **URL Keys:** stable ## 其他软件包管理器记录 - Debian apt - libssl-dev - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: libssl-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - development files | https://openssl-library.org - Debian apt - libssl-doc - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: libssl-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - development documentation | https://openssl-library.org - Debian apt - libssl3t64 - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: libssl3t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - shared libraries | https://openssl-library.org - Debian apt - openssl - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: openssl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - cryptographic utility | https://openssl-library.org - Debian apt - openssl-provider-fips - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: openssl-provider-fips from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - cryptographic utility | https://openssl-library.org - Debian apt - openssl-provider-legacy - 3.5.6-1~deb13u2: versioned package alias match | Debian stable package indexes: openssl-provider-legacy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Secure Sockets Layer toolkit - cryptographic utility | https://openssl-library.org - Nix - openssl: versioned package alias match | nixpkgs package indexes: openssl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - libssl-dev - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: libssl-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - development files | https://www.openssl.org/ - Ubuntu apt - libssl-doc - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: libssl-doc from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - development documentation | https://www.openssl.org/ - Ubuntu apt - libssl3t64 - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: libssl3t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - shared libraries | https://www.openssl.org/ - Ubuntu apt - openssl - 3.0.13-0ubuntu3: versioned package alias match | Ubuntu 24.04 LTS package indexes: openssl from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Secure Sockets Layer toolkit - cryptographic utility | https://www.openssl.org/ - apk - libcrypto3 - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: libcrypto3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Crypto library from openssl | https://www.openssl.org/ - apk - libssl3 - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: libssl3 from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | SSL shared libraries | https://www.openssl.org/ - apk - openssl - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: openssl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Toolkit for Transport Layer Security (TLS) | https://www.openssl.org/ - apk - openssl-dbg - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: openssl-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Toolkit for Transport Layer Security (TLS) (debug symbols) | https://www.openssl.org/ - apk - openssl-dev - 3.5.7-r0: versioned package alias match | Alpine Linux edge package indexes: openssl-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Toolkit for Transport Layer Security (TLS) (development files) | https://www.openssl.org/ ## 相关链接 - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/zh-hans/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Homebrew utility packages](https://pkg.so/zh-hans/brew-utility-packages/) - Matched Homebrew package provider. - [openssl@3](https://pkg.so/zh-hans/brew/openssl-3/) - Package name indicates the same formula family. - [openssl@4](https://pkg.so/zh-hans/brew/openssl-4/) - Package name indicates the same formula family. - [openssl@3.5](https://pkg.so/zh-hans/brew/openssl-3-5/) - Package name indicates the same formula family. - [gnutls](https://pkg.so/zh-hans/brew/gnutls/) - Shares pkgdb curated category or tags: cli, cryptography, library, security, ssl. - [mbedtls](https://pkg.so/zh-hans/brew/mbedtls/) - Shares pkgdb curated category or tags: cli, cryptography, security, ssl, tls. - [libressl](https://pkg.so/zh-hans/brew/libressl/) - Shares pkgdb curated category or tags: cli, cryptography, security, ssl, tls. - [botan](https://pkg.so/zh-hans/brew/botan/) - Shares pkgdb curated category or tags: cli, cryptography, library, security, tls. - [aws-lc](https://pkg.so/zh-hans/brew/aws-lc/) - Shares pkgdb curated category or tags: cli, cryptography, library, security, tls. ## Combined YAML source View the package source record on GitHub. [combined/openssl@3.0.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openssl@3.0.yml) ## 来源 - pkg.so package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph