# 使用 Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, zypper, scoop, winget 安装 openvpn
查看 openvpn 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。
## 安装
```sh
sudo av install brew:openvpn
```
## 代理安全回答
openvpn controls VPN connectivity and can route agent traffic through private networks.
- **凭据访问:** Reads VPN profiles, private keys, certificates, passwords, and auth files.
- **远程变更:** Primarily changes network reachability, not application data.
- **发布/制品风险:** Can expose private network access to downstream tools.
- **推荐控制:** Gate VPN start, config reads, and private-key handling.
- **代理使用指南:** Allow config validation; require approval before connecting or reading credential material.
其他安装命令:
### macOS
- Homebrew (100%):
```sh
brew install openvpn
```
证据: local Homebrew formula metadata
### Linux
- apk (92%):
```sh
sudo apk add openvpn
```
证据: Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
- Debian apt (92%):
```sh
sudo apt install openvpn
```
证据: Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
- dnf (92%):
```sh
sudo dnf install openvpn
```
证据: Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst
- Nix (92%):
```sh
nix profile install nixpkgs#openvpn
```
证据: nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- pacman (92%):
```sh
sudo pacman -S openvpn
```
证据: Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
- zypper (92%):
```sh
sudo zypper install openvpn
```
证据: openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
### Windows
- Chocolatey (92%):
```sh
choco install openvpn
```
证据: Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openconnect-gui'
- Scoop (92%):
```sh
scoop install extras/openvpn
```
证据: Scoop official bucket manifest trees: bucket/openvpn.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
- winget (92%):
```sh
winget install --id OpenVPNTechnologies.OpenVPN -e
```
证据: Windows Package Manager source index: OpenVPNTechnologies.OpenVPN from https://cdn.winget.microsoft.com/cache/source.msix
## 软件包事实
- **软件包键:** brew:openvpn
- **软件包管理器:** Homebrew
- **版本:** 2.7.5
- **来源摘要:** SSL/TLS VPN implementing OSI layer 2 or 3 secure network extension
- **主页:**
- **最后更新:** 2026-07-02T16:40:57Z
- **已生成:** 2026-08-03T19:37:03+00:00
## 可执行文件
- openvpn (别名)
## 安装行为
- Bottle: 不可用
## 版本和新鲜度
- 页面生成时间: 2026-08-03
- 管理器版本: 2.7.5
## 项目历史与用法
OpenVPN is a long-running open source VPN implementation built around SSL/TLS, TUN/TAP virtual network interfaces, and a single userspace daemon that can act as client or server. It became one of the default choices for self-hosted and commercial VPN deployments because it crossed operating-system, firewall, NAT, and package-manager boundaries better than many older VPN stacks.
### 项目历史
OpenVPN was created by James Yonan and traces its public history to 2001. The project chose a custom VPN protocol using SSL/TLS for key exchange and OpenSSL for cryptography rather than implementing IPsec, PPTP, or L2TP.
OpenVPN 1.x was mainly a point-to-point tool. OpenVPN 2.0 was the major architectural step: the official how-to and manual describe scalable multi-client TCP/UDP server mode, where many clients connect to a single server process and share one TUN or TAP interface.
The 2.x line added features that made OpenVPN practical in mixed networks: certificate-based TLS deployments, username/password authentication hooks, pushed routes and DNS options, management interfaces, plugins and scripts, IPv6 support, Windows service improvements, and continued crypto and platform updates.
### 采用历史
OpenVPN spread through Unix and Linux distributions, router firmware, VPN providers, and enterprise remote-access setups because it used ordinary TCP or UDP ports, worked through many NAT and firewall environments, and could be configured with plain text profile files. Package availability across Linux, BSD, macOS, Windows package managers, and router-oriented ecosystems made .ovpn profiles a portable operational artifact.
OpenVPN Inc. built commercial products such as Access Server and OpenVPN Connect around the open source Community Edition while continuing to support the community project. That split gave the protocol a dual life: a free daemon for administrators and a managed product line for organizations.
### 使用方式
Operators use OpenVPN to build routed layer-3 VPNs with TUN devices, bridged layer-2 VPNs with TAP devices, site-to-site tunnels, road-warrior remote access, lab networks, router-based VPN clients, and compatibility endpoints for commercial VPN services. A typical deployment combines server and client configuration files, certificates or username/password credentials, route pushes, firewall rules, and system services.
Package users care about the single openvpn executable because it is both the client and the server. That keeps scripting, service supervision, and container use straightforward, while configuration complexity lives in profile files and PKI assets.
### 为什么软件包爱好者会关心
OpenVPN is one of the canonical networking packages where packaging is operations: binaries, services, sample configs, plugin paths, systemd or launchd integration, certificate locations, and kernel TUN/TAP support all affect whether the package is usable.
Its long history also makes it a compatibility anchor. Even as WireGuard changed expectations for small VPN codebases, OpenVPN remains important for existing .ovpn profiles, mature server deployments, commercial-provider compatibility, and environments that need TLS-style transport flexibility.
### 时间线
- 2001: James Yonan releases the first OpenVPN versions.
- 2005: OpenVPN 2.0 establishes multi-client server mode as the core scalable deployment pattern.
- 2013-era 2.3 line: OpenVPN documentation notes complete IPv6 and PolarSSL support among 2.3 improvements.
- 2017-era 2.4 line: the project adds modern client/server negotiation features and continues improving Windows service behavior.
- 2020s: OpenVPN Community Edition continues through the 2.5, 2.6, and 2.7 lines while OpenVPN Inc. maintains commercial Access Server and OpenVPN Connect products around the protocol.
### Related projects
- OpenVPN is related to OpenVPN Access Server, OpenVPN Connect, EasyRSA, Tunnelblick, NetworkManager-openvpn, OpenWrt and other router firmware integrations, SoftEther VPN's OpenVPN protocol support, WireGuard, IPsec, and TLS libraries such as OpenSSL and mbed TLS.
### 来源
-
-
-
-
-
-
-
## 安全说明
broad file, network, media, or database tool signal. formula declares a Homebrew service.
- **Geiger 风险:** orange / 中
- broad file, network, media, or database tool signal
- formula declares a Homebrew service
## Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
## Configuration files
- macOS: ~/Library/Application Support/OpenVPN, ~/Library/Application Support/Tunnelblick/Configurations
- Unix: ~/.openvpn, $XDG_CONFIG_HOME/openvpn, ~/.config/openvpn
## Credential files
- macOS: ~/Library/Application Support/OpenVPN, ~/Library/Application Support/Tunnelblick/Configurations
- Unix: ~/.openvpn, $XDG_CONFIG_HOME/openvpn, ~/.config/openvpn
## 其他软件包管理器记录
- Debian apt - openvpn - 2.6.14-1+deb13u3: normalized package name match | Debian stable package indexes: openvpn from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | virtual private network daemon | https://openvpn.net/
- Nix - openvpn: normalized package name match | nixpkgs package indexes: openvpn from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - openvpn - 2.6.9-1ubuntu4: normalized package name match | Ubuntu 24.04 LTS package indexes: openvpn from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | virtual private network daemon | https://openvpn.net/
- apk - openvpn - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) | https://openvpn.net/
- apk - openvpn-auth-pam - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-auth-pam from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | OpenVPN plugin for PAM authentication | https://openvpn.net/
- apk - openvpn-dev - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (development files) | https://openvpn.net/
- apk - openvpn-doc - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (documentation) | https://openvpn.net/
- apk - openvpn-openrc - 2.7.5-r0: normalized package name match | Alpine Linux edge package indexes: openvpn-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Robust, and highly configurable VPN (Virtual Private Network) (OpenRC init scripts) | https://openvpn.net/
- dnf - openvpn - 2.7.5-2.fc45: normalized package name match | Fedora Rawhide package metadata: openvpn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A full-featured TLS VPN solution | https://community.openvpn.net/
- dnf - openvpn-devel - 2.7.5-2.fc45: normalized package name match | Fedora Rawhide package metadata: openvpn-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development headers and examples for OpenVPN plug-ins | https://community.openvpn.net/
- pacman - openvpn - 2.7.5-1: normalized package name match | Arch Linux sync databases: openvpn from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | An easy-to-use, robust and highly configurable VPN (Virtual Private Network) | https://openvpn.net/index.php/open-source.html
- zypper - openvpn - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Full-featured SSL VPN solution using a TUN/TAP Interface | https://openvpn.net/
- zypper - openvpn-auth-pam-plugin - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-auth-pam-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenVPN auth-pam plugin | https://openvpn.net/
- zypper - openvpn-devel - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenVPN plugin header | https://openvpn.net/
- zypper - openvpn-down-root-plugin - 2.6.14-2.5: normalized package name match | openSUSE Tumbleweed package metadata: openvpn-down-root-plugin from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | OpenVPN down-root plugin | https://openvpn.net/
- Chocolatey - openvpn: normalized package name match | Chocolatey community package catalog: openvpn from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','openconnect-gui'
## Combined YAML source
View the package source record on GitHub. [combined/openvpn.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openvpn.yml)
## 来源
- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
- curated agent safety answer