How to install openssl35 on Debian

OpenSSL 3.5 LTS command-line tools (GetPageSpeed build with ECH)

Vendor: GetPageSpeed LLC https://github.com/openssl/openssl

Availability

Compare package tracks by distribution and architecture. Checkmarks show the architectures available in each repository channel.

Distro	Channel	amd64	arm64	Version
Debian 13 (trixie)	Base			3.5.8
Debian 12 (bookworm)	Base			3.5.8

Description

An ABI-isolated build of the OpenSSL 3.5 LTS line carrying the Encrypted Client Hello (ECH, RFC 9849) backport from the DEfO project, plus TLS certificate compression (zlib, brotli, zstd), kTLS and post-quantum key exchange (X25519MLKEM768). It is installed alongside the system OpenSSL and does not replace libssl3. This package provides the openssl command-line utility from the openssl35 build, installed as /usr/bin/openssl35 to avoid clashing with the system /usr/bin/openssl. It includes the "openssl35 ech" subcommand for generating ECH keys.

Built for Debian.

Install

Base Debian 12, 13

openssl35 on Debian 12 (bookworm), 13 (trixie)

curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb
sudo apt-get install -y /tmp/getpagespeed-release.deb
rm /tmp/getpagespeed-release.deb
sudo apt-get update
sudo apt-get install -y openssl35

Frequently asked questions

How do I install openssl35 on Debian?

Add the GetPageSpeed repository, then install the openssl35 package with your system package manager.

Which Debian versions is openssl35 available for?

openssl35 is available for Debian 12, 13.