32-bit
wixmachine scopeswupdate.openvpn.org · publisher-owned- SHA-256
- 070f6077337acd6385ee81e43d24f30b1c0c981cf00e8e4d9cba3845a35f6c29
by OpenVPN, Inc. · GPLv2
Create secure VPN connections over the internet with this VPN software.
These URLs are the ones OpenVPN, Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what OpenVPN, Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "OpenVPN-2.7.5-I001-amd64.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "OpenVPN-2.7.5-I001-amd64.msi"Expected output
20a9b2831cc3be26c250caf60891c230f3bf3e1e7bd6e17b4e182f166026377a
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | GPLv2A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions OpenVPN registers itself to handle.
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.