32-bit
wixmachine scopeswupdate.openvpn.org · publisher-owned- File name
- OpenVPN-2.7.5-I001-x86.msi
- SHA-256
- 070f6077337acd6385ee81e43d24f30b1c0c981cf00e8e4d9cba3845a35f6c29
by OpenVPN, Inc. · GPLv2
Create secure VPN connections over the internet with this VPN software.
These URLs are the ones OpenVPN, Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what OpenVPN, Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "OpenVPN-2.7.5-I001-amd64.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "OpenVPN-2.7.5-I001-amd64.msi"Expected output
20a9b2831cc3be26c250caf60891c230f3bf3e1e7bd6e17b4e182f166026377a
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
32-bit · machine scope · MSI convention
msiexec /i "OpenVPN-2.7.5-I001-x86.msi" /qn /norestart64-bit · machine scope · MSI convention
msiexec /i "OpenVPN-2.7.5-I001-amd64.msi" /qn /norestartARM64 · machine scope · MSI convention
msiexec /i "OpenVPN-2.7.5-I001-arm64.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | GPLv2A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions OpenVPN registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from openvpn.org, which is a domain we have tied to OpenVPN, Inc.
Every one of the 3 installers on this page comes with the SHA-256 OpenVPN, Inc declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id OpenVPNTechnologies.OpenVPN --exactUpgrade later
winget upgrade --id OpenVPNTechnologies.OpenVPNWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of OpenVPN, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every OpenVPN version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories OpenVPN, Inc. and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to OpenVPN — just other entries, each with its own official URL and published hash.