Re: EasyRSA reported as malware

tincantech via Openvpn-users <[email protected]> Fri, 08 Aug 2025 13:48:46 +0000
Newsgroups gmane.network.openvpn.user
Message-ID <qHwxeq_3b2LYlfHtw9MI_Fe4TJO8EFhyQ0P6AWnWVFiKhElU930LvnXD3h0iipEYcmPJancnu1YDYevzYcKyPi4sQGUaZbHn3dU7TciGjAg=@protonmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

I read your links and this is my conclusion:

The VirusTotal link lists EasyRSA zip at exactly 50/50,
Which seems like guess work by different AIs, filters etc.

Easy-RSA zip files for Windows do contain executable files
and that alone is likely to trigger AV alerts.

The unix tools (eg. sed.exe/grep.exe etc) have not changed
in over a decade but I doubt they have been whitelisted by
any AV because they are not popular enough to warrant that.

The OpenSSL binaries do change quite regularly, as we try
to keep upto date with OpenSSL releases. We build these
ourselves, so they are very likely to trigger AV warnings.

The easyrsa script has also changed a lot in recent years,
so that is likely to trigger AV warnings too.

For the record, Openvpn/Easy-RSA for Windows is safe to
use. If OpenVPN started shipping malware then that would
be fairly big news on the internet.

In the long run, I would simply recommend using Linux to
run easyrsa. That way you can install easyrsa via the package
manager.

Some people recommend Windows Subsystem for Linux but I cannot
get that to install, probably because I am using VirtualBox.

And even if you can get WSL to install, you would most likely
need to install OpenSSL for Windows, which I cannot help with.

Regards
tct
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
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=693n
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
publickey - [email protected] - 0x09BC3D44.asc (application/pgp-keys, 1.7 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----

xsBNBFvwSccBCADOmHEnQlLmOjJRtJL2l53MLwwFTy7XnEps3b1Q0UwWYFCv
L2oNp0nrdGlKKDJq50Y09SR+URYBQmKmY3EmzpyUIKM/rgo1RyubHpMRHbDp
7Jp8LxkffFBVJj/t5VMpD6eMR6aUciQjgRL8NZe6+T7xfXXXwV5hoReZ3jO+
zHi6SR7xTvGXla+MQz6EEpWnlbLvg2ort9KseuVjYrqvRMxcdP0o9cZWJ5ep
JNmgeB6M7+OW08U1SsXtKrpLRcI6yKmV38jhzPr2ZgP9rmrlErR/1iqQQHXY
o8/0DfPyF0mH9ynQIiLE/l+FYu4rsG8ViKlxhXczePzAtLCjiB0a0mRVABEB
AAHNNyJ0aW5jYW50ZWNoQHByb3Rvbm1haWwuY29tIiA8dGluY2FudGVjaEBw
cm90b25tYWlsLmNvbT7CwH8EEAEIACkFAlvwSccGCwkHCAMCCRBPl5z2a5C4
nQQVCAoCAxYCAQIZAQIbAwIeAQAKCRBPl5z2a5C4nQBDB/9ZUo9BOXJR61Nm
02oZ/8aRXO9NnUSFt6GLOWcDNvAs4IJWMDVEQfYanb+421QNd/5d6H1iXF+i
4LDK0M6agC+gsNFJnjPGItvPtj7WyjynZRx8D40PPXigfHYuw2oRu0lr+P1p
1qeUe4NbcqIv8IIvLz2zClYZONgAsQVcNAHi7Z4ortQ2io2BAVj/819JPYMt
tHgY81wS1V7v8GDTZg8oaPhXGfaC4TZFGtZr/bybcqrso35jaQmC54xMbXpF
AUrc3uGVOH+OdG/BW2gcYqpvUFBukXxCUBYHP2NfXhNfzGt9nC1ulNKYeP19
TGlOorBMYIAEHoGxvpbUXfbaNWCUzsBNBFvwSccBCAC9KyVZRS5aMaG5Pi0n
fx8aNos3bYp246MtfaoKBfTQArd+GZW+WnFyJEiSyLdz0rUutyCAdf5lgVH+
WvLvImiGrSrzVpMT2nCS09LqL50Qjz8A7gp5H/hQztZ8iNysGD9NO46OnI75
90dHfCrXjQPSFtFGsTzgDxQIiMuzz9DR7BekKPmuOFIhBe9eEZqbxc8RWeQt
ha7i/DrJTRNK1aOADQFVuV1/Am5ThGPWFM/YJUyTYhMW0yePh45ObWuRQZks
l+aOm4L0KGDDYlm/FQx/EMCubvlzy/zxDdB6nqFih2qZrfymniSOKajG0joT
pZoz/Ez+4fAtg6y0PspNR6idABEBAAHCwGkEGAEIABMFAlvwSccJEE+XnPZr
kLidAhsMAAoJEE+XnPZrkLidRe0H/j5CIFIAucuaiEMkLkNKEAO5s7x47eNy
GPfZslyY+HjzGU0d07MkkGmVkPTVzwqVzNZbny7ZAv1zlW0Uy0yHp1APpyYt
8buUppTBq7d47ogxERYzt/Lc2L5a/VKFNRbhN1/XQmPiz2Ele4tyipbTapcy
+zbyfzAMD13cIdZ13hTsNP0olgBhAqUAUUYpxRlkAHeJ+Dt3NbzHS4KQK538
NJ/l7bXSKsGqoYqJeZ8VNBxwWWUbuG4jjrh43MIRgUZ5WsPUYV6Hx056kMjb
/bYBjI0TEMvH8160uqzFXeHvYyUlq0SinD/Z9ioIe8QdsHGBDUIRYYub1pO8
qrCzRZx0oNA=
=/Dea
-----END PGP PUBLIC KEY BLOCK-----
publickey - [email protected] - 0x09BC3D44.asc.sig (application/pgp-signature, 380 B) - not displayed