Re: EasyRSA reported as malware
tincantech via Openvpn-users <[email protected]> Fri, 08 Aug 2025 13:48:46 +0000
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <qHwxeq_3b2LYlfHtw9MI_Fe4TJO8EFhyQ0P6AWnWVFiKhElU930LvnXD3h0iipEYcmPJancnu1YDYevzYcKyPi4sQGUaZbHn3dU7TciGjAg=@protonmail.com> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I read your links and this is my conclusion: The VirusTotal link lists EasyRSA zip at exactly 50/50, Which seems like guess work by different AIs, filters etc. Easy-RSA zip files for Windows do contain executable files and that alone is likely to trigger AV alerts. The unix tools (eg. sed.exe/grep.exe etc) have not changed in over a decade but I doubt they have been whitelisted by any AV because they are not popular enough to warrant that. The OpenSSL binaries do change quite regularly, as we try to keep upto date with OpenSSL releases. We build these ourselves, so they are very likely to trigger AV warnings. The easyrsa script has also changed a lot in recent years, so that is likely to trigger AV warnings too. For the record, Openvpn/Easy-RSA for Windows is safe to use. If OpenVPN started shipping malware then that would be fairly big news on the internet. In the long run, I would simply recommend using Linux to run easyrsa. That way you can install easyrsa via the package manager. Some people recommend Windows Subsystem for Linux but I cannot get that to install, probably because I am using VirtualBox. And even if you can get WSL to install, you would most likely need to install OpenSSL for Windows, which I cannot help with. Regards tct -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsC5BAEBCgBtBYJolgAvCZBPl5z2a5C4nUUUAAAAAAAcACBzYWx0QG5vdGF0 aW9ucy5vcGVucGdwanMub3Jnoy5C4Mt+wQrwKZBIYw5xX2+zuRlArCuLapOH 4Gxfnm8WIQQJvD1EZ6ONcnnFVVVPl5z2a5C4nQAAWXsH/ihqOtz8o5cfHwQY b8Nil718VAYvJ8QQe1Tp3ISFZBpj+dCOx6NA8Hx6Zq4Y/WGzJn+AfjNzBzfc Gj0a8lqIoTrDQoGhXPGP3YU0O92UUwmI7B8xxVH0xmTFu5skjKfZJbIQWDG0 OT9TqdTR2fKhXgwSNrSbIRKGdepqOnRoWiDpvoJS1PBqNYFs3mt6OIBYk2tq RoRCu6/9+Ax1LOxN7qxHOQrKdlym3qmAQyX4t3eua2jGf7vqre9/BIuyMxGf Ki549BT3ZVWXbpDU5dakOMi2iM2/+2gCE6K418N71asYpI9iM/1KkNeqVT7g ilejr2yK9HlpRAk5RflQPDFDsWQ= =693n -----END PGP SIGNATURE----- _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
publickey - [email protected] - 0x09BC3D44.asc
(application/pgp-keys, 1.7 KB)
-----BEGIN PGP PUBLIC KEY BLOCK----- xsBNBFvwSccBCADOmHEnQlLmOjJRtJL2l53MLwwFTy7XnEps3b1Q0UwWYFCv L2oNp0nrdGlKKDJq50Y09SR+URYBQmKmY3EmzpyUIKM/rgo1RyubHpMRHbDp 7Jp8LxkffFBVJj/t5VMpD6eMR6aUciQjgRL8NZe6+T7xfXXXwV5hoReZ3jO+ zHi6SR7xTvGXla+MQz6EEpWnlbLvg2ort9KseuVjYrqvRMxcdP0o9cZWJ5ep JNmgeB6M7+OW08U1SsXtKrpLRcI6yKmV38jhzPr2ZgP9rmrlErR/1iqQQHXY o8/0DfPyF0mH9ynQIiLE/l+FYu4rsG8ViKlxhXczePzAtLCjiB0a0mRVABEB AAHNNyJ0aW5jYW50ZWNoQHByb3Rvbm1haWwuY29tIiA8dGluY2FudGVjaEBw cm90b25tYWlsLmNvbT7CwH8EEAEIACkFAlvwSccGCwkHCAMCCRBPl5z2a5C4 nQQVCAoCAxYCAQIZAQIbAwIeAQAKCRBPl5z2a5C4nQBDB/9ZUo9BOXJR61Nm 02oZ/8aRXO9NnUSFt6GLOWcDNvAs4IJWMDVEQfYanb+421QNd/5d6H1iXF+i 4LDK0M6agC+gsNFJnjPGItvPtj7WyjynZRx8D40PPXigfHYuw2oRu0lr+P1p 1qeUe4NbcqIv8IIvLz2zClYZONgAsQVcNAHi7Z4ortQ2io2BAVj/819JPYMt tHgY81wS1V7v8GDTZg8oaPhXGfaC4TZFGtZr/bybcqrso35jaQmC54xMbXpF AUrc3uGVOH+OdG/BW2gcYqpvUFBukXxCUBYHP2NfXhNfzGt9nC1ulNKYeP19 TGlOorBMYIAEHoGxvpbUXfbaNWCUzsBNBFvwSccBCAC9KyVZRS5aMaG5Pi0n fx8aNos3bYp246MtfaoKBfTQArd+GZW+WnFyJEiSyLdz0rUutyCAdf5lgVH+ WvLvImiGrSrzVpMT2nCS09LqL50Qjz8A7gp5H/hQztZ8iNysGD9NO46OnI75 90dHfCrXjQPSFtFGsTzgDxQIiMuzz9DR7BekKPmuOFIhBe9eEZqbxc8RWeQt ha7i/DrJTRNK1aOADQFVuV1/Am5ThGPWFM/YJUyTYhMW0yePh45ObWuRQZks l+aOm4L0KGDDYlm/FQx/EMCubvlzy/zxDdB6nqFih2qZrfymniSOKajG0joT pZoz/Ez+4fAtg6y0PspNR6idABEBAAHCwGkEGAEIABMFAlvwSccJEE+XnPZr kLidAhsMAAoJEE+XnPZrkLidRe0H/j5CIFIAucuaiEMkLkNKEAO5s7x47eNy GPfZslyY+HjzGU0d07MkkGmVkPTVzwqVzNZbny7ZAv1zlW0Uy0yHp1APpyYt 8buUppTBq7d47ogxERYzt/Lc2L5a/VKFNRbhN1/XQmPiz2Ele4tyipbTapcy +zbyfzAMD13cIdZ13hTsNP0olgBhAqUAUUYpxRlkAHeJ+Dt3NbzHS4KQK538 NJ/l7bXSKsGqoYqJeZ8VNBxwWWUbuG4jjrh43MIRgUZ5WsPUYV6Hx056kMjb /bYBjI0TEMvH8160uqzFXeHvYyUlq0SinD/Z9ioIe8QdsHGBDUIRYYub1pO8 qrCzRZx0oNA= =/Dea -----END PGP PUBLIC KEY BLOCK-----
publickey - [email protected] - 0x09BC3D44.asc.sig
(application/pgp-signature, 380 B) - not displayed