Re: [Openvpn-users] EasyRSA reported as malware

[tincantech <tin...@pr...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

On Thursday, 7 August 2025 at 22:28, Kenneth Porter <sh...@se...> wrote:

> I tried downloading the lastest EasyRSA release from GitHub only to see
> both Firefox and Windows Defender (Win10x x64) report it as malware
> "trojan.pigyx". I downloaded it on Linux and uploaded it to VirusTotal
> and many AV's think it's malware. What's going on?
> 
> https://www.virustotal.com/gui/file/ed0d5525f52d0c0ff29661e18b810cc510154aad890c37ed819ec64104512caa
> 
> Downloaded from here:
> 
> https://github.com/OpenVPN/easy-rsa/releases/tag/v3.2.3
> 
> (I haven't used this in awhile and was about to make a new client
> config, so I figured I should grab the latest package.)
> 
> 

This is probably a false positive.

My gut feel would be the Openssl binaries that EasyRSA ships.
Either that or the Unix tools, which have been shipped for over a decade,
unchanged, have suddenly been flagged by your AV as dubious.

If your anti-virus product is really so picky then simply download and
install Openvpn for Windows and install Easy-RSA from that installer.
You need to select Easy-RSA as an extra install component. IE. Custom.

OpenVPN Download URL: https://community.openvpn.net/Downloads

If your anti-virus also complains about the Openvpn installer then
please let us know.

Regards
tct

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
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=XBEM
-----END PGP SIGNATURE-----