OpenVPN 2.3.3 -- released on 2014.04.09 (Change Log)

This release contains a number of bug fixes, small enhancements and changes aimed at improving long-term compatibility with newer OpenVPN versions. Windows installer I001 is also bundled with an updated OpenVPN-GUI and more importantly includes OpenSSL 1.0.1g that fixes the very serious heartbleed vulnerability (OpenVPN-specifics here). Windows installer I002 fixes a few easy-rsa issues, most notably Trac ticket #287.

All Windows users of OpenVPN 2.3-rc2-I001 through OpenVPN 2.3.2-I003 should upgrade their installations immediately.

If you find a bug in this release, please file a bug report to our Trac bug tracker. In uncertain cases please contact our developers first, either using the openvpn-devel mailinglist or the developer IRC channel (#openvpn-devel at For generic help take a look at our official documentation, wiki, forums, openvpn-users mailing list and user IRC channel (#openvpn at

Source Tarball (gzip)
openvpn-2.3.3.tar.gz GnuPG Signature
Source Tarball (xz)
openvpn-2.3.3.tar.xz GnuPG Signature
Source Zip GnuPG Signature
Windows Installer (32-bit)
openvpn-install-2.3.3-I002-i686.exe GnuPG Signature
Windows Installer (64-bit) openvpn-install-2.3.3-I002-x86_64.exe GnuPG Signature

Instructions for verifying the signatures are available here.

This release is also available in our own software repositories for Debian and Ubuntu, Supported architectures are i386 and amd64. For details. look here.

Note that easy-rsa is no longer bundled with OpenVPN source code archives. To get it, visit the easy-rsa page on GitHub, or download it from our Linux software repositories.

OpenVPN 2.3.2 -- released on 2013.06.03 (Change Log)

This is an old point release and you should in general use OpenVPN 2.3.3 instead. However, as OpenVPN 2.3.3 contains a few potentially disruptive changes you may want to use this older release instead. Please not that the Windows installers (I004) include a fix for the very serious heartbleed vulnerability (OpenVPN-specifics here).

Source Tarball openvpn-2.3.2.tar.gz GnuPG Signature
Source Zip GnuPG Signature
Windows Installer (32-bit)
openvpn-install-2.3.2-I004-i686.exe GnuPG Signature
Windows Installer (64-bit) openvpn-install-2.3.2-I004-x86_64.exe GnuPG Signature

Instructions for verifying the signatures are available here.

OpenVPN 2.2.2 -- released on 2011.12.22 (Change Log)

This is the old stable release. Most people should use the current stable release instead. This release bundles OpenSSL 1.0.0e, which is not affected by the TLS heartbeat vulnerability.

Source Tarball openvpn-2.2.2.tar.gz GnuPG Signature
Source Zip GnuPG Signature
Windows Installer openvpn-2.2.2-install.exe GnuPG Signature

This release is also available in our own apt repositories for Debian/Ubuntu and in i386 and amd64 flavours. For details. look here.

OpenVPN -- Older Releases

This page contains older OpenVPN releases not explicitly listed above.

OpenVPN -- Snapshots and development code

In addition to official releases latest development code and snapshot builds are available. If you're interested in using these snapshots, please read this article also.

OpenVPN -- Packages and ports

OpenVPN is available in repositories of most open source operating systems such as Debian, Ubuntu, Fedora, FreeBSD and Maemo. Some of them may have several versions available, e.g. one for latest beta branch, one for latest development code and one for stable releases. Using these OS-provider versions is usually easiest. However the OpenVPN project also packages latest OpenVPN releases for some open source operating systems. Take a look here to see if these packages are available for your OS.


OpenVPN uses TAP-windows to provide virtual tap device functionality on Windows. Normally you don't need to install TAP-windows separately, as OpenVPN installers include it.

Source Zip GnuPG Signature
Windows Installer tap-windows-9.9.2_3.exe GnuPG Signature

Most other operating systems have virtual tap device functionality in their kernels.


Starting with openvpn-2.3_alpha2 easy-rsa is no longer part of the OpenVPN source or binary packages. It can be downloaded separately from it's GitHub project page.


Official Windows binary packages are cross-compiled on Linux using mingw_w64 and the openvpn-build buildsystem. For details, look at the Wiki documentation.

LZO RPM Packages

The OpenVPN RPM package requires the LZO library for real-time link compression. (sources: Dag Wieers and SuSE distribution).