All current OpenVPN (OSS) source packages and Windows installers have been signed with the Security mailing list GPG key:
- Fingerprint F554 A368 7412 CFFE BDEF E0A3 12F5 F7B4 2F2B 01E7
If you have intentionally downloaded an old version of OpenVPN and the signature does not match with this key, please read this article really carefully.
Verifying file signatures
Signature verification can be performed by PGP or GnuPG once you have the correct key in your trusted keyring:
$ gpg --import keyname.asc
$ gpg -v --verify [.asc file]
Make sure you have the corresponding OpenVPN package in the same directory. GnuPG signature files for OpenVPN file releases are available on the download page.