wiki:OpenvpnSoftwareRepos

Introduction

This page contains instructions for using OpenVPN project's own software repositories. For a list of unofficial repositories please refer to the Unofficial OpenVPN software repositories page.

For OpenVPN 3 Linux, see the dedicated OpenVPN 3 Linux page.

Latest OpenVPN releases are available in the OpenVPN project's apt repositories. This allow you to use more up-to-date version of OpenVPN than what is typically available in your distribution's repositories. Please note that all commands listed below have to be run as root, e.g. using sudo or su.

Pre-built Linux binaries are only available for Debian and Ubuntu. This is so for two reasons:

  • Official Debian and Ubuntu repositories tend to have fairly old OpenVPN versions available
  • The Fedora and Fedora EPEL provides fairly up-to-date OpenVPN releases for supported Fedora and Red Hat Enterprise Linux (including clones such as CentOS, Scientific Linux) releases.

All packages are available in i386 and amd64/x86_64 flavours. Even if a package is built on a particular OS, it does not mean it won't work on older and/or newer versions of the same distro, or even on a different operating system. If you encountered any issues with the package, please file a new bug report.

CentOS / Fedora / Red Hat Enterprise Linux

There are two alternatives here for OpenVPN packages. Fedora carries are resonably up-to-date release in the main repositories. For CentOS and Red Hat Enterprise Linux (RHEL) the Fedora EPEL repositories which contains the last OpenVPN releases when the distribution was released. All of these packages are considered to be stable for enterprise usage and will essentially just get bug and security fixes during the lifetime of the distribution. OpenVPN major releases will only be added to the next Fedora release.

To get newer releases than the main Fedora and EPEL repositories provides, consider using the OpenVPN packages from the Fedora Copr repository. The Copr repository will always have the latest OpenVPN releases available.

Using Fedora EPEL (CentOS / RHEL)

Ensure you have the Fedora EPEL repository enabled. CentOS users may do this easily by installing the epel-release package via yum install. Red Hat Enterprise Linux users need to install this package manually, as described in the Fedora EPEL wiki page. Then just run yum install openvpn.

Using Fedora Copr

There are 3 different Fedora Copr repositories available for OpenVPN. openvpn-release which contains the latest OpenVPN stable release. Minor releases of the latest stable release will also be published in this repository. openvpn-beta which contains only the latest beta and release candidates. When a release candidate is moved to stable, it is moved over to the openvpn-release repository. The last repository is openvpn-git which contains semi-regular builds of the latest develop code base. These development builds are not meant for production but is valuable for testing new features.

CentOS/RHEL users: Ensure you have the yum-plugin-copr package installed (can be installed via yum).

Then run these commands:

    [root@host:~]# yum copr enable dsommers/openvpn-release
    ...
    [root@host:~]# yum install openvpn

If you have OpenVPN already installed, it will be upgraded to the latest available version.

Debian / Ubuntu: Using OpenVPN apt repositories

We maintain several OpenVPN (OSS) software repositories. To setup the repositories you need to change to the root user. Typically this is done using sudo:

$ sudo -s

Then import the public GPG key that is used to sign the packages:

$ wget -O - https://swupdate.openvpn.net/repos/repo-public.gpg|apt-key add -

Next you need to create a sources.list fragment (as root) so that apt can find the new OpenVPN packages. One way to do it is this:

$ echo "deb http://build.openvpn.net/debian/openvpn/<version> <osrelease> main" > /etc/apt/sources.list.d/openvpn-aptrepo.list

Where <version> can be one of

  1. stable: stable releases only - no alphas, betas or RCs
  2. testing: latest releases, including alphas/betas/RCs
  3. release/2.3: OpenVPN 2.3 releases
  4. release/2.4: OpenVPN 2.4 releases, including alphas/betas/RCs
  5. release/2.5: OpenVPN 2.5 releases, including alphas/betas/RCs

and <osrelease> depends your distribution:

  • wheezy (Debian 7.x)
  • jessie (Debian 8.x)
  • stretch (Debian 9.x)
  • buster (Debian 10.x)
  • precise (Ubuntu 12.04)
  • trusty (Ubuntu 14.04)
  • xenial (Ubuntu 16.04)
  • bionic (Ubuntu 18.04)
  • focal (Ubuntu 20.04)

This list may be incomplete. Please check the repository web page for the complete list of releases.

Examples:

$ echo "deb http://build.openvpn.net/debian/openvpn/testing jessie main" > /etc/apt/sources.list.d/openvpn-aptrepo.list
$ echo "deb http://build.openvpn.net/debian/openvpn/release/2.3 wheezy main" > /etc/apt/sources.list.d/openvpn-aptrepo.list

Now you're set for installing OpenVPN. Note that packages built for older operating system releases might work just fine on newer release of the same operating system.

Installing OpenVPN

On Debian/Ubuntu use

$ apt-get update && apt-get install openvpn

Notes on expired keys

If the apt signing key expires, apt will complain when refreshing the package cache (e.g. apt-get update). To fix this remove the expired key from apt keychain:

$ apt-key del E158C569

Then add the new key using wget and apt-key as described above. Then verify that the new key is in the keychain:

$ apt-key list
--- snip ---
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2011-08-03 [SC] [expires: 2025-07-27]
      30EB F4E7 3CCE 63EE E124  DD27 8E6D A8B4 E158 C569
uid           [ unknown] Samuli Seppänen (OpenVPN Technologies, Inc) <samuli@openvpn.net>
sub   rsa2048 2011-08-03 [E] [expires: 2025-07-27]
Last modified 8 months ago Last modified on 10/28/20 13:48:29