Insert openvpn client in debian repo?

[Vucnu 1]

Hi,

since the client is opensource and FOSS can you submit to the debian team in order to include the client in the standard repo?

 

It will be very useful because I don't trust very much downloading a .deb file from the internet.

 

Thanks you.

[iwih2gk 93]

Hi,

since the client is opensource and FOSS can you submit to the debian team in order to include the client in the standard repo?

 

It will be very useful because I don't trust very much downloading a .deb file from the internet.

 

Thanks you.

 

 

I can understand what you are wanting to accomplish.  Even repo files are subject to "contamination" during transit to your machine, although the odds are improved.

 

fyi - are you paying attention to the signature link under the client download (specific to your operating system) here on Air?  For now you can run a SHA256 against the file that is delivered to your machine.  Its quite difficult to imagine a matched SHA256 against anything other than the legit file!!

 

Although while I am at it I would like to encourage Air to sign their downloads with a PGP key, which is tantamount to a perfect authenticator!  My opinion, which is always correct.  LOL!!

[Vucnu 1]

Hi

 

 

Even repo files are subject to "contamination" during transit to your machine, although the odds are improved.

 

This is simply false, read about apt security in debian documentation.

 

fyi - are you paying attention to the signature link under the client download (specific to your operating system) here on Air?

 

Yes, but this is a system less secure then **official** repositories

 

For now you can run a SHA256 against the file that is delivered to your machine.  Its quite difficult to imagine a matched SHA256 against anything other than the legit file!!

 

This is a system less secure then **official** repositories, can I remember you that openvpn client need to be root?

 

Although while I am at it I would like to encourage Air to sign their downloads with a PGP key, which is tantamount to a perfect authenticator!  My opinion, which is always correct.  LOL!!

All apt repositories come with software signed against PGP.

If AirVpn sign their download, we HAVE to obtain their key and to assure that the key is correct. Please read somethings about web of trust.