I would like to report an issue on
https://openvpn.net website.
On page
https://openvpn.net/index.php/access-server/download-openvpn-as-sw.html
there are links for downloading
OpenVPN Access Server for various platforms (RedHat, Debian, etc).
After one of the links is followed, e.g.
https://openvpn.net/index.php/access-server/download-openvpn-as-sw/113.html?osfamily=Debian
you get links for downloading current version of OpenVPN Access Server for various versions of that particular OS, e.g.:
http://swupdate.openvpn.org/as/openvpn-as-2.1.9-Debian8.i386.deb
http://swupdate.openvpn.org/as/openvpn-as-2.1.9-Debian8.amd_64.deb
The problem is that the links use HTTP instead of HTTPS, which would be much safer for downloading software.
But actually those files are available through HTTPS:
https://swupdate.openvpn.org/as/openvpn-as-2.1.9-Debian8.i386.deb
https://swupdate.openvpn.org/as/openvpn-as-2.1.9-Debian8.amd_64.deb
Besides, the following page also contains some download links with HTTP instead of HTTPS:
https://openvpn.net/index.php/download/community-downloads.html
Could the web admins fix the pages so that software downloads always use HTTPS, please?
P.S. Amongst the Debian versions of OpenVPN Access Server I'd like to see
Debian 9 packages added while
Debian 6 could be dropped from the page as that version is outdated (see
https://en.wikipedia.org/wiki/Debian_version_history).
Regards,
-- rpr.