OpenVPN Connect3.7.3

OpenVPN Connect is the official OpenVPN client app developed by OpenVPN Inc., the creators of the OpenVPN(R) protocol. Designed for use with OpenVPN’s zero-trust business VPN solutions, this app enables secure remote access to internal networks, cloud resources, and private applications. A zero-trust VPN is a virtual private network that requires continuous identity and device verification for every access request, adhering to the principle of 'never trust, always verify,' regardless of the user's location.
IMPORTANT NOTE:
This app does NOT include a built-in VPN service. It establishes an OpenVPN tunnel to a VPN server or service that is compatible with the OpenVPN protocol. It is meant for use with OpenVPN’s business Zero-trust VPN solutions:
. Access Server (self-hosted)
. CloudConnexa(R) (cloud-delivered)
KEY FEATURES
. Fast, secure VPN tunneling with OpenVPN protocol
. Strong AES-256 encryption and TLS 1.3 support
. MDM-friendly with a global configuration file
. Device posture checks**
. Import of connection profile with URL**
. Captive Wi-Fi portal detection
. Web authentication for SAML SSO support
. HTTP proxy configuration
. Seamless split-tunneling and auto-reconnect
. Works over Wi-Fi, LTE/4G, 5G, and all mobile networks
. Easy setup & import of .ovpn profiles
. Kill switch for fail-safe protection
. IPv6 and DNS leak protection
. Support for certificate, username/password, external certificate, and MFA authentication

** Works with Access Server and CloudConnexa
HOW TO USE OPENVPN CONNECT:
Easily get connected by simply entering your organization’s URL and login - no complex setup required.
BEST PAIRED WITH OPENVPN BUSINESS SOLUTIONS:
. Access Server - Self-hosted zero-trust VPN software server with web-based administration, access control, clustering for horizontal scaling, flexible authentication methods, and zero-trust controls.
. CloudConnexa(R) - Cloud-delivered Zero-Trust business VPN service offered from 30+ worldwide locations with ZTNA, application domain name routing, IPsec support for connecting networks, and advanced identity, device posture, and location context continuous checks.

Trusted by Global Businesses:
Over 20,000 organizations, including Salesforce, Target, Boeing, and others, rely on OpenVPN’s Zero-Trust VPN solutions.

Version History - Support a managed restricted mode enforced through mobile device management (MDM) platforms like Microsoft Intune or Jamf Pro.
- Block user actions including sign-in, sign-out, profile editing, and changing settings via MDM configurations.
- Enforce a permanent kill switch on the active profile to block unauthorized traffic automatically.
- Allow a one-time connection profile import before the restricted mode lock out takes effect.
- Fixed other minor issues. 3.7.3 May 26 - Minor improvements and fixes
- Removed feedback form 3.7.2 06/26/2025 - Added support of "Global Config" feature that allows configuring the app settings, importing profiles, and creating proxies by applying a single config
- OpenVPN upgraded to 3.11.0 version
- OpenSSL and іsome other code libraries were upgraded
- Added support for new DNS server options
- Other minor improvements and fixes 3.7.1 04/24/2025 - Enhanced DNS stability and productivity
- Fixed a problem with routing to 128.0.0.0/1 network
- Resolved an issue with endless reconnect after network interrupts when using profiles with “auth-user-pass“ and “auth-nocache“ directives
- Fixed the bug when the app would not connect to server-locked profile with SAML auth from iOS settings
- Fixed an issue with an absence of IPv4 traffic when “Block IPv6“ is set to “Yes”
- Fixed a problem with connection via hotspot
- Other minor fixes and changes. 3.5.1 01/23/2025 - “Device Posture Checks” feature implemented
- Forced re-authentication support added
- Enhanced DNS stability and productivity
- Connection through Proxy with basic auth is now allowed only with “Insecure” Security Level
- Added support of Profiles with EC (elliptic curves signature algorithms) for external certificates
- Import profile for AS users with mixed Auth setup will now contain the direct link to web import
- Fixed an issue when Password Dialog is not showing up while connecting via IOS settings
- Other minor fixes and changes. 3.5.0 09/18/2024 - Added confirmation dialog when connecting with a profile that contains unsupported directives
- Updated Import Profile screen with a link to the website with useful information
- Ended support for devices running IOS 12, 13, 14
- Fixed issue when app disconnects after 10 min in Airplane mode
- Minor fixes and improvements 3.4.2 04/18/2024 - Temporarily ignoring unsupported options in a profile
- Fixed an issue on iOS 17 where the connection would drop during sleep when 'Battery Saver' was enabled 3.4.1 11/09/2023 - Dropped support of iOS 11
- Moved from OpenSSL 1.1.1 to OpenSSL 3.0.8
- Updated OpenVPN 3 library to version 3.8
- Introduced setting “Security Level”
- Introduced setting “System Browser Auth”
- Removed onboarding screens
- Various bug fixes and UX improvements 3.4.0 10/10/2023 - Fixed connectivity issues on iOS 16.5
- Fixed MFA issue when a message contains non-Latin symbols
- Fixed issue with display of available application update 3.3.4 06/30/2023 - Updated information exchange for OpenVPN Cloud users 3.3.3 03/03/2023 - Resolved stability issues
- Improved performance 3.3.2 08/29/2022 Changes from 3.2.3 to 3.3.0:
- Changed Web Auth flow to use external browser for authentication
- Removed the "force AES-CBC cipher" legacy compatibility option
- Added Kill Switch feature
- Added Siri Shortcuts support
- Added new functionality for software updates
- Added captive portal detection
- Added an Advanced Settings section
- Added new setting to manage disconnect and reconnect alerts
- Updated OpenVPN 3 library to 3.6
- Various bug fixes and UX improvements 3.3.0 07/20/2022 Changes from 3.2.1 to 3.2.2:
- Increased default connection timeout to 1 minute. 3.2.3 02/15/2021 Changes from 3.2.1 to 3.2.2:
- Minor fix for Web Auth flow. 3.2.2 10/21/2020 Changes from 3.2.0 to 3.2.1:
- Minor changes for Web Auth flow. 3.2.1 09/28/2020 Changes from 3.1.2 to 3.2.0:
- Switchover from MbedTLS library to OpenSSL library
- As part of the transition from MbedTLS to OpenSSL the list of negotiable TLS cipher suites no longer includes weak ciphers suites without forward secrecy support (DH/ECDH)
- Support of TLS 1.3 version
- Support signing with RSA-PSS signatures during TLS handshake
- Update of OpenVPN3 library to 3.5.5 version
- Improved stability and performance 3.2.0 06/13/2020 * MbedTLS update to 2.7.13 including fix for CVE-2019-18222 3.1.2 03/30/2020 * New profile import flow with WebAuth support and "Connect after import" ability
* Removed "Reconnect on Wakeup" setting
* Added "Battery Saver" setting in order to prevent multiple reconnections in the device’s sleep mode
* Added app notification in case when the VPN connection was interrupted 3.1.1 12/02/2019 * New profile import flow with WebAuth support and "Connect after import" ability
* Removed "Reconnect on Wakeup" setting
* Added "Battery Saver" setting in order to prevent multiple reconnections in the device’s sleep mode
* Added dialog on connection with ability to select an external PKCS certificate or proceed without it
* Added app notification in case when the VPN connection was interrupted 3.1.0 11/28/2019 * Removed the Private Tunnel section. The Private Tunnel app can be downloaded from the App Store separately
* Improved connection stability when device is in sleep mode
* Improved error messages during profile import and connection attempts
* Improved security by saving profile passwords in System Security storage
* Changed timeout logic when network is unavailable
* Fixed usage of basic authentication for proxies
* Fixed the ‘AES-CBC cipher algorithm’ setting to help connect to legacy servers
* Other various connectivity fixes 3.0.3 08/29/2019 * Added Data Policy Agreement
* Added "Certificates" screen with the possibility to remove external certs
* Removed outdated "Network State detection" setting and enabled it by default
* Increased max length of inputs - username, hostname, etc.
* Added missed labels for Voice Over
* Fixed iOS 12 connectivity issues
* Fixed 'high battery usage' issue by reducing speed stats frequency. Now Speed Chart shows data with 10 sec interval
* Allowed empty password for certificates
* Added custom error messages for connection attempt without network available or proper certificate
* Disabled "Compression" by default (because it is insecure)
* Changed icons for "Edit Profile" and "Edit Proxy" buttons, and improved UX by increasing touch area
* Small UI improvements 3.0.2 10/03/2018 * Fixed VoiceOver issues
* Fixed crash on start issue
* Dropped MD5 support and added error message when using an MD5-signed certificate
* Improved logic of Private Tunnel login and connection processes 3.0.1 09/04/2018 Changes from 1.2.9 to 3.0.0:
* new UI layer with two skins
* completely updated profile and proxy management
* new functional settings
* settings moved to app from system
* Private Tunnel and Access Server sections
* automated import from Access Server with link and credentials
* extended statistics about connection and visualization of data flow
* fixed various bugs 3.0.0 08/27/2018 Changes from 1.2.8 to 1.2.9:
* show MD5 warning pop-up only once per VPN session
* fix glitch upon key re-negotiation when using tls-crypt
* fix interoperability issue with private keys created using OpenSSL 1.1 default settings (aka add support for private keys encrypted using PKCS#5v2.0 with PRF newer than SHA1) 1.2.9 02/24/2018 Changes from 1.2.7 to 1.2.8:
* fixed spurious crash on reconnection after sleep
* restored access to CertificatePayloads (p12 bundles) uploaded via Provisioning Profiles (.mobileconfig files)
* show warning pop-up when connecting to server using insecure MD5 algorithm to sign certificates (MD5 support will be dropped end of Apr 2018)
* report unique app specific UUID to server within peer info (variable IV_HWADDR)
* added support for ECDSA ciphersuites (for EC certificates; only supported with certs embedded in .ovpn file)
* fixed VPN status after closing and re-opening App with tunnel activated (VPN IPs, last event, etc.)
* fixed profiles loading from iCloud with Files app (due to an iOS bug, only 1 file can be loaded at once)
* improved .ovpn12 file import 1.2.8 02/20/2018