64bit client download gets blocked by browsers

Pentangle

Hi all,

I'm sure you'll have experienced this, but does anyone know when Netgate are going to fix the fact that Edge/Chrome/Opera/etc detects the 64bit OpenVPN package as being dodgy and blocking it from being downloaded or run? (the 32bit package doesn't have the same issue it seems, but is pointless for a 64bit OS)

johnpoz

@pentangle I don't normally use those browsers... But I just downloaded the 64 bit with chrome without any warnings or issues

On chrome 109.0.5414.120 (Official Build) (64-bit)

Edge gave me this warning

Not a normal edge user, but not sure what exactly pfsense/netgate could do about downloading something off your local copy of pfsense and your browser not trusting it.. The domain or even just IP your using to access your pfsense would be different for most everyone.. But I would think you could either trust the site in browser for downloads, or just turn off that warning that I believe is related most likely to smartscreen in edge.

rcoleman-netgate

@pentangle said in 64bit client download gets blocked by browsers:

but does anyone know when Netgate are going to fix the fact that Edge/Chrome/Opera/etc detects the 64bit OpenVPN package as being dodgy and blocking it from being downloaded or run?

Have you opened a redmine about it? I haven't seen this... in the field or in the lab.

johnpoz

@rcoleman-netgate I really don't see what netgate can do here - I looked into even whitelisting my own domain in smartscreen - and unless your in a domain and can push it with group policy your kind of out of luck, other then just turning smartscreen off..

if I turn it off then don't get the warning.. This is MS thing, now if users were getting warnings about downloading pfsense from netgate.com - then you could submit that to ms to be cleared up..

If I turn it off - don't get any warnings and the file just downloads

jimp

There is nothing we can do about that. It's entirely in the browser. It's whining because it isn't "commonly downloaded" which will always be true because nobody else should be getting your customized VPN installers... Even accessing the firewall using a proper ACME cert, Edge still whines.

So either click past that and keep it, find a way to disable it in the browser, or use a browser that doesn't do that (e.g. Firefox).

rcoleman-netgate

@johnpoz said in 64bit client download gets blocked by browsers:

I really don't see what netgate can do here

I agree. But the user expects something to be fixed and there wasn't a redmine ever created for the issue -- so how are we supposed to fix it?

It's likely the browser's security permissions probably from a handed-down OS-level policy.

But the point stands -- you can't expect someone to know something is broken if you've never told them it was broken.