diff --git a/trunk/user/openvpn/.gitignore b/trunk/user/openvpn/.gitignore
new file mode 100644
index 00000000000..f8d4949ef01
--- /dev/null
+++ b/trunk/user/openvpn/.gitignore
@@ -0,0 +1,2 @@
+openvpn-*/
+openvpn-*.tar.gz
\ No newline at end of file
diff --git a/trunk/user/openvpn/Makefile b/trunk/user/openvpn/Makefile
index 0c65f20d7eb..87d66fd505b 100644
--- a/trunk/user/openvpn/Makefile
+++ b/trunk/user/openvpn/Makefile
@@ -1,14 +1,20 @@
-SRC_NAME=openvpn-2.5.2
+SRC_NAME=openvpn-2.5.9
+SRC_URL = https://github.com/OpenVPN/openvpn/archive/refs/tags/v2.5.9.tar.gz
 
 CFLAGS += -ffunction-sections -fdata-sections -fvisibility=hidden
 LDFLAGS += -Wl,--gc-sections
 
-all: extract_test config_test
+all: download_test extract_test config_test
 	$(MAKE) -j$(HOST_NCPU) -C $(SRC_NAME)
 
+download_test:
+	( if [ ! -f $(SRC_NAME).tar.gz ]; then \
+		wget -t5 --timeout=20 --no-check-certificate -O $(SRC_NAME).tar.gz $(SRC_URL); \
+	fi )
+
 extract_test:
 	( if [ ! -d $(SRC_NAME) ]; then \
-		tar -xf $(SRC_NAME).tar.xz; \
+		tar -xf $(SRC_NAME).tar.gz; \
 		patch -d $(SRC_NAME) -p1 < $(SRC_NAME).patch ; \
 	fi )
 
diff --git a/trunk/user/openvpn/openvpn-2.5.2.tar.xz b/trunk/user/openvpn/openvpn-2.5.2.tar.xz
deleted file mode 100644
index d0f4cbcfdf2..00000000000
Binary files a/trunk/user/openvpn/openvpn-2.5.2.tar.xz and /dev/null differ
diff --git a/trunk/user/openvpn/openvpn-2.5.2.patch b/trunk/user/openvpn/openvpn-2.5.9.patch
similarity index 100%
rename from trunk/user/openvpn/openvpn-2.5.2.patch
rename to trunk/user/openvpn/openvpn-2.5.9.patch