Changes between Version 2 and Version 3 of Topics-2023-04-19

Timestamp:

04/19/23 11:19:42 (13 months ago)

Author:

OpenVPN Inc.

Comment:

--

Topics-2023-04-19

@@ -8 +8 @@
 == Current topics ==
 
-* **OpenVPN 2.6.3**\\''this was released april 13.\\djpig noticed an issue with the gpg signing key. any actions to be taken?''
+* **OpenVPN 2.6.3**\\''this was released april 13.\\djpig noticed an issue with the gpg signing key.\\accidentally used recently revoked key instead of new key from recent key rotation.\\also apparently latest debian release's gpg does not like sha1 anymore.''
 
 * **When going back to normal operating mode?**\\''new features and refactors in master,\\bugfixes to master + release/2.6,\\serious bugfixes also ported to 2.5\\\\this would hit the selva pkcs11 unit test series first''
@@ -14 +14 @@
 * **Status of PoC using Gerrit for code review.**\\''there's a workflow proposal here: https://community.openvpn.net/openvpn/wiki/Proposed%20Gerrit%20Workflow \\this was reviewed 3 weeks ago\\want to have something like this appear on the mailing list:\\initial patch notification mail, daily digest mail, final patch+discussion+who acked mail\\anything new on this topic?''
 
-* **Security assessment of OpenVPN2 codebase.**\\''what is current status?''
+* **Security assessment of OpenVPN2 codebase.**\\''what is current status?\\there are 2 items not directly related to the codebase that we're arguing against putting into the report.\\they're both 'informational' level so not particularly worrisome. but in our opinion weird to have in the report.\\dazo will send an updated version to cron2 for review.''
 
 * **IPv6 to community.**''\\cloudflare ipv6 compatibility is turned off on openvpn.net because company is worried it might break something.\\community wants date when this is resolved.\\novaflash working to get a date that company will commit to.\\expect to have a date when ipv6 is turned on globally on openvpn.net this week.''