Basic info

• Time: Wednesday 11 January 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

• Can we have someone at OpenVPN create nicer windows traybar logos? (#1276)

• 2.6 release plans (for rc2 and 2.6.0 stable)

  • Plan is to do an rc2 release on 12th of January
  • Want to get Lev's patch for config folder migration for GUI in.
  • Want to try and get Plaisthos's patch for dynamic tls-crypt in
  • Can we do stable release 2.6.0 in 2 weeks (Jan 26)?
  • What to do about SRV? This probably won't make it in 2.6.0.
  • What to do about dynamic tls-crypt? Going to try to get it into rc2.

OpenVPN 2.6.0 stable release open issues

• Blockers (must be fixed before 2.6.0)

• Nice to have

  • P2P --tls-server still gets confused sometimes when "client just disappears" and no --keepalive is configured.
  • Duplicate route addition / EEXIST with SITNL is not handled correctly (will lead to duplicate route removal).
  • route_add() status code uses 0/1/2 magic numbers, should use MAGIC_CONSTANTS.
  • dco.dco_del_peer_reason etc. should be initialized "upfront" not "after the fact" (see commit aaccf8843).
  • Engine test failing with openssl 3.0.x iff built with engine support (non-default) (this is already merged).

• Additional features

• DCO showstoppers (not holding up 2.6.0 release, but a reason to not use DCO in production)

  • OOM in netlink on busy servers Issue #16
  • OpenVPN hang on "close tun, before restarting" Issue #18
  • More issues listed here

• OpenVPN2 build environment and improving it.

  • Djpig is currently working on this. The company has decided to prioritize this task.
  • Code signing key was moved to an HSM system for increased security.
  • Djpig overhauled openvpn-build, it now uses submodules for openvpn and openvpn-gui, and contains Debian packaging scripts.
  • Further improvements to the build process are underway.

• OpenVPN 2.6 performance results.

  • Now that we have a beta out, and soon an rc1, we want to have an article on the main site and press release about performance results.

• Forums machine on community infrastructure is only non-Linux system.

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.
  • Currently waiting for ecrist to test if he has access and all is well before we're able to make the switch.
  • Ecrist indicated that he is missing some information, Mattock will provide.

Topics on standby

• License amendment for OpenVPN2 to accommodate mbedtls.

  • Plaisthos made a first draft. Plaisthos asked to get novaflash to ask Francis and James to sign off on it.
  • In the meantime, we need to compile a list of contributors and get ready to ask them to accept the changes.
  • Novaflash will pick this up again now that he is back.

• Management interface documentation on main website will be updated with info from doc/management-notes.txt

  • Novaflash will pick this up again now that he is back.

• OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information.

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again now that he is back.

• As discussed in Hackathon, we want to do a PoC with using Gerrit for code review.

  • This requires an environment to be set up and tuned. This is postponed until after the 2.6 stable release.

• IPv6 to community.

  • No new information to report.