# Basic info - **Time:** Wednesday 11 January 2023 at 13:00 CET (12:00 UTC) - **Place:** #openvpn-meeting channel on LiberaChat IRC network # Topics ## Current topics - **Can we have someone at OpenVPN create nicer windows traybar logos?** (#1276) - **2.6 release plans (for rc2 and 2.6.0 stable)** - Plan is to do an rc2 release on 12th of January - Want to get Lev's patch for config folder migration for GUI in. - Want to try and get Plaisthos's patch for dynamic tls-crypt in - Can we do stable release 2.6.0 in 2 weeks (Jan 26)? - What to do about `SRV`? This probably won't make it in 2.6.0. - What to do about `dynamic tls-crypt`? Going to try to get it into rc2. ## OpenVPN 2.6.0 stable release open issues - **Blockers (must be fixed before 2.6.0)** - **Nice to have** - P2P `--tls-server` still gets confused sometimes when "client just disappears" and no `--keepalive` is configured. - Duplicate route addition / EEXIST with SITNL is not handled correctly (will lead to duplicate route removal). - `route_add()` status code uses 0/1/2 magic numbers, should use MAGIC_CONSTANTS. - `dco.dco_del_peer_reason` etc. should be initialized "upfront" not "after the fact" (see commit aaccf8843). - Engine test failing with openssl 3.0.x **iff** built with engine support (non-default) (this is already merged). - **Additional features** - **DCO showstoppers (not holding up 2.6.0 release, but a reason to not use DCO in production)** - OOM in netlink on busy servers [Issue #16](https://github.com/OpenVPN/ovpn-dco/issues/16) - OpenVPN hang on "close tun, before restarting" [Issue #18](https://github.com/OpenVPN/ovpn-dco/issues/18) - More issues listed [here](https://github.com/OpenVPN/ovpn-dco/issues) - **OpenVPN2 build environment and improving it.** - Djpig is currently working on this. The company has decided to prioritize this task. - Code signing key was moved to an HSM system for increased security. - Djpig overhauled openvpn-build, it now uses submodules for openvpn and openvpn-gui, and contains Debian packaging scripts. - Further improvements to the build process are underway. - **OpenVPN 2.6 performance results.** - Now that we have a beta out, and soon an rc1, we want to have an article on the main site and press release about performance results. - **Forums machine on community infrastructure is only non-Linux system.** - Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist. - Currently waiting for ecrist to test if he has access and all is well before we're able to make the switch. - Ecrist indicated that he is missing some information, Mattock will provide. ## Topics on standby - **License amendment for OpenVPN2 to accommodate mbedtls.** - Plaisthos made a first draft. Plaisthos asked to get novaflash to ask Francis and James to sign off on it. - In the meantime, we need to compile a list of contributors and get ready to ask them to accept the changes. - Novaflash will pick this up again now that he is back. - **Management interface documentation on main website will be updated with info from doc/management-notes.txt** - Novaflash will pick this up again now that he is back. - **[OpenVPN Quickstart](https://www-dev.openvpn.in/community-resources/openvpn-quickstart/) will be updated from /doc/man-sections/example-fingerprint.rst information.** - Static-key will be deprecated and contents updated with peer-fingerprint stuff. - Novaflash will pick this up again now that he is back. - **As discussed in Hackathon, we want to do a PoC with using Gerrit for code review.** - This requires an environment to be set up and tuned. This is postponed until after the 2.6 stable release. - **IPv6 to community.** - No new information to report.