Blame
| 6f02e7 | Samuli Seppänen | 2025-01-29 06:40:08 | 1 | # Basic info |
| 2 | ||||
| 3 | - Time: Wednesday 01 February 2023 at 13:00 CET (12:00 UTC) |
|||
| 4 | - Place: #openvpn-meeting channel on LiberaChat IRC network |
|||
| 5 | ||||
| 6 | # Topics |
|||
| 7 | ||||
| 8 | ## Current topics |
|||
| 9 | ||||
| 10 | - **Planning to have a new release of OpenVPN 2.6 around March 8th.** |
|||
| 11 | ||||
| 12 | - **Can we have someone at OpenVPN create nicer windows traybar logos?** |
|||
| 13 | *Yes, Matt is currently working on it in [OpenVPN GUI Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595)* |
|||
| 14 | ||||
| 15 | - **Press release of 2.6** |
|||
| 16 | *In progress* |
|||
| 17 | ||||
| 18 | - **Review support status for OpenVPN versions. (SupportedVersions document)** |
|||
| 19 | *2.4 was not placed in git tree only support mode yet - will do that now. That was an oversight. |
|||
| 20 | OpenVPN 2.6 was added and is in support now until undefined. |
|||
| 21 | About Windows 7/8/8.1, we'll add some note that people are lucky if it still works, and we still try to keep it working, but we can't offer any real guarantees there anymore.* |
|||
| 22 | ||||
| 23 | - **Review DCO-for-Linux release status** |
|||
| 24 | *Working on making control packets go through transport socket instead of netlink. Easy for UDP, not so easy for TCP. |
|||
| 25 | Then next item is TCP notification missing under heavy load bug. Will retest after control channel moved to socket. |
|||
| 26 | Will then work on removing the netlink code entirely since it's not in use anymore then.* |
|||
| 27 | ||||
| 28 | - **License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues** |
|||
| 29 | *Dazo is in contact with open source legal expert, explaining the issues, getting feedback. |
|||
| 30 | Our concern about system libraries is definitely warranted - on Linux it may be considered so but not on most other platforms. |
|||
| 31 | Main question is, do we have to limit the exception to apply only to cryptographic libraries? |
|||
| 32 | Question really being; do we expect it to be abused if we blanket approve all apache2 libraries?* |
|||
| 33 | ||||
| 34 | - **As discussed in Hackathon we want to do a PoC with using Gerrit for code review.** |
|||
| 35 | *The proof of concept is online. Yuriy will provide information on this. |
|||
| 36 | Using credentials from community it should now be possible to access it at [Gerrit OpenVPN](https://gerrit.openvpn.net/)* |
|||
| 37 | ||||
| 38 | - **2.6 release - did we get some feedback, and is any of it vital to respond on?** |
|||
| 39 | *Fedora/EPEL world has been silent (good sign). Fedora 38 will ship with 2.6 in native repo. |
|||
| 40 | On GitHub there's a lot of windows interesting reports - half are DCO related, half because of crappy configs from VPN providers. |
|||
| 41 | Dazo reports that a change is needed to SELinux policies to allow access to netlink, otherwise OpenVPN2 can't use DCO by default with SELinux enabled. |
|||
| 42 | Dazo upstreamed a fix but this takes time to distribute. Will in the intermediate period prepare to bundle that particular policy, for Fedora/COPR packages.* |
|||
| 43 | ||||
| 44 | - **Forums machine on community infrastructure is only non-Linux system.** |
|||
| 45 | *Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist. |
|||
| 46 | Currently waiting for Ecrist to test if he has access and all is well before we're able to make the switch. |
|||
| 47 | Ecrist indicated that he is missing some information, Mattock provided this.* |
|||
| 48 | ||||
| 49 | ## Topics on standby |
|||
| 50 | ||||
| 51 | - **Have to remember to update SupportedVersions to put 2.4 out of support at around end of March** |
|||
| 52 | ||||
| 53 | - **OpenVPN 2.6 performance results.** |
|||
| 54 | *We should work on an article to publish some performance results when 2.6 is out as stable. But first, press release.* |
|||
| 55 | ||||
| 56 | - **Management interface documentation on main website will be updated with info from doc/management-notes.txt** |
|||
| 57 | *Novaflash will pick this up again now that he is back.* |
|||
| 58 | ||||
| 59 | - **[OpenVPN Quickstart](https://www-dev.openvpn.in/community-resources/openvpn-quickstart/) will be updated from /doc/man-sections/example-fingerprint.rst information.** |
|||
| 60 | *Static-key will be deprecated and contents updated with peer-fingerprint stuff. |
|||
| 61 | Novaflash will pick this up again now that he is back.* |
|||
| 62 | ||||
| 63 | - **IPv6 to community.** |
|||
| 64 | *No new information to report.* |