Basic Info

• Time: Wednesday 08 March 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

• Release planning for 2.6.1 (planned today)

  • Are we good to do a 2.6.1 release?
  • Status on DCO? Currently has issues to resolve still.
  • Status on --dns directive? Not fully ready but DNS option changes d12fk would like to have in.
  • Status on dynamic tls-crypt? This made it in.
  • Status on DCO + compression patch? Some discussion still ongoing here.
  • Plan for now is to release 2.6.1 today and plan a 2.6.2 for next week or the week after with at the very least the DCO changes in there but ideally also the DNS and compression patch.
  • We need to remember to ask Debian maintainer then to pick up 2.6.2.

• SBOM Topic

  • Cron2 was asked if OpenVPN has a software bill of materials. The answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task we can coordinate on it.

• License amendment for OpenVPN2 to solve OpenSSL/mbedTLS licensing issues

  • A refined and approved by legal expert proposal for a license amendment was sent to the mailing list.
  • Developers will be contacted individually by plaisthos and dazo to try and get approvals.

• Press Release of 2.6

  • Still waiting on blog post release - now planned for this week.

• Status of PoC using Gerrit for code review

  • Gerrit proof of concept is online.
  • Ordex, uddr, df12k, plaisthos, are trying it out together, inviting others to join in testing.
  • Any blockers/issues/suggestions?
  • Basically, so far so good.

• Website release process woes

  • Website team did not deliver solution as promised in February. They now promise this month. We shall see.

Topics on Standby

• 2.7 Plans, if any?

  • Are there any features that we have in mind that will not make it into 2.6.*?
  • Signal handling respin.
  • Take everything apart and rebuild, 2.6 is made of duct tape.
  • Bloom filter DDoS reflection protection.

• Can we have someone at OpenVPN create nicer Windows traybar logos (#1276)?

  • Yes, Matt is currently working on it in OpenVPN GUI Issue #595

• Forums machine on community infrastructure is only non-Linux system

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

• Have to remember to update SupportedVersions to put 2.4 out of support around end of March

• OpenVPN 2.6 performance results

  • We should work on an article to publish some performance results when 2.6 is out as stable. But first, press release.

• Management interface documentation on main website will be updated with info from doc/management-notes.txt

  • Novaflash will pick this up again now that he is back.

• OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.

• IPv6 to community

  • No new information to report.