Basic info

• Time: Wednesday 15 March 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

• Release of 2.6.1 was done last week

  • We released last week, but it seems there was no forum post. Novaflash quickly added one, but there is Copr/Fedora stuff missing.
  • The forum post seems to also be not at the top - no permissions to change this?
  • We also forgot to send out an email.

• Release planning for 2.6.2 - planned for 22 March

  • In last week's meeting, it was suggested to do some small quick releases in the short term.
  • How are things looking for a 2.6.2?
    • Items that didn't make it into 2.6.1:
      • DNS directive.
      • DCO control channel switch (DCO 0.2xx).
      • DCO + compression patch.
    • We should also add in the fix for auth-pending.
    • And add in --inactive support for DCO.
    • And PKCS11-helper bugfix.
    • And a memory leak fix.
    • Have to remember to ask Debian maintainer to pick up a version of OpenVPN 2.6.x that includes the DCO control channel switch.

• License amendment for OpenVPN2 to solve OpenSSL/mbedTLS licensing issues

  • In discussion with the legal expert, it was thought to be a good idea to send in the license change as a PR.
  • This obviously won't just go in so easily until we have all the necessary approvals, but it was thought a good way to give it some attention.
  • A next step would be to reach out to individual developers to get approvals.

• Blog post for OpenVPN 2.6 release on main site

  • This is here: OpenVPN 2.6 Blog Post
  • A real press release by OpenVPN Inc. is also coming this week.

• Status of PoC using Gerrit for code review.

  • For authentication, we've decided to:
    • Not accept anonymous submissions.
    • Do authentication via LDAP now.
    • Add GitHub later as an extra.
  • Uddr will write a document that describes the future workflow for company and community people.
  • To be reviewed in 2 weeks from now.

• Can we have someone at OpenVPN create nicer Windows traybar logos (#1276)?

  • Yes, Matt is currently working on it in GitHub Issue 595
  • Should we perhaps accept the current icon set and set up another ticket to go through another set of improvements? This seems to be what Selva suggested.

Topics on standby

• Website release process woes

  • Website team did not deliver solution as promised in February. They now promise this month. We shall see.

• SBOM topic

  • Cron2 was asked if OpenVPN has a Software Bill of Materials. Answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task, we can coordinate on it.

• 2.7 plans, if any?

  • Are there any features that we have in mind that will not make it into 2.6.*?
    • Signal handling respin.
    • Take everything apart and rebuild, 2.6 is made of duct tape.
    • Bloom filter DDoS reflection protection.

• Forums machine on community infrastructure is only non-Linux system.

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

• Have to remember to update SupportedVersions to put 2.4 out of support at around end of March

• OpenVPN 2.6 performance results.

  • We should work on an article to publish some performance results when 2.6 is out as stable, but first press release.

• Management interface documentation on main website will be updated with info from doc/management-notes.txt

  • Novaflash will pick this up again now that he is back.

• OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information.

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.

• IPv6 to community.

  • No new information to report.