Basic Info

Time: Wednesday 22 March 2023 at 13:00 CET (12:00 UTC)
Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

Release planning for 2.6.2 - planned for 23 March
- Items that didn't make it into 2.6.1:
  - DNS directive needs some acks.
  - DCO control channel switch (dco 0.2xx) is done.
  - DCO + compression patch needs acks.
  - Auth-pending control channel issue is done.
  - Add in -inactive support for DCO is done.
  - Memory leak fix is done.
  - PKCS11-helper bugfix is done.
  - Have to remember to ask Debian maintainer to pick up a version of OpenVPN 2.6.x that includes the DCO control channel switch!
License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues
- Current status is that individual contributors are being contacted, and approvals gathered.
Status of PoC using Gerrit for code review.
- There's a workflow proposal here.
- It was agreed to review this next week.
Can we have someone at OpenVPN create nicer windows traybar logos (#1276)?
- Matt is currently working on it in GitHub OpenVPN-GUI issues.
- Selva had some comments about the icons, Matt has been pinged to look into it.
IPv6 to community.
- Cloudflare IPv6 compatibility is turned off on openvpn.net because the company is worried it might break something.
- Ultimatum from community: Give us a date when IPv6 will be turned on, or we move to another domain.

Topics on Standby

Website release process woes
- The website team did not deliver solution as promised in February. They now promise this month. We shall see.
SBOM Topic
- Cron2 was asked if OpenVPN has a software bill of materials. Answer was no.
- Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
- When we pick up this task we can coordinate on it.
2.7 Plans, if any?
- Are there any features that we have in mind that will not make it into 2.6.*?
- Signal handling respin.
- 2.6 refactor.
- Bloom filter DDoS reflection protection.
Forums machine on community infrastructure is only non-Linux system.
- Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.
- Ecrist has looked at it but the current state of the migration is unknown.
Have to remember to update SupportedVersions to put 2.4 out of support at around end of March.
OpenVPN 2.6 Performance Results.
- We should work on an article to publish some performance results when 2.6 is out as stable, but first, a press release.
Management interface documentation on main website will be updated with info from doc/management-notes.txt
- Novaflash will pick this up again now that he is back.
OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information.
- Static-key will be deprecated and contents updated with peer-fingerprint stuff.
- Novaflash will pick this up again as time permits and other more important topics are done.