Home A - Z
Page Index

An Otter Wiki

Basic info

  • Time: Wednesday 29 March 2023 at 13:00 CET (12:00 UTC)
  • Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

Release planning for 2.6.3 - tentatively April 12

  • We have a crash bug in 2.6.2 that affects Linux users that use DCO and NetworkManager ("sometimes").

When going back to normal operating mode?

  • New features and refactors in master,
  • Bugfixes to master + release/2.6,
  • Serious bugfixes also ported to 2.5.
  • This would hit the selva pkcs11 unit test series first.

Status of PoC using Gerrit for code review

  • There's a workflow proposal here: Proposed Gerrit Workflow
  • It was agreed to review workflow this week.
  • Want to have something like this appear on the mailing list:
    • Initial patch notification mail, daily digest mail, final patch+discussion+who acked mail.

Security assessment of OpenVPN2 codebase

  • Need to review security assessment, see if we are in agreement about it.
  • Dazo will reach out to cron2 about this to gather his feedback.

IPv6 to community

  • Cloudflare IPv6 compatibility is turned off on openvpn.net because the company is worried it might break something.
  • Community wants a date when this is resolved.
  • Novaflash working to get a date that the company will commit to.
  • Informally head of ops sees it as being turned on in 'about a month', but will work to get a date we can hold him to.

Topics on standby

License amendment for OpenVPN2 to solve OpenSSL/mbedTLS licensing issues

  • Current status is that individual contributors are being contacted, and approvals gathered.

Can we have someone at OpenVPN create nicer Windows traybar logos (#1276)?

Website release process woes

  • Website team did not deliver solution as promised in February. They now promise this month. We shall see.

SBOM topic

  • Cron2 was asked if OpenVPN has a software bill of materials. The answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task we can coordinate on it.

2.7 plans, if any?

  • Are there any features that we have in mind that will not make it into 2.6.*?
    • Signal handling respin,
    • 2.6 refactor,
    • Bloom filter DDoS reflection protection.

Forums machine on community infrastructure is only non-Linux system

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

Have to remember to update SupportedVersions to put 2.4 out of support at around end of March

OpenVPN 2.6 performance results

  • We should work on an article to publish some performance results when 2.6 is out as stable, but first press release.

Management interface documentation on main website will be updated with info from doc/management-notes.txt

  • Novaflash will pick this up again now that he is back.

OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.