Home A - Z
Page Index

An Otter Wiki

Basic Info

  • Time: Wednesday 19 April 2023 at 13:00 CET (12:00 UTC)
  • Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

OpenVPN 2.6.3

  • This was released on April 13.
  • Djpig noticed an issue with the GPG signing key.
  • Accidentally used recently revoked key instead of new key from recent key rotation.
  • Also, apparently the latest Debian release's GPG does not like SHA1 anymore.

When Going Back to Normal Operating Mode?

  • New features and refactors in master,
  • Bugfixes to master + release/2.6,
  • Serious bugfixes also ported to 2.5
  • This would hit the Selva PKCS11 unit test series first.

Status of PoC Using Gerrit for Code Review

  • There's a workflow proposal here: Proposed Gerrit Workflow
  • This was reviewed 3 weeks ago.
  • Want to have something like this appear on the mailing list:
    • Initial patch notification mail, daily digest mail, final patch+discussion+who acked mail.
  • Anything new on this topic?

Security Assessment of OpenVPN2 Codebase

  • What is the current status?
  • There are 2 items not directly related to the codebase that we're arguing against putting into the report.
  • They're both 'informational' level so not particularly worrisome, but in our opinion weird to have in the report.
  • Dazo will send an updated version to Cron2 for review.

IPv6 to Community

  • Cloudflare IPv6 compatibility is turned off on openvpn.net because the company is worried it might break something.
  • Community wants a date when this is resolved.
  • Novaflash working to get a date that the company will commit to.
  • Expect to have a date when IPv6 is turned on globally on openvpn.net this week.

Topics on Standby

License Amendment for OpenVPN2 to Solve OpenSSL/MbedTLS Licensing Issues

  • Current status is that individual contributors are being contacted, and approvals gathered.

Security@openvpn.net Mailing List

  • Company is trying to get to SOC2 compliance.
  • Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net.
  • This seems reasonable, the company will investigate and prepare such a thing.

Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (Issue #1276)?

Website Release Process Woes

  • The website team did not deliver the solution as promised in February, then March, and it's still not delivered. Now they promise April. We will see.

SBOM Topic

  • Cron2 was asked if OpenVPN has a software bill of materials. The answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task we can coordinate on it.

2.7 Plans, if Any?

  • Are there any features that we have in mind that will not make it into 2.6.*?
    • Signal handling respin
    • 2.6 refactor
    • Bloom filter DDoS reflection protection.

Forums Machine on Community Infrastructure is Only Non-Linux System

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

OpenVPN 2.6 Performance Results

  • We should work on an article to publish some performance results when 2.6 is out as stable. But first, the press release.

Management Interface Documentation on Main Website Will Be Updated

  • Information from doc/management-notes.txt will be updated.
  • Novaflash will pick this up again now that he is back.

OpenVPN Quickstart Will Be Updated

  • From /doc/man-sections/example-fingerprint.rst information.
  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.