Blame
| 6f02e7 | Samuli Seppänen | 2025-01-29 06:40:08 | 1 | # Basic Info |
| 2 | ||||
| 3 | - **Time:** Wednesday 19 April 2023 at 13:00 CET (12:00 UTC) |
|||
| 4 | - **Place:** #openvpn-meeting channel on LiberaChat IRC network |
|||
| 5 | ||||
| 6 | # Topics |
|||
| 7 | ||||
| 8 | ## Current Topics |
|||
| 9 | ||||
| 10 | ### OpenVPN 2.6.3 |
|||
| 11 | - This was released on April 13. |
|||
| 12 | - Djpig noticed an issue with the GPG signing key. |
|||
| 13 | - Accidentally used recently revoked key instead of new key from recent key rotation. |
|||
| 14 | - Also, apparently the latest Debian release's GPG does not like SHA1 anymore. |
|||
| 15 | ||||
| 16 | ### When Going Back to Normal Operating Mode? |
|||
| 17 | - New features and refactors in master, |
|||
| 18 | - Bugfixes to master + release/2.6, |
|||
| 19 | - Serious bugfixes also ported to 2.5 |
|||
| 20 | - This would hit the Selva PKCS11 unit test series first. |
|||
| 21 | ||||
| 22 | ### Status of PoC Using Gerrit for Code Review |
|||
| 23 | - There's a workflow proposal here: [Proposed Gerrit Workflow](https://community.openvpn.net/openvpn/wiki/Proposed%20Gerrit%20Workflow) |
|||
| 24 | - This was reviewed 3 weeks ago. |
|||
| 25 | - Want to have something like this appear on the mailing list: |
|||
| 26 | - Initial patch notification mail, daily digest mail, final patch+discussion+who acked mail. |
|||
| 27 | - Anything new on this topic? |
|||
| 28 | ||||
| 29 | ### Security Assessment of OpenVPN2 Codebase |
|||
| 30 | - What is the current status? |
|||
| 31 | - There are 2 items not directly related to the codebase that we're arguing against putting into the report. |
|||
| 32 | - They're both 'informational' level so not particularly worrisome, but in our opinion weird to have in the report. |
|||
| 33 | - Dazo will send an updated version to Cron2 for review. |
|||
| 34 | ||||
| 35 | ### IPv6 to Community |
|||
| 36 | - Cloudflare IPv6 compatibility is turned off on openvpn.net because the company is worried it might break something. |
|||
| 37 | - Community wants a date when this is resolved. |
|||
| 38 | - Novaflash working to get a date that the company will commit to. |
|||
| 39 | - Expect to have a date when IPv6 is turned on globally on openvpn.net this week. |
|||
| 40 | ||||
| 41 | ## Topics on Standby |
|||
| 42 | ||||
| 43 | ### License Amendment for OpenVPN2 to Solve OpenSSL/MbedTLS Licensing Issues |
|||
| 44 | - Current status is that individual contributors are being contacted, and approvals gathered. |
|||
| 45 | ||||
| 46 | ### Security@openvpn.net Mailing List |
|||
| 47 | - Company is trying to get to SOC2 compliance. |
|||
| 48 | - Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net. |
|||
| 49 | - This seems reasonable, the company will investigate and prepare such a thing. |
|||
| 50 | ||||
| 51 | ### Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (Issue #1276)? |
|||
| 52 | - Matt is currently working on it at [OpenVPN-GUI Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595). |
|||
| 53 | ||||
| 54 | ### Website Release Process Woes |
|||
| 55 | - The website team did not deliver the solution as promised in February, then March, and it's still not delivered. Now they promise April. We will see. |
|||
| 56 | ||||
| 57 | ### SBOM Topic |
|||
| 58 | - Cron2 was asked if OpenVPN has a software bill of materials. The answer was no. |
|||
| 59 | - Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do. |
|||
| 60 | - When we pick up this task we can coordinate on it. |
|||
| 61 | ||||
| 62 | ### 2.7 Plans, if Any? |
|||
| 63 | - Are there any features that we have in mind that will not make it into 2.6.*? |
|||
| 64 | - Signal handling respin |
|||
| 65 | - 2.6 refactor |
|||
| 66 | - Bloom filter DDoS reflection protection. |
|||
| 67 | ||||
| 68 | ### Forums Machine on Community Infrastructure is Only Non-Linux System |
|||
| 69 | - Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist. |
|||
| 70 | - Ecrist has looked at it but the current state of the migration is unknown. |
|||
| 71 | ||||
| 72 | ### OpenVPN 2.6 Performance Results |
|||
| 73 | - We should work on an article to publish some performance results when 2.6 is out as stable. But first, the press release. |
|||
| 74 | ||||
| 75 | ### Management Interface Documentation on Main Website Will Be Updated |
|||
| 76 | - Information from `doc/management-notes.txt` will be updated. |
|||
| 77 | - Novaflash will pick this up again now that he is back. |
|||
| 78 | ||||
| 79 | ### [OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) Will Be Updated |
|||
| 80 | - From `/doc/man-sections/example-fingerprint.rst` information. |
|||
| 81 | - Static-key will be deprecated and contents updated with peer-fingerprint stuff. |
|||
| 82 | - Novaflash will pick this up again as time permits and other more important topics are done. |