# Basic Info - **Time:** Wednesday 19 April 2023 at 13:00 CET (12:00 UTC) - **Place:** #openvpn-meeting channel on LiberaChat IRC network # Topics ## Current Topics ### OpenVPN 2.6.3 - This was released on April 13. - Djpig noticed an issue with the GPG signing key. - Accidentally used recently revoked key instead of new key from recent key rotation. - Also, apparently the latest Debian release's GPG does not like SHA1 anymore. ### When Going Back to Normal Operating Mode? - New features and refactors in master, - Bugfixes to master + release/2.6, - Serious bugfixes also ported to 2.5 - This would hit the Selva PKCS11 unit test series first. ### Status of PoC Using Gerrit for Code Review - There's a workflow proposal here: [Proposed Gerrit Workflow](https://community.openvpn.net/openvpn/wiki/Proposed%20Gerrit%20Workflow) - This was reviewed 3 weeks ago. - Want to have something like this appear on the mailing list: - Initial patch notification mail, daily digest mail, final patch+discussion+who acked mail. - Anything new on this topic? ### Security Assessment of OpenVPN2 Codebase - What is the current status? - There are 2 items not directly related to the codebase that we're arguing against putting into the report. - They're both 'informational' level so not particularly worrisome, but in our opinion weird to have in the report. - Dazo will send an updated version to Cron2 for review. ### IPv6 to Community - Cloudflare IPv6 compatibility is turned off on openvpn.net because the company is worried it might break something. - Community wants a date when this is resolved. - Novaflash working to get a date that the company will commit to. - Expect to have a date when IPv6 is turned on globally on openvpn.net this week. ## Topics on Standby ### License Amendment for OpenVPN2 to Solve OpenSSL/MbedTLS Licensing Issues - Current status is that individual contributors are being contacted, and approvals gathered. ### Security@openvpn.net Mailing List - Company is trying to get to SOC2 compliance. - Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net. - This seems reasonable, the company will investigate and prepare such a thing. ### Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (Issue #1276)? - Matt is currently working on it at [OpenVPN-GUI Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595). ### Website Release Process Woes - The website team did not deliver the solution as promised in February, then March, and it's still not delivered. Now they promise April. We will see. ### SBOM Topic - Cron2 was asked if OpenVPN has a software bill of materials. The answer was no. - Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do. - When we pick up this task we can coordinate on it. ### 2.7 Plans, if Any? - Are there any features that we have in mind that will not make it into 2.6.*? - Signal handling respin - 2.6 refactor - Bloom filter DDoS reflection protection. ### Forums Machine on Community Infrastructure is Only Non-Linux System - Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist. - Ecrist has looked at it but the current state of the migration is unknown. ### OpenVPN 2.6 Performance Results - We should work on an article to publish some performance results when 2.6 is out as stable. But first, the press release. ### Management Interface Documentation on Main Website Will Be Updated - Information from `doc/management-notes.txt` will be updated. - Novaflash will pick this up again now that he is back. ### [OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) Will Be Updated - From `/doc/man-sections/example-fingerprint.rst` information. - Static-key will be deprecated and contents updated with peer-fingerprint stuff. - Novaflash will pick this up again as time permits and other more important topics are done.