Basic Info

• Time: Wednesday 26 April 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

• PGP Signing Key for OpenVPN Releases:

  • djpig noticed an issue with the gpg signing key.
  • Accidentally used recently revoked key instead of new key from recent key rotation.
  • Also, the latest Debian release's gpg does not like sha1 anymore.

• 2.6.3 Build 2 Release:

  • Have some minor updates to release, so will do a build #2 and get that out today or tomorrow.

• 2.6.4 Release Plans:

  • Tentatively May 11.

• Hackathon Arrangements:

  • End of September, beginning of October.
  • Topics?

• 2.7 Plans, if any?

  • Status of OpenVPN 2.7

• We are now back on normal operating mode, meaning:

  • New features and refactors in master,
  • Bugfixes to master + release/2.6,
  • Serious bugfixes also ported to 2.5.
  • This would hit the selva pkcs11 unit test series first.

• Status of PoC Using Gerrit for Code Review:

  • Last item discussed was buildbot and Gerrit interaction not working due to an SSL issue - when cron2 has time he'll take a look.

• Security Assessment of OpenVPN2 Codebase:

  • There are 2 items not directly related to the codebase that we're arguing against putting into the report.
  • They're both 'informational' level so not particularly worrisome, but in our opinion, weird to have in the report.
  • Dazo will send an updated version to cron2 for review.

• IPv6 to Community:

  • IPv6 is now enabled on openvpn.net.
  • community.openvpn.net is now available on IPv4 and IPv6, both behind Cloudflare still though.

Topics on Standby

• License Amendment for OpenVPN2 to Solve OpenSSL/mbedTLS Licensing Issues:

  • Current status is that individual contributors are being contacted, and approvals gathered.

• security@openvpn.net Mailing List:

  • Company is trying to get to SOC2 compliance.
  • Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net.
  • This seems reasonable, company will investigate and prepare such a thing.

• Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (#1276)?

  • Matt is currently working on it in OpenVPN GUI Issue #595

• Website Release Process Woes:

  • Website team did not deliver solution as promised in February. Then March. Still not delivered. Now they promise April. We will see.

• SBOM Topic:

  • Cron2 was asked if OpenVPN has a software bill of materials. Answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task we can coordinate on it.

• Forums Machine on Community Infrastructure is Only Non-Linux System:

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

• OpenVPN 2.6 Performance Results:

  • We should work on an article to publish some performance results when 2.6 is out as stable. But first, press release.

• Management Interface Documentation on Main Website will be Updated with Info from doc/management-notes.txt:

  • Novaflash will pick this up again now that he is back.

• OpenVPN Quickstart will be Updated from /doc/man-sections/example-fingerprint.rst Information:

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.