# Basic Info - **Time:** Wednesday 26 April 2023 at 13:00 CET (12:00 UTC) - **Place:** #openvpn-meeting channel on LiberaChat IRC network # Topics ## Current Topics - **PGP Signing Key for OpenVPN Releases:** - djpig noticed an issue with the gpg signing key. - Accidentally used recently revoked key instead of new key from recent key rotation. - Also, the latest Debian release's gpg does not like sha1 anymore. - **2.6.3 Build 2 Release:** - Have some minor updates to release, so will do a build #2 and get that out today or tomorrow. - **2.6.4 Release Plans:** - Tentatively May 11. - **Hackathon Arrangements:** - End of September, beginning of October. - Topics? - **2.7 Plans, if any?** - [Status of OpenVPN 2.7](https://community.openvpn.net/openvpn/wiki/StatusOfOpenvpn27) - **We are now back on normal operating mode, meaning:** - New features and refactors in master, - Bugfixes to master + release/2.6, - Serious bugfixes also ported to 2.5. - This would hit the selva pkcs11 unit test series first. - **Status of PoC Using Gerrit for Code Review:** - Last item discussed was buildbot and Gerrit interaction not working due to an SSL issue - when cron2 has time he'll take a look. - **Security Assessment of OpenVPN2 Codebase:** - There are 2 items not directly related to the codebase that we're arguing against putting into the report. - They're both 'informational' level so not particularly worrisome, but in our opinion, weird to have in the report. - Dazo will send an updated version to cron2 for review. - **IPv6 to Community:** - IPv6 is now enabled on openvpn.net. - community.openvpn.net is now available on IPv4 and IPv6, both behind Cloudflare still though. ## Topics on Standby - **License Amendment for OpenVPN2 to Solve OpenSSL/mbedTLS Licensing Issues:** - Current status is that individual contributors are being contacted, and approvals gathered. - **security@openvpn.net Mailing List:** - Company is trying to get to SOC2 compliance. - Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net. - This seems reasonable, company will investigate and prepare such a thing. - **Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (#1276)?** - Matt is currently working on it in [OpenVPN GUI Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595) - **Website Release Process Woes:** - Website team did not deliver solution as promised in February. Then March. Still not delivered. Now they promise April. We will see. - **SBOM Topic:** - Cron2 was asked if OpenVPN has a software bill of materials. Answer was no. - Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do. - When we pick up this task we can coordinate on it. - **Forums Machine on Community Infrastructure is Only Non-Linux System:** - Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist. - Ecrist has looked at it but the current state of the migration is unknown. - **OpenVPN 2.6 Performance Results:** - We should work on an article to publish some performance results when 2.6 is out as stable. But first, press release. - **Management Interface Documentation on Main Website will be Updated with Info from doc/management-notes.txt:** - Novaflash will pick this up again now that he is back. - **[OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) will be Updated from /doc/man-sections/example-fingerprint.rst Information:** - Static-key will be deprecated and contents updated with peer-fingerprint stuff. - Novaflash will pick this up again as time permits and other more important topics are done.