Basic info

• Time: Wednesday 31 May 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

• 2.6.5 release plans

  • in about 2 to 6 weeks from now so anywhere between half June and half July

• Hackathon arrangements

  • When: Poll Link => Probably October 6th-October 8th
  • Location: Torrevieja. Lev looking into venue.
  • Topics: Yes.

• 2.7 plans, if any?

  • Status of OpenVPN 2.7

• Status of PoC using Gerrit for code review.

  • Buildbot builds from Gerrit should work now for all workers. Please use!

• Security assessment of OpenVPN2 codebase.

  • dazo has the final report and is reviewing. Will raise any remaining issues.

• License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues

  • Current status: License Change
  • Issue with a particular contributor looks to be resolved.
  • Now only 6 people remaining to approve.
  • novaflash will assist plaisthos next week with trying to contact them.

Topics on standby

• security@openvpn.net mailing list

  • Company is trying to get to SOC2 compliance.
  • Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net
  • Company guy took standard NDA we use for contractors, suggests to use that.
  • novaflash thinks we should review that first to see if it's really suitable or not, community members are not contractors after all.

• Website release process woes

  • Website team claims their solution is 95% done. We'll see.

• Another key signing topic

  • Company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, is also suitable for binary signing.
  • In future, we could possibly switch community to that same key. Saves having to maintain 2 different keys.
  • Depends on how hard/easy it is to access company key signing thing from community infrastructure.
  • Also no high priority at the moment, we have a working solution now.

• Can we have someone at OpenVPN create nicer windows traybar logos?

  • Matt is currently working on it in GitHub Issue #595

• SBOM topic

  • cron2 was asked if OpenVPN has a software bill of materials. Answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do
  • When we pick up this task we can coordinate on it.

• Forums machine on community infrastructure is only non-Linux system.

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

• OpenVPN 2.6 performance results.

  • We should work on an article to publish some performance results when 2.6 is out as stable. but first press release.

• Management interface documentation on main website will be updated with info from doc/management-notes.txt

  • novaflash will pick this up at some point

• OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information.

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • novaflash will pick this up again as time permits and other more important topics are done.