# Basic info

- **Time:** Wednesday 31 May 2023 at 13:00 CET (12:00 UTC)
- **Place:** #openvpn-meeting channel on LiberaChat IRC network

# Topics

## Current topics

- **2.6.5 release plans**
  - *in about 2 to 6 weeks from now so anywhere between half June and half July*

- **Hackathon arrangements**
  - *When: [Poll Link](https://nuudel.digitalcourage.de/t1hjepaHGhdpiV2P) => Probably October 6th-October 8th*
  - *Location: Torrevieja. Lev looking into venue.*
  - *Topics: Yes.*

- **2.7 plans, if any?**
  - [Status of OpenVPN 2.7](https://community.openvpn.net/openvpn/wiki/StatusOfOpenvpn27)

- **Status of PoC using Gerrit for code review.**
  - *Buildbot builds from Gerrit should work now for all workers. Please use!*

- **Security assessment of OpenVPN2 codebase.**
  - *dazo has the final report and is reviewing. Will raise any remaining issues.*

- **License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues**
  - *Current status: [License Change](https://github.com/OpenVPN/openvpn-license-change)*
  - *Issue with a particular contributor looks to be resolved.*
  - *Now only 6 people remaining to approve.*
  - *novaflash will assist plaisthos next week with trying to contact them.*

## Topics on standby

- **security@openvpn.net mailing list**
  - *Company is trying to get to SOC2 compliance.*
  - *Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net*
  - *Company guy took standard NDA we use for contractors, suggests to use that.*
  - *novaflash thinks we should review that first to see if it's really suitable or not, community members are not contractors after all.*

- **Website release process woes**
  - *Website team claims their solution is 95% done. We'll see.*

- **Another key signing topic**
  - *Company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, is also suitable for binary signing.*
  - *In future, we could possibly switch community to that same key. Saves having to maintain 2 different keys.*
  - *Depends on how hard/easy it is to access company key signing thing from community infrastructure.*
  - *Also no high priority at the moment, we have a working solution now.*

- **Can we have someone at OpenVPN create nicer windows traybar logos?**
  - *Matt is currently working on it in [GitHub Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595)*

- **SBOM topic**
  - *cron2 was asked if OpenVPN has a software bill of materials. Answer was no.*
  - *Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do*
  - *When we pick up this task we can coordinate on it.*

- **Forums machine on community infrastructure is only non-Linux system.**
  - *Mattock made a new forums system that runs on Rocky Linux 8 as agreed with ecrist.*
  - *Ecrist has looked at it but the current state of the migration is unknown.*

- **OpenVPN 2.6 performance results.**
  - *We should work on an article to publish some performance results when 2.6 is out as stable. but first press release.*

- **Management interface documentation on main website will be updated with info from doc/management-notes.txt**
  - *novaflash will pick this up at some point*

- **[OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) will be updated from /doc/man-sections/example-fingerprint.rst information.**
  - *Static-key will be deprecated and contents updated with peer-fingerprint stuff.*
  - *novaflash will pick this up again as time permits and other more important topics are done.*