Home A - Z
Page Index

An Otter Wiki

Basic Info

  • Time: Wednesday 7 June 2023 at 13:00 CET (12:00 UTC)
  • Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

2.6.5 Release Plans

  • Expected in about 1 to 5 weeks from now, so anywhere between half June and half July.

Hackathon Arrangements

  • When: Schedule (Probably October 6th-October 8th)
  • Location: Torrevieja. Lev looking into venue.

2.7 Plans, If Any?

Status of PoC Using Gerrit for Code Review

  • Buildbot builds from Gerrit should work now for all workers. Please use!

Security Assessment of OpenVPN2 Codebase

  • Dazo has the final report and is reviewing. Will raise any remaining issues.

License Amendment for OpenVPN2 to Solve openssl/mbedtls Licensing Issues

  • Current status: OpenVPN License Change
  • Issue with a particular contributor looks to be resolved.
  • Now only 6 people remaining to approve.
  • Novaflash will assist plaisthos next week with trying to contact them.

Topics on Standby

security@openvpn.net Mailing List

  • Company is trying to get SOC2 compliance.
  • Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net.
  • Company guy took standard NDA we use for contractors, suggests to use that.
  • Novaflash thinks we should review that first to see if it's really suitable or not, community members are not contractors after all.

Website Release Process Woes

  • Website team claims their solution is 95% done. We'll see.

Another Key Signing Topic

  • Company switched EV code signing to CloudHSM, this is same cert type we use for driver signing, is also suitable for binary signing.
  • In future we could possibly switch community to that same key. Saves having to maintain 2 different keys.
  • Depends on how hard/easy it is to access company key signing thingee from community infrastructure.
  • Also no high priority at the moment, we have a working solution now.

Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (#1276)?

SBOM Topic

  • Cron2 was asked if OpenVPN has a Software Bill of Materials. Answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task we can coordinate on it.

Forums Machine on Community Infrastructure Is Only Non-Linux System.

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

OpenVPN 2.6 Performance Results

  • We should work on an article to publish some performance results when 2.6 is out as stable. But first press release.

Management Interface Documentation on Main Website Will Be Updated

  • With info from doc/management-notes.txt.
  • Novaflash will pick this up at some point.

OpenVPN Quickstart Will Be Updated

  • From /doc/man-sections/example-fingerprint.rst information.
  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.