Blame

6f02e7 Samuli Seppänen 2025-01-29 06:40:08 1
# Basic Info
2
3
- **Time:** Wednesday 7 June 2023 at 13:00 CET (12:00 UTC)
4
- **Place:** #openvpn-meeting channel on LiberaChat IRC network
5
6
# Topics
7
8
## Current Topics
9
10
### 2.6.5 Release Plans
11
- Expected in about 1 to 5 weeks from now, so anywhere between half June and half July.
12
13
### Hackathon Arrangements
14
- **When:** [Schedule](https://nuudel.digitalcourage.de/t1hjepaHGhdpiV2P) (Probably October 6th-October 8th)
15
- **Location:** Torrevieja. Lev looking into venue.
16
17
### 2.7 Plans, If Any?
18
- [Status of OpenVPN 2.7](https://community.openvpn.net/openvpn/wiki/StatusOfOpenvpn27)
19
20
### Status of PoC Using Gerrit for Code Review
21
- Buildbot builds from Gerrit should work now for all workers. Please use!
22
23
### Security Assessment of OpenVPN2 Codebase
24
- Dazo has the final report and is reviewing. Will raise any remaining issues.
25
26
### License Amendment for OpenVPN2 to Solve openssl/mbedtls Licensing Issues
27
- Current status: [OpenVPN License Change](https://github.com/OpenVPN/openvpn-license-change)
28
- Issue with a particular contributor looks to be resolved.
29
- Now only 6 people remaining to approve.
30
- Novaflash will assist plaisthos next week with trying to contact them.
31
32
## Topics on Standby
33
34
### security@openvpn.net Mailing List
35
- Company is trying to get SOC2 compliance.
36
- Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net.
37
- Company guy took standard NDA we use for contractors, suggests to use that.
38
- Novaflash thinks we should review that first to see if it's really suitable or not, community members are not contractors after all.
39
40
### Website Release Process Woes
41
- Website team claims their solution is 95% done. We'll see.
42
43
### Another Key Signing Topic
44
- Company switched EV code signing to CloudHSM, this is same cert type we use for driver signing, is also suitable for binary signing.
45
- In future we could possibly switch community to that same key. Saves having to maintain 2 different keys.
46
- Depends on how hard/easy it is to access company key signing thingee from community infrastructure.
47
- Also no high priority at the moment, we have a working solution now.
48
49
### Can We Have Someone at OpenVPN Create Nicer Windows Traybar Logos (#1276)?
50
- Matt is currently working on it in [OpenVPN GUI Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595)
51
52
### SBOM Topic
53
- Cron2 was asked if OpenVPN has a Software Bill of Materials. Answer was no.
54
- Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
55
- When we pick up this task we can coordinate on it.
56
57
### Forums Machine on Community Infrastructure Is Only Non-Linux System.
58
- Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist.
59
- Ecrist has looked at it but the current state of the migration is unknown.
60
61
### OpenVPN 2.6 Performance Results
62
- We should work on an article to publish some performance results when 2.6 is out as stable. But first press release.
63
64
### Management Interface Documentation on Main Website Will Be Updated
65
- With info from `doc/management-notes.txt`.
66
- Novaflash will pick this up at some point.
67
68
### [OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) Will Be Updated
69
- From `/doc/man-sections/example-fingerprint.rst` information.
70
- Static-key will be deprecated and contents updated with peer-fingerprint stuff.
71
- Novaflash will pick this up again as time permits and other more important topics are done.