Basic Info

• Time: Wednesday 21 June 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

• 2.6.6 Release Plans
  Tentatively last week of July

• Hackathon Arrangements
  See Hackathon 2023 details

• Security Assessment of OpenVPN2 Codebase
  Company agreed to publish. Dazo and Novaflash to push this to marketing for a release on site.

• License Amendment for OpenVPN2 to Solve openssl/mbedtls Licensing Issues
  Novaflash assisting Plaisthos to reach the last 6 or so relevant people. We set a deadline at August 1st.

• Website Release Process Woes
  Website team is working on migrating community downloads content to new CMS system.

• Teach Someone Other Than Djpig to Do Releases
  Uddr and Djpig will work together so they can share the responsibility/knowledge of OpenVPN2 releases. Likewise, Dazo and Djpig will share knowledge about COPR/Fedora releases.

• What's Going on With New Taskbar Icons?
  Matt provided icons in GitHub Issue #595

• OpenVPN 2.6 Performance Results
  We should work on an article to publish some performance results when 2.6 is out as stable.

Topics on Standby

• security@openvpn.net Mailing List
  Company is trying to get to SOC2 compliance. Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net. Company guy took standard NDA we use for contractors, suggests to use that. Novaflash thinks we should review that first to see if it's really suitable or not, as community members are not contractors.

• Another Key Signing Topic
  Company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, also suitable for binary signing. In the future, we could possibly switch the community to that same key, saves having to maintain 2 different keys. Depends on how hard/easy it is to access company key signing thing from community infrastructure. Also, no high priority at the moment, we have a working solution now.

• SBOM Topic
  Cron2 was asked if OpenVPN has a Software Bill of Materials (SBOM). The answer was no. Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM, so this is on our list of things to do. When we pick up this task, we can coordinate on it.

• Forums Machine on Community Infrastructure is Only Non-Linux System
  Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist. Ecrist has looked at it, but the current state of the migration is unknown.

• Management Interface Documentation on Main Website Will Be Updated With Info from doc/management-notes.txt
  Novaflash will pick this up at some point.

• OpenVPN Quickstart Guide Will Be Updated from /doc/man-sections/example-fingerprint.rst Information.
  Static-key will be deprecated and contents updated with peer-fingerprint stuff. Novaflash will pick this up again as time permits and other more important topics are done.