# Basic info - **Time:** Wednesday 5 July 2023 at 13:00 CET (12:00 UTC) - **Place:** #openvpn-meeting channel on LiberaChat IRC network # Topics ## Current topics - **2.6.6 release plans** - _tentatively last week of July_ - **cmake work is done, need to decide if to merge that to 2.6 or not** - _djpig notes that there are some things to be ironed out before we can backport_ - **Hackathon arrangements** - [See Hackathon2023 details](https://community.openvpn.net/openvpn/wiki/Hackathon2023) - **Security assessment of OpenVPN2 codebase.** - _company agreed to publish. novaflash to push this to marketing for a release on site._ - **Static-key mini how-to is outdated.** - [This page is outdated badly](https://openvpn.net/community-resources/static-key-mini-howto/) - _Company will send this to tech writer to redo based on [GitHub doc info](https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/example-fingerprint.rst) and also retain a link to that GitHub doc._ - **License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues** - _we have a deadline at August 1st_ - **update:** _2 additional people reached successfully, currently attempting 3rd hard-to-reach person_ - **License amendment for OpenVPN2: keep old openssl exception or no?** - _someone mentioned that we should remove the old exception._ - _we will, eventually. while we still support openssl 1.0.2 we still need it_ - _if someone really wants to get rid of the exception they can fork openvpn2_ - **OpenVPN 2.6 performance results.** - _We should work on an article to publish some performance results when 2.6 is out as stable._ - **Website release process woes** - _website team is working on migrating community downloads content to new cms system._ ## Topics on standby - **Teach someone other than djpig to do releases** - _uddr and djpig will work together so they can share the responsibility/knowledge of openvpn2 releases._ - _likewise dazo and djpig will share knowledge about copr/fedora releases._ - **update:** _placed on standby for now because of holidays._ - **What's going on with new taskbar icons?** - _matt provided icons in [GitHub Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595)_ - **update:** _will be picked up by selva when he has time_ - **security@openvpn.net mailing list** - _company is trying to get to soc2 compliance._ - _probably will need a simple nda to be signed by recipients of emails to security@openvpn.net_ - _company guy took standard nda we use for contractors, suggests to use that._ - _novaflash thinks we should review that first to see if it's really suitable or not, as community members are not contractors._ - **Another key signing topic** - _company switched EV code signing to cloudhsm, this is same cert type we use for driver signing, is also suitable for binary signing._ - _in future we could possibly switch community to that same key. saves having to maintain 2 different keys._ - _depends on how hard/easy it is to access company key signing thing from community infrastructure._ - _also no high priority at the moment, we have a working solution now._ - **SBOM topic** - _cron2 was asked if openvpn has a software bill of materials. answer was no._ - _coincidentally, in openvpn inc a security requirement is to have an SBOM so this is on our list of things to do_ - _when we pick up this task we can coordinate on it._ - **Forums machine on community infrastructure is only non-Linux system.** - _mattock made a new forums system that runs on rocky linux 8 as agreed with ecrist._ - _ecrist has looked at it but the current state of the migration is unknown._ - **Management interface documentation on main website will be updated with info from doc/management-notes.txt** - _novaflash will pick this up at some point_ - **[OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) will be updated from /doc/man-sections/example-fingerprint.rst information.** - _Static-key will be deprecated and contents updated with peer-fingerprint stuff._ - _novaflash will pick this up again as time permits and other more important topics are done._