Basic info

• Time: Wednesday 12 July 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

• Topics regarding Gerrit reviewing

  • Gerrit cannot mail to mailing list.
    • The reason may be that the mailing list is subscriber only, and Gerrit isn't a member. Will look into adding Gerrit.
  • Can we ask cron2 to also push master to Gerrit as well when he updates master?
    • This is currently blocking putting stuff up for review because master is more up-to-date than on Gerrit.

• An issue was brought up on the security list by Mathy Vanhoef

  • Should evaluate and see what could and should be done.

• 2.6.6 release plans

  • Tentatively last week of July.

• CMake work is done, need to decide if to merge that to 2.6 or not

  • Djpig notes that there are some things to be ironed out before we can backport.

• Hackathon arrangements

  • Hackathon 2023 Information

• Security assessment of OpenVPN2 codebase.

  • Company agreed to publish. Novaflash to push this to marketing for a release on site.

• Static-key mini how-to is outdated.

  • This page is outdated badly: Static-key Mini How-To
  • Company will send this to tech writer to redo based on GitHub Example Fingerprint Info and also retain a link to that GitHub doc.

• License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues

  • We have a deadline at August 1st.
  • Update: 2 additional people reached successfully, currently attempting 3rd hard-to-reach person.

• OpenVPN 2.6 performance results

  • We should work on an article to publish some performance results when 2.6 is out as stable.

• Website release process woes

  • Website team is working on migrating community downloads content to new CMS system.

Topics on standby

• Teach someone other than djpig to do releases

  • Uddr and djpig will work together so they can share the responsibility/knowledge of OpenVPN2 releases.
  • Likewise, Dazo and djpig will share knowledge about Copr/Fedora releases.
  • Update: Placed on standby for now because of holidays.

• What's going on with new taskbar icons?

  • Matt provided icons in GitHub Issue #595
  • Update: Will be picked up by Selva when he has time.

• security@openvpn.net mailing list

  • Company is trying to get to SOC2 compliance.
  • Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net.
  • Company guy took standard NDA we use for contractors, suggests to use that. Novaflash thinks we should review that first to see if it's really suitable or not, as community members are not contractors.

• Another key signing topic

  • Company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, is also suitable for binary signing.
  • In future we could possibly switch community to that same key. Saves having to maintain 2 different keys.
  • Depends on how hard/easy it is to access company key signing thing from community infrastructure.
  • Also no high priority at the moment, we have a working solution now.

• SBOM topic

  • Cron2 was asked if OpenVPN has a software bill of materials. Answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do.
  • When we pick up this task we can coordinate on it.

• Forums machine on community infrastructure is only non-Linux system.

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

• Management interface documentation on main website will be updated with info from doc/management-notes.txt

  • Novaflash will pick this up at some point.

• OpenVPN Quickstart will be updated from /doc/man-sections/example-fingerprint.rst information.

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.