Basic Info

• Time: Wednesday 19 July 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current Topics

• Topics Regarding Gerrit Reviewing

  • Solved the issue of Gerrit not being able to send emails.
  • When the OpenVPN2 master is updated, Gerrit should be updated too. Requested cron2 to take care of this.

• An Issue Was Brought Up on Security List by Mathy Vanhoef

  • 9:30 AM 20 July we'll discuss internally. The location will be disclosed on the security list.

• 2.6.6 Release Plans

  • Moved from the last week of July to tentatively the first week of August.

• CMake Work is Done, Need to Decide if to Merge That to 2.6 or Not

  • All the work for this appears to be done. A backport will be made to 2.6.

• Hackathon Arrangements

  • See Hackathon2023

• Security Assessment of OpenVPN2 Codebase

  • The company agreed to publish. Novaflash to push this to marketing for a release on the site.

• Static-Key Mini How-to is Outdated

  • This page is outdated badly: Static Key Mini How-To
  • The company will send this to a tech writer to redo based on GitHub Doc Information
  • Also, retain a link to that GitHub doc.

• License Amendment for OpenVPN2 to Solve OpenSSL/mbedTLS Licensing Issues

  • We have a deadline at August 1st.
  • Update: 2 additional people reached successfully, currently attempting 3rd hard-to-reach person.

• OpenVPN 2.6 Performance Results

  • Tests should cover: GRE, IPSec, userland, DCO on Linux, FreeBSD, Windows.

• Website Release Process Woes

  • The website team is working on migrating community downloads content to a new CMS system.

Topics on Standby

• Teach Someone Other Than Djpig to Do Releases

  • Uddr and Djpig will work together so they can share the responsibility/knowledge of OpenVPN2 releases.
  • Likewise, Dazo and Djpig will share knowledge about COPR/Fedora releases.
  • Update: Placed on standby for now because of holidays.

• What's Going on with New Taskbar Icons?

  • Matt provided icons in Issue #595
  • Update: Will be picked up by Selva when he has time.

• Security@openvpn.net Mailing List

  • The company is trying to get to SOC2 compliance.
  • Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net
  • The company guy took the standard NDA we use for contractors, suggests to use that.
  • Novaflash thinks we should review that first to see if it's really suitable or not, as community members are not contractors after all.

• Another Key Signing Topic

  • The company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, is also suitable for binary signing.
  • In the future, we could possibly switch the community to that same key. Saves having to maintain 2 different keys.
  • Depends on how hard/easy it is to access the company key signing thing from community infrastructure.
  • Also, no high priority at the moment, we have a working solution now.

• SBOM Topic

  • Cron2 was asked if OpenVPN has a software bill of materials. The answer was no.
  • Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do
  • When we pick up this task we can coordinate on it.

• Forums Machine on Community Infrastructure is Only Non-Linux System

  • Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist.
  • Ecrist has looked at it but the current state of the migration is unknown.

• Management Interface Documentation on Main Website Will Be Updated with Info From doc/management-notes.txt

  • Novaflash will pick this up at some point.

• OpenVPN Quickstart Will Be Updated from /doc/man-sections/example-fingerprint.rst Information

  • Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  • Novaflash will pick this up again as time permits and other more important topics are done.