# Basic Info - **Time:** Wednesday 19 July 2023 at 13:00 CET (12:00 UTC) - **Place:** #openvpn-meeting channel on LiberaChat IRC network # Topics ## Current Topics - **Topics Regarding Gerrit Reviewing** - Solved the issue of Gerrit not being able to send emails. - When the OpenVPN2 master is updated, Gerrit should be updated too. Requested cron2 to take care of this. - **An Issue Was Brought Up on Security List by Mathy Vanhoef** - 9:30 AM 20 July we'll discuss internally. The location will be disclosed on the security list. - **2.6.6 Release Plans** - Moved from the last week of July to tentatively the first week of August. - **CMake Work is Done, Need to Decide if to Merge That to 2.6 or Not** - All the work for this appears to be done. A backport will be made to 2.6. - **Hackathon Arrangements** - See [Hackathon2023](https://community.openvpn.net/openvpn/wiki/Hackathon2023) - **Security Assessment of OpenVPN2 Codebase** - The company agreed to publish. Novaflash to push this to marketing for a release on the site. - **Static-Key Mini How-to is Outdated** - This page is outdated badly: [Static Key Mini How-To](https://openvpn.net/community-resources/static-key-mini-howto/) - The company will send this to a tech writer to redo based on [GitHub Doc Information](https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/example-fingerprint.rst) - Also, retain a link to that GitHub doc. - **License Amendment for OpenVPN2 to Solve OpenSSL/mbedTLS Licensing Issues** - We have a deadline at August 1st. - **Update:** 2 additional people reached successfully, currently attempting 3rd hard-to-reach person. - **OpenVPN 2.6 Performance Results** - Tests should cover: GRE, IPSec, userland, DCO on Linux, FreeBSD, Windows. - **Website Release Process Woes** - The website team is working on migrating community downloads content to a new CMS system. ## Topics on Standby - **Teach Someone Other Than Djpig to Do Releases** - Uddr and Djpig will work together so they can share the responsibility/knowledge of OpenVPN2 releases. - Likewise, Dazo and Djpig will share knowledge about COPR/Fedora releases. - **Update:** Placed on standby for now because of holidays. - **What's Going on with New Taskbar Icons?** - Matt provided icons in [Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595) - **Update:** Will be picked up by Selva when he has time. - **Security@openvpn.net Mailing List** - The company is trying to get to SOC2 compliance. - Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net - The company guy took the standard NDA we use for contractors, suggests to use that. - Novaflash thinks we should review that first to see if it's really suitable or not, as community members are not contractors after all. - **Another Key Signing Topic** - The company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, is also suitable for binary signing. - In the future, we could possibly switch the community to that same key. Saves having to maintain 2 different keys. - Depends on how hard/easy it is to access the company key signing thing from community infrastructure. - Also, no high priority at the moment, we have a working solution now. - **SBOM Topic** - Cron2 was asked if OpenVPN has a software bill of materials. The answer was no. - Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do - When we pick up this task we can coordinate on it. - **Forums Machine on Community Infrastructure is Only Non-Linux System** - Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist. - Ecrist has looked at it but the current state of the migration is unknown. - **Management Interface Documentation on Main Website Will Be Updated with Info From doc/management-notes.txt** - Novaflash will pick this up at some point. - **OpenVPN Quickstart Will Be Updated from /doc/man-sections/example-fingerprint.rst Information** - Static-key will be deprecated and contents updated with peer-fingerprint stuff. - Novaflash will pick this up again as time permits and other more important topics are done.