Blame
| 6f02e7 | Samuli Seppänen | 2025-01-29 06:40:08 | 1 | # Basic info |
| 2 | ||||
| 3 | - **Time**: Wednesday 11 October 2023 at 13:00 CEST (11:00 UTC) |
|||
| 4 | - **Place**: #openvpn-meeting channel on LiberaChat IRC network |
|||
| 5 | ||||
| 6 | # Topics |
|||
| 7 | ||||
| 8 | ## Current topics |
|||
| 9 | ||||
| 10 | ### OpenVPN 2.6.7 release |
|||
| 11 | - CMake backport is in. |
|||
| 12 | - Some small bugfixes waiting to merge. |
|||
| 13 | - Planned release date: 18 October. |
|||
| 14 | ||||
| 15 | ### Hackathon 2023 meeting summary |
|||
| 16 | - See [wiki:Hackathon2023](https://wiki.openvpn.net/Hackathon2023) |
|||
| 17 | ||||
| 18 | ### Hackathon 2024 planning |
|||
| 19 | - When? Not sure but we should do a date range of about 3 weeks so we can do availability polling. |
|||
| 20 | - Where? In last discussion Karlsruhe was mentioned. |
|||
| 21 | - Who? We should compile a more comprehensive list and send initial availability polling early. |
|||
| 22 | - Shirts! |
|||
| 23 | ||||
| 24 | ### Weekly meeting summaries |
|||
| 25 | - It was decided novaflash will do meeting summaries on wiki and send a copy to the devel mailing list. |
|||
| 26 | - So novaflash will join the devel list and do the needful starting next week. |
|||
| 27 | ||||
| 28 | ### Security assessment of OpenVPN2 codebase |
|||
| 29 | - Update 27 September: publishing this is currently being handled, it requires some preparation and internal reviews that is ongoing. |
|||
| 30 | ||||
| 31 | ### Tunnelcrack published now [Tunnelcrack](https://tunnelcrack.mathyvanhoef.com) |
|||
| 32 | - A post was published at TunnelCrack |
|||
| 33 | - More details are in the [wiki:Hackathon2023 meeting summary](https://wiki.openvpn.net/Hackathon2023). |
|||
| 34 | ||||
| 35 | ### License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues |
|||
| 36 | - Update 11 October: we want dazo to review things so we can decide if we can finalize this. |
|||
| 37 | - One of the tasks is reviewing if remaining items are trivial patches, and maybe get legal advice on those if necessary. |
|||
| 38 | ||||
| 39 | ### Static-key mini how-to is outdated. |
|||
| 40 | - This page is outdated badly: [Static Key Mini Howto](https://openvpn.net/community-resources/static-key-mini-howto/) |
|||
| 41 | - The company will send this to a tech writer to redo based on [GitHub info](https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/example-fingerprint.rst) and also retain a link to that GitHub doc. |
|||
| 42 | - Having a simple guide online will help adoption. |
|||
| 43 | ||||
| 44 | ### Website release process woes |
|||
| 45 | - Update 11 October: website team reports they've migrated existing content to a new CMS. |
|||
| 46 | - Apparently, this week is planned for release. |
|||
| 47 | ||||
| 48 | ## Topics on standby |
|||
| 49 | ||||
| 50 | ### OpenVPN release process topics |
|||
| 51 | - There was a request on [GitHub Issue #397](https://github.com/OpenVPN/openvpn/issues/397) to have releases on GitHub as well. |
|||
| 52 | - Djpig seems to think it would be fairly doable to copy/paste that info to GitHub as well. |
|||
| 53 | - We could do this during a next release. |
|||
| 54 | ||||
| 55 | ### OpenVPN 2.6 performance results |
|||
| 56 | - Tests should cover: GRE, IPSec, userland, DCO |
|||
| 57 | - Linux, FreeBSD, Windows |
|||
| 58 | - Requires time to be dedicated to doing this |
|||
| 59 | - When time available will do it |
|||
| 60 | ||||
| 61 | ### What's going on with new taskbar icons? |
|||
| 62 | - Matt provided icons in [GitHub Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595) |
|||
| 63 | - **Update:** will be picked up by Selva when he has time |
|||
| 64 | ||||
| 65 | ### security@openvpn.net mailing list |
|||
| 66 | - The company is trying to get to SOC2 compliance. |
|||
| 67 | - Probably will need a simple NDA to be signed by recipients of emails to security@openvpn.net |
|||
| 68 | - The company guy took the standard NDA we use for contractors, suggests using that. |
|||
| 69 | - Novaflash thinks we should review that first to see if it's really suitable or not, community members are not contractors after all. |
|||
| 70 | ||||
| 71 | ### Another key signing topic |
|||
| 72 | - The company switched EV code signing to CloudHSM, this is the same cert type we use for driver signing, is also suitable for binary signing. |
|||
| 73 | - In the future, we could possibly switch the community to that same key. Saves having to maintain 2 different keys. |
|||
| 74 | - Depends on how hard/easy it is to access the company key signing thing from community infrastructure. |
|||
| 75 | - Also, no high priority at the moment, we have a working solution now. |
|||
| 76 | ||||
| 77 | ### SBOM topic |
|||
| 78 | - Cron2 was asked if OpenVPN has a software bill of materials. The answer was no. |
|||
| 79 | - Coincidentally, in OpenVPN Inc a security requirement is to have an SBOM so this is on our list of things to do. |
|||
| 80 | - When we pick up this task we can coordinate on it. |
|||
| 81 | ||||
| 82 | ### Forums machine on community infrastructure is only non-Linux system |
|||
| 83 | - Mattock made a new forums system that runs on Rocky Linux 8 as agreed with Ecrist. |
|||
| 84 | - Ecrist has looked at it but the current state of the migration is unknown. |
|||
| 85 | ||||
| 86 | ### Management interface documentation on main website will be updated with info from doc/management-notes.txt |
|||
| 87 | - Novaflash will pick this up at some point |
|||
| 88 | ||||
| 89 | ### [OpenVPN Quickstart](https://openvpn.net/community-resources/openvpn-quickstart/) will be updated from /doc/man-sections/example-fingerprint.rst information. |
|||
| 90 | - Static-key will be deprecated and contents updated with peer-fingerprint stuff. |
|||
| 91 | - Novaflash will pick this up again as time permits and other more important topics are done. |