Blame
| 6f02e7 | Samuli Seppänen | 2025-01-29 06:40:08 | 1 | # IrcMeetings |
| 2 | ||||
| 3 | ## Basic info |
|||
| 4 | ||||
| 5 | - **Time:** Wednesday 6 March 2024 at 13:00 CEST (11:00 UTC) |
|||
| 6 | - **Place:** #openvpn-meeting channel on LiberaChat IRC network |
|||
| 7 | ||||
| 8 | ## Topics |
|||
| 9 | ||||
| 10 | ### Current topics |
|||
| 11 | ||||
| 12 | - **New: openvpn 2.6.10 release** |
|||
| 13 | - *There are some Windows related issues to be resolved in this release.* |
|||
| 14 | - *Tentatively planned for end of next week.* |
|||
| 15 | ||||
| 16 | - **Updated: server-side testing status and next meeting** |
|||
| 17 | - mattock has created a PoC of `--dev null` "does a client connect" check |
|||
| 18 | - client config has `--dev null` and `ifconfig-noexec` |
|||
| 19 | - uses an "up" script to stop the parent (openvpn) process gracefully soon after connection initialization |
|||
| 20 | - the "up" script almost certainly includes some Linux-specifisms |
|||
| 21 | - example usage: |
|||
| 22 | - `openvpn --config client.conf | grep "Initialization Sequence Completed"` |
|||
| 23 | - integration with "make check", buildbot, etc. is still missing |
|||
| 24 | - next steps: |
|||
| 25 | - integrate the PoC with "make check" |
|||
| 26 | - make the script portable |
|||
| 27 | - buildbot integration (if required separately) |
|||
| 28 | - *We want to continue on this topic once a bit more progress has been made.* |
|||
| 29 | ||||
| 30 | - **Updated: forums topics** |
|||
| 31 | - *A new forum is under construction. But already spammers have found it.* |
|||
| 32 | - *Suggestion is to give openvpn_inc user novaflash and Pippin_ full admin rights so they can help find a solution and help maintain the forums.* |
|||
| 33 | - *To be discussed with ecrist.* |
|||
| 34 | - *Layout and categories look ok?* |
|||
| 35 | - *Access for Mod to delete users that put spam url in profile and never post a message, currently I cannot discover a way to delete those(1)* |
|||
| 36 | - *Related to above, Access for Mod to edit user profiles (asks for AdminCP password)(1)* |
|||
| 37 | - *Mod guide, hard or soft delete (chuck board?), what to do with GDPR, etc. (write it down and actually make it available to mods, maybe a hidden topic)* |
|||
| 38 | - *Access for mods to logs so one can see what others did* |
|||
| 39 | - *Email confirmation on register?* |
|||
| 40 | - *[Forgot password or user name?](https://forums-new.openvpn.net/lostpw) and [Contact](https://forums-new.openvpn.net/contact-us)?* |
|||
| 41 | - *Considering some existing platform to do discussions next to forum?* |
|||
| 42 | - *(1) May not be necessary if enough admin available* |
|||
| 43 | ||||
| 44 | - **Updated: website release process** |
|||
| 45 | - *Finally they have come up with a solution that they will run by novaflash this week.* |
|||
| 46 | ||||
| 47 | - **New: breaking DCO changes, how to approach?** |
|||
| 48 | - *This topic appeared but we do not have details on what this entails exactly.* |
|||
| 49 | - *Perhaps ordex can provide details on what this is about, so we can have a meaningful discussion.* |
|||
| 50 | ||||
| 51 | - **Updated: Status of SBOM** |
|||
| 52 | - *There was a discussion between MaxF and djpig and others.* |
|||
| 53 | - *For OpenVPN2 / OpenVPN-NL, there is not much overlap, as OpenVPN2 doesn't ship much in terms of libraries, but OpenVPN-NL does.* |
|||
| 54 | - *The interesting use-case for an SBOM is really the OpenVPN Windows GUI client.* |
|||
| 55 | ||||
| 56 | - **Updated: Debian and Ubuntu snapshot packages and buildbot** |
|||
| 57 | - Cloudfront + S3 + aptly PoC is complete and seems to work fine |
|||
| 58 | - Cloudfront caches need to be invalidated when new packages are added or removed, or the apt repository will end up in an inconsistent state almost immediately |
|||
| 59 | - If we use swupdate.openvpn.net to publish the snapshots we will have to deal with cloudfront + cloudflare. |
|||
| 60 | - We can choose to just publish snapshots on build.openvpn.net. This seems the preferred option. |
|||
| 61 | - Alternatively, a new S3 bucket + cloudfront can be done. Whatever people like best. |
|||
| 62 | - Buildbot integration is missing, but should be fairly straightforward |
|||
| 63 | - This will probably have to wait until `--dev null` is done |
|||
| 64 | ||||
| 65 | - **status of trac/wiki** |
|||
| 66 | - *No progress since last meeting.* |
|||
| 67 | - *This will probably have to wait until `--dev null` is done* |
|||
| 68 | - *Should have access controls so only approved members can edit.* |
|||
| 69 | ||||
| 70 | - **Security mailing list procedure can stand improvement** |
|||
| 71 | - *To be discussed in more detail later.* |
|||
| 72 | ||||
| 73 | - **community funding** |
|||
| 74 | - *ordex has an initiative he wants to bring up regarding dev resources to be added to community.* |
|||
| 75 | - *This may tie into the donations topic.* |
|||
| 76 | - *In short ordex convinced OTF (Open Tech Fund) to provide a "test FOSS funding scheme" to OpenVPN.* |
|||
| 77 | - *This would for example allow to pay for allocated hours for mattock and cron2 to work on OpenVPN community tasks.* |
|||
| 78 | - *This is to be worked out more and in collaboration between OpenVPN Community, OpenVPN Inc., and OTF.* |
|||
| 79 | ||||
| 80 | - **donation collection** |
|||
| 81 | - *what are the options?* |
|||
| 82 | ||||
| 83 | - **Tunnelcrack progress [TunnelCrack community wiki article](wiki:TunnelCrack)** |
|||
| 84 | - *Current status: when mitigations start appearing we will mention them in meeting notes.* |
|||
| 85 | ||||
| 86 | - **OpenVPN community meetup 2024** |
|||
| 87 | - *Naming: We decided to rename from 'Hackathon' to 'OpenVPN community meetup'. This has a more open spirit to it, as we want to encourage developers and those interested in contributing to feel welcome.* |
|||
| 88 | - *Where: Karlsruhe, Germany. It is a relatively central location in Europe and is fairly easily reachable by train. A meeting location is yet to be arranged.* |
|||
| 89 | - *When: At the moment tentatively set to 20-22 September 2024.* |
|||
| 90 | - *Who: We'll do an open invitation to openvpn-devel mailing list, but also CC: specifically past attendees and people of interest.* |
|||
| 91 | - *Shirts: There is plenty of time still to prepare a shirt design.* |
|||
| 92 | ||||
| 93 | - **Static-key mini how-to is outdated.** |
|||
| 94 | - *This page is outdated badly: [Static Key Mini Howto](https://openvpn.net/community-resources/static-key-mini-howto/)* |
|||
| 95 | - *company will send this to tech writer to redo based on [example fingerprint](https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/example-fingerprint.rst) info and also retain a link to that github doc. Having a simple guide online will help adoption.* |
|||
| 96 | ||||
| 97 | - **OpenVPN 2.6 performance results.** |
|||
| 98 | - *tests should cover: gre, ipsec, userland, dco* |
|||
| 99 | - *linux, freebsd, windows* |
|||
| 100 | - *requires time to be dedicated to doing this, when time available will do it* |
|||
| 101 | ||||
| 102 | - **What's going on with new taskbar icons?** |
|||
| 103 | - *matt provided icons in [Issue #595](https://github.com/OpenVPN/openvpn-gui/issues/595)* |
|||
| 104 | - *last update: will be picked up by selva when he has time* |
|||
| 105 | ||||
| 106 | - **software code signing topic** |
|||
| 107 | - *company switched EV code signing to cloudhsm, this is same cert type we use for driver signing, is also suitable for binary signing.* |
|||
| 108 | - *in future we could possibly switch community to that same key. saves having to maintain 2 different keys.* |
|||
| 109 | - *depends on how hard/easy it is to access company key signing thingee from community infrastructure.* |
|||
| 110 | - *also no high priority at the moment, we have a working solution now.* |
|||
| 111 | ||||
| 112 | - **Management interface documentation on main website will be updated with info from doc/management-notes.txt** |
|||
| 113 | - *novaflash will pick this up at some point* |