IrcMeetings

Basic info

• Time: Wednesday 15 January 2025 at 14:00 CEST (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

• Updated: 2.6.x release
  Plan to start the 2.6.13 release process today with the assorted patches that are in release/2.6.

• Updated: DCO Linux upstreaming
  Upstreaming DCO to Linux is proceeding, it is in review stage at the moment.
  Patchset v17 and v18 followed really fast and v18 is now under review.

• Updated: DCO windows multi-peer
  lev has finished the driver and userspace implementations for the iroute.

• Updated: data format v3 / epoch data keys
  RFC is here: RFC Pull Request.
  Implementation in OpenVPN3 is in review/merge stage.
  Implementation in OpenVPN2 is almost fully merged, just one patch to go.

• Updated: multi-socket support
  Patchset v12 is pushed out and ready for review.
  Multi-socket gerrit link

• Updated: community.openvpn.net wiki
  mattock converted the setup to podman which is what we tend to use nowadays in our infrastructure.
  mattock will try to finish the work this week so we can plan for deploying it.

• t_server_null improvements
  ovpnlwip seems to work fine on all linux platforms, based on buildbot tests.
  Waiting review. djpig promised to do it last week.

• new --dns option support
  Now in review. d12fk sent in patchset for new --dns option support.
  DNS option gerrit link

• Release 2.7
  ../../Development/StatusOfOpenvpn27 was updated with the results from Karlsruhe meetup.
  compare wiki:CommunityMeetup2024.
  Want to do a first preview release as soon as possible, but need to get at least one of the big patch series in, preferably multi-socket.

• OpenVPN SEO
  There is a request from OpenVPN whether we could exclude build.openvpn.net and gerrit.openvpn.net from search engines to not muddle search
  results for openvpn with developer-only resources. We will need more information about the actual problem they see before doing something like that.

Backlog

• push_update / live route updates
  There have been some initial tests on a server implementation in PG.
  There is a server-side bug that will be fixed in PG, and a request to support a few more options (keepalive options).
  lev will add keepalive to OpenVPN3 code.
  mrbff and ordex will implement the openvpn2 server and client support for push_update.

• TLS-exporter in mbedtls
  Needed for TLS 1.3 support with openvpn and mbedtls - TLS-exporter currently missing in mbedtls.
  maxf reports he's making some progress on implementing this - currently working to ensure all unit tests in all million billions of configurations work.

• snapshot releases via Chocolatey software
  mattock contacted the Chocolate package maintainer for OpenVPN and asked if he would be okay with publishing Windows MSI snapshots as well.
  Seems like the maintainer is amenable to helping us achieve that goal.

• OpenVPN community meetup 2025
  Community Meetup 2025
  When: September/October ish, a poll for checking availability is here: Availability Poll
  Where: Napoli, Italy.
  Meeting room: TBD.
  Hotel: TBD.
  Beer: Yes.
  T-shirts: Yes.

• 2.7 security audit
  ordex mentioned that OTF offers the possibility to get a 3rd-party security audit for supported projects. So we will apply for that around or after the 2.7 release to review the latest code.