IrcMeetings

Basic info

• Time: Wednesday 12 March 2025 at 14:00 CEST (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

• Updated: security mailing list
  Both community and company want to be in control of security mailing list. We need some resolution.
  novaflash suggested to nominate ordex and cron2 as representatives of community to discuss directly with andrew from openvpn inc to come to some agreement.
  This idea was accepted by community and novaflash will arrange a date/time for the call.

• Updated: DCO Linux upstreaming
  Upstreaming DCO to Linux is proceeding, it is in review stage at the moment.
  A patchset v22 was sent in on Tuesday.

• Updated: new --dns option support
  https://gerrit.openvpn.net/q/topic:%22dns+option%22
  As agreed d12fk has been addressing things in the PR and handling comments there.
  The new --dns directive allows more functionality and to resolve ambiguity in current dhcp-option dns handling, which is different per client and OS.
  OpenVPN2 on unix-like systems does not have built-in DNS handling. On these you tend to have to add --up and --down script handling for DNS. Not ideal.
  We want to deliver a DNS script that is enabled by default so OpenVPN2 on unix-like systems can 'just do DNS' out of the box.
  But we also don't want to break situations where people have already implemented --up and --down script handling.
  The proposed behavior is;
  by default dns-script is delivered with openvpn2 on Linux and enabled by default
  it is not used when --up script is set in openvpn config file - that will function as before
  it is not used when at runtime --dns-script disable is set
  it is not used when at compile time --disable-dns-script is set
  The PRs for improving DNS implementation using NRPT on Windows and solving a WMIC related problem have already been merged.