Blame

303076 novaflash 2025-06-27 20:40:59 1
# IrcMeetings
2
3
## Basic info
4
5
- **Time:** Wednesday 12 March 2025 at 14:00 CEST (12:00 UTC)
6
- **Place:** #openvpn-meeting channel on LiberaChat IRC network
7
8
## Topics
9
3c2fc7 novaflash 2025-06-27 21:06:03 10
- **Updated: security mailing list**
11
Both community and company want to be in control of security mailing list. We need some resolution.
12
novaflash suggested to nominate ordex and cron2 as representatives of community to discuss directly with andrew from openvpn inc to come to some agreement.
13
This idea was accepted by community and novaflash will arrange a date/time for the call.
303076 novaflash 2025-06-27 20:40:59 14
3c2fc7 novaflash 2025-06-27 21:06:03 15
- **Updated: DCO Linux upstreaming**
16
Upstreaming DCO to Linux is proceeding, it is in review stage at the moment.
17
A patchset v22 was sent in on Tuesday.
303076 novaflash 2025-06-27 20:40:59 18
3c2fc7 novaflash 2025-06-27 21:06:03 19
- **Updated: new --dns option support**
20
https://gerrit.openvpn.net/q/topic:%22dns+option%22
21
As agreed d12fk has been addressing things in the PR and handling comments there.
22
The new --dns directive allows more functionality and to resolve ambiguity in current dhcp-option dns handling, which is different per client and OS.
23
OpenVPN2 on unix-like systems does not have built-in DNS handling. On these you tend to have to add --up and --down script handling for DNS. Not ideal.
24
We want to deliver a DNS script that is enabled by default so OpenVPN2 on unix-like systems can 'just do DNS' out of the box.
303076 novaflash 2025-06-27 20:40:59 25
But we also don't want to break situations where people have already implemented --up and --down script handling.\
3c2fc7 novaflash 2025-06-27 21:06:03 26
The proposed behavior is;
27
by default dns-script is delivered with openvpn2 on Linux and enabled by default
28
it is not used when --up script is set in openvpn config file - that will function as before
29
it is not used when at runtime --dns-script disable is set
30
it is not used when at compile time --disable-dns-script is set
303076 novaflash 2025-06-27 20:40:59 31
The PRs for improving DNS implementation using NRPT on Windows and solving a WMIC related problem have already been merged.