Basic info

• Time: Wed August 24th 2022 10:30 CEST (8:30 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

1. Hackathon
2. Community services migration tomorrow (Thursday) during EET working time (9-17) is ok?
   • Replacement VMs are ready for ldap (updated OS + app), pwm (updated OS + app), trac (copied as-is) and forums (copied as-is)
   • Migration procedures for each service are available and have been tested
   • Total time for migration is probably ~2 hours, downtime for users should be less
3. Sync up on OpenVPN 2.5 and 2.6
   • 2.5
     • new 2.5.7 installers and new TAP-Driver-Bundle needed (TAP driver bugfix merged)
     • new installer + openvpnmsica patch ( ​https://community.openvpn.net/openvpn/wiki/Topics-2022-08-10) -> for 2.5.8 as well?
   • 2.6
     • FreeBSD-DCO fully merged, some MR_WITH_NETBITS issues remain (please review patch), some route/iroute clarifications sought (mail on list), double fragmentation still broken (kp looking into it)
     • FreeBSD "openvpn-devel" port/pkg has been updated to 734de8f9aa
     • Linux-DCO fully merged, some P2P renegotiation / reconnection issues remain (also seem to affect FreeBSD-DCO)
     • Linux port builders beware: if userland RPMs are upgraded, kernel RPMs need to be upgraded as well(!) - to 383a897a5cb or later - otherwise P2P will no longer work (at all) (Debian is up to date on both accords)
     • Windows-DCO is waiting for testers, code seems ready to be merged
4. Linux-DCO vs. Network-Manager
   • NM issue (​https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017379) has been worked around (disable DCO if CAP_NET_ADMIN can not be retained)
   • dazo to establish contacts with NM maintainers for "real" solution, like "run as uid=nm-openvpn, but with CAP_NET_ADMIN, and no --user switch" - any news?
   • Syzzer's comment: can we make this work without retaining CAP_NET_ADMIN after openvpn startup? At least for clients?
5. 2.6.0 release timeline? proposed date: November 1st
   • Debian "bookworm" freeze is "end of the year" (2023-01-12) - ​https://lists.debian.org/debian-devel/2022/03/msg00251.html
6. windows buildslave with actual tests?
7. --enable-dco + openssl 3.0 fails to build on ubuntu20 due to pkg-config misbehaviour for libnl (adding -L/usr/lib/x86_64-linux-gnu) (#1469)
8. IPv6 to community?

Back to meeting list