= Basic info = * Time: Wed August 24th 2022 10:30 CEST (8:30 UTC) * Place: #openvpn-meeting channel on !LiberaChat IRC network = Topics = 1. Hackathon 1. Community services migration tomorrow (Thursday) during EET working time (9-17) is ok? - Replacement VMs are ready for ldap (updated OS + app), pwm (updated OS + app), trac (copied as-is) and forums (copied as-is) - Migration procedures for each service are available and have been tested - Total time for migration is probably ~2 hours, downtime for users should be less 1. Sync up on OpenVPN 2.5 and 2.6 - 2.5 - new 2.5.7 installers and new TAP-Driver-Bundle needed (TAP driver bugfix merged) - new installer + openvpnmsica patch ( https://community.openvpn.net/openvpn/wiki/Topics-2022-08-10) -> for 2.5.8 as well? - 2.6 - FreeBSD-DCO fully merged, some MR_WITH_NETBITS issues remain (please review patch), some route/iroute clarifications sought (mail on list), double fragmentation still broken (kp looking into it) - FreeBSD "openvpn-devel" port/pkg has been updated to 734de8f9aa - Linux-DCO fully merged, some P2P renegotiation / reconnection issues remain (also seem to affect FreeBSD-DCO) - Linux port builders beware: if userland RPMs are upgraded, kernel RPMs need to be upgraded as well(!) - to 383a897a5cb or later - otherwise P2P will no longer work (at all) (Debian is up to date on both accords) - Windows-DCO is waiting for testers, code seems ready to be merged 1. Linux-DCO vs. Network-Manager - NM issue (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017379) has been worked around (disable DCO if CAP_NET_ADMIN can not be retained) - dazo to establish contacts with NM maintainers for "real" solution, like "run as uid=nm-openvpn, but with CAP_NET_ADMIN, and no --user switch" - any news? - Syzzer's comment: can we make this work without retaining CAP_NET_ADMIN after openvpn startup? At least for clients? 1. 2.6.0 release timeline? proposed date: November 1st - Debian "bookworm" freeze is "end of the year" (2023-01-12) - https://lists.debian.org/debian-devel/2022/03/msg00251.html 1. windows buildslave with actual tests? 1. --enable-dco + openssl 3.0 fails to build on ubuntu20 due to pkg-config misbehaviour for libnl (adding {{{-L/usr/lib/x86_64-linux-gnu}}}) (#1469) 1. IPv6 to community? [wiki:IrcMeetings Back to meeting list]