Basic info

• Time: Wednesday 15 March 2023 at 13:00 CET (12:00 UTC)
• Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Current topics

• Release of 2.6.1 was done last week
  we did release last week. but it seems there was no forum post. novaflash quickly added one but there is copr/fedora stuff missing.
  forum post seems to also be not at the top - no permissions to change this?
  we also forgot to send out an email

• Release planning for 2.6.2 - planned for 22 march
  in last week's meeting it was suggested to do some small quick releases in the short term.
  how are things looking for a 2.6.2?
  items that didn't make it into 2.6.1:
  --dns directive.
  dco control channel switch (dco 0.2xx).
  dco + compression patch.
  we should also add in the fix for auth-pending.
  and add in --inactive support for dco.
  and pkcs11-helper bugfix.
  and a memory leak fix.
  have to remember to ask debian maintainer to pick up a version of openvpn 2.6.x that includes the dco control channel switch.

• License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues
  in discussion with the legal expert it was thought to be a good idea to send in the license change as a PR.
  this obviously won't just go in so easily until we have all the necessary approvals, but it was thought a good way to give it some attention.
  a next step would be to reach out to individual developers to get approvals.

• Blog post for OpenVPN 2.6 release on main site
  This is here: https://openvpn.net/blog/openvpn-2-6
  a real press release by openvpn inc. is also coming this week.

• Status of PoC using Gerrit for code review.
  for authentication we've decided to;
  not accept anonymous submissions
  do authentication via ldap now
  add github later as an extra
  uddr will write a document that describes the future workflow for company and community people.
  to be reviewed in 2 weeks from now

• Can we have someone at OpenVPN create nicer windows traybar logos (#1276)?
  yes matt is currently working on it in ​https://github.com/OpenVPN/openvpn-gui/issues/595
  should we perhaps accept the current icon set and set up another ticket to go through another set of improvements? this seems to be what selva suggested.

Topics on standby

• Website release process woes
  website team did not deliver solution as promised in february. they now promise this month. we shall see.

• SBOM topic
  cron2 was asked if openvpn has a software bill of materials. answer was no.
  coincidentally, in openvpn inc a security requirement is to have an SBOM so this is on our list of things to do
  when we pick up this task we can coordinate on it

• 2.7 plans, if any?
  are there any features that we have in mind that will not make it into 2.6.*?
  signal handling respin
  take everything apart and rebuild, 2.6 is made of duct tape
  bloom filter ddos reflection protection.

• Forums machine on community infrastructure is only non-Linux system.
  mattock made a new forums system that runs on rocky linux 8 as agreed with ecrist.
  ecrist has looked at it but the current state of the migration is unknown.

• Have to remember to update SupportedVersions to put 2.4 out of support at around end of March

• OpenVPN 2.6 performance results.
  We should work on an article to publish some performance results when 2.6 is out as stable. but first press release.

• Management interface documentation on main website will be updated with info from doc/management-notes.txt
  novaflash will pick this up again now that he is back.

• https://openvpn.net/community-resources/openvpn-quickstart/ will be updated from /doc/man-sections/example-fingerprint.rst information.
  Static-key will be deprecated and contents updated with peer-fingerprint stuff.
  novaflash will pick this up again as time permits and other more important topics are done.

• IPv6 to community.
  No new information to report.