Basic info
- Time: Wednesday 29 March 2023 at 13:00 CET (12:00 UTC)
- Place: #openvpn-meeting channel on LiberaChat IRC network
Topics
Current topics
- Release planning for 2.6.3
we have a crashbug in 2.6.2 that affects Linux users that use DCO and NetworkManager? ("sometimes").
- When going back to normal operating mode?
new features and refactors in master,
bugfixes to master + release/2.6,
serious bugfixes also ported to 2.5
this would hit the selva pkcs11 unit test series first
- Status of PoC using Gerrit for code review.
there's a workflow proposal here: https://community.openvpn.net/openvpn/wiki/Proposed%20Gerrit%20Workflow
it was agreed to review workflow this week.
want to see a 'heads-up' message in the form of: there is a new patchset wwith -these descriptions in gerrit in -url-
and the final merge message needs to come with the actual patches plus a combined -this was the discussion- mail.
- Security assessment of OpenVPN2 codebase.
need to review security assessment, see if we are in agreement about it.
dazo will reach out to cron2 about this to gather his feedback.
- IPv6 to community.
cloudflare ipv6 compatibility is turned off on openvpn.net because company is worried it might break something.
community wants date when this is resolved.
novaflash working to get a date that company will commit to.
informally head of ops sees it as being turned on in 'about a month'. but will work to get a date we can hold him to.
Topics on standby
- License amendment for OpenVPN2 to solve openssl/mbedtls licensing issues
current status is that individual contributors are being contacted, and approvals gathered.
- Website release process woes
website team did not deliver solution as promised in february. they now promise this month. we shall see.
- SBOM topic
cron2 was asked if openvpn has a software bill of materials. answer was no.
coincidentally, in openvpn inc a security requirement is to have an SBOM so this is on our list of things to do
when we pick up this task we can coordinate on it.
- 2.7 plans, if any?
are there any features that we have in mind that will not make it into 2.6.*?
signal handling respin
2.6 refactor
bloom filter ddos reflection protection.
- Forums machine on community infrastructure is only non-Linux system.
mattock made a new forums system that runs on rocky linux 8 as agreed with ecrist.
ecrist has looked at it but the current state of the migration is unknown.
- Have to remember to update SupportedVersions to put 2.4 out of support at around end of March
- OpenVPN 2.6 performance results.
We should work on an article to publish some performance results when 2.6 is out as stable. but first press release.
- Management interface documentation on main website will be updated with info from doc/management-notes.txt
novaflash will pick this up again now that he is back.
- https://openvpn.net/community-resources/openvpn-quickstart/ will be updated from /doc/man-sections/example-fingerprint.rst information.
Static-key will be deprecated and contents updated with peer-fingerprint stuff.
novaflash will pick this up again as time permits and other more important topics are done.
Download in other formats: