openvpn-devel

[Openvpn-devel] Topics for next Thursday's (23rd Oct 2014) community meeting

[Samuli S. <sa...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

We're having an IRC meeting on Thursday, starting at 18:00 UTC on
#ope...@ir.... Current topic list is here:

<https://community.openvpn.net/openvpn/wiki/Topics-2014-10-23>

If you have any other things you'd like to bring up, respond to this
mail, send me mail privately or add them to the list yourself.

In case you can't attend the meeting, please feel free to make comments
on the topics by responding to this email or to the summary email sent
after the meeting. Whenever possible, we'll also respond to existing,
related email threads.

NOTE: It's required to use a registered Freenode IRC nickname to join
#openvpn-devel - look here for details:

<https://community.openvpn.net/openvpn/wiki/GettingHelp#DeveloperIRCchannel>

- -- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlRE0LMACgkQwp2X7RmNIqNSfACfVpdZ3s37DBOe5Jkt5vIzWDcE
LGwAoIHnyGWHBcQnDJcqI8jPmN585tNa
=4xWf
-----END PGP SIGNATURE-----

[Openvpn-devel] Summary of the IRC meeting (23rd Oct 2014)

[Samuli S. <sa...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Here's the summary of the previous IRC meeting.

- ---

COMMUNITY MEETING

Place: #openvpn-devel on irc.freenode.net
Date: Thursday 23rd Oct 2014
Time: 18:00 UTC

Planned meeting topics for this meeting were on this page:

<https://community.openvpn.net/openvpn/wiki/Topics-2014-10-23>

Next meeting has not been scheduled but will be on the same weekday and
time. Your local meeting time is easy to check from services such as

<http://www.timeanddate.com/worldclock>

or with

$ date -u

SUMMARY

cron2, Hes, lev, jamesyonan and mattock participated in this meeting.

- --

Discussed the OpenVPN 2.3.5 release.

Cron2 will integrate the tap-windows6 fixes a.s.a.p. after which mattock
will make the release.

- --

Discussed the "session-id implementation" patch:

<http://thread.gmane.org/gmane.network.openvpn.devel/8403>

Agreed that session-id should be renamed peer-id. The patch got a
feature-ACK. Jamesyonan will give the patch a thorough code review (and
hopefully code-ACK it).

Decided to implement server-side floating in a separate patch if/when
it's required to keep things simple.

- --

Discussed the upcoming Munich hackthon:

<https://community.openvpn.net/openvpn/wiki/MunichHackathon2014>

There are several things that should be discussed, such as

- - OpenVPN 2.4
- - OpenVPN 3.x + CLA
- - Multithreading
- - AEAD

Full chatlog is attached.

- -- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlRJWlgACgkQwp2X7RmNIqOopACgsr8UPqcfxhgcJimcGz6F4Pcz
nxQAoIy2BD45Iw13vr7ESrdhg4Foxv+5
=KKw8
-----END PGP SIGNATURE-----

[Openvpn-devel] Summary of the IRC meeting (24th Nov 2014)

[Samuli S. <sa...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Here's the summary of the previous IRC meeting.

- ---

COMMUNITY MEETING

Place: #openvpn-devel on irc.freenode.net
Date: Monday 24th Oct 2014
Time: 20:00 CET (19:00 UTC)

Planned meeting topics for this meeting were on this page:

<https://community.openvpn.net/openvpn/wiki/Topics-2014-11-24>

Next meeting has not been scheduled but will be on the same weekday and
time. Your local meeting time is easy to check from services such as

<http://www.timeanddate.com/worldclock>

SUMMARY

andj, cron2, dazo, lev, mattock, plaisthos and syzzer participated in
this meeting.

- ---

Discussed the "--enable-password-save" option. Decided to enable the
feature by default and remove the associated #ifdef.

- --

Discussed the the peer-id patch (v7):

<http://thread.gmane.org/gmane.network.openvpn.devel/9270>

The patch has received a fair share of review. However, as the patch
is fairly invasive it was decided to give James a chance to comment on
the latest incarnation. If he has no complaints in a few days the
patch will go in. As discussed earlier the full patch will go into
2.4. The client-side part of the patch will also go into 2.3 releases
for compatibility reasons.

- ---

Discussed OpenVPN 2.4 release. Some small pieces are still missing:

<http://thread.gmane.org/gmane.network.openvpn.devel/9232>
<http://article.gmane.org/gmane.network.openvpn.devel/9238>
<http://sourceforge.net/p/openvpn/mailman/message/32945354>
<http://article.gmane.org/gmane.network.openvpn.devel/9222>
<https://community.openvpn.net/openvpn/wiki/MunichHackathon2014>

+ stuff in Trac aimed at milestones 2.3.6 and 2.4
+ OpenVPN-GUI NSI installer

The biggest piece of code still missing from 2.4 is the Windows
interactive service:

<http://sourceforge.net/p/openvpn-gui/openvpn/ci/interactive_service/tree>

The IPv4 part of the service has been in production for some time, but
some IPv6 bits may be broken. In Munich we agreed that even if d12fk
(the author) does not have time to fix IPv6, somebody else will do it.
Samuli can help with testing the patch. Samuli will also make
experimental Windows builds with the Interactive Service so that the
patch gets the testing coverage it needs before the 2.4 release.

- ---

Discussed scrapping ENABLE_SSL as a separate option. We had asked
about this on openvpn-users and openvpn-devel and received no
response/objections. It seems that nobody cares, so out it goes.

- ---

Full chatlog is attached.

- -- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlRzlRsACgkQwp2X7RmNIqPkJACgwQxOmhUGc0W1VzNatpd1Gdnp
0u8AoKrm/sx6itVm11gSvkWfW+0qZOko
=cW70
-----END PGP SIGNATURE-----

[Openvpn-devel] Summary of the IRC meeting (29th Dec 2014)

[Samuli S. <sa...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Here's the summary of the previous IRC meeting.

- ---

COMMUNITY MEETING

Place: #openvpn-devel on irc.freenode.net
Date: Monday 29th Dec 2014
Time: 20:00 CET (19:00 UTC)

Planned meeting topics for this meeting were on this page:

<https://community.openvpn.net/openvpn/wiki/Topics-2014-12-29>

Next meeting has not been scheduled but will be on the same weekday and
time. Your local meeting time is easy to check from services such as

<http://www.timeanddate.com/worldclock>

SUMMARY

cron2, jamesyonan, mattock. plaisthos, segoon and syzzer participated
in this meeting.

- ---

Discussed the "​Add Mac OS X keychain support" patch:

<http://thread.gmane.org/gmane.network.openvpn.devel/9320>

Agreed that it's best to keep this functionality outside OpenVPN core.
In practice this means integrating the functionality with the de facto
OpenVPN GUI for MacOS X, Tunnelblick. Segoon, the patch author, will
take a stab it this new approach.

.--

Briefly discussed the "Make OpenVPN set routes on Windows Vista and
later" patchset:

<http://thread.gmane.org/gmane.network.openvpn.devel/9237>

This topic could not be covered in depth as d12fk was not present. It
was decided to revisit this topic later when d12fk is present and when
the changes have been reviewed in more depth (in two weeks or so).
Mattock will provide experimental Windows installers with this
patchset after the code has passed initial review.

- ---

Discussed the "Openvpn with cryptodev on FreeBSD does not work" patch:

<https://community.openvpn.net/openvpn/ticket/480>

The patch can't be included as-is, because it will break existing
OpenVPN configurations. Syzzer will try to find a cleaner solution to
the problem.

- ---

Full chatlog is attached.

- --
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlShvjQACgkQwp2X7RmNIqOpNACfR70gFBY3FkZbB2Lp9RVj6ZFi
CDYAnj/sgP09PvoUJdf8GIO7bS4YiIQa
=NJ7D
-----END PGP SIGNATURE-----

[Openvpn-devel] Summary of the IRC meeting (12th Jan 2015)

[Samuli S. <sa...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Here's the summary of the previous IRC meeting.

- ---

COMMUNITY MEETING

Place: #openvpn-devel on irc.freenode.net
Date: Monday 12th Jan 2015
Time: 20:00 CET (19:00 UTC)

Planned meeting topics for this meeting were on this page:

<https://community.openvpn.net/openvpn/wiki/Topics-2015-01-12>

Next meeting has not been scheduled but will be on the same weekday and
time. Your local meeting time is easy to check from services such as

<http://www.timeanddate.com/worldclock>

SUMMARY

cron2, d12fk, mattock. plaisthos and syzzer participated in this meeting.

- ---

Discussed the "​Make OpenVPN set routes on Windows Vista and later" patch:

<http://sourceforge.net/p/openvpn-gui/openvpn/ci/8195efc0d8841b52217643a43d486cda2e171fea>

The changes that affect non-Windows platforms look good, but some
modifications were proposed and will be implemented. The actual worked
code needs to be reviewed in another meeting, which is scheduled for
next Monday.

Merging this patch into OpenVPN 2.4 will break Windows XP service
support. However, this is not considered a big loss for several reasons:

- - Windows XP is end of life already
- - Windows XP does not support NDIS6 either (=would be more work to
maintain)
- - OpenVPN 2.3.x will be available for the remaining Windows XP users

- ---

Full chatlog is attached.

- -- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlS0N1MACgkQwp2X7RmNIqMy0ACZAcUMOLEFRefFIBTh/LqnJsrK
7fwAn1foSUXpZav/uDnoqAJwh7cPzW/2
=qbL/
-----END PGP SIGNATURE-----

[Openvpn-devel] Summary of the IRC meeting (19th Jan 2015)

[Samuli S. <sa...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Here's the summary of the previous IRC meeting.

- ---

COMMUNITY MEETING

Place: #openvpn-devel on irc.freenode.net
Date: Monday 19th Jan 2015
Time: 20:00 CET (19:00 UTC)

Planned meeting topics for this meeting were on this page:

<https://community.openvpn.net/openvpn/wiki/Topics-2015-01-19>

Next meeting has not been scheduled but will be on the same weekday and
time. Your local meeting time is easy to check from services such as

<http://www.timeanddate.com/worldclock>

SUMMARY

cron2, d12fk, jamesyonan, mattock. novaflash, plaisthos and segoon
participated in this meeting.

- ---

Discussed the "​Mac OS X Keychain management client" patch:

<http://thread.gmane.org/gmane.network.openvpn.devel/9392>

Some technical changes to the patch are required. Segoon will make the
changes after which the patch is reviewed again.

- ---

Discussed the "​Make OpenVPN set routes on Windows Vista and later" patch:

<http://sourceforge.net/p/openvpn-gui/openvpn/ci/8195efc0d8841b52217643a43d486cda2e171fea>

The changes that affect non-Windows platforms were approved (with some
changes) last week. This week the Windows-specific parts (mostly
interactive.c) were partially reviewed. So far no outstanding issues
were found.

Review will continue as soon as possible - possibly next Monday.

- ---

Full chatlog is attached.

- -- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlS9cmgACgkQwp2X7RmNIqNEaQCg0NWa36I9D6YkLuWssxr27IL6
AucAoLfEyZRCIiVTyA7VnYBCoGvvy2Xh
=Xb0e
-----END PGP SIGNATURE-----

[Openvpn-devel] Summary of the IRC meeting (2nd Feb 2015)

[Samuli S. <sa...@op...>]

Hi,

Here's the summary of the previous IRC meeting.

---

COMMUNITY MEETING

Place: #openvpn-devel on irc.freenode.net
Date: Monday 2nd Feb 2015
Time: 20:00 CET (19:00 UTC)

Planned meeting topics for this meeting were on this page:

<https://community.openvpn.net/openvpn/wiki/Topics-2015-02-02>

Next meeting has not been scheduled but will be on the same weekday and
time. Your local meeting time is easy to check from services such as

<http://www.timeanddate.com/worldclock>

SUMMARY

cron2, d12fk, lev, jamesyonan, mattock and segoon participated in this
meeting.

---

Discussed the "​Mac OS X Keychain management client" (v3) patch:

<http://thread.gmane.org/gmane.network.openvpn.devel/9421>

The patch was given an ACK by jamesyonan on the condition that the
changes affecting existing codebase are tested on Android. We will ask
if plaisthos could help with the testing.

---

Discussed the "​Make OpenVPN set routes on Windows Vista and later" patch:

<http://sourceforge.net/p/openvpn-gui/openvpn/ci/8195efc0d8841b52217643a43d486cda2e171fea>

Jamesyonan agreed the general approach used in interactive.c is the best
one. Although some potential improvements were identified, the patch was
given an ACK by cron2 in order to get it into the wild in form of Git
"master" Windows snapshots. Incremental improvements will be made based
on user feedback and practical tests.

---

Discussed the "Account for peer-id in frame size calculation" patch:

<http://thread.gmane.org/gmane.network.openvpn.devel/9418>

Decided to delay the link-mtu calculation until after options have
received. This fixes the issue at hand and  should not bring up new
surprises. More discussion is needed to figure out the best long-term
plan regarding protocol negotiations in general.

---

Full chatlog is attached.

-- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock