-configure.in: cut down to just the required tests. Support for installation.
+Makefile.in: autodep stuff
-Makefile.in: support for installation.
+dh.c: change format to binary from decimal string (without introducing
+endianness problems)
-conffile.c: deal with line numbers from included conffiles correctly
+netlink.c: investigate why 'default' routes don't appear to work
+(reported by JDA).
-dh.c: change format to binary from decimal string
+slip.c: detect failure of userv-ipif to start.
-netlink.c: done. Test tun-old code.
+tun.c: jdamery reports tun-old code works on Linux-2.2.
+Unresolved problem with ioctl(TUNSETIFF) sometimes returning EINVAL, seems
+to be related to early 2.4.x (x<=5) series kernels. 2.4.9 and above seem ok;
+2.4.[678] untested.
random.c: test
-resolver.c: done
-
rsa.c: check padding type, change format to binary from decimal string
-
-secnet.c: done
+(without introducing endianness problems)
site.c: the site_incoming() routing could be implemented much more
cleanly using a table. There's still quite a lot of redundancy in this
-file.
+file. Abandon key exchanges when a bad packet is received. Modify
+protocol to include version fields, as described in the NOTES file.
-transform.c: done
-
-udp.c: done
+transform.c: make generic
util.c: sort out logging
+
+sha1.c: test
+
+General: separate the transforms in transform.c into multiple parts,
+which can then be combined in the configuration file. Will allow the
+user to plug in different block ciphers, invent an authenticity-only
+mode, etc.
+
+Signal handling! Really just cope with SIGCHLD and SIGTERM. Possibly
+use SIGUSR1/2 for prodding things.
+
+Write scripts to generate the 'real' sites file from a less-expressive
+version that's more easily checked by external tools.
~ian / secnet.git / blobdiff