Import release 0.1.2

[secnet.git] / TODO

diff --git a/TODO b/TODO
index 3f5f028e5054c982fcee299ab83fd2933df6edc7..aea5e0d4bfc9bac0f5a066c65cd1935f0f3642f2 100644 (file)
--- a/TODO
+++ b/TODO
@@ -7,7 +7,12 @@ conffile.c: done
 dh.c: change format to binary from decimal string (without introducing
 endianness problems)
 
-netlink.c: done. jdamery reports tun-old code works on Linux-2.2
+netlink.c: done
+
+slip.c: done. Detect failure of userv-ipif to start.
+
+tun.c: jdamery reports tun-old code works on Linux-2.2.
+Unresolved problem with ioctl(TUNSETIFF) sometimes return EINVAL.
 
 random.c: test
 
@@ -20,14 +25,19 @@ secnet.c: done
 
 site.c: the site_incoming() routing could be implemented much more
 cleanly using a table. There's still quite a lot of redundancy in this
-file. Abandon key exchanges when a bad packet is received. Tell
-netlink link is down if it's down and we don't have address for other
-end.
+file. Abandon key exchanges when a bad packet is received. Modify
+protocol to include version fields, as described in the NOTES file.
 
-transform.c: done. Needs checking for endianness problems.
+transform.c: done. JDA reports endianness problems are fixed.
 
 udp.c: done
 
 util.c: sort out logging
 
-General: check over MBM's patches for BSD.
+General: separate the transforms in transform.c into multiple parts,
+which can then be combined in the configuration file.  Will allow the
+user to plug in different block ciphers, invent an authenticity-only
+mode, etc.
+
+Write scripts to generate the 'real' sites file from a less-expressive
+version that's more easily checked by external tools.