X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=TODO;h=aea5e0d4bfc9bac0f5a066c65cd1935f0f3642f2;hb=refs%2Ftags%2Fv0.1.2;hp=b75c6335954939b12f5137aa0d8db204f1e51d15;hpb=2fe58dfd10216a37f1ece081f926971882de112e;p=secnet.git diff --git a/TODO b/TODO index b75c633..aea5e0d 100644 --- a/TODO +++ b/TODO @@ -1,24 +1,43 @@ -conffile.c: deal with line numbers from included conffiles correctly +configure.in: done -dh.c: change format to binary from decimal string +Makefile.in: autodep stuff -netlink.c: initial implementation done, needs basic router functionality -adding. Can wait. Also support tun device. +conffile.c: done + +dh.c: change format to binary from decimal string (without introducing +endianness problems) + +netlink.c: done + +slip.c: done. Detect failure of userv-ipif to start. + +tun.c: jdamery reports tun-old code works on Linux-2.2. +Unresolved problem with ioctl(TUNSETIFF) sometimes return EINVAL. random.c: test resolver.c: done rsa.c: check padding type, change format to binary from decimal string +(without introducing endianness problems) secnet.c: done site.c: the site_incoming() routing could be implemented much more cleanly using a table. There's still quite a lot of redundancy in this -file. +file. Abandon key exchanges when a bad packet is received. Modify +protocol to include version fields, as described in the NOTES file. -transform.c: done +transform.c: done. JDA reports endianness problems are fixed. udp.c: done util.c: sort out logging + +General: separate the transforms in transform.c into multiple parts, +which can then be combined in the configuration file. Will allow the +user to plug in different block ciphers, invent an authenticity-only +mode, etc. + +Write scripts to generate the 'real' sites file from a less-expressive +version that's more easily checked by external tools.