4 + = done, / = partial, - = todo, ordered by priority
7 + private key loading: der, without passphrase
8 + load all private keys from ipsec.d/private/ in stroke.c
9 + handle leftcert and rightcert in starterstroke.c/stroke.c
10 + load specified certs in stroke.c
11 + extract public keys from certs
12 + public key authentication
17 + ike_sa_manager checkout_by_hosts
19 + stroke output redirection
23 + new charon build - libstrong?
26 + logger_manager instance in lib
27 + leak detective usable for charon and pluto and anything else
28 + integrate asn1 parser/oid (asn1/oid)
29 + integrate basic PEM loading
32 + doxygen cleanup (charon/lib)
33 + new build environment (autotools?)
35 / useable certificate support
36 + more id types (use atodn from pluto)
37 + rewrite certificate storage the clean way
38 - further subjectAltName support
39 - certificate validation/chaining
40 - certificate exchange
42 + Apply -W's from Makefile.program to charon
43 + do ipsec status via starter
44 - add more output to to up/down, somehow...
46 + stroke status should show configured connections
47 + stroke loglevel update
48 - stroke argument parsing via getopts/gperf?
50 - implement 3DES to load encrypted pem files
51 + ipsec.secrets parsing
54 + proper delete messages
55 - notifys on connection setup failure
56 + create child sa message/rekeying
58 - implement a mechanism against thread exhaustion
59 when a blocked IKE_SA receives a lot of messages
60 - add a crl fetch mechanism which synchronizes equal fetches
62 - replace state machine with something more transaction oriented