X-Git-Url: https://git.strongswan.org/?p=strongswan.git;a=blobdiff_plain;f=TODO;h=458384a8d2e9bde83c5a99cbd616f1d31a9d2a33;hp=c8977ee012acebd063a9cea377da2be1b8c078c3;hb=52ac2cebe2136980e372bc435f4318746bbaf8e4;hpb=59c5a85313d14fae9197a629f2b7ca8d359b3c26 diff --git a/TODO b/TODO index c8977ee..458384a 100644 --- a/TODO +++ b/TODO @@ -1,61 +1,14 @@ - ------------------------- - strongSwan - Roadmap - ------------------------- + ---------------------- + strongSwan - TODO + ---------------------- -These notes mostly belong to charon, the new IKEv2 daemon. The plan is to -migrate IKEv1 into charon. It's hard to say how much effort is needed to -do that, and how much code we can reuse from pluto. But a port IS necessary to -gain hassle-free confiugration, version negotiation and maintainability. +This is a TODO list we should keep in mind. A roadmap of the strongSwan +project is available online at: -Roadmap 2007 -============ - - Mar ! - Cookie support, IP filter, other fixes to mature against DoS - ! - release IKEv2 p2p NATT draft 00 - ! - Apr ! - PRF in CHILD_SA rekeying - ! - configuration managament refactoring - ! - interface in charon for the new SMP management interface - ! - reimplement IKEv2 p2p NATT support - ! - May ! - XML configuration interface - ! - Jun ! - start with IKEv1 migration strategy - ! - Jul ! - ! - Aug ! - ! - Sep ! - ! - Oct ! - ! - Nov ! - ! - Dec ! - ! - - -TODO-List -========= - -A set of TODOs. This is only a list of things I write down to not forget them. -Watch out for TODOs in the code. - -Build system ------------- -- configure flag which allows to ommit vendor id in pluto -- reduce printf handlers count to 10, as uClibc does not support more - -Denail of service ------------------ -- Cookie support on server -- thread exhaustion (multiple messages to a single IKE_SA) + http://wiki.strongswan.org/projects/strongswan/roadmap Certificate support ------------------- -- New trustchain mechanism? -- proper handling of multiple certificate payloads (import order) - synchronized CRL fetcher - Smartcard interface - Attribute certificates @@ -64,9 +17,16 @@ Stroke interface ---------------- - add a Rekey-Counter for SAs in "statusall" - ipsec statusall bytecount -- proper handling of CTRL+C console detach (SIG_PIPE) Misc ---- -- PFS support for creating/rekeying CHILD_SAs - Address pool/backend for virtual IP assignement + +libstrongswan stuff +------------------- +- Header installation support (#include ?) +- object style for leak detective, include an API +- Cleanup/Refactor PEM/ASN1 stuff +- replace file reads through chunk_read +- rewrite lexparser in object-oriented style +