denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updated TODOs

Browse Source
This commit is contained in:
Martin Willi
2006-09-18 11:41:04 +00:00
parent e63c4d8b8b
commit f534e18a98
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/doc/Todo-list.txt
+10 -9
View File
@@ -1,5 +1,5 @@
Todo-List for charon Todo-List for charon
====================== --------------------
+ = done, / = partial, - = todo, ordered by priority + = done, / = partial, - = todo, ordered by priority
@@ -41,13 +41,11 @@
+ Apply -W's from Makefile.program to charon + Apply -W's from Makefile.program to charon
+ do ipsec status via starter + do ipsec status via starter
- add more output to to up/down, somehow...
+ stroke status should show configured connections + stroke status should show configured connections
+ stroke loglevel update + stroke loglevel update
+ stroke argument parsing via getopts/gperf? + stroke argument parsing via getopts/gperf?
- implement 3DES to load encrypted pem files
+ ipsec.secrets parsing + ipsec.secrets parsing
+ trapping + trapping
@@ -60,15 +58,18 @@
+ replace state machine with something more transaction oriented + replace state machine with something more transaction oriented
+ find existing IKE_SA on CHILD_SA initiation + find existing IKE_SA on CHILD_SA initiation
+ use dpdaction/dpddelay parameters from ipsec.conf
/ add firewall script support
- include only a minimum of NATD payloads
- implement 3DES to load encrypted pem files
- implement a "event bus" mechanism
- add more output to to up/down, somehow...
- configure flag which allows to ommit vendor id in pluto - configure flag which allows to ommit vendor id in pluto
- use dpdaction/dpddelay parameters from ipsec.conf
- ikelifetime should optionally enforce reauthentication - ikelifetime should optionally enforce reauthentication
- cookies/DDoS prevention - cookies/DDoS prevention
- implement a mechanism against thread exhaustion - implement a mechanism against thread exhaustion
when a blocked IKE_SA receives a lot of messages when a blocked IKE_SA receives a lot of messages
- add a crl fetch mechanism which synchronizes equal fetches - add a crl fetch mechanism which synchronizes equal fetches
- add support for CERTREQs - add support for CERTREQs
- use same reqid for routed connections when they are set up - proper handling of multiple certificate payloads (import order)
- if a CHILD_SA gets created, check if it is already ROUTED somewhere: - add a Rekey-Counter for SAs in "statusall"
- remove that route and reuse reqid
- add firewall script support