X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;f=TODO;h=186d4d02ba329caa36348897bb34cea2f115b2eb;hb=b2163409ccfa0d3cf250ec920bb378a937801bf8;hp=c3ecce6d443f6821da3a09c89a327b4188c9dab7;hpb=38ab8048f54ce449339c317310e3e73a7b7f53d0;p=thirdparty%2Fstrongswan.git diff --git a/TODO b/TODO index c3ecce6d44..186d4d02ba 100644 --- a/TODO +++ b/TODO @@ -1,83 +1,8 @@ - ------------------------- - strongSwan - Roadmap - ------------------------- + ---------------------- + strongSwan - TODO + ---------------------- -These notes mostly belong to charon, the new IKEv2 daemon. The plan is to -migrate IKEv1 into charon. It's hard to say how much effort is needed to -do that, and how much code we can reuse from pluto. But a port IS necessary to -gain hassle-free confiugration, version negotiation and maintainability. +A roadmap of the strongSwan project is available online at: -Roadmap for 2007 -================ + http://wiki.strongswan.org/projects/strongswan/roadmap - Jan ! - first stable release of the strongSwan 4.x branch - ! - Feb ! - refactoring of exchange handling for better code sharing, - ! we need to separate specific tasks to reuse them in multiple - ! exchanges - ! - merge of EAP authentication code / plugin loader - ! - merge of the virtual IP support currently in the pipeline - ! - merge of the experimental "mediated double-NAT" support - ! - write an IETF draft for this feature - ! - Mar ! - interface in charon for the new SMP management interface - ! - full certificate support - ! - Cookie support, other fixes to mature against DoS - ! - Apr ! - start porting efforts of IKEv1 into charon - ! - support of IKEv1 messages and payloads in charon - ! - May ! - migration of plutos state machine into charon - ! - Jun ! - get a useable IKEv1 implementation for simple cases - ! - Jul ! - first release of charon supporting IKEv2 and IKEv1 - ! - Aug ! - get IKEv1 support to the level of pluto - ! - Sep ! - ! - Oct ! - ! - Nov ! - ! - Dec ! - feature complete release - ! - - -TODO-List -========= - -A set of TODOs. This is only a list of things I write down to not forget them. -Watch out for TODOs in the code. - -Build system ------------- -- configure flag which allows to ommit vendor id in pluto -- reduce printf handlers count to 10, as uClibc does not support more - -Denail of service ------------------ -- Cookie support -- thread exhaustion (multiple messages to a single IKE_SA) - -Certificate support -------------------- -- New trustchain mechanism? -- proper CERTREQ support -- proper handling of multiple certificate payloads (import order) -- synchronized CRL fetcher -- OCSP support -- Smartcard interface -- Attribute certificates - -Stroke interface ----------------- -- add a Rekey-Counter for SAs in "statusall" -- ipsec statusall bytecount -- detach console after first keyingtry -- proper handling of CTRL+C console detach (SIG_PIPE) - -Misc ----- -- retry transaction on failure while keyingtries > 1