-------------------------
                  strongSwan - Roadmap
                 -------------------------

These notes mostly belong to charon, the new IKEv2 daemon. The plan is to
migrate IKEv1 into charon. It's hard to say how much effort is needed to
do that, and how much code we can reuse from pluto. But a port IS necessary to
gain hassle-free configuration, version negotiation and maintainability.

Roadmap 2007
============

 Apr  !   - credentials backend redesign
      !   - interface in charon for the XML based SMP management interface
      !
 May  !   - SMP configuration client
      !   - release IKEv2 p2p NATT draft 00
      !   - reimplement IKEv2 p2p NATT support
      !
 Jun  !   - start with IKEv1 migration strategy
      !
 Jul  !
      !
 Aug  !
      !
 Sep  !
      !
 Oct  !
      !
 Nov  !
      !
 Dec  !
      !


TODO-List
=========

A set of TODOs. This is only a list of things I write down to not forget them.
Watch out for TODOs in the code.

Certificate support
-------------------
- New trustchain mechanism?
- proper handling of multiple certificate payloads (import order)
- synchronized CRL fetcher
- Smartcard interface
- Attribute certificates

Stroke interface
----------------
- add a Rekey-Counter for SAs in "statusall"
- ipsec statusall bytecount
- proper handling of CTRL+C console detach (SIG_PIPE)

Misc
----
- Address pool/backend for virtual IP assignement
- fix iterator->insert_before/after