TODO

   1                  -------------------------
   2                   strongSwan - Roadmap
   3                  -------------------------
   4
   5 These notes mostly belong to charon, the new IKEv2 daemon. The plan is to
   6 migrate IKEv1 into charon. It's hard to say how much effort is needed to
   7 do that, and how much code we can reuse from pluto. But a port IS necessary to
   8 gain hassle-free confiugration, version negotiation and maintainability.
   9
  10 Roadmap 2007
  11 ============
  12
  13  Mar  !   - Cookie support, IP filter, other fixes to mature against DoS
  14       !   - release IKEv2 p2p NATT draft 00
  15       !
  16  Apr  !   - PRF in CHILD_SA rekeying
  17       !   - configuration managament refactoring
  18       !   - credentials backend redesign
  19       !   - interface in charon for the XML based SMP management interface
  20       !   - reimplement IKEv2 p2p NATT support
  21       !
  22  May  !   - SMP configuration client
  23       !
  24  Jun  !   - start with IKEv1 migration strategy
  25       !
  26  Jul  !
  27       !
  28  Aug  !
  29       !
  30  Sep  !
  31       !
  32  Oct  !
  33       !
  34  Nov  !
  35       !
  36  Dec  !
  37       !
  38
  39
  40 TODO-List
  41 =========
  42
  43 A set of TODOs. This is only a list of things I write down to not forget them.
  44 Watch out for TODOs in the code.
  45
  46 Build system
  47 ------------
  48 - configure flag which allows to ommit vendor id in pluto
  49 - reduce printf handlers count to 10, as uClibc does not support more
  50
  51 Certificate support
  52 -------------------
  53 - New trustchain mechanism?
  54 - proper handling of multiple certificate payloads (import order)
  55 - synchronized CRL fetcher
  56 - Smartcard interface
  57 - Attribute certificates
  58
  59 Stroke interface
  60 ----------------
  61 - add a Rekey-Counter for SAs in "statusall"
  62 - ipsec statusall bytecount
  63 - proper handling of CTRL+C console detach (SIG_PIPE)
  64
  65 Misc
  66 ----
  67 - PFS support for creating/rekeying CHILD_SAs
  68 - Address pool/backend for virtual IP assignement
  69 - fix iterator->insert_before/after