in order to avoid having people working on the same thing.
Current list:
-* Allow adding multiple subject alternative names.
++ Support PKCS#8 AES and DES-MD5 (tests/enc3pkcs8.pem) encrypted keys.
+* Improve or rewrite libtasn1 to make it easier to maintain.
+* Make and use by gnutls a flexible interface for algorithms such
+ as public key, symmetric, PRNGs to allow for plugins that use other
+ libraries than libgcrypt or even hardware drivers. Flexible means
+ that it should allow replacing of some components without harming the
+ others (i.e. now with libgcrypt there is no way to replace the prng component
+ with something else since libgcrypt uses it internally.)
+* Allow adding multiple subject alternative names (certtool + x509 library).
* Verify added CRLs (is it really needed?)
* Document the format for the supported DN attributes.
* Audit the code
-* RNG improvements, to avoid /dev/random blocking on busy servers.
-+ Support PKCS#8 AES and DES-MD5 (tests/enc3pkcs8.pem) encrypted keys.
- Support OpenSSL encrypted PKCS#1 RSA keys, for compatibility (new
applications should use PKCS#8 instead).
- Allow verifying of certificates on their reception.