| | 1 | Makefile.in: autodep stuff |
| | 2 | |
| | 3 | dh.c: change format to binary from decimal string (without introducing |
| | 4 | endianness problems) |
| | 5 | |
| | 6 | netlink.c: investigate why 'default' routes don't appear to work |
| | 7 | (reported by JDA). |
| | 8 | |
| | 9 | slip.c: detect failure of userv-ipif to start. |
| | 10 | |
| | 11 | tun.c: jdamery reports tun-old code works on Linux-2.2. |
| | 12 | Unresolved problem with ioctl(TUNSETIFF) sometimes returning EINVAL, seems |
| | 13 | to be related to early 2.4.x (x<=5) series kernels. 2.4.9 and above seem ok; |
| | 14 | 2.4.[678] untested. |
| | 15 | |
| | 16 | random.c: test |
| | 17 | |
| | 18 | rsa.c: check padding type, change format to binary from decimal string |
| | 19 | (without introducing endianness problems) |
| | 20 | |
| | 21 | site.c: the site_incoming() routing could be implemented much more |
| | 22 | cleanly using a table. There's still quite a lot of redundancy in this |
| | 23 | file. Abandon key exchanges when a bad packet is received. Modify |
| | 24 | protocol to include version fields, as described in the NOTES file. |
| | 25 | |
| | 26 | transform.c: make generic |
| | 27 | |
| | 28 | util.c: sort out logging |
| | 29 | |
| | 30 | sha1.c: test |
| | 31 | |
| | 32 | General: separate the transforms in transform.c into multiple parts, |
| | 33 | which can then be combined in the configuration file. Will allow the |
| | 34 | user to plug in different block ciphers, invent an authenticity-only |
| | 35 | mode, etc. |
| | 36 | |
| | 37 | Signal handling! Really just cope with SIGCHLD and SIGTERM. Possibly |
| | 38 | use SIGUSR1/2 for prodding things. |
| | 39 | |
| | 40 | Write scripts to generate the 'real' sites file from a less-expressive |
| | 41 | version that's more easily checked by external tools. |
~mdw / secnet / blame_incremental