| 1 | Makefile.in: autodep stuff |
| 2 | Make it work using the distributed install.sh (which doesn't support -D) |
| 3 | |
| 4 | dh.c: change format to binary from decimal string (without introducing |
| 5 | endianness problems) |
| 6 | |
| 7 | netlink.c: test the 'allow_route' option properly. |
| 8 | |
| 9 | process.c: capture output from children in sys_cmd() and log it |
| 10 | |
| 11 | random.c: test |
| 12 | |
| 13 | resolver.c: ought to return a list of addresses for each address; the |
| 14 | site code ought to remember them and try contacting them in turn. |
| 15 | |
| 16 | rsa.c: check padding type, change format to binary from decimal string |
| 17 | (without introducing endianness problems) |
| 18 | |
| 19 | site.c: the site_incoming() routing could be implemented much more |
| 20 | cleanly using a table. There's still quite a lot of redundancy in this |
| 21 | file. Abandon key exchanges when a bad packet is received. Modify |
| 22 | protocol to include version fields, as described in the NOTES |
| 23 | file. Implement keepalive mode. Make policy about when to initiate key |
| 24 | exchanges more configurable (how many NAKs / bad reverse-transforms |
| 25 | does it take to prompt a key exchange?) |
| 26 | |
| 27 | slip.c: restart userv-ipif to cope with soft routes? Restart it if it |
| 28 | fails in use? |
| 29 | |
| 30 | transform.c: separate the transforms into multiple parts, which can |
| 31 | then be combined in the configuration file. Will allow the user to |
| 32 | plug in different block ciphers, invent an authenticity-only mode, |
| 33 | etc. |