diff options
| author | Martin Willi <martin@strongswan.org> | 2006-08-23 11:48:33 +0000 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2006-08-23 11:48:33 +0000 |
| commit | a1310b6b9215849ad58e7511a162b4f3ced711bf (patch) | |
| tree | 2f0ac5eb596e96b7095183a50581f363a949c5ca /src/charon/doc | |
| parent | d03ab568a6c98e0afa2087fd291636621a22802e (diff) | |
| download | strongswan-a1310b6b9215849ad58e7511a162b4f3ced711bf.tar.bz2 strongswan-a1310b6b9215849ad58e7511a162b4f3ced711bf.tar.xz | |
updated Changelog and other docs
Diffstat (limited to 'src/charon/doc')
| -rw-r--r-- | src/charon/doc/Known-bugs.txt | 5 | ||||
| -rw-r--r-- | src/charon/doc/Todo-list.txt | 16 |
2 files changed, 10 insertions, 11 deletions
diff --git a/src/charon/doc/Known-bugs.txt b/src/charon/doc/Known-bugs.txt index 7eda41ffe..d32a5b2f0 100644 --- a/src/charon/doc/Known-bugs.txt +++ b/src/charon/doc/Known-bugs.txt @@ -1,8 +1,5 @@ Known bugs in charon ====================== -- leak_detective gets confused from libpthread (invalid frees) -- inititate rekeying at the same time causes troubles, as the current state - machine can't handle it properly -- traffic selector changes while rekeying may cause troubles + diff --git a/src/charon/doc/Todo-list.txt b/src/charon/doc/Todo-list.txt index 296820e58..b8d2240e9 100644 --- a/src/charon/doc/Todo-list.txt +++ b/src/charon/doc/Todo-list.txt @@ -52,16 +52,18 @@ + trapping + proper delete messages -- notifys on connection setup failure ++ notifys on connection setup failure + create child sa message/rekeying -/ IKE_SA rekeying - - handle all simultaneous rekeying/delete/create cases - -- implement a mechanism against thread exhaustion - when a blocked IKE_SA receives a lot of messages -- add a crl fetch mechanism which synchronizes equal fetches ++ IKE_SA rekeying + + handle all simultaneous rekeying/delete/create cases + replace state machine with something more transaction oriented + find existing IKE_SA on CHILD_SA initiation - configure flag which allows to ommit vendor id in pluto +- use dpdaction/dpddelay parameters from ipsec.conf +- ikelifetime should optionally enforce reauthentication +- implement a mechanism against thread exhaustion + when a blocked IKE_SA receives a lot of messages +- add a crl fetch mechanism which synchronizes equal fetches +- add support for CERTREQs |