GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-12 01:26:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

updated todo list

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2013-10-29 22:48:39 +01:00
parent 7ac0cfbb14
commit e821f3dac1
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
TODO
-4
View File
@@ -1,15 +1,11 @@
* IPv6 support is probably broken or non-optimal. See how it can be * IPv6 support is probably broken or non-optimal. See how it can be
improved. improved.
* Simplify client route forwarding to the server.
* Think how the DTLS part can use better negotiation of algorithms and DTLS * Think how the DTLS part can use better negotiation of algorithms and DTLS
versions than the current openssl string approach (using PSK ciphersuites versions than the current openssl string approach (using PSK ciphersuites
seem to be like a solution, but then we could not use the session ID to seem to be like a solution, but then we could not use the session ID to
forward the UDP connection to the proper worker). forward the UDP connection to the proper worker).
* Handle multiple settings/config files per user group.
* Certificate authentication to the main process. Possibly that is just * Certificate authentication to the main process. Possibly that is just
wishful thinking. To verify the TLS client certificate verify signature wishful thinking. To verify the TLS client certificate verify signature
packet one needs instead of the signature, the contents of all the handshake packet one needs instead of the signature, the contents of all the handshake