Files
ocserv/TODO
Nikos Mavrogiannopoulos 7bbfc546ea updated
2013-02-07 08:04:04 +01:00

11 lines
537 B
Plaintext

* Use a single UDP port
* Add a simple username/password back-end
* Certificate authentication to the main process (can it be done without
moving the TLS handshake over the main thread?)
* Keep the TLS key and certificates into the privileged process and use IPC
for operations (this will make the privileged process a bottleneck).
* Handle multiple clients in a single tun device (check if needed at all)
* Add path MTU discovery
* Allow the usage of PSK ciphersuites instead of the non-standard cisco
resumption mode for DTLS.