2006-12-19 10:46:58 +00:00
|
|
|
-------------------------
|
|
|
|
|
strongSwan - Roadmap
|
|
|
|
|
-------------------------
|
|
|
|
|
|
|
|
|
|
These notes mostly belong to charon, the new IKEv2 daemon. The plan is to
|
|
|
|
|
migrate IKEv1 into charon. It's hard to say how much effort is needed to
|
|
|
|
|
do that, and how much code we can reuse from pluto. But a port IS necessary to
|
2007-04-19 14:14:01 +00:00
|
|
|
gain hassle-free configuration, version negotiation and maintainability.
|
2006-12-19 10:46:58 +00:00
|
|
|
|
2007-03-22 08:07:14 +00:00
|
|
|
Roadmap 2007
|
|
|
|
|
============
|
2006-12-19 10:46:58 +00:00
|
|
|
|
2007-06-11 12:11:41 +00:00
|
|
|
Jun ! - distribution packages
|
2007-03-30 12:49:19 +00:00
|
|
|
! - interface in charon for the XML based SMP management interface
|
2007-06-11 12:11:41 +00:00
|
|
|
! - SMP configuration client
|
2007-04-19 14:14:01 +00:00
|
|
|
! - release IKEv2 p2p NATT draft 00
|
2006-12-20 07:55:57 +00:00
|
|
|
!
|
2007-06-11 12:11:41 +00:00
|
|
|
Jul ! - modular credential backends
|
|
|
|
|
! - reimplement IKEv2 p2p NATT support
|
2006-12-20 07:55:57 +00:00
|
|
|
!
|
2007-06-11 12:11:41 +00:00
|
|
|
Aug ! - Start IKEv1 implementation in charon
|
2006-12-20 07:55:57 +00:00
|
|
|
!
|
|
|
|
|
Sep !
|
|
|
|
|
!
|
|
|
|
|
Oct !
|
|
|
|
|
!
|
|
|
|
|
Nov !
|
|
|
|
|
!
|
2007-03-22 08:07:14 +00:00
|
|
|
Dec !
|
2006-12-20 07:55:57 +00:00
|
|
|
!
|
2006-12-19 10:46:58 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
TODO-List
|
|
|
|
|
=========
|
|
|
|
|
|
|
|
|
|
A set of TODOs. This is only a list of things I write down to not forget them.
|
|
|
|
|
Watch out for TODOs in the code.
|
|
|
|
|
|
|
|
|
|
Certificate support
|
|
|
|
|
-------------------
|
|
|
|
|
- New trustchain mechanism?
|
|
|
|
|
- proper handling of multiple certificate payloads (import order)
|
|
|
|
|
- synchronized CRL fetcher
|
|
|
|
|
- Smartcard interface
|
|
|
|
|
- Attribute certificates
|
|
|
|
|
|
|
|
|
|
Stroke interface
|
|
|
|
|
----------------
|
|
|
|
|
- add a Rekey-Counter for SAs in "statusall"
|
|
|
|
|
- ipsec statusall bytecount
|
|
|
|
|
|
|
|
|
|
Misc
|
|
|
|
|
----
|
2007-03-20 08:59:03 +00:00
|
|
|
- Address pool/backend for virtual IP assignement
|
2007-03-30 12:49:19 +00:00
|
|
|
- fix iterator->insert_before/after
|
