-TODO
-====
-
-This is more or less complete list of tasks that has to be done before
-SILC 1.0 could ever be released. It is clear that the list does not
-include all the bugs that exists. At the end of list are tasks that
-needs to be done but are probably post 1.0.
-
-Feel free to contribute if you have the ability and free time - all the
-help is really appreciated - and needed.
-
- - Pekka
-
-
TODO General
============
datatype should be defined.
-TODO In SILC Client Library
-===========================
+TODO/bugs In SILC Client Library
+================================
o Client library crashes if for example server timeouts protocol
execution and disconnects the client. The client, on the other hand
the SilcSocketConnection reference counter at all. This must be
fixed.
- o Logic for handling multiple same nicknames for example in private
- message sending. I guess the logic is done in server side but is
- missing from client.
-
- o I guess, public key authentication (when connecting to a server)
- is not working currently. It is just matter of loading the keys
- from file and using them (see corresponding code in server, it should
- support public key authentication already).
-
- o Non-blocking connection on the background must be stopped if some
- other connection on same window has established. Now it is possible
- that some non-blocking connection timeouts on the background when
- we already have a working connection to some other place; things
- goes bad.
-
o Add client library parameters or options that handle what kind of
messages the library should print out (using `say' client operation,
for example) and what is left for the application to print. The
fix it.
-TODO In SILC Server
-===================
-
- o TODO in commands (command.c and command_reply.c):
-
- o RESTART is not implemented
- o In servers all command reply funtions should still call the
- pending command reply even if the reply was error. In client
- it is not called but in server, I think, it must be called.
- When implementing this check that all commands handle the
- situation correctly when it is called as pending command
- (it should most likely check that cmd->pending == TRUE/FALSE).
-
- o TODO in notify types (packet_receive.c):
+TODO/bugs In SILC Server
+========================
- o SERVER_SIGNOFF notify type is not implemented
+ o When server quits and all clients of that server are removed from all
+ channels the channel keys are re-generated for all clients. This is
+ a bug and should be done only once per channel after all clients of
+ the server has been removed.
- o Packet processing can be made faster. All packet function in the
- packet_receive.c has same prototypes. Instead of calling those from
- huge switch() make a table of callback functions that can be called
- directly by the packet type.
+ o Acceptance of incoming connections (client and server connections)
+ should be checked before key exchange protocol. Currently it is
+ checked at the authentication phase after KE, that is ok, but it should
+ be checked before starting KE, as well. This should be done so that
+ is first checks denied connections, then client connections and then
+ server connections. There is no use to execute the SKE if the connection
+ will not be allowed.
o DNS/IP lookup blocks the server. This must be fixed. Check the
resolver stuff (resolver(3), resolver(5)). Either we have to do the
own resolver stuff (through scheduler, if possible without writing
too much own stuff) or use threads.
- o Acceptance of incoming connections (client and server connections)
- should be checked before key exchange protocol. Currently it is
- checked at the authentication phase after KE, that is ok, but it should
- be checked before starting KE, as well.
-
o Server says that it is able to listen on multiple ports but currently
that is bogus. It can, but internals are for single server.
as well, IP/MASK, and not just plain IP.
o Connection classes should be actually implemented in serverconfig.c.
- They can be defined but they are totally ignored currently.
-
+ They can be defined but they are totally ignored currently. And they
+ should be redefined also.
-TODO In SILC Libraries
-======================
- o The SKE Start Payload parsing routines are an overkill. Use the
- SILC_STR_UI16_NSTRING_ALLOC in the parsing and not parsing them
- one by one like done now.
+TODO/bugs In SILC Libraries
+===========================
o Implement PFS (Perfect Forward Secrecy) flag in SKE (and in client and
server, actually). If PFS is set, re-key must cause new key exchange.
not in distribution), but it is not used yet, and it requires some
tweaking on the Makefiles (we want static lib not shared).
- o Rewrite the task system. I made it too complex and too "neat" and
- it really should be rewritten. We don't need priorities really, one
- priority is enough. This will simplify a lot the task system.
-
- o SIM support for SILC PKCS API needs to made so that they could be
- used as SIM's. At the same time some work is required on prime
- generation as the way it is done now sucks. Read from code for
- more (silcpkcs.h).
-
o Random Number Generator needs some tweaking. Reading /dev/random may
block resulting slow initialization of RNG. Some other things in the
RNG may block as well. Also, I have some pending changes to the RNG
that needs to be commited (from Schneier's Yarrow-160 paper). They
should make the RNG even better.
+ o SIM support for SILC PKCS API needs to made so that they could be
+ used as SIM's. At the same time some work is required on prime
+ generation as the way it is done now sucks. Read from code for
+ more (silcpkcs.h).
+
TODO in the protocol before SILC 0.x
====================================
to various security reasons (the server must not trust the
public keys blindly without third party verification; that's
why SENDKEY is not for servers).
- o Define AWAY command to set the indication flag whether the
- client is present or not. Do not save the away message to the
- server though.
- o Define the channel founder property to be permanent locally in
- the server so that channel founder can regain its rights even
- if it disconnects from the server. Thus, define a new command
- or channel user mode that can be used to set the channel founder
- passphrase or public key that can be used in the authentication
- when regaining the founder rights.
-
- o New features in the KE/auth protocol
- (draft-riikonen-silc-ke-auth-xx.txt):
-
- o Merge the KE1 and KE2 payloads into one KE payload that has
- the `signature' field. Provide it only if the perty is
- required to do authentication.
- o Add MUTUAL_AUTH flag to indicate that the party must perform
- authentication (to sign with their private key). Initiator
- may set it to indicate that it can authenticate but responder
- MAY require for the initiator to do authentication by setting
- the flag at the KE Start Payload reply phase. The responder
- performs authentication always as now as well.
- o Define group exchange support for the SKE so that the SKE
- could be performed among more than two entities. This is not
- a showstopper and may be defined later.
TODO After 1.0
projects / silc.git / blobdiff