-TODO
-====
+TODO/bugs In SILC Client Library
+================================
-This is more or less complete list of tasks that has to be done before
-SILC 1.0 could ever be released. It is clear that the list does not
-include all the bugs that exists. At the end of list are tasks that
-needs to be done but are probably post 1.0.
-
-Feel free to contribute if you have the ability and free time - all the
-help is really appreciated - and needed.
-
- - Pekka
-
-
-TODO General
-============
-
- o We should replace all short, int, long, unsigned short, unsigned int,
- unsigned long with some pre-defined datatypes that really are what
- we want on all platforms. int16, uint16, int32, uint32 etc. are
- what we could use or maybe SilcInt16, SilcUInt16 etc. Also, boolean
- datatype should be defined.
-
-
-TODO In SILC Client Library
-===========================
-
- o TODO in commands (lib/silcclient/command.c and
- silc/silclient/command_reply.c):
-
- o RESTART command is not implemented
-
- o Client library crashes if for example server timeouts protocol
- execution and disconnects the client. The client, on the other hand
- may still assume that the connection is active, even after receiving
- the EOF. Reason for this is that the clien library does not handle
- the SilcSocketConnection reference counter at all. This must be
- fixed.
-
- o Logic for handling multiple same nicknames for example in private
- message sending. I guess the logic is done in server side but is
- missing from client.
-
- o I guess, public key authentication (when connecting to a server)
- is not working currently. It is just matter of loading the keys
- from file and using them (see corresponding code in server, it should
- support public key authentication already).
-
- o Non-blocking connection on the background must be stopped if some
- other connection on same window has established. Now it is possible
- that some non-blocking connection timeouts on the background when
- we already have a working connection to some other place; things
- goes bad.
+ o Add local commands to list the current server and client public keys
+ that the user has. And a local command to dump the contents of the
+ public key to the screen.
o Add client library parameters or options that handle what kind of
messages the library should print out (using `say' client operation,
fix it.
-TODO In SILC Server
-===================
-
- o TODO in commands (command.c and command_reply.c):
+TODO/bugs In SILC Server
+========================
- o RESTART is not implemented
- o In servers all command reply funtions should still call the
- pending command reply even if the reply was error. In client
- it is not called but in server, I think, it must be called.
- When implementing this check that all commands handle the
- situation correctly when it is called as pending command
- (it should most likely check that cmd->pending == TRUE/FALSE).
- o WHOIS and IDENTIFY command reply sending is buggy because
- it may put status to be SILC_STATUS_LIST_START even though
- there is only one valid entry (thus should be SILC_STATUS_OK).
- This happens because it does not check the data.registered == FALSE
- clients before setting the status. Good fix for this would be
- to make sure that the clients table does not include any
- unregistered clients in the first place.
+ o The SKE protocol in the server does not verify the remote hosts
+ (the router's) public key at all. All public keys are accepted without
+ verification - this obviously is not secure.
- o TODO in notify types (packet_receive.c):
+ o When server quits and all clients of that server are removed from all
+ channels the channel keys are re-generated for all clients. This is
+ a bug and should be done only once per channel after all clients of
+ the server has been removed.
- o SERVER_SIGNOFF notify type is not implemented
+ o Incomplete IPv6 support:
- o Packet processing can be made faster. All packet function in the
- packet_receive.c has same prototypes. Instead of calling those from
- huge switch() make a table of callback functions that can be called
- directly by the packet type.
+ o silc_server_get_users_on_channel does not support IPv6 based
+ Client ID's.
+ o silc_server_route_get and the route code in general supports
+ only IPv4.
+ o silcd/serverid.c and its routines supports only IPv4.
o DNS/IP lookup blocks the server. This must be fixed. Check the
resolver stuff (resolver(3), resolver(5)). Either we have to do the
own resolver stuff (through scheduler, if possible without writing
too much own stuff) or use threads.
- o Acceptance of incoming connections (client and server connections)
- should be checked before key exchange protocol. Currently it is
- checked at the authentication phase after KE, that is ok, but it should
- be checked before starting KE, as well.
+ o The backup router support described in the protocol specification
+ should be done at some point.
- o Server says that it is able to listen on multiple ports but currently
- that is bogus. It can, but internals are for single server.
+ o New configuration file format must be added. The new one will be
+ done using the dotconf config library (lib/dotconf). The following
+ tasks relates closely to this as well and must be done at the same time
+ when adding the new config file format:
- o Protocol execution timeouts are hard coded, should be configurable.
+ o Server says that it is able to listen on multiple ports but
+ currently that is bogus. It can, but internals are for single
+ server.
- o IP address fields in configuration file should accept mask format
- as well, IP/MASK, and not just plain IP.
+ o Protocol execution timeouts are hard coded, should be
+ configurable.
- o Connection classes should be actually implemented in serverconfig.c.
- They can be defined but they are totally ignored currently.
+ o IP address fields in configuration file should accept mask
+ format as well, IP/MASK, and not just plain IP.
+ o Connection classes should be actually implemented in
+ serverconfig.c. They can be defined but they are totally
+ ignored currently. And they should be redefined also.
-TODO In SILC Libraries
-======================
- o Implement PFS (Perfect Forward Secrecy) flag in SKE (and in client and
- server, actually). If PFS is set, re-key must cause new key exchange.
- This is required by the SILC protocol.
+TODO/bugs In SILC Libraries
+===========================
+
+ o Incomplete IPv6 support:
- o Re-key in general is actually missing (from everywhere) and must be done.
+ o All network routines in lib/silcutil/silcnet.[ch] does not
+ support IPv6.
+ o silc_id_render supports only IPv4 based ID's in the file
+ lib/silcutil/silcutil.c.
o Compression routines are missing. The protocol supports packet
compression thus it must be implemented. SILC Comp API must be
not in distribution), but it is not used yet, and it requires some
tweaking on the Makefiles (we want static lib not shared).
- o Rewrite the task system. I made it too complex and too "neat" and
- it really should be rewritten. We don't need priorities really, one
- priority is enough. This will simplify a lot the task system.
-
- o SIM support for SILC PKCS API needs to made so that they could be
- used as SIM's. At the same time some work is required on prime
- generation as the way it is done now sucks. Read from code for
- more (silcpkcs.h).
-
- o Random Number Generator needs some tweaking. Reading /dev/random may
- block resulting slow initialization of RNG. Some other things in the
- RNG may block as well. Also, I have some pending changes to the RNG
- that needs to be commited (from Schneier's Yarrow-160 paper). They
- should make the RNG even better.
-
- o Scheduler needs to be analyzed on high load as it might be unfair
- towards select() because it may run timeout tasks before select() and
- after select(). If it is found to be unfair the timeout task running
- before select() should probably be removed.
-
-
-TODO in the protocol before SILC 0.x
-====================================
-
- o New commands and features in the commands
- (draft-riikonen-silc-spec-xx.txt):
-
- o Define GETKEY command to fetch the public key of a server
- and/or a client in the SILC Network.
- o Define SENDKEY command to send your public key to a client
- in the network. Sending to the server must not be done due
- to various security reasons (the server must not trust the
- public keys blindly without third party verification; that's
- why SENDKEY is not for servers).
- o Define AWAY command to set the indication flag whether the
- client is present or not. Do not save the away message to the
- server though.
- o Define the channel founder property to be permanent locally in
- the server so that channel founder can regain its rights even
- if it disconnects from the server. Thus, define a new command
- or channel user mode that can be used to set the channel founder
- passphrase or public key that can be used in the authentication
- when regaining the founder rights.
-
- o New packets and features in the packets
- (draft-riikonen-silc-pp-xx.txt):
-
- o Define the Private Message packet to include private message
- flags and define the flags. The flags could indicate whether
- the message is, for example autoreply or the receiver should not
- reply to the private messages. What other flags?
- o Define the Channel Message packet to include channel message
- flags and define the flags. Actually the flags should be same
- as for the private message flags. This way we can implement
- for example the CTCP style ACTION (/ME command) messages.
-
- o New features in the KE/auth protocol
- (draft-riikonen-silc-ke-auth-xx.txt):
-
- o Define group exchange support for the SKE so that the SKE
- could be performed among more than two entities. This is not
- a showstopper and may be defined later.
+ o The CAST cipher is not compiled currently due to compilation errors;
+ check those. Cast is in lib/silccrypt/cast.c.
+
+ o All payload parsing (decoding) functions should take unsigned char *
+ and uint32 as data and data length as arguments. Now some of the
+ routines do already that but most of the routines use SilcBuffer.
+ The SilcBuffer ones should be removed since buf->data and buf->len
+ is more convenient to use. However, the silc_buffer_[un]format
+ routines support only SilcBuffer so they would require reallocation
+ of SilcBuffer. Maybe support for raw data (and not just SilcBuffer)
+ should be added silc_buffer_[un]format_? routines. These are currently
+ only cosmetic changes but at some point must be done to make the
+ payload interfaces consistent.
TODO After 1.0
projects / silc.git / blobdiff