From fda5759b2b045aaa96ee1fa6d14fb3c17fe0fd01 Mon Sep 17 00:00:00 2001 From: Michael Rash Date: Thu, 16 Aug 2012 21:18:11 -0400 Subject: [PATCH] todo.org notes update --- todo.org | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/todo.org b/todo.org index f3e67342..246e0cb8 100644 --- a/todo.org +++ b/todo.org @@ -23,17 +23,23 @@ page. ** Use assert() in various places Use assert() to validate expected values wherever possible. -** For Ubuntu systems, have fwknopd managed by upstart +** [server] For Ubuntu systems, have fwknopd managed by upstart fwknopd can benefit from upstart management and monitoring on Ubuntu systems. -** Include files for access.conf +** [server] Include files for access.conf Hank Leininger suggested that the main access.conf file have an option to include other files in which access stanzas can be specified. This makes it easy to wrap additional controls around access information particularly in multi-user environments. -** Remove lib check for test suite when running in --enable-recompile mode +** [test suite] Remove lib check for test suite when running in --enable-recompile mode When creating a release tarball under 'make dist', the test suite performs a check for existing lib/ directory even under --enable-recompile. -** ipfw active/expire sets cannot be the same +** [server] ipfw active/expire sets cannot be the same Add a check to ensure that active and expire sets are not the same value in fwknopd.conf, and add a corresponding test in the test suite. +** [test suite] SPA packet fuzzer + Add a series of patches to the fwknop client that break how it produces SPA + data in subtle ways in order to ensure proper validation by fwknopd. +** [test suite] backwards compatibility tests + The test suite should have the ability to test backwards compatibility + between fwknop versions.