/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to TODO

  • Committer: Teddy Hogeborn
  • Date: 2019-03-07 20:28:17 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 382.
  • Revision ID: teddy@recompile.se-20190307202817-avhha20s3pl14j6y
mandos-ctl: Refactor; move parsing of intervals into argument parsing

* mandos-ctl (MillisecondsValueArgumentMixIn.value_to_set): Assume
  that an incoming value is datetime.timedelta(), not a string.
  (add_command_line_options): Add "type=string_to_delta" to --timeout,
  --extended-timeout, --interval, --approval-delay, and
  --approval-duration.
  (TestSetTimeoutCmd, TestSetExtendedTimeoutCmd, TestSetIntervalCmd,
  TestSetApprovalDelayCmd, TestSetApprovalDurationCmd): Change
  values_to_set to be datetime.timedelta() values, and change to more
  appropriate values to test.  Also adjust values_to_get accordingly.

Show diffs side-by-side

added added

removed removed

Lines of Context:
TODO
14
14
** TODO [#C] Make start_mandos_communication() take "struct server".
15
15
** TODO [#C] --interfaces=regex,eth*,noregex (bridge-utils-interfaces(5))
16
16
** TODO [#A] Detect partial writes to stdout and exit with EX_TEMPFAIL
 
17
** TODO [#B] Use reallocarray() with GNU LibC 2.29 or later.
17
18
 
18
19
* splashy
19
20
** TODO [#B] use scandir(3) instead of readdir(3)
33
34
 
34
35
* plymouth
35
36
** TODO [#A] Detect partial writes to stdout and exit with EX_TEMPFAIL
 
37
** TODO [#B] Use reallocarray() with GNU LibC 2.29 or later.
36
38
 
37
39
* TODO [#B] passdev
38
40
 
119
121
 
120
122
* [[http://www.undeadly.org/cgi?action=article&sid=20110530221728][OpenBSD]]
121
123
 
122
 
* TODO Use raw public keys (RFC 7250) for TLS communications              :2:
123
 
** Support for this is planned for GnuTLS version 3.6
124
 
   https://gitlab.com/gnutls/gnutls/issues/26
125
 
** Rationale
126
 
*** The client key is used both for communication and encryption
127
 
    Using raw keys in GnuTLS instead uses separate keys for
128
 
    communication and password decryption.
129
 
*** GnuTLS 3.5.9 has deprecated the OpenPGP functions
130
 
    The functions are still available, but deprecated:
131
 
    https://gitlab.com/gnutls/gnutls/issues/102
132
 
 
133
124
 
134
125
#+STARTUP: showall