Toronto 2014 meetup: Difference between revisions

From Libreswan
Jump to navigation Jump to search
No edit summary
No edit summary
Line 27: Line 27:
* dynamic interfacing and whack --listen / NM etc
* dynamic interfacing and whack --listen / NM etc
* ADNS -> unbound
* ADNS -> unbound
* false "can not start crypto helper: failed to find any available worker" and load (also force_busy)

Revision as of 18:51, 14 July 2014

This meetup will be held immediately after IETF-90 in Toronto.

It will be hosted by Paul Wouters

Scheduled to attend: Antony Antony, D. Hugh Redelmeier, Matt Rogers, Tuomo Soini, Kim Heino and Paul Wouters

Agenda items (raw)

  • uncrustify discussion
  • refactoring to reduce crypto boundary
  • clang / coverity
  • uniqueid handling
  • modp group restrictions
  • OE IPsec, AUTH_NONE, left/rightauthby=, adns lookups
  • CREATE_CHILD_SA
  • CP payload (modeconfig for ikev2)
  • EAP (auth for IKEv2)
  • NSS and some userland IKE algo support (AES_GCM, AES_CCM, AES_CTR)
  • Default proposal list (decouple v1/v2, update v2 ?)
  • ike/esp parser
  • parser and generic restrictions (conflicting conns loading, etc)
  • CA chains
  • UNH certification
  • FIPS certification
  • audit support and statsd
  • dynamic interfacing and whack --listen / NM etc
  • ADNS -> unbound
  • false "can not start crypto helper: failed to find any available worker" and load (also force_busy)