X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=lib%2FHACKING;h=36287b8f9100359b03de8dc5b50e9f4e85867025;hb=e1fe1879285c0a74ae3e906f45b3da326144fd0d;hp=7b1f298ad672e9f94912919b7b48e76c29330874;hpb=ceecc52da787a7a2e495d913cbaa7dbe1d7830fb;p=radsecproxy.git diff --git a/lib/HACKING b/lib/HACKING index 7b1f298..36287b8 100644 --- a/lib/HACKING +++ b/lib/HACKING @@ -18,14 +18,19 @@ examples/client -r examples/client.conf blocking-tls; echo $? - Application runs its own event loop, using fd's for select and performs I/O using the libradsec send/receive calls (a.k.a. on-your-own mode) -- Fully reentrant (FIXME: issues with libfreeradius-radius?) - User chooses allocation regime +Note that as of 0.0.2.dev libradsec suffers from way too much focus on +the behaviour of a blocking client and is totally useless as a server. +Not only does it lack most of the functions needed for writing a +server but it also contains at least one architectural mishap which +kills the server idea -- a connection timeout (TCP) or a retransmit +timeout (UDP) will result in the event loop being broken. The same +thing will happen if there's an error on a TCP connection, f.ex. a +failing certificate validation (TLS). * Dependencies Details apply to Ubuntu 10.10. -- libfreeradius-radius (2.1.9+dfsg-1ubuntu1) - sudo apt-get install libfreeradius-dev libfreeradius2 - libconfuse (2.7-1) sudo apt-get install libconfuse-dev libconfuse0 - libevent from source (release-2.0.10-stable) @@ -41,13 +46,13 @@ Details apply to Ubuntu 10.10. - [TCP] short read - [TCP] short write - [TLS] basic tls support +- [TLS] preshared key support +- [TLS] verification of CN ** Known issues - error stack is only one entry deep - custom allocation scheme is not used in all places ** Not implemented - server failover -- [TLS] verification of CN -- [TLS] preshared key support - [DTLS] support * Found a bug?