r16411@catbus: nickm | 2007-11-05 11:27:37 -0500

 Remember X509 certificates in the context.  Store peer/self certificate digests in handshake state.


svn:r12382

1 files changed, 2 insertions, 0 deletions

diff --git a/doc/TODO b/doc/TODO
index b32be7a262..9c4fbca972 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -43,6 +43,7 @@ Things we'd like to do in 0.2.0.x:
           connection.
       - LINK_AUTH cells
         - Code to generate
+          o Remember certificate digests from TLS
         - Code to parse and check
         - Unit tests
       - Revised handshake: TLS
@@ -57,6 +58,7 @@ Things we'd like to do in 0.2.0.x:
         - After we send NETINFO, send CERT and LINK_AUTH if needed.
         - Once we get a good LINK_AUTH, the connection is OPEN.
         - Ban most cell types on a non-OPEN connection.
+      - Make code work right wrt TLS context rotation.
       - NETINFO fallout
         - Don't extend a circuit over a noncanonical connection with
           mismatched address.