From ea1bea5830ad90d9ea14a84ffa4b465827ff8af4 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Mon, 5 Nov 2007 18:15:50 +0000 Subject: r16411@catbus: nickm | 2007-11-05 11:27:37 -0500 Remember X509 certificates in the context. Store peer/self certificate digests in handshake state. svn:r12382 --- doc/TODO | 2 ++ 1 file changed, 2 insertions(+) (limited to 'doc') diff --git a/doc/TODO b/doc/TODO index b32be7a262..9c4fbca972 100644 --- a/doc/TODO +++ b/doc/TODO @@ -43,6 +43,7 @@ Things we'd like to do in 0.2.0.x: connection. - LINK_AUTH cells - Code to generate + o Remember certificate digests from TLS - Code to parse and check - Unit tests - Revised handshake: TLS @@ -57,6 +58,7 @@ Things we'd like to do in 0.2.0.x: - After we send NETINFO, send CERT and LINK_AUTH if needed. - Once we get a good LINK_AUTH, the connection is OPEN. - Ban most cell types on a non-OPEN connection. + - Make code work right wrt TLS context rotation. - NETINFO fallout - Don't extend a circuit over a noncanonical connection with mismatched address. -- cgit v1.2.3-54-g00ecf