From 229840974084340dab14fd8b12c4c72b6e8072c0 Mon Sep 17 00:00:00 2001 From: "Jason A. Donenfeld" Date: Sat, 24 Apr 2021 12:51:12 -0400 Subject: if_wg: count on peers always having a remote We do a pretty nasty hack in the allowedips selftest to avoid having to allocate more memory. Seems to work. Signed-off-by: Jason A. Donenfeld --- TODO.md | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) (limited to 'TODO.md') diff --git a/TODO.md b/TODO.md index ad85d72..36756c9 100644 --- a/TODO.md +++ b/TODO.md @@ -1,20 +1,16 @@ -### Primary systems TODO +### Primary TODO - Finish porting [this script](https://git.zx2c4.com/wireguard-linux/tree/tools/testing/selftests/wireguard/netns.sh) to `./tests/netns.sh` using vnets and epairs. -- Rework locking and epoch lifetimes; come up with consistent set of rules. - Shore up vnet support and races/locking around moving between vnets. - Work out `priv_check` from vnet perspective. (There's no `ns_capable()` on FreeBSD, just `capable()`, which makes it a bit weird for one jail to have permissions in another.) - Make code style consistent with one FreeBSD way, rather than a mix of styles. -- Make sure noise state machine is correct. -- Investigate whether the allowed ips lookup structure needs reference - counting. ### Crypto TODO -- Do packet encryption using opencrypto/ with sg lists on the mbuf, so that we don't need to linearize mbufs. +- Do packet encryption using opencrypto/ with sg lists on the mbuf. - Send 25519 upstream to sys/crypto, and port to it. - Send simple chapoly upstream to sys/crypto, and port to it. - Port to sys/crypto's blake2s implementation. -- cgit v1.2.3-59-g8ed1b