[SCM] GNU gnutls branch, master, updated. gnutls_2_99_2-62-g13c861e

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=13c861eaa7f48a315e2f5b571b125cdf05c81376

The branch, master has been updated
       via  13c861eaa7f48a315e2f5b571b125cdf05c81376 (commit)
       via  18e37c42f648a08c65b83857c2bf6ddfcf746cc5 (commit)
      from  43e993b44249589bf773ae6b0ae14db4275155a0 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 13c861eaa7f48a315e2f5b571b125cdf05c81376
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Sat Jun 4 23:04:52 2011 +0200

    Added new TODO items.

commit 18e37c42f648a08c65b83857c2bf6ddfcf746cc5
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Sat Jun 4 23:02:03 2011 +0200

    removed completed items from todo list

-----------------------------------------------------------------------

Summary of changes:
 doc/TODO |   15 +++++----------
 1 files changed, 5 insertions(+), 10 deletions(-)

diff --git a/doc/TODO b/doc/TODO
index 3c7bc6d..19e5ba0 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -3,23 +3,20 @@ anything), contact the developer's mailing list 
(address@hidden),
 in order to avoid having people working on the same thing. 
 
 Current list:
-+ Allow setting a list of trusted plain certificates (not CAs) in the
-  gnutls_x509_trust_list_t, to verify against.
-* Allow override of the system time() function.
+* Add certificate image support (see RFC3709, RFC6170)
+* Perform signature calculation in PKCS #11 using not plain
+  RSA but rather the combination of RSA-SHA256, RSA-SHA1 etc.
+  That will allow the usage of more secure tokens that do not
+  allow plain RSA.
 * Allow setting a PKCS #11 module to gnutls_x509_trust_list_t, to verify 
   against, similarly to NSS way.
 * Support replacing individual algorithms via a PKCS #11 module -
   maybe use p11-kit for that.
 * Support PKCS#8 AES and DES-MD5 (tests/enc3pkcs8.pem) encrypted keys.
-* Implement Datagram-TLS (DTLS).
 * Implement TLS-PSK with PKCS #11.
-* Verify added CRLs (is it really needed?)
 * Add support for generating empty CRLs
 * Document the format for the supported DN attributes.
 * Audit the code
-- Allow verifying of certificates on their reception.
-- Add gnutls_certificate_set_openpgp_keyring()
-  function, similar to gnutls_certificate_set_openpgp_key().
 - Add function to extract the signers of an openpgp key. Should
   be similar to gnutls_x509_crt_get_dn_oid().
 - Add function to verify an openpgp key against a plain key.
@@ -34,8 +31,6 @@ Current list:
 - RFC 3280 compliant certificate path validation.
 - Add progress handler gnutls_{dh,rsa}_params_generate2, to allow
   application to give progress feedback to user.
-- Support non-blocking gnutls_{dh,rsa}_params_generate2 for when there
-  is not enough entropy available. 
 - Chain verifications.
   - Check path length constraints.
   - Check keyCertSign key usages.


hooks/post-receive
-- 
GNU gnutls