3 * DONE: implement ISAKMP and IPSEC SA negotiate support
5 * DONE: fix delete message
7 * DONE --non-interactive
13 * DONE don't ignore all notifies at ipsec-sa-negotation
15 * DONE hide user/pass from --debug output
19 * DONE fix vpnc-disconnect
21 * DONE NetBSD supported
23 * DONE FreeBSD supported
25 * DONE ignore attr 32136! (Cisco extension: XAUTH Vendor)
27 * DONE ignore "metric10 xx"
29 * DONE make /var/run/vpnc as needed
31 * DONE support for new libgcrypt versions
33 * DONE passcode == password
35 * DONE post link to http://www.liebchen-online.de/vpn-zaurus.html
37 * DONE post rfcs and drafts
39 * DONE include man-page
41 * DONE fix link at alioth
43 * DONE memleak fix from Sebastian Biallas
45 * DONE include OpenBSD support from Nikolay Sturm
47 * DONE load balancing support (fixes INVALID_EXCHANGE_TYPE in S4.5)
49 * DONE accept (== ignore) lifetime update in phase1
51 * DONE send lifetime in phase1 and phase2
53 * DONE send version string
55 * DONE automatic handling of pfs
57 * DONE ask for dns/wins servers, default domain, pfs setting, netmask
59 * DONE spawn post-connect script
61 * DONE check /dev/net/tun, reject /dev/tun* on linux
65 * DONE XAUTH Domain: (empty)
69 * DONE implement udp encap via port 10.000
72 * DONE fix Makefile (install, DESTDIR, CFLAGS, ...)
74 * DONE implement udp transport NAT-T
77 * links to packages, howtos, etc.
78 - http://localhost.ruhr.de/~stefan/uni-duisburg.ai/vpnc.shtml
82 - add pointer to http://chrisp.de/en/projects/tunnel.html
84 * factor out crypto stuff (cipher, hmac, dh)
85 - http://libtomcrypt.org/features.html
86 - http://www.foldr.org/~michaelw/ patch fertig
87 - libgcrypt (old too?)
90 * relicense to gpl+ssl?
96 * update "check pfs setting" error message
98 * better handling of routing
100 * better handling of resolv.conf?
102 * use in-kernel-ipsec with pf-key
105 * make doing xauth optional
107 * add support for pcap for packet capture
111 * implement compression
113 * implement rekeying / DPD / frozen connections?
115 * implement certificate support
117 * implement hybrid-auth
119 * optional drop root (rekey? reconnect?)