Root Zanli
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
share
/
doc
/
libksba
/
Filename :
TODO
back
Copy
-*- outline -*- * src/dn.c: ** Check that error handling of bad utf-8 encoding is correct ** There is an ambiguity in rfc2253. This is related to the handling of spaces around delimiters. At one place it talks about whitespace and few lines later it talks about just the space characters which must be ignored. How should that be solved? This is only related to spaces at the beginning or end of a name part when old style quoting is not used. * src/der-decoder.c: ** should work on a stripped down parse tree ** Allow to specify the desired top element. Or a list so that it can detect the needed tree itself * src/der-encoder.c ** Setting default values is missing ** Tags > 31 are not supported. * src/asn1-* ** Cleanup the used data structures and remove unneeded functions. ** Think about a public API to the Asn functions. * src/cms* ** split some stuff from cms.c into a new cms-build.c ** can't handle CRL infos in certificates This is not a problem within the Aegypten project as CRL aren't be retrieved by online means. ** cant't handle unprotected attributes e.g. for counter signatures. Not needed in Aegypten. * src/keyinfo.c ** Do we need to support BER encoded stuff? * src/time.c ** Allow for other timezones * src/reader.c ** ksba_reader_unread limited to 100 bytes Actually the reader is limited to 100 bytes over the first unread size. Easy to fix. * General ** The ASN.1 parse tree is not released in all places ** Some memory is not released in case of errors. * src/crl.c ** certificateIssuer not supported To support this we need to have an extended ksba_crl_get_item function to either return the issuer or at least set a flag to indicate that such an extension is available. If this new API is used we will move detection of the critical certificateIssuer extension into the old ksba_crl_get_item and bail out only there. If the new version of that function is used there won't be a need to bail out. Example of a CRL using this extension: http://pks.telesec.de/telesec/servlet/download_cr (2006-09-04). ** Allow fetching of all entry extensions.