[minion-cvs] Implement and test server descriptors.

[nickm@seul.org (Nick Mathewson)]

Update of /home/minion/cvsroot/src/minion
In directory moria.seul.org:/tmp/cvs-serv27794

Modified Files:
	TODO 
Log Message:
Implement and test server descriptors.

Config: 
	- Add functionality for allow/deny rules. 
	- Add 'restricted' format for descriptors
	- Add fast path for assumed-valid files
	- Make 'Host' sections of config optional
	- Add more key-management and descriptor-generation fields to 
	  server config.

Crypto:
	- Add wrappers for PEM

ServerInfo:
	- Implement and debug server descriptors

test:
	- Tests for above functionality
	- Tests for logs

crypt.c:
	- Change generate_cert to take a time range instead of a number
	  of days.

tls.c:
	- Remove stale XXXX comment.


Index: TODO
===================================================================
RCS file: /home/minion/cvsroot/src/minion/TODO,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -d -r1.11 -r1.12
--- TODO	26 Jul 2002 20:52:16 -0000	1.11
+++ TODO	28 Jul 2002 22:42:32 -0000	1.12
@@ -9,31 +9,46 @@
 NEEDS TO BE WRITTEN
 
 FOR 0.0.1: (The rough edges release)
-	- Local delivery module
-	*. Logging/debugging/warning code 
-		- Tests
+	*- Local delivery module
 	- CLI client
 		- Send a message
 		- Generate a message
 		- Generate a reply block
 		- Read message from reply block
-	*. Server description blocks
+		- Design directory layout
+	*- Config
+		- Validation function for client
+		- Validation function for server		
+	o Server description blocks
 		o Tests for crypto.sign	
 		o Implementation
-		. Generate server blocks
+		o Generate server blocks
 			o Basic generation
 			o Keygen
-			- Expiry rules
-			- Extra fields
-			- Section inclusion rules
-		- Document code
-		- Tests for implementation
-		- Tests for generation
-	- Main loop for server
+			o Extra fields
+			o Section inclusion rules
+			o Expiry
+		o Document code
+		o Tests for generation
+			o Generate from maximal config file
+				o Generate ok
+				o Check contents
+				o Check keys
+			o Generate from minimal config file
+		o Tests for implementation
+			o Restricted conffile mode
+			o Bad digests, overlong fields, bad sigs, etc
+		o Bugfixes
+			o Allow/deny on incoming???
+	*- Re-merge MMTP changes
+	*- Server
+		- Main loop for server
+		- Startup, config
+		o Design directory layout
 	- Clean shutdown for server
-	- CLI for server
-		- Run server
-		- Generate future key/publish to dirserver
+	*- CLI for server
+		*- Run server
+		*- Generate future key/publish to dirserver
 
 	- MMTP		
 		. Tests for all cases:
@@ -48,6 +63,7 @@
 	- Versioning :)
 
 FOR 0.0.2: (The first hacker release)
+	- Key rotation and expiry
 	- MMTP
 SPEC!!		- Timeout old connections
 		- Test new features