[minion-cvs] Tweaks to make server need less babysitting; patch for ...

[nickm@seul.org (Nick Mathewson)]

Update of /home/minion/cvsroot/src/minion
In directory moria.seul.org:/tmp/cvs-serv11825

Modified Files:
	TODO 
Log Message:
Tweaks to make server need less babysitting; patch for attack; work on client.

PacketHandler.py, BuildMessage.py, Crypto.py, test.py:
	Patch for George's attack of august 15

ClientMain.py:
	Untested beginnings of directory store

Config.py:
	Check config files for bogus characters

Crypyo.py:
	Make RSA public keys pickleable

HashLog.py:
	Remove debugging output

MMTPClient.py, BuildMessage.py, MMTPServer.py, Packet.py, Modules.py,
   ServerInfo.py:
	Change version numbers from "1.0" to "0.1" so we can obsolete this
	version of the code on a real 1.0 release.

Queues.py:
	Add note about the Cottrell algorithm not being the one I implemented
	now.

ServerMain.py:
	Clean up hash logs on exit.




Index: TODO
===================================================================
RCS file: /home/minion/cvsroot/src/minion/TODO,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -d -r1.23 -r1.24
--- TODO	31 Aug 2002 04:12:36 -0000	1.23
+++ TODO	10 Sep 2002 14:45:27 -0000	1.24
@@ -21,10 +21,10 @@
 		o Hardwired code to drop undeliverable messages
 		o Document ServerMain
 		o Unit test for keyset 
-		- Make at least one delivery happen
-			- BUG: Make sure hashlogs get written
-			- BUG: "Unable to handle message with unknown type 65534
-			- BUG: Changing port should make keyid die.
+		o Make at least one delivery happen
+			o BUG: Make sure hashlogs get written
+			o BUG: "Unable to handle message with unknown type...
+		- Use real cottrell mixing again.
 		- Need 'nuke keys' cli.
 		- Unit tests for various queues.
 		*- Better debugging logs
@@ -41,6 +41,10 @@
 		- Send a message
 		- Generate a message
 		- Design directory layout
+		o Storage for serverinfo
+			o Make serverinfo pickleable
+				o Make RSA pickleable
+			- Test
 		- Test CLI client
 	- Config
 		o Infer nickname
@@ -48,6 +52,7 @@
 		o Stub validation function for server
 		o Warn about unimplemented allow/deny
 		o Warn about all unimplemented features
+		o Make all config files reject bogus characters.
 		- Example config
 	. Build
 		. Ability to pull ssl.
@@ -62,7 +67,7 @@
 	. MBox module
 		o Implement
 		- Test
-	- Rename versions to 0.1.
+	o Rename versions to 0.1.
 	- Change output of dates to avoid potential GMT confusion.
 	o Marginally clean shutdown for server
 	- Versioning :)
@@ -87,6 +92,8 @@
 	- Security
 		- Make createPrivateDirs gripe about group-writable parent
 		  dirs
+		- Make hashlog code use journaling if underlying dbs are 
+		  unreliable.
 	- Server core
 		- Clean shutdown
 		- Good reset handling
@@ -115,6 +122,8 @@
 		  module-adjustable
 		- Make 'drop undeliverable' rate configurable.
 		- Implement allow/deny code
+		- Make server gripe loudly when config doesn't match published
+		  serverinfo.
 	- Client support
 		- Generate a reply block
 		- Read message from reply block
@@ -143,7 +152,7 @@
 		- End-to-end payload encryption, if we ever agree on a spec.
 		- Reading messages sent to reply blocks
 		- Correct implementation of stateless reply blocks
-SPEC		- Patch to address George's 15August attack
+SPEC		o Patch to address George's 15August attack
 	- Test on other (non-redhat, non-linux) systems
 	- Directories
 		- ServerInfo: complete validation rules