summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--radsecproxy.c12
1 files changed, 10 insertions, 2 deletions
diff --git a/radsecproxy.c b/radsecproxy.c
index 4f16987..9d55d4f 100644
--- a/radsecproxy.c
+++ b/radsecproxy.c
@@ -12,8 +12,16 @@
/* TODO:
* make our server ignore client retrans and do its own instead?
- * tls keep alives (server status)
- * tls certificate validation
+ * accounting
+ * radius keep alives (server status)
+ * tls certificate validation, see below urls
+ * clean tls shutdown, see http://www.linuxjournal.com/article/4822
+ * and http://www.linuxjournal.com/article/5487
+ * SSL_shutdown() and shutdown()
+ * If shutdown() we may not need REUSEADDR
+ * when tls client goes away, ensure that all related threads and state
+ * are removed
+ * setsockopt(keepalive...), check if openssl has some keepalive feature
*/
/* For UDP there is one server instance consisting of udpserverrd and udpserverth