Long time ago I wrote some code to support SET/ACK IKE Mode Config for isakmpd when acting as responder, i.e. VPN-gateway et.al., which has not been completly functional, because of some strange side-effect in isakmpd. Today due to "inspiration" by Clemens Draschl and Ralf Hornik I've tested the code with a recent CVS version of isakmpd and it worked! Get the patch!
Someone eagerly demanded a version of ldapclient with LDAP Search Filter support. So others also might be interested in this patch. After applying it you can do such nifty things as the following (or even more complicated stuff):
thomas@tyr:~/src/tinyldap$ ./ldapclient 130.157.5.18 \ > 'o=Sonoma State University, C=US' \ > '(&(cn=S*t*e*)(description=*Professor*)(!(description=*History*)))' \ > cn mail description requesting mail requesting description [..]
About a month ago I finished writing my "Seminarfacharbeit" about "Sicherere latenzarme Kommunikationswege mit IPsec" (Get it!).
Also sometime ago Fefe accepted my scan_ldapsearchfilterstring for tinyldap. It parses LDAP Search Filters. I guess there will be a more versatile ldapclient in tinyldap really soon. This will nearly eliminate the need for OpenLDAP's ldapsearch ;-).
This week my CRL support for isakmpd has made it into OpenBSD's CVS :-). It makes the use of isakmpd in very large VPN scenarios more feasible.
At the moment I'm also thinking about writing a small HTTP proxy, which allows proxy-chaining and external filters. Squid is too heavyweight for my purpose.
New HTML Parser: The long-awaited libxml2 based HTML parser code is live. It needs further work but already handles most markup better than the original parser.
Keep up with the latest Advogato features by reading the Advogato status blog.
If you're a C programmer with some spare time, take a look at the mod_virgule project page and help us with one of the tasks on the ToDo list!
