4 ** Make parsing more robust
5 Currently we don't cope with overlong lines in the best way.
8 ** The protocol uses an incomplete S-expression
9 We should always use valid S-Exp and not just parts.
10 ** Some code should go into import.c
11 ** When we allow concurrent service request in gpgsm, we
12 might want to have an agent context for each service request
13 (i.e. Assuan context).
16 ** Improve error reporting
17 ** Do some basic checks on the supplied DNs
20 ** When a certificate chain was sucessfully verified, make ephemeral certs used in this chain permanent.
21 ** figure out how to auto retrieve a key by serialno+issuer.
22 Dirmngr is currently not able to parse more than the CN.
23 ** Try all available root certs in case we have several of them in our keybox.
24 For example TC TrustCenter Class 1 CA certs are ambiguous becuase
25 user certs don't come with a authorityKeyIdentifier.
28 ** replace leading zero in integer hack by a cleaner solution
31 ** Don't hardcode the use of RSA.
35 ** mark all unimplemented commands and options.
38 ** Check file permissions
39 ** Write a keybox header and check for that magic value.
40 ** Check that all error code mapping is done.
41 ** Remove the inter-module dependencies between gpgsm and keybox
42 ** Add an source_of_key field
45 ** Make sure that secure memory is used where appropriate
47 * agent/pkdecrypt.c, agent/pksign.c
48 ** Don't use stdio to return results.
50 * agent/protect-tool.c
51 ** Export and import certificates along with the secret key.
52 ** Make it more comfortable; i.e. copy files to the correct place.
54 * Move pkcs-1 encoding into libgcrypt.
56 * Use a MAC to protect some files.
59 ** Return an error code or a status info per user ID.
62 ** We need close_reader functionality
65 ** Return IMPORT_OK status.
67 * Where is http.c, regcomp.c, srv.c, w32reg.c ?
70 ** Enhance with card compatibility check