Fridolín Pokorný

Always use a sequence in args to subprocess.Popen()

6

According to docs, it is recommended to pass args as a sequence.

Adapt return values

1

Return values should be disjoint from ones from calls to other parts of the kernel. This will give us ability to clarify what went wrong (e.g. there was an error...

OpenConnect protocol support

1

OpenConnect protocol support is currently not finished. Instead of hardcoding every protocol or rule, AF_KTLS can be extended with [Linux Socket Filtering](https://www.kernel.org/doc/Documentation/networking/filter.txt) support. This needs inspection and suitability study.

AF_KTLS and PF_KTLS in kernel headers

1

`include/linux/socket.h` should cover AF_KTLS socket. For now, you have to choose unused protocol family in order to do `insmod`.

DTLS window handling from user space

2

The current implementation of DTLS sliding window handling behaves correctly only if there are no out of order DTLS records. If we receive a record that is not at the...

As stated in [1], DTLS sliding window should always advance not to drop 'too new' records. This also conforms to RFCs [2. 3]. A patch for this by David Woodhouse...

There are needed multiple `setsockopt(2)` calls for passing key material to kernel. It would be nice to consider to introduce one `setsockopt(2)` call, which would pass needed key material at...

SSIA

## Issue description: It might be nice to have CI setup to verify each PR coming to the codebase.

Make Celery pluggable

9

It would be nice to abstract Celery and make it pluggable. With this change, it would be possible to define own backend that respects certain interface (the relevant ones would...