Bug reports after 2.6.14 is out.
I've already received three different serious bug reports about problems with
netfilter/iptables in 2.6.14. This is frustrating, considering how long the
2.6.14 development cycle was. People should try new features of a new kernel
_before_ there is a release. Afterwards it's too late.
Basic Access Control
It seems like even though the specification looks quite verbose upon first
sight, there are many tiny pitfalls in implementing basic access control
according to the TR-PKI 1.1 specification.
Padding is such an issue. You always pad for DES en/decryption, _but not_ if
you are in the mutual authenticate command ;)
I now have the key derivation, authentication and setup of session keys
working. Secure Messaging still has some problems with regard to the DES
retail MAC. Let's hope I get this finished soon.
Insurance against GPL violations
According to this
zdnet.com article, there is now an insurance against legal risks from
violating Free Software Licenses.
Strangely, that article claims the insurance is about "the risk of using open
source software". This is misleading, since there is no risk involved in
_using_ the software. There is, like with any other software, a risk when you
violate the license.
One wonders when we'll get such an insurance for "the risks of using proprietary software [without obtaining a license]".