sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-12-15 00:00:26 -05:00
Code Issues Projects Releases Wiki Activity

enabled crl fetching using crlcheckinterval != 0

Browse Source
This commit is contained in:
Andreas Steffen 2007-04-05 17:40:33 +00:00
parent 1d1e55b4c3
commit 389623374f
64 changed files with 50 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=yes
plutostart=no

1
testing/tests/ikev2/crl-revoked/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=yes
plutostart=no

1
testing/tests/ikev2/crl-revoked/pretest.dat
View File

@ -1,4 +1,3 @@
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
moon::ipsec start
carol::ipsec start
carol::sleep 1

1
testing/tests/ikev2/crl-strict/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=yes
plutostart=no

1
testing/tests/ikev2/crl-strict/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=yes
plutostart=no

2
testing/tests/ikev2/crl-strict/pretest.dat
View File

@ -1,5 +1,3 @@
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
moon::ipsec start
carol::ipsec start
carol::sleep 1

1
testing/tests/ikev2/double-nat-net/hosts/alice/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/double-nat-net/hosts/bob/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/double-nat/hosts/alice/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/double-nat/hosts/bob/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/dpd-clear/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/dpd-clear/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/dpd-hold/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/dpd-hold/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/dpd-restart/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/dpd-restart/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/host2host-cert/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/host2host-cert/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/host2host-swapped/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/host2host-swapped/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/host2host-transport/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/host2host-transport/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/nat-one-rw/hosts/alice/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/nat-one-rw/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/nat-two-rw/hosts/alice/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/nat-two-rw/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/nat-two-rw/hosts/venus/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/net2net-cert/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/net2net-cert/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

2
testing/tests/ikev2/net2net-cert/posttest.dat
View File

@ -2,6 +2,4 @@ moon::ipsec stop
sun::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
sun::/etc/init.d/iptables stop 2> /dev/null
moon::rm /etc/ipsec.d/crls/*
sun::rm /etc/ipsec.d/crls/*

2
testing/tests/ikev2/net2net-cert/pretest.dat
View File

@ -1,7 +1,5 @@
moon::/etc/init.d/iptables start 2> /dev/null
sun::/etc/init.d/iptables start 2> /dev/null
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
sun::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
moon::ipsec start
sun::ipsec start
moon::sleep 1

1
testing/tests/ikev2/net2net-route/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/net2net-route/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/net2net-start/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/net2net-start/hosts/sun/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/ocsp-untrusted-cert/hosts/carol/etc/ipsec.conf
View File

@ -1,7 +1,6 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=yes
plutostart=no

1
testing/tests/ikev2/ocsp-untrusted-cert/hosts/moon/etc/ipsec.conf
View File

@ -1,7 +1,6 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=yes
plutostart=no

2
testing/tests/ikev2/ocsp-untrusted-cert/posttest.dat
View File

@ -1,4 +1,2 @@
moon::ipsec stop
carol::ipsec stop
moon::iptables -F OUTPUT
carol::iptables -F OUTPUT

2
testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat
View File

@ -1,5 +1,3 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
moon::ipsec start
carol::ipsec start
carol::sleep 2

1
testing/tests/ikev2/protoport-dual/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/protoport-dual/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/protoport-route/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/protoport-route/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/rw-cert/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/rw-cert/hosts/dave/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/rw-cert/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

3
testing/tests/ikev2/rw-cert/posttest.dat
View File

@ -4,6 +4,3 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
moon::rm /etc/ipsec.d/crls/*
carol::rm /etc/ipsec.d/crls/*
dave::rm /etc/ipsec.d/crls/*

3
testing/tests/ikev2/rw-cert/pretest.dat
View File

@ -1,9 +1,6 @@
moon::/etc/init.d/iptables start 2> /dev/null
carol::/etc/init.d/iptables start 2> /dev/null
dave::/etc/init.d/iptables start 2> /dev/null
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
moon::ipsec start
carol::ipsec start
dave::ipsec start

1
testing/tests/ikev2/rw-psk-rsa-mixed/hosts/dave/etc/ipsec.conf
View File

@ -2,6 +2,7 @@
config setup
strictcrlpolicy=no
crlcheckinterval=180
plutostart=no
conn %default

1
testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

3
testing/tests/ikev2/rw-psk-rsa-mixed/posttest.dat
View File

@ -4,6 +4,3 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
moon::rm /etc/ipsec.d/crls/*
carol::rm /etc/ipsec.d/crls/*
dave::rm /etc/ipsec.d/crls/*

4
testing/tests/ikev2/rw-psk-rsa-mixed/pretest.dat
View File

@ -1,9 +1,7 @@
moon::/etc/init.d/iptables start 2> /dev/null
carol::/etc/init.d/iptables start 2> /dev/null
dave::/etc/init.d/iptables start 2> /dev/null
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
carol::rm /etc/ipsec.d/cacerts/*
moon::ipsec start
carol::ipsec start
dave::ipsec start

2
testing/tests/ikev2/rw-psk-rsa-split/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,8 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no
conn %default

1
testing/tests/ikev2/rw-psk-rsa-split/hosts/dave/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

3
testing/tests/ikev2/rw-psk-rsa-split/posttest.dat
View File

@ -4,6 +4,3 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
moon::rm /etc/ipsec.d/crls/*
carol::rm /etc/ipsec.d/crls/*
dave::rm /etc/ipsec.d/crls/*

3
testing/tests/ikev2/rw-psk-rsa-split/pretest.dat
View File

@ -1,9 +1,6 @@
moon::/etc/init.d/iptables start 2> /dev/null
carol::/etc/init.d/iptables start 2> /dev/null
dave::/etc/init.d/iptables start 2> /dev/null
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
moon::ipsec start
carol::ipsec start
dave::ipsec start

1
testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

3
testing/tests/ikev2/strong-keys-certs/posttest.dat
View File

@ -4,9 +4,6 @@ dave::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
carol::/etc/init.d/iptables stop 2> /dev/null
dave::/etc/init.d/iptables stop 2> /dev/null
moon::rm /etc/ipsec.d/crls/*
carol::rm /etc/ipsec.d/crls/*
dave::rm /etc/ipsec.d/crls/*
moon::rm /etc/ipsec.d/private/*
carol::rm /etc/ipsec.d/private/*
dave::rm /etc/ipsec.d/private/*

3
testing/tests/ikev2/strong-keys-certs/pretest.dat
View File

@ -1,9 +1,6 @@
moon::/etc/init.d/iptables start 2> /dev/null
carol::/etc/init.d/iptables start 2> /dev/null
dave::/etc/init.d/iptables start 2> /dev/null
moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
moon::ipsec start
carol::ipsec start
dave::ipsec start

1
testing/tests/ikev2/wildcards/hosts/carol/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/wildcards/hosts/dave/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no

1
testing/tests/ikev2/wildcards/hosts/moon/etc/ipsec.conf
View File

@ -1,6 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
crlcheckinterval=180
strictcrlpolicy=no
plutostart=no