sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-07 00:01:49 -04:00
Code Issues Projects Releases Wiki Activity
14,572 Commits 100 Branches 327 Tags
Commit Graph

971 Commits

Author SHA1 Message Date
Reto Buerki
847d320950 Implement net2net-initiator integration test 2013-03-19 15:23:50 +01:00
Reto Buerki
d8b2064a34 Add xfrm_proxy integration test 2013-03-19 15:23:50 +01:00
Reto Buerki
3150dbd3e3 Add TKM responder integration test 2013-03-19 15:23:50 +01:00
Reto Buerki
117375ed00 Add initial TKM integration test 
A connection between the hosts moon and sun is set up. The host moon
uses the Trusted Key Manager (TKM) and is the initiator of the transport
connection. The authentication is based on X.509 certificates.
 2013-03-19 15:23:50 +01:00
Andreas Steffen
f7580a5a67 added openssl-ikev2/alg-aes-gcm scenario 2013-03-03 11:43:52 +01:00
Andreas Steffen
81419b9748 use DNs in tnc/tnccs-20-tls scenario 2013-03-03 10:47:17 +01:00
Andreas Steffen
f0c102cbfa Added ikev2/rw-dnssec scenario 2013-02-19 12:25:01 +01:00
Andreas Steffen
1d4ff25fb8 Added ikev2/net2net-dnssec scenario 2013-02-19 12:25:01 +01:00
Andreas Steffen
5374fe3a09 added ikev1/net2net-fragmentation scenario 2013-02-12 23:01:48 +01:00
Andreas Steffen
7d355f853d use EAP identity in tnc/tnccs-20-pdp scenario 2013-02-12 20:41:37 +01:00
Tobias Brunner
812cd9c18a Removed UML from description of ikev2/default-keys test 2013-01-17 16:56:02 +01:00
Tobias Brunner
b1169a880a Updated comments in test.conf of all tests 2013-01-17 16:56:02 +01:00
Tobias Brunner
7699a928f7 Renamed $UMLHOSTS to $VIRTHOSTS 2013-01-17 16:56:02 +01:00
Reto Buerki
88bffacfdc Drop vim swap file 2013-01-17 16:55:04 +01:00
Reto Buerki
c25f850601 Drop obsolete Gentoo dhcpd init script 2013-01-17 16:55:03 +01:00
Reto Buerki
530f7b8421 No need to enable ip_forward in pretest files 
It is enabled by default now.
 2013-01-17 16:55:03 +01:00
Andreas Steffen
44e533b88e converted ha/both-active iptables scenario 2013-01-17 16:55:03 +01:00
Andreas Steffen
5c09942d54 converted all ipv6 iptables/ip6tables scenarios 2013-01-17 16:55:03 +01:00
Andreas Steffen
a0ffe67fab converted all p2pnat iptables scenarios 2013-01-17 16:55:02 +01:00
Andreas Steffen
472a411aa8 converted all tnc iptables scenarios 2013-01-17 16:55:02 +01:00
Andreas Steffen
cedc96c2c4 implemented ip6tables.rules 2013-01-17 16:55:02 +01:00
Andreas Steffen
136f74161b converted all sql iptables scenarios 2013-01-17 16:55:02 +01:00
Andreas Steffen
6fff9d9ace converted all pfkey iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen
8fbb9458d6 converted all openssl-ikev2 iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen
44047e7adb converted all openssl-ikev1 iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen
61ab7db386 converted all gcrypt-ikev2 iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen
1dc14281fc converted all af-alg iptables scenarios 2013-01-17 16:55:01 +01:00
Andreas Steffen
ac09da8e50 added ikev1/nat-virtual-ip scenario 2013-01-17 16:55:00 +01:00
Andreas Steffen
ca0128588f converted all ikev1 iptables scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen
d815235d17 use iptables-restore in all ikev2 firewall scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen
28b7db2b3c Updated mark_update script in several IKEv2 scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen
9b4477d5b8 activated iptables in some ikev2 scenarios 2013-01-17 16:55:00 +01:00
Andreas Steffen
8e75e8dfa7 Fixed NO evaltest in tnc/tnccs-20-pdp scenario 2013-01-17 16:54:59 +01:00
Andreas Steffen
9c36018cc7 Disable IPv4 forwarding on carol in order to pass tnc/tnccs-20-os scenario 2013-01-17 16:54:59 +01:00
Reto Buerki
602ba2f6d1 Adjust ikev2/farp test to qemu network interfaces 2013-01-17 16:54:58 +01:00
Reto Buerki
7fa92110e8 Adjust ikev2/dhcp tests to qemu network interfaces 2013-01-17 16:54:57 +01:00
Reto Buerki
76ccd25a05 Add expect-connection guest image script 
This script can be used in pretest.dat files to wait until an IPsec
connection becomes available. This avoids unconditional sleeps and
improves test performance.

The ipv6 tests have been updated to use the expect-connection script.
 2013-01-17 16:54:55 +01:00
Reto Buerki
533177003c Adapt test configurations 
Adapt test configurations to the new Debian-based system.
 2013-01-17 15:22:07 +01:00
Andreas Steffen
ef214f2855 added ike2/rw-eap-md5-class-radius scenario 2012-11-21 06:05:34 +01:00
Andreas Steffen
7c49d77982 updated parameters 2012-11-12 10:45:38 +01:00
Andreas Steffen
a9c9414d58 implemented IETF Numeric Version attribute 2012-10-18 22:33:26 +02:00
Andreas Steffen
ef315c5a1c implemented IETF Remediation Instructions attribute 2012-10-18 18:24:26 +02:00
Andreas Steffen
154cae09e3 increased IMC/IMV debug level to 3 2012-10-17 10:02:53 +02:00
Andreas Steffen
4abe404d27 added tnc/tnccs-20-os scenario 2012-10-12 09:50:15 +02:00
Andreas Steffen
e97602151a removed ikev2/dynamic-responder scenario 2012-09-22 17:50:57 +02:00
Andreas Steffen
04bb739578 do not enable integrity and crypto tests in ikev1/rw-cert-unity scenario 2012-09-21 21:26:52 +02:00
Tobias Brunner
0d33f428d1 Move rw-eap-dynamic scenario to its proper location 2012-09-21 09:34:10 +02:00
Martin Willi
995a9c8a0a Add a simple test case for the unity plugin, featuring both includes and excludes 2012-09-18 17:20:47 +02:00
Martin Willi
56ea95195a Add a road-warrior test case requesting both an IPv4 and an IPv6 virtual address 2012-09-18 17:11:03 +02:00
Andreas Steffen
979027ae04 ikev1 hybrid authentication does not need client certificates 2012-09-12 12:42:24 +02:00