sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-05 00:00:45 -04:00
Code Issues Projects Releases Wiki Activity
18,534 Commits 101 Branches 327 Tags
Commit Graph

46 Commits

Author SHA1 Message Date
Tobias Brunner
3a52fc83f8 testing: Load kdf plugin in all scenarios that require it 
Once we use plugin-provided prf+() these won't work otherwise.
 2022-04-14 19:02:48 +02:00
Tobias Brunner
84bce03a64 testing: Fix SQL scenarios after preferring AEAD for ESP 
sql/net2net-route|start-pem seem to be the only ones that configure a
proposal via database.
 2020-06-12 13:45:58 +02:00
Andreas Steffen
00f1d09729 testing: Build data.sql files for SQL test cases 2019-05-08 14:56:48 +02:00
Tobias Brunner
35392aa869 testing: Use renamed systemd unit 
While the alias is available after enabling the unit, we don't
actually do that in our testing environment (adding a symlink manually
would work too, then again, why not just use the proper name?).
 2019-04-24 13:57:48 +02:00
Tobias Brunner
351a08e1ff testing: Fix swanctl --list-sas checks in some scenarios 
::YES was missing (or written as ::YES]) rendering those checks void.
Turns out some of them actually were wrong.
 2017-12-22 10:22:47 +01:00
Tobias Brunner
be214cb17e testing: Globally define logging via syslog for charon-systemd 
We could make the same change for charon (actually setting it for charon
in strongswan.conf.testing would work for charon-systemd too), however,
there are dozens of test cases that currently set charondebug in
ipsec.conf.
 2017-11-15 17:09:55 +01:00
Andreas Steffen
323f0b05d7 testing: Converted sql to systemd 2017-11-11 16:41:15 +01:00
Tobias Brunner
8f56bbc82b testing: Update test scenarios for Debian jessie 
The main difference is that ping now reports icmp_seq instead of
icmp_req, so we match for icmp_.eq, which works with both releases.

tcpdump now also reports port 4500 as ipsec-nat-t.
 2016-06-16 14:04:11 +02:00
Andreas Steffen
07b0eac4b1 testing: attr-sql is a charon plugin 2016-03-05 15:53:22 +01:00
Andreas Steffen
1989c7a381 testing: Include IKE port information in evaltests 2016-03-05 13:44:06 +01:00
Tobias Brunner
28649f6d91 libhydra: Remove empty unused library 2016-03-03 17:36:11 +01:00
Tobias Brunner
4625113b1a testing: Use absolute path to the _updown script in SQL scenarios 
/usr/local/sbin is not included in PATH set by the charon init script and
since the ipsec script is obsolete when using swanctl it makes sense to
change this anyway.
 2016-02-17 12:00:20 +01:00
Andreas Steffen
9db530493f testing: Change sql scenarios to swanctl 2016-01-03 06:28:48 +01:00
Tobias Brunner
10051b01e9 testing: Reduce runtime of all tests that use SQLite databases by storing them in ramfs 2015-11-09 15:18:39 +01:00
Tobias Brunner
f519acd42f testing: Remove nearly all sleep calls from pretest and posttest scripts 
By consistently using the `expect-connection` helper we can avoid pretty
much all previously needed calls to sleep.
 2015-11-09 15:18:35 +01:00
Andreas Steffen
100c1a4bf1 testing: Updated certificates and keys in sql scenarios 2014-10-06 09:42:58 +02:00
Martin Willi
44b6a34d43 configure: Load fetcher plugins after crypto base plugins 
Some fetcher plugins (such as curl) might build upon OpenSSL to implement
HTTPS fetching. As we set (and can't unset) threading callbacks in our
openssl plugin, we must ensure that OpenSSL functions don't get called after
openssl plugin unloading.

We achieve that by loading curl and all other fetcher plugins after the base
crypto plugins, including openssl.
 2014-09-24 17:34:54 +02:00
Tobias Brunner
96e8715e32 testing: Use installed SQL schema instead of local copy 2014-02-12 14:08:34 +01:00
Tobias Brunner
b1169a880a Updated comments in test.conf of all tests 2013-01-17 16:56:02 +01:00
Tobias Brunner
7699a928f7 Renamed $UMLHOSTS to $VIRTHOSTS 2013-01-17 16:56:02 +01:00
Andreas Steffen
136f74161b converted all sql iptables scenarios 2013-01-17 16:55:02 +01:00
Reto Buerki
533177003c Adapt test configurations 
Adapt test configurations to the new Debian-based system.
 2013-01-17 15:22:07 +01:00
Andreas Steffen
daa857029f removed plutostart parameter 2012-06-13 21:19:05 +02:00
Andreas Steffen
31c83b973e load nonce plugin 2012-05-23 15:05:57 +02:00
Andreas Steffen
84b291e668 upgraded sql scenarios to 5.0.0 2012-05-05 09:16:15 +02:00
Andreas Steffen
6ae024392b removed xcbc plugin from sql scenarios 2011-11-01 00:16:35 +01:00
Andreas Steffen
1e6cc07ee4 stop gateway after clients in order to check release of virtual IP 2010-09-26 10:58:28 +02:00
Andreas Steffen
cde633d632 all x509 based sql scenarios require the revocation plugin 2010-07-15 23:19:52 +02:00
Andreas Steffen
1ae9353d8a fixed keyids in sql/ip-pool-db-restart scenario 2010-05-15 13:22:49 +02:00
Andreas Steffen
7d00ebfb54 wait one second before running evaluations 2010-04-06 10:55:59 +02:00
Andreas Steffen
5d91d4c6d7 moved attr-sql plugin to libhydra in pool scenarios 2010-03-28 22:33:30 +02:00
Tobias Brunner
a5166b16a1 Adding socket-default to the plugin list in all test cases. 2010-03-09 17:43:21 +01:00
Andreas Steffen
247794827e move SQL-based pool functionality to new attr-sql libstrongswan plugin 2009-10-13 17:02:29 +02:00
Martin Willi
91cb348cc2 CA certificates are looked up using the subjectPublicKeyInfo keyid 2009-09-21 18:13:25 +02:00
Andreas Steffen
afcd0b9787 updated to renewed certs in SQL database 2009-09-18 21:22:37 +02:00
Martin Willi
9412bbfa7c use subjectPublicKeyInfo hash for CA certificate lookup 2009-09-01 14:06:44 +02:00
Martin Willi
16db1207cf keyids in SQL use ID_KEY_ID type with subjectPublicKey SHA1 hash 2009-08-26 11:23:55 +02:00
Martin Willi
41f57038e4 tests load pem/pkcs1 plugins, pubkey plugin not needed anymore 2009-08-26 11:23:55 +02:00
Andreas Steffen
04409bbb74 suppress leak-detective stderr output in ipsec pool 2008-12-04 03:31:53 +00:00
Andreas Steffen
2d1000d14e include updown plugin in sql scenarios 2008-10-21 22:28:29 +00:00
Andreas Steffen
e8c58d8e64 explicitly load kernel-netlink plugin in UML scenarios 2008-10-07 04:51:20 +00:00
Andreas Steffen
77a06476dc adapted UML scenarios to improved virtual IP address pool 2008-07-25 10:18:23 +00:00
Andreas Steffen
c7fa158852 used ipsec pool --leases --filter option in evaltest.dat 2008-06-21 13:31:54 +00:00
Andreas Steffen
76340368a6 divided ipsec.sql into tables.sql and data.sql 2008-05-31 08:53:48 +00:00
Andreas Steffen
c9be754a45 define plugins to be loaded in strongswan.conf 2008-05-28 08:29:51 +00:00
Andreas Steffen
59495f8ae2 added the sql/ip-pool-db-restart and sql/ip-pool-db-expired scenarios 2008-05-20 18:30:39 +00:00