Andreas Steffen
f43850b3b9
Version bump to 5.5.2dr5
2017-02-23 17:31:11 +01:00
Tobias Brunner
0c549169c4
testing: Fix ALLOWED_HOSTS in strongTNC settings.ini
2017-02-16 18:24:25 +01:00
Tobias Brunner
150a902b83
testing: Fix swanctl/ocsp-disabled scenario after changing the log messages
2017-02-16 17:51:16 +01:00
Andreas Steffen
9ad147ac63
Version bump to 5.5.2dr4
2017-01-02 15:46:27 +01:00
Andreas Steffen
91a4a4aa83
testing: Added swanctl/ocsp-disabled scenario
2017-01-02 14:34:39 +01:00
Andreas Steffen
db0953d41f
testing: Added swanctl/ocsp-signer-cert scenario
2017-01-02 14:34:18 +01:00
Andreas Steffen
08253bbba3
testing: Convert swanctl scenarios to curve-25519
2016-12-30 16:22:12 +01:00
Andreas Steffen
65797c9faf
Version bump to 5.5.2dr3 and Linux kernel 4.9
2016-12-17 18:10:13 +01:00
Andreas Steffen
470e61ae77
testing: strongTNC does not come with django.db any more
2016-12-17 18:09:20 +01:00
Andreas Steffen
3c1e5ad6ce
testing: Added ikev2/net2net-ed25519 scenario
2016-12-17 18:07:29 +01:00
Andreas Steffen
94ae1ac18e
Added swanctl/net2net-ed2559 scenario and needed Ed25519 certificates
2016-12-14 11:15:48 +01:00
Andreas Steffen
011195f1a9
Version bump to 5.5.2dr2
2016-11-14 16:20:51 +01:00
Andreas Steffen
99c03e9a11
testing: make curve25519 the default DH group
2016-11-14 16:20:51 +01:00
Andreas Steffen
4a97999466
Version bump to 5.5.2dr1
2016-10-30 17:34:05 +01:00
Andreas Steffen
e6a4bd83ff
Version bump to 5.5.1
2016-10-20 12:57:00 +02:00
Andreas Steffen
4d77fcbec9
Version bump to 5.5.1rc2
2016-10-18 18:14:57 +02:00
Andreas Steffen
ba6c7a52c0
testing: Renewed expired certificates
2016-10-18 18:13:58 +02:00
Andreas Steffen
d167776ff9
testing: enable MACsec in guest kernel
2016-10-18 16:25:19 +02:00
Andreas Steffen
a617223ed5
Version bump to 5.5.1rc1
2016-10-11 19:21:36 +02:00
Andreas Steffen
85b5a6ace2
Save both base and delta CRLs to disk
2016-10-11 17:18:22 +02:00
Andreas Steffen
2a2669ee3e
vici: strongswan.conf cache_crls = yes saves fetched CRLs to disk
2016-10-11 17:18:22 +02:00
Tobias Brunner
597e057b9e
testing: Remove ikev2/default-keys scenario
...
No default keys are generated anymore.
2016-10-05 12:25:29 +02:00
Tobias Brunner
62636da4f3
testing: Enable outbound FWD policies in swanctl/manual-prio scenario
2016-09-28 17:56:43 +02:00
Andreas Steffen
a9562a3f58
testing: Added swanctl/net2net-multicast scenario
2016-09-27 18:36:28 +02:00
Andreas Steffen
d7e0ce2878
testing: Added ikev2/net2net-multicast scenario
2016-09-27 18:36:28 +02:00
Andreas Steffen
6b3e408ba5
Version bump to 5.5.1dr5
2016-09-22 17:36:37 +02:00
Andreas Steffen
d505658038
testing: Added swanctl/net2net-sha3-rsa-cert and swanctl/rw-eap-tls-sha3-rsa scenarios
2016-09-22 17:34:31 +02:00
Andreas Steffen
40f2589abf
gmp: Support of SHA-3 RSA signatures
2016-09-22 17:34:31 +02:00
Andreas Steffen
e31ed9ab98
Version bump to 5.5.1dr4
2016-09-21 14:14:42 +02:00
Andreas Steffen
188b190a70
mgf1: Refactored MGF1 as an XOF
2016-09-21 06:40:52 +02:00
Tobias Brunner
b69cbacdfb
testing: Use curl instead of soup plugin in libipsec/rw-suite-b scenario
...
The soup plugin is already used in the openssl-ikev2/rw-suite-b*
scenarios.
2016-09-20 15:36:15 +02:00
Tobias Brunner
6307a18fe1
testing: Fix totals if post test checks fail
2016-09-20 15:36:14 +02:00
Tobias Brunner
d8b2980aa5
testing: Log leaks and fail tests if any are detected
2016-09-20 15:36:14 +02:00
Tobias Brunner
ac67aeb100
testing: Add output of iptables-save
...
This might be helpful to get the complete picture of the installed
rules. `-c` is currently not used as the counters that are added in
front of every rule make the output quite hard to read and the counters
are already provided in the accompanying `iptables -v -L` output.
Fixes #2111 .
2016-09-12 16:15:45 +02:00
Tobias Brunner
fa36699bfa
testing: List nat and mangle tables in addition to the filter table
...
This is useful in scenarios that e.g. use NAT and/or marks.
References #2111 .
2016-09-12 16:15:14 +02:00
Tobias Brunner
92ccc0b412
testing: Ignore comments (lines starting with #) in pre-/eval-/posttest.dat
2016-09-09 12:19:14 +02:00
Tobias Brunner
379d94eb70
testing: Try to properly abort a test run after CTRL-C
...
The run is aborted after the current scenario. Depending on which
command was interrupted it might be necessary to press CTRL-C multiple
times (e.g. if a later command depends on the interrupted one).
This should fix HTML files and get us some proper console output after
the run.
2016-08-30 16:16:42 +02:00
Tobias Brunner
bdd7c42fc0
testing: Report number of tests per subdirectory in main index
2016-08-30 15:03:40 +02:00
Tobias Brunner
dda06b0439
testing: Mount and serve testresults from the host
...
This avoids having to copy testresults, makes results of cancelled runs
browsable (runs may actually be followed live) and preserves old results
when rebuilding guest images (e.g. when using the build-strongswan script).
The number of consecutive test runs without any intermittent rebuild of the
guest images is also not limited by the image size anymore.
2016-08-29 18:11:42 +02:00
Tobias Brunner
7a8985b575
testing: Create a symlink to the testresults under a known path when starting the environment
2016-08-29 18:11:42 +02:00
Tobias Brunner
cf6042453f
testing: Serve images in testresults via mod_rewrite and not a symlink
2016-08-29 18:11:42 +02:00
Andreas Steffen
d2577aa3c5
Version bump to 5.5.1dr2
2016-08-26 22:55:41 +02:00
Andreas Steffen
ce20979ce2
testing: Virtual IPs went missing
2016-08-16 17:18:17 +02:00
Andreas Steffen
5afaf0dba2
Version bump to 5.5.1dr1
2016-08-10 18:11:53 +02:00
Andreas Steffen
c1a1f9f548
testing: Added swanctl/rw-newhope-bliss scenario
2016-08-10 15:14:26 +02:00
Andreas Steffen
1e0dc2c329
testing: Add chapoly, ntru and newhope plugins to crypto and integrity tests
2016-08-10 14:34:27 +02:00
Andreas Steffen
277ef8c2fa
testing: Added ikev2/rw-newhope-bliss scenario
2016-08-10 14:22:00 +02:00
Andreas Steffen
74de8c3727
Version bump to 5.5.0
2016-07-13 13:26:16 +02:00
Tobias Brunner
5e5dee36b6
testing: Remove obsolete openssl-fips recipe
...
This was only required when we initially started and OpenSSL was built
from sources, which was changed with b97dd59ba841 ("install FIPS-aware
OpenSSL Debian packages").
2016-07-04 12:18:51 +02:00
Tobias Brunner
7b879874d7
Revert "testing: Only load selected plugins in swanctl"
...
This reverts commit dee01d019ba9743b2784b417155601d10c173a66.
Thanks to 505c31870162 ("leak-detective: Try to properly free
allocations after deinitialization") this is not required anymore.
2016-07-01 17:35:52 +02:00
