2006-04-28 07:14:48 +00:00
|
|
|
#!/bin/bash
|
|
|
|
# Global configuration file for strongswan UML testing.
|
|
|
|
#
|
|
|
|
# Copyright (C) 2004 Eric Marchionni, Patrik Rayo
|
|
|
|
# Zuercher Hochschule Winterthur
|
|
|
|
#
|
|
|
|
# This program is free software; you can redistribute it and/or modify it
|
|
|
|
# under the terms of the GNU General Public License as published by the
|
|
|
|
# Free Software Foundation; either version 2 of the License, or (at your
|
|
|
|
# option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful, but
|
|
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
|
|
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
|
|
# for more details.
|
|
|
|
|
|
|
|
# Root directory of testing
|
2008-03-13 14:20:20 +00:00
|
|
|
UMLTESTDIR=~/strongswan-testing
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Bzipped kernel sources
|
|
|
|
# (file extension .tar.bz2 required)
|
2012-05-02 20:53:11 +00:00
|
|
|
KERNEL=$UMLTESTDIR/linux-3.3.4.tar.bz2
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Extract kernel version
|
|
|
|
KERNELVERSION=`basename $KERNEL .tar.bz2 | sed -e 's/linux-//'`
|
|
|
|
|
|
|
|
# Kernel configuration file
|
2012-04-22 20:22:25 +00:00
|
|
|
KERNELCONFIG=$UMLTESTDIR/.config-3.3
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Bzipped uml patch for kernel
|
2011-12-12 16:00:50 +00:00
|
|
|
UMLPATCH=$UMLTESTDIR/ha-3.0.patch.bz2
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Bzipped source of strongSwan
|
2012-05-02 20:53:11 +00:00
|
|
|
STRONGSWAN=$UMLTESTDIR/strongswan-5.0.0.tar.bz2
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# strongSwan compile options (use "yes" or "no")
|
|
|
|
USE_LIBCURL="yes"
|
|
|
|
USE_LDAP="yes"
|
2007-12-19 00:47:56 +00:00
|
|
|
USE_EAP_AKA="yes"
|
2008-09-19 13:20:09 +00:00
|
|
|
USE_EAP_SIM="yes"
|
2008-05-25 10:35:39 +00:00
|
|
|
USE_EAP_MD5="yes"
|
2009-02-19 22:02:28 +00:00
|
|
|
USE_EAP_MSCHAPV2="yes"
|
2008-08-26 19:17:14 +00:00
|
|
|
USE_EAP_IDENTITY="yes"
|
2009-03-25 07:26:53 +00:00
|
|
|
USE_EAP_RADIUS="yes"
|
2010-08-04 05:47:08 +00:00
|
|
|
USE_EAP_TLS="yes"
|
2010-08-14 19:40:05 +00:00
|
|
|
USE_EAP_TTLS="yes"
|
2011-04-06 12:42:02 +00:00
|
|
|
USE_EAP_PEAP="yes"
|
2010-08-30 13:36:24 +00:00
|
|
|
USE_EAP_TNC="yes"
|
2011-11-13 20:56:47 +00:00
|
|
|
USE_TNC_PDP="yes"
|
2010-10-07 21:31:23 +00:00
|
|
|
USE_TNC_IMC="yes"
|
|
|
|
USE_TNC_IMV="yes"
|
2010-09-28 21:34:04 +00:00
|
|
|
USE_TNCCS_11="yes"
|
2011-01-31 04:47:39 +00:00
|
|
|
USE_TNCCS_20="yes"
|
|
|
|
USE_TNCCS_DYNAMIC="yes"
|
2011-05-30 19:31:50 +00:00
|
|
|
USE_IMC_TEST="yes"
|
|
|
|
USE_IMV_TEST="yes"
|
2011-07-04 19:40:25 +00:00
|
|
|
USE_IMC_SCANNER="yes"
|
|
|
|
USE_IMV_SCANNER="yes"
|
2011-12-18 17:07:47 +00:00
|
|
|
USE_IMC_ATTESTATION="yes"
|
|
|
|
USE_IMV_ATTESTATION="yes"
|
2008-04-06 12:05:42 +00:00
|
|
|
USE_SQL="yes"
|
2008-03-29 19:33:02 +00:00
|
|
|
USE_MEDIATION="yes"
|
2008-05-28 14:13:40 +00:00
|
|
|
USE_OPENSSL="yes"
|
2009-05-14 23:28:48 +00:00
|
|
|
USE_BLOWFISH="yes"
|
2008-10-15 00:22:51 +00:00
|
|
|
USE_KERNEL_PFKEY="yes"
|
2008-12-04 00:34:59 +00:00
|
|
|
USE_INTEGRITY_TEST="yes"
|
2012-05-02 20:53:11 +00:00
|
|
|
USE_LEAK_DETECTIVE="yes"
|
2010-05-02 09:47:24 +00:00
|
|
|
USE_LOAD_TESTER="yes"
|
2009-06-16 16:05:59 +00:00
|
|
|
USE_TEST_VECTORS="yes"
|
|
|
|
USE_GCRYPT="yes"
|
2010-03-11 20:53:18 +00:00
|
|
|
USE_SOCKET_DEFAULT="yes"
|
2010-05-02 09:47:24 +00:00
|
|
|
USE_SOCKET_DYNAMIC="yes"
|
2010-03-28 20:40:20 +00:00
|
|
|
USE_DHCP="yes"
|
|
|
|
USE_FARP="yes"
|
2010-07-13 19:04:20 +00:00
|
|
|
USE_ADDRBLOCK="yes"
|
2010-08-14 19:40:05 +00:00
|
|
|
USE_CTR="yes"
|
2010-08-20 10:47:15 +00:00
|
|
|
USE_CCM="yes"
|
|
|
|
USE_GCM="yes"
|
2012-04-22 20:22:25 +00:00
|
|
|
USE_CMAC="yes"
|
2010-11-20 20:52:40 +00:00
|
|
|
USE_HA="yes"
|
2012-05-02 20:53:11 +00:00
|
|
|
USE_PLUTO="yes"
|
2011-03-17 21:53:09 +00:00
|
|
|
USE_AF_ALG="yes"
|
2011-05-12 19:11:01 +00:00
|
|
|
USE_WHITELIST="yes"
|
2012-05-02 20:53:11 +00:00
|
|
|
USE_XAUTH_GENERIC="yes"
|
2012-02-03 10:10:13 +00:00
|
|
|
USE_PKCS8="yes"
|
2011-12-12 16:00:50 +00:00
|
|
|
USE_IFMAP="no"
|
2011-01-31 04:47:39 +00:00
|
|
|
USE_CISCO_QUIRKS="no"
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Gentoo linux root filesystem
|
2011-12-12 16:00:50 +00:00
|
|
|
ROOTFS=$UMLTESTDIR/gentoo-fs-20111212.tar.bz2
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Size of the finished root filesystem in MB
|
2011-12-12 16:00:50 +00:00
|
|
|
ROOTFSSIZE=850
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Amount of Memory to use per UML [MB].
|
|
|
|
# If "auto" is stated 1/12 of total host ram will be used.
|
|
|
|
# Examples: MEM=64, MEM="128", MEM="auto"
|
2007-02-12 15:56:47 +00:00
|
|
|
MEM=96
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Directory where the UML kernels and file system will be built
|
|
|
|
BUILDDIR=$UMLTESTDIR/umlbuild
|
|
|
|
|
|
|
|
# Filename of the built UML Kernel
|
2008-03-13 14:20:20 +00:00
|
|
|
UMLKERNEL=$BUILDDIR/linux-uml-$KERNELVERSION
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
# Directory where test results will be stored
|
|
|
|
TESTRESULTSDIR=$UMLTESTDIR/testresults
|
|
|
|
|
2010-10-14 12:01:26 +00:00
|
|
|
# SSH configuration (speedup SSH)
|
|
|
|
SSHCONF="-F $UMLTESTDIR/testing/ssh_config"
|
|
|
|
|
2006-07-13 12:43:52 +00:00
|
|
|
# Path to a full strongswan tree on the host system, which is
|
|
|
|
# mounted into /root/strongswan-shared. This gives us an easy
|
|
|
|
# way to apply and test changes instantly.
|
2009-04-14 10:34:24 +00:00
|
|
|
#SHAREDTREE=/home/martin/strongswan/trunk
|
2006-07-13 12:43:52 +00:00
|
|
|
|
2006-04-28 07:14:48 +00:00
|
|
|
# Timezone for the UMLs, look in /usr/share/zoneinfo!
|
|
|
|
TZUML="Europe/Zurich"
|
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# Enable particular steps in the make-testing and
|
|
|
|
# start-testing scripts
|
|
|
|
#
|
2008-03-13 14:20:20 +00:00
|
|
|
ENABLE_BUILD_UMLKERNEL="yes"
|
|
|
|
ENABLE_BUILD_SSHKEYS="yes"
|
|
|
|
ENABLE_BUILD_HOSTCONFIG="yes"
|
|
|
|
ENABLE_BUILD_UMLROOTFS="yes"
|
|
|
|
ENABLE_BUILD_UMLHOSTFS="yes"
|
|
|
|
ENABLE_START_TESTING="yes"
|
2009-04-14 10:34:24 +00:00
|
|
|
ENABLE_DO_TESTS="no"
|
2006-04-28 07:14:48 +00:00
|
|
|
ENABLE_STOP_TESTING="no"
|
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# How to start the UMLs?
|
|
|
|
#
|
2009-04-14 10:34:24 +00:00
|
|
|
# Start the UML instance in KDE konsole (requires KDE)
|
2008-02-29 20:17:28 +00:00
|
|
|
# UMLSTARTMODE="konsole"
|
|
|
|
# Start the UML instance in a gnome-terminal (requires gnome)
|
|
|
|
UMLSTARTMODE="gnome-terminal"
|
2006-04-28 07:14:48 +00:00
|
|
|
# Start the UML instance in an xterm (requires X11R6)
|
2008-03-13 14:20:20 +00:00
|
|
|
# UMLSTARTMODE="xterm"
|
2006-04-28 07:14:48 +00:00
|
|
|
# Start the UML instance without a terminal window
|
|
|
|
# but screen -r <host> can open a window anytime
|
|
|
|
# UMLSTARTMODE="screen"
|
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# If set to "yes" only the tests stated at $SELECTEDTESTS
|
|
|
|
# will be executed. (use "yes" or "no")
|
|
|
|
#
|
|
|
|
SELECTEDTESTSONLY="no"
|
|
|
|
|
|
|
|
# Tests to do if $SELECTEDTESTSONLY is set "yes".
|
|
|
|
#
|
2007-07-02 09:52:20 +00:00
|
|
|
SELECTEDTESTS="ikev2/rw-cert"
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
##############################################################
|
2006-06-06 05:41:21 +00:00
|
|
|
# hostname and corresponding IPv4 and IPv6 addresses
|
|
|
|
# You may change the IPs but keep them in the same subnet,
|
2006-04-28 07:14:48 +00:00
|
|
|
# this means retain the netmasks!
|
|
|
|
# Also don't use IPs ending with 254, they are reserved!
|
|
|
|
#
|
2006-06-06 05:41:21 +00:00
|
|
|
HOSTNAMEIPV4="\
|
2007-07-02 09:52:20 +00:00
|
|
|
alice,10.1.0.10,192.168.0.50 \
|
2006-06-06 05:41:21 +00:00
|
|
|
venus,10.1.0.20 \
|
|
|
|
moon,192.168.0.1,10.1.0.1 \
|
2008-03-13 14:20:20 +00:00
|
|
|
carol,192.168.0.100,10.3.0.1 \
|
2006-06-06 05:41:21 +00:00
|
|
|
winnetou,192.168.0.150 \
|
|
|
|
dave,192.168.0.200,10.3.0.2 \
|
|
|
|
sun,192.168.0.2,10.2.0.1 \
|
|
|
|
bob,10.2.0.10"
|
|
|
|
|
|
|
|
HOSTNAMEIPV6="\
|
2007-07-02 09:52:20 +00:00
|
|
|
alice,fec1::10,fec0::5 \
|
2006-06-06 05:41:21 +00:00
|
|
|
venus,fec1::20 \
|
|
|
|
moon,fec0::1,fec1::1 \
|
|
|
|
carol,fec0::10,fec3::1 \
|
|
|
|
winnetou,fec0::15 \
|
|
|
|
dave,fec0::20,fec3::2 \
|
|
|
|
sun,fec0::2,fec2::1 \
|
|
|
|
bob,fec2::10"
|
2006-04-28 07:14:48 +00:00
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# VPN gateways / clients
|
|
|
|
# The hosts stated here will be created. Possible values
|
|
|
|
# are sun, moon, dave, carol, alice, venus, bob, winnetou.
|
|
|
|
# It's fine to make them all unless you don't have much
|
2012-01-12 10:41:34 +00:00
|
|
|
# resources. In this case we assume you know what you do!
|
2006-04-28 07:14:48 +00:00
|
|
|
#
|
|
|
|
STRONGSWANHOSTS="sun moon dave carol alice venus bob winnetou"
|
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# Needed programs, do not change!
|
|
|
|
#
|
|
|
|
PROGRAMS="uml_switch uml_mconsole ssh ssh-keygen iptables \
|
|
|
|
chroot screen mkreiserfs"
|
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# IP parameters of the UML switches
|
|
|
|
#
|
|
|
|
IFCONFIG_0="192.168.0.254 netmask 255.255.255.0"
|
|
|
|
IFCONFIG_1="10.1.0.254 netmask 255.255.0.0"
|
|
|
|
IFCONFIG_2="10.2.0.254 netmask 255.255.0.0"
|
|
|
|
|
|
|
|
##############################################################
|
|
|
|
# Network interfaces of the UML instances
|
|
|
|
#
|
2009-04-14 10:34:24 +00:00
|
|
|
SWITCH_alice="eth0=tuntap,tap1_alice,fe:fd:0a:01:00:0a \
|
|
|
|
eth1=tuntap,tap0_alice,fe:fd:c0:a8:00:32"
|
|
|
|
SWITCH_venus="eth0=tuntap,tap1_venus,fe:fd:0a:01:00:14"
|
|
|
|
SWITCH_moon="eth0=tuntap,tap0_moon,fe:fd:c0:a8:00:01 \
|
|
|
|
eth1=tuntap,tap1_moon,fe:fd:0a:01:00:01"
|
|
|
|
SWITCH_carol="eth0=tuntap,tap0_carol,fe:fd:c0:a8:00:64"
|
|
|
|
SWITCH_winnetou="eth0=tuntap,tap0_winnetou,fe:fd:c0:a8:00:96"
|
|
|
|
SWITCH_dave="eth0=tuntap,tap0_dave,fe:fd:c0:a8:00:c8"
|
|
|
|
SWITCH_sun="eth0=tuntap,tap0_sun,fe:fd:c0:a8:00:02 \
|
|
|
|
eth1=tuntap,tap2_sun,fe:fd:0a:02:00:01"
|
|
|
|
SWITCH_bob="eth0=tuntap,tap2_bob,fe:fd:0a:02:00:0a"
|