ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity
strongswan/testing/tests/tkm/xfrmproxy-rekey/hosts/moon/etc/strongswan.conf.in

17 lines
294 B
Plaintext
Raw Normal View History

testing: Add tkm xfrmproxy-expire test This test asserts that the handling of XFRM expire messages from the kernel are handled correctly by the xfrm-proxy and the Esa Event Service (EES) in charon-tkm.
2014-12-18 10:49:05 +00:00
# /etc/strongswan.conf - strongSwan configuration file
charon-tkm {
charon-tkm: Call esa_reset() when the inbound SA is deleted After a rekeying the outbound SA and policy is deleted immediately, however, the inbound SA is not removed until a few seconds later, so delayed packets can still be processed. This adds a flag to get_esa_id() that specifies the location of the given SPI.
2017-08-04 12:02:42 +00:00
# remove rekeyed inbound SA a bit quicker for the test scenario
delete_rekeyed_delay = 2
testing: Add tkm xfrmproxy-expire test This test asserts that the handling of XFRM expire messages from the kernel are handled correctly by the xfrm-proxy and the Esa Event Service (EES) in charon-tkm.
2014-12-18 10:49:05 +00:00
dh_mapping {
15 = 1
16 = 2
}
testing: Add CA ID mappings to TKM tests Extend the build-certs-chroot script is to fill in the public key fingerprint of the CA certificate in the appropriate strongswan.con files.
2020-09-25 08:47:46 +00:00
ca_mapping {
strongswan_ca {
id = 1
fingerprint = CA_SPK_HEX
}
}
testing: Add tkm xfrmproxy-expire test This test asserts that the handling of XFRM expire messages from the kernel are handled correctly by the xfrm-proxy and the Esa Event Service (EES) in charon-tkm.
2014-12-18 10:49:05 +00:00
}