testing: Updated build-certs script

This commit is contained in:
Andreas Steffen 2019-05-05 18:07:43 +02:00 committed by Tobias Brunner
parent cfeae14b06
commit b213204b3b
7 changed files with 373 additions and 345 deletions

View File

@ -16,7 +16,9 @@ V EE_EXPIRATION 0F unknown /C=CH/O=strongSwan Project/OU=SHA-512/CN=dave@strong
V EE_EXPIRATION 10 unknown /C=CH/O=strongSwan Project/OU=OCSP/CN=carol@strongswan.org
V EE_EXPIRATION 11 unknown /C=CH/O=strongSwan Project/OU=OCSP Signing Authority/CN=ocsp.strongswan.org
V EE_EXPIRATION 12 unknown /C=CH/O=strongSwan Project/OU=Virtual VPN Gateway/CN=mars.strongswan.org
V EE_EXPIRATION 13 unknown /C=CH/O=strongSwan Project/CN=winnetou.strongswan.org
V EE_EXPIRATION 14 unknown /C=CH/O=strongSwan Project/CN=aaa.strongswan.org
V IM_EXPIRATION 15 unknown /C=CH/O=strongSwan Project/CN=strongSwan Attribute Authority
V SH_EXPIRATION 16 unknown /C=CH/O=strongSwan Project/CN=strongSwan Legacy AA
V EE_EXPIRATION 13 unknown /C=CH/O=strongSwan Project/OU=Critical Extension/CN=moon.strongswan.org
V EE_EXPIRATION 14 unknown /C=CH/O=strongSwan Project/OU=Critical Extension/CN=sun.strongswan.org
V EE_EXPIRATION 15 unknown /C=CH/O=strongSwan Project/CN=winnetou.strongswan.org
V EE_EXPIRATION 16 unknown /C=CH/O=strongSwan Project/CN=aaa.strongswan.org
V IM_EXPIRATION 17 unknown /C=CH/O=strongSwan Project/CN=strongSwan Attribute Authority
V SH_EXPIRATION 18 unknown /C=CH/O=strongSwan Project/CN=strongSwan Legacy AA

File diff suppressed because it is too large Load Diff

View File

@ -4,5 +4,5 @@ moon::cat /var/log/daemon.log::sending end entity cert::YES
moon::cat /var/log/daemon.log::received AUTHENTICATION_FAILED notify error::YES
sun:: cat /var/log/daemon.log::critical 'strongSwan' extension not supported::YES
sun:: cat /var/log/daemon.log::building CRED_CERTIFICATE - ANY failed::YES
sun:: cat /var/log/daemon.log::loading certificate from 'sunCert.der' failed::YES
sun:: cat /var/log/daemon.log::loading certificate from 'sunCert.pem' failed::YES
sun:: cat /var/log/daemon.log::building CRED_CERTIFICATE - X509 failed::YES

View File

@ -10,9 +10,9 @@ conn %default
keyexchange=ikev2
mobike=no
conn net-net
conn net-net
left=PH_IP_MOON
leftcert=moonCert.der
leftcert=moonCert.pem
leftid=@moon.strongswan.org
leftsubnet=10.1.0.0/16
leftfirewall=yes

View File

@ -10,9 +10,9 @@ conn %default
keyexchange=ikev2
mobike=no
conn net-net
conn net-net
left=PH_IP_SUN
leftcert=sunCert.der
leftcert=sunCert.pem
leftid=@sun.strongswan.org
leftsubnet=10.2.0.0/16
leftfirewall=yes

View File

@ -1,4 +1,2 @@
moon::systemctl stop strongswan
sun::systemctl stop strongswan
moon::rm /etc/swanctl/x509/moonCert.der
sun::rm /etc/swanctl/x509/sunCert.der

View File

@ -1,5 +1,3 @@
moon::rm /etc/swanctl/x509/moonCert.pem
sun::rm /etc/swanctl/x509/sunCert.pem
moon::systemctl start strongswan
sun::systemctl start strongswan
moon::expect-connection gw-gw