ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

testing: Use include statement in swanctl/rw-pubkey-keyid scenario

This commit is contained in:
Andreas Steffen 2016-01-14 01:44:17 +01:00
parent 9492e12e61
commit e7b5171e43
3 changed files with 19 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/swanctl.conf
View File

@ -1,48 +1,20 @@
connections {
rw-carol {
local_addrs = 192.168.0.1
include swanctl_base.conf
local {
auth = pubkey
pubkeys = moonPub.pem
}
remote {
auth = pubkey
pubkeys = carolPub.pem
}
children {
net {
local_ts = 10.1.0.0/16
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-ecp256
}
}
version = 2
proposals = aes128-sha256-ecp256
}
rw-dave {
local_addrs = 192.168.0.1
include swanctl_base.conf
local {
auth = pubkey
pubkeys = moonPub.pem
}
remote {
auth = pubkey
pubkeys = davePub.pem
}
children {
net {
local_ts = 10.1.0.0/16
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-ecp256
}
}
version = 2
proposals = aes128-sha256-ecp256
}
}

16
testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/swanctl_base.conf Executable file
View File

@ -0,0 +1,16 @@
local_addrs = 192.168.0.1
local {
auth = pubkey
pubkeys = moonPub.pem
}
children {
net {
local_ts = 10.1.0.0/16
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-ecp256
}
}
version = 2
proposals = aes128-sha256-ecp256

1
testing/tests/swanctl/rw-pubkey-keyid/pretest.dat
View File

@ -4,6 +4,7 @@ dave::iptables-restore < /etc/iptables.rules
moon::cd /etc/swanctl; rm x509/* x509ca/*
carol::cd /etc/swanctl; rm x509/* x509ca/*
dave::cd /etc/swanctl; rm x509/* x509ca/*
moon::cat /etc/swanctl/swanctl_base.conf
moon::service charon start 2> /dev/null
carol::service charon start 2> /dev/null
dave::service charon start 2> /dev/null