4d0795bcef
testing: Avoid expiration of allocated SPIs due to low retransmission settings
2017-05-23 18:05:58 +02:00
a5f7a4c790
Version bump to 5.3.3dr2
2017-05-08 22:38:12 +02:00
d38d1fcd68
Version bump to 5.5.3dr1
2017-04-26 21:29:42 +02:00
25217488d2
testing: Created swanctl/rw-eap-aka-sql-rsa scenario
2017-04-26 20:38:23 +02:00
64f9fa9e9f
testing: Created ikev2/rw-eap-aka-sql-rsa scenario
...
This test scenario tests the eap-simaka-sql plugin.
2017-04-26 20:38:23 +02:00
bb2ba9f15d
Version bump to 5.5.2
2017-03-27 16:57:03 +02:00
c5ccf933ec
testing: List BLIS certs in swanctl/rw-newhope-bliss scenario
2017-03-27 16:56:50 +02:00
7c672e6118
Version bump to 5.2.2rc1
2017-03-21 09:09:43 +01:00
1732ca7b5b
testing: Updated OCSP certificate for carol
2017-03-21 09:09:06 +01:00
efc1b98461
Allow x25519 as an alias of the curve25519 KE algorithm
2017-03-20 21:18:00 +01:00
ac9063dae2
testing: Fix URL for kernel sources
2017-03-20 10:13:33 +01:00
25bfb338a2
Version bump to 5.5.2dr7
2017-03-06 20:21:40 +01:00
6885375e66
Version bump to 5.5.2dr6
2017-03-03 09:34:50 +01:00
3fb68ac211
testing: load-testconfig script loads config from source dir
...
It now does replace the IPs too. This way it's easier to play around
with a config (otherwise a do-tests run was required to build the
config files in the build dir).
2017-03-02 11:54:39 +01:00
f43850b3b9
Version bump to 5.5.2dr5
2017-02-23 17:31:11 +01:00
0c549169c4
testing: Fix ALLOWED_HOSTS in strongTNC settings.ini
2017-02-16 18:24:25 +01:00
150a902b83
testing: Fix swanctl/ocsp-disabled scenario after changing the log messages
2017-02-16 17:51:16 +01:00
9ad147ac63
Version bump to 5.5.2dr4
2017-01-02 15:46:27 +01:00
91a4a4aa83
testing: Added swanctl/ocsp-disabled scenario
2017-01-02 14:34:39 +01:00
db0953d41f
testing: Added swanctl/ocsp-signer-cert scenario
2017-01-02 14:34:18 +01:00
08253bbba3
testing: Convert swanctl scenarios to curve-25519
2016-12-30 16:22:12 +01:00
65797c9faf
Version bump to 5.5.2dr3 and Linux kernel 4.9
2016-12-17 18:10:13 +01:00
470e61ae77
testing: strongTNC does not come with django.db any more
2016-12-17 18:09:20 +01:00
3c1e5ad6ce
testing: Added ikev2/net2net-ed25519 scenario
2016-12-17 18:07:29 +01:00
94ae1ac18e
Added swanctl/net2net-ed2559 scenario and needed Ed25519 certificates
2016-12-14 11:15:48 +01:00
011195f1a9
Version bump to 5.5.2dr2
2016-11-14 16:20:51 +01:00
99c03e9a11
testing: make curve25519 the default DH group
2016-11-14 16:20:51 +01:00
4a97999466
Version bump to 5.5.2dr1
2016-10-30 17:34:05 +01:00
e6a4bd83ff
Version bump to 5.5.1
2016-10-20 12:57:00 +02:00
4d77fcbec9
Version bump to 5.5.1rc2
2016-10-18 18:14:57 +02:00
ba6c7a52c0
testing: Renewed expired certificates
2016-10-18 18:13:58 +02:00
d167776ff9
testing: enable MACsec in guest kernel
2016-10-18 16:25:19 +02:00
a617223ed5
Version bump to 5.5.1rc1
2016-10-11 19:21:36 +02:00
85b5a6ace2
Save both base and delta CRLs to disk
2016-10-11 17:18:22 +02:00
2a2669ee3e
vici: strongswan.conf cache_crls = yes saves fetched CRLs to disk
2016-10-11 17:18:22 +02:00
597e057b9e
testing: Remove ikev2/default-keys scenario
...
No default keys are generated anymore.
2016-10-05 12:25:29 +02:00
62636da4f3
testing: Enable outbound FWD policies in swanctl/manual-prio scenario
2016-09-28 17:56:43 +02:00
a9562a3f58
testing: Added swanctl/net2net-multicast scenario
2016-09-27 18:36:28 +02:00
d7e0ce2878
testing: Added ikev2/net2net-multicast scenario
2016-09-27 18:36:28 +02:00
6b3e408ba5
Version bump to 5.5.1dr5
2016-09-22 17:36:37 +02:00
d505658038
testing: Added swanctl/net2net-sha3-rsa-cert and swanctl/rw-eap-tls-sha3-rsa scenarios
2016-09-22 17:34:31 +02:00
40f2589abf
gmp: Support of SHA-3 RSA signatures
2016-09-22 17:34:31 +02:00
e31ed9ab98
Version bump to 5.5.1dr4
2016-09-21 14:14:42 +02:00
188b190a70
mgf1: Refactored MGF1 as an XOF
2016-09-21 06:40:52 +02:00
b69cbacdfb
testing: Use curl instead of soup plugin in libipsec/rw-suite-b scenario
...
The soup plugin is already used in the openssl-ikev2/rw-suite-b*
scenarios.
2016-09-20 15:36:15 +02:00
6307a18fe1
testing: Fix totals if post test checks fail
2016-09-20 15:36:14 +02:00
d8b2980aa5
testing: Log leaks and fail tests if any are detected
2016-09-20 15:36:14 +02:00
ac67aeb100
testing: Add output of iptables-save
...
This might be helpful to get the complete picture of the installed
rules. `-c` is currently not used as the counters that are added in
front of every rule make the output quite hard to read and the counters
are already provided in the accompanying `iptables -v -L` output.
Fixes #2111 .
2016-09-12 16:15:45 +02:00
fa36699bfa
testing: List `nat` and `mangle` tables in addition to the `filter` table
...
This is useful in scenarios that e.g. use NAT and/or marks.
References #2111 .
2016-09-12 16:15:14 +02:00
92ccc0b412
testing: Ignore comments (lines starting with #) in pre-/eval-/posttest.dat
2016-09-09 12:19:14 +02:00
Tobias Brunner