64f9fa9e9f
testing: Created ikev2/rw-eap-aka-sql-rsa scenario
...
This test scenario tests the eap-simaka-sql plugin.
2017-04-26 20:38:23 +02:00
470e61ae77
testing: strongTNC does not come with django.db any more
2016-12-17 18:09:20 +01:00
277ef8c2fa
testing: Added ikev2/rw-newhope-bliss scenario
2016-08-10 14:22:00 +02:00
5e5dee36b6
testing: Remove obsolete openssl-fips recipe
...
This was only required when we initially started and OpenSSL was built
from sources, which was changed with b97dd59ba8
2016-07-04 12:18:51 +02:00
545e529190
testing: Update FreeRADIUS to 2.2.8
...
While this is not the latest 2.x release it is the latest in /old.
Upgrading to 3.0 might be possible, not sure if the TNC-FHH patches could
be easily updated, though. Upgrading to 3.1 will definitely not be possible
directly as that version removes the EAP-TNC module. So we'd first have to
get rid of the TNC-FHH stuff.
2016-06-17 15:53:12 +02:00
1f98c38283
testing: Build hostapd from sources
...
There is a bug (fix at [1]) in hostapd 2.1-2.3 that let it crash when used
with the wired driver. The package in jessie (and sid) is affected, so we
build it from sources (same, older, version as wpa_supplicant).
[1] http://w1.fi/cgit/hostap/commit/?id=e9b783d58c23a7bb50b2f25bce7157f1f3
2016-06-16 14:36:15 +02:00
63d9370249
testing: Update download URL for wpa_supplicant
2016-06-16 14:36:15 +02:00
f565f954a7
testing: Install packages like the FIPS-enabled OpenSSL from a custom apt repo
2016-06-16 14:01:47 +02:00
cac9051eed
testing: Add a patch to tnc-fhh that avoids building the tncsim package
...
This sub-package does not build on Debian jessie.
2016-06-15 16:24:43 +02:00
9463350943
testing: swanctl is enabled by default
2015-12-18 15:22:29 +01:00
5a919312b3
testing: Record strongSwan version when building from tarball
2015-11-09 15:18:37 +01:00
9a0871ab94
testing: Add a base strongswan.conf file used by all hosts in all scenarios
...
We will use this to set some defaults (e.g. timeouts to make testing
negative tests quicker). We don't want these settings to show up in the
configs of the actual scenarios though.
2015-11-09 15:18:34 +01:00
a98360a64c
testing: BLISS CA uses SHA-3 in its CRL
2015-11-03 21:35:09 +01:00
92ef3c2f21
testing: Update tkm to version 0.1.3
...
Adds XFRM state/policy flush when terminating which caused tests to fail
due to the check added with 9086f060d3
2015-10-30 11:19:44 +01:00
ebed384887
testing: enable HCD IMC and IMV
2015-08-18 21:25:38 +02:00
6f913def3c
testing: Build with --enable-chapoly
2015-07-12 13:54:08 +02:00
682aab205e
testing: Don't check parent dir (and subdirs) when downloading OpenSSL packages
2015-05-21 09:32:37 +02:00
3ff0edd804
testing: Update alog to version 0.3.1
2015-05-05 10:55:14 +02:00
2fc53e76f8
testing: Update tkm to version 0.1.2
2015-05-05 10:55:14 +02:00
3c13ff0a97
testing: Update tkm-rpc to version 0.2
2015-05-05 10:55:14 +02:00
3748fc70a7
testing: Build forecast plugin
2015-02-20 16:34:55 +01:00
15f392d9ed
testing: Build strongSwan with the connmark plugin
2015-02-20 16:34:54 +01:00
43d9247599
Created ikev2/rw-ntru-bliss scenario
2014-11-29 14:51:18 +01:00
93fac61da5
testing: Make TKM related build recipes future-proof
...
The tkm scenarios recently failed due to a segmentation fault on my host
because I had an old build of the tkm library already built in the build
directory. Because the stamp file was not versioned the new release was
never checked out or built and charon-tkm was linked against the old
version causing a segmentation fault during key derivation.
2014-10-07 10:47:06 +02:00
e9028462c8
testing: Actually build swanctl
2014-10-03 12:44:14 +02:00
0bf2abf182
testing: Use multiple jobs to install strongSwan
2014-09-19 13:37:59 +02:00
ffcf8f4ea2
testing: Make strongSwan build recipe more configurable
2014-09-19 13:37:59 +02:00
1004d395f5
testing: Update x509-ada version to 0.1.1
...
Fixes #705 .
2014-09-17 17:07:29 +02:00
4ccfc879b5
Updated URL to swidGenerator in recipe
2014-07-09 15:08:18 +02:00
cda2a1e4dc
Updated strongTNC configuration
2014-06-11 18:12:34 +02:00
acdcb91e07
testing: Cache packages downloaded with pip for strongTNC
...
This way no network connections is required to rebuild the root/guest images.
2014-06-02 17:45:42 +02:00
2382d45b1c
Test SWID REST API ins tnc/tnccs-20-pdp scenarios
2014-05-31 21:25:46 +02:00
8c40609f96
Use python-based swidGenerator to generated SWID tags
2014-04-15 09:21:06 +02:00
c602ee65dc
testing: build strongSwan with acert plugin
2014-03-31 11:14:59 +02:00
a334ac80ae
Added ikev2/lookip scenario
2014-02-17 12:04:21 +01:00
0c5dfb741f
testing: Fetch the FreeRADIUS tarball from the "old" directory
...
Fixes #483 .
2014-01-31 17:51:45 +01:00
8416ebb628
charon-tkm: Update integration tests
2013-12-04 10:41:54 +01:00
146ad86be5
Prototype implementation of IKE key exchange via NTRU encryption
2013-11-27 20:21:40 +01:00
252c04d3f9
Adapted recipe and patches to freeradius-2.2.1
2013-10-22 10:09:24 +02:00
99a89ea7f4
testing: Enable dnscert plugin
2013-10-11 15:45:42 +02:00
b38d9d5a54
Implemented SWID prototype IMC/IMV pair
2013-08-15 23:34:23 +02:00
2ea32e7964
Enable libipsec and charon-cmd in strongSwan recipe
2013-07-01 12:32:45 +02:00
e74bca9e19
testing: Don't run tests when building tkm
...
The problem with XML/Ada described in 9c2aba27fixes #336 .
2013-05-07 10:19:37 +02:00
9c2aba2735
testing: Don't run tests when building tkm-rpc
...
There are issues with some versions of the XML/Ada library on i386,
blocking the build of the testing environment when these tests are run.
TKM tests won't work in such a case but at least make-testing does not
block with this patch.
Fixes #336 .
2013-05-06 18:17:58 +02:00
b97dd59ba8
install FIPS-aware OpenSSL Debian packages
2013-04-19 18:36:38 +02:00
70312e6596
build openssl-fips in KVM root-image
2013-04-19 18:34:35 +02:00
ef934caba8
build soup plugin in KVM test environment
2013-04-15 20:23:41 +02:00
8dade2d146
fixed configure options
2013-04-04 21:09:07 +02:00
fec7c824b8
fix start of wpa_supplicant
2013-03-31 19:48:07 +02:00
c59f3dcb68
Use new strongSwan HA kernel patchset keeping iptables ABI
...
Allows us to install stock debian iptables without the need for patching and
compiling our own.
2013-03-26 10:31:29 +01:00
Andreas Steffen