Commit Graph

1169 Commits

Author SHA1 Message Date
Andreas Steffen 162f1b7056 added multi-level-ca-ldap scenario 2007-05-18 12:23:31 +00:00
Andreas Steffen 9f97b8a108 added multi-level-ca scenario 2007-05-18 12:23:10 +00:00
Andreas Steffen f24b4886ac ca-based policy now requires rightca=%any in the two-certs scenario 2007-05-18 10:53:58 +00:00
Andreas Steffen ad9da6ec4b hierarchical display of tests 2007-05-15 20:30:21 +00:00
Andreas Steffen 547f1dd56c added two-certs scenario 2007-05-15 15:54:06 +00:00
Andreas Steffen ba42813ca3 added esp-alg-aesxcbc scenario 2007-04-28 20:01:06 +00:00
Andreas Steffen 187b181432 fixed evaltest.dat 2007-04-28 20:00:39 +00:00
Andreas Steffen e0e399ccc5 generated new winnetou certificate 2007-04-27 21:41:27 +00:00
Andreas Steffen 85e658a2c4 added crlnumber 2007-04-27 21:41:07 +00:00
Andreas Steffen 0a09cd6864 generated certs for ocsp-strict-ifuri scenario 2007-04-20 14:54:10 +00:00
Andreas Steffen 4031b8bae7 generated certs for ocsp-strict-ifuri scenario 2007-04-20 14:52:32 +00:00
Andreas Steffen 221a64e4f7 fixed test scenarios 2007-04-20 14:51:39 +00:00
Andreas Steffen ea4563d93f ocsp-strict-ifuri added 2007-04-20 14:50:42 +00:00
Andreas Steffen ce9b4ea6e6 ocsp-no-signer-cert added 2007-04-20 14:49:50 +00:00
Andreas Steffen e4c58fdb09 set sleep back to 180 s 2007-04-12 19:41:24 +00:00
Andreas Steffen 4d50f872d4 adapted evaltest to refactored ipsec status output 2007-04-11 08:18:38 +00:00
Andreas Steffen 90faff8e5a reduced sleep from 180 to 170 seconds 2007-04-10 23:22:26 +00:00
Andreas Steffen 1628cd6bda adapt evaltest to changed debug output 2007-04-06 10:39:24 +00:00
Andreas Steffen f5fc277463 crl-ldap scenario added 2007-04-06 10:02:27 +00:00
Andreas Steffen 915c7add1f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:51:12 +00:00
Andreas Steffen 389623374f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:40:33 +00:00
Andreas Steffen 1d1e55b4c3 added crl-to-cache 2007-04-05 17:18:25 +00:00
Andreas Steffen 7771780b38 added crl-from-cache 2007-04-05 17:18:15 +00:00
Andreas Steffen a224faf9ea block crl fetching 2007-04-05 17:10:59 +00:00
Andreas Steffen 45c97f180f block crl fetching 2007-04-05 17:09:54 +00:00
Andreas Steffen 69837d5baa support multiple ocsp servers 2007-04-05 17:08:51 +00:00
Andreas Steffen e47a7a131d reinsert SHAREDTREE 2007-04-04 05:29:20 +00:00
Andreas Steffen c056d929b2 --enable-ldap without value 3 2007-04-04 05:26:21 +00:00
Andreas Steffen ace5de18b2 iptables -L has now a link of its own 2007-04-03 22:03:25 +00:00
Andreas Steffen 7e4f8db2bf added ip route list and iptables -L 2007-04-03 21:18:46 +00:00
Andreas Steffen 51ae94d775 added OCSP signing certificates for the research and sales CAs 2007-03-26 07:08:39 +00:00
Andreas Steffen e3e6a1ec22 added ocsp-multi-level scenario 2007-03-26 07:05:02 +00:00
Andreas Steffen 4b0f0e6cb4 carol's cert and private key does not have to be deleted 2007-03-23 17:20:44 +00:00
Andreas Steffen 1eb6a5f4a2 deleted 2007-03-21 22:19:17 +00:00
Andreas Steffen d8d948a7e0 added 2007-03-21 22:19:00 +00:00
Andreas Steffen 878aecdf12 renamed ocsp-timeouts to ocsp-timeouts-good 2007-03-21 22:18:17 +00:00
Andreas Steffen f9a73bee9c delay OCSP response by 5 seconds 2007-03-20 04:35:16 +00:00
Andreas Steffen 114c6646af add daemon.log to web page 2007-03-15 15:01:36 +00:00
Andreas Steffen 4ebaa476f1 remove /etc/resolv.conf 2007-03-15 15:00:51 +00:00
Andreas Steffen 28bd885e03 added apache2/ocsp log directory to winnetou 2007-03-15 14:18:26 +00:00
Andreas Steffen 037ce7862f removed killall openssl 2007-03-15 13:56:35 +00:00
Andreas Steffen ab0d19ae66 removed killall openssl 2007-03-15 13:56:09 +00:00
Andreas Steffen e280f65f58 deleted 2007-03-15 13:54:22 +00:00
Andreas Steffen efdcd4bf10 deleted 2007-03-15 13:52:32 +00:00
Andreas Steffen 564c7a684b create apach2/ocsp/ logging directory on winnetou 2007-03-15 13:49:59 +00:00
Andreas Steffen 80f174bd3c do not check for type of dpd action any more 2007-03-15 13:34:42 +00:00
Andreas Steffen d4f0e636b5 create /var/log/apache2/ocsp on winnetou 2007-03-15 13:33:42 +00:00
Andreas Steffen bcee8816a5 added 2007-03-15 13:30:55 +00:00
Andreas Steffen 328453863a added 2007-03-15 13:29:56 +00:00
Andreas Steffen 6f1ae5d21c added 2007-03-15 13:29:02 +00:00
Andreas Steffen 7f6b9853cf delete virtual IP addresses after use 2007-03-14 23:02:44 +00:00
Andreas Steffen f2a121f4df deleted 2007-03-14 22:08:55 +00:00
Andreas Steffen 66c85c4b40 added 2007-03-14 22:07:18 +00:00
Andreas Steffen bd46337cb0 added 2007-03-14 15:42:40 +00:00
Andreas Steffen a521abad4e deleted 2007-03-14 15:10:12 +00:00
Andreas Steffen 4bd0d7e1d9 added 2007-03-14 15:09:00 +00:00
Andreas Steffen 3a7b69e699 changed OCSPSigner to OCSPSigning 2007-03-14 15:08:23 +00:00
Andreas Steffen 2f264a311b user standard cert 2007-03-14 14:52:13 +00:00
Andreas Steffen 19e071d54c deleted 2007-03-14 14:51:57 +00:00
Andreas Steffen f7ddccd988 deleted 2007-03-14 14:51:05 +00:00
Andreas Steffen 3f2cc77ac1 added 2007-03-14 14:02:39 +00:00
Andreas Steffen ae21d486c9 added 2007-03-14 13:04:56 +00:00
Andreas Steffen b1894cdd92 modified description.txt and evaltest.dat 2007-03-14 13:00:55 +00:00
Andreas Steffen 108d07181d added 2007-03-14 09:05:27 +00:00
Andreas Steffen 19808f71ec added 2007-03-14 08:17:27 +00:00
Andreas Steffen 2eab924979 version bump to strongswan-4.1.0 and linux-2.6.20.3 2007-03-14 08:15:36 +00:00
Andreas Steffen 0d1f911065 conntrack -F is used to flush the NAT states 2007-03-07 04:45:12 +00:00
Andreas Steffen 26ad49c8e7 the hostaccess=yes parameters are not needed anymore 2007-03-07 04:44:25 +00:00
Andreas Steffen 854b4e4460 use conntrack -F to flush NAT states 2007-03-07 04:29:13 +00:00
Andreas Steffen 764804739f replaced actual virtual IP addresses by symbolic ones 2007-03-07 04:28:34 +00:00
Andreas Steffen 74d1b5e5b0 removed unnecessary double quotes 2007-03-07 04:27:32 +00:00
Andreas Steffen 0b0eb65573 added 2007-03-05 19:15:33 +00:00
Andreas Steffen 671a54e9ab config-payload scenario fixes 2007-03-01 08:20:50 +00:00
Andreas Steffen 83c3750ac3 added cert with OCSP access info 2007-02-28 23:25:13 +00:00
Andreas Steffen b62f2fc895 dpd now takes 180 s and 5 retransmits 2007-02-28 23:19:20 +00:00
Andreas Steffen 1b44633cbc changed grep to creating aquire job for CHILD SA 2007-02-28 23:02:40 +00:00
Andreas Steffen 501fac0c88 replaced actual virtual IPs by place holders 2007-02-28 22:38:49 +00:00
Andreas Steffen f4d7dec384 virtual-ip scenario has been replaces by config-payload scenario 2007-02-28 22:21:58 +00:00
Andreas Steffen bc92caaabf added 2007-02-28 22:16:23 +00:00
Andreas Steffen 63b97bda3f added 2007-02-28 22:16:16 +00:00
Tobias Brunner 3d8ec1bacb virtual ip uml test 2007-02-28 15:20:10 +00:00
Andreas Steffen 2ea734180e version bumps 2007-02-21 13:07:09 +00:00
Andreas Steffen 8aa3e1ac65 remove strong certs and keys after test 2007-02-21 13:06:26 +00:00
Andreas Steffen c831506e35 added 2007-02-21 13:05:53 +00:00
Andreas Steffen 1e77bdc36b enable IP forwarding 2007-02-14 01:05:58 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Andreas Steffen 85657c7bd3 version bump 2007-01-29 07:47:31 +00:00
Andreas Steffen c796659f23 version bump 2007-01-29 07:47:03 +00:00
Andreas Steffen 053ce451b1 use uml_mconsole to check end of booting process 2007-01-11 20:07:05 +00:00
Andreas Steffen 66bc2429c6 added firewall support to scenario 2007-01-08 21:24:37 +00:00
Martin Willi cf86671048 readded tranport mode test using new status output 2007-01-08 07:36:20 +00:00
Martin Willi 032c31c4ae removed dublicated host2host-transport test 2007-01-08 07:35:26 +00:00
Andreas Steffen 09cbc4740a added host2host-transport scenario 2007-01-05 11:01:09 +00:00
Andreas Steffen 81a65f7b1f removed trailing lines 2007-01-05 11:00:42 +00:00
Andreas Steffen fc9f75ed0f added xauth scenarios 2007-01-04 14:25:14 +00:00
Andreas Steffen af7e7d9756 due to console logging, no need for final sleep anymore 2006-11-01 21:18:42 +00:00
Andreas Steffen 17f11c46cc adapted checks to changed ipsec status output 2006-11-01 21:17:23 +00:00
Andreas Steffen 6dca6c6f71 due to narrowing no need for rightsubnetwithin 2006-11-01 21:15:19 +00:00
Andreas Steffen c596926095 no need to send certreq 2006-11-01 21:14:28 +00:00
Andreas Steffen 9ba5e22e31 version bumps of strongSwan, Linux kernel and Gentoo root file system 2006-11-01 12:38:45 +00:00
Andreas Steffen ba8b797bfd corrected description 2006-11-01 12:36:11 +00:00
Andreas Steffen dda28dcb89 added dpd-hold scenario 2006-11-01 12:33:02 +00:00
Andreas Steffen d2bb572f79 do not sent certreq payloads when the peer is known to use PSK 2006-10-31 06:54:28 +00:00
Andreas Steffen 5435111a34 position of (myself) moved in log output 2006-10-31 06:51:04 +00:00
Andreas Steffen 7de8027cf8 do not sent certreq payloads when using self-signed certs 2006-10-31 06:48:34 +00:00
Andreas Steffen 1a3e260410 change due to change debug output 2006-10-27 18:37:50 +00:00
Andreas Steffen ade9743ec4 fixed due to new logging concept 2006-10-27 17:54:06 +00:00
Andreas Steffen 22d0ab1343 upgrade to new Gentoo root file system and tcpdump command 2006-10-23 14:53:09 +00:00
Andreas Steffen f22c88de5f added 2006-10-23 14:52:34 +00:00
Andreas Steffen 8e9d7808ae deleted 2006-10-23 14:51:30 +00:00
Andreas Steffen 825a5631dd renamed ikev1 scenario and added ikev2 scenario 2006-10-23 14:50:32 +00:00
Andreas Steffen 403dc74b9d added new scenarios 2006-10-23 14:49:43 +00:00
Andreas Steffen b9ac0fc6a3 Version bumps of UML kernel, Gentoo root file system and strongSwan release 2006-10-23 14:48:43 +00:00
Andreas Steffen 86f5748b7f added stronger certs for moon, carol, and dave 2006-10-09 08:25:20 +00:00
Andreas Steffen 06890eef8e added IPv6 hw and multicast addresses 2006-10-09 08:24:49 +00:00
Andreas Steffen 120f42be89 adapted to new tcpdump ipv6 output 2006-10-09 08:23:38 +00:00
Andreas Steffen 4f67764bda multi-level-ca scenarios use unencrypted private key 2006-10-09 08:23:11 +00:00
Andreas Steffen c0317576ba added scenario 2006-10-09 08:20:01 +00:00
Andreas Steffen df9881d130 fixed timing 2006-10-06 07:57:25 +00:00
Andreas Steffen b0f4c5d1f2 new gentoo root file system 2006-10-06 07:54:07 +00:00
Andreas Steffen 118a19ecb6 fixed bug with openldap 2.3 2006-10-06 07:48:24 +00:00
Andreas Steffen e6b51ef666 removed ipsec.conf version information 2006-10-06 07:47:11 +00:00
Andreas Steffen e088404b0c carolKey.pem is now protected by 3DES passphrase 2006-10-06 07:45:42 +00:00
Andreas Steffen 38eb3325a1 updated net runlevel scripts 2006-10-06 07:43:31 +00:00
Andreas Steffen 1c1f9ae109 updated net init scripts 2006-10-06 07:42:17 +00:00
Andreas Steffen 564363ee29 new net configuration format 2006-10-06 07:40:39 +00:00
Andreas Steffen dc48763940 HW addresses must be predefined 2006-10-06 07:32:02 +00:00
Andreas Steffen b3fcb01fd2 added new test scenarios 2006-09-25 05:42:13 +00:00
Andreas Steffen 957115957a enabled firewall support 2006-09-18 07:41:54 +00:00
Andreas Steffen f9aa9e2977 added 2006-09-18 07:41:22 +00:00
Andreas Steffen a4dcb7ded6 added 2006-09-18 07:41:09 +00:00
Andreas Steffen 8e746cdf88 added 2006-09-18 07:40:37 +00:00
Andreas Steffen dc8ad57aa9 two new test scenarios 2006-09-14 06:39:14 +00:00
Andreas Steffen 1f948f684a fixed path to images directory 2006-09-14 06:38:50 +00:00
Andreas Steffen 834b2ce2e2 version bump of UML kernel to 2.6.17.11 2006-08-25 09:25:12 +00:00
Andreas Steffen 8ae6a48f94 version bumps 2006-08-25 07:30:29 +00:00
Andreas Steffen a9ae2c01ed added 2006-07-14 12:58:47 +00:00
Martin Willi 106e9fc6f8 updated mixed tests to new charon output 2006-07-14 12:29:26 +00:00
Martin Willi 7af345e11e added test cases from NAT team
updated all IKEv2 tests to work with new status output
2006-07-13 12:45:18 +00:00
Martin Willi 1279eda042 added tcpdumpcount function from NATT guys
added possibility to mount the strongswan tree into all UMLs
added script for installing from shared tree in all UMLs
added script to shut down all UMLs properly
2006-07-13 12:43:52 +00:00
Martin Willi be247b817b removed in favour of tests from NAT team 2006-07-13 12:00:36 +00:00
Andreas Steffen ad3dab0520 added 2006-07-07 05:44:45 +00:00
Andreas Steffen 343ae15214 test currently without firewall 2006-07-04 06:54:53 +00:00
Andreas Steffen ef9e55def4 added 2006-07-04 06:51:58 +00:00
Andreas Steffen 5061a2af1a added 2006-07-04 06:13:54 +00:00
Andreas Steffen 5fc1577728 added 2006-07-04 06:13:33 +00:00
Andreas Steffen 20f29a359e removed 2006-07-04 06:13:07 +00:00
Andreas Steffen 1a8a163630 removed version information from ipsec.conf 2006-07-04 06:12:10 +00:00
Andreas Steffen 6981aca04f added USE_LEAK_DETECTIVE option 2006-07-03 08:36:47 +00:00
Andreas Steffen 6db2ac30c7 tests with subdirectory structure 2006-07-03 07:11:30 +00:00
Andreas Steffen 92069df82f removed tests 2006-07-03 07:10:25 +00:00
Andreas Steffen d9a883c337 introduced subdirectory structure 2006-07-03 07:10:17 +00:00
Andreas Steffen dd50707e4f ESP packet size changed 2006-06-27 07:08:37 +00:00
Andreas Steffen d9d35d5911 added local CRLs 2006-06-14 12:41:37 +00:00
Andreas Steffen 71d277e468 added rekeying parameters 2006-06-14 12:41:17 +00:00
Andreas Steffen 016816b880 single tests now start up faster 2006-06-12 07:51:18 +00:00
Andreas Steffen 0f2094930d cosmetics 2006-06-06 06:24:04 +00:00
Andreas Steffen 71c80765a5 ipv6-host2host scenario added 2006-06-06 05:43:32 +00:00
Andreas Steffen fc0afb6810 created IPv6 environment 2006-06-06 05:41:21 +00:00
Martin Willi 3b8af2ab60 - added host2host test for ikev2 2006-05-31 08:15:23 +00:00
Andreas Steffen ef8f5256d3 tests with subjectAltNames now 2006-05-31 05:47:30 +00:00
Martin Willi 5ade114fd5 - using hubs instead of switches, which allows us
to sniff the traffic from the host system.
2006-05-23 10:08:12 +00:00
Andreas Steffen 6359870808 corrrected description 2006-05-23 08:11:09 +00:00
Martin Willi 32d24cb513 - added test for ikev1-ikev2 mixed mode
- added test ikev2 roadwarrior scenario
2006-05-18 06:22:07 +00:00
Martin Willi b5e1560659 - applied andreas's patch
- logger output improvements
  - testin gupdates
  - and a lot more
2006-05-18 06:02:28 +00:00
Martin Willi 1e93135408 - updated testsuite to autotools 2006-05-17 14:24:18 +00:00
Martin Willi 65cf07ac1d - applied patch from andreas
- added charonstart option to config
  - new ikev2 tests for UML
2006-05-06 07:09:45 +00:00
Martin Willi 9820c0e208 - applied patch from andreas
- pem loading
	- secrets file parsing
	- ikev2 testcase
	- some other additions here and there
2006-05-04 07:55:42 +00:00
Martin Willi 997358a6c4 - import of strongswan-2.7.0
- applied patch for charon
2006-04-28 07:14:48 +00:00