Commit Graph

380 Commits

Author SHA1 Message Date
Andreas Steffen e44612c878 added sql/rw-psk-ipv4 scenario 2008-04-07 10:24:49 +00:00
Andreas Steffen af9e3954e2 set accelerated rekeying defaults in ipsec.sql for UML scenarios 2008-04-07 09:10:58 +00:00
Andreas Steffen 2c0df332a9 added sql/rw-cert scenario 2008-04-07 08:57:46 +00:00
Andreas Steffen 6fbd3f1738 fixed path to ipsec.sql 2008-04-07 07:57:38 +00:00
Andreas Steffen 56bcc343ff ipsec.sql remains in /etc/ipsec.d 2008-04-07 07:25:04 +00:00
Andreas Steffen decfd8e546 moved strongswan.conf to /etc 2008-04-07 07:21:06 +00:00
Andreas Steffen 096b7f6889 do-tests now lists strongswan.conf and ip xfrm policy|state 2008-04-07 06:14:21 +00:00
Andreas Steffen 84fc1abf7a added sql/net2net-psk scenario 2008-04-06 18:11:19 +00:00
Andreas Steffen b6032b2400 corrected description 2008-04-06 18:10:57 +00:00
Andreas Steffen b26fecefa0 disable mobike in sql/net2net-cert scenario 2008-04-06 12:53:57 +00:00
Andreas Steffen 69813bd27f added sql/net2net-cert scenario 2008-04-06 12:06:33 +00:00
Andreas Steffen babaaa3c11 support of SQL databases in UML scenarios 2008-04-06 12:05:42 +00:00
Andreas Steffen 158a62c326 adapted ikev2 uml scenarios for the 4.2 version 2008-04-01 20:05:02 +00:00
Andreas Steffen 1c65129148 adapted configure options in testing.conf and build-umlrootfs 2008-03-29 19:33:02 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi b820f8aa8e reverted accidentally commited testing config 2008-03-13 14:20:20 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen 2df655134c activated svn:keywords on all UML scripts 2008-03-01 10:25:52 +00:00
Andreas Steffen 7a691623c1 support of gnome-terminal in UML testing 2008-02-29 20:17:28 +00:00
Andreas Steffen 37940132a4 take down eth1 interface on alice via ssh 2008-02-29 17:00:07 +00:00
Andreas Steffen 2571708bea added sleep due to new scheduler in 2.6.24 kernel 2008-02-29 15:52:25 +00:00
Andreas Steffen a983ce889a version bumps 2008-02-29 15:51:16 +00:00
Andreas Steffen 6859f760d9 release of 4.1.11 bug fix version 2008-02-14 21:26:21 +00:00
Andreas Steffen 13aa41d663 added support of --enable-eap-sim 2008-02-14 21:25:38 +00:00
Andreas Steffen af0de6272d disable eth1 interface of UML host alice after booting 2008-02-14 21:24:54 +00:00
Andreas Steffen f750247f5e added sleep 1 to ikev1/xauth-rsa-nosecret scenario 2008-02-14 21:23:48 +00:00
Andreas Steffen 663fedbe44 implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa' 2008-02-04 14:52:06 +00:00
Andreas Steffen e4f5123ac7 add ip xfrm state test for ikev1 transport mode 2007-12-19 21:02:15 +00:00
Andreas Steffen 2f9f4f3a3d version bumps 2007-12-19 21:01:19 +00:00
Andreas Steffen c2a703619d added a-v-m-c-w-med.png topology graph 2007-12-19 20:59:54 +00:00
Andreas Steffen 8a4e5a957e added behind-same-nat p2p scenario 2007-12-19 17:55:08 +00:00
Andreas Steffen e044510e5a set --enable-eap-aka in UML scenarios 2007-12-19 00:47:56 +00:00
Andreas Steffen 1f490cb1ec check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios 2007-12-19 00:47:21 +00:00
Andreas Steffen 6a49300c55 added ipv6 transport mode scenarios for IKEv1 and IKEv2 2007-12-19 00:45:26 +00:00
Andreas Steffen a37e8f32d8 updated rw-eap-aka-rsa scenario 2007-12-19 00:11:20 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Andreas Steffen 81edb520b2 version bump to 4.1.10 2007-12-04 23:54:32 +00:00
Andreas Steffen a349dc58f1 bob is passive responder in p2pnat scenario 2007-11-26 22:24:08 +00:00
Andreas Steffen 5af3a03396 added USE_P2P UML compile option 2007-11-26 00:29:52 +00:00
Andreas Steffen a19ad35c5b added a-m-c-w-s-b-med.png topology graph 2007-11-26 00:28:29 +00:00
Andreas Steffen 545ed7dde0 added p2pnat/medsrv-psk scenario 2007-11-26 00:25:22 +00:00
Andreas Steffen 4c125ea26d added two scenarios testing repeated authentication (RFC 4478) 2007-11-25 15:47:58 +00:00
Andreas Steffen 8b531fb5d1 version bump to uml linux kernel 2.6.23.8 2007-11-21 23:30:28 +00:00
Andreas Steffen b3b379e044 fixed typo in iptables script 2007-11-16 22:45:47 +00:00
Andreas Steffen 97aef73e9c added rw-psk-ikev2 scenario 2007-11-16 20:25:26 +00:00
Andreas Steffen 3f42fcb7a7 added rw-psk-ikev1 scenario 2007-11-16 20:25:15 +00:00
Andreas Steffen 1f1ec595e5 updated gentoo root file system 2007-11-09 00:49:45 +00:00
Andreas Steffen 833bb3ca04 upgrade of apache2 runlevel scripts from 2.0 to 2.2 2007-11-09 00:48:08 +00:00
Andreas Steffen 17d75fb4a2 upgrade from apache 2.0 to 2.2 2007-11-09 00:38:01 +00:00
Andreas Steffen 397bf2a1e7 IPv6 scenarios now used the new IPv6 topology graphs 2007-11-08 13:28:30 +00:00
Andreas Steffen 552abdaa53 created IPv6 topology graphs 2007-11-08 13:26:41 +00:00
Andreas Steffen 15ab7c1cc2 removed internal IP from m-w-s.png 2007-11-08 13:25:25 +00:00
Andreas Steffen c65ad277c2 another four IPv6 scenarios fully demonstrate ip6tables firewall use 2007-11-08 11:59:29 +00:00
Andreas Steffen 361deb6f76 enabled ip6tables-based firewalling in first two IPv6 scenarios 2007-11-07 16:41:57 +00:00
Andreas Steffen 141d0506fa do-tests script applies ip6tables in ipv6 subdir 2007-11-07 12:22:44 +00:00
Andreas Steffen a37d379dbb disable MOBIKE in net2net IPv6 scenario 2007-11-06 18:19:51 +00:00
Andreas Steffen 7430f44c47 added rw-ikev1 IPv6 scenario 2007-11-06 17:50:43 +00:00
Andreas Steffen e2d1f05f0e charon does not need leftnexthop for ipv6 scenarios 2007-11-06 16:38:29 +00:00
Andreas Steffen 5a1979deb9 new net2net ipv6 scenarios for IKEv1 and IKEv2 2007-11-06 13:44:57 +00:00
Andreas Steffen 564f64f3c5 uml kernel version bump to 2.6.23.1 2007-10-17 03:39:16 +00:00
Andreas Steffen 4565d23782 added RCSID 2007-10-08 20:18:34 +00:00
Andreas Steffen c840a9b484 version bump to 4.1.8 2007-10-04 06:41:45 +00:00
Andreas Steffen b3e0c6b415 selection from multiple PSK in ipsec.secrets 2007-10-03 06:54:52 +00:00
Andreas Steffen c57f8cc1ee check for NAT faking log entry 2007-10-02 20:35:48 +00:00
Andreas Steffen 701ece07fb added force-udp-encaps scenario 2007-10-02 20:24:13 +00:00
Andreas Steffen 7b315fcd1f added mobike=no to net2net scenarios 2007-10-02 19:27:31 +00:00
Andreas Steffen cd45c2faf3 switched mobike-nat and mobike-virtual-ip scenarios to a virtual IP of 10.3.0.3 2007-10-02 19:23:12 +00:00
Andreas Steffen 9c7aac664c version bump to 4.1.7 2007-10-02 19:11:03 +00:00
Andreas Steffen effdbc7c70 activated the libstrongswan integrity test 2007-10-02 19:10:24 +00:00
Andreas Steffen cdc70899a8 change ipsec route table in UML scenarios 2007-08-29 13:03:34 +00:00
Andreas Steffen 0886e64022 updated index.txt.old 2007-08-29 12:50:26 +00:00
Andreas Steffen 52d39feb81 set ignore properties 2007-08-28 07:02:23 +00:00
Andreas Steffen 8234dd1216 testing/do-tests is made from do-tests.in by inserting actual routing table 2007-08-28 06:40:39 +00:00
Andreas Steffen 3dcf9dbd70 version bump to 4.1.6 2007-08-08 08:17:48 +00:00
Andreas Steffen dce4600015 version bumps 2007-08-07 21:14:06 +00:00
Andreas Steffen f7b49faa51 ID_FQDN lost its @ prefix 2007-08-03 13:36:28 +00:00
Andreas Steffen 90b21fde11 use cgecho for green output 2007-08-03 10:58:45 +00:00
Andreas Steffen d49cc7b383 check source routing table 100 2007-08-03 10:57:37 +00:00
Andreas Steffen 0698d91c31 re-introduced leftnexthop=%direct 2007-08-03 10:57:08 +00:00
Andreas Steffen 1f4357ca4d added routing table 50 for passthrough routes 2007-08-03 10:56:40 +00:00
Andreas Steffen 1fb704404b execute conntrack -F at the outset 2007-07-04 18:55:54 +00:00
Andreas Steffen 13763a385c suppress stderr in start-switches script 2007-07-04 18:50:21 +00:00
Andreas Steffen 0a46e963ff added three mobike scenarios 2007-07-04 17:39:10 +00:00
Andreas Steffen 959b01aca5 version bumps 2007-07-03 13:08:13 +00:00
Andreas Steffen c598ac6360 changes in uml configuration to allow mobike 2007-07-02 09:52:20 +00:00
Andreas Steffen cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Andreas Steffen 6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen 361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00
Andreas Steffen 571bca865b added dynamic DNS scenarios 2007-06-18 17:50:54 +00:00
Andreas Steffen 174c9e18c1 eliminated nexthop 2007-06-17 15:29:49 +00:00
Andreas Steffen aca0317d92 removed all nexthop statements 2007-06-10 18:52:14 +00:00
Andreas Steffen b9659a50dc version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4 2007-06-08 07:11:06 +00:00
Andreas Steffen ed1813ff6f added x as a wildcard for number of tests 2007-06-08 07:10:00 +00:00
Andreas Steffen 0b455e2e7b pass eroutes now need explicit routes 2007-06-08 07:06:10 +00:00
Andreas Steffen 2b34eafbc0 changed exceeded to reached 2007-05-25 11:42:00 +00:00
Andreas Steffen 3367fa8b74 fixed html output 2007-05-25 11:33:49 +00:00
Andreas Steffen 60b44bbe62 stop dave in posttest.dat 2007-05-25 09:29:10 +00:00
Andreas Steffen 0bc543f1dc multi-level-ca-strict scenario added 2007-05-25 09:23:24 +00:00
Andreas Steffen 238b92d632 virtual-ip-override scenario added 2007-05-25 09:22:42 +00:00
Andreas Steffen 845cfa025b stop iptables on dave 2007-05-25 09:22:08 +00:00
Andreas Steffen fc92116296 fixed virtual-ip scenario 2007-05-25 07:28:00 +00:00
Andreas Steffen ea7f3e1bca version bump to 4.1.3 2007-05-25 07:27:33 +00:00
Andreas Steffen 0749196612 cecho changes in UML scripts 2007-05-23 22:24:47 +00:00
Andreas Steffen c502b1b4c6 added virtual-ip scenario 2007-05-23 21:41:05 +00:00
Andreas Steffen 9a590819a2 reduced crl validity of research and sales ca to 15 days 2007-05-19 19:47:24 +00:00
Andreas Steffen 4756b7aa5d set rightca= to root CA 2007-05-18 13:19:47 +00:00
Andreas Steffen 9619b0d33a added multi-level-ca-revoked scenario 2007-05-18 13:18:28 +00:00
Andreas Steffen 51a9174071 added multi-level-ca-loop scenario 2007-05-18 12:42:49 +00:00
Andreas Steffen a11cd0a102 support of crlnumber in research and sales CAs 2007-05-18 12:24:50 +00:00
Andreas Steffen 162f1b7056 added multi-level-ca-ldap scenario 2007-05-18 12:23:31 +00:00
Andreas Steffen 9f97b8a108 added multi-level-ca scenario 2007-05-18 12:23:10 +00:00
Andreas Steffen f24b4886ac ca-based policy now requires rightca=%any in the two-certs scenario 2007-05-18 10:53:58 +00:00
Andreas Steffen ad9da6ec4b hierarchical display of tests 2007-05-15 20:30:21 +00:00
Andreas Steffen 547f1dd56c added two-certs scenario 2007-05-15 15:54:06 +00:00
Andreas Steffen ba42813ca3 added esp-alg-aesxcbc scenario 2007-04-28 20:01:06 +00:00
Andreas Steffen 187b181432 fixed evaltest.dat 2007-04-28 20:00:39 +00:00
Andreas Steffen e0e399ccc5 generated new winnetou certificate 2007-04-27 21:41:27 +00:00
Andreas Steffen 85e658a2c4 added crlnumber 2007-04-27 21:41:07 +00:00
Andreas Steffen 0a09cd6864 generated certs for ocsp-strict-ifuri scenario 2007-04-20 14:54:10 +00:00
Andreas Steffen 4031b8bae7 generated certs for ocsp-strict-ifuri scenario 2007-04-20 14:52:32 +00:00
Andreas Steffen 221a64e4f7 fixed test scenarios 2007-04-20 14:51:39 +00:00
Andreas Steffen ea4563d93f ocsp-strict-ifuri added 2007-04-20 14:50:42 +00:00
Andreas Steffen ce9b4ea6e6 ocsp-no-signer-cert added 2007-04-20 14:49:50 +00:00
Andreas Steffen e4c58fdb09 set sleep back to 180 s 2007-04-12 19:41:24 +00:00
Andreas Steffen 4d50f872d4 adapted evaltest to refactored ipsec status output 2007-04-11 08:18:38 +00:00
Andreas Steffen 90faff8e5a reduced sleep from 180 to 170 seconds 2007-04-10 23:22:26 +00:00
Andreas Steffen 1628cd6bda adapt evaltest to changed debug output 2007-04-06 10:39:24 +00:00
Andreas Steffen f5fc277463 crl-ldap scenario added 2007-04-06 10:02:27 +00:00
Andreas Steffen 915c7add1f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:51:12 +00:00
Andreas Steffen 389623374f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:40:33 +00:00
Andreas Steffen 1d1e55b4c3 added crl-to-cache 2007-04-05 17:18:25 +00:00
Andreas Steffen 7771780b38 added crl-from-cache 2007-04-05 17:18:15 +00:00
Andreas Steffen a224faf9ea block crl fetching 2007-04-05 17:10:59 +00:00
Andreas Steffen 45c97f180f block crl fetching 2007-04-05 17:09:54 +00:00
Andreas Steffen 69837d5baa support multiple ocsp servers 2007-04-05 17:08:51 +00:00
Andreas Steffen e47a7a131d reinsert SHAREDTREE 2007-04-04 05:29:20 +00:00
Andreas Steffen c056d929b2 --enable-ldap without value 3 2007-04-04 05:26:21 +00:00
Andreas Steffen ace5de18b2 iptables -L has now a link of its own 2007-04-03 22:03:25 +00:00
Andreas Steffen 7e4f8db2bf added ip route list and iptables -L 2007-04-03 21:18:46 +00:00
Andreas Steffen 51ae94d775 added OCSP signing certificates for the research and sales CAs 2007-03-26 07:08:39 +00:00
Andreas Steffen e3e6a1ec22 added ocsp-multi-level scenario 2007-03-26 07:05:02 +00:00
Andreas Steffen 4b0f0e6cb4 carol's cert and private key does not have to be deleted 2007-03-23 17:20:44 +00:00
Andreas Steffen 1eb6a5f4a2 deleted 2007-03-21 22:19:17 +00:00
Andreas Steffen d8d948a7e0 added 2007-03-21 22:19:00 +00:00
Andreas Steffen 878aecdf12 renamed ocsp-timeouts to ocsp-timeouts-good 2007-03-21 22:18:17 +00:00
Andreas Steffen f9a73bee9c delay OCSP response by 5 seconds 2007-03-20 04:35:16 +00:00
Andreas Steffen 114c6646af add daemon.log to web page 2007-03-15 15:01:36 +00:00
Andreas Steffen 4ebaa476f1 remove /etc/resolv.conf 2007-03-15 15:00:51 +00:00