Andreas Steffen
|
e44612c878
|
added sql/rw-psk-ipv4 scenario
|
2008-04-07 10:24:49 +00:00 |
Andreas Steffen
|
af9e3954e2
|
set accelerated rekeying defaults in ipsec.sql for UML scenarios
|
2008-04-07 09:10:58 +00:00 |
Andreas Steffen
|
2c0df332a9
|
added sql/rw-cert scenario
|
2008-04-07 08:57:46 +00:00 |
Andreas Steffen
|
6fbd3f1738
|
fixed path to ipsec.sql
|
2008-04-07 07:57:38 +00:00 |
Andreas Steffen
|
56bcc343ff
|
ipsec.sql remains in /etc/ipsec.d
|
2008-04-07 07:25:04 +00:00 |
Andreas Steffen
|
decfd8e546
|
moved strongswan.conf to /etc
|
2008-04-07 07:21:06 +00:00 |
Andreas Steffen
|
096b7f6889
|
do-tests now lists strongswan.conf and ip xfrm policy|state
|
2008-04-07 06:14:21 +00:00 |
Andreas Steffen
|
84fc1abf7a
|
added sql/net2net-psk scenario
|
2008-04-06 18:11:19 +00:00 |
Andreas Steffen
|
b6032b2400
|
corrected description
|
2008-04-06 18:10:57 +00:00 |
Andreas Steffen
|
b26fecefa0
|
disable mobike in sql/net2net-cert scenario
|
2008-04-06 12:53:57 +00:00 |
Andreas Steffen
|
69813bd27f
|
added sql/net2net-cert scenario
|
2008-04-06 12:06:33 +00:00 |
Andreas Steffen
|
babaaa3c11
|
support of SQL databases in UML scenarios
|
2008-04-06 12:05:42 +00:00 |
Andreas Steffen
|
158a62c326
|
adapted ikev2 uml scenarios for the 4.2 version
|
2008-04-01 20:05:02 +00:00 |
Andreas Steffen
|
1c65129148
|
adapted configure options in testing.conf and build-umlrootfs
|
2008-03-29 19:33:02 +00:00 |
Tobias Brunner
|
e74bc8e51d
|
changed external interface to the mediation extension.
|
2008-03-27 12:31:35 +00:00 |
Tobias Brunner
|
dc04b7c743
|
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
|
2008-03-26 18:40:19 +00:00 |
Martin Willi
|
b820f8aa8e
|
reverted accidentally commited testing config
|
2008-03-13 14:20:20 +00:00 |
Martin Willi
|
552cc11b1f
|
merged the modularization branch (credentials) back to trunk
|
2008-03-13 14:14:44 +00:00 |
Andreas Steffen
|
2df655134c
|
activated svn:keywords on all UML scripts
|
2008-03-01 10:25:52 +00:00 |
Andreas Steffen
|
7a691623c1
|
support of gnome-terminal in UML testing
|
2008-02-29 20:17:28 +00:00 |
Andreas Steffen
|
37940132a4
|
take down eth1 interface on alice via ssh
|
2008-02-29 17:00:07 +00:00 |
Andreas Steffen
|
2571708bea
|
added sleep due to new scheduler in 2.6.24 kernel
|
2008-02-29 15:52:25 +00:00 |
Andreas Steffen
|
a983ce889a
|
version bumps
|
2008-02-29 15:51:16 +00:00 |
Andreas Steffen
|
6859f760d9
|
release of 4.1.11 bug fix version
|
2008-02-14 21:26:21 +00:00 |
Andreas Steffen
|
13aa41d663
|
added support of --enable-eap-sim
|
2008-02-14 21:25:38 +00:00 |
Andreas Steffen
|
af0de6272d
|
disable eth1 interface of UML host alice after booting
|
2008-02-14 21:24:54 +00:00 |
Andreas Steffen
|
f750247f5e
|
added sleep 1 to ikev1/xauth-rsa-nosecret scenario
|
2008-02-14 21:23:48 +00:00 |
Andreas Steffen
|
663fedbe44
|
implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa'
|
2008-02-04 14:52:06 +00:00 |
Andreas Steffen
|
e4f5123ac7
|
add ip xfrm state test for ikev1 transport mode
|
2007-12-19 21:02:15 +00:00 |
Andreas Steffen
|
2f9f4f3a3d
|
version bumps
|
2007-12-19 21:01:19 +00:00 |
Andreas Steffen
|
c2a703619d
|
added a-v-m-c-w-med.png topology graph
|
2007-12-19 20:59:54 +00:00 |
Andreas Steffen
|
8a4e5a957e
|
added behind-same-nat p2p scenario
|
2007-12-19 17:55:08 +00:00 |
Andreas Steffen
|
e044510e5a
|
set --enable-eap-aka in UML scenarios
|
2007-12-19 00:47:56 +00:00 |
Andreas Steffen
|
1f490cb1ec
|
check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios
|
2007-12-19 00:47:21 +00:00 |
Andreas Steffen
|
6a49300c55
|
added ipv6 transport mode scenarios for IKEv1 and IKEv2
|
2007-12-19 00:45:26 +00:00 |
Andreas Steffen
|
a37e8f32d8
|
updated rw-eap-aka-rsa scenario
|
2007-12-19 00:11:20 +00:00 |
Martin Willi
|
26e2467692
|
ported EAP-AKA branch into trunk
|
2007-12-13 10:54:29 +00:00 |
Andreas Steffen
|
81edb520b2
|
version bump to 4.1.10
|
2007-12-04 23:54:32 +00:00 |
Andreas Steffen
|
a349dc58f1
|
bob is passive responder in p2pnat scenario
|
2007-11-26 22:24:08 +00:00 |
Andreas Steffen
|
5af3a03396
|
added USE_P2P UML compile option
|
2007-11-26 00:29:52 +00:00 |
Andreas Steffen
|
a19ad35c5b
|
added a-m-c-w-s-b-med.png topology graph
|
2007-11-26 00:28:29 +00:00 |
Andreas Steffen
|
545ed7dde0
|
added p2pnat/medsrv-psk scenario
|
2007-11-26 00:25:22 +00:00 |
Andreas Steffen
|
4c125ea26d
|
added two scenarios testing repeated authentication (RFC 4478)
|
2007-11-25 15:47:58 +00:00 |
Andreas Steffen
|
8b531fb5d1
|
version bump to uml linux kernel 2.6.23.8
|
2007-11-21 23:30:28 +00:00 |
Andreas Steffen
|
b3b379e044
|
fixed typo in iptables script
|
2007-11-16 22:45:47 +00:00 |
Andreas Steffen
|
97aef73e9c
|
added rw-psk-ikev2 scenario
|
2007-11-16 20:25:26 +00:00 |
Andreas Steffen
|
3f42fcb7a7
|
added rw-psk-ikev1 scenario
|
2007-11-16 20:25:15 +00:00 |
Andreas Steffen
|
1f1ec595e5
|
updated gentoo root file system
|
2007-11-09 00:49:45 +00:00 |
Andreas Steffen
|
833bb3ca04
|
upgrade of apache2 runlevel scripts from 2.0 to 2.2
|
2007-11-09 00:48:08 +00:00 |
Andreas Steffen
|
17d75fb4a2
|
upgrade from apache 2.0 to 2.2
|
2007-11-09 00:38:01 +00:00 |
Andreas Steffen
|
397bf2a1e7
|
IPv6 scenarios now used the new IPv6 topology graphs
|
2007-11-08 13:28:30 +00:00 |
Andreas Steffen
|
552abdaa53
|
created IPv6 topology graphs
|
2007-11-08 13:26:41 +00:00 |
Andreas Steffen
|
15ab7c1cc2
|
removed internal IP from m-w-s.png
|
2007-11-08 13:25:25 +00:00 |
Andreas Steffen
|
c65ad277c2
|
another four IPv6 scenarios fully demonstrate ip6tables firewall use
|
2007-11-08 11:59:29 +00:00 |
Andreas Steffen
|
361deb6f76
|
enabled ip6tables-based firewalling in first two IPv6 scenarios
|
2007-11-07 16:41:57 +00:00 |
Andreas Steffen
|
141d0506fa
|
do-tests script applies ip6tables in ipv6 subdir
|
2007-11-07 12:22:44 +00:00 |
Andreas Steffen
|
a37d379dbb
|
disable MOBIKE in net2net IPv6 scenario
|
2007-11-06 18:19:51 +00:00 |
Andreas Steffen
|
7430f44c47
|
added rw-ikev1 IPv6 scenario
|
2007-11-06 17:50:43 +00:00 |
Andreas Steffen
|
e2d1f05f0e
|
charon does not need leftnexthop for ipv6 scenarios
|
2007-11-06 16:38:29 +00:00 |
Andreas Steffen
|
5a1979deb9
|
new net2net ipv6 scenarios for IKEv1 and IKEv2
|
2007-11-06 13:44:57 +00:00 |
Andreas Steffen
|
564f64f3c5
|
uml kernel version bump to 2.6.23.1
|
2007-10-17 03:39:16 +00:00 |
Andreas Steffen
|
4565d23782
|
added RCSID
|
2007-10-08 20:18:34 +00:00 |
Andreas Steffen
|
c840a9b484
|
version bump to 4.1.8
|
2007-10-04 06:41:45 +00:00 |
Andreas Steffen
|
b3e0c6b415
|
selection from multiple PSK in ipsec.secrets
|
2007-10-03 06:54:52 +00:00 |
Andreas Steffen
|
c57f8cc1ee
|
check for NAT faking log entry
|
2007-10-02 20:35:48 +00:00 |
Andreas Steffen
|
701ece07fb
|
added force-udp-encaps scenario
|
2007-10-02 20:24:13 +00:00 |
Andreas Steffen
|
7b315fcd1f
|
added mobike=no to net2net scenarios
|
2007-10-02 19:27:31 +00:00 |
Andreas Steffen
|
cd45c2faf3
|
switched mobike-nat and mobike-virtual-ip scenarios to a virtual IP of 10.3.0.3
|
2007-10-02 19:23:12 +00:00 |
Andreas Steffen
|
9c7aac664c
|
version bump to 4.1.7
|
2007-10-02 19:11:03 +00:00 |
Andreas Steffen
|
effdbc7c70
|
activated the libstrongswan integrity test
|
2007-10-02 19:10:24 +00:00 |
Andreas Steffen
|
cdc70899a8
|
change ipsec route table in UML scenarios
|
2007-08-29 13:03:34 +00:00 |
Andreas Steffen
|
0886e64022
|
updated index.txt.old
|
2007-08-29 12:50:26 +00:00 |
Andreas Steffen
|
52d39feb81
|
set ignore properties
|
2007-08-28 07:02:23 +00:00 |
Andreas Steffen
|
8234dd1216
|
testing/do-tests is made from do-tests.in by inserting actual routing table
|
2007-08-28 06:40:39 +00:00 |
Andreas Steffen
|
3dcf9dbd70
|
version bump to 4.1.6
|
2007-08-08 08:17:48 +00:00 |
Andreas Steffen
|
dce4600015
|
version bumps
|
2007-08-07 21:14:06 +00:00 |
Andreas Steffen
|
f7b49faa51
|
ID_FQDN lost its @ prefix
|
2007-08-03 13:36:28 +00:00 |
Andreas Steffen
|
90b21fde11
|
use cgecho for green output
|
2007-08-03 10:58:45 +00:00 |
Andreas Steffen
|
d49cc7b383
|
check source routing table 100
|
2007-08-03 10:57:37 +00:00 |
Andreas Steffen
|
0698d91c31
|
re-introduced leftnexthop=%direct
|
2007-08-03 10:57:08 +00:00 |
Andreas Steffen
|
1f4357ca4d
|
added routing table 50 for passthrough routes
|
2007-08-03 10:56:40 +00:00 |
Andreas Steffen
|
1fb704404b
|
execute conntrack -F at the outset
|
2007-07-04 18:55:54 +00:00 |
Andreas Steffen
|
13763a385c
|
suppress stderr in start-switches script
|
2007-07-04 18:50:21 +00:00 |
Andreas Steffen
|
0a46e963ff
|
added three mobike scenarios
|
2007-07-04 17:39:10 +00:00 |
Andreas Steffen
|
959b01aca5
|
version bumps
|
2007-07-03 13:08:13 +00:00 |
Andreas Steffen
|
c598ac6360
|
changes in uml configuration to allow mobike
|
2007-07-02 09:52:20 +00:00 |
Andreas Steffen
|
cea6634fde
|
MobIKE requires iptables to open udp/4500
|
2007-06-28 21:33:51 +00:00 |
Andreas Steffen
|
b9212e5a93
|
MobIKE requires iptables to open udp/4500
|
2007-06-28 21:33:13 +00:00 |
Andreas Steffen
|
6a39bc4061
|
added passthrough scenario
|
2007-06-27 14:25:15 +00:00 |
Andreas Steffen
|
361712fe37
|
use of the right=%<fqdn> wildcard
|
2007-06-26 10:46:30 +00:00 |
Andreas Steffen
|
571bca865b
|
added dynamic DNS scenarios
|
2007-06-18 17:50:54 +00:00 |
Andreas Steffen
|
174c9e18c1
|
eliminated nexthop
|
2007-06-17 15:29:49 +00:00 |
Andreas Steffen
|
aca0317d92
|
removed all nexthop statements
|
2007-06-10 18:52:14 +00:00 |
Andreas Steffen
|
b9659a50dc
|
version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4
|
2007-06-08 07:11:06 +00:00 |
Andreas Steffen
|
ed1813ff6f
|
added x as a wildcard for number of tests
|
2007-06-08 07:10:00 +00:00 |
Andreas Steffen
|
0b455e2e7b
|
pass eroutes now need explicit routes
|
2007-06-08 07:06:10 +00:00 |
Andreas Steffen
|
2b34eafbc0
|
changed exceeded to reached
|
2007-05-25 11:42:00 +00:00 |
Andreas Steffen
|
3367fa8b74
|
fixed html output
|
2007-05-25 11:33:49 +00:00 |
Andreas Steffen
|
60b44bbe62
|
stop dave in posttest.dat
|
2007-05-25 09:29:10 +00:00 |
Andreas Steffen
|
0bc543f1dc
|
multi-level-ca-strict scenario added
|
2007-05-25 09:23:24 +00:00 |
Andreas Steffen
|
238b92d632
|
virtual-ip-override scenario added
|
2007-05-25 09:22:42 +00:00 |
Andreas Steffen
|
845cfa025b
|
stop iptables on dave
|
2007-05-25 09:22:08 +00:00 |
Andreas Steffen
|
fc92116296
|
fixed virtual-ip scenario
|
2007-05-25 07:28:00 +00:00 |
Andreas Steffen
|
ea7f3e1bca
|
version bump to 4.1.3
|
2007-05-25 07:27:33 +00:00 |
Andreas Steffen
|
0749196612
|
cecho changes in UML scripts
|
2007-05-23 22:24:47 +00:00 |
Andreas Steffen
|
c502b1b4c6
|
added virtual-ip scenario
|
2007-05-23 21:41:05 +00:00 |
Andreas Steffen
|
9a590819a2
|
reduced crl validity of research and sales ca to 15 days
|
2007-05-19 19:47:24 +00:00 |
Andreas Steffen
|
4756b7aa5d
|
set rightca= to root CA
|
2007-05-18 13:19:47 +00:00 |
Andreas Steffen
|
9619b0d33a
|
added multi-level-ca-revoked scenario
|
2007-05-18 13:18:28 +00:00 |
Andreas Steffen
|
51a9174071
|
added multi-level-ca-loop scenario
|
2007-05-18 12:42:49 +00:00 |
Andreas Steffen
|
a11cd0a102
|
support of crlnumber in research and sales CAs
|
2007-05-18 12:24:50 +00:00 |
Andreas Steffen
|
162f1b7056
|
added multi-level-ca-ldap scenario
|
2007-05-18 12:23:31 +00:00 |
Andreas Steffen
|
9f97b8a108
|
added multi-level-ca scenario
|
2007-05-18 12:23:10 +00:00 |
Andreas Steffen
|
f24b4886ac
|
ca-based policy now requires rightca=%any in the two-certs scenario
|
2007-05-18 10:53:58 +00:00 |
Andreas Steffen
|
ad9da6ec4b
|
hierarchical display of tests
|
2007-05-15 20:30:21 +00:00 |
Andreas Steffen
|
547f1dd56c
|
added two-certs scenario
|
2007-05-15 15:54:06 +00:00 |
Andreas Steffen
|
ba42813ca3
|
added esp-alg-aesxcbc scenario
|
2007-04-28 20:01:06 +00:00 |
Andreas Steffen
|
187b181432
|
fixed evaltest.dat
|
2007-04-28 20:00:39 +00:00 |
Andreas Steffen
|
e0e399ccc5
|
generated new winnetou certificate
|
2007-04-27 21:41:27 +00:00 |
Andreas Steffen
|
85e658a2c4
|
added crlnumber
|
2007-04-27 21:41:07 +00:00 |
Andreas Steffen
|
0a09cd6864
|
generated certs for ocsp-strict-ifuri scenario
|
2007-04-20 14:54:10 +00:00 |
Andreas Steffen
|
4031b8bae7
|
generated certs for ocsp-strict-ifuri scenario
|
2007-04-20 14:52:32 +00:00 |
Andreas Steffen
|
221a64e4f7
|
fixed test scenarios
|
2007-04-20 14:51:39 +00:00 |
Andreas Steffen
|
ea4563d93f
|
ocsp-strict-ifuri added
|
2007-04-20 14:50:42 +00:00 |
Andreas Steffen
|
ce9b4ea6e6
|
ocsp-no-signer-cert added
|
2007-04-20 14:49:50 +00:00 |
Andreas Steffen
|
e4c58fdb09
|
set sleep back to 180 s
|
2007-04-12 19:41:24 +00:00 |
Andreas Steffen
|
4d50f872d4
|
adapted evaltest to refactored ipsec status output
|
2007-04-11 08:18:38 +00:00 |
Andreas Steffen
|
90faff8e5a
|
reduced sleep from 180 to 170 seconds
|
2007-04-10 23:22:26 +00:00 |
Andreas Steffen
|
1628cd6bda
|
adapt evaltest to changed debug output
|
2007-04-06 10:39:24 +00:00 |
Andreas Steffen
|
f5fc277463
|
crl-ldap scenario added
|
2007-04-06 10:02:27 +00:00 |
Andreas Steffen
|
915c7add1f
|
enabled crl fetching using crlcheckinterval != 0
|
2007-04-05 17:51:12 +00:00 |
Andreas Steffen
|
389623374f
|
enabled crl fetching using crlcheckinterval != 0
|
2007-04-05 17:40:33 +00:00 |
Andreas Steffen
|
1d1e55b4c3
|
added crl-to-cache
|
2007-04-05 17:18:25 +00:00 |
Andreas Steffen
|
7771780b38
|
added crl-from-cache
|
2007-04-05 17:18:15 +00:00 |
Andreas Steffen
|
a224faf9ea
|
block crl fetching
|
2007-04-05 17:10:59 +00:00 |
Andreas Steffen
|
45c97f180f
|
block crl fetching
|
2007-04-05 17:09:54 +00:00 |
Andreas Steffen
|
69837d5baa
|
support multiple ocsp servers
|
2007-04-05 17:08:51 +00:00 |
Andreas Steffen
|
e47a7a131d
|
reinsert SHAREDTREE
|
2007-04-04 05:29:20 +00:00 |
Andreas Steffen
|
c056d929b2
|
--enable-ldap without value 3
|
2007-04-04 05:26:21 +00:00 |
Andreas Steffen
|
ace5de18b2
|
iptables -L has now a link of its own
|
2007-04-03 22:03:25 +00:00 |
Andreas Steffen
|
7e4f8db2bf
|
added ip route list and iptables -L
|
2007-04-03 21:18:46 +00:00 |
Andreas Steffen
|
51ae94d775
|
added OCSP signing certificates for the research and sales CAs
|
2007-03-26 07:08:39 +00:00 |
Andreas Steffen
|
e3e6a1ec22
|
added ocsp-multi-level scenario
|
2007-03-26 07:05:02 +00:00 |
Andreas Steffen
|
4b0f0e6cb4
|
carol's cert and private key does not have to be deleted
|
2007-03-23 17:20:44 +00:00 |
Andreas Steffen
|
1eb6a5f4a2
|
deleted
|
2007-03-21 22:19:17 +00:00 |
Andreas Steffen
|
d8d948a7e0
|
added
|
2007-03-21 22:19:00 +00:00 |
Andreas Steffen
|
878aecdf12
|
renamed ocsp-timeouts to ocsp-timeouts-good
|
2007-03-21 22:18:17 +00:00 |
Andreas Steffen
|
f9a73bee9c
|
delay OCSP response by 5 seconds
|
2007-03-20 04:35:16 +00:00 |
Andreas Steffen
|
114c6646af
|
add daemon.log to web page
|
2007-03-15 15:01:36 +00:00 |
Andreas Steffen
|
4ebaa476f1
|
remove /etc/resolv.conf
|
2007-03-15 15:00:51 +00:00 |