Commit Graph

380 Commits

Author SHA1 Message Date
Andreas Steffen 397bf2a1e7 IPv6 scenarios now used the new IPv6 topology graphs 2007-11-08 13:28:30 +00:00
Andreas Steffen 552abdaa53 created IPv6 topology graphs 2007-11-08 13:26:41 +00:00
Andreas Steffen 15ab7c1cc2 removed internal IP from m-w-s.png 2007-11-08 13:25:25 +00:00
Andreas Steffen c65ad277c2 another four IPv6 scenarios fully demonstrate ip6tables firewall use 2007-11-08 11:59:29 +00:00
Andreas Steffen 361deb6f76 enabled ip6tables-based firewalling in first two IPv6 scenarios 2007-11-07 16:41:57 +00:00
Andreas Steffen 141d0506fa do-tests script applies ip6tables in ipv6 subdir 2007-11-07 12:22:44 +00:00
Andreas Steffen a37d379dbb disable MOBIKE in net2net IPv6 scenario 2007-11-06 18:19:51 +00:00
Andreas Steffen 7430f44c47 added rw-ikev1 IPv6 scenario 2007-11-06 17:50:43 +00:00
Andreas Steffen e2d1f05f0e charon does not need leftnexthop for ipv6 scenarios 2007-11-06 16:38:29 +00:00
Andreas Steffen 5a1979deb9 new net2net ipv6 scenarios for IKEv1 and IKEv2 2007-11-06 13:44:57 +00:00
Andreas Steffen 564f64f3c5 uml kernel version bump to 2.6.23.1 2007-10-17 03:39:16 +00:00
Andreas Steffen 4565d23782 added RCSID 2007-10-08 20:18:34 +00:00
Andreas Steffen c840a9b484 version bump to 4.1.8 2007-10-04 06:41:45 +00:00
Andreas Steffen b3e0c6b415 selection from multiple PSK in ipsec.secrets 2007-10-03 06:54:52 +00:00
Andreas Steffen c57f8cc1ee check for NAT faking log entry 2007-10-02 20:35:48 +00:00
Andreas Steffen 701ece07fb added force-udp-encaps scenario 2007-10-02 20:24:13 +00:00
Andreas Steffen 7b315fcd1f added mobike=no to net2net scenarios 2007-10-02 19:27:31 +00:00
Andreas Steffen cd45c2faf3 switched mobike-nat and mobike-virtual-ip scenarios to a virtual IP of 10.3.0.3 2007-10-02 19:23:12 +00:00
Andreas Steffen 9c7aac664c version bump to 4.1.7 2007-10-02 19:11:03 +00:00
Andreas Steffen effdbc7c70 activated the libstrongswan integrity test 2007-10-02 19:10:24 +00:00
Andreas Steffen cdc70899a8 change ipsec route table in UML scenarios 2007-08-29 13:03:34 +00:00
Andreas Steffen 0886e64022 updated index.txt.old 2007-08-29 12:50:26 +00:00
Andreas Steffen 52d39feb81 set ignore properties 2007-08-28 07:02:23 +00:00
Andreas Steffen 8234dd1216 testing/do-tests is made from do-tests.in by inserting actual routing table 2007-08-28 06:40:39 +00:00
Andreas Steffen 3dcf9dbd70 version bump to 4.1.6 2007-08-08 08:17:48 +00:00
Andreas Steffen dce4600015 version bumps 2007-08-07 21:14:06 +00:00
Andreas Steffen f7b49faa51 ID_FQDN lost its @ prefix 2007-08-03 13:36:28 +00:00
Andreas Steffen 90b21fde11 use cgecho for green output 2007-08-03 10:58:45 +00:00
Andreas Steffen d49cc7b383 check source routing table 100 2007-08-03 10:57:37 +00:00
Andreas Steffen 0698d91c31 re-introduced leftnexthop=%direct 2007-08-03 10:57:08 +00:00
Andreas Steffen 1f4357ca4d added routing table 50 for passthrough routes 2007-08-03 10:56:40 +00:00
Andreas Steffen 1fb704404b execute conntrack -F at the outset 2007-07-04 18:55:54 +00:00
Andreas Steffen 13763a385c suppress stderr in start-switches script 2007-07-04 18:50:21 +00:00
Andreas Steffen 0a46e963ff added three mobike scenarios 2007-07-04 17:39:10 +00:00
Andreas Steffen 959b01aca5 version bumps 2007-07-03 13:08:13 +00:00
Andreas Steffen c598ac6360 changes in uml configuration to allow mobike 2007-07-02 09:52:20 +00:00
Andreas Steffen cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Andreas Steffen 6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen 361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00
Andreas Steffen 571bca865b added dynamic DNS scenarios 2007-06-18 17:50:54 +00:00
Andreas Steffen 174c9e18c1 eliminated nexthop 2007-06-17 15:29:49 +00:00
Andreas Steffen aca0317d92 removed all nexthop statements 2007-06-10 18:52:14 +00:00
Andreas Steffen b9659a50dc version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4 2007-06-08 07:11:06 +00:00
Andreas Steffen ed1813ff6f added x as a wildcard for number of tests 2007-06-08 07:10:00 +00:00
Andreas Steffen 0b455e2e7b pass eroutes now need explicit routes 2007-06-08 07:06:10 +00:00
Andreas Steffen 2b34eafbc0 changed exceeded to reached 2007-05-25 11:42:00 +00:00
Andreas Steffen 3367fa8b74 fixed html output 2007-05-25 11:33:49 +00:00
Andreas Steffen 60b44bbe62 stop dave in posttest.dat 2007-05-25 09:29:10 +00:00
Andreas Steffen 0bc543f1dc multi-level-ca-strict scenario added 2007-05-25 09:23:24 +00:00
Andreas Steffen 238b92d632 virtual-ip-override scenario added 2007-05-25 09:22:42 +00:00
Andreas Steffen 845cfa025b stop iptables on dave 2007-05-25 09:22:08 +00:00
Andreas Steffen fc92116296 fixed virtual-ip scenario 2007-05-25 07:28:00 +00:00
Andreas Steffen ea7f3e1bca version bump to 4.1.3 2007-05-25 07:27:33 +00:00
Andreas Steffen 0749196612 cecho changes in UML scripts 2007-05-23 22:24:47 +00:00
Andreas Steffen c502b1b4c6 added virtual-ip scenario 2007-05-23 21:41:05 +00:00
Andreas Steffen 9a590819a2 reduced crl validity of research and sales ca to 15 days 2007-05-19 19:47:24 +00:00
Andreas Steffen 4756b7aa5d set rightca= to root CA 2007-05-18 13:19:47 +00:00
Andreas Steffen 9619b0d33a added multi-level-ca-revoked scenario 2007-05-18 13:18:28 +00:00
Andreas Steffen 51a9174071 added multi-level-ca-loop scenario 2007-05-18 12:42:49 +00:00
Andreas Steffen a11cd0a102 support of crlnumber in research and sales CAs 2007-05-18 12:24:50 +00:00
Andreas Steffen 162f1b7056 added multi-level-ca-ldap scenario 2007-05-18 12:23:31 +00:00
Andreas Steffen 9f97b8a108 added multi-level-ca scenario 2007-05-18 12:23:10 +00:00
Andreas Steffen f24b4886ac ca-based policy now requires rightca=%any in the two-certs scenario 2007-05-18 10:53:58 +00:00
Andreas Steffen ad9da6ec4b hierarchical display of tests 2007-05-15 20:30:21 +00:00
Andreas Steffen 547f1dd56c added two-certs scenario 2007-05-15 15:54:06 +00:00
Andreas Steffen ba42813ca3 added esp-alg-aesxcbc scenario 2007-04-28 20:01:06 +00:00
Andreas Steffen 187b181432 fixed evaltest.dat 2007-04-28 20:00:39 +00:00
Andreas Steffen e0e399ccc5 generated new winnetou certificate 2007-04-27 21:41:27 +00:00
Andreas Steffen 85e658a2c4 added crlnumber 2007-04-27 21:41:07 +00:00
Andreas Steffen 0a09cd6864 generated certs for ocsp-strict-ifuri scenario 2007-04-20 14:54:10 +00:00
Andreas Steffen 4031b8bae7 generated certs for ocsp-strict-ifuri scenario 2007-04-20 14:52:32 +00:00
Andreas Steffen 221a64e4f7 fixed test scenarios 2007-04-20 14:51:39 +00:00
Andreas Steffen ea4563d93f ocsp-strict-ifuri added 2007-04-20 14:50:42 +00:00
Andreas Steffen ce9b4ea6e6 ocsp-no-signer-cert added 2007-04-20 14:49:50 +00:00
Andreas Steffen e4c58fdb09 set sleep back to 180 s 2007-04-12 19:41:24 +00:00
Andreas Steffen 4d50f872d4 adapted evaltest to refactored ipsec status output 2007-04-11 08:18:38 +00:00
Andreas Steffen 90faff8e5a reduced sleep from 180 to 170 seconds 2007-04-10 23:22:26 +00:00
Andreas Steffen 1628cd6bda adapt evaltest to changed debug output 2007-04-06 10:39:24 +00:00
Andreas Steffen f5fc277463 crl-ldap scenario added 2007-04-06 10:02:27 +00:00
Andreas Steffen 915c7add1f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:51:12 +00:00
Andreas Steffen 389623374f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:40:33 +00:00
Andreas Steffen 1d1e55b4c3 added crl-to-cache 2007-04-05 17:18:25 +00:00
Andreas Steffen 7771780b38 added crl-from-cache 2007-04-05 17:18:15 +00:00
Andreas Steffen a224faf9ea block crl fetching 2007-04-05 17:10:59 +00:00
Andreas Steffen 45c97f180f block crl fetching 2007-04-05 17:09:54 +00:00
Andreas Steffen 69837d5baa support multiple ocsp servers 2007-04-05 17:08:51 +00:00
Andreas Steffen e47a7a131d reinsert SHAREDTREE 2007-04-04 05:29:20 +00:00
Andreas Steffen c056d929b2 --enable-ldap without value 3 2007-04-04 05:26:21 +00:00
Andreas Steffen ace5de18b2 iptables -L has now a link of its own 2007-04-03 22:03:25 +00:00
Andreas Steffen 7e4f8db2bf added ip route list and iptables -L 2007-04-03 21:18:46 +00:00
Andreas Steffen 51ae94d775 added OCSP signing certificates for the research and sales CAs 2007-03-26 07:08:39 +00:00
Andreas Steffen e3e6a1ec22 added ocsp-multi-level scenario 2007-03-26 07:05:02 +00:00
Andreas Steffen 4b0f0e6cb4 carol's cert and private key does not have to be deleted 2007-03-23 17:20:44 +00:00
Andreas Steffen 1eb6a5f4a2 deleted 2007-03-21 22:19:17 +00:00
Andreas Steffen d8d948a7e0 added 2007-03-21 22:19:00 +00:00
Andreas Steffen 878aecdf12 renamed ocsp-timeouts to ocsp-timeouts-good 2007-03-21 22:18:17 +00:00
Andreas Steffen f9a73bee9c delay OCSP response by 5 seconds 2007-03-20 04:35:16 +00:00
Andreas Steffen 114c6646af add daemon.log to web page 2007-03-15 15:01:36 +00:00
Andreas Steffen 4ebaa476f1 remove /etc/resolv.conf 2007-03-15 15:00:51 +00:00
Andreas Steffen 28bd885e03 added apache2/ocsp log directory to winnetou 2007-03-15 14:18:26 +00:00
Andreas Steffen 037ce7862f removed killall openssl 2007-03-15 13:56:35 +00:00
Andreas Steffen ab0d19ae66 removed killall openssl 2007-03-15 13:56:09 +00:00
Andreas Steffen e280f65f58 deleted 2007-03-15 13:54:22 +00:00
Andreas Steffen efdcd4bf10 deleted 2007-03-15 13:52:32 +00:00
Andreas Steffen 564c7a684b create apach2/ocsp/ logging directory on winnetou 2007-03-15 13:49:59 +00:00
Andreas Steffen 80f174bd3c do not check for type of dpd action any more 2007-03-15 13:34:42 +00:00
Andreas Steffen d4f0e636b5 create /var/log/apache2/ocsp on winnetou 2007-03-15 13:33:42 +00:00
Andreas Steffen bcee8816a5 added 2007-03-15 13:30:55 +00:00
Andreas Steffen 328453863a added 2007-03-15 13:29:56 +00:00
Andreas Steffen 6f1ae5d21c added 2007-03-15 13:29:02 +00:00
Andreas Steffen 7f6b9853cf delete virtual IP addresses after use 2007-03-14 23:02:44 +00:00
Andreas Steffen f2a121f4df deleted 2007-03-14 22:08:55 +00:00
Andreas Steffen 66c85c4b40 added 2007-03-14 22:07:18 +00:00
Andreas Steffen bd46337cb0 added 2007-03-14 15:42:40 +00:00
Andreas Steffen a521abad4e deleted 2007-03-14 15:10:12 +00:00
Andreas Steffen 4bd0d7e1d9 added 2007-03-14 15:09:00 +00:00
Andreas Steffen 3a7b69e699 changed OCSPSigner to OCSPSigning 2007-03-14 15:08:23 +00:00
Andreas Steffen 2f264a311b user standard cert 2007-03-14 14:52:13 +00:00
Andreas Steffen 19e071d54c deleted 2007-03-14 14:51:57 +00:00
Andreas Steffen f7ddccd988 deleted 2007-03-14 14:51:05 +00:00
Andreas Steffen 3f2cc77ac1 added 2007-03-14 14:02:39 +00:00
Andreas Steffen ae21d486c9 added 2007-03-14 13:04:56 +00:00
Andreas Steffen b1894cdd92 modified description.txt and evaltest.dat 2007-03-14 13:00:55 +00:00
Andreas Steffen 108d07181d added 2007-03-14 09:05:27 +00:00
Andreas Steffen 19808f71ec added 2007-03-14 08:17:27 +00:00
Andreas Steffen 2eab924979 version bump to strongswan-4.1.0 and linux-2.6.20.3 2007-03-14 08:15:36 +00:00
Andreas Steffen 0d1f911065 conntrack -F is used to flush the NAT states 2007-03-07 04:45:12 +00:00
Andreas Steffen 26ad49c8e7 the hostaccess=yes parameters are not needed anymore 2007-03-07 04:44:25 +00:00
Andreas Steffen 854b4e4460 use conntrack -F to flush NAT states 2007-03-07 04:29:13 +00:00
Andreas Steffen 764804739f replaced actual virtual IP addresses by symbolic ones 2007-03-07 04:28:34 +00:00
Andreas Steffen 74d1b5e5b0 removed unnecessary double quotes 2007-03-07 04:27:32 +00:00
Andreas Steffen 0b0eb65573 added 2007-03-05 19:15:33 +00:00
Andreas Steffen 671a54e9ab config-payload scenario fixes 2007-03-01 08:20:50 +00:00
Andreas Steffen 83c3750ac3 added cert with OCSP access info 2007-02-28 23:25:13 +00:00
Andreas Steffen b62f2fc895 dpd now takes 180 s and 5 retransmits 2007-02-28 23:19:20 +00:00
Andreas Steffen 1b44633cbc changed grep to creating aquire job for CHILD SA 2007-02-28 23:02:40 +00:00
Andreas Steffen 501fac0c88 replaced actual virtual IPs by place holders 2007-02-28 22:38:49 +00:00
Andreas Steffen f4d7dec384 virtual-ip scenario has been replaces by config-payload scenario 2007-02-28 22:21:58 +00:00
Andreas Steffen bc92caaabf added 2007-02-28 22:16:23 +00:00
Andreas Steffen 63b97bda3f added 2007-02-28 22:16:16 +00:00
Tobias Brunner 3d8ec1bacb virtual ip uml test 2007-02-28 15:20:10 +00:00
Andreas Steffen 2ea734180e version bumps 2007-02-21 13:07:09 +00:00
Andreas Steffen 8aa3e1ac65 remove strong certs and keys after test 2007-02-21 13:06:26 +00:00
Andreas Steffen c831506e35 added 2007-02-21 13:05:53 +00:00
Andreas Steffen 1e77bdc36b enable IP forwarding 2007-02-14 01:05:58 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Andreas Steffen 85657c7bd3 version bump 2007-01-29 07:47:31 +00:00
Andreas Steffen c796659f23 version bump 2007-01-29 07:47:03 +00:00
Andreas Steffen 053ce451b1 use uml_mconsole to check end of booting process 2007-01-11 20:07:05 +00:00
Andreas Steffen 66bc2429c6 added firewall support to scenario 2007-01-08 21:24:37 +00:00
Martin Willi cf86671048 readded tranport mode test using new status output 2007-01-08 07:36:20 +00:00
Martin Willi 032c31c4ae removed dublicated host2host-transport test 2007-01-08 07:35:26 +00:00
Andreas Steffen 09cbc4740a added host2host-transport scenario 2007-01-05 11:01:09 +00:00
Andreas Steffen 81a65f7b1f removed trailing lines 2007-01-05 11:00:42 +00:00
Andreas Steffen fc9f75ed0f added xauth scenarios 2007-01-04 14:25:14 +00:00
Andreas Steffen af7e7d9756 due to console logging, no need for final sleep anymore 2006-11-01 21:18:42 +00:00
Andreas Steffen 17f11c46cc adapted checks to changed ipsec status output 2006-11-01 21:17:23 +00:00
Andreas Steffen 6dca6c6f71 due to narrowing no need for rightsubnetwithin 2006-11-01 21:15:19 +00:00
Andreas Steffen c596926095 no need to send certreq 2006-11-01 21:14:28 +00:00
Andreas Steffen 9ba5e22e31 version bumps of strongSwan, Linux kernel and Gentoo root file system 2006-11-01 12:38:45 +00:00
Andreas Steffen ba8b797bfd corrected description 2006-11-01 12:36:11 +00:00
Andreas Steffen dda28dcb89 added dpd-hold scenario 2006-11-01 12:33:02 +00:00
Andreas Steffen d2bb572f79 do not sent certreq payloads when the peer is known to use PSK 2006-10-31 06:54:28 +00:00
Andreas Steffen 5435111a34 position of (myself) moved in log output 2006-10-31 06:51:04 +00:00
Andreas Steffen 7de8027cf8 do not sent certreq payloads when using self-signed certs 2006-10-31 06:48:34 +00:00
Andreas Steffen 1a3e260410 change due to change debug output 2006-10-27 18:37:50 +00:00
Andreas Steffen ade9743ec4 fixed due to new logging concept 2006-10-27 17:54:06 +00:00
Andreas Steffen 22d0ab1343 upgrade to new Gentoo root file system and tcpdump command 2006-10-23 14:53:09 +00:00
Andreas Steffen f22c88de5f added 2006-10-23 14:52:34 +00:00
Andreas Steffen 8e9d7808ae deleted 2006-10-23 14:51:30 +00:00
Andreas Steffen 825a5631dd renamed ikev1 scenario and added ikev2 scenario 2006-10-23 14:50:32 +00:00
Andreas Steffen 403dc74b9d added new scenarios 2006-10-23 14:49:43 +00:00
Andreas Steffen b9ac0fc6a3 Version bumps of UML kernel, Gentoo root file system and strongSwan release 2006-10-23 14:48:43 +00:00
Andreas Steffen 86f5748b7f added stronger certs for moon, carol, and dave 2006-10-09 08:25:20 +00:00
Andreas Steffen 06890eef8e added IPv6 hw and multicast addresses 2006-10-09 08:24:49 +00:00
Andreas Steffen 120f42be89 adapted to new tcpdump ipv6 output 2006-10-09 08:23:38 +00:00
Andreas Steffen 4f67764bda multi-level-ca scenarios use unencrypted private key 2006-10-09 08:23:11 +00:00
Andreas Steffen c0317576ba added scenario 2006-10-09 08:20:01 +00:00
Andreas Steffen df9881d130 fixed timing 2006-10-06 07:57:25 +00:00
Andreas Steffen b0f4c5d1f2 new gentoo root file system 2006-10-06 07:54:07 +00:00
Andreas Steffen 118a19ecb6 fixed bug with openldap 2.3 2006-10-06 07:48:24 +00:00
Andreas Steffen e6b51ef666 removed ipsec.conf version information 2006-10-06 07:47:11 +00:00
Andreas Steffen e088404b0c carolKey.pem is now protected by 3DES passphrase 2006-10-06 07:45:42 +00:00
Andreas Steffen 38eb3325a1 updated net runlevel scripts 2006-10-06 07:43:31 +00:00
Andreas Steffen 1c1f9ae109 updated net init scripts 2006-10-06 07:42:17 +00:00
Andreas Steffen 564363ee29 new net configuration format 2006-10-06 07:40:39 +00:00
Andreas Steffen dc48763940 HW addresses must be predefined 2006-10-06 07:32:02 +00:00
Andreas Steffen b3fcb01fd2 added new test scenarios 2006-09-25 05:42:13 +00:00
Andreas Steffen 957115957a enabled firewall support 2006-09-18 07:41:54 +00:00
Andreas Steffen f9aa9e2977 added 2006-09-18 07:41:22 +00:00
Andreas Steffen a4dcb7ded6 added 2006-09-18 07:41:09 +00:00
Andreas Steffen 8e746cdf88 added 2006-09-18 07:40:37 +00:00
Andreas Steffen dc8ad57aa9 two new test scenarios 2006-09-14 06:39:14 +00:00
Andreas Steffen 1f948f684a fixed path to images directory 2006-09-14 06:38:50 +00:00
Andreas Steffen 834b2ce2e2 version bump of UML kernel to 2.6.17.11 2006-08-25 09:25:12 +00:00
Andreas Steffen 8ae6a48f94 version bumps 2006-08-25 07:30:29 +00:00
Andreas Steffen a9ae2c01ed added 2006-07-14 12:58:47 +00:00
Martin Willi 106e9fc6f8 updated mixed tests to new charon output 2006-07-14 12:29:26 +00:00
Martin Willi 7af345e11e added test cases from NAT team
updated all IKEv2 tests to work with new status output
2006-07-13 12:45:18 +00:00