Andreas Steffen
|
3ba7616d8f
|
added ikev2/rw-eap-tnc-dynamic scenario
|
2011-01-31 07:30:41 +01:00 |
|
Andreas Steffen
|
e27554144a
|
increase sleep time in mediation scenarios
|
2010-12-12 21:54:44 +01:00 |
|
Andreas Steffen
|
458e7779a8
|
reorganized ikev2/rw-eap-tnc scenarios
|
2010-12-12 12:51:14 +01:00 |
|
Andreas Steffen
|
146e9123a2
|
added the ikev2/rw-eap-tnc-20 scenario
|
2010-12-12 10:47:16 +01:00 |
|
Andreas Steffen
|
2965eb3cc7
|
added sql/multi-level-ca scenario
|
2010-12-05 21:53:43 +01:00 |
|
Andreas Steffen
|
f143f0f743
|
use a composite test proposal
|
2010-12-01 10:05:28 +01:00 |
|
Andreas Steffen
|
cbdcca7fd7
|
renamed algorithm to proposal
|
2010-11-30 17:38:49 +01:00 |
|
Andreas Steffen
|
f4e5acef3a
|
store IKE and ESP proposals in SQL database
|
2010-11-30 17:03:21 +01:00 |
|
Andreas Steffen
|
b62bde3b95
|
configured various DPD modes in sql scenarios
|
2010-11-28 17:41:27 +01:00 |
|
Andreas Steffen
|
11c904b373
|
added sql/net2net-route-pem scenario
|
2010-11-28 12:00:44 +01:00 |
|
Andreas Steffen
|
d6a13b895f
|
added sql/net2net-start-pem scenario
|
2010-11-28 12:00:19 +01:00 |
|
Andreas Steffen
|
d16ecc1753
|
fixed iptables script of gateway alice
|
2010-11-20 21:01:54 +01:00 |
|
Andreas Steffen
|
aafe3b090e
|
removed copy of strongswancCert.pem
|
2010-11-20 20:34:21 +01:00 |
|
Andreas Steffen
|
4a8ebe0b35
|
added ha/both-active scenario
|
2010-11-20 20:16:26 +01:00 |
|
Andreas Steffen
|
8d01a80819
|
do not send certificate requests in EAP-ONLY scenarios
|
2010-10-14 21:10:03 +02:00 |
|
Andreas Steffen
|
ea7c8b3880
|
added ikev2/rw-eap-tnc-ls scenario
|
2010-10-14 21:00:41 +02:00 |
|
Andreas Steffen
|
cf76984c28
|
Define explicit IKEv1 keyexchange mode V
|
2010-10-14 16:13:52 +02:00 |
|
Andreas Steffen
|
6587f1a04d
|
increase eap-tls max_message_count in fragments scenario
|
2010-10-14 16:09:44 +02:00 |
|
Tobias Brunner
|
972663ccb0
|
Define explicit IKEv1 keyexchange mode IV.
|
2010-10-14 13:55:04 +02:00 |
|
Andreas Steffen
|
897a9baaba
|
define explicit IKEv1 keyexchange mode III
|
2010-10-14 07:34:13 +02:00 |
|
Andreas Steffen
|
a885f0737c
|
fixed ikev2/rw-eap-ttls-radius scenario
|
2010-10-14 07:26:10 +02:00 |
|
Andreas Steffen
|
d8a379e1e4
|
fixed ikev2/rw-eap-tnc-radius-block scenario
|
2010-10-14 07:22:39 +02:00 |
|
Andreas Steffen
|
adf5ebaa28
|
fixed ikev2/rw-eap-tnc scenario
|
2010-10-14 07:08:33 +02:00 |
|
Andreas Steffen
|
c763ec09db
|
fixed ikev2/rw-eap-sim-radius scenario
|
2010-10-14 07:01:06 +02:00 |
|
Andreas Steffen
|
15a7b95f86
|
fixed ikev2/rw-eap-sim-only-radius scenario
|
2010-10-14 06:55:06 +02:00 |
|
Andreas Steffen
|
907ca3d4df
|
fixed ikev2/mult-auth-rsa-eap-sim-id
|
2010-10-14 06:41:26 +02:00 |
|
Andreas Steffen
|
e6f685b0fa
|
scenarios without RADIUS server can use default iptables script
|
2010-10-11 17:04:53 +02:00 |
|
Andreas Steffen
|
e5f5f612bd
|
fixed some evaltest.dat files
|
2010-10-11 16:58:12 +02:00 |
|
Andreas Steffen
|
7d8cb1f952
|
added ikev2/rw-eap-tnc-block scenario
|
2010-10-11 16:58:12 +02:00 |
|
Andreas Steffen
|
8efd583a64
|
explicit ikev1 key exchange for ikev1/esp-alg-null scenario
|
2010-10-09 22:07:51 +02:00 |
|
Andreas Steffen
|
1e6c92789e
|
fixed typo
|
2010-10-09 22:05:26 +02:00 |
|
Andreas Steffen
|
74e14ed631
|
define explicit IKEv1 key exchange mode II
|
2010-10-09 20:04:00 +02:00 |
|
Andreas Steffen
|
ed08f7ce83
|
use DBG_TNC for TNC debugging output
|
2010-10-09 16:01:19 +02:00 |
|
Andreas Steffen
|
db24b600fb
|
changed filter attribute from access to allow
|
2010-10-09 01:01:19 +02:00 |
|
Andreas Steffen
|
a1afa8d810
|
added ikev2/rw-eap-tnc scenario
|
2010-10-09 00:59:31 +02:00 |
|
Andreas Steffen
|
8dcc56dcc0
|
created tnc-imc and tnc-imv plugins
|
2010-10-07 23:31:23 +02:00 |
|
Andreas Steffen
|
84babfb895
|
define explicit IKEv1 key exchange mode
|
2010-10-07 07:31:44 +02:00 |
|
Andreas Steffen
|
9b201cf859
|
host venus is used in ikev2/rw-eap-tnc-radius scenario
|
2010-10-06 10:38:18 +02:00 |
|
Andreas Steffen
|
541666b89f
|
added ikev2/rw-eap-tnc-radius-block scenario
|
2010-10-06 10:32:50 +02:00 |
|
Andreas Steffen
|
48e16e0ae1
|
final version of ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 20:38:34 +02:00 |
|
Andreas Steffen
|
9ffa3f71f2
|
fixed typo in image path
|
2010-10-05 09:09:58 +02:00 |
|
Andreas Steffen
|
e7104a6ec9
|
updated ikev2/rw-eap-tnc-radius scenario
|
2010-10-05 07:56:57 +02:00 |
|
Andreas Steffen
|
30f14b7066
|
added configuration files for dummyimc.so IMC
|
2010-10-01 00:14:44 +02:00 |
|
Andreas Steffen
|
ea893a5de2
|
The TNC@FHH TNC Serve does not like symbolic links
|
2010-09-30 23:35:24 +02:00 |
|
Andreas Steffen
|
cae4668ffb
|
added tnc_config files to TNC scenario
|
2010-09-30 12:42:18 +02:00 |
|
Andreas Steffen
|
440231e863
|
load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario
|
2010-09-28 23:52:59 +02:00 |
|
Andreas Steffen
|
280c8ea2f0
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 11:31:39 +02:00 |
|
Andreas Steffen
|
1e6cc07ee4
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 10:58:28 +02:00 |
|
Andreas Steffen
|
234aaf2df2
|
stop gateway after clients in order to check release of virtual IP
|
2010-09-26 10:35:12 +02:00 |
|
Andreas Steffen
|
939c4bf2e8
|
added ikev1/net2net-same-nets scenario
|
2010-09-09 13:37:30 +02:00 |
|
Andreas Steffen
|
2774826995
|
added openssl-ikev2/rw-eap-tls-only scenario
|
2010-09-07 17:14:32 +02:00 |
|
Andreas Steffen
|
6d71f4dcb9
|
updown script variable is called PLUTO_UDP_ENC
|
2010-09-03 12:58:10 +02:00 |
|
Andreas Steffen
|
6deeacd965
|
adapted debug options
|
2010-09-03 09:29:56 +02:00 |
|
Andreas Steffen
|
4cbe758cd4
|
adapted debug options
|
2010-09-03 09:27:16 +02:00 |
|
Andreas Steffen
|
5175adee66
|
optimized FreeRadius scenarios for debug output
|
2010-09-02 22:19:37 +02:00 |
|
Andreas Steffen
|
0fb2980281
|
added ikev2/rw-eap-tnc-radius scenario
|
2010-09-02 22:19:37 +02:00 |
|
Tobias Brunner
|
fe962bc788
|
testing: Added ikev1 xfrm mark scenarios.
|
2010-09-02 19:04:25 +02:00 |
|
Tobias Brunner
|
f23e7394ae
|
pluto: Added PLUTO_UDP_ENC argument to updown script.
This contains the remote UDP port in case of UDP encapsulated ESP.
|
2010-09-02 19:04:25 +02:00 |
|
Tobias Brunner
|
91ea48352c
|
testing: Adding kernel-netlink to pluto.load statements.
|
2010-09-02 19:04:22 +02:00 |
|
Tobias Brunner
|
cc9cfc2e11
|
testing: Added missing host alice to test.conf.
|
2010-09-02 19:04:22 +02:00 |
|
Andreas Steffen
|
4171cbd60b
|
adapted evaltest.dat to new RULE_OCSP_VALIDATION
|
2010-09-01 22:22:27 +02:00 |
|
Andreas Steffen
|
873604dd7f
|
defined aaa_identity
|
2010-09-01 00:16:19 +02:00 |
|
Andreas Steffen
|
1bc8690f54
|
replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr
|
2010-08-29 21:52:08 +02:00 |
|
Andreas Steffen
|
6297dc390f
|
added ctr ccm and gcm plugins to ikev2/rw-cert scenario
|
2010-08-29 21:11:00 +02:00 |
|
Andreas Steffen
|
8eb74facfe
|
added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario
|
2010-08-29 21:09:25 +02:00 |
|
Andreas Steffen
|
6aa82ec280
|
added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario
|
2010-08-29 20:50:37 +02:00 |
|
Andreas Steffen
|
4f2a0bd839
|
replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm
|
2010-08-29 20:39:51 +02:00 |
|
Andreas Steffen
|
8318d88450
|
replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm
|
2010-08-29 20:24:12 +02:00 |
|
Andreas Steffen
|
421a529f88
|
added ikev2/rw-eap-tls-fragments scenario
|
2010-08-24 10:12:15 +02:00 |
|
Andreas Steffen
|
234aa8ee03
|
use correct network diagram
|
2010-08-24 10:09:58 +02:00 |
|
Andreas Steffen
|
f9a2d4bfcb
|
describe EAP-TTLS phase2 start options using the phase2_piggyback parameter
|
2010-08-16 19:29:39 +02:00 |
|
Andreas Steffen
|
cf95e162f2
|
added ikev2/rw-eap-ttls-phase2-piggyback scenario
|
2010-08-16 18:32:00 +02:00 |
|
Andreas Steffen
|
f2b9b9725c
|
changed ikev2/rw-eap-ttls-only description
|
2010-08-16 18:30:41 +02:00 |
|
Andreas Steffen
|
d2be215a99
|
added ikev2/rw-eap-ttls-only scenario
|
2010-08-16 16:44:13 +02:00 |
|
Andreas Steffen
|
758d7283fb
|
used default ipsec.secrets
|
2010-08-15 12:49:14 +02:00 |
|
Andreas Steffen
|
d662a7ffad
|
included bad case in ikev2/rw-eap-ttls-radius scenario
|
2010-08-15 11:13:41 +02:00 |
|
Andreas Steffen
|
e8f971ee4e
|
added rw-eap-ttls-radius scenario
|
2010-08-14 20:05:21 +02:00 |
|
Andreas Steffen
|
6ac797ad3a
|
added ikev2/rw-eap-tls-radius
|
2010-08-05 19:28:06 +02:00 |
|
Andreas Steffen
|
6b717cc28d
|
no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA
|
2010-08-05 12:47:09 +02:00 |
|
Andreas Steffen
|
f8bb082f1f
|
added ikev2/rw-eap-tls-only scenario
|
2010-08-04 08:36:27 +02:00 |
|
Andreas Steffen
|
ff7b0dd289
|
added NETMAP rules for the reverse direction
|
2010-07-27 21:16:44 +02:00 |
|
Andreas Steffen
|
c100dd6b5f
|
fixed description of ikev2/net2net-same-nets scenario
|
2010-07-27 20:50:28 +02:00 |
|
Andreas Steffen
|
c74c4c2a20
|
added net2net-same-nets
|
2010-07-25 11:56:33 +02:00 |
|
Andreas Steffen
|
e93f452825
|
remove the private updown scripts after use
|
2010-07-17 23:25:15 +02:00 |
|
Andreas Steffen
|
15fd135564
|
minor fixes in the ikev2/rw-mark-in-out scenarios
|
2010-07-17 17:36:04 +02:00 |
|
Andreas Steffen
|
f5baa5c4cf
|
some reformulations
|
2010-07-17 17:19:26 +02:00 |
|
Andreas Steffen
|
d2d7ed9227
|
the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script
|
2010-07-17 16:32:47 +02:00 |
|
Andreas Steffen
|
34e93c0280
|
fix html error in scenario description
|
2010-07-17 13:09:28 +02:00 |
|
Andreas Steffen
|
cde633d632
|
all x509 based sql scenarios require the revocation plugin
|
2010-07-15 23:19:52 +02:00 |
|
Andreas Steffen
|
c349a68b2e
|
all x509 based pfkey scenarios require the revocation plugin
|
2010-07-15 23:17:37 +02:00 |
|
Andreas Steffen
|
f5731b4579
|
all x509 based p2pnat scenarios require the revocation plugin
|
2010-07-15 23:07:12 +02:00 |
|
Andreas Steffen
|
295d9cc313
|
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
|
2010-07-15 23:02:17 +02:00 |
|
Andreas Steffen
|
84fe65bd43
|
all x509 based ike scenarios require the revocation plugin
|
2010-07-15 22:40:20 +02:00 |
|
Andreas Steffen
|
001787b3eb
|
all x509 based openssl-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:33:05 +02:00 |
|
Andreas Steffen
|
6c2bd2a7d8
|
all x509 based gcrypt-ikev2 scenarios require the revocation plugin
|
2010-07-15 22:03:16 +02:00 |
|
Andreas Steffen
|
2cf4d34f2f
|
all x509 based ikev2 scenarios require the revocation plugin
|
2010-07-15 21:39:01 +02:00 |
|
Andreas Steffen
|
afe5d482db
|
ikev2/net2net-psk-dscp does not need certificate support
|
2010-07-15 21:37:45 +02:00 |
|
Andreas Steffen
|
a3527c39dd
|
add revocation plugin to ikev2/rw-cert scenario
|
2010-07-15 20:03:11 +02:00 |
|
Martin Willi
|
f90d465ce2
|
Added addrblock plugin to RFC3779 test cases
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
1f457546c1
|
Added revocation plugin to ikev2 crl/ocsp test cases
|
2010-07-13 10:26:07 +02:00 |