906680029d
enable the ccm and gcm plugins in the UML scenarios
2010-08-20 12:47:44 +02:00
f9a2d4bfcb
describe EAP-TTLS phase2 start options using the phase2_piggyback parameter
2010-08-16 19:29:39 +02:00
cf95e162f2
added ikev2/rw-eap-ttls-phase2-piggyback scenario
2010-08-16 18:32:00 +02:00
f2b9b9725c
changed ikev2/rw-eap-ttls-only description
2010-08-16 18:30:41 +02:00
d2be215a99
added ikev2/rw-eap-ttls-only scenario
2010-08-16 16:44:13 +02:00
758d7283fb
used default ipsec.secrets
2010-08-15 12:49:14 +02:00
d662a7ffad
included bad case in ikev2/rw-eap-ttls-radius scenario
2010-08-15 11:13:41 +02:00
eb4c9c609c
version bumps in testing.conf
2010-08-14 21:41:52 +02:00
4618430f83
enable the eap-ttls and ctr plugins in the uml scenarios
2010-08-14 21:40:05 +02:00
e8f971ee4e
added rw-eap-ttls-radius scenario
2010-08-14 20:05:21 +02:00
6ac797ad3a
added ikev2/rw-eap-tls-radius
2010-08-05 19:28:06 +02:00
6b717cc28d
no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA
2010-08-05 12:47:09 +02:00
8e7920eea1
generated aaa certificate
2010-08-04 12:44:47 +02:00
f8bb082f1f
added ikev2/rw-eap-tls-only scenario
2010-08-04 08:36:27 +02:00
9dffc26b73
--enable eap-tls and --disable-load-warning in uml build
2010-08-04 07:48:19 +02:00
b599b80013
version bump to 4.4.2
2010-07-30 22:26:14 +02:00
ff7b0dd289
added NETMAP rules for the reverse direction
2010-07-27 21:16:44 +02:00
c100dd6b5f
fixed description of ikev2/net2net-same-nets scenario
2010-07-27 20:50:28 +02:00
c74c4c2a20
added net2net-same-nets
2010-07-25 11:56:33 +02:00
e93f452825
remove the private updown scripts after use
2010-07-17 23:25:15 +02:00
15fd135564
minor fixes in the ikev2/rw-mark-in-out scenarios
2010-07-17 17:36:04 +02:00
f5baa5c4cf
some reformulations
2010-07-17 17:19:26 +02:00
d2d7ed9227
the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script
2010-07-17 16:32:47 +02:00
34e93c0280
fix html error in scenario description
2010-07-17 13:09:28 +02:00
cde633d632
all x509 based sql scenarios require the revocation plugin
2010-07-15 23:19:52 +02:00
c349a68b2e
all x509 based pfkey scenarios require the revocation plugin
2010-07-15 23:17:37 +02:00
f5731b4579
all x509 based p2pnat scenarios require the revocation plugin
2010-07-15 23:07:12 +02:00
295d9cc313
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
2010-07-15 23:02:17 +02:00
84fe65bd43
all x509 based ike scenarios require the revocation plugin
2010-07-15 22:40:20 +02:00
001787b3eb
all x509 based openssl-ikev2 scenarios require the revocation plugin
2010-07-15 22:33:05 +02:00
6c2bd2a7d8
all x509 based gcrypt-ikev2 scenarios require the revocation plugin
2010-07-15 22:03:16 +02:00
2cf4d34f2f
all x509 based ikev2 scenarios require the revocation plugin
2010-07-15 21:39:01 +02:00
afe5d482db
ikev2/net2net-psk-dscp does not need certificate support
2010-07-15 21:37:45 +02:00
a3527c39dd
add revocation plugin to ikev2/rw-cert scenario
2010-07-15 20:03:11 +02:00
fccf00576f
activate --enable-addrblock configure option in UML scenarios
2010-07-13 21:04:20 +02:00
f90d465ce2
Added addrblock plugin to RFC3779 test cases
2010-07-13 10:26:07 +02:00
1f457546c1
Added revocation plugin to ikev2 crl/ocsp test cases
2010-07-13 10:26:07 +02:00
bb021fbbc9
updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes
2010-07-12 20:54:40 +02:00
ab635e029e
updated SQL templates to support attribute pool and identity parameters
2010-07-12 20:28:34 +02:00
ec7adea007
Added support for named attribute groups
...
Add the possibility to group attributes by a name and assign these
groups to connections. This allows a more granular configuration of
which client will receive what atrributes.
2010-07-09 13:09:31 +02:00
f65e0dc80f
added ikev2/net2net-psk-dscp2 DiffServ scenario
2010-07-09 11:55:01 +02:00
9f94906815
added ikev2/nat-two-rw-mark-in-out scenario
2010-07-09 09:36:03 +02:00
bcf608c848
some changes to the ikev2/nat-two-rw-mark scenario
2010-07-09 09:35:02 +02:00
36b3c0a8dd
regenerated loop intermediate CA certificates
2010-07-03 18:18:30 +02:00
342fc85e9e
added ikev2/nat-two-rw-mark scenario
2010-07-03 13:25:09 +02:00
b3f65304ba
check for installed aead algorithms in kernel
2010-06-27 22:26:00 +02:00
39e3b58fe4
use --addattr
2010-06-05 13:49:01 +02:00
88613f159d
use --addattr
2010-06-05 13:47:23 +02:00
4321d19d1e
added ikev2/nat-virtual-ip scenario
2010-06-05 13:42:28 +02:00
b2be7dd621
remove stray carolReq.pem
2010-06-05 13:36:39 +02:00
5a9a255ae5
share pool in ikev1/mode-config-multiple scenario
2010-06-05 13:17:51 +02:00
6d989d356b
use --addattr
2010-06-05 13:15:03 +02:00
bdd28aa9c5
remove stray scenario files
2010-06-05 13:10:39 +02:00
5b6200888b
remove x509 plugin from openssl-ikev1 scenarios
2010-05-28 23:22:15 +02:00
bd371ccac7
remove x509 plugin from remaining openssl-ikev2 scenarios
2010-05-25 15:49:58 +02:00
2996cb3163
openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more
2010-05-25 15:26:46 +02:00
b596f4f260
updated ikev1/rw-cert scenario to support xauth integrity test
2010-05-19 08:31:39 +02:00
73434ce9eb
updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin
2010-05-18 22:57:12 +02:00
1fe5d973cb
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
2010-05-18 22:56:42 +02:00
17adc8d074
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
2010-05-18 22:48:37 +02:00
efde96b38e
updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin
2010-05-18 20:20:55 +02:00
4f1110ab7b
created ikev1/xauth-id-psk scenario
2010-05-18 20:04:52 +02:00
dc5d63a599
updated ikev1/xauth-psk scenario to support xauth plugin
2010-05-18 20:04:02 +02:00
8ebc3da64c
updated ikev1/xauth-rsa-fail scenario to xauth plugin
2010-05-18 16:54:25 +02:00
2549ff7849
created ikev1/xauth-id-rsa scenario using XAUTH identities
2010-05-18 16:54:25 +02:00
0a6085b13e
updated ikev1/xauth-rsa scenario to xauth plugin
2010-05-18 16:54:25 +02:00
ee1bdd85d3
it's too late on Saturday evening
2010-05-15 18:52:59 +02:00
3399c3dca0
roll back some changes
2010-05-15 18:48:35 +02:00
31b39e5f7c
encoding of MODE_TUNNEL changed
2010-05-15 18:36:14 +02:00
20ae6eccf5
the keyid is a subjectKeyIdentifier
2010-05-15 17:03:04 +02:00
ccfd54e68d
fixed keyids in sql/rw-psk-rsa-split scenario
2010-05-15 16:55:08 +02:00
4636f1579c
fixed keyids in sql/rw-eap-aka-rsa scenario
2010-05-15 16:44:53 +02:00
88e180489a
fixed keyids in sql/rw-cert scenario
2010-05-15 16:34:50 +02:00
829b790e5b
fixed keyids in sql/net2net-cert scenario
2010-05-15 16:20:34 +02:00
d147de932e
inserted newline
2010-05-15 16:13:22 +02:00
c572f93ed7
fixed keyids in sql/ip-split-pools-db-restart scenario
2010-05-15 16:11:08 +02:00
2948e3d0c2
fixed keyids in sql/ip-split-pools-db scenario
2010-05-15 13:40:11 +02:00
1ae9353d8a
fixed keyids in sql/ip-pool-db-restart scenario
2010-05-15 13:22:49 +02:00
f2c84bd890
fixed keyids in sql/ip-pool-db-expired scenario
2010-05-15 13:07:22 +02:00
0ee2c5e9be
fixed keyids in sql/ip-pool-db scenario
2010-05-15 13:06:48 +02:00
b8520ad50d
adapted evaltest of ikev1/ip-pool-db-push scenario to resolve plugin
2010-05-14 17:26:59 +02:00
9e229e284f
adapted evaltest of ikev1/ip-pool-db scenario to resolve plugin
2010-05-14 17:20:28 +02:00
a273546854
adapted evaltest of ikev1/mode-config-push scenario to resolve plugin
2010-05-14 15:12:03 +02:00
3cbf6db653
adapted evaltest to resolve plugin
2010-05-14 11:07:26 +02:00
a784c540e5
version bump to 4.4.1
2010-05-03 09:09:43 +02:00
4c9b5e742a
updated options in testing.conf
2010-05-02 11:47:24 +02:00
cb9c497a86
added ikev1/alg-esp-aes-gmac scenario
2010-04-27 13:48:37 +02:00
6f7dac0d72
added ikev2/alg-esp-aes-gmac scenario
2010-04-27 13:13:10 +02:00
6207b63d76
added ikev1/alg-modp-subgroup scenario
2010-04-23 15:23:54 +02:00
9239fc4a15
added ikev2/alg-modp-subgroup scenario
2010-04-23 15:03:16 +02:00
2dbff1bf53
added ikev2/dhcp-static-client-id scenario
2010-04-23 12:56:59 +02:00
55fe05d489
fixed optional dnsmasq.conf in the ikev2/dhcp-static-mac scenario
2010-04-23 12:38:30 +02:00
837e9fda57
added ikev2/dhcp-static-mac scenario
2010-04-23 12:33:11 +02:00
bcd20cc987
added ikev2/dhcp-dynamic scenario
2010-04-23 11:52:37 +02:00
355c3a66b1
When logging to the database, the IDs of an IKE SA are initially NULL.
2010-04-12 13:51:10 +02:00
9391b485f7
updated DER versions of research and sales CAs
2010-04-11 22:00:01 +02:00
6e939d2f94
added ikev1/ip-two-pools-mixed scenario
2010-04-11 17:05:42 +02:00
2544e08ec7
IKEv1 uses Mode Config payload
2010-04-11 16:09:09 +02:00
b87edeaade
added ikev1/ip-two-pools scenario
2010-04-11 16:05:54 +02:00
a4b2332fd2
remove virtual interfaces after scenario
2010-04-11 16:05:04 +02:00
b516382cc9
added ikev1/ip-pool scenario
2010-04-11 14:40:04 +02:00
b74cd9573d
pluto now requires attr plugin for dns and nbns server loading from strongswan.conf
2010-04-09 21:03:44 +02:00
6c1dc87551
recovered private keys of no CDP certificates
2010-04-07 19:38:10 +02:00
589d175a05
recovered lost Duck CA certificates
2010-04-07 19:38:10 +02:00
e6e8eb09dd
fixed ikev1/protoport-route timing
2010-04-07 13:24:58 +02:00
c3379af391
removed whitespace
2010-04-07 13:07:11 +02:00
ef4aa67bf7
generated new research and sales CA certs for carol and dave, respectively
2010-04-07 13:05:17 +02:00
586c137016
prolonged Research and Sales CA certs
2010-04-06 12:05:39 +02:00
7d00ebfb54
wait one second before running evaluations
2010-04-06 10:55:59 +02:00
efd16e405a
increase UML root file system to 700 MB
2010-04-05 20:23:20 +02:00
5ee07585aa
added ikev2/nat-virtual-ip scenario
2010-04-05 14:03:38 +02:00
a287bdd46c
farp scenario requires logging of arp packets
2010-04-05 14:01:29 +02:00
eb11d1c58c
added ikev2/farp scenario
2010-04-05 12:50:32 +02:00
b49cbd68a6
added dave2 and carol2 entries to /etc/hosts
2010-04-05 12:50:07 +02:00
3ad78f0239
compile dhcp and farp plugins in UMLs
2010-03-28 22:40:20 +02:00
5d91d4c6d7
moved attr-sql plugin to libhydra in pool scenarios
2010-03-28 22:33:30 +02:00
0ef84e5e4d
enable build of socket-default plugin
2010-03-11 21:53:18 +01:00
44f1024705
mixed IKEv1/IKEv2 scenarios require socket-raw
2010-03-11 21:32:36 +01:00
a5166b16a1
Adding socket-default to the plugin list in all test cases.
2010-03-09 17:43:21 +01:00
3cfbc91a98
renewed Authorization Authority certificate
2010-02-27 22:16:36 +01:00
b65d7f8a15
version bump to 4.4.0
2010-02-15 20:58:41 +01:00
2d07095e01
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
2010-02-06 12:34:41 +01:00
dd0b1b9a16
generated hash-and-url files for rfc3779 certs
2010-02-06 11:41:44 +01:00
76fe5500c4
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
2010-02-06 11:39:33 +01:00
5094bfd85f
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
2010-02-05 20:39:13 +01:00
61d7ff0c19
IPv6 fragment and http access are not needed in PSK scenario
2010-02-05 20:27:03 +01:00
699c47a9be
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
2010-02-05 20:16:26 +01:00
1f2da75069
IPv6 frag netfilter rule not needed anymore
2010-02-05 20:04:01 +01:00
563a177830
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
2010-02-05 19:58:42 +01:00
52719d719c
use static IPsec policy netfilter rules in MOBIKE scenarios
2010-02-04 10:05:44 +01:00
8501181925
remove any charon.pid files remaining at the end of each scenario
2010-02-04 08:53:52 +01:00
00eb9267ad
IPSEC_ROUTING_TABLE is now called routing_table
2010-02-03 19:32:50 +01:00
ec37b04732
differentiate between executed and displayed iptables commands
2010-02-03 19:21:55 +01:00
0d8bdf24ff
added ikev2/inactivity-timeout scenario
2010-02-03 10:28:30 +01:00
8fb389b299
added ikev2/rw-eap-sim-only-radius scenario
2010-01-11 11:20:45 +01:00
87eb27681a
send strongSwan Vendor ID in ikev2/alg-sha256-96 scenario
2010-01-11 00:54:33 +01:00
a2847740d2
removed charon-specific load statement in pluto scenario
2009-12-26 17:13:53 +01:00
c5454eaf61
added RFC 3779 CA
2009-12-25 11:20:59 +01:00
7c697964d3
added three RFC 3779 scenarios
2009-12-25 11:20:59 +01:00
92f0aa9736
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
2009-12-17 19:43:33 +01:00
02ee613325
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
2009-12-17 18:50:45 +01:00
98b0657c0a
ikev1/ip-pool-db-push scenario tests DNS and NBNS server support
2009-12-16 21:50:39 +01:00
4d64cbbc4e
ikev1/ip-pool-db scenario tests DNS and NBNS server support
2009-12-16 21:22:13 +01:00
c236049850
sql/ip-pool-db scenario tests DNS and NBNS server support
2009-12-16 19:02:23 +01:00
42eb4951f9
ikev2/ip-pool-db scenario tests DNS and NBNS server support
2009-12-16 18:45:29 +01:00
a461e20dd8
provide attributes from SQL database
2009-12-16 12:31:41 +01:00
b75002bc95
added openssl-ikev1/alg-camellia scenario
2009-12-15 19:55:58 +01:00
1191779744
removed superfluous ikev1/esp-alg-camellia scenario
2009-12-15 19:16:28 +01:00
cbcd91314b
added gcrypt-ikev1/alg-camellia scenario
2009-12-15 19:15:44 +01:00
25df6196df
activate tcpdump in ikev1/esp-alg-des scenario
2009-12-10 22:37:43 +01:00
982596e427
shuffled output order to achieve consistence
2009-12-09 17:26:35 +01:00
4d025314c8
added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios
2009-12-09 17:25:12 +01:00
3e4b1010b0
adapted openssl-ikev2/alg scenarios
2009-12-09 15:51:43 +01:00
4ab5874ccd
adapted gcrypt-ikev2/alg-camellia scenario
2009-12-09 15:48:03 +01:00
fcca5b5caf
adapted gcrypt-ikev1 alg scenarios
2009-12-09 15:45:45 +01:00
8603d1d76c
adapted ikev1 alg and esp scenarios
2009-12-09 15:41:54 +01:00
4c8f3dff9c
adapted pfkey alg and esp scenarios
2009-12-09 15:38:17 +01:00
8e7e81451b
remove again the ikev2/esp-alg-camellia scenario
2009-12-09 15:26:43 +01:00
99133d3086
adapted ikev2 alg and esp scenarios
2009-12-09 15:19:10 +01:00
344061ebce
removed redundant ikev1/ike-alg-sha2 scenarios
2009-12-09 10:11:03 +01:00
01a8af1b1b
added ikev1/alg-sha512 scenario
2009-12-09 09:51:54 +01:00
cb7e304d33
added ikev1/alg-sha384 scenario
2009-12-09 09:46:40 +01:00
5d9d779808
renamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256
2009-12-09 09:36:16 +01:00
05ffbc6e59
added ikev1/alg-sha256-96 scenario
2009-12-09 09:35:17 +01:00
7747210f26
removed redundant ikev2/esp-alg-camellia scenario
2009-12-09 00:24:41 +01:00
04933ea74e
added ikev2/alg-3des-md5 scenario
2009-12-08 12:54:42 +01:00
7868162b35
added RFC-conforming ikev2/sha2 scenarios
2009-11-26 23:48:29 +01:00
68db91ca32
adapted ikev2/alg-aes-xcbc scenario
2009-11-26 23:46:27 +01:00
17d52fbba1
renewed OCSP Signing certificate
2009-11-24 13:55:38 +01:00
6ae43b9333
mixed fingerprint / userid
2009-11-11 11:17:59 +01:00
262af16179
accept PGP v3 or v4 fingerprint as alternative to PGP user_id
2009-11-09 23:15:17 +01:00
b25311fbe2
added ikev2/net2net-pgp-v3 scenario
2009-11-08 23:49:04 +01:00
bc662125c2
removed nocrsend=yes statement
2009-11-08 23:48:26 +01:00
2846e51a5b
added ikev2/net2net-pgp-v4 scenario
2009-11-08 23:23:45 +01:00
16dca5c2f2
moved multi-level-ca-pathlen scenario
2009-11-04 23:43:43 +01:00
4c68a85a75
implemented path length constraint checkinf for IKEv2
2009-11-04 23:37:15 +01:00
32c8b1847b
renamed multi-level-pathlen scenario to multi-level-ca-pathlen
2009-11-04 18:18:43 +01:00
cd36095e38
added ikev1/multi-level-pathlen scenario
2009-11-04 18:15:26 +01:00
28c554088d
added a subsidiary Duck Research CA
2009-11-04 18:13:06 +01:00
c95671cec2
implemented path length constraint checking for IKEv1
2009-11-04 18:10:31 +01:00
5d1d7e82b5
refreshened and fortified strongSwan Root CA certificate
2009-11-04 00:16:48 +01:00
a58b1722b0
version bump to 4.3.6
2009-11-02 22:47:55 +01:00
c51b78eb2a
hyphenate eap-radius
2009-10-17 09:23:09 +02:00
601e2a6986
added ipv6/net2net-ip4-in-ip6-ikev1 and ipv6/net2net-ip4-in-ip6-ikev1 scenarios
2009-10-16 15:04:17 +02:00
50a82b419e
corrected description of ikev1/ip-pool-db scenario
2009-10-15 15:25:36 +02:00
bc3162d806
build eap-aka-3gpp2 plugin in UML scenarios
2009-10-15 15:22:48 +02:00
f48ceeb1d1
Renamed plugin configuration sections to the actual plugin name
2009-10-15 10:36:17 +02:00
c4d53fe06b
Streamlined EAP plugins to use a dash between eap-method, as used in all other places
2009-10-15 10:36:17 +02:00
ffe6f83272
added ikev1/ip-pool-db-push scenario
2009-10-14 21:35:43 +02:00
f4c4e78296
added ikev1/ip-pool-db scenario
2009-10-14 14:51:12 +02:00
32bc430591
fixed inconsistent triplets.dat files
2009-10-14 11:08:01 +02:00
247794827e
move SQL-based pool functionality to new attr-sql libstrongswan plugin
2009-10-13 17:02:29 +02:00
4c8bb47abd
check provenance of nameserver entry
2009-10-13 13:58:43 +02:00
cb7817a64b
scepclient now requires x509 plugin
2009-10-12 19:56:21 +02:00
3fe152f275
sql/rw-eap-aka-rsa scenario requires eapaka-3gpp2 plugin
2009-10-12 19:50:44 +02:00
63c75a98eb
updated evaltest of ikev1/no-priv-key scenario
2009-10-12 19:48:20 +02:00
3197a20a87
adapted ikev2/rw-eap-aka scenarios to eapaka-3gpp2 plugin
2009-10-11 00:35:01 +02:00
9ea23c8f91
corrected ikev1/nat-two-rw evaltest.dat
2009-10-11 00:14:20 +02:00
0da24e7d46
corrected evaltest.dat
2009-10-10 21:41:36 +02:00
f3e9eae283
the ikev1 scenarios need the x509 plugin
2009-10-06 14:38:34 +02:00
Andreas Steffen