146e9123a2
added the ikev2/rw-eap-tnc-20 scenario
2010-12-12 10:47:16 +01:00
2965eb3cc7
added sql/multi-level-ca scenario
2010-12-05 21:53:43 +01:00
13a7f5f3e3
added certificate_authorities and certificate_distribution_points tables
2010-12-05 11:30:06 +01:00
2da636fd9b
support of reqid field in SQL database
2010-12-05 11:21:40 +01:00
f143f0f743
use a composite test proposal
2010-12-01 10:05:28 +01:00
cbdcca7fd7
renamed algorithm to proposal
2010-11-30 17:38:49 +01:00
f4e5acef3a
store IKE and ESP proposals in SQL database
2010-11-30 17:03:21 +01:00
b62bde3b95
configured various DPD modes in sql scenarios
2010-11-28 17:41:27 +01:00
11c904b373
added sql/net2net-route-pem scenario
2010-11-28 12:00:44 +01:00
d6a13b895f
added sql/net2net-start-pem scenario
2010-11-28 12:00:19 +01:00
c616d84c3f
start and route connections defined in an SQL database via start_action field and ipsec up %startall command
2010-11-28 11:57:49 +01:00
1f201db699
enabled ha plugin in UML scenarios
2010-11-20 21:52:40 +01:00
d16ecc1753
fixed iptables script of gateway alice
2010-11-20 21:01:54 +01:00
aafe3b090e
removed copy of strongswancCert.pem
2010-11-20 20:34:21 +01:00
4a8ebe0b35
added ha/both-active scenario
2010-11-20 20:16:26 +01:00
841b2b3ee9
created certificate and /etc/hosts entry for virtual gateway mars
2010-11-20 18:20:23 +01:00
77255f477c
version bump to 4.5.1
2010-10-29 09:30:57 +02:00
8d01a80819
do not send certificate requests in EAP-ONLY scenarios
2010-10-14 21:10:03 +02:00
ea7c8b3880
added ikev2/rw-eap-tnc-ls scenario
2010-10-14 21:00:41 +02:00
cf76984c28
Define explicit IKEv1 keyexchange mode V
2010-10-14 16:13:52 +02:00
6587f1a04d
increase eap-tls max_message_count in fragments scenario
2010-10-14 16:09:44 +02:00
e7e48fff9f
Added ssh_config to distribution.
2010-10-14 15:58:26 +02:00
7ec11936e8
testing: Reduce testing runtime by reusing SSH sessions.
...
By using the ControlMaster and ControlPath options, existing SSH sessions
are reused (a session to each host is opened at the beginning of a test
run). Also, RC4 is used as encryption algorithm to further improve the
performance. These changes reduce the runtime by over 20%.
2010-10-14 14:01:26 +02:00
972663ccb0
Define explicit IKEv1 keyexchange mode IV.
2010-10-14 13:55:04 +02:00
897a9baaba
define explicit IKEv1 keyexchange mode III
2010-10-14 07:34:13 +02:00
a885f0737c
fixed ikev2/rw-eap-ttls-radius scenario
2010-10-14 07:26:10 +02:00
d8a379e1e4
fixed ikev2/rw-eap-tnc-radius-block scenario
2010-10-14 07:22:39 +02:00
adf5ebaa28
fixed ikev2/rw-eap-tnc scenario
2010-10-14 07:08:33 +02:00
c763ec09db
fixed ikev2/rw-eap-sim-radius scenario
2010-10-14 07:01:06 +02:00
15a7b95f86
fixed ikev2/rw-eap-sim-only-radius scenario
2010-10-14 06:55:06 +02:00
907ca3d4df
fixed ikev2/mult-auth-rsa-eap-sim-id
2010-10-14 06:41:26 +02:00
e6f685b0fa
scenarios without RADIUS server can use default iptables script
2010-10-11 17:04:53 +02:00
e5f5f612bd
fixed some evaltest.dat files
2010-10-11 16:58:12 +02:00
7d8cb1f952
added ikev2/rw-eap-tnc-block scenario
2010-10-11 16:58:12 +02:00
8efd583a64
explicit ikev1 key exchange for ikev1/esp-alg-null scenario
2010-10-09 22:07:51 +02:00
1e6c92789e
fixed typo
2010-10-09 22:05:26 +02:00
74e14ed631
define explicit IKEv1 key exchange mode II
2010-10-09 20:04:00 +02:00
ed08f7ce83
use DBG_TNC for TNC debugging output
2010-10-09 16:01:19 +02:00
db24b600fb
changed filter attribute from access to allow
2010-10-09 01:01:19 +02:00
a1afa8d810
added ikev2/rw-eap-tnc scenario
2010-10-09 00:59:31 +02:00
8dcc56dcc0
created tnc-imc and tnc-imv plugins
2010-10-07 23:31:23 +02:00
84babfb895
define explicit IKEv1 key exchange mode
2010-10-07 07:31:44 +02:00
9b201cf859
host venus is used in ikev2/rw-eap-tnc-radius scenario
2010-10-06 10:38:18 +02:00
541666b89f
added ikev2/rw-eap-tnc-radius-block scenario
2010-10-06 10:32:50 +02:00
48e16e0ae1
final version of ikev2/rw-eap-tnc-radius scenario
2010-10-05 20:38:34 +02:00
9ffa3f71f2
fixed typo in image path
2010-10-05 09:09:58 +02:00
e7104a6ec9
updated ikev2/rw-eap-tnc-radius scenario
2010-10-05 07:56:57 +02:00
30f14b7066
added configuration files for dummyimc.so IMC
2010-10-01 00:14:44 +02:00
ea893a5de2
The TNC@FHH TNC Serve does not like symbolic links
2010-09-30 23:35:24 +02:00
cae4668ffb
added tnc_config files to TNC scenario
2010-09-30 12:42:18 +02:00
440231e863
load tnccs-11 plugin in ikev2/rw-eap-tnc-radius scenario
2010-09-28 23:52:59 +02:00
4e8e74fcfa
moved TNCCS layer out of eap_tnc plugin
2010-09-28 23:34:04 +02:00
280c8ea2f0
stop gateway after clients in order to check release of virtual IP
2010-09-26 11:31:39 +02:00
1e6cc07ee4
stop gateway after clients in order to check release of virtual IP
2010-09-26 10:58:28 +02:00
234aaf2df2
stop gateway after clients in order to check release of virtual IP
2010-09-26 10:35:12 +02:00
939c4bf2e8
added ikev1/net2net-same-nets scenario
2010-09-09 13:37:30 +02:00
2774826995
added openssl-ikev2/rw-eap-tls-only scenario
2010-09-07 17:14:32 +02:00
6d71f4dcb9
updown script variable is called PLUTO_UDP_ENC
2010-09-03 12:58:10 +02:00
6deeacd965
adapted debug options
2010-09-03 09:29:56 +02:00
4cbe758cd4
adapted debug options
2010-09-03 09:27:16 +02:00
5175adee66
optimized FreeRadius scenarios for debug output
2010-09-02 22:19:37 +02:00
0fb2980281
added ikev2/rw-eap-tnc-radius scenario
2010-09-02 22:19:37 +02:00
c0cecc0a0e
added radius init script mit increased debugging
2010-09-02 22:19:37 +02:00
f9cfb5c836
display configuration and log of FreeRadius servers
2010-09-02 22:19:37 +02:00
fe962bc788
testing: Added ikev1 xfrm mark scenarios.
2010-09-02 19:04:25 +02:00
f23e7394ae
pluto: Added PLUTO_UDP_ENC argument to updown script.
...
This contains the remote UDP port in case of UDP encapsulated ESP.
2010-09-02 19:04:25 +02:00
80c0328eec
testing: Print output of 'make oldconfig' to STDOUT, besides logging it.
2010-09-02 19:04:23 +02:00
f32c0ce7b6
testing: Only sleep after a host has actually been started.
2010-09-02 19:04:22 +02:00
ad808bc2a2
testing: Build strongSwan a bit faster using make -j.
2010-09-02 19:04:22 +02:00
38dd45c480
testing: Force the UML Kernel to x86.
2010-09-02 19:04:22 +02:00
91ea48352c
testing: Adding kernel-netlink to pluto.load statements.
2010-09-02 19:04:22 +02:00
cc9cfc2e11
testing: Added missing host alice to test.conf.
2010-09-02 19:04:22 +02:00
4171cbd60b
adapted evaltest.dat to new RULE_OCSP_VALIDATION
2010-09-01 22:22:27 +02:00
873604dd7f
defined aaa_identity
2010-09-01 00:16:19 +02:00
d93e2e5409
created an eap-tnc method hull
2010-08-30 15:36:34 +02:00
1bc8690f54
replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctr
2010-08-29 21:52:08 +02:00
6297dc390f
added ctr ccm and gcm plugins to ikev2/rw-cert scenario
2010-08-29 21:11:00 +02:00
8eb74facfe
added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenario
2010-08-29 21:09:25 +02:00
6aa82ec280
added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenario
2010-08-29 20:50:37 +02:00
4f2a0bd839
replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcm
2010-08-29 20:39:51 +02:00
8318d88450
replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccm
2010-08-29 20:24:12 +02:00
421a529f88
added ikev2/rw-eap-tls-fragments scenario
2010-08-24 10:12:15 +02:00
234aa8ee03
use correct network diagram
2010-08-24 10:09:58 +02:00
906680029d
enable the ccm and gcm plugins in the UML scenarios
2010-08-20 12:47:44 +02:00
f9a2d4bfcb
describe EAP-TTLS phase2 start options using the phase2_piggyback parameter
2010-08-16 19:29:39 +02:00
cf95e162f2
added ikev2/rw-eap-ttls-phase2-piggyback scenario
2010-08-16 18:32:00 +02:00
f2b9b9725c
changed ikev2/rw-eap-ttls-only description
2010-08-16 18:30:41 +02:00
d2be215a99
added ikev2/rw-eap-ttls-only scenario
2010-08-16 16:44:13 +02:00
758d7283fb
used default ipsec.secrets
2010-08-15 12:49:14 +02:00
d662a7ffad
included bad case in ikev2/rw-eap-ttls-radius scenario
2010-08-15 11:13:41 +02:00
eb4c9c609c
version bumps in testing.conf
2010-08-14 21:41:52 +02:00
4618430f83
enable the eap-ttls and ctr plugins in the uml scenarios
2010-08-14 21:40:05 +02:00
e8f971ee4e
added rw-eap-ttls-radius scenario
2010-08-14 20:05:21 +02:00
6ac797ad3a
added ikev2/rw-eap-tls-radius
2010-08-05 19:28:06 +02:00
6b717cc28d
no need for strongSwan VID since the EAP_ONLY notification has been officially registered with IANA
2010-08-05 12:47:09 +02:00
8e7920eea1
generated aaa certificate
2010-08-04 12:44:47 +02:00
f8bb082f1f
added ikev2/rw-eap-tls-only scenario
2010-08-04 08:36:27 +02:00
9dffc26b73
--enable eap-tls and --disable-load-warning in uml build
2010-08-04 07:48:19 +02:00
b599b80013
version bump to 4.4.2
2010-07-30 22:26:14 +02:00
ff7b0dd289
added NETMAP rules for the reverse direction
2010-07-27 21:16:44 +02:00
Andreas Steffen