denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

upgraded ikev1 scenarios to 5.0.0

Browse Source
This commit is contained in:
Andreas Steffen
2012-05-23 14:45:15 +02:00
parent 3c475660c5
commit 148b643880
973 changed files with 1476 additions and 13035 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev1/multi-level-ca/evaltest.dat
+18 -12
View File
@@ -1,12 +1,18 @@
carol::cat /var/log/auth.log::alice.*we have a cert and are sending it upon request::YES
moon::cat /var/log/auth.log::alice.*we have a cert and are sending it upon request::YES
dave::cat /var/log/auth.log::venus.*we have a cert and are sending it upon request::YES
moon::cat /var/log/auth.log::venus.*we have a cert and are sending it upon request::YES
carol::ipsec status::alice.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::alice.*PH_IP_CAROL.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ipsec status::venus.*STATE_QUICK_I2.*IPsec SA established::NO
moon::ipsec status::venus.*PH_IP_CAROL.*STATE_QUICK_R2.*IPsec SA established::NO
dave::ipsec status::venus.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::venus.*PH_IP_DAVE.*STATE_QUICK_R2.*IPsec SA established::YES
dave::ipsec status::alice.*STATE_QUICK_I2.*IPsec SA established::NO
moon::ipsec status::alice.*PH_IP_DAVE.*STATE_QUICK_R2.*IPsec SA established::NO
moon:: cat /var/log/daemon.log::fetching crl from.*http.*research.crl::YES
moon:: cat /var/log/daemon.log::crl correctly signed by.*Research CA::YES
moon:: cat /var/log/daemon.log::fetching crl from.*http.*sales.crl::YES
moon:: cat /var/log/daemon.log::crl correctly signed by.*Sales CA::YES
moon:: cat /var/log/daemon.log::fetching crl from.*http.*strongswan.crl::YES
moon:: cat /var/log/daemon.log::crl correctly signed by.*strongSwan Root CA::YES
carol::ipsec status 2> /dev/null::alice.*INSTALLED, TUNNEL::YES
moon:: ipsec status 2> /dev/null::alice.*ESTABLISHED.*[email protected]::YES
carol::cat /var/log/daemon.log::received INVALID_ID_INFORMATION error notify::YES
carol::ipsec status 2> /dev/null::venus.*INSTALLED::NO
moon:: ipsec status 2> /dev/null::venus.*ESTABLISHED.*[email protected]::NO
moon:: cat /var/log/daemon.log::constraint check failed: peer not authenticated by.*Research CA::YES
moon:: cat /var/log/daemon.log::switching to peer config.*venus::YES
dave:: ipsec status 2> /dev/null::venus.*INSTALLED, TUNNEL::YES
moon:: ipsec status 2> /dev/null::venus.*ESTABLISHED.*[email protected]::YES
dave:: cat /var/log/daemon.log::received INVALID_ID_INFORMATION error notify::YES
dave:: ipsec status 2> /dev/null::alice.*INSTALLED::NO
moon:: ipsec status 2> /dev/null::alice.*ESTABLISHED.*[email protected]::NO
testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.conf
+2 -9
View File
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -17,6 +14,7 @@ conn %default
leftsendcert=ifasked
right=PH_IP_MOON
[email protected]
rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
conn alice
rightsubnet=PH_IP_ALICE/32
@@ -25,8 +23,3 @@ conn alice
conn venus
rightsubnet=PH_IP_VENUS/32
auto=add
testing/tests/ikev1/multi-level-ca/hosts/carol/etc/strongswan.conf
+5
View File
@@ -0,0 +1,5 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default
}
testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.conf
+2 -9
View File
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -17,6 +14,7 @@ conn %default
leftsendcert=ifasked
right=PH_IP_MOON
[email protected]
rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
conn alice
rightsubnet=PH_IP_ALICE/32
@@ -25,8 +23,3 @@ conn alice
conn venus
rightsubnet=PH_IP_VENUS/32
auto=add
testing/tests/ikev1/multi-level-ca/hosts/dave/etc/strongswan.conf
+5
View File
@@ -0,0 +1,5 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default
}
testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.conf
+1 -5
View File
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
ca strongswan
cacert=strongswanCert.pem
@@ -33,4 +30,3 @@ conn venus
right=%any
rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA"
auto=add
testing/tests/ikev1/multi-level-ca/hosts/moon/etc/strongswan.conf
+5
View File
@@ -0,0 +1,5 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default
}