denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

upgraded ikev1 scenarios to 5.0.0

Browse Source
This commit is contained in:
Andreas Steffen
2012-05-23 14:45:15 +02:00
parent 3c475660c5
commit 148b643880
973 changed files with 1476 additions and 13035 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev1/net2net-psk-fail/description.txt
+5 -7
View File
@@ -1,7 +1,5 @@
An IPsec tunnel connecting the subnets behind the gateways <b>moon</b> and
<b>sun</b> is set up. The authentication is based on <b>Preshared Keys</b>
(PSK). Unfortunately the secret keys of <b>moon</b> and <b>sun</b> do not
match, so that the responder cannot decrypt ISAKMP message MI3. The resulting
encrypted notification message cannot in turn be read by the initiator
<b>moon</b>. In order to avoid a <b>notify-war</b>, any further generation of
PAYLOAD_MALFORMED messages is suppressed.
A connection between the gateways <b>moon</b> and <b>sun</b> is set up.
The authentication is based on <b>Preshared Keys</b> (PSK), but gateway <b>moon</b>
uses a wrong PSK. This makes it impossible for gateway <b>sun</b> to decrypt the
IKEv1 message correctly. Thus <b>sun</b> returns a <b>PAYLOAD-MALFORMED</b> error
notify which in turn cannot be decrypted by <b>moon</b>.