deleted unneeded openssl-ikev1 files
This commit is contained in:
Andreas Steffen
-18
@@ -1,18 +0,0 @@
|
|||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIC7DCCAk+gAwIBAgIBBTAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD
|
|
||||||
VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv
|
|
||||||
b3QgQ0EwHhcNMDkwNjEyMTYwNjMzWhcNMTQwNjExMTYwNjMzWjBeMQswCQYDVQQG
|
|
||||||
EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg
|
|
||||||
MjU2IGJpdDEcMBoGA1UEAxMTbW9vbi5zdHJvbmdzd2FuLm9yZzBZMBMGByqGSM49
|
|
||||||
AgEGCCqGSM49AwEHA0IABIU/UvJ7ro2AYsFWXZKH9K4FD9O5kNfi3/H3+10kAy6s
|
|
||||||
eQUab8qaAhTahBHuywzanVTiJPK5caQSvnpt+z1RJDqjggETMIIBDzAJBgNVHRME
|
|
||||||
AjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUq1PybZZ+RZuJICuoDUhXdLy/iacw
|
|
||||||
eAYDVR0jBHEwb4AUul35cbYTtWrR3bo2t6rSwe6P2NKhTKRKMEgxCzAJBgNVBAYT
|
|
||||||
AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT
|
|
||||||
d2FuIEVDIFJvb3QgQ0GCCQD2onV+Iu+miTAeBgNVHREEFzAVghNtb29uLnN0cm9u
|
|
||||||
Z3N3YW4ub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dh
|
|
||||||
bi5vcmcvc3Ryb25nc3dhbl9lYy5jcmwwCQYHKoZIzj0EAQOBiwAwgYcCQWYZnZLl
|
|
||||||
iimVcAs5p7SXpHmcnlIX9C4EFzNtY+zoDfPM9Qx/vGY2hKa65tyhepn5RFyNqH6d
|
|
||||||
slr5EBqoT5Vt86kJAkIAx/dyiLLqT0+lJiyxjLQuAaLRWHwlgq7jaUhoQusxno62
|
|
||||||
dIfe0U1QjgumA+zXoAnbLBF3KnnrKvHByv7ejeH0Ys4=
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
-19
@@ -1,19 +0,0 @@
|
|||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIDCjCCAmygAwIBAgIBBjAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD
|
|
||||||
VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv
|
|
||||||
b3QgQ0EwHhcNMDkwNjEyMTYwNzA2WhcNMTQwNjExMTYwNzA2WjBeMQswCQYDVQQG
|
|
||||||
EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg
|
|
||||||
Mzg0IGJpdDEcMBoGA1UEAxMTbW9vbi5zdHJvbmdzd2FuLm9yZzB2MBAGByqGSM49
|
|
||||||
AgEGBSuBBAAiA2IABK4TajAd1pgzhJJsmyjw1Zb/CdEe0eWKmEyP1OjmwRwS37Tx
|
|
||||||
3wV9C9ZzCYBsJlvbH53kyeZYoAojUL5sXDVBq8qu23jSjBCesypSiNt/8akt+4bg
|
|
||||||
a4qMN2zutd/U1fC5C6OCARMwggEPMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0G
|
|
||||||
A1UdDgQWBBT43sZUBjwcO+QW4PXk7KoOxxkm3jB4BgNVHSMEcTBvgBS6XflxthO1
|
|
||||||
atHduja3qtLB7o/Y0qFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4
|
|
||||||
IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gRUMgUm9vdCBDQYIJAPai
|
|
||||||
dX4i76aJMB4GA1UdEQQXMBWCE21vb24uc3Ryb25nc3dhbi5vcmcwPAYDVR0fBDUw
|
|
||||||
MzAxoC+gLYYraHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2Vj
|
|
||||||
LmNybDAJBgcqhkjOPQQBA4GMADCBiAJCAUfrzEnQUA0dqpo9I2YaFh3Y+QnFosTg
|
|
||||||
b46jcbxm/LbIeWDxwU2HK3Qfo+tGsXJnh73lKo8B0o+OsXt4gP+GQutCAkIBu7Aw
|
|
||||||
0iUx8d84SqHiBZBDIk/X6NV62YZXVhO9rPON0r/kdmeZ8OvPD53JgE64irFf6Wp+
|
|
||||||
3ictLD61ItW0nxNHlcE=
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
-5
@@ -1,5 +0,0 @@
|
|||||||
-----BEGIN EC PRIVATE KEY-----
|
|
||||||
MHcCAQEEIE+rz/5axOOEvTVs9nnmKyF1v/rgmdIvam+BfSSS1SGpoAoGCCqGSM49
|
|
||||||
AwEHoUQDQgAEhT9S8nuujYBiwVZdkof0rgUP07mQ1+Lf8ff7XSQDLqx5BRpvypoC
|
|
||||||
FNqEEe7LDNqdVOIk8rlxpBK+em37PVEkOg==
|
|
||||||
-----END EC PRIVATE KEY-----
|
|
||||||
-6
@@ -1,6 +0,0 @@
|
|||||||
-----BEGIN EC PRIVATE KEY-----
|
|
||||||
MIGkAgEBBDDvvge4iZDHIaL0IDBs4gVesErZZWOud3NysAEayGW4iTb6wjQLtIVF
|
|
||||||
1i7d8lV6Uc2gBwYFK4EEACKhZANiAASuE2owHdaYM4SSbJso8NWW/wnRHtHliphM
|
|
||||||
j9To5sEcEt+08d8FfQvWcwmAbCZb2x+d5MnmWKAKI1C+bFw1QavKrtt40owQnrMq
|
|
||||||
Uojbf/GpLfuG4GuKjDds7rXf1NXwuQs=
|
|
||||||
-----END EC PRIVATE KEY-----
|
|
||||||
@@ -1,12 +0,0 @@
|
|||||||
The roadwarrior <b>carol</b> and the gateway <b>moon</b> use the <b>openssl</b>
|
|
||||||
plugin based on the <b>OpenSSL</b> library for all cryptographical and X.509
|
|
||||||
certificate functions whereas roadwarrior <b>dave</b> uses the default <b>strongSwan</b>
|
|
||||||
cryptographical plugins <b>aes des sha1 sha2 md5 gmp</b> and <b>x509</b>.
|
|
||||||
<p>
|
|
||||||
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each
|
|
||||||
to gateway <b>moon</b>. The authentication is based on <b>X.509 certificates</b>.
|
|
||||||
Upon the successful establishment of the IPsec tunnels, <b>leftfirewall=yes</b>
|
|
||||||
automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
|
|
||||||
In order to test both tunnel and firewall, both <b>carol</b> and <b>dave</b> ping
|
|
||||||
the client <b>alice</b> behind the gateway <b>moon</b>.
|
|
||||||
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
moon::ipsec statusall::IPsec SA established::YES
|
|
||||||
carol::ipsec statusall::IPsec SA established::YES
|
|
||||||
dave::ipsec statusall::IPsec SA established::YES
|
|
||||||
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
|
||||||
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
|
||||||
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
|
||||||
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
|
|
||||||
moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES
|
|
||||||
moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES
|
|
||||||
|
|
||||||
@@ -1,25 +0,0 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
|
||||||
|
|
||||||
config setup
|
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
charonstart=no
|
|
||||||
plutodebug=control
|
|
||||||
|
|
||||||
conn %default
|
|
||||||
ikelifetime=60m
|
|
||||||
keylife=20m
|
|
||||||
rekeymargin=3m
|
|
||||||
keyingtries=1
|
|
||||||
keyexchange=ikev1
|
|
||||||
ike=3des-sha1-modp1536!
|
|
||||||
|
|
||||||
conn home
|
|
||||||
left=PH_IP_CAROL
|
|
||||||
leftcert=carolCert.pem
|
|
||||||
[email protected]
|
|
||||||
leftfirewall=yes
|
|
||||||
right=PH_IP_MOON
|
|
||||||
[email protected]
|
|
||||||
rightsubnet=10.1.0.0/16
|
|
||||||
auto=add
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
|
||||||
|
|
||||||
pluto {
|
|
||||||
load = test-vectors pem pkcs1 openssl random hmac curl kernel-netlink
|
|
||||||
}
|
|
||||||
|
|
||||||
# pluto uses optimized DH exponent sizes (RFC 3526)
|
|
||||||
|
|
||||||
libstrongswan {
|
|
||||||
dh_exponent_ansi_x9_42 = no
|
|
||||||
integrity_test = yes
|
|
||||||
crypto_test {
|
|
||||||
on_add = yes
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,25 +0,0 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
|
||||||
|
|
||||||
config setup
|
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
charonstart=no
|
|
||||||
plutodebug=control
|
|
||||||
|
|
||||||
conn %default
|
|
||||||
ikelifetime=60m
|
|
||||||
keylife=20m
|
|
||||||
rekeymargin=3m
|
|
||||||
keyingtries=1
|
|
||||||
keyexchange=ikev1
|
|
||||||
ike=aes256-sha256-modp2048!
|
|
||||||
|
|
||||||
conn home
|
|
||||||
left=PH_IP_DAVE
|
|
||||||
leftcert=daveCert.pem
|
|
||||||
[email protected]
|
|
||||||
leftfirewall=yes
|
|
||||||
right=PH_IP_MOON
|
|
||||||
[email protected]
|
|
||||||
rightsubnet=10.1.0.0/16
|
|
||||||
auto=add
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
|
||||||
|
|
||||||
pluto {
|
|
||||||
load = test-vectors aes des sha1 sha2 md5 pem pkcs1 x509 gmp random hmac curl kernel-netlink
|
|
||||||
}
|
|
||||||
|
|
||||||
# pluto uses optimized DH exponent sizes (RFC 3526)
|
|
||||||
|
|
||||||
libstrongswan {
|
|
||||||
dh_exponent_ansi_x9_42 = no
|
|
||||||
integrity_test = yes
|
|
||||||
crypto_test {
|
|
||||||
required = yes
|
|
||||||
on_add = yes
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,24 +0,0 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
|
||||||
|
|
||||||
config setup
|
|
||||||
crlcheckinterval=180
|
|
||||||
strictcrlpolicy=no
|
|
||||||
charonstart=no
|
|
||||||
plutodebug=control
|
|
||||||
|
|
||||||
conn %default
|
|
||||||
ikelifetime=60m
|
|
||||||
keylife=20m
|
|
||||||
rekeymargin=3m
|
|
||||||
keyingtries=1
|
|
||||||
keyexchange=ikev1
|
|
||||||
ike=aes256-sha256-modp2048,3des-sha1-modp1536!
|
|
||||||
|
|
||||||
conn rw
|
|
||||||
left=PH_IP_MOON
|
|
||||||
leftcert=moonCert.pem
|
|
||||||
[email protected]
|
|
||||||
leftsubnet=10.1.0.0/16
|
|
||||||
leftfirewall=yes
|
|
||||||
right=%any
|
|
||||||
auto=add
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
|
||||||
|
|
||||||
pluto {
|
|
||||||
load = test-vectors pem pkcs1 openssl random hmac curl kernel-netlink
|
|
||||||
}
|
|
||||||
|
|
||||||
# pluto uses optimized DH exponent sizes (RFC 3526)
|
|
||||||
|
|
||||||
libstrongswan {
|
|
||||||
dh_exponent_ansi_x9_42 = no
|
|
||||||
integrity_test = yes
|
|
||||||
crypto_test {
|
|
||||||
on_add = yes
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
moon::ipsec stop
|
|
||||||
carol::ipsec stop
|
|
||||||
dave::ipsec stop
|
|
||||||
moon::/etc/init.d/iptables stop 2> /dev/null
|
|
||||||
carol::/etc/init.d/iptables stop 2> /dev/null
|
|
||||||
dave::/etc/init.d/iptables stop 2> /dev/null
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
moon::/etc/init.d/iptables start 2> /dev/null
|
|
||||||
carol::/etc/init.d/iptables start 2> /dev/null
|
|
||||||
dave::/etc/init.d/iptables start 2> /dev/null
|
|
||||||
moon::ipsec start
|
|
||||||
carol::ipsec start
|
|
||||||
dave::ipsec start
|
|
||||||
carol::sleep 1
|
|
||||||
carol::ipsec up home
|
|
||||||
dave::ipsec up home
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#
|
|
||||||
# This configuration file provides information on the
|
|
||||||
# UML instances used for this test
|
|
||||||
|
|
||||||
# All UML instances that are required for this test
|
|
||||||
#
|
|
||||||
UMLHOSTS="alice moon carol winnetou dave"
|
|
||||||
|
|
||||||
# Corresponding block diagram
|
|
||||||
#
|
|
||||||
DIAGRAM="a-m-c-w-d.png"
|
|
||||||
|
|
||||||
# UML instances on which tcpdump is to be started
|
|
||||||
#
|
|
||||||
TCPDUMPHOSTS="moon"
|
|
||||||
|
|
||||||
# UML instances on which IPsec is started
|
|
||||||
# Used for IPsec logging purposes
|
|
||||||
#
|
|
||||||
IPSECHOSTS="moon carol dave"
|
|
||||||
Reference in New Issue
Block a user