testing: Migrated ikev2 scenarios to new default plugins

This commit is contained in:
Andreas Steffen
2024-11-22 14:14:52 +01:00
committed by Tobias Brunner
parent 9de4efb1ae
commit 2099a52618
359 changed files with 630 additions and 610 deletions
@@ -1,5 +1,7 @@
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
The authentication is based on <b>X.509 certificates</b>.
The authentication is based on an RSA private key, a matching X.509 end entity
certificate and the issuing X.509 root CA certificate, all stored in a <b>PKCS12</b>
container.
<p/>
Upon the successful establishment of the IPsec tunnel, the updown script automatically
inserts iptables-based firewall rules that let pass the tunneled traffic.
@@ -1,9 +1,9 @@
# /etc/strongswan.conf - strongSwan configuration file
swanctl {
load = random aes sha1 sha2 hmac kdf pem pkcs1 pkcs7 pkcs8 pkcs12 gmp x509 revocation constraints
load = random pem pkcs1 openssl revocation constraints
}
charon-systemd {
load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici
load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici
}
@@ -1,9 +1,9 @@
# /etc/strongswan.conf - strongSwan configuration file
swanctl {
load = random aes sha1 sha2 hmac kdf pem pkcs1 pkcs7 pkcs8 pkcs12 gmp x509 revocation constraints
load = random pem pkcs1 openssl revocation constraints
}
charon-systemd {
load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici
load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici
}