denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Use TLS 1.3 in TNC PT-TLS tests

Browse Source
This commit is contained in:
Andreas Steffen
2021-02-21 09:48:34 +01:00
parent 9f55246018
commit 20c47af319
11 changed files with 24 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/strongswan.conf
+3 -1
View File
@@ -24,7 +24,9 @@ charon-systemd {
}
libtls {
suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
suites = TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256
ke_group = curve25519, curve448
version_max = 1.3
}
libimcv {
testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/carol/etc/strongswan.conf
+3 -1
View File
@@ -1,7 +1,9 @@
# /etc/strongswan.conf - strongSwan configuration file
libtls {
suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
suites = TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384
ke_group = curve25519, curve448
version_max = 1.3
}
libimcv {
testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/dave/etc/strongswan.conf
+3 -1
View File
@@ -12,7 +12,9 @@ libimcv {
}
libtls {
suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
suites = TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384
ke_group = curve25519, curve448
version_max = 1.3
}
pt-tls-client {