testing: Removed openssl-ikev2/net2net-pgp-v3 scenario
This commit is contained in:
Andreas Steffen
@@ -1,6 +0,0 @@
|
|||||||
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
|
|
||||||
The authentication is based on <b>OpenPGP V3 keys</b>. Upon the successful
|
|
||||||
establishment of the IPsec tunnel, <b>leftfirewall=yes</b> automatically
|
|
||||||
inserts iptables-based firewall rules that let pass the tunneled traffic.
|
|
||||||
In order to test both tunnel and firewall, client <b>alice</b> behind gateway <b>moon</b>
|
|
||||||
pings client <b>bob</b> located behind gateway <b>sun</b>.
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
moon:: ipsec status 2> /dev/null::net-net.*ESTABLISHED.*71:27:04:32:cd:76:3a:18:02:0a:c9:88:c0:e7:5a:ed.*sun <sun.strongswan.org>::YES
|
|
||||||
sun:: ipsec status 2> /dev/null::net-net.*ESTABLISHED.*sun <sun.strongswan.org>.*71:27:04:32:cd:76:3a:18:02:0a:c9:88:c0:e7:5a:ed::YES
|
|
||||||
moon:: ipsec status 2> /dev/null::net-net.*INSTALLED, TUNNEL::YES
|
|
||||||
sun:: ipsec status 2> /dev/null::net-net.*INSTALLED, TUNNEL::YES
|
|
||||||
alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES
|
|
||||||
sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES
|
|
||||||
sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES
|
|
||||||
@@ -1,24 +0,0 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
|
||||||
|
|
||||||
config setup
|
|
||||||
|
|
||||||
conn %default
|
|
||||||
ikelifetime=60m
|
|
||||||
keylife=20m
|
|
||||||
rekeymargin=3m
|
|
||||||
keyingtries=1
|
|
||||||
keyexchange=ikev2
|
|
||||||
ike=aes128-sha256-modp3072!
|
|
||||||
esp=aes128gcm16!
|
|
||||||
mobike=no
|
|
||||||
|
|
||||||
conn net-net
|
|
||||||
left=PH_IP_MOON
|
|
||||||
leftsubnet=10.1.0.0/16
|
|
||||||
leftcert=moonCert.asc
|
|
||||||
leftid=@#71270432cd763a18020ac988c0e75aed
|
|
||||||
leftfirewall=yes
|
|
||||||
right=PH_IP_SUN
|
|
||||||
rightsubnet=10.2.0.0/16
|
|
||||||
rightcert=sunCert.asc
|
|
||||||
auto=add
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
Type Bits/KeyID Date User ID
|
|
||||||
pub 1024/613A3B61 2005/08/07 moon <moon.strongswan.org>
|
|
||||||
|
|
||||||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
||||||
Version: 2.6.3i
|
|
||||||
|
|
||||||
mQCNA0L2KI8AAAEEAM5GYrwuf1M9Cv7+Yfr6i5+17zMVGIyj/D4+msK43iUbEH61
|
|
||||||
+bhRKcrF+9NKvM+ujjZoUbfGjUipsBbTlPTaY7muZ9KaVy2OBHm73x13eiemkPS9
|
|
||||||
RFWesrL9L39aBO5K47ti0PwRP8QIPMaNWMs2z7yoZLE/flVNQfWsCnlhOjthAAUR
|
|
||||||
tBptb29uIDxtb29uLnN0cm9uZ3N3YW4ub3JnPokAlQMFEEL2KI/1rAp5YTo7YQEB
|
|
||||||
vX4EAKtr0e6WMDIRlpE4VhhdQ7AgBgGyhgfqAdD9KDx8o4fG4nkmh7H1bG/PLJA1
|
|
||||||
f+UfDGnOyIwPOrILNyNnwAbDHXjJaNylahM7poOP7i0VlbhZPLAC0cSQi02/Zrac
|
|
||||||
t5bED5tHSrNSjcA/CjuxRuu9lmR6s57IQnQnwt9I4LTM+CFP
|
|
||||||
=oaBj
|
|
||||||
-----END PGP PUBLIC KEY BLOCK-----
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
Type Bits/KeyID Date User ID
|
|
||||||
pub 1024/79949ADD 2005/08/07 sun <sun.strongswan.org>
|
|
||||||
|
|
||||||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
||||||
Version: 2.6.3i
|
|
||||||
|
|
||||||
mQCNA0L2Km8AAAEEANRAVMn8HBxfYaGhLqtQ3IZJArn9wpcQ+7sH/F9PaXIjzHRQ
|
|
||||||
rfFkfmxxp9lVjCk0LM/BnnlnUmyz6F8K7V0Gi40Am4+ln1zHvZZIQJYGrDhDnjb7
|
|
||||||
I5TVeD4Ib5bQ1CoUbIhv2LocCeR6OjefQgGmerC5RQ3d5ci7uB0pVpd5lJrdAAUR
|
|
||||||
tBhzdW4gPHN1bi5zdHJvbmdzd2FuLm9yZz6JAJUDBRBC9ipvHSlWl3mUmt0BAUZR
|
|
||||||
A/43nuZbxADMSviu54Mj8pvQbYeGLQVabiWT6h7L0ZPX4MWpFH3dTixBfRrZRSsj
|
|
||||||
0AgiMMuZAMebfOe+Xf9uDQv7p1yumEiNg43tg85zyawkARWNTZZ04woxtvAqNwXn
|
|
||||||
lQotGz7YA6JMxry9RQo5yI4Y4dPnVZ/o8eDpP0+I88cOhQ==
|
|
||||||
=lLvB
|
|
||||||
-----END PGP PUBLIC KEY BLOCK-----
|
|
||||||
@@ -1,19 +0,0 @@
|
|||||||
Type Bits/KeyID Date User ID
|
|
||||||
sec 1024/613A3B61 2005/08/07 moon <moon.strongswan.org>
|
|
||||||
|
|
||||||
-----BEGIN PGP SECRET KEY BLOCK-----
|
|
||||||
Version: 2.6.3i
|
|
||||||
|
|
||||||
lQHYA0L2KI8AAAEEAM5GYrwuf1M9Cv7+Yfr6i5+17zMVGIyj/D4+msK43iUbEH61
|
|
||||||
+bhRKcrF+9NKvM+ujjZoUbfGjUipsBbTlPTaY7muZ9KaVy2OBHm73x13eiemkPS9
|
|
||||||
RFWesrL9L39aBO5K47ti0PwRP8QIPMaNWMs2z7yoZLE/flVNQfWsCnlhOjthAAUR
|
|
||||||
AAP9Fj7OaaCfTL3Met8yuS8ZGMDL/fq+4f2bM+OdPSgD4N1Fiye0B1QMCVGWI1Xd
|
|
||||||
JXS0+9QI0A3iD12YAnYwsP50KmsLHA69AqchN7BuimoMfHDXqpTSRW57E9MCEzQ9
|
|
||||||
FFN8mVPRiDxAUro8qCjdHmk1vmtdt/PXn1BuXHE36SzZmmMCANBA4WHaO6MJshM6
|
|
||||||
7StRicSCxoMn/lPcj6rfJS4EaS+a0MwECxKQ3HKTpP3/+7kaWfLI/D65Xmi3cVK3
|
|
||||||
0CPwUK8CAP2RYWoBZPSA8dBGFYwR7W6bdNYhdmGmsVCaM7v4sVr0FwHwMERadByN
|
|
||||||
8v0n5As3ZbrCURRp68wuE+JjfOM5mO8CAM3ZK7AVlBOqkoI3X3Ji3yviLlsr2ET7
|
|
||||||
QrVKFQBq7eUhwYFo6mVemEqQb61tGirq+qL4Wfk/7+FffZPsUyLX1amfjLQabW9v
|
|
||||||
biA8bW9vbi5zdHJvbmdzd2FuLm9yZz4=
|
|
||||||
=YFQm
|
|
||||||
-----END PGP SECRET KEY BLOCK-----
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
# /etc/ipsec.secrets - strongSwan IPsec secrets file
|
|
||||||
|
|
||||||
: RSA moonKey.asc
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
|
||||||
|
|
||||||
charon {
|
|
||||||
load = openssl pem pkcs1 pgp random nonce stroke kernel-netlink socket-default updown
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -1,24 +0,0 @@
|
|||||||
# /etc/ipsec.conf - strongSwan IPsec configuration file
|
|
||||||
|
|
||||||
config setup
|
|
||||||
|
|
||||||
conn %default
|
|
||||||
ikelifetime=60m
|
|
||||||
keylife=20m
|
|
||||||
rekeymargin=3m
|
|
||||||
keyingtries=1
|
|
||||||
keyexchange=ikev2
|
|
||||||
ike=aes128-sha256-modp3072!
|
|
||||||
esp=aes128gcm16!
|
|
||||||
mobike=no
|
|
||||||
|
|
||||||
conn net-net
|
|
||||||
left=PH_IP_SUN
|
|
||||||
leftsubnet=10.2.0.0/16
|
|
||||||
leftcert=sunCert.asc
|
|
||||||
leftfirewall=yes
|
|
||||||
right=PH_IP_MOON
|
|
||||||
rightsubnet=10.1.0.0/16
|
|
||||||
rightcert=moonCert.asc
|
|
||||||
rightid=@#71270432cd763a18020ac988c0e75aed
|
|
||||||
auto=add
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
Type Bits/KeyID Date User ID
|
|
||||||
pub 1024/613A3B61 2005/08/07 moon <moon.strongswan.org>
|
|
||||||
|
|
||||||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
||||||
Version: 2.6.3i
|
|
||||||
|
|
||||||
mQCNA0L2KI8AAAEEAM5GYrwuf1M9Cv7+Yfr6i5+17zMVGIyj/D4+msK43iUbEH61
|
|
||||||
+bhRKcrF+9NKvM+ujjZoUbfGjUipsBbTlPTaY7muZ9KaVy2OBHm73x13eiemkPS9
|
|
||||||
RFWesrL9L39aBO5K47ti0PwRP8QIPMaNWMs2z7yoZLE/flVNQfWsCnlhOjthAAUR
|
|
||||||
tBptb29uIDxtb29uLnN0cm9uZ3N3YW4ub3JnPokAlQMFEEL2KI/1rAp5YTo7YQEB
|
|
||||||
vX4EAKtr0e6WMDIRlpE4VhhdQ7AgBgGyhgfqAdD9KDx8o4fG4nkmh7H1bG/PLJA1
|
|
||||||
f+UfDGnOyIwPOrILNyNnwAbDHXjJaNylahM7poOP7i0VlbhZPLAC0cSQi02/Zrac
|
|
||||||
t5bED5tHSrNSjcA/CjuxRuu9lmR6s57IQnQnwt9I4LTM+CFP
|
|
||||||
=oaBj
|
|
||||||
-----END PGP PUBLIC KEY BLOCK-----
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
Type Bits/KeyID Date User ID
|
|
||||||
pub 1024/79949ADD 2005/08/07 sun <sun.strongswan.org>
|
|
||||||
|
|
||||||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
||||||
Version: 2.6.3i
|
|
||||||
|
|
||||||
mQCNA0L2Km8AAAEEANRAVMn8HBxfYaGhLqtQ3IZJArn9wpcQ+7sH/F9PaXIjzHRQ
|
|
||||||
rfFkfmxxp9lVjCk0LM/BnnlnUmyz6F8K7V0Gi40Am4+ln1zHvZZIQJYGrDhDnjb7
|
|
||||||
I5TVeD4Ib5bQ1CoUbIhv2LocCeR6OjefQgGmerC5RQ3d5ci7uB0pVpd5lJrdAAUR
|
|
||||||
tBhzdW4gPHN1bi5zdHJvbmdzd2FuLm9yZz6JAJUDBRBC9ipvHSlWl3mUmt0BAUZR
|
|
||||||
A/43nuZbxADMSviu54Mj8pvQbYeGLQVabiWT6h7L0ZPX4MWpFH3dTixBfRrZRSsj
|
|
||||||
0AgiMMuZAMebfOe+Xf9uDQv7p1yumEiNg43tg85zyawkARWNTZZ04woxtvAqNwXn
|
|
||||||
lQotGz7YA6JMxry9RQo5yI4Y4dPnVZ/o8eDpP0+I88cOhQ==
|
|
||||||
=lLvB
|
|
||||||
-----END PGP PUBLIC KEY BLOCK-----
|
|
||||||
@@ -1,19 +0,0 @@
|
|||||||
Type Bits/KeyID Date User ID
|
|
||||||
sec 1024/79949ADD 2005/08/07 sun <sun.strongswan.org>
|
|
||||||
|
|
||||||
-----BEGIN PGP SECRET KEY BLOCK-----
|
|
||||||
Version: 2.6.3i
|
|
||||||
|
|
||||||
lQHYA0L2Km8AAAEEANRAVMn8HBxfYaGhLqtQ3IZJArn9wpcQ+7sH/F9PaXIjzHRQ
|
|
||||||
rfFkfmxxp9lVjCk0LM/BnnlnUmyz6F8K7V0Gi40Am4+ln1zHvZZIQJYGrDhDnjb7
|
|
||||||
I5TVeD4Ib5bQ1CoUbIhv2LocCeR6OjefQgGmerC5RQ3d5ci7uB0pVpd5lJrdAAUR
|
|
||||||
AAP8DHxBOQ7UeiO6cutdGSLfy6nxGf/eRR8d3dNLFKpRfy9IQxPN/yQHb8pzSQUI
|
|
||||||
Pqi3V4PcJUJQJIMNqzzgyTyey/OdTc+IFngywRGKQowyD7vY+urVbcEDHe+sRTL1
|
|
||||||
GvrsQGMZoXNDimABHn5NbT6Pc06xQ9rNvpCSyHMyzcylpk0CANqf96aEaryGJozg
|
|
||||||
vSN5GlS77rPJ9Y9mU2EJs1+0BlMcb7Sy4HN2RRc/V56ZmlW2m3UbGwPqG8R9XQQ2
|
|
||||||
LO03bTcCAPiJbTcRdA/YnZExbZPgEnV5nq8tVXTc7bz1Sw7ZWRef0iZyIQEXbwLn
|
|
||||||
2Z2EJik9bQpkcVJSBV17cH7Av/VdIosCAKJPVoBETiVzWejIpGHHqbnmZC8P9rUs
|
|
||||||
xAXZbNukbL3YElLeopNMyddTi6kf45/m0sb7fr7rzW/OJ7WP8mDrGPec4rQYc3Vu
|
|
||||||
IDxzdW4uc3Ryb25nc3dhbi5vcmc+
|
|
||||||
=DwEu
|
|
||||||
-----END PGP SECRET KEY BLOCK-----
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
# /etc/ipsec.secrets - strongSwan IPsec secrets file
|
|
||||||
|
|
||||||
: RSA sunKey.asc
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
|
||||||
|
|
||||||
charon {
|
|
||||||
load = openssl pem pkcs1 pgp random nonce stroke kernel-netlink socket-default updown
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
moon::ipsec stop
|
|
||||||
sun::ipsec stop
|
|
||||||
moon::iptables-restore < /etc/iptables.flush
|
|
||||||
sun::iptables-restore < /etc/iptables.flush
|
|
||||||
moon::rm /etc/ipsec.d/certs/*
|
|
||||||
moon::rm /etc/ipsec.d/private/*
|
|
||||||
sun::rm /etc/ipsec.d/certs/*
|
|
||||||
sun::rm /etc/ipsec.d/private/*
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
moon::iptables-restore < /etc/iptables.rules
|
|
||||||
sun::iptables-restore < /etc/iptables.rules
|
|
||||||
moon::rm /etc/ipsec.d/cacerts/*
|
|
||||||
sun::rm /etc/ipsec.d/cacerts/*
|
|
||||||
moon::ipsec start
|
|
||||||
sun::ipsec start
|
|
||||||
moon::expect-connection net-net
|
|
||||||
sun::expect-connection net-net
|
|
||||||
moon::ipsec up net-net
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
#
|
|
||||||
# This configuration file provides information on the
|
|
||||||
# guest instances used for this test
|
|
||||||
|
|
||||||
# All guest instances that are required for this test
|
|
||||||
#
|
|
||||||
VIRTHOSTS="alice moon winnetou sun bob"
|
|
||||||
|
|
||||||
# Corresponding block diagram
|
|
||||||
#
|
|
||||||
DIAGRAM="a-m-w-s-b.png"
|
|
||||||
|
|
||||||
# Guest instances on which tcpdump is to be started
|
|
||||||
#
|
|
||||||
TCPDUMPHOSTS="sun"
|
|
||||||
|
|
||||||
# Guest instances on which IPsec is started
|
|
||||||
# Used for IPsec logging purposes
|
|
||||||
#
|
|
||||||
IPSECHOSTS="moon sun"
|
|
||||||
Reference in New Issue
Block a user