testing: Converted sql to systemd

This commit is contained in:
Andreas Steffen
2017-11-11 16:41:15 +01:00
parent 70dc5bb8ad
commit 323f0b05d7
85 changed files with 542 additions and 101 deletions
@@ -1,6 +1,14 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
syslog {
daemon {
default = 1
}
auth {
default = 0
}
}
plugins {
sql {
database = sqlite:///etc/db.d/ipsec.db
@@ -1,6 +1,14 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
syslog {
daemon {
default = 1
}
auth {
default = 0
}
}
plugins {
sql {
database = sqlite:///etc/db.d/ipsec.db
@@ -1,6 +1,14 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
syslog {
daemon {
default = 1
}
auth {
default = 0
}
}
plugins {
sql {
database = sqlite:///etc/db.d/ipsec.db
@@ -1,5 +1,5 @@
alice::service charon stop 2> /dev/null
venus::service charon stop 2> /dev/null
sun::service charon stop 2> /dev/null
alice::systemctl stop strongswan-swanctl
venus::systemctl stop strongswan-swanctl
sun::systemctl stop strongswan-swanctl
sun::iptables-restore < /etc/iptables.flush
moon::iptables -t nat -F
@@ -4,12 +4,15 @@ sun::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipse
alice::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
venus::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
sun::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
alice::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
venus::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
sun::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
sun::iptables-restore < /etc/iptables.rules
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p udp -j SNAT --to-source PH_IP_MOON:1024-1100
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p tcp -j SNAT --to-source PH_IP_MOON:2000-2100
sun::service charon start 2> /dev/null
alice::service charon start 2> /dev/null
venus::service charon start 2> /dev/null
sun::systemctl start strongswan-swanctl
alice::systemctl start strongswan-swanctl
venus::systemctl start strongswan-swanctl
sun::expect-connection nat-t
alice::expect-connection nat-t
alice::swanctl --initiate --child nat-t 2> /dev/null