denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Added swanctl/rw-ed25519-certpol scenario

Browse Source
This commit is contained in:
Andreas Steffen
2018-06-22 10:39:40 +02:00
parent 3a05566d0e
commit 424de401b4
22 changed files with 288 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/swanctl/rw-ed25519-certpol/description.txt
Executable
+6
View File
@@ -0,0 +1,6 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each
to gateway <b>moon</b>. The authentication is based on <b>X.509 certificates</b>
containing <b>Ed25519</b> keys. The CA defines two certificate policies
<b>1.3.6.1.4.1.36906.1.1.1</b> and <b>1.3.6.1.4.1.36906.1.1.2</b>, the former one
contained in <b>carol</b>'s certificate. Since gateway <b>moon</b> enforces this
certificate policy, <b>carol</b> is accepted whereas <b>dave</b> is rejected.