testing: Add tkm/xfrmproxy-rekey scenario

Similar to the xfrmproxy-expire scenario but here the TKM host is the
responder to a rekeying.
This commit is contained in:
Tobias Brunner
2017-08-07 10:44:05 +02:00
parent a721b9c53d
commit 5163bd4b86
11 changed files with 119 additions and 0 deletions
@@ -0,0 +1,6 @@
A transport connection between the hosts <b>moon</b> and <b>sun</b> is set up.
The host <b>moon</b> starts the Trusted Key Manager (TKM) and the Ada XFRM
proxy, which relays XFRM kernel messages to charon. The authentication is based
on X.509 certificates. The connection is initiated by a ping from <b>moon</b>
to <b>sun</b>. The test asserts that a rekeying initiated by <b>sun</b> works
as expected.