testing: Add libipsec scenarios that exchange raw ESP packets

2023-05-23 13:19:47 +02:00
parent e306fa5f73
commit 5db9b26e32
44 changed files with 825 additions and 2 deletions
@@ -0,0 +1,24 @@
+# /etc/strongswan.conf - strongSwan configuration file
+
+swanctl {
+  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+}
+
+charon-systemd {
+  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown
+
+  multiple_authentication = no
+
+  plugins {
+    kernel-netlink {
+      fwmark = !0x42
+    }
+    socket-default {
+      fwmark = 0x42
+    }
+    kernel-libipsec {
+      allow_peer_ts = yes
+      raw_esp = yes
+    }
+  }
+}