denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add scenarios that use a CA with two intermediate CA certificates

Browse Source 
Mainly to test TKM's ability for handling multiple CAs and that the
received intermediate CA certificates are passed in the right order.
But also added a regular scenario where two intermediate CA certificates
are sent by one of the clients.
This commit is contained in:
Tobias Brunner
2021-01-11 15:28:10 +01:00
parent 16fcdb460a
commit 5ef10ec326
23 changed files with 489 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/swanctl/multi-level-ca-l3/description.txt
+9
View File
@@ -0,0 +1,9 @@
The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
<b>venus</b> by means of two different PKIs. Access to <b>alice</b> is granted
to users presenting a certificate issued by the Levels Root CA (or any of its
intermediate CAs) whereas <b>venus</b> can only be reached with a certificate
issued by the regular strongSwan Root CA.
The roadwarriors <b>carol</b> and <b>dave</b> have certificates from the
Levels CA (actually from an second level intermediate CA) and strongSwan CA,
respectively. Therefore <b>carol</b> can access <b>alice</b> and <b>dave</b>
can reach <b>venus</b>.