From 8db01c6a3f28d4eb56da83652727fd0423fada30 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Mon, 1 Apr 2019 16:21:10 +0200 Subject: [PATCH 01/20] testing: Script building fresh certificates --- .../apache2/sites-enabled/001-ocsp_vhost.conf | 12 +- testing/hosts/winnetou/etc/ca/generate-crl | 133 ++ testing/hosts/winnetou/etc/ca/index.html | 58 + .../hosts/winnetou/etc/ca/index.txt.template | 22 + testing/hosts/winnetou/etc/ca/ocsp/ocsp.cgi | 11 + .../etc/ca/research/index.txt.template | 4 + .../winnetou/etc/ca/research/ocsp/ocsp.cgi | 11 + .../winnetou/etc/ca/sales/index.txt.template | 3 + .../hosts/winnetou/etc/ca/sales/ocsp/ocsp.cgi | 11 + testing/hosts/winnetou/etc/ldap/ldif.txt | 34 +- testing/hosts/winnetou/etc/ldap/slapd.conf | 4 +- testing/hosts/winnetou/etc/openssl/index.html | 36 - testing/hosts/winnetou/etc/strongswan.conf | 2 +- testing/scripts/build-certs | 1585 +++++++++++++++++ testing/scripts/build-guestimages | 5 +- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/dave/etc/ipsec.conf | 2 +- .../hosts/moon/etc/ipsec.conf | 6 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/dave/etc/ipsec.conf | 2 +- .../hosts/moon/etc/ipsec.conf | 6 +- .../multi-level-ca/hosts/carol/etc/ipsec.conf | 4 +- .../multi-level-ca/hosts/dave/etc/ipsec.conf | 4 +- .../multi-level-ca/hosts/moon/etc/ipsec.conf | 6 +- .../ipsec.d/aacerts/{aa.pem => aaCert.pem} | 0 .../etc/ipsec.d/private/{aa.pem => aaKey.pem} | 0 testing/tests/ikev2/acert-cached/posttest.dat | 4 +- testing/tests/ikev2/acert-cached/reissue.txt | 23 - .../ipsec.d/aacerts/{aa.pem => aaCert.pem} | 0 .../etc/ipsec.d/private/{aa.pem => aaKey.pem} | 0 .../tests/ikev2/acert-fallback/posttest.dat | 4 +- .../tests/ikev2/acert-fallback/reissue.txt | 15 - testing/tests/ikev2/acert-inline/evaltest.dat | 6 +- .../{aa-expired.pem => aaCert-expired.pem} | 0 .../ipsec.d/aacerts/{aa.pem => aaCert.pem} | 0 .../{aa-expired.pem => aaKey-expired.pem} | 0 .../etc/ipsec.d/private/{aa.pem => aaKey.pem} | 0 testing/tests/ikev2/acert-inline/posttest.dat | 8 +- testing/tests/ikev2/acert-inline/reissue.txt | 23 - .../any-interface/hosts/bob/etc/ipsec.conf | 4 +- .../any-interface/hosts/moon/etc/ipsec.conf | 6 +- .../ikev2/crl-ldap/hosts/carol/etc/ipsec.conf | 2 +- ...e7b66db3b5e5e060ea2e4def.crl => stale.crl} | Bin .../ikev2/crl-ldap/hosts/moon/etc/ipsec.conf | 2 +- ...e7b66db3b5e5e060ea2e4def.crl => stale.crl} | Bin .../crl-revoked/hosts/carol/etc/ipsec.conf | 2 +- .../{carolRevokedCert.pem => carolCert.pem} | 0 .../{carolRevokedKey.pem => carolKey.pem} | 0 .../crl-revoked/hosts/carol/etc/ipsec.secrets | 2 +- testing/tests/ikev2/crl-revoked/posttest.dat | 2 - testing/tests/ikev2/crl-to-cache/evaltest.dat | 4 +- .../hosts/carol/etc/ipsec.conf | 6 +- .../hosts/dave/etc/ipsec.conf | 6 +- .../hosts/moon/etc/ipsec.conf | 20 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/moon/etc/ipsec.conf | 7 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/moon/etc/ipsec.conf | 7 +- .../hosts/carol/etc/ipsec.conf | 4 +- .../hosts/dave/etc/ipsec.conf | 4 +- .../hosts/moon/etc/ipsec.conf | 6 +- .../multi-level-ca/hosts/moon/etc/ipsec.conf | 11 +- .../hosts/moon/etc/strongswan.conf | 2 +- .../hosts/sun/etc/strongswan.conf | 2 +- .../net2net-pubkey/hosts/moon/etc/ipsec.conf | 4 +- .../certs/{moonPub.der => moonPub.pem} | Bin .../ipsec.d/certs/{sunPub.der => sunPub.pem} | Bin .../moon/etc/ipsec.d/private/moonKey.der | Bin 1187 -> 0 bytes .../hosts/moon/etc/ipsec.secrets | 3 - .../net2net-pubkey/hosts/sun/etc/ipsec.conf | 4 +- .../certs/{moonPub.der => moonPub.pem} | Bin .../ipsec.d/certs/{sunPub.der => sunPub.pem} | Bin .../hosts/sun/etc/ipsec.d/private/sunKey.der | Bin 1189 -> 0 bytes .../hosts/sun/etc/ipsec.secrets | 3 - .../etc/{openssl => ca}/ocsp/ocsp.cgi | 2 +- .../hosts/moon/etc/ipsec.conf | 6 +- .../tests/ikev2/ocsp-multi-level/pretest.dat | 2 + .../etc/{openssl => ca}/ocsp/ocsp.cgi | 2 +- .../ocsp-revoked/hosts/carol/etc/ipsec.conf | 2 +- .../{carolRevokedCert.pem => carolCert.pem} | 0 .../{carolRevokedKey.pem => carolKey.pem} | 0 .../hosts/carol/etc/ipsec.secrets | 2 +- testing/tests/ikev2/ocsp-revoked/posttest.dat | 2 - .../hosts/carol/etc/ipsec.conf | 2 +- .../{carolCert-ocsp.pem => carolCert.pem} | 0 .../{carolKey-ocsp.pem => carolKey.pem} | 0 .../hosts/carol/etc/ipsec.secrets | 2 +- .../tests/ikev2/ocsp-signer-cert/posttest.dat | 2 - .../hosts/carol/etc/ipsec.conf | 4 +- .../{carolCert-ifuri.pem => carolCert.pem} | 0 .../hosts/dave/etc/ipsec.conf | 6 +- .../{daveCert-ifuri.pem => daveCert.pem} | 0 .../hosts/moon/etc/ipsec.conf | 6 +- .../hosts/carol/etc/ipsec.conf | 4 +- .../{carolCert-ocsp.pem => carolCert.pem} | 0 .../{carolKey-ocsp.pem => carolKey.pem} | 0 .../hosts/carol/etc/ipsec.secrets | 2 +- .../ikev2/ocsp-timeouts-good/posttest.dat | 2 - .../etc/{openssl => ca}/ocsp/ocsp.cgi | 2 +- .../tests/ikev2/rw-eap-peap-md5/evaltest.dat | 4 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../rw-eap-peap-md5/hosts/dave/etc/ipsec.conf | 2 +- .../ikev2/rw-eap-peap-mschapv2/evaltest.dat | 2 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/dave/etc/ipsec.conf | 2 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/dave/etc/ipsec.conf | 2 +- .../tests/ikev2/rw-eap-tls-only/evaltest.dat | 4 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../ikev2/rw-eap-tls-radius/evaltest.dat | 6 +- .../hosts/carol/etc/ipsec.conf | 4 +- .../hosts/moon/etc/ipsec.conf | 2 +- .../tests/ikev2/rw-eap-ttls-only/evaltest.dat | 2 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/dave/etc/ipsec.conf | 2 +- .../hosts/carol/etc/ipsec.conf | 2 +- .../hosts/dave/etc/ipsec.conf | 2 +- testing/tests/ikev2/rw-pkcs8/description.txt | 4 +- .../ikev2/strong-keys-certs/description.txt | 4 +- .../ikev2/wildcards/hosts/moon/etc/ipsec.conf | 8 +- .../etc/swanctl/{ecdsa => pkcs8}/moonKey.pem | 0 .../tests/swanctl/crl-to-cache/evaltest.dat | 8 +- .../carol/etc/swanctl/x509ca/researchCert.pem | 23 - .../dave/etc/swanctl/x509ca/salesCert.pem | 22 - .../multi-level-ca/hosts/moon/etc/ipsec.conf | 31 - .../hosts/moon/etc/swanctl/swanctl.conf | 14 +- .../hosts/moon/etc/strongswan.conf | 2 +- .../hosts/sun/etc/strongswan.conf | 2 +- .../hosts/moon/etc/ipsec.conf | 31 - .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../swanctl/rw-eap-peap-md5/evaltest.dat | 6 +- .../hosts/carol/etc/swanctl/swanctl.conf | 2 +- .../hosts/dave/etc/swanctl/swanctl.conf | 2 +- .../swanctl/rw-eap-peap-mschapv2/evaltest.dat | 6 +- .../hosts/carol/etc/swanctl/swanctl.conf | 2 +- .../hosts/dave/etc/swanctl/swanctl.conf | 2 +- .../hosts/carol/etc/swanctl/swanctl.conf | 2 +- .../hosts/dave/etc/swanctl/swanctl.conf | 2 +- .../swanctl/rw-eap-tls-only/evaltest.dat | 8 +- .../hosts/carol/etc/swanctl/swanctl.conf | 2 +- .../swanctl/rw-eap-tls-radius/evaltest.dat | 10 +- .../hosts/carol/etc/swanctl/swanctl.conf | 4 +- .../hosts/moon/etc/swanctl/swanctl.conf | 2 +- .../hosts/carol/etc/strongswan.conf | 2 +- .../hosts/dave/etc/strongswan.conf | 2 +- .../hosts/moon/etc/strongswan.conf | 2 +- .../swanctl/rw-eap-ttls-only/evaltest.dat | 6 +- .../hosts/carol/etc/swanctl/swanctl.conf | 2 +- .../hosts/dave/etc/swanctl/swanctl.conf | 2 +- .../hosts/carol/etc/swanctl/swanctl.conf | 2 +- .../hosts/dave/etc/swanctl/swanctl.conf | 2 +- .../tests/swanctl/rw-pubkey-anon/evaltest.dat | 8 +- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../hosts/carol/etc/swanctl/swanctl.conf | 14 +- .../swanctl/rw-pubkey-keyid/evaltest.dat | 8 +- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 - .../hosts/carol/etc/swanctl/swanctl.conf | 14 +- .../tests/tnc/tnccs-20-ev-pt-tls/evaltest.dat | 4 +- .../tnc/tnccs-20-pdp-pt-tls/evaltest.dat | 4 +- testing/tests/tnc/tnccs-20-tls/evaltest.dat | 12 +- 164 files changed, 2064 insertions(+), 690 deletions(-) create mode 100755 testing/hosts/winnetou/etc/ca/generate-crl create mode 100644 testing/hosts/winnetou/etc/ca/index.html create mode 100644 testing/hosts/winnetou/etc/ca/index.txt.template create mode 100755 testing/hosts/winnetou/etc/ca/ocsp/ocsp.cgi create mode 100644 testing/hosts/winnetou/etc/ca/research/index.txt.template create mode 100755 testing/hosts/winnetou/etc/ca/research/ocsp/ocsp.cgi create mode 100644 testing/hosts/winnetou/etc/ca/sales/index.txt.template create mode 100755 testing/hosts/winnetou/etc/ca/sales/ocsp/ocsp.cgi delete mode 100644 testing/hosts/winnetou/etc/openssl/index.html create mode 100755 testing/scripts/build-certs delete mode 100644 testing/tests/botan/rw-cert/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/botan/rw-ecp256/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/botan/rw-modp3072/hosts/carol/etc/swanctl/rsa/carolKey.pem rename testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/aacerts/{aa.pem => aaCert.pem} (100%) rename testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/private/{aa.pem => aaKey.pem} (100%) delete mode 100644 testing/tests/ikev2/acert-cached/reissue.txt rename testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/aacerts/{aa.pem => aaCert.pem} (100%) rename testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/private/{aa.pem => aaKey.pem} (100%) delete mode 100644 testing/tests/ikev2/acert-fallback/reissue.txt rename testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/{aa-expired.pem => aaCert-expired.pem} (100%) rename testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/{aa.pem => aaCert.pem} (100%) rename testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/{aa-expired.pem => aaKey-expired.pem} (100%) rename testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/{aa.pem => aaKey.pem} (100%) delete mode 100644 testing/tests/ikev2/acert-inline/reissue.txt rename testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/{5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl => stale.crl} (100%) rename testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.d/crls/{5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl => stale.crl} (100%) rename testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/certs/{carolRevokedCert.pem => carolCert.pem} (100%) rename testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/private/{carolRevokedKey.pem => carolKey.pem} (100%) rename testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/{moonPub.der => moonPub.pem} (100%) rename testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/{sunPub.der => sunPub.pem} (100%) delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/private/moonKey.der delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.secrets rename testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/{moonPub.der => moonPub.pem} (100%) rename testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/{sunPub.der => sunPub.pem} (100%) delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/private/sunKey.der delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.secrets rename testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/{openssl => ca}/ocsp/ocsp.cgi (94%) rename testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/{openssl => ca}/ocsp/ocsp.cgi (93%) rename testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/{carolRevokedCert.pem => carolCert.pem} (100%) rename testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/{carolRevokedKey.pem => carolKey.pem} (100%) rename testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/{carolCert-ocsp.pem => carolCert.pem} (100%) rename testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/{carolKey-ocsp.pem => carolKey.pem} (100%) rename testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/{carolCert-ifuri.pem => carolCert.pem} (100%) rename testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/{daveCert-ifuri.pem => daveCert.pem} (100%) rename testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/{carolCert-ocsp.pem => carolCert.pem} (100%) rename testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/{carolKey-ocsp.pem => carolKey.pem} (100%) rename testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/{openssl => ca}/ocsp/ocsp.cgi (93%) rename testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/{ecdsa => pkcs8}/moonKey.pem (100%) delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/carol/etc/swanctl/x509ca/researchCert.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/dave/etc/swanctl/x509ca/salesCert.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/moon/etc/ipsec.conf delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/moon/etc/ipsec.conf delete mode 100644 testing/tests/swanctl/rw-cert-ppk/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/rw-cert-pss/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/rsa/carolKey.pem diff --git a/testing/hosts/winnetou/etc/apache2/sites-enabled/001-ocsp_vhost.conf b/testing/hosts/winnetou/etc/apache2/sites-enabled/001-ocsp_vhost.conf index fb9e98424..d160c3eb8 100644 --- a/testing/hosts/winnetou/etc/apache2/sites-enabled/001-ocsp_vhost.conf +++ b/testing/hosts/winnetou/etc/apache2/sites-enabled/001-ocsp_vhost.conf @@ -6,11 +6,11 @@ AddHandler cgi-script .cgi ServerAdmin root@strongswan.org - DocumentRoot /etc/openssl/ocsp + DocumentRoot /etc/ca/ocsp ServerName ocsp.strongswan.org ServerAlias 192.168.0.150 DirectoryIndex ocsp.cgi - + Options +ExecCGI Require all granted @@ -22,11 +22,11 @@ Listen 8881 ServerAdmin root@research.strongswan.org - DocumentRoot /etc/openssl/research/ocsp + DocumentRoot /etc/ca/research/ocsp ServerName ocsp.research.strongswan.org ServerAlias ocsp.strongswan.org 192.168.0.150 DirectoryIndex ocsp.cgi - + Options +ExecCGI Require all granted @@ -38,11 +38,11 @@ Listen 8882 ServerAdmin root@sales.strongswan.org - DocumentRoot /etc/openssl/sales/ocsp + DocumentRoot /etc/ca/sales/ocsp ServerName ocsp.sales.strongswan.org ServerAlias ocsp.strongswan.org 192.168.0.150 DirectoryIndex ocsp.cgi - + Options +ExecCGI Require all granted diff --git a/testing/hosts/winnetou/etc/ca/generate-crl b/testing/hosts/winnetou/etc/ca/generate-crl new file mode 100755 index 000000000..39db1af63 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/generate-crl @@ -0,0 +1,133 @@ +#!/bin/bash + +export LEAK_DETECTIVE_DISABLE=1 + +ROOT="/var/www" + +## +# strongSwan Root CA +cd /etc/ca + +# copy strongsSwan CA certificate +cp strongswanCert.pem ${ROOT} +cp strongswanCert.der ${ROOT} + +# generate CRL for strongSwan Root CA +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + --lastcrl strongswan.crl > ${ROOT}/strongswan.crl + +# revoke moon's current certificate +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + --reason key-compromise --serial 03 \ + --lastcrl ${ROOT}/strongswan.crl > ${ROOT}/strongswan_moon_revoked.crl + +# generate a base CRL +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + --crluri http://crl.strongswan.org/strongswan_delta.crl \ + --lastcrl strongswan.crl --lifetime 30 > ${ROOT}/strongswan_base.crl + +# generate a delta CRL revoking moon's current cert +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + --basecrl ${ROOT}/strongswan_base.crl --reason key-compromise \ + --serial 03 --lifetime 15 > ${ROOT}/strongswan_delta.crl + +# generate Hash-and-URL certificates +CERTS_DIR="${ROOT}/certs" +for cert in `ls certs` +do + openssl x509 -in certs/${cert} -outform der -out ${CERTS_DIR}/cert.der + mv ${CERTS_DIR}/cert.der ${CERTS_DIR}/`sha1sum ${CERTS_DIR}/cert.der | head -c 40` +done + +## +# Research CA +cd /etc/ca/research + +# copy Research CA certificate +cp researchCert.pem ${ROOT} +cp researchCert.der ${ROOT} + +# generate CRL for Research CA +pki --signcrl --cakey researchKey.pem --cacert researchCert.pem \ + > ${ROOT}/research.crl + +# generate Hash-and-URL certificates +CERTS_DIR="${ROOT}/certs/research" +for cert in `ls certs` +do + openssl x509 -in certs/${cert} -outform der -out ${CERTS_DIR}/cert.der + mv ${CERTS_DIR}/cert.der ${CERTS_DIR}/`sha1sum ${CERTS_DIR}/cert.der | head -c 40` +done + +## +# Sales CA +cd /etc/ca/sales + +# copy Sales CA certificate +cp salesCert.pem ${ROOT} +cp salesCert.der ${ROOT} + +# generate CRL for Sales CA +pki --signcrl --cakey salesKey.pem --cacert salesCert.pem \ + > ${ROOT}/sales.crl + +# generate Hash-and-URL certificates +CERTS_DIR="${ROOT}/certs/sales" +for cert in `ls certs` +do + openssl x509 -in certs/${cert} -outform der -out ${CERTS_DIR}/cert.der + mv ${CERTS_DIR}/cert.der ${CERTS_DIR}/`sha1sum ${CERTS_DIR}/cert.der | head -c 40` +done + +## +# strongSwan EC Root CA +cd /etc/ca/ecdsa + +# copy ECDSA CA certificate +cp strongswanCert.pem ${ROOT}/strongswan_ecdsaCert.pem +openssl ec -in strongswanKey.pem -outform der -out ${ROOT}/strongswan_ecdsaCert.der +chmod a+r ${ROOT}/strongswan_ecdsaCert.der + +# generate CRL for strongSwan EC Root CA +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + > ${ROOT}/strongswan_ecdsa.crl + +## +# strongSwan RFC3779 Root CA +cd /etc/ca/rfc3779 + +# generate CRL for strongSwan RFC3779 Root CA +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + > ${ROOT}/strongswan_rfc3779.crl + +## +# strongSwan SHA3-RSA Root CA +cd /etc/ca/sha3-rsa + +# generate CRL for strongSwan SHA3-RSA Root CA +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + --digest sha3_256 > ${ROOT}/strongswan_sha3_rsa.crl + +## +# strongSwan Ed25519 Root CA +cd /etc/ca/ed25519 + +# generate CRL for strongSwan Ed25519 Root CA +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + > ${ROOT}/strongswan_ed25519.crl + +## +# strongSwan Monster Root CA +cd /etc/ca/monster + +# generate CRL for strongSwan Monster Root CA +pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \ + > ${ROOT}/strongswan_monster.crl + +## +# strongSwan BlISS Root CA +cd /etc/ca/bliss + +# generate CRL for strongSwan BLISS Root CA +pki --signcrl --cakey strongswan_blissKey.der --cacert strongswan_blissCert.der \ + --lifetime 30 --digest sha3_512 > ${ROOT}/strongswan_bliss.crl diff --git a/testing/hosts/winnetou/etc/ca/index.html b/testing/hosts/winnetou/etc/ca/index.html new file mode 100644 index 000000000..9de059019 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/index.html @@ -0,0 +1,58 @@ + + + strongSwan Web Services + + + + + + + +
+

strongSwan Testing Environment

+ + + + + +

strongSwan Certification Authorities

+ + + + +
+
The strongSwan Project (www.strongswan.org)
+
+ diff --git a/testing/hosts/winnetou/etc/ca/index.txt.template b/testing/hosts/winnetou/etc/ca/index.txt.template new file mode 100644 index 000000000..8feccc851 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/index.txt.template @@ -0,0 +1,22 @@ +V EE_EXPIRATION 01 unknown /C=CH/O=strongSwan Project/OU=Research/CN=carol@strongswan.org +V EE_EXPIRATION 02 unknown /C=CH/O=strongSwan Project/OU=Accounting/CN=dave@strongswan.org +V EE_EXPIRATION 03 unknown /C=CH/O=strongSwan Project/CN=moon.strongswan.org +V EE_EXPIRATION 04 unknown /C=CH/O=strongSwan Project/CN=sun.strongswan.org +V EE_EXPIRATION 05 unknown /C=CH/O=strongSwan Project/OU=Sales/CN=alice@strongswan.org +V EE_EXPIRATION 06 unknown /C=CH/O=strongSwan Project/CN=venus.strongswan.org +V EE_EXPIRATION 07 unknown /C=CH/O=strongSwan Project/OU=Research/CN=bob@strongswan.org +R EE_EXPIRATION REVOCATION,keyCompromise 08 unknown /C=CH/O=strongSwan Project/OU=Research/CN=carol@strongswan.org +V EE_EXPIRATION 09 unknown /C=CH/O=strongSwan Project/OU=Research/serialNumber=002/CN=carol@strongswan.org +R IM_EXPIRATION REVOCATION,CACompromise 0A unknown /C=CH/O=strongSwan Project/OU=Research/CN=Research CA +V IM_EXPIRATION 0B unknown /C=CH/O=strongSwan Project/OU=Research/CN=Research CA +V IM_EXPIRATION 0C unknown /C=CH/O=strongSwan Project/OU=Sales/CN=Sales CA +V EE_EXPIRATION 0D unknown /C=CH/O=strongSwan Project/OU=SHA-224/CN=moon.strongswan.org +V EE_EXPIRATION 0E unknown /C=CH/O=strongSwan Project/OU=SHA-384/CN=carol@strongswan.org +V EE_EXPIRATION 0F unknown /C=CH/O=strongSwan Project/OU=SHA-512/CN=dave@strongswan.org +V EE_EXPIRATION 10 unknown /C=CH/O=strongSwan Project/OU=OCSP/CN=carol@strongswan.org +V EE_EXPIRATION 11 unknown /C=CH/O=strongSwan Project/OU=OCSP Signing Authority/CN=ocsp.strongswan.org +V EE_EXPIRATION 12 unknown /C=CH/O=strongSwan Project/OU=Virtual VPN Gateway/CN=mars.strongswan.org +V EE_EXPIRATION 13 unknown /C=CH/O=strongSwan Project/CN=winnetou.strongswan.org +V EE_EXPIRATION 14 unknown /C=CH/O=strongSwan Project/CN=aaa.strongswan.org +V IM_EXPIRATION 15 unknown /C=CH/O=strongSwan Project/CN=strongSwan Attribute Authority +V SH_EXPIRATION 16 unknown /C=CH/O=strongSwan Project/CN=strongSwan Legacy AA diff --git a/testing/hosts/winnetou/etc/ca/ocsp/ocsp.cgi b/testing/hosts/winnetou/etc/ca/ocsp/ocsp.cgi new file mode 100755 index 000000000..230bbf346 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/ocsp/ocsp.cgi @@ -0,0 +1,11 @@ +#!/bin/bash + +cd /etc/ca + +echo "Content-type: application/ocsp-response" +echo "" + +cat | /usr/bin/openssl ocsp -index index.txt -CA strongswanCert.pem \ + -rkey ocspKey.pem -rsigner ocspCert.pem \ + -nmin 5 \ + -reqin /dev/stdin -respout /dev/stdout | cat diff --git a/testing/hosts/winnetou/etc/ca/research/index.txt.template b/testing/hosts/winnetou/etc/ca/research/index.txt.template new file mode 100644 index 000000000..f9ca26b59 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/research/index.txt.template @@ -0,0 +1,4 @@ +V EE_EXPIRATION 01 unknown /C=CH/O=strongSwan Project/OU=Research/CN=carol@strongswan.org +V EE_EXPIRATION 02 unknown /C=CH/O=strongSwan Project/OU=Research OCSP Signing Authority/CN=ocsp.research.strongswan.org +V EE_EXPIRATION 03 unknown /C=CH/O=strongSwan Project/OU=Sales/CN=Sales CA +V EE_EXPIRATION 04 unknown /C=CH/O=strongSwan Project/OU=Research/CN=Duck Research CA diff --git a/testing/hosts/winnetou/etc/ca/research/ocsp/ocsp.cgi b/testing/hosts/winnetou/etc/ca/research/ocsp/ocsp.cgi new file mode 100755 index 000000000..4154f5d82 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/research/ocsp/ocsp.cgi @@ -0,0 +1,11 @@ +#!/bin/bash + +cd /etc/ca/research + +echo "Content-type: application/ocsp-response" +echo "" + +cat | /usr/bin/openssl ocsp -index index.txt -CA researchCert.pem \ + -rkey ocspKey.pem -rsigner ocspCert.pem \ + -nmin 5 \ + -reqin /dev/stdin -respout /dev/stdout | cat diff --git a/testing/hosts/winnetou/etc/ca/sales/index.txt.template b/testing/hosts/winnetou/etc/ca/sales/index.txt.template new file mode 100644 index 000000000..5bc935f30 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/sales/index.txt.template @@ -0,0 +1,3 @@ +V EE_EXPIRATION 01 unknown /C=CH/O=strongSwan Project/OU=Sales/CN=dave@strongswan.org +V EE_EXPIRATION 02 unknown /C=CH/O=strongSwan Project/OU=Sales OCSP Signing Authority/CN=ocsp.sales.strongswan.org +V EE_EXPIRATION 03 unknown /C=CH/O=strongSwan Project/OU=Research/CN=Research CA diff --git a/testing/hosts/winnetou/etc/ca/sales/ocsp/ocsp.cgi b/testing/hosts/winnetou/etc/ca/sales/ocsp/ocsp.cgi new file mode 100755 index 000000000..05d304dc3 --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/sales/ocsp/ocsp.cgi @@ -0,0 +1,11 @@ +#!/bin/bash + +cd /etc/ca/sales + +echo "Content-type: application/ocsp-response" +echo "" + +cat | /usr/bin/openssl ocsp -index index.txt -CA salesCert.pem \ + -rkey ocspKey.pem -rsigner ocspCert.pem \ + -nmin 5 \ + -reqin /dev/stdin -respout /dev/stdout | cat diff --git a/testing/hosts/winnetou/etc/ldap/ldif.txt b/testing/hosts/winnetou/etc/ldap/ldif.txt index d06621adb..c3c27cc2f 100644 --- a/testing/hosts/winnetou/etc/ldap/ldif.txt +++ b/testing/hosts/winnetou/etc/ldap/ldif.txt @@ -1,39 +1,39 @@ -dn: o=Linux strongSwan, c=CH +dn: o=strongSwan Project, c=CH objectclass: organization -o: Linux strongSwan +o: strongSwan Project -dn: cn=Manager,o=Linux strongSwan, c=CH +dn: cn=Manager,o=strongSwan Project, c=CH objectclass: organizationalRole cn: Manager -dn: cn=strongSwan Root CA, o=Linux strongSwan, c=CH +dn: cn=strongSwan Root CA, o=strongSwan Project, c=CH objectClass: organizationalRole cn: strongSwan Root CA objectClass: certificationAuthority -authorityRevocationList;binary:< file:///etc/openssl/strongswan.crl -certificateRevocationList;binary:< file:///etc/openssl/strongswan.crl -cACertificate;binary:< file:///etc/openssl/strongswanCert.der +authorityRevocationList;binary:< file:///var/www/strongswan.crl +certificateRevocationList;binary:< file:///var/www/strongswan.crl +cACertificate;binary:< file:///var/www/strongswanCert.der -dn: ou=Research, o=Linux strongSwan, c=CH +dn: ou=Research, o=strongSwan Project, c=CH objectclass: organizationalUnit ou: Research -dn: cn=Research CA, ou=Research, o=Linux strongSwan, c=CH +dn: cn=Research CA, ou=Research, o=strongSwan Project, c=CH objectClass: organizationalRole cn: Research CA objectClass: certificationAuthority -authorityRevocationList;binary:< file:///etc/openssl/research/research.crl -certificateRevocationList;binary:< file:///etc/openssl/research/research.crl -cACertificate;binary:< file:///etc/openssl/research/researchCert.der +authorityRevocationList;binary:< file:///var/www/research.crl +certificateRevocationList;binary:< file:///var/www/research.crl +cACertificate;binary:< file:///var/www/researchCert.der -dn: ou=Sales, o=Linux strongSwan, c=CH +dn: ou=Sales, o=strongSwan Project, c=CH objectclass: organizationalUnit ou: Sales -dn: cn=Sales CA, ou=Sales, o=Linux strongSwan, c=CH +dn: cn=Sales CA, ou=Sales, o=strongSwan Project, c=CH objectClass: organizationalRole cn: Sales CA objectClass: certificationAuthority -authorityRevocationList;binary:< file:///etc/openssl/sales/sales.crl -certificateRevocationList;binary:< file:///etc/openssl/sales/sales.crl -cACertificate;binary:< file:///etc/openssl/sales/salesCert.der +authorityRevocationList;binary:< file:///var/www/sales.crl +certificateRevocationList;binary:< file:///var/www/sales.crl +cACertificate;binary:< file:///var/www/salesCert.der diff --git a/testing/hosts/winnetou/etc/ldap/slapd.conf b/testing/hosts/winnetou/etc/ldap/slapd.conf index 103d4573f..17a32c7f3 100644 --- a/testing/hosts/winnetou/etc/ldap/slapd.conf +++ b/testing/hosts/winnetou/etc/ldap/slapd.conf @@ -15,8 +15,8 @@ argsfile /var/run/openldap/slapd.args ####################################################################### database bdb -suffix "o=Linux strongSwan,c=CH" -rootdn "cn=Manager,o=Linux strongSwan,c=CH" +suffix "o=strongSwan Project,c=CH" +rootdn "cn=Manager,o=strongSwan Project,c=CH" checkpoint 32 30 rootpw tuxmux directory /var/lib/ldap diff --git a/testing/hosts/winnetou/etc/openssl/index.html b/testing/hosts/winnetou/etc/openssl/index.html deleted file mode 100644 index 8cbb2c482..000000000 --- a/testing/hosts/winnetou/etc/openssl/index.html +++ /dev/null @@ -1,36 +0,0 @@ - - - strongSwan Web Services - - - - - - - -
-

strongSwan Certification Authority

- - - -

strongSwan Testing Environment

- - - - -
-
Linux strongSwan (www.strongswan.org)
-
- diff --git a/testing/hosts/winnetou/etc/strongswan.conf b/testing/hosts/winnetou/etc/strongswan.conf index a69df79ab..ad718b599 100644 --- a/testing/hosts/winnetou/etc/strongswan.conf +++ b/testing/hosts/winnetou/etc/strongswan.conf @@ -1,5 +1,5 @@ # strongswan.conf - strongSwan configuration file pki { - load = random pem sha1 sha2 sha3 pkcs1 pkcs8 pem gmp mgf1 bliss curve25519 x509 + load = random pem sha1 sha2 sha3 pkcs1 pkcs8 pem gmp mgf1 bliss curve25519 x509 openssl } diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs new file mode 100755 index 000000000..649ea776a --- /dev/null +++ b/testing/scripts/build-certs @@ -0,0 +1,1585 @@ +#!/bin/bash + +echo "Building certificates" + +# Determine testing directory +DIR="$(dirname `readlink -f $0`)/.." + +# Define some global variables +PROJECT="strongSwan Project" +CA_DIR="${DIR}/hosts/winnetou/etc/ca" +CA_KEY="${CA_DIR}/strongswanKey.pem" +CA_CERT="${CA_DIR}/strongswanCert.pem" +CA_CRL="${CA_DIR}/strongswan.crl" +CA_LAST_CRL="${CA_DIR}/strongswan_last.crl" +CA_CDP="http://crl.strongswan.org/strongswan.crl" +CA_BASE_CDP="http://crl.strongswan.org/strongswan_base.crl" +CA_OCSP="http://ocsp.strongswan.org:8880" +# +START=`date -d "-2 day" "+%d.%m.%y %T"` +SH_END=`date -d "-1 day" "+%d.%m.%y %T"` # 1 day +CA_END=`date -d "+3651 day" "+%d.%m.%y %T"` # 10 years +IM_END=`date -d "+3286 day" "+%d.%m.%y %T"` # 9 years +EE_END=`date -d "+2920 day" "+%d.%m.%y %T"` # 8 years +SH_EXP=`date -d "-1 day" "+%y%m%d%H%M%SZ"` # 1 day +IM_EXP=`date -d "+3286 day" "+%y%m%d%H%M%SZ"` # 9 years +EE_EXP=`date -d "+2920 day" "+%y%m%d%H%M%SZ"` # 8 years +NOW=`date "+%y%m%d%H%M%SZ"` +# +RESEARCH_DIR="${CA_DIR}/research" +RESEARCH_KEY="${RESEARCH_DIR}/researchKey.pem" +RESEARCH_CERT="${RESEARCH_DIR}/researchCert.pem" +RESEARCH_CDP="http://crl.strongswan.org/research.crl" +# +SALES_DIR="${CA_DIR}/sales" +SALES_KEY="${SALES_DIR}/salesKey.pem" +SALES_CERT="${SALES_DIR}/salesCert.pem" +SALES_CDP="http://crl.strongswan.org/sales.crl" +# +DUCK_DIR="${CA_DIR}/duck" +DUCK_KEY="${DUCK_DIR}/duckKey.pem" +DUCK_CERT="${DUCK_DIR}/duckCert.pem" +# +ECDSA_DIR="${CA_DIR}/ecdsa" +ECDSA_KEY="${ECDSA_DIR}/strongswanKey.pem" +ECDSA_CERT="${ECDSA_DIR}/strongswanCert.pem" +ECDSA_CDP="http://crl.strongswan.org/strongswan_ecdsa.crl" +# +RFC3779_DIR="${CA_DIR}/rfc3779" +RFC3779_KEY="${RFC3779_DIR}/strongswanKey.pem" +RFC3779_CERT="${RFC3779_DIR}/strongswanCert.pem" +RFC3779_CDP="http://crl.strongswan.org/strongswan_rfc3779.crl" +# +SHA3_RSA_DIR="${CA_DIR}/sha3-rsa" +SHA3_RSA_KEY="${SHA3_RSA_DIR}/strongswanKey.pem" +SHA3_RSA_CERT="${SHA3_RSA_DIR}/strongswanCert.pem" +SHA3_RSA_CDP="http://crl.strongswan.org/strongswan_sha3_rsa.crl" +# +ED25519_DIR="${CA_DIR}/ed25519" +ED25519_KEY="${ED25519_DIR}/strongswanKey.pem" +ED25519_CERT="${ED25519_DIR}/strongswanCert.pem" +ED25519_CDP="http://crl.strongswan.org/strongswan_ed25519.crl" +# +MONSTER_DIR="${CA_DIR}/monster" +MONSTER_KEY="${MONSTER_DIR}/strongswanKey.pem" +MONSTER_CERT="${MONSTER_DIR}/strongswanCert.pem" +MONSTER_CDP="http://crl.strongswan.org/strongswan_monster.crl" +MONSTER_CA_RSA_SIZE="8192" +MONSTER_EE_RSA_SIZE="4096" +# +BLISS_DIR="${CA_DIR}/bliss" +BLISS_KEY="${BLISS_DIR}/strongswan_blissKey.der" +BLISS_CERT="${BLISS_DIR}/strongswan_blissCert.der" +BLISS_CDP="http://crl.strongswan.org/strongswan_bliss.crl" +# +RSA_SIZE="3072" +IPSEC_DIR="etc/ipsec.d" +SWANCTL_DIR="etc/swanctl" +TKM_DIR="etc/tkm" +HOSTS="carol dave moon sun alice venus bob" +TEST_DIR="${DIR}/tests" + +# Create directories +mkdir -p ${CA_DIR}/certs +mkdir -p ${RESEARCH_DIR}/certs +mkdir -p ${SALES_DIR}/certs +mkdir -p ${DUCK_DIR}/certs +mkdir -p ${ECDSA_DIR}/certs +mkdir -p ${RFC3779_DIR}/certs +mkdir -p ${SHA3_RSA_DIR}/certs +mkdir -p ${ED25519_DIR}/certs +mkdir -p ${MONSTER_DIR}/certs +mkdir -p ${BLISS_DIR}/certs + +################################################################################ +# strongSwan Root CA # +################################################################################ + +# Generate strongSwan Root CA +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${CA_KEY} +pki --self --type rsa --in ${CA_KEY} --not-before "${START}" --not-after "${CA_END}" \ + --ca --pathlen 1 --dn "C=CH, O=${PROJECT}, CN=strongSwan Root CA" \ + --outform pem > ${CA_CERT} + +# Distribute strongSwan Root CA certificate +for h in ${HOSTS} +do + HOST_DIR="${DIR}/hosts/${h}" + cp ${CA_CERT} ${HOST_DIR}/${IPSEC_DIR}/cacerts + cp ${CA_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509ca +done + +# Put a copy onto the alice FreeRADIUS server +cp ${CA_CERT} ${DIR}/hosts/alice/etc/raddb/certs + +# Gernerate a stale CRL +pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} \ + --this-update "${START}" --lifetime 1 > ${CA_LAST_CRL} + +# Put a CRL copy into the ikev2/crl-ldap scenario to be used as a stale crl +TEST="${TEST_DIR}/ikev2/crl-ldap" +cp ${CA_LAST_CRL} ${TEST}/hosts/carol/${IPSEC_DIR}/crls/stale.crl +cp ${CA_LAST_CRL} ${TEST}/hosts/moon/${IPSEC_DIR}/crls/stale.crl + +# Generate host keys +for h in ${HOSTS} +do + HOST_DIR="${DIR}/hosts/${h}" + HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${h}Key.pem" + pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} + + # Put a copy into swanctl directory tree + cp ${HOST_KEY} ${HOST_DIR}/${SWANCTL_DIR}/rsa +done + +# Convert moon private key and Root CA certificate into DER format +HOST_KEY=${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem +TEST="${TEST_DIR}/tkm/host2host-initiator" +TEST_KEY=${TEST}/hosts/moon/${TKM_DIR}/moonKey.der +TEST_CERT=${TEST}/hosts/moon/${TKM_DIR}/strongswanCert.der +openssl rsa -in ${HOST_KEY} -outform der -out ${TEST_KEY} 2> /dev/null +openssl x509 -in ${CA_CERT} -outform der -out ${TEST_CERT} + +# Put DER-encoded moon private key and Root CA certificate into tkm scenarios +for t in host2host-initiator host2host-responder host2host-xfrmproxy \ + net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey +do + TEST="${TEST_DIR}/tkm/${t}" + mkdir -p ${TEST}/hosts/moon/${TKM_DIR} + cp ${CA_DIR}/keys/moonKey.der ${CA_CERT_DER} ${TEST}/hosts/moon/${TKM_DIR} +done + +# Put DER_encoded sun private key and Root CA certificate into tkm scenarios +for t in multiple-clients +do + TEST="${TEST_DIR}/tkm/${t}" + mkdir -p ${TEST}/hosts/sun/${TKM_DIR} + cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} +done + +# Convert moon private key into unencrypted PKCS#8 format +TEST="${TEST_DIR}/ikev2/rw-pkcs8" +HOST_KEY=${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem +TEST_KEY=${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem +openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -out ${TEST_KEY} + +# Convert carol private key into v1.5 DES encrypted PKCS#8 format +HOST_KEY=${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem +TEST_KEY=${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem +openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ + -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} + +# Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format +HOST_KEY=${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem +TEST_KEY=${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem +openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v2 aes128 \ + -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} + +################################################################################ +# Public Key Extraction # +################################################################################ + +# Extract the raw moon public key for the swanctl/net2net-pubkey scenario +TEST="${TEST_DIR}/swanctl/net2net-pubkey" +TEST_PUB="${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey/moonPub.pem" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} +cp ${TEST_PUB} ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey + +# Put a copy into the ikev2/net2net-pubkey scenario +TEST="${TEST_DIR}/ikev2/net2net-pubkey" +cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey + +# Put a copy into the swanctl/rw-pubkey-keyid scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey + +# Extract the raw sun public key for the swanctl/net2net-pubkey scenario +TEST="${TEST_DIR}/swanctl/net2net-pubkey" +TEST_PUB="${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey/sunPub.pem" +HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the ikev2/net2net-pubkey scenario +TEST="${TEST_DIR}/ikev2/net2net-pubkey" +cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Extract the raw carol public key for the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +TEST_PUB="${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey/carolPub.pem" +HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the swanctl/rw-pubkey-keyid scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" +cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Extract the raw dave public key for the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +TEST_PUB="${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey/davePub.pem" +HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the swanctl/rw-pubkey-keyid scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" +cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +################################################################################ +# Host Certificate Generation # +################################################################################ + +# function issue_cert: serial host cn [ou] +issue_cert() +{ + # does optional OU argument exist? + if [ -z "${4}" ] + then + OU="" + else + OU=" OU=${4}," + fi + + HOST_DIR="${DIR}/hosts/${2}" + HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${2}Key.pem" + HOST_CERT="${HOST_DIR}/${IPSEC_DIR}/certs/${2}Cert.pem" + pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${3} \ + --serial ${1} --dn "C=CH, O=${PROJECT},${OU} CN=${3}" \ + --outform pem > ${HOST_CERT} + cp ${HOST_CERT} ${CA_DIR}/certs/${1}.pem + + # Put a certificate copy into swanctl directory tree + cp ${HOST_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509 +} + +# Generate host certificates +issue_cert 01 carol carol@strongswan.org Research +issue_cert 02 dave dave@strongswan.org Accounting +issue_cert 03 moon moon.strongswan.org +issue_cert 04 sun sun.strongswan.org +issue_cert 05 alice alice@strongswan.org Sales +issue_cert 06 venus venus.strongswan.org +issue_cert 07 bob bob@strongswan.org Research + +# Create PKCS#12 file for moon +TEST="${TEST_DIR}/ikev2/net2net-pkcs12" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +HOST_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +MOON_PKCS12="${TEST}/hosts/moon/etc/ipsec.d/private/moonCert.p12" +openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "moon" \ + -certfile ${CA_CERT} -caname "strongSwan Root CA" \ + -aes128 -passout "pass:kUqd8O7mzbjXNJKQ" > ${MOON_PKCS12} 2> /dev/null + +# Create PKCS#12 file for sun +HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +HOST_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +SUN_PKCS12="${TEST}/hosts/sun/etc/ipsec.d/private/sunCert.p12" +openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "sun" \ + -certfile ${CA_CERT} -caname "strongSwan Root CA" \ + -aes128 -passout "pass:IxjQVCF3JGI+MoPi" > ${SUN_PKCS12} 2> /dev/null + +# Put a PKCS#12 copy into the botan/net2net-pkcs12 scenario +TEST="${TEST_DIR}/botan/net2net-pkcs12" +mkdir -p "${TEST}/hosts/moon/etc/swanctl/pkcs12" +cp ${MOON_PKCS12} "${TEST}/hosts/moon/etc/swanctl/pkcs12" +mkdir -p "${TEST}/hosts/sun/etc/swanctl/pkcs12" +cp ${SUN_PKCS12} "${TEST}/hosts/sun/etc/swanctl/pkcs12" + +# Put a PKCS#12 copy into the openssl-ikev2/net2net-pkcs12 scenario +TEST="${TEST_DIR}/openssl-ikev2/net2net-pkcs12" +cp ${MOON_PKCS12} "${TEST}/hosts/moon/etc/swanctl/pkcs12" +cp ${SUN_PKCS12} "${TEST}/hosts/sun/etc/swanctl/pkcs12" + +# Generate a carol certificate for the swanctl/crl-to-cache scenario with base CDP +TEST="${TEST_DIR}/swanctl/crl-to-cache" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +CN="carol@strongswan.org" +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial 01 --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} + +# Generate a moon certificate for the swanctl/crl-to-cache scenario with base CDP +TEST_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +CN="moon.strongswan.org" +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial 03 --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --outform pem > ${TEST_CERT} + +# Encrypt carolKey.pem +HOST_KEY="${DIR}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +KEY_PWD="nH5ZQEWtku0RJEZ6" +openssl rsa -in ${HOST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${HOST_KEY} \ + 2> /dev/null + +# Put a copy into the ikev2/dynamic-initiator scenario +TEST="${TEST_DIR}/ikev2/dynamic-initiator" +cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem + +# Put a copy into the ikev1/dynamic-initiator scenario +TEST="${TEST_DIR}/ikev1/dynamic-initiator" +cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem + +# Put a copy into the ikev1/dynamic-responder scenario +TEST="${TEST_DIR}/ikev1/dynamic-responder" +cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem + +# Put a copy into the swanctl/rw-cert scenario +TEST="${TEST_DIR}/swanctl/rw-cert" +cp ${HOST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa + +# Generate another carol certificate and revoke it +TEST="${TEST_DIR}/ikev2/crl-revoked" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="08" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem +pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} --reason "key-compromise" \ + --serial ${SERIAL} > ${CA_CRL} +cp ${CA_CRL} ${CA_LAST_CRL} + +# Put a copy into the ikev2/ocsp-revoked scenario +TEST="${TEST_DIR}/ikev2/ocsp-revoked" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Generate another carol certificate with SN=002 +TEST="${TEST_DIR}/ikev2/two-certs" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-002.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-002.pem" +SERIAL="09" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, SN=002, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +################################################################################ +# Research CA Certificate Generation # +################################################################################ + +# Generate a Research CA certificate signed by the Root CA and revoke it +TEST="${TEST_DIR}/ikev2/multi-level-ca-revoked" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" +SERIAL="0A" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RESEARCH_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem +pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} --reason "ca-compromise" \ + --serial ${SERIAL} --lastcrl ${CA_LAST_CRL} > ${CA_CRL} +rm ${CA_LAST_CRL} + +# Generate Research CA with the same private key as above signed by Root CA +SERIAL="0B" +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --outform pem > ${RESEARCH_CERT} +cp ${RESEARCH_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a certificate copy into the ikev1/multi-level-ca scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev1/multi-level-ca-cr-init scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" +cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev1/multi-level-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" +cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-ldap scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-cr-init scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" +cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" +cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-pathlen scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-pathlen" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-strict scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/ocsp-multi-level scenario +TEST="${TEST_DIR}/ikev2/ocsp-multi-level" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/ocsp-strict-ifuri scenario +TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the swanctl/multi-level-ca scenario +TEST="${TEST_DIR}/swanctl/multi-level-ca" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca + +# Put a certificate copy into the swanctl/ocsp-multi-level scenario +TEST="${TEST_DIR}/swanctl/ocsp-multi-level" +cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca + +# Generate Research CA with the same private key as above but invalid CDP +TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --type rsa \ + --crl "http://crl.strongswan.org/not-available.crl" \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --outform pem > ${TEST_CERT} + +################################################################################ +# Sales CA Certificate Generation # +################################################################################ + +# Generate Sales CA signed by Root CA +SERIAL="0C" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SALES_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${SALES_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ + --outform pem > ${SALES_CERT} +cp ${SALES_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a certificate copy into the ikev1/multi-level-ca scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca" +cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev1/multi-level-ca-cr-init scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" +cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev1/multi-level-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" +cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca" +cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-ldap scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" +cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-cr-init scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" +cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" +cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/multi-level-ca-strict scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" +cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/ocsp-multi-level scenario +TEST="${TEST_DIR}/ikev2/ocsp-multi-level" +cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the ikev2/ocsp-struct.ifuri scenario +TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" +cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Put a certificate copy into the swanctl/multi-level-ca scenario +TEST="${TEST_DIR}/swanctl/multi-level-ca" +cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca + +# Put a certificate copy into the swanctl/ocsp-multi-level scenario +TEST="${TEST_DIR}/swanctl/ocsp-multi-level" +cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca + +# Generate an AES-128 encrypted moon key and a SHA-224 hashed certificate +TEST="${TEST_DIR}/ikev2/strong-keys-certs" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey-aes128.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert-sha224.pem" +KEY_PWD="gOQHdrSWeFuiZtYPetWuyzHW" +CN="moon.strongswan.org" +SERIAL="0D" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-224, CN=${CN}" \ + --digest sha224 --outform pem > ${TEST_CERT} +openssl rsa -in ${TEST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ + 2> /dev/null +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate an AES-192 encrypted carol key and a SHA-384 hashed certificate +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-aes192.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-sha384.pem" +KEY_PWD="ITP/H4lSHqGpUGmCpgNDklbzTNV+swjA" +CN="carol@strongswan.org" +SERIAL="0E" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-384, CN=${CN}" \ + --digest sha384 --outform pem > ${TEST_CERT} +openssl rsa -in ${TEST_KEY} -aes192 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ + 2> /dev/null +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate an AES-256 encrypted dave key and a SHA-512 hashed certificate +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey-aes256.pem" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert-sha512.pem" +KEY_PWD="MeFnDN7VUbj+qU/bkgRIFvbCketIk2wrrs5Ii8297N2v" +CN="dave@strongswan.org" +SERIAL="0F" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-512, CN=${CN}" \ + --digest sha512 --outform pem > ${TEST_CERT} +openssl rsa -in ${TEST_KEY} -aes256 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ + 2> /dev/null +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate another carol certificate with an OCSP URI +TEST="${TEST_DIR}/ikev2/ocsp-signer-cert" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="10" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=OCSP, CN=${CN}" \ + --ocsp ${CA_OCSP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy into the ikev2/ocsp-timeouts-good scenario +TEST="${TEST_DIR}/ikev2/ocsp-timeouts-good" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/ocsp-signer-cert scenario +TEST="${TEST_DIR}/swanctl/ocsp-signer-cert" +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + +# Put a copy into the swanctl/ocsp-disabled scenario +TEST="${TEST_DIR}/swanctl/ocsp-disabled" +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + +# Generate an OCSP Signing certificate for the strongSwan Root CA +TEST_KEY="${CA_DIR}/ocspKey.pem" +TEST_CERT="${CA_DIR}/ocspCert.pem" +CN="ocsp.strongswan.org" +OU="OCSP Signing Authority" +SERIAL="11" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --flag ocspSigning --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate a self-signed OCSP Signing certificate +TEST_KEY="${CA_DIR}/ocspKey-self.pem" +TEST_CERT="${CA_DIR}/ocspCert-self.pem" +OU="OCSP Self-Signed Authority" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --self --type rsa --in ${TEST_KEY} --flag ocspSigning \ + --not-before "${START}" --not-after "${CA_END}" --san ${CN} \ + --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --outform pem > ${TEST_CERT} + +# Copy self-signed OCSP Signing certificate to ikev2/ocsp-local-cert scenario +TEST="${TEST_DIR}/ikev2/ocsp-local-cert" +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts + +# Generate mars virtual server certificate +TEST="${TEST_DIR}/ha/both-active" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/marsKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/marsCert.pem" +CN="mars.strongswan.org" +OU="Virtual VPN Gateway" +SERIAL="12" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --flag serverAuth --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy into the mirrored gateway +mkdir -p ${TEST}/hosts/alice/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/alice/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/alice/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/alice/${IPSEC_DIR}/certs + +# Put a copy into the ha/active-passive and ikev2-redirect-active scenarios +for t in "ha/active-passive" "ikev2/redirect-active" +do + TEST="${TEST_DIR}/${t}" + for h in alice moon + do + mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/certs + cp ${TEST_KEY} ${TEST}/hosts/${h}/${IPSEC_DIR}/private + cp ${TEST_CERT} ${TEST}/hosts/${h}/${IPSEC_DIR}/certs + done +done + +# Generate winnetou server certificate +HOST_KEY="${CA_DIR}/winnetouKey.pem" +HOST_CERT="${CA_DIR}/winnetouCert.pem" +CN="winnetou.strongswan.org" +SERIAL="13" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --flag serverAuth --outform pem > ${HOST_CERT} +cp ${HOST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate AAA server certificate +TEST="${TEST_DIR}/tnc/tnccs-20-pdp-eap" +TEST_KEY="${TEST}/hosts/alice/${SWANCTL_DIR}/rsa/aaaKey.pem" +TEST_CERT="${TEST}/hosts/alice/${SWANCTL_DIR}/x509/aaaCert.pem" +CN="aaa.strongswan.org" +SERIAL="14" +cd "${TEST}/hosts/alice/${SWANCTL_DIR}" +mkdir -p rsa x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ +--in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --flag serverAuth --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy into various tnc scenarios +for t in tnccs-20-pdp-pt-tls tnccs-20-ev-pt-tls tnccs-20-hcd-eap +do + cd "${TEST_DIR}/tnc/${t}/hosts/alice/${SWANCTL_DIR}" + mkdir -p rsa x509 + cp ${TEST_KEY} rsa + cp ${TEST_CERT} x509 +done + +# Put a copy into the alice FreeRADIUS server +cp ${TEST_KEY} ${TEST_CERT} ${DIR}/hosts/alice/etc/raddb/certs + +################################################################################ +# strongSwan Attribute Authority # +################################################################################ + +# Generate Attritbute Authority certificate +TEST="${TEST_DIR}/ikev2/acert-cached" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert.pem" +CN="strongSwan Attribute Authority" +SERIAL="15" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${IM_END}" \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate carol's attribute certificate for sales and finance +ACERT=${TEST}/hosts/moon/${IPSEC_DIR}/acerts/carol-sales-finance.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/01.pem --group sales --group finance \ + --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} + +# Generate dave's expired attribute certificate for sales +ACERT=${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-sales-expired.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/02.pem --group sales \ + --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} + +# Generate dave's attribute certificate for marketing +ACERT_DM=${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-marketing.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/02.pem --group marketing \ + --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_DM} + +# Put a copy into the ikev2/acert-fallback scenario +TEST="${TEST_DIR}/ikev2/acert-fallback" +cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts + +# Generate carol's expired attribute certificate for finance +ACERT=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-finance-expired.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/01.pem --group finance \ + --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} + +# Generate carol's valid attribute certificate for sales +ACERT_CS=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-sales.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/01.pem --group sales \ + --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_CS} + +# Put a copy into the ikev2/acert-inline scenarion +TEST="${TEST_DIR}/ikev2/acert-inline" +cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +cp ${ACERT_CS} ${TEST}/hosts/carol/${IPSEC_DIR}/acerts +cp ${ACERT_DM} ${TEST}/hosts/dave/${IPSEC_DIR}/acerts + +# Generate a short-lived Attritbute Authority certificate +CN="strongSwan Legacy AA" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey-expired.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert-expired.pem" +SERIAL="16" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${SH_END}" \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Genrate dave's attribute certificate for sales from expired AA +ACERT=${TEST}/hosts/dave/${IPSEC_DIR}/acerts/dave-expired-aa.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/02.pem --group sales \ + --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} + +################################################################################ +# strongSwan Root CA index for OCSP server # +################################################################################ + +# generate index.txt file for Root OCSP server +cp ${CA_DIR}/index.txt.template ${CA_DIR}/index.txt +sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${CA_DIR}/index.txt +sed -i -e "s/IM_EXPIRATION/${IM_EXP}/g" ${CA_DIR}/index.txt +sed -i -e "s/SH_EXPIRATION/${SH_EXP}/g" ${CA_DIR}/index.txt +sed -i -e "s/REVOCATION/${NOW}/g" ${CA_DIR}/index.txt + +################################################################################ +# Research CA # +################################################################################ + +# Generate a carol research certificate +TEST="${TEST_DIR}/ikev2/multi-level-ca" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="01" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +# Put a copy in the ikev2/multilevel-ca-cr-init scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-ldap scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-ldap scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-revoked scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-revoked" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-skipped scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-strict scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/ocsp-multilevel scenario +TEST="${TEST_DIR}/ikev2/ocsp-multi-level" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev1/multilevel-ca scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev1/multilevel-ca-cr-init scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the ikev1/multilevel-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the swanctl/multilevel-ca scenario +TEST="${TEST_DIR}/swanctl/multi-level-ca" +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + +# Put a copy in the swanctl/ocsp-multilevel scenario +TEST="${TEST_DIR}/swanctl/ocsp-multi-level" +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + +# Generate a carol research certificate without a CDP +TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private + +# Generate an OCSP Signing certificate for the Research CA +TEST_KEY="${RESEARCH_DIR}/ocspKey.pem" +TEST_CERT="${RESEARCH_DIR}/ocspCert.pem" +OU="Research OCSP Signing Authority" +CN="ocsp.research.strongswan.org" +SERIAL="02" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --crl ${RESEARCH_CDP} --flag ocspSigning --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +# Generate a Sales CA certificate signed by the Research CA +TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/sales_by_researchCert.pem" +SERIAL="03" +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${SALES_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ + --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +################################################################################ +# Duck Research CA # +################################################################################ + +# Generate a Duck Research CA certificate signed by the Research CA +SERIAL="04" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${DUCK_KEY} +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${DUCK_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Duck Research CA" \ + --crl ${RESEARCH_CDP} --outform pem > ${DUCK_CERT} +cp ${DUCK_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +# Put a certificate copy in the ikev2/multilevel-ca-pathlen scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-pathlen" +cp ${DUCK_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Generate a carol certificate signed by the Duck Research CA +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="01" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${DUCK_KEY} --cacert ${DUCK_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Duck Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${DUCK_DIR}/certs/${SERIAL}.pem + +# Generate index.txt file for Research OCSP server +cp ${RESEARCH_DIR}/index.txt.template ${RESEARCH_DIR}/index.txt +sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${RESEARCH_DIR}/index.txt + +################################################################################ +# Sales CA # +################################################################################ + +# Generate a dave sales certificate +TEST="${TEST_DIR}/ikev2/multi-level-ca" +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="01" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ + --crl ${SALES_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem + +# Put a copy in the ikev2/multilevel-ca-cr-init scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-ldap scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/multilevel-ca-strict scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev2/ocsp-multilevel scenario +TEST="${TEST_DIR}/ikev2/ocsp-multi-level" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev1/multilevel-ca scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev1/multilevel-ca-cr-init scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the ikev1/multilevel-ca-cr-resp scenario +TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs + +# Put a copy in the swanctl/multilevel-ca scenario +TEST="${TEST_DIR}/swanctl/multi-level-ca" +cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 + +# Put a copy in the swanctl/ocsp-multilevel scenario +TEST="${TEST_DIR}/swanctl/ocsp-multi-level" +cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 + +# Generate a dave sales certificate with an inactive OCSP URI and no CDP +TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ + --ocsp "http://ocsp2.strongswan.org:8882" --outform pem > ${TEST_CERT} +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private + +# Generate an OCSP Signing certificate for the Sales CA +TEST_KEY="${SALES_DIR}/ocspKey.pem" +TEST_CERT="${SALES_DIR}/ocspCert.pem" +OU="Sales OCSP Signing Authority" +CN="ocsp.sales.strongswan.org" +SERIAL="02" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --crl ${SALES_CDP} --flag ocspSigning --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem + +# Generate a Research CA certificate signed by the Sales CA +TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/research_by_salesCert.pem" +SERIAL="03" +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --crl ${SALES_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem + +# generate index.txt file for Sales OCSP server +cp ${SALES_DIR}/index.txt.template ${SALES_DIR}/index.txt +sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${SALES_DIR}/index.txt + +################################################################################ +# strongSwan EC Root CA # +################################################################################ + +# Generate strongSwan EC Root CA +pki --gen --type ecdsa --size 521 --outform pem > ${ECDSA_KEY} +pki --self --type ecdsa --in ${ECDSA_KEY} \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan EC Root CA" \ + --outform pem > ${ECDSA_CERT} + +# Put a copy in the openssl-ikev2/ecdsa-certs scenario +TEST="${TEST_DIR}/openssl-ikev2/ecdsa-certs" +cp ${ECDSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${ECDSA_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +cp ${ECDSA_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca + +# Generate a moon ECDSA 521 bit certificate +MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa/moonKey.pem" +MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="01" +pki --gen --type ecdsa --size 521 --outform pem > ${MOON_KEY} +pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ + --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 512 bit, CN=${CN}" \ + --crl ${ECDSA_CDP} --outform pem > ${MOON_CERT} +cp ${MOON_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem + +# Generate a carol ECDSA 256 bit certificate +CAROL_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa/carolKey.pem" +CAROL_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="02" +pki --gen --type ecdsa --size 256 --outform pem > ${CAROL_KEY} +pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ + --in ${CAROL_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 256 bit, CN=${CN}" \ + --crl ${ECDSA_CDP} --outform pem > ${CAROL_CERT} +cp ${CAROL_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem + +# Generate a dave ECDSA 384 bit certificate +DAVE_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa/daveKey.pem" +DAVE_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="03" +pki --gen --type ecdsa --size 384 --outform pem > ${DAVE_KEY} +pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ + --in ${DAVE_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 384 bit, CN=${CN}" \ + --crl ${ECDSA_CDP} --outform pem > ${DAVE_CERT} +cp ${DAVE_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem + +# Put CA and EE certificate copies in the openssl-ikev2/rw-ecdsa-pkcs8 scenario +TEST="${TEST_DIR}/openssl-ikev2/ecdsa-pkcs8" +cp ${ECDSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${ECDSA_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +cp ${CAROL_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +cp ${ECDSA_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca +cp ${DAVE_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 + +# Convert moon private key into unencrypted PKCS#8 format +TEST_KEY=${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem +openssl pkcs8 -in ${MOON_KEY} -nocrypt -topk8 -out ${TEST_KEY} + +# Convert carol private key into v1.5 DES encrypted PKCS#8 format +TEST_KEY=${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem +openssl pkcs8 -in ${CAROL_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ + -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} + +# Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format +TEST_KEY=${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem +openssl pkcs8 -in ${DAVE_KEY} -nocrypt -topk8 -v2 aes128 \ + -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} + +# Put CA and EE certificate copies in the openssl-ikev1/rw-ecdsa-certs scenario +TEST="${TEST_DIR}/openssl-ikev1/ecdsa-certs" +cd ${TEST}/hosts/moon/${SWANCTL_DIR} +mkdir -p ecdsa x509 x509ca +cp ${MOON_KEY} ecdsa +cp ${MOON_CERT} x509 +cp ${ECDSA_CERT} x509ca +cd ${TEST}/hosts/carol/${SWANCTL_DIR} +mkdir -p ecdsa x509 x509ca +cp ${CAROL_KEY} ecdsa +cp ${CAROL_CERT} x509 +cp ${ECDSA_CERT} x509ca +cd ${TEST}/hosts/dave/${SWANCTL_DIR} +mkdir -p ecdsa x509 x509ca +cp ${DAVE_KEY} ecdsa +cp ${DAVE_CERT} x509 +cp ${ECDSA_CERT} x509ca + +################################################################################ +# strongSwan RFC3779 Root CA # +################################################################################ + +# Generate strongSwan RFC3779 Root CA +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RFC3779_KEY} +pki --self --type rsa --in ${RFC3779_KEY} \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=strongSwan RFC3779 Root CA" \ + --addrblock "10.1.0.0-10.2.255.255" \ + --addrblock "10.3.0.1-10.3.3.232" \ + --addrblock "192.168.0.0/24" \ + --addrblock "fec0::-fec2:ffff:ffff:ffff:ffff:ffff:ffff:ffff" \ + --outform pem > ${RFC3779_CERT} + +# Put a copy in the ikev2/net2net-rfc3779 scenario +TEST="${TEST_DIR}/ikev2/net2net-rfc3779" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/cacerts +cp ${RFC3779_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +cp ${RFC3779_CERT} ${TEST}/hosts/sun/${IPSEC_DIR}/cacerts + +# Put a copy in the ipv6/rw-rfc3779-ikev2 scenario +TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca +cp ${RFC3779_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +cp ${RFC3779_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca + +# Generate a moon RFC3779 certificate +TEST="${TEST_DIR}/ikev2/net2net-rfc3779" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.1.0.0/16" --addrblock "192.168.0.1/32" \ + --addrblock "fec0::1/128" --addrblock "fec1::/16" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +# Put a copy in the ipv6 scenarios +for t in net2net-rfc3779-ikev2 rw-rfc3779-ikev2 +do + cd "${TEST_DIR}/ipv6/${t}/hosts/moon/${SWANCTL_DIR}" + mkdir -p rsa x509 x509ca + cp ${TEST_KEY} rsa + cp ${TEST_CERT} x509 + cp ${RFC3779_CERT} x509ca +done + +# Generate a sun RFC3779 certificate +TEST="${TEST_DIR}/ikev2/net2net-rfc3779" +TEST_KEY="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunKey.pem" +TEST_CERT="${TEST}/hosts/sun/${IPSEC_DIR}/certs/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.2.0.0/16" --addrblock "192.168.0.2/32" \ + --addrblock "fec0::2/128" --addrblock "fec2::/16" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +# Put a copy in the ipv6/net2net-rfc3779-ikev2 scenario +cd "${TEST_DIR}/ipv6/net2net-rfc3779-ikev2/hosts/sun/${SWANCTL_DIR}" +mkdir -p rsa x509 x509ca +cp ${TEST_KEY} rsa +cp ${TEST_CERT} x509 +cp ${RFC3779_CERT} x509ca + +# Generate a carol RFC3779 certificate +TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="03" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.3.0.1/32" --addrblock "192.168.0.100/32" \ + --addrblock "fec0::10/128" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +# Generate a carol RFC3779 certificate +TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="04" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.3.0.2/32" --addrblock "192.168.0.200/32" \ + --addrblock "fec0::20/128" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +################################################################################ +# strongSwan SHA3-RSA Root CA # +################################################################################ + +# Generate strongSwan SHA3-RSA Root CA +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SHA3_RSA_KEY} +pki --self --type rsa --in ${SHA3_RSA_KEY} --digest sha3_256 \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=strongSwan Root CA" \ + --outform pem > ${SHA3_RSA_CERT} + +# Put a copy in the swanctl/net2net-sha3-rsa-cert scenario +TEST="${TEST_DIR}/swanctl/net2net-sha3-rsa-cert" +cp ${SHA3_RSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${SHA3_RSA_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca + +# Generate a sun SHA3-RSA certificate +SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="01" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SUN_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${SUN_CERT} +cp ${SUN_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +# Generate a moon SHA3-RSA certificate +MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="02" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${MOON_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${MOON_CERT} +cp ${MOON_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +# Put a copy in the botan/net2net-sha3-rsa-cert scenario +TEST="${TEST_DIR}/botan/net2net-sha3-rsa-cert" +cd ${TEST}/hosts/moon/${SWANCTL_DIR} +mkdir -p rsa x509 x509ca +cp ${MOON_KEY} rsa +cp ${MOON_CERT} x509 +cp ${SHA3_RSA_CERT} x509ca +cd ${TEST}/hosts/sun/${SWANCTL_DIR} +mkdir -p rsa x509 x509ca +cp ${SUN_KEY} rsa +cp ${SUN_CERT} x509 +cp ${SHA3_RSA_CERT} x509ca + +# Put a copy in the swanctl/rw-eap-tls-sha3-rsa scenario +TEST="${TEST_DIR}/swanctl/rw-eap-tls-sha3-rsa" +cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${SHA3_RSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${SHA3_RSA_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +cp ${SHA3_RSA_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca + +# Generate a carol SHA3-RSA certificate +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="03" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +# Generate a dave SHA3-RSA certificate +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="04" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +################################################################################ +# strongSwan Ed25519 Root CA # +################################################################################ + +# Generate strongSwan Ed25519 Root CA +pki --gen --type ed25519 --outform pem > ${ED25519_KEY} +pki --self --type ed25519 --in ${ED25519_KEY} \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan Ed25519 Root CA" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.1" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.2" \ + --outform pem > ${ED25519_CERT} + +# Put a copy in the swanctl/net2net-ed25519 scenario +TEST="${TEST_DIR}/swanctl/net2net-ed25519" +cp ${ED25519_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${ED25519_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca + +# Generate a sun Ed25519 certificate +SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8/sunKey.pem" +SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="01" +pki --gen --type ed25519 --outform pem > ${SUN_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.2" --flag "serverAuth" \ + --crl ${ED25519_CDP} --outform pem > ${SUN_CERT} +cp ${SUN_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +# Generate a moon Ed25519 certificate +MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" +MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="02" +pki --gen --type ed25519 --outform pem > ${MOON_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.1" --flag "serverAuth" \ + --crl ${ED25519_CDP} --outform pem > ${MOON_CERT} +cp ${MOON_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +# Put a copy in the botan/net2net-ed25519 scenario +TEST="${TEST_DIR}/botan/net2net-ed25519" +cd ${TEST}/hosts/moon/${SWANCTL_DIR} +mkdir -p pkcs8 x509 x509ca +cp ${MOON_KEY} pkcs8 +cp ${MOON_CERT} x509 +cp ${ED25519_CERT} x509ca +cd ${TEST}/hosts/sun/${SWANCTL_DIR} +mkdir -p pkcs8 x509 x509ca +cp ${SUN_KEY} pkcs8 +cp ${SUN_CERT} x509 +cp ${ED25519_CERT} x509ca + +# Put a copy in the ikev2/net2net-ed25519 scenario +TEST="${TEST_DIR}/ikev2/net2net-ed25519" +cd ${TEST}/hosts/moon/${IPSEC_DIR} +mkdir -p cacerts certs private +cp ${MOON_KEY} private +cp ${MOON_CERT} certs +cp ${ED25519_CERT} cacerts +cd ${TEST}/hosts/sun/${IPSEC_DIR} +mkdir -p cacerts certs private +cp ${SUN_KEY} private +cp ${SUN_CERT} certs +cp ${ED25519_CERT} cacerts + +# Put a copy in the swanctl/rw-ed25519-certpol scenario +TEST="${TEST_DIR}/swanctl/rw-ed25519-certpol" +cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${ED25519_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${ED25519_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +cp ${ED25519_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca + +# Generate a carol Ed25519 certificate +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="03" +pki --gen --type ed25519 --outform pem > ${TEST_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.1" --flag "clientAuth" \ + --crl ${ED25519_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +# Generate a dave Ed25519 certificate +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="04" +pki --gen --type ed25519 --outform pem > ${TEST_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.2" --flag "clientAuth" \ + --crl ${ED25519_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +################################################################################ +# strongSwan Monster Root CA # +################################################################################ + +# Generate strongSwan Monster Root CA +pki --gen --type rsa --size ${MONSTER_CA_RSA_SIZE} --outform pem > ${MONSTER_KEY} +pki --self --type rsa --in ${MONSTER_KEY} \ + --not-before "01.05.09 15:00:00" --not-after "01.05.59 15:00:00" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan Monster CA" \ + --outform pem > ${MONSTER_CERT} + +# Put a copy in the ikev2/after-2038-certs scenario +TEST="${TEST_DIR}/ikev2/after-2038-certs" +cp ${MONSTER_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ +cp ${MONSTER_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts/ + +# Generate a moon Monster certificate +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="01" +pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ + --in ${TEST_KEY} --san ${CN} \ + --not-before "01.05.09 15:00:00" --not-after "01.05.39 15:00:00" - \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Monster, CN=${CN}" \ + --crl ${MONSTER_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${MONSTER_DIR}/certs/${SERIAL}.pem + +# Generate a carol Monster certificate +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="02" +pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ + --in ${TEST_KEY} --san ${CN} \ + --not-before "01.05.09 15:00:00" --not-after "01.05.39 15:00:00" - \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Monster, CN=${CN}" \ + --crl ${MONSTER_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${MONSTER_DIR}/certs/${SERIAL}.pem + +################################################################################ +# Bliss CA # +################################################################################ + +# Generate BLISS Root CA with 192 bit security strength +pki --gen --type bliss --size 4 > ${BLISS_KEY} +pki --self --type bliss --in ${BLISS_KEY} --digest sha3_512 \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan BLISS Root CA" > ${BLISS_CERT} + +# Put a copy in the ikev2/rw-newhope-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +cp ${BLISS_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts/ +cp ${BLISS_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts/ +cp ${BLISS_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +cp ${BLISS_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts/ +cp ${BLISS_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts/ +cp ${BLISS_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +cp ${BLISS_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca/ +cp ${BLISS_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca/ +cp ${BLISS_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca/ + +# Generate a carol BLISS certificate with 128 bit security strength +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.der" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.der" +CN="carol@strongswan.org" +SERIAL="01" +pki --gen --type bliss --size 1 > ${TEST_KEY} +pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS I, CN=${CN}" \ + --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} +cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private/ +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs/ + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss/ +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509/ + +# Generate a dave BLISS certificate with 160 bit security strength +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.der" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.der" +CN="dave@strongswan.org" +SERIAL="02" +pki --gen --type bliss --size 3 > ${TEST_KEY} +pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS III, CN=${CN}" \ + --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} +cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private/ +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs/ + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss/ +cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509/ + +# Generate a moon BLISS certificate with 192 bit security strength +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.der" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.der" +CN="moon.strongswan.org" +SERIAL="03" +pki --gen --type bliss --size 4 > ${TEST_KEY} +pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS IV, CN=${CN}" \ + --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} +cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private/ +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/certs/ + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss/ +cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509/ diff --git a/testing/scripts/build-guestimages b/testing/scripts/build-guestimages index 5116d095e..23091234a 100755 --- a/testing/scripts/build-guestimages +++ b/testing/scripts/build-guestimages @@ -65,8 +65,9 @@ do echo "/testresults /var/www/testresults 9p trans=virtio,version=9p2000.L 0 0" >> $LOOPDIR/etc/fstab execute_chroot "a2enmod -q cgid" 0 execute_chroot "a2enmod -q rewrite" 0 - execute_chroot "ln -s /etc/openssl/certs /var/www/certs" 0 - execute_chroot "/etc/openssl/generate-crl" 0 + execute_chroot "mkdir /var/www/certs" 0 + execute_chroot "mkdir /var/www/certs/research /var/www/certs/sales" 0 + execute_chroot "/etc/ca/generate-crl" 0 execute_chroot "rm -rf /var/lib/ldap/*" 0 execute_chroot "slapadd -l /etc/ldap/ldif.txt -f /etc/ldap/slapd.conf" 0 execute_chroot "chown -R openldap:openldap /var/lib/ldap" 0 diff --git a/testing/tests/botan/rw-cert/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/botan/rw-cert/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/botan/rw-cert/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/botan/rw-ecp256/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/botan/rw-ecp256/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/botan/rw-ecp256/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/botan/rw-modp3072/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/botan/rw-modp3072/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/botan/rw-modp3072/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.conf index 73e17062d..842152713 100644 --- a/testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.conf @@ -16,6 +16,6 @@ conn alice leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" rightsubnet=PH_IP_ALICE/32 auto=add diff --git a/testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.conf index 7140befe6..953fa18ff 100644 --- a/testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.conf @@ -16,6 +16,6 @@ conn venus leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev1/multi-level-ca-cr-init/hosts/moon/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca-cr-init/hosts/moon/etc/ipsec.conf index 25716969f..998fa3f8f 100644 --- a/testing/tests/ikev1/multi-level-ca-cr-init/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca-cr-init/hosts/moon/etc/ipsec.conf @@ -22,12 +22,12 @@ conn alice leftsubnet=PH_IP_ALICE/32 right=PH_IP_CAROL rightid=carol@strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=PH_IP_DAVE rightid=dave@strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add diff --git a/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.conf index 96da6db1e..43cbb47f6 100644 --- a/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.conf @@ -13,7 +13,7 @@ conn %default leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 diff --git a/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.conf index bafec31f4..0cef26c6c 100644 --- a/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.conf @@ -13,7 +13,7 @@ conn %default leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn venus rightsubnet=PH_IP_VENUS/32 diff --git a/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/moon/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/moon/etc/ipsec.conf index 7bae1ab0f..f6224edfb 100644 --- a/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca-cr-resp/hosts/moon/etc/ipsec.conf @@ -21,11 +21,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add diff --git a/testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.conf index 3df94ba2d..09dfafce6 100644 --- a/testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.conf @@ -13,12 +13,12 @@ conn %default leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.conf index 28389112a..8f1609e5e 100644 --- a/testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.conf @@ -13,12 +13,12 @@ conn %default leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.conf b/testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.conf index 2dfd40f99..ec4585411 100644 --- a/testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.conf @@ -21,11 +21,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" + rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA" auto=add diff --git a/testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/aacerts/aa.pem b/testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem similarity index 100% rename from testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/aacerts/aa.pem rename to testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem diff --git a/testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/private/aa.pem b/testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/private/aaKey.pem similarity index 100% rename from testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/private/aa.pem rename to testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/private/aaKey.pem diff --git a/testing/tests/ikev2/acert-cached/posttest.dat b/testing/tests/ikev2/acert-cached/posttest.dat index e5b8d291c..43c69597c 100644 --- a/testing/tests/ikev2/acert-cached/posttest.dat +++ b/testing/tests/ikev2/acert-cached/posttest.dat @@ -7,5 +7,5 @@ dave::iptables-restore < /etc/iptables.flush moon::rm /etc/ipsec.d/acerts/carol-sales-finance.pem moon::rm /etc/ipsec.d/acerts/dave-sales-expired.pem moon::rm /etc/ipsec.d/acerts/dave-marketing.pem -moon::rm /etc/ipsec.d/private/aa.pem -moon::rm /etc/ipsec.d/aacerts/aa.pem +moon::rm /etc/ipsec.d/private/aaKey.pem +moon::rm /etc/ipsec.d/aacerts/aaCert.pem diff --git a/testing/tests/ikev2/acert-cached/reissue.txt b/testing/tests/ikev2/acert-cached/reissue.txt deleted file mode 100644 index 6ab98f12a..000000000 --- a/testing/tests/ikev2/acert-cached/reissue.txt +++ /dev/null @@ -1,23 +0,0 @@ -# Carols acert for sales and finance -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \ - --in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \ - --group sales --group finance -l 87600 -f pem \ - > hosts/moon/etc/ipsec.d/acerts/carol-sales-finance.pem - -# Daves acert for marketing -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \ - --in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \ - --group marketing -l 87600 -f pem \ - > hosts/moon/etc/ipsec.d/acerts/dave-marketing.pem - -# Daves expired acert for sales -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \ - --in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \ - --group sales -F "01.01.13 08:00:00" -l 240 -f pem \ - > hosts/moon/etc/ipsec.d/acerts/dave-sales-expired.pem diff --git a/testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/aacerts/aa.pem b/testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem similarity index 100% rename from testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/aacerts/aa.pem rename to testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem diff --git a/testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/private/aa.pem b/testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/private/aaKey.pem similarity index 100% rename from testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/private/aa.pem rename to testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/private/aaKey.pem diff --git a/testing/tests/ikev2/acert-fallback/posttest.dat b/testing/tests/ikev2/acert-fallback/posttest.dat index 2ccb86a41..b90119c6b 100644 --- a/testing/tests/ikev2/acert-fallback/posttest.dat +++ b/testing/tests/ikev2/acert-fallback/posttest.dat @@ -4,5 +4,5 @@ moon::iptables-restore < /etc/iptables.flush carol::iptables-restore < /etc/iptables.flush carol::rm /etc/ipsec.d/acerts/carol-sales.pem carol::rm /etc/ipsec.d/acerts/carol-finance-expired.pem -moon::rm /etc/ipsec.d/private/aa.pem -moon::rm /etc/ipsec.d/aacerts/aa.pem +moon::rm /etc/ipsec.d/private/aaKey.pem +moon::rm /etc/ipsec.d/aacerts/aaCert.pem diff --git a/testing/tests/ikev2/acert-fallback/reissue.txt b/testing/tests/ikev2/acert-fallback/reissue.txt deleted file mode 100644 index 2e1cd6892..000000000 --- a/testing/tests/ikev2/acert-fallback/reissue.txt +++ /dev/null @@ -1,15 +0,0 @@ -# Carols expired acert for finance -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \ - --in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \ - --group finance -F "01.01.13 08:00:00" -l 240 -f pem \ - > ./hosts/carol/etc/ipsec.d/acerts/carol-finance-expired.pem - -# Carols valid acert for sales -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \ - --in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \ - --group sales -l 87600 -f pem \ - > hosts/carol/etc/ipsec.d/acerts/carol-sales.pem diff --git a/testing/tests/ikev2/acert-inline/evaltest.dat b/testing/tests/ikev2/acert-inline/evaltest.dat index 136335490..cf0e7be72 100644 --- a/testing/tests/ikev2/acert-inline/evaltest.dat +++ b/testing/tests/ikev2/acert-inline/evaltest.dat @@ -3,9 +3,9 @@ dave:: ipsec status 2> /dev/null::home.*ESTABLISHED.*dave@strongswan.org.*moon.s moon:: ipsec status 2> /dev/null::rw\[1]: ESTABLISHED.*moon.strongswan.org.*carol@strongswan.org::YES moon:: ipsec status 2> /dev/null::rw\[2]: ESTABLISHED.*moon.strongswan.org.*dave@strongswan.org::NO moon::cat /var/log/daemon.log::constraint check failed: group membership to 'sales' required::YES -carol::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=Linux strongSwan, CN=strongSwan AA\"::YES -dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=Linux strongSwan, CN=strongSwan AA\"::YES -dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=Linux strongSwan, CN=expired AA\"::YES +carol::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=strongSwan Project, CN=strongSwan Attribute Authority\"::YES +dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=strongSwan Project, CN=strongSwan Attribute Authority\"::YES +dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=strongSwan Project, CN=strongSwan Legacy AA\"::YES dave::cat /var/log/daemon.log::received AUTHENTICATION_FAILED notify error::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 -W 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::NO diff --git a/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aa-expired.pem b/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aaCert-expired.pem similarity index 100% rename from testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aa-expired.pem rename to testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aaCert-expired.pem diff --git a/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aa.pem b/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem similarity index 100% rename from testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aa.pem rename to testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem diff --git a/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aa-expired.pem b/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aaKey-expired.pem similarity index 100% rename from testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aa-expired.pem rename to testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aaKey-expired.pem diff --git a/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aa.pem b/testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aaKey.pem similarity index 100% rename from testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aa.pem rename to testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aaKey.pem diff --git a/testing/tests/ikev2/acert-inline/posttest.dat b/testing/tests/ikev2/acert-inline/posttest.dat index a0ef98440..bd2272b21 100644 --- a/testing/tests/ikev2/acert-inline/posttest.dat +++ b/testing/tests/ikev2/acert-inline/posttest.dat @@ -7,7 +7,7 @@ dave::iptables-restore < /etc/iptables.flush carol::rm /etc/ipsec.d/acerts/carol-sales.pem dave::rm /etc/ipsec.d/acerts/dave-expired-aa.pem dave::rm /etc/ipsec.d/acerts/dave-marketing.pem -moon::rm /etc/ipsec.d/private/aa-expired.pem -moon::rm /etc/ipsec.d/private/aa.pem -moon::rm /etc/ipsec.d/aacerts/aa-expired.pem -moon::rm /etc/ipsec.d/aacerts/aa.pem +moon::rm /etc/ipsec.d/private/aaKey-expired.pem +moon::rm /etc/ipsec.d/private/aaKey.pem +moon::rm /etc/ipsec.d/aacerts/aaCert-expired.pem +moon::rm /etc/ipsec.d/aacerts/aaCert.pem diff --git a/testing/tests/ikev2/acert-inline/reissue.txt b/testing/tests/ikev2/acert-inline/reissue.txt deleted file mode 100644 index 994fa0f60..000000000 --- a/testing/tests/ikev2/acert-inline/reissue.txt +++ /dev/null @@ -1,23 +0,0 @@ -# Carols sales acert -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem --in \ - ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \ - --group sales -l 87600 -f pem \ - > hosts/carol/etc/ipsec.d/acerts/carol-sales.pem - -# Daves marketing acert -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \ - --in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \ - --group marketing -l 87600 -f pem - > hosts/dave/etc/ipsec.d/acerts/dave-marketing.pem - -# Daves sales acert from expired AA -pki --acert \ - --issuercert hosts/moon/etc/ipsec.d/aacerts/aa-expired.pem \ - --issuerkey hosts/moon/etc/ipsec.d/private/aa-expired.pem \ - --in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \ - --group sales -l 87600 -f pem \ - > hosts/dave/etc/ipsec.d/acerts/dave-expired-aa.pem diff --git a/testing/tests/ikev2/any-interface/hosts/bob/etc/ipsec.conf b/testing/tests/ikev2/any-interface/hosts/bob/etc/ipsec.conf index c232c4332..25b05f7f0 100644 --- a/testing/tests/ikev2/any-interface/hosts/bob/etc/ipsec.conf +++ b/testing/tests/ikev2/any-interface/hosts/bob/etc/ipsec.conf @@ -16,7 +16,7 @@ conn %default left=%any leftcert=bobCert.pem -conn sun +conn sun right=PH_IP_SUN1 - rightid="C=CH, O=Linux strongSwan, CN=sun.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=sun.strongswan.org" auto=route diff --git a/testing/tests/ikev2/any-interface/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/any-interface/hosts/moon/etc/ipsec.conf index 17fcf0a7a..c44c6bb39 100644 --- a/testing/tests/ikev2/any-interface/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/any-interface/hosts/moon/etc/ipsec.conf @@ -18,10 +18,10 @@ conn %default conn alice right=PH_IP_ALICE - rightid="C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org" + rightid="C=CH, O=strongSwan Project, OU=Sales, CN=alice@strongswan.org" auto=route -conn sun +conn sun right=PH_IP_SUN - rightid="C=CH, O=Linux strongSwan, CN=sun.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=sun.strongswan.org" auto=route diff --git a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.conf index 69ba4205f..1c9a7c4f0 100644 --- a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.conf @@ -6,7 +6,7 @@ config setup ca strongswan cacert=strongswanCert.pem - crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList" auto=add conn %default diff --git a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/stale.crl similarity index 100% rename from testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl rename to testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/stale.crl diff --git a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf index 25656cbda..57fb7dd1b 100644 --- a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf @@ -6,7 +6,7 @@ config setup ca strongswan cacert=strongswanCert.pem - crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList" auto=add conn %default diff --git a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.d/crls/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.d/crls/stale.crl similarity index 100% rename from testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.d/crls/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl rename to testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.d/crls/stale.crl diff --git a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.conf index 95cd144ba..fa67815e3 100644 --- a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.conf @@ -11,7 +11,7 @@ conn %default conn home left=PH_IP_CAROL - leftcert=carolRevokedCert.pem + leftcert=carolCert.pem leftid=carol@strongswan.org right=PH_IP_MOON rightsubnet=10.1.0.0/16 diff --git a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/certs/carolRevokedCert.pem b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem similarity index 100% rename from testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/certs/carolRevokedCert.pem rename to testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem diff --git a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/private/carolRevokedKey.pem b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem similarity index 100% rename from testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/private/carolRevokedKey.pem rename to testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem diff --git a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.secrets b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.secrets index 8e31be4cb..fac55d63b 100644 --- a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.secrets +++ b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.secrets @@ -1,3 +1,3 @@ # /etc/ipsec.secrets - strongSwan IPsec secrets file -: RSA carolRevokedKey.pem +: RSA carolKey.pem diff --git a/testing/tests/ikev2/crl-revoked/posttest.dat b/testing/tests/ikev2/crl-revoked/posttest.dat index d742e8410..c6d6235f9 100644 --- a/testing/tests/ikev2/crl-revoked/posttest.dat +++ b/testing/tests/ikev2/crl-revoked/posttest.dat @@ -1,4 +1,2 @@ moon::ipsec stop carol::ipsec stop -carol::rm /etc/ipsec.d/private/* -carol::rm /etc/ipsec.d/certs/* diff --git a/testing/tests/ikev2/crl-to-cache/evaltest.dat b/testing/tests/ikev2/crl-to-cache/evaltest.dat index fe6a55aae..f7417da6d 100644 --- a/testing/tests/ikev2/crl-to-cache/evaltest.dat +++ b/testing/tests/ikev2/crl-to-cache/evaltest.dat @@ -1,4 +1,4 @@ moon:: ipsec status 2> /dev/null::rw.*ESTABLISHED.*moon.strongswan.org.*carol@strongswan.org::YES carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*carol@strongswan.org.*moon.strongswan.org::YES -moon:: cat /var/log/daemon.log::written crl .*/etc/ipsec.d/crls/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl::YES -carol::cat /var/log/daemon.log::written crl .*/etc/ipsec.d/crls/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl::YES +moon:: cat /var/log/daemon.log::written crl .*/etc/ipsec.d/crls/.*.crl::YES +carol::cat /var/log/daemon.log::written crl .*/etc/ipsec.d/crls/.*.crl::YES diff --git a/testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.conf index 995b347cf..9b28c50f5 100644 --- a/testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.conf @@ -5,7 +5,7 @@ config setup ca strongswan cacert=strongswanCert.pem - crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList" auto=add conn %default @@ -18,12 +18,12 @@ conn %default leftcert=carolCert.pem right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.conf index 320c0713c..082c2f2b5 100644 --- a/testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.conf @@ -5,7 +5,7 @@ config setup ca strongswan cacert=strongswanCert.pem - crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList" auto=add conn %default @@ -18,12 +18,12 @@ conn %default leftcert=daveCert.pem right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.conf index e67c9afb0..deae852d4 100644 --- a/testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.conf @@ -5,19 +5,19 @@ config setup ca strongswan cacert=strongswanCert.pem - crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList" auto=add -ca research +ca research cacert=researchCert.pem - crluri="ldap://ldap.strongswan.org/cn=Research CA, ou=Research, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=Research CA, ou=Research, o=strongSwan Project, c=CH?certificateRevocationList" auto=add - -ca sales + +ca sales cacert=salesCert.pem - crluri="ldap://ldap.strongswan.org/cn=Sales CA, ou=Sales, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=Sales CA, ou=Sales, o=strongSwan Project, c=CH?certificateRevocationList" auto=add - + conn %default ikelifetime=60m keylife=20m @@ -32,11 +32,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" + rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA" auto=add diff --git a/testing/tests/ikev2/multi-level-ca-revoked/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-revoked/hosts/carol/etc/ipsec.conf index 297e348ea..e6bd872b0 100644 --- a/testing/tests/ikev2/multi-level-ca-revoked/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-revoked/hosts/carol/etc/ipsec.conf @@ -17,5 +17,5 @@ conn home right=PH_IP_MOON rightsubnet=10.1.0.0/16 rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add diff --git a/testing/tests/ikev2/multi-level-ca-revoked/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-revoked/hosts/moon/etc/ipsec.conf index a3517967a..e2c8df2d6 100644 --- a/testing/tests/ikev2/multi-level-ca-revoked/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-revoked/hosts/moon/etc/ipsec.conf @@ -3,11 +3,6 @@ config setup strictcrlpolicy=yes -ca strongswan - cacert=strongswanCert.pem - crluri=http://crl.strongswan.org/strongswan.crl - auto=add - conn %default ikelifetime=60m keylife=20m @@ -21,5 +16,5 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add diff --git a/testing/tests/ikev2/multi-level-ca-skipped/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-skipped/hosts/carol/etc/ipsec.conf index 297e348ea..e6bd872b0 100644 --- a/testing/tests/ikev2/multi-level-ca-skipped/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-skipped/hosts/carol/etc/ipsec.conf @@ -17,5 +17,5 @@ conn home right=PH_IP_MOON rightsubnet=10.1.0.0/16 rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add diff --git a/testing/tests/ikev2/multi-level-ca-skipped/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-skipped/hosts/moon/etc/ipsec.conf index fe69abe92..e2c8df2d6 100644 --- a/testing/tests/ikev2/multi-level-ca-skipped/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-skipped/hosts/moon/etc/ipsec.conf @@ -3,11 +3,6 @@ config setup strictcrlpolicy=yes -ca strongswan - cacert=strongswanCert.pem - crluri=http://crl.strongswan.org/not-available.crl - auto=add - conn %default ikelifetime=60m keylife=20m @@ -21,5 +16,5 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add diff --git a/testing/tests/ikev2/multi-level-ca-strict/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-strict/hosts/carol/etc/ipsec.conf index d65d37be2..611f25995 100644 --- a/testing/tests/ikev2/multi-level-ca-strict/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-strict/hosts/carol/etc/ipsec.conf @@ -14,12 +14,12 @@ conn %default leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev2/multi-level-ca-strict/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-strict/hosts/dave/etc/ipsec.conf index 121f7d41a..abe0f3ad9 100644 --- a/testing/tests/ikev2/multi-level-ca-strict/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-strict/hosts/dave/etc/ipsec.conf @@ -14,12 +14,12 @@ conn %default leftsendcert=ifasked right=PH_IP_MOON rightid=@moon.strongswan.org - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.conf index a49c833b8..c58de462b 100644 --- a/testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.conf @@ -22,11 +22,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA" + rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA" auto=add diff --git a/testing/tests/ikev2/multi-level-ca/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/multi-level-ca/hosts/moon/etc/ipsec.conf index 3a5aaa6b6..a607a0dc8 100644 --- a/testing/tests/ikev2/multi-level-ca/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/multi-level-ca/hosts/moon/etc/ipsec.conf @@ -2,11 +2,6 @@ config setup -ca strongswan - cacert=strongswanCert.pem - crluri=http://crl.strongswan.org/strongswan.crl - auto=add - conn %default ikelifetime=60m keylife=20m @@ -21,11 +16,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" + rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA" auto=add diff --git a/testing/tests/ikev2/net2net-fragmentation/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-fragmentation/hosts/moon/etc/strongswan.conf index 02280ac2f..ea9e55c5f 100644 --- a/testing/tests/ikev2/net2net-fragmentation/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-fragmentation/hosts/moon/etc/strongswan.conf @@ -3,5 +3,5 @@ charon { load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown - fragment_size = 1024 + fragment_size = 1088 } diff --git a/testing/tests/ikev2/net2net-fragmentation/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-fragmentation/hosts/sun/etc/strongswan.conf index 02280ac2f..ea9e55c5f 100644 --- a/testing/tests/ikev2/net2net-fragmentation/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-fragmentation/hosts/sun/etc/strongswan.conf @@ -3,5 +3,5 @@ charon { load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac stroke kernel-netlink socket-default updown - fragment_size = 1024 + fragment_size = 1088 } diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.conf index bcc6d5b69..7c8346b02 100644 --- a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.conf @@ -13,12 +13,12 @@ conn net-net left=PH_IP_MOON leftsubnet=10.1.0.0/16 leftid=@moon.strongswan.org - leftsigkey=moonPub.der + leftsigkey=moonPub.pem leftauth=pubkey leftfirewall=yes right=PH_IP_SUN rightsubnet=10.2.0.0/16 rightid=@sun.strongswan.org - rightsigkey=sunPub.der + rightsigkey=sunPub.pem rightauth=pubkey auto=add diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/moonPub.der b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/moonPub.pem similarity index 100% rename from testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/moonPub.der rename to testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/moonPub.pem diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/sunPub.der b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/sunPub.pem similarity index 100% rename from testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/sunPub.der rename to testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/sunPub.pem diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/private/moonKey.der b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/private/moonKey.der deleted file mode 100644 index 49e0111f2815f2200aa2a23c6fe6a09904e06a38..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1187 zcmV;U1YG+tf&`xe00M#m0DhWBga}?io3-Z-NhE$~C(HENoz&zvRr3{QayhmW6_YsQI<-{lm@Qm7!FX!e@UeiY0ErT?*v>iyebZ>hSc<5Zc_7CSh00; zhDfyyX?iE9GCzlx!jh!!X42aeinl%f519Zk&1F_;Hc-|D*QrX1l-{=2!RFfb?==xW z2odfS$(jp2b&bg{X#3o#64}iZ@%6vVi|T{x6#J9ZX<&J+Xkdx=mz~wNI!T!trUBNw z&p+JGo5U=`(4&Cffm^~^2asHv8DT-&=iKbRfqja!!oS_~i%@jzM4xbQEjraIj{fKj zL#)WOBj)7~Y2EeAV*&vK0)hbm6&bdc0c8sBNc-2e+iGU9OsLN9qkCSCQ!Yc5r@g$I z%=!%s{oT%uwCaVBqV0A#L$@KAtH;p<0%FVRj7BZy_cXaD)(>5uTvx|IBYqF(xP9Z~ z9g~wm3?3}z>9Iz$3YM8m7;w^NczM{D9*R{0nScl)JC0`FV$N1hoHrL3lc4CSM@d-^ z?>S4I?V;y6H?hWK(&TnZa0z-hpSo$UT2tMz{>b`a@j)h`3z1XdS7x>UWW8yt8 zHaMAC_yp)H6QxJq%zbV50)c@5!5fDK20Ugi;Gt-_1iRVA6arIV$6iC{#tb|cgl^t3 zyQ3)IuZq7>F?I72q$V~++Ybkq%6~S{Pnl+bcOqn_JRf$VqW&ccpvsPx5+pdi)w3t* zC3GN1^0(0bKc?yjp$yri4~dkiTJ;4HVKG=tU&2SH)}8Q+`oXoLJA4&?0)c@5r`6oW zH0F9>xfl?eduGqAH{L_H)et4W+E2YO?mBZeEQg;SB^*cXn506pJKVAnE?T0oU_x$P zYAhSFE)Y&_w_gQy*?HrEM%bOWl!XBL(`yKIR|`K1#dSnL(M?N7`c=1k9V?JCnH)-m zf>vWES<);O11IK#Vyrin+CJCs*vlTbl`JpCIliD>QPz1D(o(qp0)c>U zvJ4`9cRoQwTYg3KUn!YrkAUPkZC2jSgTRuM_TygvML8IPA!0oh}_zyqPN7%j{E#jn1wInn(m#cN98@=<%_nry8^b8p|K*3z(^Zt9Z`l|1355y BKKlRw diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.secrets b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.secrets deleted file mode 100644 index b9ec17dbc..000000000 --- a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.secrets +++ /dev/null @@ -1,3 +0,0 @@ -# /etc/ipsec.secrets - strongSwan IPsec secrets file - -: RSA moonKey.der diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.conf b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.conf index 4fe2e67de..e94022fca 100644 --- a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.conf +++ b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.conf @@ -13,10 +13,10 @@ conn net-net left=PH_IP_SUN leftsubnet=10.2.0.0/16 leftid=@sun.strongswan.org - leftsigkey=sunPub.der + leftsigkey=sunPub.pem leftfirewall=yes right=PH_IP_MOON rightsubnet=10.1.0.0/16 rightid=@moon.strongswan.org - rightsigkey=moonPub.der + rightsigkey=moonPub.pem auto=add diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.der b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.pem similarity index 100% rename from testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.der rename to testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.pem diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/sunPub.der b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/sunPub.pem similarity index 100% rename from testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/sunPub.der rename to testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/sunPub.pem diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/private/sunKey.der b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/private/sunKey.der deleted file mode 100644 index 7c284f93917a34b466a47bac2d68aa61fce9d685..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1189 zcmV;W1X}wrf&`%g00M#m0RW;(D{>uZP)<)^#-QfK43!ajI*W2MDVdG3 zRj@rSmp%YNipHqh-?fJ7#c18|LJSjth6#+r+ca;W(@EvpAqi-yZA|chzQyfdPvLY1 z#kIE9gf~T#7m@xa=D7W;*n@%ch!3oeiic_m!c_A$EPd-Z>I!^P;!^?v0|J5p00ip)DwigBo-q{SNk+Am)6?7~45B3fVVkaA-Ea{Q z#+R@X9GwAaZhRpGG?2j9JI%=ry<86o!cHo#x_F@$C}4R!w5i|Hbfy%hIHGWY=J&0R z4wmTdx9&ubq?Le_8?s(Z&rN|$VH0!oo1kH73*2nx+sRKgeCC)DzYjp?fVM-+=iqh& zA0tkLD?z*v`zu&c`TEjsI|aZ6`1EK z6_;R|cbW)}Ho@!RUb|kJcXZj=&5)5WFu0B(U!G?E4XXPYiaWW~<|lh%RABAm*i7g1 zGfVbCf}DbFycJ1eQ+LG|+X8`s0RH1Jiysz;Uh7P!x@wz`l6ma!@MSTo;=54N%)fst z2?6rO;6{aPRKqy*x0yrut!*Hwf8eBthRtP~|36jZsKmgWtx{=q7!4dL1-b%@SltDu z9Xcj~Q~KsEwdwwmgt8Bxy<%$=1x!lKel6yiG}#=#Bb<6;$jHs+0HXjr z*qFkXGBbCr?$@-k6x?{|zYUx$3-46zQ)p#Jml#LaKn@*%RTQ4~LS9lq@{2>r)hkHS zfv!)-&{&@Mt(xgt1>z};_IVRrz}<6rVIDR!fQ2IyzuYC9+a*KQ(b2S$_5)tWDj+3N zoL&EEm91p4x8B2}by`s%bEONYIRb%!0IBTD2Wk%l>GCrgd`A*rw)^u+phI?X?0n#i zh<~aau&ehjm4sOG<1EmlB@oy99!S7&|LYi9S>8juswz1`aDyuo9yaj!y0d5-SthJp z<>;<&Xwh!~;-^F(Bk@#W10i3()0XlLSlx#+sdMiT&E^v-7rmzKF*f$S;_p9iM*@L> zY^u{c5P`ZOccmVmI(T-tlKVx}v%PY%pN;d3@I!?UWraE_v=gf1V-%z;KH-5(T-Vz; z$A#gm$%=(FkZJoKXGS~&>>IOA`(i!S==Y_T6eJ>5t`}l|=ou3{!-9^B;Uf&B0zWTt zYQv0ZKB`7z$nDF|>DR(eJT?`gZU@DC0)c@5zlK~s*+!Gc@oohDbCR8VN;)ZRVH4|{ z0qA{P^S*JfqWCzas4ADWUV{k&QWP;R-u*jw$%zF^@{Y(G^O&7!hH=Ye>dEjH%oA^F zw~XY~(}QuC?xpOG&{w*S4sRq1U?3rJ_FL(a*SytE;P?aOy=#MoB0E(?4hdT*@Eg4f DYy?a> diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.secrets b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.secrets deleted file mode 100644 index 6aa9ed562..000000000 --- a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.secrets +++ /dev/null @@ -1,3 +0,0 @@ -# /etc/ipsec.secrets - strongSwan IPsec secrets file - -: RSA sunKey.der diff --git a/testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi b/testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi similarity index 94% rename from testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi rename to testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi index 4e2cc2860..ea9be3d92 100755 --- a/testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi +++ b/testing/tests/ikev2/ocsp-local-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi @@ -1,6 +1,6 @@ #!/bin/bash -cd /etc/openssl +cd /etc/ca echo "Content-type: application/ocsp-response" echo "" diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.conf index 630117af9..ba484eb5a 100644 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.conf @@ -31,11 +31,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" + rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA" auto=add diff --git a/testing/tests/ikev2/ocsp-multi-level/pretest.dat b/testing/tests/ikev2/ocsp-multi-level/pretest.dat index eedd737ac..b660f2dcf 100644 --- a/testing/tests/ikev2/ocsp-multi-level/pretest.dat +++ b/testing/tests/ikev2/ocsp-multi-level/pretest.dat @@ -4,5 +4,7 @@ dave::ipsec start moon::expect-connection alice carol::expect-connection alice carol::ipsec up alice +carol::ipsec up venus dave::expect-connection venus dave::ipsec up venus +dave::ipsec up alice \ No newline at end of file diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi similarity index 93% rename from testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi rename to testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi index 429061376..8c7b9cd13 100755 --- a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi +++ b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi @@ -1,6 +1,6 @@ #!/bin/bash -cd /etc/openssl +cd /etc/ca echo "Content-type: application/ocsp-response" echo "" diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.conf index 94eb58621..17225d287 100644 --- a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.conf @@ -15,7 +15,7 @@ conn %default rekeymargin=3m keyingtries=1 left=PH_IP_CAROL - leftcert=carolRevokedCert.pem + leftcert=carolCert.pem leftid=carol@strongswan.org conn home diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolRevokedCert.pem b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem similarity index 100% rename from testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolRevokedCert.pem rename to testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolRevokedKey.pem b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem similarity index 100% rename from testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolRevokedKey.pem rename to testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.secrets b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.secrets index 8e31be4cb..fac55d63b 100644 --- a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.secrets +++ b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.secrets @@ -1,3 +1,3 @@ # /etc/ipsec.secrets - strongSwan IPsec secrets file -: RSA carolRevokedKey.pem +: RSA carolKey.pem diff --git a/testing/tests/ikev2/ocsp-revoked/posttest.dat b/testing/tests/ikev2/ocsp-revoked/posttest.dat index d742e8410..c6d6235f9 100644 --- a/testing/tests/ikev2/ocsp-revoked/posttest.dat +++ b/testing/tests/ikev2/ocsp-revoked/posttest.dat @@ -1,4 +1,2 @@ moon::ipsec stop carol::ipsec stop -carol::rm /etc/ipsec.d/private/* -carol::rm /etc/ipsec.d/certs/* diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.conf index a1bc9b014..17225d287 100644 --- a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.conf @@ -15,7 +15,7 @@ conn %default rekeymargin=3m keyingtries=1 left=PH_IP_CAROL - leftcert=carolCert-ocsp.pem + leftcert=carolCert.pem leftid=carol@strongswan.org conn home diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert-ocsp.pem b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert.pem similarity index 100% rename from testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert-ocsp.pem rename to testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert.pem diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey-ocsp.pem b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey.pem similarity index 100% rename from testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey-ocsp.pem rename to testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey.pem diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.secrets b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.secrets index a89065443..fac55d63b 100644 --- a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.secrets +++ b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.secrets @@ -1,3 +1,3 @@ # /etc/ipsec.secrets - strongSwan IPsec secrets file -: RSA carolKey-ocsp.pem +: RSA carolKey.pem diff --git a/testing/tests/ikev2/ocsp-signer-cert/posttest.dat b/testing/tests/ikev2/ocsp-signer-cert/posttest.dat index 220bc2c1d..c6d6235f9 100644 --- a/testing/tests/ikev2/ocsp-signer-cert/posttest.dat +++ b/testing/tests/ikev2/ocsp-signer-cert/posttest.dat @@ -1,4 +1,2 @@ moon::ipsec stop carol::ipsec stop -carol::rm /etc/ipsec.d/certs/* -carol::rm /etc/ipsec.d/private/* diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.conf index 27af8e7a8..fa68b2a2c 100644 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.conf @@ -10,14 +10,14 @@ conn %default keyingtries=1 keyexchange=ikev2 left=PH_IP_CAROL - leftcert=carolCert-ifuri.pem + leftcert=carolCert.pem right=PH_IP_MOON rightid=@moon.strongswan.org conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert-ifuri.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert.pem similarity index 100% rename from testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert-ifuri.pem rename to testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert.pem diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.conf index aa07085f4..b007f527b 100644 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.conf @@ -2,7 +2,7 @@ config setup strictcrlpolicy=ifuri - + conn %default ikelifetime=60m keylife=20m @@ -10,14 +10,14 @@ conn %default keyingtries=1 keyexchange=ikev2 left=PH_IP_DAVE - leftcert=daveCert-ifuri.pem + leftcert=daveCert.pem right=PH_IP_MOON rightid=@moon.strongswan.org conn alice rightsubnet=PH_IP_ALICE/32 auto=add - + conn venus rightsubnet=PH_IP_VENUS/32 auto=add diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert-ifuri.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert.pem similarity index 100% rename from testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert-ifuri.pem rename to testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert.pem diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.conf index 02db316d7..1ed94f98e 100644 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.conf @@ -16,11 +16,11 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" + rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" + rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA" auto=add diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.conf index 816db6e1e..74d363fe1 100644 --- a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.conf @@ -8,7 +8,7 @@ ca strongswan-ca ocspuri1=http://bob.strongswan.org:8800 ocspuri2=http://ocsp.strongswan.org:8880 auto=add - + conn %default keyexchange=ikev2 ikelifetime=60m @@ -16,7 +16,7 @@ conn %default rekeymargin=3m keyingtries=1 left=PH_IP_CAROL - leftcert=carolCert-ocsp.pem + leftcert=carolCert.pem leftid=carol@strongswan.org conn home diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert-ocsp.pem b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert.pem similarity index 100% rename from testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert-ocsp.pem rename to testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert.pem diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey-ocsp.pem b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey.pem similarity index 100% rename from testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey-ocsp.pem rename to testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey.pem diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.secrets b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.secrets index a89065443..fac55d63b 100644 --- a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.secrets +++ b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.secrets @@ -1,3 +1,3 @@ # /etc/ipsec.secrets - strongSwan IPsec secrets file -: RSA carolKey-ocsp.pem +: RSA carolKey.pem diff --git a/testing/tests/ikev2/ocsp-timeouts-good/posttest.dat b/testing/tests/ikev2/ocsp-timeouts-good/posttest.dat index 220bc2c1d..c6d6235f9 100644 --- a/testing/tests/ikev2/ocsp-timeouts-good/posttest.dat +++ b/testing/tests/ikev2/ocsp-timeouts-good/posttest.dat @@ -1,4 +1,2 @@ moon::ipsec stop carol::ipsec stop -carol::rm /etc/ipsec.d/certs/* -carol::rm /etc/ipsec.d/private/* diff --git a/testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi b/testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi similarity index 93% rename from testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi rename to testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi index 72aa7a6c4..bce963fad 100755 --- a/testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi +++ b/testing/tests/ikev2/ocsp-untrusted-cert/hosts/winnetou/etc/ca/ocsp/ocsp.cgi @@ -1,6 +1,6 @@ #!/bin/bash -cd /etc/openssl +cd /etc/ca echo "Content-type: application/ocsp-response" echo "" diff --git a/testing/tests/ikev2/rw-eap-peap-md5/evaltest.dat b/testing/tests/ikev2/rw-eap-peap-md5/evaltest.dat index 6b609f81d..e1993fd43 100644 --- a/testing/tests/ikev2/rw-eap-peap-md5/evaltest.dat +++ b/testing/tests/ikev2/rw-eap-peap-md5/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES carol::cat /var/log/daemon.log::EAP method EAP_PEAP succeeded, MSK established::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES dave:: cat /var/log/daemon.log::allow mutual EAP-only authentication::YES dave:: cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES @@ -17,7 +17,7 @@ dave:: ipsec status 2> /dev/null::home.*ESTABLISHED.*dave@strongswan.org.*CN=moo moon:: ipsec status 2> /dev/null::rw-eap[{]1}.*INSTALLED, TUNNEL::YES moon:: ipsec status 2> /dev/null::rw-eap[{]2}.*INSTALLED::NO carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES -dave:: ipsec status 2> /dev/null::home.*INSTALLED::NO +dave:: ipsec status 2> /dev/null::home.*INSTALLED::NO carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/ipsec.conf index dd1b89302..5d99639bf 100644 --- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/ipsec.conf @@ -15,7 +15,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/ipsec.conf index a46071a3a..93acb0905 100644 --- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/ipsec.conf @@ -15,7 +15,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/evaltest.dat b/testing/tests/ikev2/rw-eap-peap-mschapv2/evaltest.dat index f77c31c56..7cf9edd2f 100644 --- a/testing/tests/ikev2/rw-eap-peap-mschapv2/evaltest.dat +++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::server requested EAP_MSCHAPV2 authentication::YES carol::cat /var/log/daemon.log::EAP method EAP_PEAP succeeded, MSK established::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES dave:: cat /var/log/daemon.log::allow mutual EAP-only authentication::YES dave:: cat /var/log/daemon.log::server requested EAP_MSCHAPV2 authentication::YES diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/ipsec.conf index dd1b89302..5d99639bf 100644 --- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/ipsec.conf @@ -15,7 +15,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/ipsec.conf index a46071a3a..93acb0905 100644 --- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/ipsec.conf @@ -15,7 +15,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/ipsec.conf index 944546ff8..f343e599d 100644 --- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/ipsec.conf @@ -18,5 +18,5 @@ conn home rightid=@moon.strongswan.org rightsubnet=10.1.0.0/16 rightauth=pubkey - aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_identity="C=CH, O=strongSwan Project, CN=aaa.strongswan.org" auto=add diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/ipsec.conf index b1a22e78a..aa4b9d2a6 100644 --- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/ipsec.conf @@ -18,5 +18,5 @@ conn home rightid=@moon.strongswan.org rightsubnet=10.1.0.0/16 rightauth=pubkey - aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_identity="C=CH, O=strongSwan Project, CN=aaa.strongswan.org" auto=add diff --git a/testing/tests/ikev2/rw-eap-tls-only/evaltest.dat b/testing/tests/ikev2/rw-eap-tls-only/evaltest.dat index b2e3ce620..2c1b69ed5 100644 --- a/testing/tests/ikev2/rw-eap-tls-only/evaltest.dat +++ b/testing/tests/ikev2/rw-eap-tls-only/evaltest.dat @@ -1,8 +1,8 @@ carol::cat /var/log/daemon.log::server requested EAP_TLS authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::negotiated TLS 1.2 using suite TLS_DHE_RSA_WITH_AES_128_GCM_SHA256::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES -moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES +moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' with EAP successful::YES moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED::YES carol::ipsec status 2> /dev/null::home.*ESTABLISHED::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/ipsec.conf index 756e3835c..c4f8c27ff 100644 --- a/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/ipsec.conf @@ -13,7 +13,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-tls-radius/evaltest.dat b/testing/tests/ikev2/rw-eap-tls-radius/evaltest.dat index b53b085f8..36c054419 100644 --- a/testing/tests/ikev2/rw-eap-tls-radius/evaltest.dat +++ b/testing/tests/ikev2/rw-eap-tls-radius/evaltest.dat @@ -1,7 +1,7 @@ -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with RSA.* successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with RSA.* successful::YES carol::cat /var/log/daemon.log::server requested EAP_TLS authentication::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES -moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES +moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' with EAP successful::YES moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED::YES carol::ipsec status 2> /dev/null::home.*ESTABLISHED::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES diff --git a/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/ipsec.conf index 6aaeb160f..05702c436 100644 --- a/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/ipsec.conf @@ -13,8 +13,8 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightsubnet=10.1.0.0/16 rightauth=pubkey - aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_identity="C=CH, O=strongSwan Project, CN=aaa.strongswan.org" auto=add diff --git a/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/ipsec.conf index deadcff6d..d82b0d5bf 100644 --- a/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/ipsec.conf @@ -15,7 +15,7 @@ conn rw-eap leftcert=moonCert.pem leftauth=pubkey leftfirewall=yes - rightid="C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org" + rightid="C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org" rightauth=eap-radius rightsendcert=never right=%any diff --git a/testing/tests/ikev2/rw-eap-ttls-only/evaltest.dat b/testing/tests/ikev2/rw-eap-ttls-only/evaltest.dat index 2285608b8..48aaf24ae 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/evaltest.dat +++ b/testing/tests/ikev2/rw-eap-ttls-only/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::server requested EAP_TTLS authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES carol::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::server requested EAP_TTLS authentication::YES dave:: cat /var/log/daemon.log::allow mutual EAP-only authentication::YES dave:: cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/ipsec.conf index 576d2cb99..9f093b71f 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/ipsec.conf @@ -13,7 +13,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/ipsec.conf index ba52ec31e..5f53072e4 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/ipsec.conf @@ -13,7 +13,7 @@ conn home leftauth=eap leftfirewall=yes right=PH_IP_MOON - rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org" rightauth=any rightsubnet=10.1.0.0/16 rightsendcert=never diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/ipsec.conf index c18df1c73..5013cfecf 100644 --- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/ipsec.conf @@ -16,5 +16,5 @@ conn home rightid=@moon.strongswan.org rightsubnet=10.1.0.0/16 rightauth=pubkey - aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_identity="C=CH, O=strongSwan Project, CN=aaa.strongswan.org" auto=add diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/ipsec.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/ipsec.conf index 2b58fbfca..7e1a6e29e 100644 --- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/ipsec.conf @@ -16,5 +16,5 @@ conn home rightid=@moon.strongswan.org rightsubnet=10.1.0.0/16 rightauth=pubkey - aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_identity="C=CH, O=strongSwan Project, CN=aaa.strongswan.org" auto=add diff --git a/testing/tests/ikev2/rw-pkcs8/description.txt b/testing/tests/ikev2/rw-pkcs8/description.txt index d5d817f52..84dd41480 100644 --- a/testing/tests/ikev2/rw-pkcs8/description.txt +++ b/testing/tests/ikev2/rw-pkcs8/description.txt @@ -1,8 +1,8 @@ -The roadwarriors carol and dave set up a connection each +The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on X.509 certificates and matching RSA private keys stored in the PKCS#8 format. moon's key is unencrypted, carol's key is encrypted with the default PKCS#5 v1.5 -DES algorithm and dave's key with the PKCS#5 v2.0 3DES algorithm. +DES algorithm and dave's key with the PKCS#5 v2.0 AES-128 algorithm.

Upon the successful establishment of the IPsec tunnels, leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/ikev2/strong-keys-certs/description.txt b/testing/tests/ikev2/strong-keys-certs/description.txt index fc1280729..0847159f4 100644 --- a/testing/tests/ikev2/strong-keys-certs/description.txt +++ b/testing/tests/ikev2/strong-keys-certs/description.txt @@ -1,7 +1,7 @@ This scenario is derived from ikev2/rw-cert. -The gateway moon uses a 2048 bit RSA private key protected by AES-128 +The gateway moon uses a 3072 bit RSA private key protected by AES-128 encryption whereas the roadwarriors carol and dave have an -AES-192 and AES-256 envelope, respectively. +AES-192 and AES-256 envelope, respectively. The X.509 certificate of the gateway moon uses a SHA-224 hash in its signature whereas the certificates of the roadwarriors carol and dave use SHA-384 and SHA-512, respectively. diff --git a/testing/tests/ikev2/wildcards/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/wildcards/hosts/moon/etc/ipsec.conf index a8183f59e..ce9e38413 100644 --- a/testing/tests/ikev2/wildcards/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/wildcards/hosts/moon/etc/ipsec.conf @@ -15,12 +15,12 @@ conn %default conn alice leftsubnet=PH_IP_ALICE/32 right=%any - rightid="C=CH, O=Linux strongSwan, OU=Research, CN=*" + rightid="C=CH, O=strongSwan Project, OU=Research, CN=*" auto=add - + conn venus leftsubnet=PH_IP_VENUS/32 right=%any - rightid="C=CH, O=Linux strongSwan, OU=Accounting, CN=*" + rightid="C=CH, O=strongSwan Project, OU=Accounting, CN=*" auto=add - + diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/ecdsa/moonKey.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/pkcs8/moonKey.pem similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/ecdsa/moonKey.pem rename to testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/pkcs8/moonKey.pem diff --git a/testing/tests/swanctl/crl-to-cache/evaltest.dat b/testing/tests/swanctl/crl-to-cache/evaltest.dat index fa61f19fb..91e34578f 100644 --- a/testing/tests/swanctl/crl-to-cache/evaltest.dat +++ b/testing/tests/swanctl/crl-to-cache/evaltest.dat @@ -1,8 +1,8 @@ carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org::NO moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org::NO -moon:: cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl::YES -moon:: cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/5da7dd700651327ee7b66db3b5e5e060ea2e4def_delta.crl::YES -carol::cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/5da7dd700651327ee7b66db3b5e5e060ea2e4def.crl::YES -carol::cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/5da7dd700651327ee7b66db3b5e5e060ea2e4def_delta.crl::YES +moon:: cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/.*.crl::YES +moon:: cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/.*_delta.crl::YES +carol::cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/.*.crl::YES +carol::cat /var/log/daemon.log::written crl .*/etc/swanctl/x509crl/.*_delta.crl::YES carol::cat /var/log/daemon.log::certificate was revoked::YES carol::cat /var/log/daemon.log::no trusted RSA public key found for.*moon.strongswan.org::YES diff --git a/testing/tests/swanctl/multi-level-ca/hosts/carol/etc/swanctl/x509ca/researchCert.pem b/testing/tests/swanctl/multi-level-ca/hosts/carol/etc/swanctl/x509ca/researchCert.pem deleted file mode 100644 index d53365f78..000000000 --- a/testing/tests/swanctl/multi-level-ca/hosts/carol/etc/swanctl/x509ca/researchCert.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTM1MFoXDTE5MDQwNDA5NTM1MFowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBAI1toW0bLcyBXAoy -FeLKGy4SibcNBZs/roChcwUav0foyLdCYMYFKEeHOLvIsTIjifpY4MPy3SBgQ5Xp -cs5vOFwW97jM6YfByqjx4+7qTBqOaLMXBbeJ3LIwQyJirpqHZzlsOscchxCjcMAM -POBGmWjpdOqULoLlwX9EFhBA2rEZB1iamgbUJ5M5eRNEubm8xR6Baw/0ORz/tt+t -xC9jxcjHoJnOFV0ss7Xs3d32PqhvKGgBxjVLZyq3zD/rMG2xXVyKPU46zelMCP1U -dsM62tL1cwAi4soka02GQrP/rwBhHt22bJMN4gNs5NSvhTdjjgwVYzLu63IFYBvW -8sFmiZI= ------END CERTIFICATE----- diff --git a/testing/tests/swanctl/multi-level-ca/hosts/dave/etc/swanctl/x509ca/salesCert.pem b/testing/tests/swanctl/multi-level-ca/hosts/dave/etc/swanctl/x509ca/salesCert.pem deleted file mode 100644 index a10a18cba..000000000 --- a/testing/tests/swanctl/multi-level-ca/hosts/dave/etc/swanctl/x509ca/salesCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuzCCAqOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTQzM1oXDTE5MDQwNDA5NTQzM1owSzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH/QcWm1Xfqnc9qaPP -GoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq4JI87exSen1ggmCV -Eib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6XL9DKcRk3TxZtv9S -uDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562kDtfQdwezat0LAyO -sVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAjgbBRI1A3iqoU3Nq1 -vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOBrzCBrDAPBgNVHRMBAf8EBTADAQH/ -MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1p0wul+oLkygwbQYD -VR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNI -MRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2Fu -IFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACRlTqXMjHy7r7rWnq/09yFn -Td6d+y6KkHj9kvYSA5q7xYdmP3I4+YP2qpPnYjSeyfMCl4ZIyMXnfUbz5OvuXp4S -CS0gIUJ6mK6+5f1a3USdB4Ce0Od4mkUIQmLzKFCRSqdhWoVzNJrl+BT1a5d9+aLW -AL5S2pqUoQPgG64MPghy3SyUb4qBeplk3JdR/6OgA5LQeNtLiI7Y/dbMM2Rvn284 -RIIxp2TqN2Hup6BNLHv6fLixdJpM+nG7ZjGYf+7dnuY6ZDhvIt18zr/2n1ELBQPh -M5SjYhGQIZVmNzNDrKGVAKta5LG8BwBGi0uXc9fBXWRcffI3N1/IZj/ob5t3WCg= ------END CERTIFICATE----- diff --git a/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/ipsec.conf b/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/ipsec.conf deleted file mode 100644 index 3a5aaa6b6..000000000 --- a/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/ipsec.conf +++ /dev/null @@ -1,31 +0,0 @@ -# /etc/ipsec.conf - strongSwan IPsec configuration file - -config setup - -ca strongswan - cacert=strongswanCert.pem - crluri=http://crl.strongswan.org/strongswan.crl - auto=add - -conn %default - ikelifetime=60m - keylife=20m - rekeymargin=3m - keyingtries=1 - keyexchange=ikev2 - left=PH_IP_MOON - leftcert=moonCert.pem - leftsendcert=ifasked - leftid=@moon.strongswan.org - -conn alice - leftsubnet=PH_IP_ALICE/32 - right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" - auto=add - -conn venus - leftsubnet=PH_IP_VENUS/32 - right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" - auto=add diff --git a/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/swanctl/swanctl.conf index 574887d7e..8905ebe23 100755 --- a/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/multi-level-ca/hosts/moon/etc/swanctl/swanctl.conf @@ -11,11 +11,11 @@ connections { remote { auth = pubkey cacerts = researchCert.pem - revocation = ifuri + revocation = ifuri } children { alice { - local_ts = 10.1.0.10/32 + local_ts = 10.1.0.10/32 esp_proposals = aes128-sha256-ecp256 } } @@ -34,7 +34,7 @@ connections { remote { auth = pubkey cacerts = salesCert.pem - revocation = ifuri + revocation = ifuri } children { venus { @@ -46,11 +46,3 @@ connections { proposals = aes128-sha256-ecp256 } } - -authorities { - - strongswan { - cacert = strongswanCert.pem - crl_uris = http://crl.strongswan.org/strongswan.crl - } -} diff --git a/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf b/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf index 73bb5f6b3..f93e30fcd 100755 --- a/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey } charon-systemd { diff --git a/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf b/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf index 73bb5f6b3..f93e30fcd 100755 --- a/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey } charon-systemd { diff --git a/testing/tests/swanctl/ocsp-multi-level/hosts/moon/etc/ipsec.conf b/testing/tests/swanctl/ocsp-multi-level/hosts/moon/etc/ipsec.conf deleted file mode 100644 index 3a5aaa6b6..000000000 --- a/testing/tests/swanctl/ocsp-multi-level/hosts/moon/etc/ipsec.conf +++ /dev/null @@ -1,31 +0,0 @@ -# /etc/ipsec.conf - strongSwan IPsec configuration file - -config setup - -ca strongswan - cacert=strongswanCert.pem - crluri=http://crl.strongswan.org/strongswan.crl - auto=add - -conn %default - ikelifetime=60m - keylife=20m - rekeymargin=3m - keyingtries=1 - keyexchange=ikev2 - left=PH_IP_MOON - leftcert=moonCert.pem - leftsendcert=ifasked - leftid=@moon.strongswan.org - -conn alice - leftsubnet=PH_IP_ALICE/32 - right=%any - rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA" - auto=add - -conn venus - leftsubnet=PH_IP_VENUS/32 - right=%any - rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA" - auto=add diff --git a/testing/tests/swanctl/rw-cert-ppk/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/swanctl/rw-cert-ppk/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/swanctl/rw-cert-ppk/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/swanctl/rw-cert-pss/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/swanctl/rw-cert-pss/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/swanctl/rw-cert-pss/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/swanctl/rw-eap-peap-md5/evaltest.dat b/testing/tests/swanctl/rw-eap-peap-md5/evaltest.dat index 20ec1561e..247aabe17 100644 --- a/testing/tests/swanctl/rw-eap-peap-md5/evaltest.dat +++ b/testing/tests/swanctl/rw-eap-peap-md5/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES carol::cat /var/log/daemon.log::EAP method EAP_PEAP succeeded, MSK established::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES dave:: cat /var/log/daemon.log::allow mutual EAP-only authentication::YES dave:: cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES @@ -11,7 +11,7 @@ moon:: cat /var/log/daemon.log::EAP_PEAP phase2 authentication of 'carol@strongs moon:: cat /var/log/daemon.log::authentication of 'carol@strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::EAP method EAP_PEAP failed for peer dave@strongswan.org::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-eap-peap-md5/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-peap-md5/hosts/carol/etc/swanctl/swanctl.conf index db82791b8..c4e478475 100755 --- a/testing/tests/swanctl/rw-eap-peap-md5/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-peap-md5/hosts/carol/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-peap - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-peap-md5/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-peap-md5/hosts/dave/etc/swanctl/swanctl.conf index 7f3b8104b..b71866726 100755 --- a/testing/tests/swanctl/rw-eap-peap-md5/hosts/dave/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-peap-md5/hosts/dave/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-peap - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-peap-mschapv2/evaltest.dat b/testing/tests/swanctl/rw-eap-peap-mschapv2/evaltest.dat index dc56ba850..1093e51ad 100644 --- a/testing/tests/swanctl/rw-eap-peap-mschapv2/evaltest.dat +++ b/testing/tests/swanctl/rw-eap-peap-mschapv2/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::server requested EAP_MSCHAPV2 authentication::YES carol::cat /var/log/daemon.log::EAP method EAP_PEAP succeeded, MSK established::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::server requested EAP_PEAP authentication::YES dave:: cat /var/log/daemon.log::allow mutual EAP-only authentication::YES dave:: cat /var/log/daemon.log::server requested EAP_MSCHAPV2 authentication::YES @@ -11,7 +11,7 @@ moon:: cat /var/log/daemon.log::EAP_PEAP phase2 authentication of 'carol@strongs moon:: cat /var/log/daemon.log::authentication of 'carol@strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::EAP method EAP_PEAP failed for peer dave@strongswan.org::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/carol/etc/swanctl/swanctl.conf index db82791b8..c4e478475 100755 --- a/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/carol/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-peap - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/dave/etc/swanctl/swanctl.conf index 7f3b8104b..b71866726 100755 --- a/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/dave/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-peap-mschapv2/hosts/dave/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-peap - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-peap-radius/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-peap-radius/hosts/carol/etc/swanctl/swanctl.conf index 7ffdd1f4c..54849aeec 100755 --- a/testing/tests/swanctl/rw-eap-peap-radius/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-peap-radius/hosts/carol/etc/swanctl/swanctl.conf @@ -7,7 +7,7 @@ connections { local { auth = eap id = carol@strongswan.org - aaa_id = "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_id = "C=CH, O=strongSwan Project, CN=aaa.strongswan.org" } remote { auth = pubkey diff --git a/testing/tests/swanctl/rw-eap-peap-radius/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-peap-radius/hosts/dave/etc/swanctl/swanctl.conf index 97c0b7057..da69a515d 100755 --- a/testing/tests/swanctl/rw-eap-peap-radius/hosts/dave/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-peap-radius/hosts/dave/etc/swanctl/swanctl.conf @@ -7,7 +7,7 @@ connections { local { auth = eap id = dave@strongswan.org - aaa_id = "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_id = "C=CH, O=strongSwan Project, CN=aaa.strongswan.org" } remote { auth = pubkey diff --git a/testing/tests/swanctl/rw-eap-tls-only/evaltest.dat b/testing/tests/swanctl/rw-eap-tls-only/evaltest.dat index 52dc51a62..48a706d9d 100644 --- a/testing/tests/swanctl/rw-eap-tls-only/evaltest.dat +++ b/testing/tests/swanctl/rw-eap-tls-only/evaltest.dat @@ -1,10 +1,10 @@ carol::cat /var/log/daemon.log::server requested EAP_TLS authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::negotiated TLS 1.2 using suite TLS_DHE_RSA_WITH_AES_128_GCM_SHA256::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES -moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES +moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' with EAP successful::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-eap-tls-only/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-tls-only/hosts/carol/etc/swanctl/swanctl.conf index cc3e77095..f556f8eba 100755 --- a/testing/tests/swanctl/rw-eap-tls-only/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-tls-only/hosts/carol/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-tls - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-tls-radius/evaltest.dat b/testing/tests/swanctl/rw-eap-tls-radius/evaltest.dat index e3b7cf39a..46d88143c 100644 --- a/testing/tests/swanctl/rw-eap-tls-radius/evaltest.dat +++ b/testing/tests/swanctl/rw-eap-tls-radius/evaltest.dat @@ -1,9 +1,9 @@ -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with RSA.* successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with RSA.* successful::YES carol::cat /var/log/daemon.log::server requested EAP_TLS authentication::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES -moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES +moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' with EAP successful::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-eap-tls-radius/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-tls-radius/hosts/carol/etc/swanctl/swanctl.conf index 58786ba87..d8212a435 100755 --- a/testing/tests/swanctl/rw-eap-tls-radius/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-tls-radius/hosts/carol/etc/swanctl/swanctl.conf @@ -7,11 +7,11 @@ connections { local { auth = eap certs = carolCert.pem - aaa_id = "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_id = "C=CH, O=strongSwan Project, CN=aaa.strongswan.org" } remote { auth = pubkey - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-tls-radius/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-tls-radius/hosts/moon/etc/swanctl/swanctl.conf index ebe5ffab7..afed192d2 100755 --- a/testing/tests/swanctl/rw-eap-tls-radius/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-tls-radius/hosts/moon/etc/swanctl/swanctl.conf @@ -9,7 +9,7 @@ connections { } remote { auth = eap-radius - id = "C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org" + id = "C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org" } children { net { diff --git a/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf index cae0025f6..e426bda2c 100755 --- a/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey } charon-systemd { diff --git a/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf index cae0025f6..e426bda2c 100755 --- a/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf +++ b/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey } charon-systemd { diff --git a/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf index 9c4e819c5..3b2845dcd 100755 --- a/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey } charon-systemd { diff --git a/testing/tests/swanctl/rw-eap-ttls-only/evaltest.dat b/testing/tests/swanctl/rw-eap-ttls-only/evaltest.dat index 00282ab2b..46d6be42a 100644 --- a/testing/tests/swanctl/rw-eap-ttls-only/evaltest.dat +++ b/testing/tests/swanctl/rw-eap-ttls-only/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::server requested EAP_TTLS authentication::YES carol::cat /var/log/daemon.log::allow mutual EAP-only authentication::YES carol::cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES carol::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::YES -carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES +carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::server requested EAP_TTLS authentication::YES dave:: cat /var/log/daemon.log::allow mutual EAP-only authentication::YES dave:: cat /var/log/daemon.log::server requested EAP_MD5 authentication::YES @@ -11,7 +11,7 @@ moon:: cat /var/log/daemon.log::EAP_TTLS phase2 authentication of 'carol@strongs moon:: cat /var/log/daemon.log::authentication of 'carol@strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::EAP method EAP_TTLS failed for peer dave@strongswan.org::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=Linux strongSwan, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-eap.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=C=CH, O=strongSwan Project, CN=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-eap-ttls-only/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-ttls-only/hosts/carol/etc/swanctl/swanctl.conf index 184aaa5d3..96c30e340 100755 --- a/testing/tests/swanctl/rw-eap-ttls-only/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-ttls-only/hosts/carol/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-ttls - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-ttls-only/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-ttls-only/hosts/dave/etc/swanctl/swanctl.conf index a77bd0079..64b711db4 100755 --- a/testing/tests/swanctl/rw-eap-ttls-only/hosts/dave/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-ttls-only/hosts/dave/etc/swanctl/swanctl.conf @@ -10,7 +10,7 @@ connections { } remote { auth = eap-ttls - id = "C=CH, O=Linux strongSwan, CN=moon.strongswan.org" + id = "C=CH, O=strongSwan Project, CN=moon.strongswan.org" } children { home { diff --git a/testing/tests/swanctl/rw-eap-ttls-radius/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-ttls-radius/hosts/carol/etc/swanctl/swanctl.conf index 7ffdd1f4c..54849aeec 100755 --- a/testing/tests/swanctl/rw-eap-ttls-radius/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-ttls-radius/hosts/carol/etc/swanctl/swanctl.conf @@ -7,7 +7,7 @@ connections { local { auth = eap id = carol@strongswan.org - aaa_id = "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_id = "C=CH, O=strongSwan Project, CN=aaa.strongswan.org" } remote { auth = pubkey diff --git a/testing/tests/swanctl/rw-eap-ttls-radius/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-eap-ttls-radius/hosts/dave/etc/swanctl/swanctl.conf index 97c0b7057..da69a515d 100755 --- a/testing/tests/swanctl/rw-eap-ttls-radius/hosts/dave/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-eap-ttls-radius/hosts/dave/etc/swanctl/swanctl.conf @@ -7,7 +7,7 @@ connections { local { auth = eap id = dave@strongswan.org - aaa_id = "C=CH, O=Linux strongSwan, CN=aaa.strongswan.org" + aaa_id = "C=CH, O=strongSwan Project, CN=aaa.strongswan.org" } remote { auth = pubkey diff --git a/testing/tests/swanctl/rw-pubkey-anon/evaltest.dat b/testing/tests/swanctl/rw-pubkey-anon/evaltest.dat index b2958919a..dc9abe557 100755 --- a/testing/tests/swanctl/rw-pubkey-anon/evaltest.dat +++ b/testing/tests/swanctl/rw-pubkey-anon/evaltest.dat @@ -1,9 +1,9 @@ alice::ping -c 1 192.168.0.100::64 bytes from 192.168.0.100: icmp_.eq=1::YES alice::ping -c 1 192.168.0.200::64 bytes from 192.168.0.200: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=0d:36:.*:cc:90 remote-host=192.168.0.1 remote-port=4500 remote-id=42:91:.*:f7:60 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=67:f6:.*:40:80 remote-host=192.168.0.1 remote-port=4500 remote-id=42:91:.*:f7:60 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=42:91:.*:f7:60 remote-host=192.168.0.100 remote-port=4500 remote-id=0d:36:.*:cc:90.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=42:91:.*:f7:60 remote-host=192.168.0.200 remote-port=4500 remote-id=67:f6:.*:40:80.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.100 remote-port=4500 remote-id=..:..:.* encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.200 remote-port=4500 remote-id=..:..:.* encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/swanctl.conf index f1a074fed..a322ca17f 100755 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/swanctl.conf @@ -2,7 +2,7 @@ connections { home { local_addrs = 192.168.0.100 - remote_addrs = 192.168.0.1 + remote_addrs = 192.168.0.1 local { auth = pubkey @@ -10,11 +10,11 @@ connections { } remote { auth = pubkey - pubkeys = moonPub.pem + pubkeys = moonPub.pem } children { home { - remote_ts = 10.1.0.0/16 + remote_ts = 10.1.0.0/16 updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-ecp256 @@ -24,11 +24,3 @@ connections { proposals = aes128-sha256-ecp256 } } - -secrets { - - rsa-carol { - file = carolKey.pem - secret = "nH5ZQEWtku0RJEZ6" - } -} diff --git a/testing/tests/swanctl/rw-pubkey-keyid/evaltest.dat b/testing/tests/swanctl/rw-pubkey-keyid/evaltest.dat index 2dfc3cf41..1b172ee67 100755 --- a/testing/tests/swanctl/rw-pubkey-keyid/evaltest.dat +++ b/testing/tests/swanctl/rw-pubkey-keyid/evaltest.dat @@ -1,9 +1,9 @@ alice::ping -c 1 192.168.0.100::64 bytes from 192.168.0.100: icmp_.eq=1::YES alice::ping -c 1 192.168.0.200::64 bytes from 192.168.0.200: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=0d:36:.*:cc:90 remote-host=192.168.0.1 remote-port=4500 remote-id=42:91:.*:f7:60 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=67:f6:.*:40:80 remote-host=192.168.0.1 remote-port=4500 remote-id=42:91:.*:f7:60 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-carol.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=42:91:.*:f7:60 remote-host=192.168.0.100 remote-port=4500 remote-id=0d:36:.*:cc:90.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw-dave.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=42:91:.*:f7:60 remote-host=192.168.0.200 remote-port=4500 remote-id=67:f6:.*:40:80.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-carol.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.100 remote-port=4500 remote-id=..:..:.* encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw-dave.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.200 remote-port=4500 remote-id=..:..:.* encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/swanctl.conf index f1a074fed..a322ca17f 100755 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/swanctl.conf @@ -2,7 +2,7 @@ connections { home { local_addrs = 192.168.0.100 - remote_addrs = 192.168.0.1 + remote_addrs = 192.168.0.1 local { auth = pubkey @@ -10,11 +10,11 @@ connections { } remote { auth = pubkey - pubkeys = moonPub.pem + pubkeys = moonPub.pem } children { home { - remote_ts = 10.1.0.0/16 + remote_ts = 10.1.0.0/16 updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-ecp256 @@ -24,11 +24,3 @@ connections { proposals = aes128-sha256-ecp256 } } - -secrets { - - rsa-carol { - file = carolKey.pem - secret = "nH5ZQEWtku0RJEZ6" - } -} diff --git a/testing/tests/tnc/tnccs-20-ev-pt-tls/evaltest.dat b/testing/tests/tnc/tnccs-20-ev-pt-tls/evaltest.dat index a327dae63..d5d6fa583 100644 --- a/testing/tests/tnc/tnccs-20-ev-pt-tls/evaltest.dat +++ b/testing/tests/tnc/tnccs-20-ev-pt-tls/evaltest.dat @@ -5,10 +5,10 @@ carol::cat /var/log/auth.log::received SASL Success result::YES carol::cat /var/log/auth.log::collected ... SW ID events::YES carol::cat /var/log/auth.log::collected 3 SW records::YES alice::cat /var/log/daemon.log::accepting PT-TLS stream from PH_IP_DAVE::YES -alice::cat /var/log/daemon.log::checking certificate status of.*C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org::YES +alice::cat /var/log/daemon.log::checking certificate status of.*C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org::YES alice::cat /var/log/daemon.log::certificate status is good::YES alice::cat /var/log/daemon.log::skipping SASL, client already authenticated by TLS certificate::YES -alice::cat /var/log/daemon.log::user AR identity.*C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org.*authenticated by certificate::YES +alice::cat /var/log/daemon.log::user AR identity.*C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org.*authenticated by certificate::YES alice::cat /var/log/daemon.log::received software inventory with ... items for request 3 at last eid 1 of epoch::YES alice::cat /var/log/daemon.log::role=.softwareCreator licensor tagCreator::YES alice::cat /var/log/daemon.log::successful system command: ssh root@moon.*logger -t charon-systemd -p auth.alert.*host with IP address 192.168.0.200 is blocked::YES diff --git a/testing/tests/tnc/tnccs-20-pdp-pt-tls/evaltest.dat b/testing/tests/tnc/tnccs-20-pdp-pt-tls/evaltest.dat index bded669da..2e40603fd 100644 --- a/testing/tests/tnc/tnccs-20-pdp-pt-tls/evaltest.dat +++ b/testing/tests/tnc/tnccs-20-pdp-pt-tls/evaltest.dat @@ -5,10 +5,10 @@ carol::cat /var/log/auth.log::collected ... SW ID records::YES carol::cat /var/log/auth.log::strongswan.org__strongSwan.*swidtag::YES carol::cat /var/log/auth.log::collected 1 SW record::YES alice::cat /var/log/daemon.log::accepting PT-TLS stream from PH_IP_DAVE::YES -alice::cat /var/log/daemon.log::checking certificate status of.*C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org::YES +alice::cat /var/log/daemon.log::checking certificate status of.*C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org::YES alice::cat /var/log/daemon.log::certificate status is good::YES alice::cat /var/log/daemon.log::skipping SASL, client already authenticated by TLS certificate::YES -alice::cat /var/log/daemon.log::user AR identity.*C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org.*authenticated by certificate::YES +alice::cat /var/log/daemon.log::user AR identity.*C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org.*authenticated by certificate::YES alice::cat /var/log/daemon.log::received software inventory with ... items for request 3 at last eid 1 of epoch::YES alice::cat /var/log/daemon.log::successful system command: ssh root@moon.*logger -t charon-systemd -p auth.alert.*host with IP address 192.168.0.200 is blocked::YES moon:: cat /var/log/auth.log::host with IP address 192.168.0.200 is blocked::YES diff --git a/testing/tests/tnc/tnccs-20-tls/evaltest.dat b/testing/tests/tnc/tnccs-20-tls/evaltest.dat index bed92fc38..3cf7e6bd5 100644 --- a/testing/tests/tnc/tnccs-20-tls/evaltest.dat +++ b/testing/tests/tnc/tnccs-20-tls/evaltest.dat @@ -5,13 +5,13 @@ dave:: cat /var/log/daemon.log::PB-TNC access recommendation is 'Quarantined'::Y dave:: cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::YES dave:: cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::added group membership 'allow'::YES -moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' with EAP successful::YES +moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::added group membership 'isolate'::YES -moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org' with EAP successful::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/28]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.16/28]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-allow.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw-allow.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/28] remote-ts=\[192.168.0.100/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw-isolate.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw-isolate.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.16/28] remote-ts=\[192.168.0.200/32]::YES +moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org' with EAP successful::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/28]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.16/28]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw-allow.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw-allow.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/28] remote-ts=\[192.168.0.100/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw-isolate.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=C=CH, O=strongSwan Project, OU=Accounting, CN=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw-isolate.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.16/28] remote-ts=\[192.168.0.200/32]::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES carol::ping -c 1 -W 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_.eq=1::NO dave:: ping -c 1 PH_IP_VENUS::64 bytes from PH_IP_VENUS: icmp_.eq=1::YES From 0136852f1970fc82cf268249782576ceb818e01f Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Wed, 10 Apr 2019 09:34:26 +0200 Subject: [PATCH 02/20] testing: Disable leak detective in build-certs script --- testing/scripts/build-certs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index 649ea776a..7881db9fe 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -2,6 +2,9 @@ echo "Building certificates" +# Disable leak detective when using pki as it produces warnings in tzset +export LEAK_DETECTIVE_DISABLE=1 + # Determine testing directory DIR="$(dirname `readlink -f $0`)/.." From 326bb5f2c5793b1a722f33be2bc97d03344ddcb0 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Wed, 10 Apr 2019 11:27:11 +0200 Subject: [PATCH 03/20] testing: Convert keys and certificates for all TKM scenarios --- testing/scripts/build-certs | 27 +++++++++++++++++++++------ 1 file changed, 21 insertions(+), 6 deletions(-) diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index 7881db9fe..b505ee1d7 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -136,12 +136,27 @@ do done # Convert moon private key and Root CA certificate into DER format -HOST_KEY=${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem -TEST="${TEST_DIR}/tkm/host2host-initiator" -TEST_KEY=${TEST}/hosts/moon/${TKM_DIR}/moonKey.der -TEST_CERT=${TEST}/hosts/moon/${TKM_DIR}/strongswanCert.der -openssl rsa -in ${HOST_KEY} -outform der -out ${TEST_KEY} 2> /dev/null -openssl x509 -in ${CA_CERT} -outform der -out ${TEST_CERT} +for t in host2host-initiator host2host-responder host2host-xfrmproxy \ + net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey +do + HOST_KEY=${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem + TEST="${TEST_DIR}/tkm/${t}" + TEST_KEY=${TEST}/hosts/moon/${TKM_DIR}/moonKey.der + TEST_CERT=${TEST}/hosts/moon/${TKM_DIR}/strongswanCert.der + openssl rsa -in ${HOST_KEY} -outform der -out ${TEST_KEY} 2> /dev/null + openssl x509 -in ${CA_CERT} -outform der -out ${TEST_CERT} +done + +# Convert sun private key and Root CA certificate into DER format +for t in multiple-clients +do + HOST_KEY=${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem + TEST="${TEST_DIR}/tkm/${t}" + TEST_KEY=${TEST}/hosts/sun/${TKM_DIR}/sunKey.der + TEST_CERT=${TEST}/hosts/sun/${TKM_DIR}/strongswanCert.der + openssl rsa -in ${HOST_KEY} -outform der -out ${TEST_KEY} 2> /dev/null + openssl x509 -in ${CA_CERT} -outform der -out ${TEST_CERT} +done # Put DER-encoded moon private key and Root CA certificate into tkm scenarios for t in host2host-initiator host2host-responder host2host-xfrmproxy \ From 1e059c837bb10f9af773c9a06461c783a8e2ae6f Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 15 Apr 2019 18:20:20 +0200 Subject: [PATCH 04/20] testing: Rename public keys in DNSSEC scenarios We will generate PEM-encoded public keys with the script. --- .../ikev2/net2net-dnssec/hosts/moon/etc/ipsec.conf | 4 ++-- .../etc/ipsec.d/certs/{moonPub.der => moonPub.pem} | Bin .../ikev2/net2net-dnssec/hosts/sun/etc/ipsec.conf | 4 ++-- .../etc/ipsec.d/certs/{sunPub.der => sunPub.pem} | Bin .../tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.conf | 6 +++--- .../etc/ipsec.d/certs/{moonPub.der => moonPub.pem} | Bin .../swanctl/pubkey/{carolPub.der => carolPub.pem} | Bin .../rw-dnssec/hosts/carol/etc/swanctl/swanctl.conf | 6 +++--- .../etc/swanctl/pubkey/{davePub.der => davePub.pem} | Bin .../rw-dnssec/hosts/dave/etc/swanctl/swanctl.conf | 6 +++--- .../etc/swanctl/pubkey/{moonPub.der => moonPub.pem} | Bin .../rw-dnssec/hosts/moon/etc/swanctl/swanctl.conf | 4 ++-- 12 files changed, 15 insertions(+), 15 deletions(-) rename testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.d/certs/{moonPub.der => moonPub.pem} (100%) rename testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.d/certs/{sunPub.der => sunPub.pem} (100%) rename testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/{moonPub.der => moonPub.pem} (100%) rename testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/pubkey/{carolPub.der => carolPub.pem} (100%) rename testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/pubkey/{davePub.der => davePub.pem} (100%) rename testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/{moonPub.der => moonPub.pem} (100%) diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.conf index ea10eb0a3..a7799439e 100644 --- a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.conf @@ -9,12 +9,12 @@ conn %default keyingtries=1 keyexchange=ikev2 mobike=no - + conn net-net left=PH_IP_MOON leftid=moon.strongswan.org leftsubnet=10.1.0.0/16 - leftsigkey=moonPub.der + leftsigkey=moonPub.pem leftauth=pubkey leftfirewall=yes right=sun.strongswan.org diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.der b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem similarity index 100% rename from testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.der rename to testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.conf b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.conf index 9e310050d..06704e68a 100644 --- a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.conf +++ b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.conf @@ -9,12 +9,12 @@ conn %default keyingtries=1 keyexchange=ikev2 mobike=no - + conn net-net left=PH_IP_SUN leftid=sun.strongswan.org leftsubnet=10.2.0.0/16 - leftsigkey=sunPub.der + leftsigkey=sunPub.pem leftauth=pubkey leftfirewall=yes right=moon.strongswan.org diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.d/certs/sunPub.der b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.d/certs/sunPub.pem similarity index 100% rename from testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.d/certs/sunPub.der rename to testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.d/certs/sunPub.pem diff --git a/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.conf index 74ddc6e01..3c5c64cde 100644 --- a/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.conf @@ -2,19 +2,19 @@ config setup -conn %default +conn %default ikelifetime=60m keylife=20m rekeymargin=3m keyingtries=1 keyexchange=ikev2 -conn rw +conn rw left=PH_IP_MOON leftsubnet=10.1.0.0/16 leftid=moon.strongswan.org leftauth=pubkey - leftsigkey=moonPub.der + leftsigkey=moonPub.pem leftfirewall=yes right=%any rightauth=pubkey diff --git a/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.der b/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem similarity index 100% rename from testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.der rename to testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem diff --git a/testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/pubkey/carolPub.der b/testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/pubkey/carolPub.pem similarity index 100% rename from testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/pubkey/carolPub.der rename to testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/pubkey/carolPub.pem diff --git a/testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/swanctl.conf index edb9710e2..abcea5c98 100755 --- a/testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/swanctl.conf @@ -2,13 +2,13 @@ connections { home { local_addrs = 192.168.0.100 - remote_addrs = 192.168.0.1 + remote_addrs = 192.168.0.1 vips = 0.0.0.0 local { auth = pubkey id = carol.strongswan.org - pubkeys = carolPub.der + pubkeys = carolPub.pem } remote { auth = pubkey @@ -16,7 +16,7 @@ connections { } children { home { - remote_ts = 10.1.0.0/16 + remote_ts = 10.1.0.0/16 updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-x25519 diff --git a/testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/pubkey/davePub.der b/testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/pubkey/davePub.pem similarity index 100% rename from testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/pubkey/davePub.der rename to testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/pubkey/davePub.pem diff --git a/testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/swanctl.conf index b894dc7fb..fe711c120 100755 --- a/testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/swanctl.conf @@ -2,13 +2,13 @@ connections { home { local_addrs = 192.168.0.200 - remote_addrs = 192.168.0.1 + remote_addrs = 192.168.0.1 vips = 0.0.0.0 local { auth = pubkey id = dave.strongswan.org - pubkeys = davePub.der + pubkeys = davePub.pem } remote { auth = pubkey @@ -16,7 +16,7 @@ connections { } children { home { - remote_ts = 10.1.0.0/16 + remote_ts = 10.1.0.0/16 updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-x25519 diff --git a/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.der b/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.pem similarity index 100% rename from testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.der rename to testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.pem diff --git a/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/swanctl.conf index 6b1a2c281..73aabd83c 100755 --- a/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/swanctl.conf @@ -7,14 +7,14 @@ connections { local { auth = pubkey id = moon.strongswan.org - pubkeys = moonPub.der + pubkeys = moonPub.pem } remote { auth = pubkey } children { net { - local_ts = 10.1.0.0/16 + local_ts = 10.1.0.0/16 updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-x25519 From 05275905ef82102afc174e4227ef29324eae10c2 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 15 Apr 2019 18:25:13 +0200 Subject: [PATCH 05/20] testing: Build CERT and IPSECKEY RRs for strongswan.org zone Also copy generated keys to DNSSEC test cases. --- .../hosts/winnetou/etc/bind/db.strongswan.org | 85 +------------------ testing/scripts/build-certs | 55 +++++++++++- 2 files changed, 53 insertions(+), 87 deletions(-) diff --git a/testing/hosts/winnetou/etc/bind/db.strongswan.org b/testing/hosts/winnetou/etc/bind/db.strongswan.org index f838d2f1c..ac0d1340e 100644 --- a/testing/hosts/winnetou/etc/bind/db.strongswan.org +++ b/testing/hosts/winnetou/etc/bind/db.strongswan.org @@ -31,89 +31,8 @@ crl IN CNAME winnetou.strongswan.org. ldap IN CNAME winnetou.strongswan.org. ocsp IN CNAME winnetou.strongswan.org. ; -moon IN CERT ( 1 0 0 - MIIEIjCCAwqgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ - MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS - b290IENBMB4XDTE0MDgyNzE0NDQ1NloXDTE5MDgyNjE0NDQ1NlowRjELMAkGA1UE - BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21vb24u - c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk - fAX6xRdB0f5bBjN08zOmO7CEYa8eCyYFqHUhCw+x10v2BnKB6vOlMzW+9DiRtG68 - TdJlYt/24oRuJBX0gAGvzsv0kC9rnoQcgCJQy4bxaLNVsgoiFCVlzxLaYjABbQlz - oSaegm/2PoX+1UP37rG8wlvAcuLSHsFQ720FUs/LvZh4Y0FjoKhvgKs64U4nIAJ7 - MnuL29n5fM5+dem7uovQOBg/+faZo8QkYSK9MW6eQkP+YnwN5zItNBxyGwKPbXXw - Ey5/aqNWfhRY8IEG6HJgrnCwBMHUA14C2UV+Af7Cy4eNnC1Mmu7TmUYcFncXaFn0 - 87ryFUdshlmPpIHxfjufAgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQE - AwIDqDAdBgNVHQ4EFgQU2CY9Iex8275aOQxbcMsDgCHerhMwbQYDVR0jBGYwZIAU - XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK - ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC - AQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggr - BgEFBQcDATA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u - b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCpnj6Nc+PuPLPi - 4E3g5hyJkr5VZy7SSglcs1uyVP2mfwj6JR9SLd5+JOsL1aCTm0y9qLcqdbHBxG8i - LNLtwVKU3s1hV4EIO3saHe4XUEjxN9bDtLWEoeq5ipmYX8RJ/fXKR8/8vurBARP2 - xu1+wqwEhymp4jBmF0LVovT1+o+GhH66zIJnx3zR9BtfMkaeL6804hrx2ygeopeo - buGvMDQ8HcnMB9OU7Y8fK0oY1kULl6hf36K5ApPA6766sRRKRvBSKlmViKSQTq5a - 4c8gCWAZbtdT+N/fa8hKDlZt5q10EgjTqDfGTj50xKvAneq7XdfKmYYGnIWoNLY9 - ga8NOzX8 - ) -sun IN CERT ( 1 0 0 - MIIEIDCCAwigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ - MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS - b290IENBMB4XDTE0MDgyNzE0NDI0NVoXDTE5MDgyNjE0NDI0NVowRTELMAkGA1UE - BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN1bi5z - dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMci - IAR9SlszDJhGEtRq9eCFAYNdtL3bC7jcELs7ttqiB51iAUgdi9JZCzgWNAGHd8Iv - RDV529DDiUxXxOWCdYKUmQp0t5vR6oE5pmHmd5lcUguEyVrtqFSr6LMUqOXwFb41 - VUNPPR7YyLMdgUf9Ki0PZWdnVLVEp/ZKIY1OaqZLTnyfV7k0I/XQX2uW6UDCaC1A - QBljzEfrD2gUcG9+FLpb5qDsiGUyhhLB+nM1GNPnZvIlCppD+0t3xEI87+eg5N86 - yXBcu4o/O7rvVpP17GrhwKuYx0RHDBScBDo/WRNEOrn8/Q9jQUlry06+0ChVYY+R - 328lHABkaoH/rB65JSECAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD - AgOoMB0GA1UdDgQWBBTtzWNHzdEvtjAAtgVDBxNUTJ0xijBtBgNVHSMEZjBkgBRd - p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT - EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB - ADAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB - BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y - Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAVne/5HKpkbv75eHk - x44aMVWT0DB6SF6nXrOQSzF7OV1FyNj2vibA9gAaiVnBXP+r798MDtwD/0N33TQl - QIR2rGJqkocsCTcUiQW6xLDO6AmJCBAaJbc5REjNT+HndjjMsQjn1NyY8hQbyow1 - ZOQ543zCY+Al7A3YcUtISLLH4EMIP3On1PFM2rWMUq1HoSo2kl7Awv+okvoqx6Sf - 7/S2mj3dYGv+5eAVogkBL3mRCXEpGHC+6e6VW5nGYSYIRPkBRD2F4imB4+KYUR74 - GRopoaetH/TFRbDqiSWBf2L3Po2tXEPifIvkgavUXIn+tdgMhQ9BpVN8yEgPXLM5 - WdafVg== - ) -; -moon IN IPSECKEY ( 10 1 2 192.168.0.1 - AwEAAaR8BfrFF0HR/lsGM3TzM6Y7sIRhrx4LJgWodSELD7HXS/YGcoHq86UzNb70 - OJG0brxN0mVi3/bihG4kFfSAAa/Oy/SQL2uehByAIlDLhvFos1WyCiIUJWXPEtpi - MAFtCXOhJp6Cb/Y+hf7VQ/fusbzCW8By4tIewVDvbQVSz8u9mHhjQWOgqG+Aqzrh - TicgAnsye4vb2fl8zn516bu6i9A4GD/59pmjxCRhIr0xbp5CQ/5ifA3nMi00HHIb - Ao9tdfATLn9qo1Z+FFjwgQbocmCucLAEwdQDXgLZRX4B/sLLh42cLUya7tOZRhwW - dxdoWfTzuvIVR2yGWY+kgfF+O58= - ) -sun IN IPSECKEY ( 10 1 2 192.168.0.2 - AwEAAcciIAR9SlszDJhGEtRq9eCFAYNdtL3bC7jcELs7ttqiB51iAUgdi9JZCzgW - NAGHd8IvRDV529DDiUxXxOWCdYKUmQp0t5vR6oE5pmHmd5lcUguEyVrtqFSr6LMU - qOXwFb41VUNPPR7YyLMdgUf9Ki0PZWdnVLVEp/ZKIY1OaqZLTnyfV7k0I/XQX2uW - 6UDCaC1AQBljzEfrD2gUcG9+FLpb5qDsiGUyhhLB+nM1GNPnZvIlCppD+0t3xEI8 - 7+eg5N86yXBcu4o/O7rvVpP17GrhwKuYx0RHDBScBDo/WRNEOrn8/Q9jQUlry06+ - 0ChVYY+R328lHABkaoH/rB65JSE= - ) -carol IN IPSECKEY ( 10 1 2 192.168.0.100 - AwEAAbfz1DcXyt/sOALi1IZ/RcuPa5m+4fiSST2wVWWrlw3hUjeiwLfgoLrtKaGX - 4i+At82Zol2mdbEXFpO+9qxXliP2u0fexqP4mBuZus3ELA82EOL0lQ2ahAi8O3qa - fkDMBSgvoeJpEwNe00Ugh53g7hT7dw8tSgcPGqQkWutIIKT9T6e/HbHNjRtYlw9Z - lHsp8gSYjg/Q6vV6ofttueMUD9NRv8w2Y76rnRRmUGf3GlNFFmgxZntCJRuYltnx - V7VcCFoppyauYt/fPmjAxbPRuhHKacnzIzq83Ixf5fSjMTlluGCfWFX/NGENXamB - qChkRLHmuCHNexxRp9s2F1S10hE= - ) -dave IN IPSECKEY ( 10 1 2 192.168.0.200 - AwEAAdY83E3FhM1fteIFrdHSQhMPGWKX1gg+JU89IK174X/k/YDB8fb8d0ombwKv - ggU7k5KbAcnaVBG0AvRmb+qkXdRZiEAlJOqR2YrflB+OMN7bnPmDQekI09TzDJt9 - a1C19eIxmUJ2h2DeDAEnxrpp1wsKnWBd48MeYhjkAErRhx8A8ZlBbkdyGQJD+y8G - tp0iWS4rz8aiGQ0vYS+P9DVkMJbbGhl2aqwVY+F335//LVG244+yzXTf1o8aLwPl - 1+PHcgavN+M766Y3bqI5YHgh2CEJTCaBf4zooTBSQ6Tr1cQ5B//V519J1x/uh//2 - CpEQXbFYFiU3kLmTTPz9pcmeVkM= - ) +; Generated certificates and keys +$INCLUDE /etc/ca/db.strongswan.org.certs-and-keys ; ; This is a zone-signing key, keyid 9396, for strongswan.org. strongswan.org. IN DNSKEY 256 3 8 ( diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index b505ee1d7..9e3031c9d 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -204,11 +204,23 @@ HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} cp ${TEST_PUB} ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey +# Put a copy into the ikev2/net2net-dnssec scenario +TEST="${TEST_DIR}/ikev2/net2net-dnssec" +cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs + # Put a copy into the ikev2/net2net-pubkey scenario TEST="${TEST_DIR}/ikev2/net2net-pubkey" cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs +# Put a copy into the ikev2/rw-dnssec scenario +TEST="${TEST_DIR}/ikev2/rw-dnssec" +cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/rw-dnssec scenario +TEST="${TEST_DIR}/swanctl/rw-dnssec" +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + # Put a copy into the swanctl/rw-pubkey-anon scenario TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey @@ -228,6 +240,10 @@ HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey +# Put a copy into the ikev2/net2net-dnssec scenario +TEST="${TEST_DIR}/ikev2/net2net-dnssec" +cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs + # Put a copy into the ikev2/net2net-pubkey scenario TEST="${TEST_DIR}/ikev2/net2net-pubkey" cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs @@ -237,11 +253,15 @@ cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -# Extract the raw carol public key for the swanctl/rw-pubkey-anon scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +# Extract the raw carol public key for the swanctl/rw-dnssec scenario +TEST="${TEST_DIR}/swanctl/rw-dnssec" TEST_PUB="${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey/carolPub.pem" HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey # Put a copy into the swanctl/rw-pubkey-keyid scenario @@ -249,11 +269,15 @@ TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -# Extract the raw dave public key for the swanctl/rw-pubkey-anon scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +# Extract the raw dave public key for the swanctl/rw-dnssec scenario +TEST="${TEST_DIR}/swanctl/rw-dnssec" TEST_PUB="${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey/davePub.pem" HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey # Put a copy into the swanctl/rw-pubkey-keyid scenario @@ -327,6 +351,29 @@ TEST="${TEST_DIR}/openssl-ikev2/net2net-pkcs12" cp ${MOON_PKCS12} "${TEST}/hosts/moon/etc/swanctl/pkcs12" cp ${SUN_PKCS12} "${TEST}/hosts/sun/etc/swanctl/pkcs12" +################################################################################ +# DNSSEC Zone Files # +################################################################################ + +# Store moon and sun certificates in strongswan.org zone +ZONE_FILE="${CA_DIR}/db.strongswan.org.certs-and-keys" +echo "; Automatically generated for inclusion in zone file" > ${ZONE_FILE} +for h in moon sun +do + HOST_CERT=${DIR}/hosts/${h}/${SWANCTL_DIR}/x509/${h}Cert.pem + cert=$(grep --invert-match ^----- ${HOST_CERT}| sed -e 's/^/\t\t\t\t/') + echo -e "${h}\tIN\tCERT\t( 1 0 0\n${cert}\n\t\t\t\t)" >> ${ZONE_FILE} +done + +# Store public keys in strongswan.org zone +echo ";" >> ${ZONE_FILE} +for h in moon sun carol dave +do + HOST_CERT=${DIR}/hosts/${h}/${SWANCTL_DIR}/x509/${h}Cert.pem + pubkey=$(pki --pub --type x509 --in ${HOST_CERT} --outform dnskey | sed 's/\(.\{0,64\}\)/\t\t\t\t\1\n/g') + echo -e "${h}\tIN\tIPSECKEY\t( 10 3 2 ${h}.strongswan.org.\n${pubkey}\n\t\t\t\t)" >> ${ZONE_FILE} +done + # Generate a carol certificate for the swanctl/crl-to-cache scenario with base CDP TEST="${TEST_DIR}/swanctl/crl-to-cache" TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" From 0c924641e6d47761c493f80b10eecb97c7aab298 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 18 Apr 2019 16:14:16 +0200 Subject: [PATCH 06/20] pki: Add different output options for --keyid Makes machine-processing these identifiers easier. --- src/pki/commands/keyid.c | 116 ++++++++++++++++++++++++++++++++--- src/pki/man/pki---keyid.1.in | 37 ++++++++--- 2 files changed, 138 insertions(+), 15 deletions(-) diff --git a/src/pki/commands/keyid.c b/src/pki/commands/keyid.c index 001b9ff5c..10651f5ca 100644 --- a/src/pki/commands/keyid.c +++ b/src/pki/commands/keyid.c @@ -21,6 +21,46 @@ #include #include +typedef enum { + FORMAT_PRETTY, + FORMAT_HEX, + FORMAT_BASE64, + FORMAT_BINARY, +} format_t; + +/** + * Print a single keyid in the requested format + */ +static bool print_id(chunk_t id, format_t format, char *desc) +{ + chunk_t chunk; + + switch (format) + { + case FORMAT_PRETTY: + printf("%s:\n %#B\n", desc, &id); + break; + case FORMAT_HEX: + chunk = chunk_to_hex(id, NULL, FALSE); + printf("%.*s\n", (int)chunk.len, chunk.ptr); + chunk_free(&chunk); + break; + case FORMAT_BASE64: + chunk = chunk_to_base64(id, NULL); + printf("%.*s\n", (int)chunk.len, chunk.ptr); + chunk_free(&chunk); + break; + case FORMAT_BINARY: + if (fwrite(id.ptr, id.len, 1, stdout) != 1) + { + fprintf(stderr, "writing %s failed\n", desc); + return FALSE; + } + break; + } + return TRUE; +} + /** * Calculate the keyid of a key/certificate */ @@ -31,9 +71,15 @@ static int keyid() certificate_t *cert; private_key_t *private; public_key_t *public; + format_t format = FORMAT_PRETTY; + enum { + ID_TYPE_ALL, + ID_TYPE_SPK, + ID_TYPE_SPKI, + } id_type = FORMAT_PRETTY; char *file = NULL, *keyid = NULL; void *cred; - chunk_t id; + chunk_t id, spk = chunk_empty, spki = chunk_empty; char *arg; while (TRUE) @@ -86,6 +132,38 @@ static int keyid() return command_usage( "invalid input type"); } continue; + case 'I': + if (streq(arg, "spk")) + { + id_type = ID_TYPE_SPK; + } + else if (streq(arg, "spki")) + { + id_type = ID_TYPE_SPKI; + } + else if (!streq(arg, "all")) + { + return command_usage( "invalid id type"); + } + continue; + case 'f': + if (streq(arg, "hex")) + { + format = FORMAT_HEX; + } + else if (streq(arg, "base64")) + { + format = FORMAT_BASE64; + } + else if (streq(arg, "bin")) + { + format = FORMAT_BINARY; + } + else if (!streq(arg, "pretty")) + { + return command_usage( "invalid output format"); + } + continue; case 'i': file = arg; continue; @@ -138,11 +216,11 @@ static int keyid() private = cred; if (private->get_fingerprint(private, KEYID_PUBKEY_SHA1, &id)) { - printf("subjectKeyIdentifier: %#B\n", &id); + spk = chunk_clone(id); } if (private->get_fingerprint(private, KEYID_PUBKEY_INFO_SHA1, &id)) { - printf("subjectPublicKeyInfo hash: %#B\n", &id); + spki = chunk_clone(id); } private->destroy(private); } @@ -151,11 +229,11 @@ static int keyid() public = cred; if (public->get_fingerprint(public, KEYID_PUBKEY_SHA1, &id)) { - printf("subjectKeyIdentifier: %#B\n", &id); + spk = chunk_clone(id); } if (public->get_fingerprint(public, KEYID_PUBKEY_INFO_SHA1, &id)) { - printf("subjectPublicKeyInfo hash: %#B\n", &id); + spki = chunk_clone(id); } public->destroy(public); } @@ -170,15 +248,34 @@ static int keyid() } if (public->get_fingerprint(public, KEYID_PUBKEY_SHA1, &id)) { - printf("subjectKeyIdentifier: %#B\n", &id); + spk = chunk_clone(id); } if (public->get_fingerprint(public, KEYID_PUBKEY_INFO_SHA1, &id)) { - printf("subjectPublicKeyInfo hash: %#B\n", &id); + spki = chunk_clone(id); } public->destroy(public); cert->destroy(cert); } + + if (id_type == ID_TYPE_ALL || id_type == ID_TYPE_SPK) + { + if (!spk.len || + !print_id(spk, format, "subjkey (SHA-1 of subjectPublicKey)")) + { + return 1; + } + } + if (id_type == ID_TYPE_ALL || id_type == ID_TYPE_SPKI) + { + if (!spki.len || + !print_id(spki, format, "keyid (SHA-1 of subjectPublicKeyInfo)")) + { + return 1; + } + } + chunk_free(&spk); + chunk_free(&spki); return 0; } @@ -190,12 +287,15 @@ static void __attribute__ ((constructor))reg() command_register((command_t) { keyid, 'k', "keyid", "calculate key identifiers of a key/certificate", - {"[--in file|--keyid hex] [--type priv|rsa|ecdsa|bliss|pub|pkcs10|x509]"}, + {"[--in file|--keyid hex] [--type priv|rsa|ecdsa|bliss|pub|pkcs10|x509]", + "[--id all|spk|spki] [--format pretty|hex|base64|bin]"}, { {"help", 'h', 0, "show usage information"}, {"in", 'i', 1, "input file, default: stdin"}, {"keyid", 'x', 1, "smartcard or TPM private key object handle"}, {"type", 't', 1, "type of key, default: priv"}, + {"id", 'I', 1, "type of identifier, default: all"}, + {"format", 'f', 1, "output format, default: pretty"}, } }); } diff --git a/src/pki/man/pki---keyid.1.in b/src/pki/man/pki---keyid.1.in index 148b95ec3..594643a22 100644 --- a/src/pki/man/pki---keyid.1.in +++ b/src/pki/man/pki---keyid.1.in @@ -1,4 +1,4 @@ -.TH "PKI \-\-KEYID" 1 "2013-07-31" "@PACKAGE_VERSION@" "strongSwan" +.TH "PKI \-\-KEYID" 1 "2019-04-29" "@PACKAGE_VERSION@" "strongSwan" . .SH "NAME" . @@ -11,6 +11,8 @@ pki \-\-keyid \- Calculate key identifiers of a key or certificate .IR file | \fB\-\-keyid\fR .IR hex ] .OP \-\-type type +.OP \-\-id id-type +.OP \-\-format format .OP \-\-debug level .YS . @@ -54,23 +56,44 @@ Type of input. One of \fIpriv\fR (private key), \fIrsa\fR (RSA private key), \fIecdsa\fR (ECDSA private key), \fIbliss\fR (BLISS private key), \fIpub\fR (public key), \fIpkcs10\fR (PKCS#10 certificate request), \fIx509\fR (X.509 certificate), defaults to \fIpriv\fR. +.TP +.BI "\-I, \-\-id " id-type +Type of identifier. One of \fIall\fR (all identifiers), \fIspk\fR (SHA-1 hash +of subjectPublicKey), \fIspki\fR (SHA-1 hash of subjectPublicKeyInfo), defaults +to \fIall\fR. +.TP +.BI "\-f, \-\-format " format +Output format. One of \fIpretty\fR (user-readable output), \fIhex\fR +(hexadecimal encoding), \fIbase64\fR (Base64 encoding), \fIbin\fR (raw binary +data), defaults to \fIpretty\fR. . .SH "EXAMPLES" . Calculate key identifiers of an RSA private key: .PP .EX - pki --keyid --in key.der - subjectKeyIdentifier: 6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1... - subjectPublicKeyInfo hash: 6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1... + $ pki --keyid --in key.der + subjkey (SHA-1 of subjectPublicKey): + 6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1... + keyid (SHA-1 of subjectPublicKeyInfo): + 6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1... .EE .PP Calculate key identifiers of an X.509 certificate: .PP .EX - pki --keyid --in cert.der --type x509 - subjectKeyIdentifier: 6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1... - subjectPublicKeyInfo hash: 6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1... + $ pki --keyid --in cert.der --type x509 + subjkey (SHA-1 of subjectPublicKey): + 6a:9c:74:d1:f8:89:79:89:f6:5a:94:e9:89:f1... + keyid (SHA-1 of subjectPublicKeyInfo): + 6e:55:dc:7e:9c:a5:58:d9:5b:e3:c7:13:14:e1... +.EE +.PP +Calculate keyid in simple hex encoding of an X.509 certificate: +.PP +.EX + $ pki --keyid --in cert.der --type x509 --id spki --format hex + 6e55dc7e9ca558d95be3c71314e1... .EE .PP . From 00f1d0972969bbfff23df094f2619b633207aa9a Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sun, 28 Apr 2019 17:16:59 +0200 Subject: [PATCH 07/20] testing: Build data.sql files for SQL test cases --- testing/hosts/winnetou/etc/ca/generate-crl | 3 + testing/scripts/build-certs | 214 +++++++++++++- testing/tests/sql/.gitignore | 1 + .../hosts/carol/etc/ipsec.d/data.sql | 152 ---------- .../hosts/carol/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 146 --------- .../hosts/dave/etc/ipsec.d/data.sql.in | 146 +++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 225 -------------- .../hosts/moon/etc/ipsec.d/data.sql.in | 225 ++++++++++++++ .../hosts/carol/etc/ipsec.d/data.sql | 152 ---------- .../hosts/carol/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 152 ---------- .../hosts/dave/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 219 -------------- .../hosts/moon/etc/ipsec.d/data.sql.in | 219 ++++++++++++++ .../hosts/carol/etc/ipsec.d/data.sql | 152 ---------- .../hosts/carol/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 152 ---------- .../hosts/dave/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 220 -------------- .../hosts/moon/etc/ipsec.d/data.sql.in | 220 ++++++++++++++ .../hosts/carol/etc/ipsec.d/data.sql | 152 ---------- .../hosts/carol/etc/ipsec.d/data.sql.in | 151 ++++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 151 ---------- .../hosts/dave/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 213 ------------- .../hosts/moon/etc/ipsec.d/data.sql.in | 213 +++++++++++++ .../hosts/carol/etc/ipsec.d/data.sql | 152 ---------- .../hosts/carol/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 152 ---------- .../hosts/dave/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 178 ----------- .../hosts/moon/etc/ipsec.d/data.sql.in | 178 +++++++++++ .../hosts/carol/etc/ipsec.d/data.sql | 191 ------------ .../hosts/carol/etc/ipsec.d/data.sql.in | 194 ++++++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 194 ------------ .../hosts/dave/etc/ipsec.d/data.sql.in | 194 ++++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 164 ---------- .../hosts/moon/etc/ipsec.d/data.sql.in | 163 ++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 152 ---------- .../hosts/moon/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/sun/etc/ipsec.d/data.sql | 152 ---------- .../hosts/sun/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../sun/etc/ipsec.d/{data.sql => data.sql.in} | 0 .../hosts/moon/etc/ipsec.d/data.sql | 249 ---------------- .../hosts/moon/etc/ipsec.d/data.sql.in | 249 ++++++++++++++++ .../hosts/sun/etc/ipsec.d/data.sql | 249 ---------------- .../hosts/sun/etc/ipsec.d/data.sql.in | 249 ++++++++++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 279 ------------------ .../hosts/moon/etc/ipsec.d/data.sql.in | 279 ++++++++++++++++++ .../hosts/sun/etc/ipsec.d/data.sql | 273 ----------------- .../hosts/sun/etc/ipsec.d/data.sql.in | 273 +++++++++++++++++ .../rw-cert/hosts/carol/etc/ipsec.d/data.sql | 152 ---------- .../hosts/carol/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../rw-cert/hosts/dave/etc/ipsec.d/data.sql | 152 ---------- .../hosts/dave/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../rw-cert/hosts/moon/etc/ipsec.d/data.sql | 152 ---------- .../hosts/moon/etc/ipsec.d/data.sql.in | 152 ++++++++++ .../hosts/carol/etc/ipsec.d/data.sql | 128 -------- .../hosts/carol/etc/ipsec.d/data.sql.in | 128 ++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 178 ----------- .../hosts/moon/etc/ipsec.d/data.sql.in | 178 +++++++++++ .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../etc/ipsec.d/{data.sql => data.sql.in} | 0 .../hosts/carol/etc/ipsec.d/data.sql | 128 -------- .../hosts/carol/etc/ipsec.d/data.sql.in | 128 ++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 129 -------- .../hosts/dave/etc/ipsec.d/data.sql.in | 129 ++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 203 ------------- .../hosts/moon/etc/ipsec.d/data.sql.in | 203 +++++++++++++ testing/tests/sql/rw-rsa-keyid/evaltest.dat | 8 +- .../hosts/carol/etc/ipsec.d/data.sql | 134 --------- .../hosts/carol/etc/ipsec.d/data.sql.in | 134 +++++++++ .../hosts/dave/etc/ipsec.d/data.sql | 134 --------- .../hosts/dave/etc/ipsec.d/data.sql.in | 134 +++++++++ .../hosts/moon/etc/ipsec.d/data.sql | 170 ----------- .../hosts/moon/etc/ipsec.d/data.sql.in | 170 +++++++++++ .../rw-rsa/hosts/carol/etc/ipsec.d/data.sql | 134 --------- .../hosts/carol/etc/ipsec.d/data.sql.in | 134 +++++++++ .../rw-rsa/hosts/dave/etc/ipsec.d/data.sql | 133 --------- .../rw-rsa/hosts/dave/etc/ipsec.d/data.sql.in | 133 +++++++++ .../rw-rsa/hosts/moon/etc/ipsec.d/data.sql | 170 ----------- .../rw-rsa/hosts/moon/etc/ipsec.d/data.sql.in | 170 +++++++++++ .../hosts/alice/etc/ipsec.d/data.sql | 199 ------------- .../hosts/alice/etc/ipsec.d/data.sql.in | 199 +++++++++++++ .../hosts/sun/etc/ipsec.d/data.sql | 195 ------------ .../hosts/sun/etc/ipsec.d/data.sql.in | 195 ++++++++++++ .../hosts/venus/etc/ipsec.d/data.sql | 199 ------------- .../hosts/venus/etc/ipsec.d/data.sql.in | 199 +++++++++++++ 94 files changed, 7373 insertions(+), 7177 deletions(-) create mode 100644 testing/tests/sql/.gitignore delete mode 100644 testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql.in rename testing/tests/sql/net2net-psk/hosts/moon/etc/ipsec.d/{data.sql => data.sql.in} (100%) rename testing/tests/sql/net2net-psk/hosts/sun/etc/ipsec.d/{data.sql => data.sql.in} (100%) delete mode 100644 testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql.in rename testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/ipsec.d/{data.sql => data.sql.in} (100%) rename testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/ipsec.d/{data.sql => data.sql.in} (100%) rename testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/ipsec.d/{data.sql => data.sql.in} (100%) rename testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/ipsec.d/{data.sql => data.sql.in} (100%) rename testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/ipsec.d/{data.sql => data.sql.in} (100%) rename testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/ipsec.d/{data.sql => data.sql.in} (100%) delete mode 100644 testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql.in delete mode 100644 testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql create mode 100644 testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql.in diff --git a/testing/hosts/winnetou/etc/ca/generate-crl b/testing/hosts/winnetou/etc/ca/generate-crl index 39db1af63..a59245d21 100755 --- a/testing/hosts/winnetou/etc/ca/generate-crl +++ b/testing/hosts/winnetou/etc/ca/generate-crl @@ -8,6 +8,9 @@ ROOT="/var/www" # strongSwan Root CA cd /etc/ca +# copy default web page +cp index.html ${ROOT} + # copy strongsSwan CA certificate cp strongswanCert.pem ${ROOT} cp strongswanCert.der ${ROOT} diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index 9e3031c9d..242ea4122 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -13,6 +13,7 @@ PROJECT="strongSwan Project" CA_DIR="${DIR}/hosts/winnetou/etc/ca" CA_KEY="${CA_DIR}/strongswanKey.pem" CA_CERT="${CA_DIR}/strongswanCert.pem" +CA_CERT_DER="${CA_DIR}/strongswanCert.der" CA_CRL="${CA_DIR}/strongswan.crl" CA_LAST_CRL="${CA_DIR}/strongswan_last.crl" CA_CDP="http://crl.strongswan.org/strongswan.crl" @@ -32,11 +33,13 @@ NOW=`date "+%y%m%d%H%M%SZ"` RESEARCH_DIR="${CA_DIR}/research" RESEARCH_KEY="${RESEARCH_DIR}/researchKey.pem" RESEARCH_CERT="${RESEARCH_DIR}/researchCert.pem" +RESEARCH_CERT_DER="${RESEARCH_DIR}/researchCert.der" RESEARCH_CDP="http://crl.strongswan.org/research.crl" # SALES_DIR="${CA_DIR}/sales" SALES_KEY="${SALES_DIR}/salesKey.pem" SALES_CERT="${SALES_DIR}/salesCert.pem" +SALES_CERT_DER="${SALES_DIR}/salesCert.der" SALES_CDP="http://crl.strongswan.org/sales.crl" # DUCK_DIR="${CA_DIR}/duck" @@ -84,8 +87,11 @@ TEST_DIR="${DIR}/tests" # Create directories mkdir -p ${CA_DIR}/certs +mkdir -p ${CA_DIR}/keys mkdir -p ${RESEARCH_DIR}/certs +mkdir -p ${RESEARCH_DIR}/keys mkdir -p ${SALES_DIR}/certs +mkdir -p ${SALES_DIR}/keys mkdir -p ${DUCK_DIR}/certs mkdir -p ${ECDSA_DIR}/certs mkdir -p ${RFC3779_DIR}/certs @@ -115,6 +121,9 @@ done # Put a copy onto the alice FreeRADIUS server cp ${CA_CERT} ${DIR}/hosts/alice/etc/raddb/certs +# Convert strongSwan Root CA certificate into DER format +openssl x509 -in ${CA_CERT} -outform der -out ${CA_CERT_DER} + # Gernerate a stale CRL pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} \ --this-update "${START}" --lifetime 1 > ${CA_LAST_CRL} @@ -133,29 +142,25 @@ do # Put a copy into swanctl directory tree cp ${HOST_KEY} ${HOST_DIR}/${SWANCTL_DIR}/rsa + + # Convert host key into DER format + openssl rsa -in ${HOST_KEY} -outform der -out ${CA_DIR}/keys/${h}Key.der \ + 2> /dev/null done -# Convert moon private key and Root CA certificate into DER format +# Put DER-encoded moon private key and Root CA certificate into tkm scenarios for t in host2host-initiator host2host-responder host2host-xfrmproxy \ net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey do - HOST_KEY=${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem TEST="${TEST_DIR}/tkm/${t}" - TEST_KEY=${TEST}/hosts/moon/${TKM_DIR}/moonKey.der - TEST_CERT=${TEST}/hosts/moon/${TKM_DIR}/strongswanCert.der - openssl rsa -in ${HOST_KEY} -outform der -out ${TEST_KEY} 2> /dev/null - openssl x509 -in ${CA_CERT} -outform der -out ${TEST_CERT} + cp ${CA_DIR}/keys/moonKey.der ${CA_CERT_DER} ${TEST}/hosts/moon/${TKM_DIR} done -# Convert sun private key and Root CA certificate into DER format +# Put DER_encoded sun private key and Root CA certificate into tkm scenarios for t in multiple-clients do - HOST_KEY=${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem TEST="${TEST_DIR}/tkm/${t}" - TEST_KEY=${TEST}/hosts/sun/${TKM_DIR}/sunKey.der - TEST_CERT=${TEST}/hosts/sun/${TKM_DIR}/strongswanCert.der - openssl rsa -in ${HOST_KEY} -outform der -out ${TEST_KEY} 2> /dev/null - openssl x509 -in ${CA_CERT} -outform der -out ${TEST_CERT} + cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} done # Put DER-encoded moon private key and Root CA certificate into tkm scenarios @@ -529,6 +534,9 @@ cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca TEST="${TEST_DIR}/swanctl/ocsp-multi-level" cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +# Convert Research CA certificate into DER format +openssl x509 -in ${RESEARCH_CERT} -outform der -out ${RESEARCH_CERT_DER} + # Generate Research CA with the same private key as above but invalid CDP TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" @@ -599,6 +607,9 @@ cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca TEST="${TEST_DIR}/swanctl/ocsp-multi-level" cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +# Convert Sales CA certificate into DER format +openssl x509 -in ${SALES_CERT} -outform der -out ${SALES_CERT_DER} + # Generate an AES-128 encrypted moon key and a SHA-224 hashed certificate TEST="${TEST_DIR}/ikev2/strong-keys-certs" TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey-aes128.pem" @@ -880,6 +891,10 @@ pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem +# Save a copy of the private key in DER format +openssl rsa -in ${TEST_KEY} -outform der \ + -out ${RESEARCH_DIR}/keys/${SERIAL}.der 2> /dev/null + # Put a copy in the ikev2/multilevel-ca-cr-init scenario TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private @@ -1027,6 +1042,10 @@ pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ --crl ${SALES_CDP} --outform pem > ${TEST_CERT} cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem +# Save a copy of the private key in DER format +openssl rsa -in ${TEST_KEY} -outform der \ + -out ${SALES_DIR}/keys/${SERIAL}.der 2> /dev/null + # Put a copy in the ikev2/multilevel-ca-cr-init scenario TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private @@ -1648,3 +1667,174 @@ cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/certs/ TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss/ cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509/ + +################################################################################ +# SQL Data # +################################################################################ + +CA_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CA_KEY}` +CA_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${CA_KEY}` +CA_CERT_HEX=`cat ${CA_CERT_DER} | hexdump -v -e '/1 "%02x"'` +CA_CERT_PEM_HEX=`cat ${CA_CERT} | hexdump -v -e '/1 "%02x"'` +# +MOON_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +MOON_KEY="${CA_DIR}/keys/moonKey.der" +MOON_KEY_PEM="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +MOON_KEY_PEM_HEX=`cat ${MOON_KEY_PEM} | hexdump -v -e '/1 "%02x"'` +MOON_KEY_HEX=`cat ${MOON_KEY} | hexdump -v -e '/1 "%02x"'` +MOON_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${MOON_KEY}` +MOON_PUB_HEX=`pki --pub --type rsa --in ${MOON_KEY} | hexdump -v -e '/1 "%02x"'` +MOON_CERT_HEX=`openssl x509 -in ${MOON_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +MOON_CERT_PEM_HEX=`cat ${MOON_CERT} | hexdump -v -e '/1 "%02x"'` +# +SUN_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +SUN_KEY="${CA_DIR}/keys/sunKey.der" +SUN_KEY_PEM="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +SUN_KEY_PEM_HEX=`cat ${SUN_KEY_PEM} | hexdump -v -e '/1 "%02x"'` +SUN_KEY_HEX=`cat ${SUN_KEY} | hexdump -v -e '/1 "%02x"'` +SUN_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${SUN_KEY}` +SUN_CERT_HEX=`openssl x509 -in ${SUN_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +SUN_CERT_PEM_HEX=`cat ${SUN_CERT} | hexdump -v -e '/1 "%02x"'` +# +CAROL_CERT="${DIR}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CAROL_KEY="${CA_DIR}/keys/carolKey.der" +CAROL_KEY_HEX=`cat ${CAROL_KEY} | hexdump -v -e '/1 "%02x"'` +CAROL_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CAROL_KEY}` +CAROL_PUB_HEX=`pki --pub --type rsa --in ${CAROL_KEY} | hexdump -v -e '/1 "%02x"'` +CAROL_CERT_HEX=`openssl x509 -in ${CAROL_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +DAVE_CERT="${DIR}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +DAVE_KEY="${CA_DIR}/keys/daveKey.der" +DAVE_KEY_HEX=`cat ${DAVE_KEY} | hexdump -v -e '/1 "%02x"'` +DAVE_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${DAVE_KEY}` +DAVE_PUB_HEX=`pki --pub --type rsa --in ${DAVE_KEY} | hexdump -v -e '/1 "%02x"'` +DAVE_CERT_HEX=`openssl x509 -in ${DAVE_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +ALICE_CERT="${DIR}/hosts/alice/${SWANCTL_DIR}/x509/aliceCert.pem" +ALICE_KEY="${CA_DIR}/keys/aliceKey.der" +ALICE_KEY_HEX=`cat ${ALICE_KEY} | hexdump -v -e '/1 "%02x"'` +ALICE_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${ALICE_KEY}` +ALICE_CERT_HEX=`openssl x509 -in ${ALICE_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +VENUS_CERT="${DIR}/hosts/venus/${SWANCTL_DIR}/x509/venusCert.pem" +VENUS_KEY="${CA_DIR}/keys/venusKey.der" +VENUS_KEY_HEX=`cat ${VENUS_KEY} | hexdump -v -e '/1 "%02x"'` +VENUS_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${VENUS_KEY}` +VENUS_CERT_HEX=`openssl x509 -in ${VENUS_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +RESEARCH_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${RESEARCH_KEY}` +RESEARCH_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${RESEARCH_KEY}` +RESEARCH_CERT_HEX=`cat ${RESEARCH_CERT_DER} | hexdump -v -e '/1 "%02x"'` +# +CAROL_R_CERT="${RESEARCH_DIR}/certs/01.pem" +CAROL_R_KEY="${RESEARCH_DIR}/keys/01.der" +CAROL_R_KEY_HEX=`cat ${CAROL_R_KEY} | hexdump -v -e '/1 "%02x"'` +CAROL_R_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CAROL_R_KEY}` +CAROL_R_CERT_HEX=`openssl x509 -in ${CAROL_R_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +SALES_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${SALES_KEY}` +SALES_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${SALES_KEY}` +SALES_CERT_HEX=`cat ${SALES_CERT_DER} | hexdump -v -e '/1 "%02x"'` +# +DAVE_S_CERT="${SALES_DIR}/certs/01.pem" +DAVE_S_KEY="${SALES_DIR}/keys/01.der" +DAVE_S_KEY_HEX=`cat ${DAVE_S_KEY} | hexdump -v -e '/1 "%02x"'` +DAVE_S_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${DAVE_S_KEY}` +DAVE_S_CERT_HEX=`openssl x509 -in ${DAVE_S_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +for t in ip-pool-db ip-pool-db-expired ip-pool-db-restart ip-split-pools-db \ + ip-split-pools-db-restart multi-level-ca rw-cert rw-psk-rsa-split \ + rw-psk-ipv4 rw-psk-ipv6 rw-rsa rw-rsa-keyid +do + for h in carol dave moon + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ + -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ + -e "s/MOON_PUB_HEX/${MOON_PUB_HEX}/g" \ + -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ + -e "s/CAROL_KEY_HEX/${CAROL_KEY_HEX}/g" \ + -e "s/CAROL_SPK_HEX/${CAROL_SPK_HEX}/g" \ + -e "s/CAROL_PUB_HEX/${CAROL_PUB_HEX}/g" \ + -e "s/CAROL_CERT_HEX/${CAROL_CERT_HEX}/g" \ + -e "s/DAVE_KEY_HEX/${DAVE_KEY_HEX}/g" \ + -e "s/DAVE_SPK_HEX/${DAVE_SPK_HEX}/g" \ + -e "s/DAVE_PUB_HEX/${DAVE_PUB_HEX}/g" \ + -e "s/DAVE_CERT_HEX/${DAVE_CERT_HEX}/g" \ + -e "s/RESEARCH_SPK_HEX/${RESEARCH_SPK_HEX}/g" \ + -e "s/RESEARCH_SPKI_HEX/${RESEARCH_SPKI_HEX}/g" \ + -e "s/RESEARCH_CERT_HEX/${RESEARCH_CERT_HEX}/g" \ + -e "s/CAROL_R_KEY_HEX/${CAROL_R_KEY_HEX}/g" \ + -e "s/CAROL_R_SPK_HEX/${CAROL_R_SPK_HEX}/g" \ + -e "s/CAROL_R_CERT_HEX/${CAROL_R_CERT_HEX}/g" \ + -e "s/SALES_SPK_HEX/${SALES_SPK_HEX}/g" \ + -e "s/SALES_SPKI_HEX/${SALES_SPKI_HEX}/g" \ + -e "s/SALES_CERT_HEX/${SALES_CERT_HEX}/g" \ + -e "s/DAVE_S_KEY_HEX/${DAVE_S_KEY_HEX}/g" \ + -e "s/DAVE_S_SPK_HEX/${DAVE_S_SPK_HEX}/g" \ + -e "s/DAVE_S_CERT_HEX/${DAVE_S_CERT_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done +# +for t in rw-eap-aka-rsa +do + for h in carol moon + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ + -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ + -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done +# +for t in net2net-cert net2net-psk net2net-route-pem net2net-start-pem +do + for h in moon sun + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/CA_CERT_PEM_HEX/${CA_CERT_PEM_HEX}/g" \ + -e "s/MOON_KEY_PEM_HEX/${MOON_KEY_PEM_HEX}/g" \ + -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ + -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ + -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ + -e "s/MOON_CERT_PEM_HEX/${MOON_CERT_PEM_HEX}/g" \ + -e "s/SUN_KEY_PEM_HEX/${SUN_KEY_PEM_HEX}/g" \ + -e "s/SUN_KEY_HEX/${SUN_KEY_HEX}/g" \ + -e "s/SUN_SPK_HEX/${SUN_SPK_HEX}/g" \ + -e "s/SUN_CERT_HEX/${SUN_CERT_HEX}/g" \ + -e "s/SUN_CERT_PEM_HEX/${SUN_CERT_PEM_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done +# +for t in shunt-policies-nat-rw +do + for h in alice venus sun + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/ALICE_KEY_HEX/${ALICE_KEY_HEX}/g" \ + -e "s/ALICE_SPK_HEX/${ALICE_SPK_HEX}/g" \ + -e "s/ALICE_CERT_HEX/${ALICE_CERT_HEX}/g" \ + -e "s/VENUS_KEY_HEX/${VENUS_KEY_HEX}/g" \ + -e "s/VENUS_SPK_HEX/${VENUS_SPK_HEX}/g" \ + -e "s/VENUS_CERT_HEX/${VENUS_CERT_HEX}/g" \ + -e "s/SUN_KEY_HEX/${SUN_KEY_HEX}/g" \ + -e "s/SUN_SPK_HEX/${SUN_SPK_HEX}/g" \ + -e "s/SUN_CERT_HEX/${SUN_CERT_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done diff --git a/testing/tests/sql/.gitignore b/testing/tests/sql/.gitignore new file mode 100644 index 000000000..6f296432e --- /dev/null +++ b/testing/tests/sql/.gitignore @@ -0,0 +1 @@ +data.sql diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index d5c4452e2..000000000 --- a/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 11, X'5c597062572d2a249c5c94569b895ee5c505b6bd' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=carol@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..5bf57de7c --- /dev/null +++ b/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 11, X'CAROL_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=carol@strongswan.org */ + 1, 1, X'CAROL_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index a44dc276c..000000000 --- a/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,146 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 11, X'ec16639928815e01cc0227c0b9cb1feab7987037' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..305fc82b2 --- /dev/null +++ b/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,146 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 11, X'DAVE_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=dave@strongswan.org */ + 1, 1, X'DAVE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 315749b00..000000000 --- a/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,225 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* alice@strongswan.org */ - 3, X'616c696365407374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'308204a30201000282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f02030100010282010004035ea5faaf11950d0ead7d0dea6d252e29a56138c393e40e99489a50c9c63e09856c2cd90ca17b335fa9540e1947fcb7ad7267b4dce00a30cefb2469fdc18cc78fe45cac3b84f796366e1fe887575685a19ea16ea96d2c29bc3d05ce440aa40365382affe5b96d57199b9c77ed23fb0606f5101886a5e7739113e8e0575f922ba234a00216882a54da866960c02da7b5b13a782c009686b64fff9b67241fe4fcb951f07bd809f47667124f88a3a05749c30d36bb1b77627ea50ef9c105dfcc71331c08fe125856ce1b5ce5779fa87c3f0dfa4f0d7fe56f2dd5a12a1a82acec56e531ecbca5833203c53b1bf4741538b8c3cce43ebe7db65e3ee0502123c0b902818100d84660baecc97714485814a7232ce90b37ea9b4120c9ba5e2ee2557f35a56b4c8a588e8078b85672bfbba3d504f270901d57df22b8235a4b2373f4b9161cc2f536121e93daf133e079b4d02b85719cff50921fd74692630aa809f24d8c6257876316be00a42fff6e723612dda3090d474894d646e269844930fd168a0026740502818100c2b25e6372c06b03a46a52453054ed2d7b2a644f754c5c0cb7d4d09f3cac187dd0ebef4dfaaca94b92827aceb9d3eaa0af005546644d7358b1ca54e83f707404a639383fc1c0cc752ffcd23b7c7b2386436ac0aedf7cb6ba418b7154b1af14cf4c675df1f8448953b50835dc334f3f9127906b4e3d27cce263733ee0d0dc865302818100c365423b5f76dd38dbeb882d40e070640c4ecf99d5cfabab2fdc98b5e777de2b36caaf646eaccc9dbb9001829187a01ef403d1bb02761e3bc87a18dda796b0a4ee070ccd347fbb08d1ac846eed8f29f2998e8b69e97e9430aa84e1ff22182f50483be1c99e8d26cf582c767afbb34fe5d9336f2c779e3140171c716298a42529028180724a107c62552fbca09c4515166d141959aea5d9baea8b32700b3e37eb7ebe95c4b96aeda4940c812f4ce6d8495f6be0cd39edd4f7763b9aba2b22b27ee2fd47e967b76c3dc9767be8228a2a9f450db2780ac7771ffbeeabe16400b00de9cfd66c6c554a8049832f9f1a65bb906719d2949e034f9738b0ddc831539cd71e4cbf0281807b9d01a2ef8a8228a41a58cceb0ad8eb449fa350ed2c07d012c452e947cac687a9a9f9a04c663356e661e8af30373d863d182d7038eebc901d3c78bc1e4dbf74c8fcba141ba56b0af66fa1c40e5defe7ed382ec008c98fb79f139e46cbc9570d110dc8930fd6f89fdcdda21fc790d4049ff24ffe82704d9234a56124905037d5' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, pool -) VALUES ( - 'rw', 1, 4, 6, 'bigpool' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - -/* Pools */ - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'bigpool', X'0a030001', X'0a030006', 3600 -); - -INSERT INTO addresses ( - pool, address, identity, acquired, released -) VALUES ( - 1, X'0a030001', 8, 1211299013 , 1211299205 -); - -INSERT INTO addresses ( - pool, address, identity, acquired, released -) VALUES ( - 1, X'0a030002', 9, 1211299031, 1211299187 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030003' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030004' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030005' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030006' -); - -INSERT INTO leases ( - address, identity, acquired, released -) VALUES ( - 1, 8, 1211299013 , 1211299205 -); - -INSERT INTO leases ( - address, identity, acquired, released -) VALUES ( - 2, 9, 1211299031, 1211299187 -); diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..29b09e3e4 --- /dev/null +++ b/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,225 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* alice@strongswan.org */ + 3, X'616c696365407374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, pool +) VALUES ( + 'rw', 1, 4, 6, 'bigpool' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + +/* Pools */ + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'bigpool', X'0a030001', X'0a030006', 3600 +); + +INSERT INTO addresses ( + pool, address, identity, acquired, released +) VALUES ( + 1, X'0a030001', 8, 1211299013 , 1211299205 +); + +INSERT INTO addresses ( + pool, address, identity, acquired, released +) VALUES ( + 1, X'0a030002', 9, 1211299031, 1211299187 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030003' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030004' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030005' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030006' +); + +INSERT INTO leases ( + address, identity, acquired, released +) VALUES ( + 1, 8, 1211299013 , 1211299205 +); + +INSERT INTO leases ( + address, identity, acquired, released +) VALUES ( + 2, 9, 1211299031, 1211299187 +); diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index d5c4452e2..000000000 --- a/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 11, X'5c597062572d2a249c5c94569b895ee5c505b6bd' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=carol@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..5bf57de7c --- /dev/null +++ b/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 11, X'CAROL_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=carol@strongswan.org */ + 1, 1, X'CAROL_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index 6f2d0fc53..000000000 --- a/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 11, X'ec16639928815e01cc0227c0b9cb1feab7987037' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..f9490ecaf --- /dev/null +++ b/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 11, X'DAVE_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=dave@strongswan.org */ + 1, 1, X'DAVE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 399de69e5..000000000 --- a/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,219 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'308204223082030aa00302010202012b300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3134303832373134343435365a170d3139303832363134343435365a3046310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311c301a060355040313136d6f6f6e2e7374726f6e677377616e2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f0203010001a382011a3082011630090603551d1304023000300b0603551d0f0404030203a8301d0603551d0e04160414d8263d21ec7cdbbe5a390c5b70cb038021deae13306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100301e0603551d110417301582136d6f6f6e2e7374726f6e677377616e2e6f726730130603551d25040c300a06082b0601050507030130390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e7374726f6e677377616e2e6f72672f7374726f6e677377616e2e63726c300d06092a864886f70d01010b05000382010100a99e3e8d73e3ee3cb3e2e04de0e61c8992be55672ed24a095cb35bb254fda67f08fa251f522dde7e24eb0bd5a0939b4cbda8b72a75b1c1c46f222cd2edc15294decd615781083b7b1a1dee175048f137d6c3b4b584a1eab98a99985fc449fdf5ca47cffcbeeac10113f6c6ed7ec2ac048729a9e230661742d5a2f4f5fa8f86847ebacc8267c77cd1f41b5f32469e2faf34e21af1db281ea297a86ee1af30343c1dc9cc07d394ed8f1f2b4a18d6450b97a85fdfa2b90293c0ebbebab1144a46f0522a599588a4904eae5ae1cf200960196ed753f8dfdf6bc84a0e566de6ad741208d3a837c64e3e74c4abc09deabb5dd7ca9986069c85a834b63d81af0d3b35fc' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, pool -) VALUES ( - 'rw', 1, 4, 6, 'bigpool' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - -/* Pools */ - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'bigpool', X'0a030001', X'0a030006', 0 -); - -INSERT INTO addresses ( - pool, address, identity, acquired, released -) VALUES ( - 1, X'0a030001', 7, 1211299013 , 1211299205 -); - -INSERT INTO addresses ( - pool, address, identity, acquired, released -) VALUES ( - 1, X'0a030002', 8, 1211299031, 1211299187 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030003' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030004' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030005' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030006' -); - -INSERT INTO leases ( - address, identity, acquired, released -) VALUES ( - 1, 7, 1211299013 , 1211299205 -); - -INSERT INTO leases ( - address, identity, acquired, released -) VALUES ( - 2, 8, 1211299031, 1211299187 -); diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c971098ee --- /dev/null +++ b/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,219 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, pool +) VALUES ( + 'rw', 1, 4, 6, 'bigpool' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + +/* Pools */ + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'bigpool', X'0a030001', X'0a030006', 0 +); + +INSERT INTO addresses ( + pool, address, identity, acquired, released +) VALUES ( + 1, X'0a030001', 7, 1211299013 , 1211299205 +); + +INSERT INTO addresses ( + pool, address, identity, acquired, released +) VALUES ( + 1, X'0a030002', 8, 1211299031, 1211299187 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030003' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030004' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030005' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030006' +); + +INSERT INTO leases ( + address, identity, acquired, released +) VALUES ( + 1, 7, 1211299013 , 1211299205 +); + +INSERT INTO leases ( + address, identity, acquired, released +) VALUES ( + 2, 8, 1211299031, 1211299187 +); diff --git a/testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index ab343f2cc..000000000 --- a/testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 11, X'5c597062572d2a249c5c94569b895ee5c505b6bd' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'308203b8308202a0a003020102020100300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3034303931303130303131385a170d3139303930373130303131385a3045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100bff25f62ea3d566e58b3c87a49caf3ac61cfa96377734d842db3f8fd6ea023f7b0132e66265012317386729c6d7c427a8d9f167be138e8ebae2b12b95933baef36a315c3ddf224cee4bb9bd578135d0467382629621ff96b8d45f6e002e5083662dce181805c140b3f2ce93f83aee3c861cff610a39f0189cb3a3c7cb9bf7e2a09544e2170efaa18fdd4ff20fa94be176d7fecff821f68d17152041d9b46f0cfcfc1e4cf43de5d3f3a587763afe9267f53b11699b3264fc55c5189f5682871166cb98307950569641fa30ffb50de134fed2f973cef1a392827862bc4ddaa97bbb01442e293c41070d07224d4be47ae2753eb2bed4bc1da91c68ec780c4620f0f0203010001a381b23081af30120603551d130101ff040830060101ff020101300b0603551d0f040403020106301d0603551d0e041604145da7dd700651327ee7b66db3b5e5e060ea2e4def306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100300d06092a864886f70d01010b0500038201010023929aa101b412d1f5a577532088f209b34798a72ed7bd6945d74beaa2b3a1768764ad7f8b0df8d97a1a3ed1102e92a5f107e3059dc2250be49d02261ca83a342e0e5de7d43c37744e3fcea3197720ca1184d4ef94e6beeb0d241746b0b92b7fb1004c08e88bf9eb4ce60f3e149466f3e9fc3f98bce449f448f9d465e52b59f0101e6203cfad0d89e23509fa043d4c12021e8f32be7db8b2edbada641d64aa1a04af64a2ee5b814a753dd76b30e3de04f3c6b61166e632f8364d51cf3730a9564a4d93b9227c28b09b0f5595d92a632f72fe509a129ca9ee54df2b0edc6c3d38564f10256efcd8be82b2ec64977e3a6f5ef098eaa7f00662a6cded16cb80637c' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=carol@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..5bf57de7c --- /dev/null +++ b/testing/tests/sql/ip-pool-db/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 11, X'CAROL_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=carol@strongswan.org */ + 1, 1, X'CAROL_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index ca6c5d9f2..000000000 --- a/testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 11, X'ec16639928815e01cc0227c0b9cb1feab7987037' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..f9490ecaf --- /dev/null +++ b/testing/tests/sql/ip-pool-db/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 11, X'DAVE_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=dave@strongswan.org */ + 1, 1, X'DAVE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index e37653698..000000000 --- a/testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,220 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'308203b8308202a0a003020102020100300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3034303931303130303131385a170d3139303930373130303131385a3045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100bff25f62ea3d566e58b3c87a49caf3ac61cfa96377734d842db3f8fd6ea023f7b0132e66265012317386729c6d7c427a8d9f167be138e8ebae2b12b95933baef36a315c3ddf224cee4bb9bd578135d0467382629621ff96b8d45f6e002e5083662dce181805c140b3f2ce93f83aee3c861cff610a39f0189cb3a3c7cb9bf7e2a09544e2170efaa18fdd4ff20fa94be176d7fecff821f68d17152041d9b46f0cfcfc1e4cf43de5d3f3a587763afe9267f53b11699b3264fc55c5189f5682871166cb98307950569641fa30ffb50de134fed2f973cef1a392827862bc4ddaa97bbb01442e293c41070d07224d4be47ae2753eb2bed4bc1da91c68ec780c4620f0f0203010001a381b23081af30120603551d130101ff040830060101ff020101300b0603551d0f040403020106301d0603551d0e041604145da7dd700651327ee7b66db3b5e5e060ea2e4def306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100300d06092a864886f70d01010b0500038201010023929aa101b412d1f5a577532088f209b34798a72ed7bd6945d74beaa2b3a1768764ad7f8b0df8d97a1a3ed1102e92a5f107e3059dc2250be49d02261ca83a342e0e5de7d43c37744e3fcea3197720ca1184d4ef94e6beeb0d241746b0b92b7fb1004c08e88bf9eb4ce60f3e149466f3e9fc3f98bce449f448f9d465e52b59f0101e6203cfad0d89e23509fa043d4c12021e8f32be7db8b2edbada641d64aa1a04af64a2ee5b814a753dd76b30e3de04f3c6b61166e632f8364d51cf3730a9564a4d93b9227c28b09b0f5595d92a632f72fe509a129ca9ee54df2b0edc6c3d38564f10256efcd8be82b2ec64977e3a6f5ef098eaa7f00662a6cded16cb80637c' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'308204223082030aa00302010202012b300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3134303832373134343435365a170d3139303832363134343435365a3046310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311c301a060355040313136d6f6f6e2e7374726f6e677377616e2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f0203010001a382011a3082011630090603551d1304023000300b0603551d0f0404030203a8301d0603551d0e04160414d8263d21ec7cdbbe5a390c5b70cb038021deae13306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100301e0603551d110417301582136d6f6f6e2e7374726f6e677377616e2e6f726730130603551d25040c300a06082b0601050507030130390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e7374726f6e677377616e2e6f72672f7374726f6e677377616e2e63726c300d06092a864886f70d01010b05000382010100a99e3e8d73e3ee3cb3e2e04de0e61c8992be55672ed24a095cb35bb254fda67f08fa251f522dde7e24eb0bd5a0939b4cbda8b72a75b1c1c46f222cd2edc15294decd615781083b7b1a1dee175048f137d6c3b4b584a1eab98a99985fc449fdf5ca47cffcbeeac10113f6c6ed7ec2ac048729a9e230661742d5a2f4f5fa8f86847ebacc8267c77cd1f41b5f32469e2faf34e21af1db281ea297a86ee1af30343c1dc9cc07d394ed8f1f2b4a18d6450b97a85fdfa2b90293c0ebbebab1144a46f0522a599588a4904eae5ae1cf200960196ed753f8dfdf6bc84a0e566de6ad741208d3a837c64e3e74c4abc09deabb5dd7ca9986069c85a834b63d81af0d3b35fc' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, pool -) VALUES ( - 'rw', 1, 4, 6, 'bigpool' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - -/* Pools */ - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'bigpool', X'0a030001', X'0a030006', 0 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030001' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030002' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030003' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030004' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030005' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030006' -); - -INSERT INTO attributes ( - type, value -) VALUES ( - 3, X'c0a80096' -); - -INSERT INTO attributes ( - type, value -) VALUES ( - 3, X'0a010014' -); - -INSERT INTO attributes ( - type, value -) VALUES ( - 4, X'0a010014' -); - -INSERT INTO attributes ( - type, value -) VALUES ( - 7, X'7374726f6e675377616e20342e332e36' -); - diff --git a/testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..37fe6d99c --- /dev/null +++ b/testing/tests/sql/ip-pool-db/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,220 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, pool +) VALUES ( + 'rw', 1, 4, 6, 'bigpool' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + +/* Pools */ + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'bigpool', X'0a030001', X'0a030006', 0 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030001' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030002' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030003' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030004' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030005' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030006' +); + +INSERT INTO attributes ( + type, value +) VALUES ( + 3, X'c0a80096' +); + +INSERT INTO attributes ( + type, value +) VALUES ( + 3, X'0a010014' +); + +INSERT INTO attributes ( + type, value +) VALUES ( + 4, X'0a010014' +); + +INSERT INTO attributes ( + type, value +) VALUES ( + 7, X'7374726f6e675377616e20342e332e36' +); + diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index d5c4452e2..000000000 --- a/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 11, X'5c597062572d2a249c5c94569b895ee5c505b6bd' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=carol@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..359113969 --- /dev/null +++ b/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,151 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=carol@strongswan.org */ + 1, 1, X'CAROL_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX'); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index ddd55026d..000000000 --- a/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,151 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 11, X'ec16639928815e01cc0227c0b9cb1feab7987037' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c8fc4d40b --- /dev/null +++ b/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 11, X'DAVE_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=dave@strongswan.org */ + 1, 1, X'DAVE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 032b82bc9..000000000 --- a/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,213 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'308203b8308202a0a003020102020100300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3034303931303130303131385a170d3139303930373130303131385a3045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100bff25f62ea3d566e58b3c87a49caf3ac61cfa96377734d842db3f8fd6ea023f7b0132e66265012317386729c6d7c427a8d9f167be138e8ebae2b12b95933baef36a315c3ddf224cee4bb9bd578135d0467382629621ff96b8d45f6e002e5083662dce181805c140b3f2ce93f83aee3c861cff610a39f0189cb3a3c7cb9bf7e2a09544e2170efaa18fdd4ff20fa94be176d7fecff821f68d17152041d9b46f0cfcfc1e4cf43de5d3f3a587763afe9267f53b11699b3264fc55c5189f5682871166cb98307950569641fa30ffb50de134fed2f973cef1a392827862bc4ddaa97bbb01442e293c41070d07224d4be47ae2753eb2bed4bc1da91c68ec780c4620f0f0203010001a381b23081af30120603551d130101ff040830060101ff020101300b0603551d0f040403020106301d0603551d0e041604145da7dd700651327ee7b66db3b5e5e060ea2e4def306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100300d06092a864886f70d01010b0500038201010023929aa101b412d1f5a577532088f209b34798a72ed7bd6945d74beaa2b3a1768764ad7f8b0df8d97a1a3ed1102e92a5f107e3059dc2250be49d02261ca83a342e0e5de7d43c37744e3fcea3197720ca1184d4ef94e6beeb0d241746b0b92b7fb1004c08e88bf9eb4ce60f3e149466f3e9fc3f98bce449f448f9d465e52b59f0101e6203cfad0d89e23509fa043d4c12021e8f32be7db8b2edbada641d64aa1a04af64a2ee5b814a753dd76b30e3de04f3c6b61166e632f8364d51cf3730a9564a4d93b9227c28b09b0f5595d92a632f72fe509a129ca9ee54df2b0edc6c3d38564f10256efcd8be82b2ec64977e3a6f5ef098eaa7f00662a6cded16cb80637c' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, pool -) VALUES ( - 'rw', 1, 4, 6, 'pool0,pool1' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - -/* Pools */ - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'pool0', X'0a030001', X'0a030002', 0 -); - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'pool1', X'0a030101', X'0a030102', 0 -); - -INSERT INTO addresses ( - pool, address, identity, acquired, released -) VALUES ( - 1, X'0a030001', 7, 1247817255, 1247817277 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030002' -); - -INSERT INTO addresses ( - pool, address, identity, acquired, released -) VALUES ( - 2, X'0a030101', 8, 1247817257, 1247817278 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 2, X'0a030102' -); - -INSERT INTO leases ( - address, identity, acquired, released -) VALUES ( - 1, 7, 1247817255, 1247817277 -); - -INSERT INTO leases ( - address, identity, acquired, released -) VALUES ( - 3, 8, 1247817257, 1247817278 -); diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c5e0700d0 --- /dev/null +++ b/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,213 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, pool +) VALUES ( + 'rw', 1, 4, 6, 'pool0,pool1' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + +/* Pools */ + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'pool0', X'0a030001', X'0a030002', 0 +); + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'pool1', X'0a030101', X'0a030102', 0 +); + +INSERT INTO addresses ( + pool, address, identity, acquired, released +) VALUES ( + 1, X'0a030001', 7, 1247817255, 1247817277 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030002' +); + +INSERT INTO addresses ( + pool, address, identity, acquired, released +) VALUES ( + 2, X'0a030101', 8, 1247817257, 1247817278 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 2, X'0a030102' +); + +INSERT INTO leases ( + address, identity, acquired, released +) VALUES ( + 1, 7, 1247817255, 1247817277 +); + +INSERT INTO leases ( + address, identity, acquired, released +) VALUES ( + 3, 8, 1247817257, 1247817278 +); diff --git a/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index d5c4452e2..000000000 --- a/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 11, X'5c597062572d2a249c5c94569b895ee5c505b6bd' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=carol@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..5935af636 --- /dev/null +++ b/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=carol@strongswan.org */ + 1, 1, X'CAROL_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index 6f2d0fc53..000000000 --- a/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 11, X'ec16639928815e01cc0227c0b9cb1feab7987037' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 1, X'308204a40201000282010100d63cdc4dc584cd5fb5e205add1d242130f196297d6083e254f3d20ad7be17fe4fd80c1f1f6fc774a266f02af82053b93929b01c9da5411b402f4666feaa45dd45988402524ea91d98adf941f8e30dedb9cf98341e908d3d4f30c9b7d6b50b5f5e2319942768760de0c0127c6ba69d70b0a9d605de3c31e6218e4004ad1871f00f199416e4772190243fb2f06b69d22592e2bcfc6a2190d2f612f8ff435643096db1a19766aac1563e177df9fff2d51b6e38fb2cd74dfd68f1a2f03e5d7e3c77206af37e33beba6376ea239607821d821094c26817f8ce8a1305243a4ebd5c43907ffd5e75f49d71fee87fff60a91105db15816253790b9934cfcfda5c99e564302030100010282010100b628d1791f35281af55fd54c5257e0eeababfdf4f47bd5bb8b808244804ce09e281e4eca1a23d89a27cbc410cf10fbf32278c2308b7f67fe137513949d825c75ae1af7cf9d7005cb5f1573b0d10a24b3bee938fdd5d337aa9d6e5ed769641b1392dc715fddc08650c70c4471e9170d4dca1cbe4f96d5d503bbfe41715c6ef3a01e1b304b7f7d0f2ccd2192dfce9c3e5c5663c93a1284652fb0b50b68cfb093b6a20a4085bc37717b180255ecc5b8e10ffbc7dd68a8592775bc6a392da9b4cf36b391d3758a16f5c7b664727db3cfe2dce317f15bf26e9ba2592c785a22dcde728256b87af70a2f3ba2d30434e60c04f1f0e9ace4163d542017d72a48924ebb6102818100fef9ec239ad2bb059962fe1b9327fca60b47ff83c8238213e9976fc8443efb640faaa69447d1e65f477e7f004683858ab5d25b082d1582071eb294e10b69fe4009823f7a329a66b0e755f51a3ddbba2f367a7a5171903cce53fde7a666d33f64633f2541dd4d66b9645a6db2039c371e9fd2b84ef8b6ce3c2c733c1c2df1b0bd02818100d71910a4d9045e8c4ff85aa9bfb5fe2208a12ed123e0279e21d8dd623aca860a1094cbc4fceb104caf4d6bf2a302280365d7d603670ef76c748c98f435c7627e1286c79b16162b433723cc4dd7dc91d71d21003dc85dab8b2bcb43e8c8b66f5eb82703bc7faa577e08983b53f2f575acb6105ff5e005eb6cfa065b17495a12ff028180722a35313c015efc02d1f035288e9ef139dbe2ec7e90678dc2e9ab83600b53445a3f6e96b611a5b4c3ae3fef3fa36407d7a1786110ceb089bf94f6544d68080f64328d79896ed8cc1cc8c0161fdc6261016395a121d81361cef9c0df20eb35571d990875954132dd8fb16dac67316afcab530e734da98c6e24f8f3d12a412d810281810087313ad3d18ebc7a461d1ba6cb56f0b6a563e15013d3643330a4e46843f95c8be0e614b8e81a3a31689129c2e40f8be4aed31cb120ca385ad35a371c6edcb59bf5bafea40c1abcf04f2cd1d12f5673d7977851758384d437f1bb9d20275efadab6b5d6d4580d515666c27faf80ea241efc83883cbaa41dd76dc226e898f2e33302818079d917d98e48201e6a1fd3fef3c1af4c1dd79c74b783db0d54d41f3b6febb849e74487f300241e6430472d6a1dacb57fa32c93f897431e65f41fdf4d0cf8206eeaaf17ca0c3cdab5abf5f3229bc4b18fad56b3e823e46ed8d8ca373a1994675609d01aefe308285bdfcd86fec468e25d69112a5ba275031d8642620597ef2f2c' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'home', 1, 4, 6, '0.0.0.0' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c8fc4d40b --- /dev/null +++ b/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 11, X'DAVE_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=dave@strongswan.org */ + 1, 1, X'DAVE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'home', 1, 4, 6, '0.0.0.0' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 991bcba6b..000000000 --- a/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,178 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'308203b8308202a0a003020102020100300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3034303931303130303131385a170d3139303930373130303131385a3045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100bff25f62ea3d566e58b3c87a49caf3ac61cfa96377734d842db3f8fd6ea023f7b0132e66265012317386729c6d7c427a8d9f167be138e8ebae2b12b95933baef36a315c3ddf224cee4bb9bd578135d0467382629621ff96b8d45f6e002e5083662dce181805c140b3f2ce93f83aee3c861cff610a39f0189cb3a3c7cb9bf7e2a09544e2170efaa18fdd4ff20fa94be176d7fecff821f68d17152041d9b46f0cfcfc1e4cf43de5d3f3a587763afe9267f53b11699b3264fc55c5189f5682871166cb98307950569641fa30ffb50de134fed2f973cef1a392827862bc4ddaa97bbb01442e293c41070d07224d4be47ae2753eb2bed4bc1da91c68ec780c4620f0f0203010001a381b23081af30120603551d130101ff040830060101ff020101300b0603551d0f040403020106301d0603551d0e041604145da7dd700651327ee7b66db3b5e5e060ea2e4def306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100300d06092a864886f70d01010b0500038201010023929aa101b412d1f5a577532088f209b34798a72ed7bd6945d74beaa2b3a1768764ad7f8b0df8d97a1a3ed1102e92a5f107e3059dc2250be49d02261ca83a342e0e5de7d43c37744e3fcea3197720ca1184d4ef94e6beeb0d241746b0b92b7fb1004c08e88bf9eb4ce60f3e149466f3e9fc3f98bce449f448f9d465e52b59f0101e6203cfad0d89e23509fa043d4c12021e8f32be7db8b2edbada641d64aa1a04af64a2ee5b814a753dd76b30e3de04f3c6b61166e632f8364d51cf3730a9564a4d93b9227c28b09b0f5595d92a632f72fe509a129ca9ee54df2b0edc6c3d38564f10256efcd8be82b2ec64977e3a6f5ef098eaa7f00662a6cded16cb80637c' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, pool -) VALUES ( - 'rw', 1, 4, 6, 'pool0,pool1' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - -/* Pools */ - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'pool0', X'0a030001', X'0a030001', 0 -); - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'pool1', X'0a030101', X'0a030101', 0 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030001' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 2, X'0a030101' -); - diff --git a/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..d1bb8c307 --- /dev/null +++ b/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,178 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, pool +) VALUES ( + 'rw', 1, 4, 6, 'pool0,pool1' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + +/* Pools */ + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'pool0', X'0a030001', X'0a030001', 0 +); + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'pool1', X'0a030101', X'0a030101', 0 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030001' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 2, X'0a030101' +); + diff --git a/testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index b6e9c813e..000000000 --- a/testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,191 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Research, CN=Research CA */ - 9, X'3051310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e3111300f060355040b13085265736561726368311430120603550403130b5265736561726368204341' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, OU=Research, CN=Research CA' */ - 11, X'e775f0a0f2ad20cdcd6023ccc7c80f29f3dd5420'); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, OU=Research, CN=Research CA' */ - 11, X'c71449851517718914a496532a1ee801b21c6aa5'); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' */ - 11, X'5da9f9ef80718d3a883938e2de6e6624989fdf69' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Research, CN=Research CA */ - 1, 1, X'308203c1308202a9a003020102020120300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3130303430363039353335305a170d3139303430343039353335305a3051310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e3111300f060355040b13085265736561726368311430120603550403130b526573656172636820434130820122300d06092a864886f70d01010105000382010f003082010a0282010100b639b23aa6e0075b58a73f4fb25a856a72f71b5d3db1e780137a95b9e961a1dfaf19c6b2f9831421591c277b7a046a43f02e2471dc12fdc351d7c9596032a559d4bdd95ca79f21063a717d33d73fd203071cd0690c94cec13120658e5546367bbc49e412819d7564a24de1b58e07af519da8d87edcb1266de809067813452471e0f289e7814efdbefc2d4cc1fab331af3c70fe59c8f2312602d2a5ba043b73d6ae31e142cfe3669527e74a85a11cde6a9bed2234acb40bedb922e13c36afa2de3b41888f01c01a87637bb622e7e5521f4d73d77f47abc6b113cc1ecdf45f51dafe6d14838f78fb0c2ac1f1016518f3c4c98c17fd521b82351374c3389decae390203010001a381af3081ac300f0603551d130101ff040530030101ff300b0603551d0f040403020106301d0603551d0e04160414e775f0a0f2ad20cdcd6023ccc7c80f29f3dd5420306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100300d06092a864886f70d01010b050003820101008d6da16d1b2dcc815c0a3215e2ca1b2e1289b70d059b3fae80a173051abf47e8c8b74260c60528478738bbc8b1322389fa58e0c3f2dd20604395e972ce6f385c16f7b8cce987c1caa8f1e3eeea4c1a8e68b31705b789dcb230432262ae9a8767396c3ac71c8710a370c00c3ce0469968e974ea942e82e5c17f44161040dab11907589a9a06d4279339791344b9b9bcc51e816b0ff4391cffb6dfadc42f63c5c8c7a099ce155d2cb3b5ecddddf63ea86f286801c6354b672ab7cc3feb306db15d5c8a3d4e3acde94c08fd5476c33adad2f5730022e2ca246b4d8642b3ffaf00611eddb66c930de2036ce4d4af8537638e0c156332eeeb7205601bd6f2c1668992' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org */ - 1, 1, X'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'); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 7 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 8 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 7 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 8 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 7, 9 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..0ae2e749f --- /dev/null +++ b/testing/tests/sql/multi-level-ca/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,194 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Research, CN=Research CA */ + 9, X'3053310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a6563743111300f060355040b13085265736561726368311430120603550403130b5265736561726368204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, OU=Research, CN=Research CA' */ + 11, X'RESEARCH_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, OU=Research, CN=Research CA' */ + 11, X'RESEARCH_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' */ + 11, X'CAROL_R_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Research, CN=Research CA */ + 1, 1, X'RESEARCH_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org */ + 1, 1, X'CAROL_R_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 7 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 8 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org' */ + 1, X'CAROL_R_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 7 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 8 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 7, 9 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index ff60dd012..000000000 --- a/testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,194 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA */ - 9, X'304b310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e310e300c060355040b130553616c65733111300f0603550403130853616c6573204341' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA' */ - 11, X'5f9b1346f92072c800d588b5a74c2e97ea0b9328' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA' */ - 11, X'c9ca6b980be96d5f210d7fed1529eb6c567ec26c' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, OU=Sales, CN=dave@strongswan.org' */ - 11, X'81c0c1dfa134c6f60e0b9a42ff901977b6145fc7' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Sales CN=Sales CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Sales, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 7 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 8 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, OU=Sales, CN=dave@strongswan.org' */ - 1, X'308204a40201000282010100bcd9eb80441d113a64758fcf6928fd29e36b83cf8c0b0087fd23e4504ea28c89fefb2ca16996a38b926b037cfdc9afac8b447fe0f8f1b20c23baaaf1011578806eb78ca3a638b58c2bd111d3f00fafd2a65df9e615d76a67096d19da3d8660e20508a611dbef2b85cae27036058fa92746f9828fb93f88086c750de461a1d6edf847ff490c2bd7d471e721898abf81110f94db3839ca0e347b293deaf10cbe0c49dd8e2fb66353562e8b7c5ceca7a82356f488b466cefce74c33575833d64926e1076d7b49dd95442efa049b4bbb8cf8054f120774646636dde7005761ec36d08679c8ff3a7b10e33f3e81220a25fc04a9eba656c49b6629a5968e667f797b8f020301000102820100079e7315d5a9a68c488945a8048216d49dcc34a126f13ab041d234dfd88c4e4732f64732abe3dbed4196f7a90f4417c64a481530aa5a75e86f789474ecaa45164961365753d96dd99ddaed71337a2e89bd14858476d51e01d22b88a3795ff680a7db5577dafba731daa1900d5de411daf7ce112a633ae0ee161212e167def3a0cc5bbb3e065853d6f85d0fe7955697207fb432aae3c7d5ac70b151fbd67d58f1f1f65ccbe768200280921e56bf3564def51657617f0fc7c1e8e6bc49df7217bdd4380364a2379b3a0614cc05f0b84d5bdd72311442908d8d6e2eb3d5d411043a45266bec230375aa78acb10d7d1e751a23079430d15a4c6a7debc82581d7a46102818100edc6707a7610fc83764a6044302092878e41e84de990823eca82da736a614154568b4c8ec0bc292f60625a7f879d274ef9de386a247af4ca53178a447816ecd9b38453544ee72c14f3691b534273aeed677e3629933a8f54511e16c859b9ba8edf8e5c50cb27944090b26b0398c765951897b23d781a9df0f08215c72650e36d02818100cb53823e5c2baf9ecf121416c23461a6aa4f3bd083dbae66effed1bba4c38dd3f0f7c00dc4d9f4d69464e17d95705a742028156ffa2b17d41930fca7b4646cf66d9fcca198913018417d57c8286f2b7bd249d6350e02b62910105db1e5d70e55a866dde904dc2298c5dda344f637418fb33e573508d00176d5c79651b283016b02818100d714d395d2cad6bfcbf6c751a6ff2fccb2dfe754e2dbb7153976584862880ae2514ebc37bd1bf75d45a072203df9e81ec6633f40b4330ccf1f8e81a221c70b047a204e884abf4ddebdb7ebe1ca907e417d866b53fc3bd27f00c968ee5e4b64f7ec3d084085240e34c12ec32283c68a9aed9dfabb23b35fff1c6f6f67afbf279902818100c6dfc997014461a4add97af8bfbfc87be23d59be1c1af5bd0da56ab364f73974424fb1f445c5022c183d8c28efd053491e62d6850e66b409eb11f52e7bcd769e9a9f20e2367e5c527d4c025e6ede3de400cde3cd4504f5f3b818a9ec656932462a4f63629634534aa6cea0f1c4fa4b10293c22c466f83d5664c7b189fb57143d0281807d11912b6f18a0363dea94b10c36811880f0917eb334fe7ff55e05d39d1784c6b5fe80b0f0a9d7432fd55030fa0d27a70559dbb5b477ab2670f4c3b0b736a22051b3856c0d06f47b247e2bd7b11570947effdb53557b6c36980b4ad2c00a98d98ea71ebe96bc16038e0f91d7f86a84b407c7a19af727558963d96e75a22498fb' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 7 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 8 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 7, 9 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..ea177f24e --- /dev/null +++ b/testing/tests/sql/multi-level-ca/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,194 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA */ + 9, X'304d310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374310e300c060355040b130553616c65733111300f0603550403130853616c6573204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA' */ + 11, X'SALES_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA' */ + 11, X'SALES_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, OU=Sales, CN=dave@strongswan.org' */ + 11, X'DAVE_S_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Sales CN=Sales CA */ + 1, 1, X'SALES_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Sales, CN=dave@strongswan.org */ + 1, 1, X'DAVE_S_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 7 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 8 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, OU=Sales, CN=dave@strongswan.org' */ + 1, X'DAVE_S_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 7 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 8 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 7, 9 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 64c68e486..000000000 --- a/testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,164 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'308204223082030aa00302010202012b300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3134303832373134343435365a170d3139303832363134343435365a3046310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311c301a060355040313136d6f6f6e2e7374726f6e677377616e2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f0203010001a382011a3082011630090603551d1304023000300b0603551d0f0404030203a8301d0603551d0e04160414d8263d21ec7cdbbe5a390c5b70cb038021deae13306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100301e0603551d110417301582136d6f6f6e2e7374726f6e677377616e2e6f726730130603551d25040c300a06082b0601050507030130390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e7374726f6e677377616e2e6f72672f7374726f6e677377616e2e63726c300d06092a864886f70d01010b05000382010100a99e3e8d73e3ee3cb3e2e04de0e61c8992be55672ed24a095cb35bb254fda67f08fa251f522dde7e24eb0bd5a0939b4cbda8b72a75b1c1c46f222cd2edc15294decd615781083b7b1a1dee175048f137d6c3b4b584a1eab98a99985fc449fdf5ca47cffcbeeac10113f6c6ed7ec2ac048729a9e230661742d5a2f4f5fa8f86847ebacc8267c77cd1f41b5f32469e2faf34e21af1db281ea297a86ee1af30343c1dc9cc07d394ed8f1f2b4a18d6450b97a85fdfa2b90293c0ebbebab1144a46f0522a599588a4904eae5ae1cf200960196ed753f8dfdf6bc84a0e566de6ad741208d3a837c64e3e74c4abc09deabb5dd7ca9986069c85a834b63d81af0d3b35fc' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'308204a30201000282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f02030100010282010004035ea5faaf11950d0ead7d0dea6d252e29a56138c393e40e99489a50c9c63e09856c2cd90ca17b335fa9540e1947fcb7ad7267b4dce00a30cefb2469fdc18cc78fe45cac3b84f796366e1fe887575685a19ea16ea96d2c29bc3d05ce440aa40365382affe5b96d57199b9c77ed23fb0606f5101886a5e7739113e8e0575f922ba234a00216882a54da866960c02da7b5b13a782c009686b64fff9b67241fe4fcb951f07bd809f47667124f88a3a05749c30d36bb1b77627ea50ef9c105dfcc71331c08fe125856ce1b5ce5779fa87c3f0dfa4f0d7fe56f2dd5a12a1a82acec56e531ecbca5833203c53b1bf4741538b8c3cce43ebe7db65e3ee0502123c0b902818100d84660baecc97714485814a7232ce90b37ea9b4120c9ba5e2ee2557f35a56b4c8a588e8078b85672bfbba3d504f270901d57df22b8235a4b2373f4b9161cc2f536121e93daf133e079b4d02b85719cff50921fd74692630aa809f24d8c6257876316be00a42fff6e723612dda3090d474894d646e269844930fd168a0026740502818100c2b25e6372c06b03a46a52453054ed2d7b2a644f754c5c0cb7d4d09f3cac187dd0ebef4dfaaca94b92827aceb9d3eaa0af005546644d7358b1ca54e83f707404a639383fc1c0cc752ffcd23b7c7b2386436ac0aedf7cb6ba418b7154b1af14cf4c675df1f8448953b50835dc334f3f9127906b4e3d27cce263733ee0d0dc865302818100c365423b5f76dd38dbeb882d40e070640c4ecf99d5cfabab2fdc98b5e777de2b36caaf646eaccc9dbb9001829187a01ef403d1bb02761e3bc87a18dda796b0a4ee070ccd347fbb08d1ac846eed8f29f2998e8b69e97e9430aa84e1ff22182f50483be1c99e8d26cf582c767afbb34fe5d9336f2c779e3140171c716298a42529028180724a107c62552fbca09c4515166d141959aea5d9baea8b32700b3e37eb7ebe95c4b96aeda4940c812f4ce6d8495f6be0cd39edd4f7763b9aba2b22b27ee2fd47e967b76c3dc9767be8228a2a9f450db2780ac7771ffbeeabe16400b00de9cfd66c6c554a8049832f9f1a65bb906719d2949e034f9738b0ddc831539cd71e4cbf0281807b9d01a2ef8a8228a41a58cceb0ad8eb449fa350ed2c07d012c452e947cac687a9a9f9a04c663356e661e8af30373d863d182d7038eebc901d3c78bc1e4dbf74c8fcba141ba56b0af66fa1c40e5defe7ed382ec008c98fb79f139e46cbc9570d110dc8930fd6f89fdcdda21fc790d4049ff24ffe82704d9234a56124905037d5' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -INSERT INTO certificate_authorities ( - certificate -) VALUES ( - 1 -); - -INSERT INTO certificate_distribution_points ( - ca, type, uri -) VALUES ( - 1, 1, 'http://crl.strongswan.org/strongswan.crl' -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'rw', 1, 4, 6 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - diff --git a/testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..e9cc822d9 --- /dev/null +++ b/testing/tests/sql/multi-level-ca/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,163 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +INSERT INTO certificate_authorities ( + certificate +) VALUES ( + 1 +); + +INSERT INTO certificate_distribution_points ( + ca, type, uri +) VALUES ( + 1, 1, 'http://crl.strongswan.org/strongswan.crl' +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'rw', 1, 4, 6 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); diff --git a/testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 31641518d..000000000 --- a/testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', 'PH_IP_SUN' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, mobike, dpd_delay -) VALUES ( - 'net-net', 1, 4, 5, 0, 0 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'net-net', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020000', X'0a02ffff' -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 1 -); - diff --git a/testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c0ce20a85 --- /dev/null +++ b/testing/tests/sql/net2net-cert/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', 'PH_IP_SUN' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, mobike, dpd_delay +) VALUES ( + 'net-net', 1, 4, 5, 0, 0 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'net-net', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020000', X'0a02ffff' +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 1 +); + diff --git a/testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql deleted file mode 100644 index 47eabf2a8..000000000 --- a/testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 11, X'edcd6347cdd12fb63000b605430713544c9d318a' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'308203b8308202a0a003020102020100300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3034303931303130303131385a170d3139303930373130303131385a3045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100bff25f62ea3d566e58b3c87a49caf3ac61cfa96377734d842db3f8fd6ea023f7b0132e66265012317386729c6d7c427a8d9f167be138e8ebae2b12b95933baef36a315c3ddf224cee4bb9bd578135d0467382629621ff96b8d45f6e002e5083662dce181805c140b3f2ce93f83aee3c861cff610a39f0189cb3a3c7cb9bf7e2a09544e2170efaa18fdd4ff20fa94be176d7fecff821f68d17152041d9b46f0cfcfc1e4cf43de5d3f3a587763afe9267f53b11699b3264fc55c5189f5682871166cb98307950569641fa30ffb50de134fed2f973cef1a392827862bc4ddaa97bbb01442e293c41070d07224d4be47ae2753eb2bed4bc1da91c68ec780c4620f0f0203010001a381b23081af30120603551d130101ff040830060101ff020101300b0603551d0f040403020106301d0603551d0e041604145da7dd700651327ee7b66db3b5e5e060ea2e4def306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100300d06092a864886f70d01010b0500038201010023929aa101b412d1f5a577532088f209b34798a72ed7bd6945d74beaa2b3a1768764ad7f8b0df8d97a1a3ed1102e92a5f107e3059dc2250be49d02261ca83a342e0e5de7d43c37744e3fcea3197720ca1184d4ef94e6beeb0d241746b0b92b7fb1004c08e88bf9eb4ce60f3e149466f3e9fc3f98bce449f448f9d465e52b59f0101e6203cfad0d89e23509fa043d4c12021e8f32be7db8b2edbada641d64aa1a04af64a2ee5b814a753dd76b30e3de04f3c6b61166e632f8364d51cf3730a9564a4d93b9227c28b09b0f5595d92a632f72fe509a129ca9ee54df2b0edc6c3d38564f10256efcd8be82b2ec64977e3a6f5ef098eaa7f00662a6cded16cb80637c' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=sun.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_SUN', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, mobike, dpd_delay -) VALUES ( - 'net-net', 1, 5, 4, 0, 0 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'net-net', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020000', X'0a02ffff' -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - diff --git a/testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql.in b/testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..2e92a8cb7 --- /dev/null +++ b/testing/tests/sql/net2net-cert/hosts/sun/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 11, X'SUN_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=sun.strongswan.org */ + 1, 1, X'SUN_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 1, X'SUN_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_SUN', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, mobike, dpd_delay +) VALUES ( + 'net-net', 1, 5, 4, 0, 0 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'net-net', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020000', X'0a02ffff' +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + diff --git a/testing/tests/sql/net2net-psk/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-psk/hosts/moon/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/net2net-psk/hosts/moon/etc/ipsec.d/data.sql rename to testing/tests/sql/net2net-psk/hosts/moon/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/net2net-psk/hosts/sun/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-psk/hosts/sun/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/net2net-psk/hosts/sun/etc/ipsec.d/data.sql rename to testing/tests/sql/net2net-psk/hosts/sun/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index f0ae8c119..000000000 --- a/testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,249 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Proposals */ - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes128-aes192-aes256-sha256-sha384-sha512-modp3072-modp4096-modp8192' -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', 'PH_IP_SUN' -); - -INSERT INTO ike_config_proposal ( - ike_cfg, prio, prop -) VALUES ( - 1, 1, 1 -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, mobike, dpd_delay -) VALUES ( - 'net-net', 1, 4, 5, 0, 30 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 2 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 2, 1, 1 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 3, 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010000', X'0a01000f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010010', X'0a01001f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010200', X'0a0103ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020000', X'0a0201ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020200', X'0a0203ff' -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 4, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 2, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 4, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 3, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 5, 1 -); diff --git a/testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..3b9f497a8 --- /dev/null +++ b/testing/tests/sql/net2net-route-pem/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,249 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_PEM_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_PEM_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_PEM_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Proposals */ + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes128-aes192-aes256-sha256-sha384-sha512-modp3072-modp4096-modp8192' +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', 'PH_IP_SUN' +); + +INSERT INTO ike_config_proposal ( + ike_cfg, prio, prop +) VALUES ( + 1, 1, 1 +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, mobike, dpd_delay +) VALUES ( + 'net-net', 1, 4, 5, 0, 30 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 2 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 2, 1, 1 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 3, 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010000', X'0a01000f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010010', X'0a01001f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010200', X'0a0103ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020000', X'0a0201ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020200', X'0a0203ff' +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 4, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 2, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 4, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 3, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 5, 1 +); diff --git a/testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql deleted file mode 100644 index 4268f8e48..000000000 --- a/testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql +++ /dev/null @@ -1,249 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 11, X'edcd6347cdd12fb63000b605430713544c9d318a' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=sun.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 1, X'2d2d2d2d2d424547494e205253412050524956415445204b45592d2d2d2d2d0a4d4949456f77494241414b4341514541787949674248314b577a4d4d6d4559533147723134495542673132307664734c754e7751757a7532327149486e5749420a5342324c306c6b4c4f42593041596433776939454e586e62304d4f4a5446664535594a316770535a436e53336d39487167546d6d59655a336d5678534334544a0a5775326f564b766f7378536f35664156766a56565130383948746a4973783242522f30714c51396c5a3264557455536e396b6f686a553571706b744f664a39580a7554516a3964426661356270514d4a6f4c5542414757504d522b73506142527762333455756c766d6f4f79495a544b4745734836637a5559302b646d3869554b0a6d6b503753336645516a7a763536446b337a724a63467937696a3837757539576b2f58736175484171356a485245634d464a77454f6a395a4530513675667a390a44324e425357764c547237514b4656686a354866627955634147527167662b7348726b6c4951494441514142416f4942414159643054667946542b5a344e416f0a6a746d4263343379352b6e2b4464677243304168576b3431396c62653154634c564a692f6435543963532f473174415a4e6839377a692b4b5436736f356d57320a36484259516e3342544c5961676131436c46356c772b754c3561364c5047586f4c547369773648654b656165517458564f7757396f36484f70455433536172650a78434c4f3775573162467278764a4e59795950794950657a4b656c7a70744d3346536d562b5a336b7a6a47623944706977426268344466626e326a512f62412f0a3061576b4d53343078706a5533746a2f506556477042424731675641526f5978715178773162666c556a46556f44543659346154706764615032766335546d730a434d3052437a443745745163643352785a52344275365a66763839672b386f4a5a43655536535a464451384e64692f3841567370766b326f6a767a34726b66520a2b484c515850554367594541366d722f45376231747261504241692f4f445875386b576a32506f34744e6a627745695a357847626731745448735473547046560a70754c54625365756978525843544f4353666a504d2b4d354f35586d594b71376871722f4f63395342312f636c314a5177446e42502b475a6e32506861702b7a0a76515668534f367a63796b6f65414f4147416967354e7279574956796d7451697a6c5059387a735934744f474a4976454e437677526a634367594541325865410a37746843562b594e6c685a6b666b48456856626b58734d64637a4a3562305272374d48397261346b526e4a6a4e534f573042317361512b6a7841704e34684b4c0a3953507a62474b6b78522f324f4935576e5970764863384c48544a6259644d6f5968492b304b5a2f6559505536396f42344f4253545764597745452f6d6952580a7646575a4d4f7051317071766f4a7444555a636c75556870765a396479382f4c52486833773263436759416d5a4f7675594c4d53414169676b6f5976514c596f0a5044752f324176646f76387247546b4c335a68704256597833664d4f55304f43462f696c456a44475773682b6d30386c716e6a56654d767739485a4e4d756d500a2f77586168426864574e6761654d4c394750694c362f6c7258384b563468356751546454364c532f6b656773372f58552b655451567751476436547a737663590a634364436631567549564d4250567366614772734e514b426751432b446738457273507368675a427358684b5437677377472f39305a416661584676714f435a0a6e6b44535657736d6c6a6e56367a435732654178515a586963773732455464344774395854693671695042724a52725676484b34486f616345624b446f454f650a306b744c6c76653566316e4b646c464638305a366c324f64516d6b506b63754c73564f637947753134714b7a506e357242436e583845315a68376f3173586a340a636b425936514b42674578646d3064624b476a4866502b674e2b66363973457548345846526d497853447a6a312f2f5a5555523452616e374f496b41457937630a592f536d7534556863654a5336612b4f6a475164684b2f777a4e567850372b41572b644c2b4a704f4c2b4e7533544c39754d674e46436c42315930744a3777440a504a506d6b7536493334364a792f305343636c67655851505244356b484169784144634f746b536e6b6a6f6a776a3856524150500a2d2d2d2d2d454e44205253412050524956415445204b45592d2d2d2d2d0a' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Proposals */ - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes128-sha256-modp3072' -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_SUN', 'PH_IP_MOON' -); - -INSERT INTO ike_config_proposal ( - ike_cfg, prio, prop -) VALUES ( - 1, 1, 1 -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, mobike, dpd_delay -) VALUES ( - 'net-net', 1, 5, 4, 0, 30 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 2 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 2, 1, 1 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 3, 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010000', X'0a01000f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010010', X'0a01001f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010200', X'0a0103ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020000', X'0a0201ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020200', X'0a0203ff' -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 4, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 2, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 4, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 3, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 5, 0 -); diff --git a/testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql.in b/testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..27b084e51 --- /dev/null +++ b/testing/tests/sql/net2net-route-pem/hosts/sun/etc/ipsec.d/data.sql.in @@ -0,0 +1,249 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 11, X'SUN_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_PEM_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=sun.strongswan.org */ + 1, 1, X'SUN_CERT_PEM_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 1, X'SUN_KEY_PEM_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Proposals */ + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes128-sha256-modp3072' +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_SUN', 'PH_IP_MOON' +); + +INSERT INTO ike_config_proposal ( + ike_cfg, prio, prop +) VALUES ( + 1, 1, 1 +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, mobike, dpd_delay +) VALUES ( + 'net-net', 1, 5, 4, 0, 30 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 1, 1 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 2 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 2, 1, 1 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 3, 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010000', X'0a01000f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010010', X'0a01001f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010200', X'0a0103ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020000', X'0a0201ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020200', X'0a0203ff' +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 4, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 2, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 4, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 3, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 5, 0 +); diff --git a/testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 7db84f21d..000000000 --- a/testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,279 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'2d2d2d2d2d424547494e2043455254494649434154452d2d2d2d2d0a4d494944754443434171436741774942416749424144414e42676b71686b69473977304241517346414442464d517377435159445651514745774a445344455a0a4d4263474131554543684d5154476c7564586767633352796232356e55336468626a45624d426b474131554541784d53633352796232356e55336468626942530a6232393049454e424d423458445441304d446b784d4445774d4445784f466f58445445354d446b774e7a45774d4445784f466f775254454c4d416b47413155450a42684d43513067784754415842674e5642416f5445457870626e563449484e30636d39755a314e3359573478477a415a42674e5642414d54456e4e30636d39750a5a314e3359573467556d39766443424451544343415349774451594a4b6f5a496876634e4151454242514144676745504144434341516f4367674542414c2f790a58324c7150565a75574c5049656b6e4b383678687a366c6a64334e4e6843327a2b5031756f43503373424d755a695a51456a467a686e4b6362587843656f32660a466e76684f4f6a727269735375566b7a757538326f7858443366496b7a7553376d395634453130455a7a676d4b5749662b57754e52666267417555494e6d4c630a345947415842514c50797a7050344f75343868687a2f59516f3538426963733650487935763334714356524f4958447671686a39315038672b70532b4632312f0a37502b4348326a5263564945485a7447384d2f507765545051393564507a705964324f7636535a2f553745576d624d6d5438566355596e3161436878466d79350a6777655642576c6b48364d502b31446545302f744c35633837786f354b4365474b3854647170653773425243347050454548445163695455766b65754a3150720a4b2b314c77647152786f3748674d5269447738434177454141614f42736a4342727a415342674e5648524d4241663845434441474151482f416745424d4173470a413155644477514541774942426a416442674e5648513445466751555861666463415a524d6e376e746d327a74655867594f6f7554653877625159445652306a0a424759775a4941555861666463415a524d6e376e746d327a74655867594f6f7554652b68536152484d455578437a414a42674e5642415954416b4e494d526b770a467759445651514b4578424d615735316543427a64484a76626d6454643246754d527377475159445651514445784a7a64484a76626d64546432467549464a760a6233516751304743415141774451594a4b6f5a496876634e4151454c425141446767454241434f536d71454274424c52396156335579434938676d7a5235696e0a4c74653961555858532b716973364632683253746634734e2b4e6c36476a37524543365370664548347757647769554c354a30434a68796f4f6a5175446c336e0a314477336445342f7a714d5a6479444b455954553735546d7675734e4a426447734c6b726637454154416a6f692f6e72544f5950506853555a7650702f442b590a764f524a39456a353147586c4b316e774542356941382b7444596e694e516e364244314d456749656a7a4b2b66626979376272615a42316b71686f45723253690a376c7542536e55393132737734393445383861324557626d4d766732545648504e7a4370566b704e6b376b69664369776d7739566c646b71597939792f6c43610a45707970376c54664b77376362443034566b38514a573738324c36437375786b6c333436623137776d4f716e38415a6970733374467375415933773d0a2d2d2d2d2d454e442043455254494649434154452d2d2d2d2d0a' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Proposals */ - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes128-sha256-modp3072' -); - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes192-sha384-modp8192' -); - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes128gcm16-modp3072' -); - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes192gcm16-modp8192' -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', 'PH_IP_SUN' -); - -INSERT INTO ike_config_proposal ( - ike_cfg, prio, prop -) VALUES ( - 1, 1, 1 -); - -INSERT INTO ike_config_proposal ( - ike_cfg, prio, prop -) VALUES ( - 1, 2, 2 -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, mobike, dpd_delay -) VALUES ( - 'net-net', 1, 4, 5, 0, 30 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 2, 2 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 2, 2 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 2, 2 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 2 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 1, 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 2, 1, 4 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 3, 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 3, 2, 4 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010000', X'0a01000f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010010', X'0a01001f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010200', X'0a0103ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020000', X'0a0201ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020200', X'0a0203ff' -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 4, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 2, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 4, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 3, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 5, 1 -); diff --git a/testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..2f5a8b36d --- /dev/null +++ b/testing/tests/sql/net2net-start-pem/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,279 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_PEM_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_PEM_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_PEM_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Proposals */ + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes128-sha256-modp3072' +); + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes192-sha384-modp8192' +); + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes128gcm16-modp3072' +); + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes192gcm16-modp8192' +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', 'PH_IP_SUN' +); + +INSERT INTO ike_config_proposal ( + ike_cfg, prio, prop +) VALUES ( + 1, 1, 1 +); + +INSERT INTO ike_config_proposal ( + ike_cfg, prio, prop +) VALUES ( + 1, 2, 2 +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, mobike, dpd_delay +) VALUES ( + 'net-net', 1, 4, 5, 0, 30 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 2, 2 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 2, 2 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 2, 2 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 2 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 1, 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 2, 1, 4 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 3, 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 3, 2, 4 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010000', X'0a01000f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010010', X'0a01001f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010200', X'0a0103ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020000', X'0a0201ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020200', X'0a0203ff' +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 4, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 2, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 4, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 3, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 5, 1 +); diff --git a/testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql b/testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql deleted file mode 100644 index 8d9d95d4f..000000000 --- a/testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql +++ /dev/null @@ -1,273 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 11, X'edcd6347cdd12fb63000b605430713544c9d318a' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=sun.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Proposals */ - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes128-sha256-modp3072' -); - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes192-sha384-modp8192' -); - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes128gcm16-modp3072' -); - -INSERT INTO proposals ( - proposal -) VALUES ( - 'aes192gcm16-modp8192' -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_SUN', 'PH_IP_MOON' -); - -INSERT INTO ike_config_proposal ( - ike_cfg, prio, prop -) VALUES ( - 1, 1, 1 -); - -INSERT INTO ike_config_proposal ( - ike_cfg, prio, prop -) VALUES ( - 1, 2, 2 -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, mobike, dpd_delay -) VALUES ( - 'net-net', 1, 5, 4, 0, 30 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 -); - -INSERT INTO child_configs ( - name, updown, start_action, dpd_action -) VALUES ( - 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 2 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 1, 1, 3 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 2, 1, 4 -); - -INSERT INTO child_config_proposal ( - child_cfg, prio, prop -) VALUES ( - 3, 1, 4 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010000', X'0a01000f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010010', X'0a01001f' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a010200', X'0a0103ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020000', X'0a0201ff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( - 7, X'0a020200', X'0a0203ff' -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 4, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 2, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 4, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 3, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 3, 5, 0 -); diff --git a/testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql.in b/testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..1d447a09c --- /dev/null +++ b/testing/tests/sql/net2net-start-pem/hosts/sun/etc/ipsec.d/data.sql.in @@ -0,0 +1,273 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 11, X'SUN_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_PEM_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=sun.strongswan.org */ + 1, 1, X'SUN_CERT_PEM_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 1, X'SUN_KEY_PEM_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Proposals */ + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes128-sha256-modp3072' +); + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes192-sha384-modp8192' +); + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes128gcm16-modp3072' +); + +INSERT INTO proposals ( + proposal +) VALUES ( + 'aes192gcm16-modp8192' +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_SUN', 'PH_IP_MOON' +); + +INSERT INTO ike_config_proposal ( + ike_cfg, prio, prop +) VALUES ( + 1, 1, 1 +); + +INSERT INTO ike_config_proposal ( + ike_cfg, prio, prop +) VALUES ( + 1, 2, 2 +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, mobike, dpd_delay +) VALUES ( + 'net-net', 1, 5, 4, 0, 30 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-1', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-2', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 +); + +INSERT INTO child_configs ( + name, updown, start_action, dpd_action +) VALUES ( + 'net-3', '/usr/local/libexec/ipsec/_updown iptables', 0, 0 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 2 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 1, 1, 3 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 2, 1, 4 +); + +INSERT INTO child_config_proposal ( + child_cfg, prio, prop +) VALUES ( + 3, 1, 4 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010000', X'0a01000f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010010', X'0a01001f' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a010200', X'0a0103ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020000', X'0a0201ff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( + 7, X'0a020200', X'0a0203ff' +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 4, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 2, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 4, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 3, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 3, 5, 0 +); diff --git a/testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index 75c82fddd..000000000 --- a/testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 11, X'5c597062572d2a249c5c94569b895ee5c505b6bd' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=carol@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 4, 6 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..11b7e047a --- /dev/null +++ b/testing/tests/sql/rw-cert/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=carol@strongswan.org */ + 1, 1, X'CAROL_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 4, 6 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index 88a326215..000000000 --- a/testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 11, X'ec16639928815e01cc0227c0b9cb1feab7987037' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ - 1, X'308204a40201000282010100d63cdc4dc584cd5fb5e205add1d242130f196297d6083e254f3d20ad7be17fe4fd80c1f1f6fc774a266f02af82053b93929b01c9da5411b402f4666feaa45dd45988402524ea91d98adf941f8e30dedb9cf98341e908d3d4f30c9b7d6b50b5f5e2319942768760de0c0127c6ba69d70b0a9d605de3c31e6218e4004ad1871f00f199416e4772190243fb2f06b69d22592e2bcfc6a2190d2f612f8ff435643096db1a19766aac1563e177df9fff2d51b6e38fb2cd74dfd68f1a2f03e5d7e3c77206af37e33beba6376ea239607821d821094c26817f8ce8a1305243a4ebd5c43907ffd5e75f49d71fee87fff60a91105db15816253790b9934cfcfda5c99e564302030100010282010100b628d1791f35281af55fd54c5257e0eeababfdf4f47bd5bb8b808244804ce09e281e4eca1a23d89a27cbc410cf10fbf32278c2308b7f67fe137513949d825c75ae1af7cf9d7005cb5f1573b0d10a24b3bee938fdd5d337aa9d6e5ed769641b1392dc715fddc08650c70c4471e9170d4dca1cbe4f96d5d503bbfe41715c6ef3a01e1b304b7f7d0f2ccd2192dfce9c3e5c5663c93a1284652fb0b50b68cfb093b6a20a4085bc37717b180255ecc5b8e10ffbc7dd68a8592775bc6a392da9b4cf36b391d3758a16f5c7b664727db3cfe2dce317f15bf26e9ba2592c785a22dcde728256b87af70a2f3ba2d30434e60c04f1f0e9ace4163d542017d72a48924ebb6102818100fef9ec239ad2bb059962fe1b9327fca60b47ff83c8238213e9976fc8443efb640faaa69447d1e65f477e7f004683858ab5d25b082d1582071eb294e10b69fe4009823f7a329a66b0e755f51a3ddbba2f367a7a5171903cce53fde7a666d33f64633f2541dd4d66b9645a6db2039c371e9fd2b84ef8b6ce3c2c733c1c2df1b0bd02818100d71910a4d9045e8c4ff85aa9bfb5fe2208a12ed123e0279e21d8dd623aca860a1094cbc4fceb104caf4d6bf2a302280365d7d603670ef76c748c98f435c7627e1286c79b16162b433723cc4dd7dc91d71d21003dc85dab8b2bcb43e8c8b66f5eb82703bc7faa577e08983b53f2f575acb6105ff5e005eb6cfa065b17495a12ff028180722a35313c015efc02d1f035288e9ef139dbe2ec7e90678dc2e9ab83600b53445a3f6e96b611a5b4c3ae3fef3fa36407d7a1786110ceb089bf94f6544d68080f64328d79896ed8cc1cc8c0161fdc6261016395a121d81361cef9c0df20eb35571d990875954132dd8fb16dac67316afcab530e734da98c6e24f8f3d12a412d810281810087313ad3d18ebc7a461d1ba6cb56f0b6a563e15013d3643330a4e46843f95c8be0e614b8e81a3a31689129c2e40f8be4aed31cb120ca385ad35a371c6edcb59bf5bafea40c1abcf04f2cd1d12f5673d7977851758384d437f1bb9d20275efadab6b5d6d4580d515666c27faf80ea241efc83883cbaa41dd76dc226e898f2e33302818079d917d98e48201e6a1fd3fef3c1af4c1dd79c74b783db0d54d41f3b6febb849e74487f300241e6430472d6a1dacb57fa32c93f897431e65f41fdf4d0cf8206eeaaf17ca0c3cdab5abf5f3229bc4b18fad56b3e823e46ed8d8ca373a1994675609d01aefe308285bdfcd86fec468e25d69112a5ba275031d8642620597ef2f2c' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 4, 6 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..b4845ce9c --- /dev/null +++ b/testing/tests/sql/rw-cert/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ + 11, X'DAVE_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=Linux strongSwan, CN=dave@strongswan.org */ + 1, 1, X'DAVE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=dave@strongswan.org' */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 4, 6 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 94316472b..000000000 --- a/testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,152 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'rw', 1, 4, 6 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - diff --git a/testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..d6792ee45 --- /dev/null +++ b/testing/tests/sql/rw-cert/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,152 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'rw', 1, 4, 6 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + diff --git a/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index dfff0849d..000000000 --- a/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,128 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -/* Shared Secrets */ - -INSERT INTO shared_secrets ( - type, data -) VALUES ( - 2, X'4172336574546e703031716c704f6762' -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 4 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, auth_method -) VALUES ( - 'home', 1, 4, 5, 3 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..693008131 --- /dev/null +++ b/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,128 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +/* Shared Secrets */ + +INSERT INTO shared_secrets ( + type, data +) VALUES ( + 2, X'4172336574546e703031716c704f6762' +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 4 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, auth_method +) VALUES ( + 'home', 1, 4, 5, 3 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index 02a9dfe3e..000000000 --- a/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,178 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, X'' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Shared Secrets */ - -INSERT INTO shared_secrets ( - type, data -) VALUES ( - 2, X'4172336574546e703031716c704f6762' -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 4 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 7 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote, certreq -) VALUES ( - 'PH_IP_MOON', '0.0.0.0', 0 -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, eap_type -) VALUES ( - 'rw-eap-aka', 1, 4, 6, 23 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw-eap-aka', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - diff --git a/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c19e8d5c5 --- /dev/null +++ b/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,178 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, X'' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Shared Secrets */ + +INSERT INTO shared_secrets ( + type, data +) VALUES ( + 2, X'4172336574546e703031716c704f6762' +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 4 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 7 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote, certreq +) VALUES ( + 'PH_IP_MOON', '0.0.0.0', 0 +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, eap_type +) VALUES ( + 'rw-eap-aka', 1, 4, 6, 23 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw-eap-aka', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + diff --git a/testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/ipsec.d/data.sql rename to testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/ipsec.d/data.sql rename to testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/ipsec.d/data.sql rename to testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/ipsec.d/data.sql rename to testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/ipsec.d/data.sql rename to testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/ipsec.d/data.sql.in similarity index 100% rename from testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/ipsec.d/data.sql rename to testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/ipsec.d/data.sql.in diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index 37e8b09c4..000000000 --- a/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,128 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -/* Shared Secrets */ - -INSERT INTO shared_secrets ( - type, data -) VALUES ( - 1, X'16964066a10de938bdb2ab7864fe4459cab1' -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 4 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, auth_method -) VALUES ( - 'home', 1, 4, 5, 2 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..004bbf900 --- /dev/null +++ b/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,128 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +/* Shared Secrets */ + +INSERT INTO shared_secrets ( + type, data +) VALUES ( + 1, X'16964066a10de938bdb2ab7864fe4459cab1' +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 4 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, auth_method +) VALUES ( + 'home', 1, 4, 5, 2 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index 724ace333..000000000 --- a/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,129 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -/* Shared Secrets */ - -INSERT INTO shared_secrets ( - type, data -) VALUES ( - 1, X'8d5cce342174da772c8224a59885deaa118d' -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 4 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 5 -); - - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, auth_method -) VALUES ( - 'home', 1, 4, 5, 2 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..3e91267ee --- /dev/null +++ b/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,129 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +/* Shared Secrets */ + +INSERT INTO shared_secrets ( + type, data +) VALUES ( + 1, X'8d5cce342174da772c8224a59885deaa118d' +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 4 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 5 +); + + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, auth_method +) VALUES ( + 'home', 1, 4, 5, 2 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index d1349f9c3..000000000 --- a/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,203 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 11, X'd8263d21ec7cdbbe5a390c5b70cb038021deae13' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=moon.strongswan.org */ - 1, 1, X'308204223082030aa00302010202012b300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3134303832373134343435365a170d3139303832363134343435365a3046310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311c301a060355040313136d6f6f6e2e7374726f6e677377616e2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f0203010001a382011a3082011630090603551d1304023000300b0603551d0f0404030203a8301d0603551d0e04160414d8263d21ec7cdbbe5a390c5b70cb038021deae13306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100301e0603551d110417301582136d6f6f6e2e7374726f6e677377616e2e6f726730130603551d25040c300a06082b0601050507030130390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e7374726f6e677377616e2e6f72672f7374726f6e677377616e2e63726c300d06092a864886f70d01010b05000382010100a99e3e8d73e3ee3cb3e2e04de0e61c8992be55672ed24a095cb35bb254fda67f08fa251f522dde7e24eb0bd5a0939b4cbda8b72a75b1c1c46f222cd2edc15294decd615781083b7b1a1dee175048f137d6c3b4b584a1eab98a99985fc449fdf5ca47cffcbeeac10113f6c6ed7ec2ac048729a9e230661742d5a2f4f5fa8f86847ebacc8267c77cd1f41b5f32469e2faf34e21af1db281ea297a86ee1af30343c1dc9cc07d394ed8f1f2b4a18d6450b97a85fdfa2b90293c0ebbebab1144a46f0522a599588a4904eae5ae1cf200960196ed753f8dfdf6bc84a0e566de6ad741208d3a837c64e3e74c4abc09deabb5dd7ca9986069c85a834b63d81af0d3b35fc' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' */ - 1, X'308204a30201000282010100a47c05fac51741d1fe5b063374f333a63bb08461af1e0b2605a875210b0fb1d74bf6067281eaf3a53335bef43891b46ebc4dd26562dff6e2846e2415f48001afcecbf4902f6b9e841c802250cb86f168b355b20a22142565cf12da6230016d0973a1269e826ff63e85fed543f7eeb1bcc25bc072e2d21ec150ef6d0552cfcbbd9878634163a0a86f80ab3ae14e2720027b327b8bdbd9f97cce7e75e9bbba8bd038183ff9f699a3c4246122bd316e9e4243fe627c0de7322d341c721b028f6d75f0132e7f6aa3567e1458f08106e87260ae70b004c1d4035e02d9457e01fec2cb878d9c2d4c9aeed399461c1677176859f4f3baf215476c86598fa481f17e3b9f02030100010282010004035ea5faaf11950d0ead7d0dea6d252e29a56138c393e40e99489a50c9c63e09856c2cd90ca17b335fa9540e1947fcb7ad7267b4dce00a30cefb2469fdc18cc78fe45cac3b84f796366e1fe887575685a19ea16ea96d2c29bc3d05ce440aa40365382affe5b96d57199b9c77ed23fb0606f5101886a5e7739113e8e0575f922ba234a00216882a54da866960c02da7b5b13a782c009686b64fff9b67241fe4fcb951f07bd809f47667124f88a3a05749c30d36bb1b77627ea50ef9c105dfcc71331c08fe125856ce1b5ce5779fa87c3f0dfa4f0d7fe56f2dd5a12a1a82acec56e531ecbca5833203c53b1bf4741538b8c3cce43ebe7db65e3ee0502123c0b902818100d84660baecc97714485814a7232ce90b37ea9b4120c9ba5e2ee2557f35a56b4c8a588e8078b85672bfbba3d504f270901d57df22b8235a4b2373f4b9161cc2f536121e93daf133e079b4d02b85719cff50921fd74692630aa809f24d8c6257876316be00a42fff6e723612dda3090d474894d646e269844930fd168a0026740502818100c2b25e6372c06b03a46a52453054ed2d7b2a644f754c5c0cb7d4d09f3cac187dd0ebef4dfaaca94b92827aceb9d3eaa0af005546644d7358b1ca54e83f707404a639383fc1c0cc752ffcd23b7c7b2386436ac0aedf7cb6ba418b7154b1af14cf4c675df1f8448953b50835dc334f3f9127906b4e3d27cce263733ee0d0dc865302818100c365423b5f76dd38dbeb882d40e070640c4ecf99d5cfabab2fdc98b5e777de2b36caaf646eaccc9dbb9001829187a01ef403d1bb02761e3bc87a18dda796b0a4ee070ccd347fbb08d1ac846eed8f29f2998e8b69e97e9430aa84e1ff22182f50483be1c99e8d26cf582c767afbb34fe5d9336f2c779e3140171c716298a42529028180724a107c62552fbca09c4515166d141959aea5d9baea8b32700b3e37eb7ebe95c4b96aeda4940c812f4ce6d8495f6be0cd39edd4f7763b9aba2b22b27ee2fd47e967b76c3dc9767be8228a2a9f450db2780ac7771ffbeeabe16400b00de9cfd66c6c554a8049832f9f1a65bb906719d2949e034f9738b0ddc831539cd71e4cbf0281807b9d01a2ef8a8228a41a58cceb0ad8eb449fa350ed2c07d012c452e947cac687a9a9f9a04c663356e661e8af30373d863d182d7038eebc901d3c78bc1e4dbf74c8fcba141ba56b0af66fa1c40e5defe7ed382ec008c98fb79f139e46cbc9570d110dc8930fd6f89fdcdda21fc790d4049ff24ffe82704d9234a56124905037d5' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Shared Secrets */ - -INSERT INTO shared_secrets ( - type, data -) VALUES ( - 1, X'16964066a10de938bdb2ab7864fe4459cab1' -); - -INSERT INTO shared_secrets ( - type, data -) VALUES ( - 1, X'8d5cce342174da772c8224a59885deaa118d' -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 4 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 1, 7 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 2, 4 -); - -INSERT INTO shared_secret_identity ( - shared_secret, identity -) VALUES ( - 2, 8 -); - - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote, certreq -) VALUES ( - 'PH_IP_MOON', '0.0.0.0', 0 -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'rw', 1, 4, 6 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..c32c70cfe --- /dev/null +++ b/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,203 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=moon.strongswan.org */ + 1, 1, X'MOON_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Shared Secrets */ + +INSERT INTO shared_secrets ( + type, data +) VALUES ( + 1, X'16964066a10de938bdb2ab7864fe4459cab1' +); + +INSERT INTO shared_secrets ( + type, data +) VALUES ( + 1, X'8d5cce342174da772c8224a59885deaa118d' +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 4 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 1, 7 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 2, 4 +); + +INSERT INTO shared_secret_identity ( + shared_secret, identity +) VALUES ( + 2, 8 +); + + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote, certreq +) VALUES ( + 'PH_IP_MOON', '0.0.0.0', 0 +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'rw', 1, 4, 6 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + diff --git a/testing/tests/sql/rw-rsa-keyid/evaltest.dat b/testing/tests/sql/rw-rsa-keyid/evaltest.dat index b03e5c38d..42153a1a8 100644 --- a/testing/tests/sql/rw-rsa-keyid/evaltest.dat +++ b/testing/tests/sql/rw-rsa-keyid/evaltest.dat @@ -1,9 +1,9 @@ carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=1f:a1:.*:6e:7c remote-host=192.168.0.1 remote-port=4500 remote-id=6a:9c:.*:29:2e initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=ee:7f:.*:8e:0e remote-host=192.168.0.1 remote-port=4500 remote-id=6a:9c:.*:29:2e initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=6a:9c:.*:29:2e remote-host=192.168.0.200 remote-port=4500 remote-id=ee:7f:.*:8e:0e.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=6a:9c:.*:29:2e remote-host=192.168.0.100 remote-port=4500 remote-id=1f:a1:.*:6e:7c.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.200 remote-port=4500 remote-id=..:..:.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.100 remote-port=4500 remote-id=..:..:.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index ebec5c16f..000000000 --- a/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,134 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of carol@strongswan.org */ - 11, X'1fa1a988d9648cb5a0a2546439b4f23d745d6e7c' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of moon.strongswan.org */ - 11, X'6a9c74d1f8897989f65a94e989f1fac3649d292e' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* carol@strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* moon.strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of carol@strongswan.org' */ - 1, X'308204a40201000282010100d05d594f8117bc78972a3ec479ebe1400e53cf72410b93e6f74fa17cf1ea444fb23600bae92d81747e49a2e4407c3f6118033d22a3e67ce69a53907ffad646bfbc3b6abe0bdd9a5080a690dbd919a9a8e70d9694e319e93e5d9361eff9033ac53fc6cd6c95af574c62effbb72c03d41c3b696fc7aa4444483bbaabde555aef8bce0e9797108d11ecf462c66b37f7c2e812f6ab3280a8c05b207156f0e3a787e9c4638205e40ce466716bc35d8623bd99f3cda9c3dee5c8ac19852cff18c405049c7eae735dc393f5209c13946e4f51da030ad7bf31caf58a203eccea2fc79e71d46a06c5dba85d65397a0adfd4cb5a9517fd3dcf17af8ab7584293026b19ad51020301000102820101008a86f560a12fd9b2c6b5646395b757db116b7108c1ebe399f3a43275f213d0f4b743a5fa9e1a0dee1823f6b30f984b3ecf0b20330e8aa7515d1adf7fe6915d1a0e17e6a0911cf4823ef5fe6adb8c6f3a86da86d9579f1b6dc622bd4320e79fc411e1a72360e4e1023ce8d60df2aa5cf3a420361ba5bc9b34f6d8e578fc8067aef457ff2a5a91f7c7c8a4f242cc46ab1cff18d6d1a4d8b82b5791df1f18a04b8cb2da235c3a795900fa7ffbbcb4b1d079a504673794eeca5e75c8c16ad2558965453515f57180b8dc518710aa874cd3bcdeddf109d5b553c27a351437f9c1bcdf8940f3ff8632dd59f6c8e01107b4bbf49c6c5409b6e9ecb29eada333800fa5d102818100f5537045d067df4d786df67e1cfea01ce3ca6de3f06be48efd8b4dc48c1ec19a711003875ee202343c851c8f970d2160a2e4d1108da6437af6bccfae803f61fc450582a89aa0906cba65fc7033aa584c1a2a17e96b2f368951aedaa5261f6e1c14999cfa7f4c4091890eff281cb4e6f37209f4b6d5778607caeca0a15137746d02818100d96e379ba5b4ed604d84a7ed71678a1f23391b749a697289bd3bee5d17985af89264f5ec35d3e37b1e44d6fdafec8a78ae199e0bb680f59f9800bb894ba5b31ee964f3ddc142f361835cf49a1edb75330f44f33c26c56e0752ae3fe0df760838b6437b99a131cb544d64da996baf3bc3f5709cc75f134b048cdebbf8bed1a5f502818017e2d8e2a34909cff432d8b62cc289fa661f7695a3fa0d55f2cfd67195a704f8b19b7a8c7aab8cc563431ea5c87249d6abe595898411352ecac9557b4b1760c5fc3e6e1b567addb5086d17a8210fabeb34fcf6390eeb98e6c3e23f7da6f99671fb7b7d725264ad40be548c796e5a1ac6874afaddb6691dceb26e59b17b43e7fd02818100ac90cb559f089fb56510b9eebba8bf78c30dd9fa8b6ad15afc738a551c1af1688357d9cea5520c2374fc91dd3a38f4159fa7f945b68d576458d18c0605a1f72dbb734211680768fea5b1aaf87f31122d7a1af12976640f55848b836b482f778afb2d47f5c077b2b6afce31a8be4c8f949141d54c6eeaf309237ccb973a6b4dd902818025ec4178c7f7c017c46a93fbdb72e2e3b199ae33c9fa6834f81b75b481cd6756124c744c821b126b07ea9852dc58de40cc87f160209d8af3b4bac4862778d3e21cbfdfcdbbfaad8911500f43a43041b88eefb27c66adfffeb9c8add95d1a4ed05f0bd81a4eda79fd4a0885a4a3bad0dcddecf83401c19df721d6cc7163c4125e' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 1 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 3 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 3, 4 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..13f0cf903 --- /dev/null +++ b/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,134 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of carol@strongswan.org */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of moon.strongswan.org */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* carol@strongswan.org */ + 6, 1, X'CAROL_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* moon.strongswan.org */ + 6, 1, X'MOON_PUB_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 1 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 3 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 3, 4 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index 961dd65c0..000000000 --- a/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,134 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of dave@strongswan.org */ - 11, X'ee7f38daeea1b81a41777f78f2674be8439d8e0e' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of moon.strongswan.org */ - 11, X'6a9c74d1f8897989f65a94e989f1fac3649d292e' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* dave@strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* moon.strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of dave@strongswan.org */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 1 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 3 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 3, 4 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..baaf17210 --- /dev/null +++ b/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,134 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of dave@strongswan.org */ + 11, X'DAVE_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of moon.strongswan.org */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* dave@strongswan.org */ + 6, 1, X'DAVE_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* moon.strongswan.org */ + 6, 1, X'MOON_PUB_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of dave@strongswan.org */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 1 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 3 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 3, 4 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index dee634c50..000000000 --- a/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,170 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of moon.strongswan.org */ - 11, X'6a9c74d1f8897989f65a94e989f1fac3649d292e' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of carol@strongswan.org */ - 11, X'1fa1a988d9648cb5a0a2546439b4f23d745d6e7c' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of dave@strongswan.org */ - 11, X'ee7f38daeea1b81a41777f78f2674be8439d8e0e' - ); - -/* Raw RSA public keys */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* moon.strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* carol@strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* dave@strongswan.org */ - 6, 1, X'30820122300d06092a864886f70d01010105000382010f003082010a0282010100c007f2536f0558e68345d3ef017a175b73434e797f9b97448e720a5985aea76cc0503b8d63b4e239af95db83db0af65f8360e9d941912c121215643a0af32188fc520413e81645ff8e2e623c9362be1b57649530bf54fdad6563106105ace949d7de2895a4771c237090aaa2567bd7d9b08b2ad09f63f61bba87d7462046e89fa4570cb3c8e4322220a737af48c31cd0ec2140f3723b94742c4a14232e1d409f6b53c18aaa63e693fa5d3d06808e948db8273563d33dbd9ac44ecfd71e60426570885898b3e5538767eaf4ef713719e7fd89b32e4e3f60d972ef1617437d4dba14af4691fb8ec275a78552bae9d8aaf71c3d42aca793ef0ad09e1af353daab750203010001' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 7 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 1 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'rw', 1, 5, 4 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..a5aa362d7 --- /dev/null +++ b/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,170 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of moon.strongswan.org */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of carol@strongswan.org */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of dave@strongswan.org */ + 11, X'DAVE_SPK_HEX' + ); + +/* Raw RSA public keys */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* moon.strongswan.org */ + 6, 1, X'MOON_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* carol@strongswan.org */ + 6, 1, X'CAROL_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* dave@strongswan.org */ + 6, 1, X'DAVE_PUB_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 7 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 1 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'rw', 1, 5, 4 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + diff --git a/testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql b/testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql deleted file mode 100644 index 987e4ad78..000000000 --- a/testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql +++ /dev/null @@ -1,134 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of carol@strongswan.org */ - 11, X'1fa1a988d9648cb5a0a2546439b4f23d745d6e7c' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of moon.strongswan.org */ - 11, X'6a9c74d1f8897989f65a94e989f1fac3649d292e' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* carol@strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* moon.strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of carol@strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 1 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 3 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_CAROL', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 1, 2 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..268a78ec4 --- /dev/null +++ b/testing/tests/sql/rw-rsa/hosts/carol/etc/ipsec.d/data.sql.in @@ -0,0 +1,134 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of carol@strongswan.org */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of moon.strongswan.org */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* carol@strongswan.org */ + 6, 1, X'CAROL_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* moon.strongswan.org */ + 6, 1, X'MOON_PUB_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of carol@strongswan.org' */ + 1, X'CAROL_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 1 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 3 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_CAROL', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 1, 2 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql b/testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql deleted file mode 100644 index fda055a06..000000000 --- a/testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql +++ /dev/null @@ -1,133 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of dave@strongswan.org */ - 11, X'ee7f38daeea1b81a41777f78f2674be8439d8e0e' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of moon.strongswan.org */ - 11, X'6a9c74d1f8897989f65a94e989f1fac3649d292e' - ); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* dave@strongswan.org */ - 6, 1, X'30820122300d06092a864886f70d01010105000382010f003082010a0282010100c007f2536f0558e68345d3ef017a175b73434e797f9b97448e720a5985aea76cc0503b8d63b4e239af95db83db0af65f8360e9d941912c121215643a0af32188fc520413e81645ff8e2e623c9362be1b57649530bf54fdad6563106105ace949d7de2895a4771c237090aaa2567bd7d9b08b2ad09f63f61bba87d7462046e89fa4570cb3c8e4322220a737af48c31cd0ec2140f3723b94742c4a14232e1d409f6b53c18aaa63e693fa5d3d06808e948db8273563d33dbd9ac44ecfd71e60426570885898b3e5538767eaf4ef713719e7fd89b32e4e3f60d972ef1617437d4dba14af4691fb8ec275a78552bae9d8aaf71c3d42aca793ef0ad09e1af353daab750203010001' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* moon.strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); -$INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of dave@strongswan.org */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 1 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 3 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_DAVE', 'PH_IP_MOON' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'home', 1, 1, 2 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'home', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 2 -); - diff --git a/testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..433a2d584 --- /dev/null +++ b/testing/tests/sql/rw-rsa/hosts/dave/etc/ipsec.d/data.sql.in @@ -0,0 +1,133 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of dave@strongswan.org */ + 11, X'DAVE_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of moon.strongswan.org */ + 11, X'MOON_SPK_HEX' + ); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* dave@strongswan.org */ + 6, 1, X'DAVE_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* moon.strongswan.org */ + 6, 1, X'MOON_PUB_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); +$INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of dave@strongswan.org */ + 1, X'DAVE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 1 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 3 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_DAVE', 'PH_IP_MOON' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'home', 1, 1, 2 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'home', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 2 +); + diff --git a/testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql b/testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql deleted file mode 100644 index bc18a87df..000000000 --- a/testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql +++ /dev/null @@ -1,170 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* moon.strongswan.org */ - 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* carol@strongswan.org */ - 3, X'6361726f6c407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* dave@strongswan.org */ - 3, X'64617665407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of moon.strongswan.org */ - 11, X'6a9c74d1f8897989f65a94e989f1fac3649d292e' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of carol@strongswan.org */ - 11, X'1fa1a988d9648cb5a0a2546439b4f23d745d6e7c' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of dave@strongswan.org */ - 11, X'ee7f38daeea1b81a41777f78f2674be8439d8e0e' - ); - -/* Raw RSA public keys */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* moon.strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* carol@strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* dave@strongswan.org */ - 6, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 5 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 3, 7 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of CN=moon.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 1 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_MOON', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id -) VALUES ( - 'rw', 1, 1, 4 -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'rw', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - diff --git a/testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql.in b/testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..cb2b1eb5f --- /dev/null +++ b/testing/tests/sql/rw-rsa/hosts/moon/etc/ipsec.d/data.sql.in @@ -0,0 +1,170 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* moon.strongswan.org */ + 2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* carol@strongswan.org */ + 3, X'6361726f6c407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* dave@strongswan.org */ + 3, X'64617665407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of moon.strongswan.org */ + 11, X'MOON_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of carol@strongswan.org */ + 11, X'CAROL_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of dave@strongswan.org */ + 11, X'DAVE_SPK_HEX' + ); + +/* Raw RSA public keys */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* moon.strongswan.org */ + 6, 1, X'MOON_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* carol@strongswan.org */ + 6, 1, X'CAROL_PUB_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* dave@strongswan.org */ + 6, 1, X'DAVE_PUB_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 5 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 3, 7 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of CN=moon.strongswan.org' */ + 1, X'MOON_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 1 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_MOON', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id +) VALUES ( + 'rw', 1, 1, 4 +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'rw', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql b/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql deleted file mode 100644 index bb7c2dd9e..000000000 --- a/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql +++ /dev/null @@ -1,199 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* alice@strongswan.org */ - 3, X'616c696365407374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org' */ - 11, X'fb35c1df730e1570ee56ba1b6e1cf7f3ae48fcd9' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org */ - 1, 1, X'3082041f30820307a00302010202012d300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3134303832373134353433365a170d3139303832363134353433365a3057310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e310e300c060355040b130553616c6573311d301b06035504031414616c696365407374726f6e677377616e2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100b46c93f8a9e1e8d05729c41a6bc5f7eaa1d8c212d828b7ab5b3eed5031e3b8b8beedae3c1c5bd3ae1a872170e311b4f27cf87b04cbc3bb20af1873ed89a2f151d8dfd635c15914163c0d178f896cbdaf076a6b1677f57b036669ade16f2449ceee008daf284d6d11298da8edc322d2bc93668f57a27eead5c2dd1d96f8056fda4d8cca70ba3b16c9a382f6ea58a553a25ac8d3bdba5cf2c27b5bbe72f064018d4e9698e33b5a56889dc927f706d68440f0fc6034bba95f7e94051b71c352eba2f8a9eee38aad285a6d0fa5cd3480e3e179801f10e1580ad738a434c5a5edd205aac3f5d10715ae7911180384dfdf1f5d9d58a00a0298ea82be0b175bbcb793570203010001a38201063082010230090603551d1304023000300b0603551d0f0404030203a8301d0603551d0e04160414fb35c1df730e1570ee56ba1b6e1cf7f3ae48fcd9306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100301f0603551d11041830168114616c696365407374726f6e677377616e2e6f726730390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e7374726f6e677377616e2e6f72672f7374726f6e677377616e2e63726c300d06092a864886f70d01010b050003820101004b5d12120923b1178967f3eb9ba1a1d3b3526f7c214a090def3915a3ae7b5df2ff1243ddb119106b4f9a026ad6954e23db430a6175270e977efb6144141060ce4a96cd443d00bb967556bc8fff4d81e34d5349bae967b0d9c809f14ac47a0f3f256c2b56d462c2a44cc5771352562e63df493cc9e080cb554860208fb2a350a73888158bb3ad0f3bc743f553d5b4c541341875836bbf4b464913bfcb89c09e1128c93c1c79da73bc2cf726eb853f2cbf7a1702ff0b44de33153abe61158e9bc847ff406118c2918ba4b3bdd2b58bce77706e0dec8d81eb49ac3b69f494390f0201fc10113a211a5dd8376b5c7e94c84c0402226b74659130d2690fb3885d287a' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, OU=Sales, CN=alice@strongswan.org' */ - 1, X'308204a40201000282010100b46c93f8a9e1e8d05729c41a6bc5f7eaa1d8c212d828b7ab5b3eed5031e3b8b8beedae3c1c5bd3ae1a872170e311b4f27cf87b04cbc3bb20af1873ed89a2f151d8dfd635c15914163c0d178f896cbdaf076a6b1677f57b036669ade16f2449ceee008daf284d6d11298da8edc322d2bc93668f57a27eead5c2dd1d96f8056fda4d8cca70ba3b16c9a382f6ea58a553a25ac8d3bdba5cf2c27b5bbe72f064018d4e9698e33b5a56889dc927f706d68440f0fc6034bba95f7e94051b71c352eba2f8a9eee38aad285a6d0fa5cd3480e3e179801f10e1580ad738a434c5a5edd205aac3f5d10715ae7911180384dfdf1f5d9d58a00a0298ea82be0b175bbcb793570203010001028201005075a33f5f331989df7506b8e99aed463b4ad8b162a835d03aeec311e24db550de044c910dec7d67c4f8c216ff8c23ef877fa00cb179e5f75b5e424489fe9a336fcdd24f429c20f311709d332b8bccc3434157e43b36c3d6ee52ee71fc0868c9d9257209cca54aa03eb1a7c5f021956cf726e381a73b862a31ae3dc5d77145418a9333073e0a99c2bcf32d92df386a45bbd8ad996174796fae1b21e540221e7fc0e410622c936dcdfc48184cbdb65e0f05b7d0e5fa57302ca0e2bf6d34deb83593df773a040c86f8759a99773385ba8aa30241d705fd559df1e80899e68181480ccc3d514dfa3601891c6e3765d30a477da52fcd42efaf3cd4f3b7d580043b5102818100ebeb3067086f417350b99828fd4b173ecbbb02e56b44ce96cadd05cc2b3ba384eac8a8650a07e460edf5f2a87ffe473708d607836f0e65d2338be6f84f2619204d6a449f2cd22a216c2c1519327fafca26904ce1968d6cea40158278a815abfaf3fef4c1578a7258c9848e1e441f0eb713172f22a7a9064f384dadb168bf4cd502818100c3c820f1f2876cbd38c12f31157596421d5ab5c2b77d3bcd4d8f61ab02688cd381a3eb25cd7c9c2700b9b6a838dc0643633184989ac7e7f6ae81c95031de1e7c777455843182d011e595e9c9879384c75f6ff1ead4ad7824edfe6d0cd41ec0284467c059f414c1a34f2ded28e8490f5979e7a0b54c487fcc202df21703d7857b02818100b9c353358dfaacbab451af72771fed89d0b9ccaa013108cacbaa05aaa2502f8db5a192971cb2e22d40b26d0428e47c06e5ba41e8484639feadfff73a86782548be2c73243312b981dfbf464db4e9bded9b37fc91950e7f3864858b5a9e5f922fe4785918f4695b6876251e12cee8f5994a3af32e827e212db7d3d274e359de9102818100834a78f5678bf39aed2d77e5359bd638de108fa5558151123b79f4a8468430344252d7855148c83acb9cbee60ec3561be8b03358572bc9ddbe66e0c6bbba55bd682a069310d4c58dcae57e931c2d0c34db4669f7edc9aab1313c968aacd136518a95fd0315d0b98e37b1f7c1a00c2693fd511c8f97e9627253fe1bc3dd5ab1730281807e4554fa27b5ead10f774ec25c4a1545645d27af649bb6a00c82a6dd2eff191f3245e7e5bf9ef57963d66a0776827109f9bc2c9acd27d942ab17331a27b8e85aada7c6cc4651695ffb0cec56d4459b8d37cc95902faeeb83f3c05efef18df3320bd42bb5479856a3094a8fef9f0aa86a17701aba1e84b5f016425a8d4ad6afdd' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_ALICE', 'PH_IP_SUN' -); - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - '%any', '%any' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'nat-t', 1, 4, 5, '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, auth_method -) VALUES ( - 'shunts', 2, 7, 7, 0 -); - -INSERT INTO child_configs ( - name -) VALUES ( - 'nat-t' -); - -INSERT INTO child_configs ( - name, mode, start_action -) VALUES ( - 'local-net', 4, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 2, 2 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 0.0.0.0/0 */ - 7, X'00000000', X'ffffffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 3, 2 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 1, 1 -); diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql.in b/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..898cd68e7 --- /dev/null +++ b/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/ipsec.d/data.sql.in @@ -0,0 +1,199 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* alice@strongswan.org */ + 3, X'616c696365407374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, OU=Sales, CN=alice@strongswan.org' */ + 11, X'ALICE_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, OU=Sales, CN=alice@strongswan.org */ + 1, 1, X'ALICE_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, OU=Sales, CN=alice@strongswan.org' */ + 1, X'ALICE_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_ALICE', 'PH_IP_SUN' +); + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + '%any', '%any' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'nat-t', 1, 4, 5, '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, auth_method +) VALUES ( + 'shunts', 2, 7, 7, 0 +); + +INSERT INTO child_configs ( + name +) VALUES ( + 'nat-t' +); + +INSERT INTO child_configs ( + name, mode, start_action +) VALUES ( + 'local-net', 4, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 2, 2 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 0.0.0.0/0 */ + 7, X'00000000', X'ffffffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 3, 2 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 1, 1 +); diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql b/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql deleted file mode 100644 index abda7caff..000000000 --- a/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql +++ /dev/null @@ -1,195 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 11, X'edcd6347cdd12fb63000b605430713544c9d318a' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=sun.strongswan.org */ - 1, 1, X'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' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 5 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=sun.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 5 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_SUN', '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, pool -) VALUES ( - 'nat-t', 1, 4, 6, 'vips' -); - -INSERT INTO child_configs ( - name, updown -) VALUES ( - 'nat-t', '/usr/local/libexec/ipsec/_updown iptables' -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 0.0.0.0/0 */ - 7, X'00000000', X'ffffffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 3 -); - -/* Pools */ - -INSERT INTO pools ( - name, start, end, timeout -) VALUES ( - 'vips', X'0a030001', X'0a030006', 0 -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030001' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030002' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030003' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030004' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030005' -); - -INSERT INTO addresses ( - pool, address -) VALUES ( - 1, X'0a030006' -); diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql.in b/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..393efbd8d --- /dev/null +++ b/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/ipsec.d/data.sql.in @@ -0,0 +1,195 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 11, X'SUN_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=sun.strongswan.org */ + 1, 1, X'SUN_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 5 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=sun.strongswan.org' */ + 1, X'SUN_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 5 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_SUN', '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, pool +) VALUES ( + 'nat-t', 1, 4, 6, 'vips' +); + +INSERT INTO child_configs ( + name, updown +) VALUES ( + 'nat-t', '/usr/local/libexec/ipsec/_updown iptables' +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 0.0.0.0/0 */ + 7, X'00000000', X'ffffffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 3 +); + +/* Pools */ + +INSERT INTO pools ( + name, start, end, timeout +) VALUES ( + 'vips', X'0a030001', X'0a030006', 0 +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030001' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030002' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030003' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030004' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030005' +); + +INSERT INTO addresses ( + pool, address +) VALUES ( + 1, X'0a030006' +); diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql b/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql deleted file mode 100644 index cc28124b9..000000000 --- a/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql +++ /dev/null @@ -1,199 +0,0 @@ -/* Identities */ - -INSERT INTO identities ( - type, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 9, X'3045310B300906035504061302434831193017060355040A13104C696E7578207374726F6E675377616E311B3019060355040313127374726F6E675377616E20526F6F74204341' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'5da7dd700651327ee7b66db3b5e5e060ea2e4def' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* keyid of 'C=CH, O=Linux strongSwan, CN=strongSwan Root CA' */ - 11, X'ae096b87b44886d3b820978623dabd0eae22ebbc' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* venus.strongswan.org */ - 2, X'76656e75732e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* sun.strongswan.org */ - 2, X'73756e2e7374726f6e677377616e2e6f7267' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* subjkey of 'C=CH, O=Linux strongSwan, CN=venus.strongswan.org' */ - 11, X'8ab59d2d99cb02fc9b00358b3b16cd7ce7ce8d0c' - ); - -INSERT INTO identities ( - type, data -) VALUES ( /* %any */ - 0, '%any' -); - -/* Certificates */ - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=strongSwan Root CA */ - 1, 1, X'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' -); - -INSERT INTO certificates ( - type, keytype, data -) VALUES ( /* C=CH, O=Linux strongSwan, CN=venus.strongswan.org */ - 1, 1, X'3082040f308202f7a00302010202012c300d06092a864886f70d01010b05003045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341301e170d3134303832373134353232375a170d3139303832363134353232375a3047310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311d301b0603550403131476656e75732e7374726f6e677377616e2e6f726730820122300d06092a864886f70d01010105000382010f003082010a0282010100b3434949425bb7271d14cbca27f765b1a1596f272cb586dc1a3999b4e649a4ebef2490790c443226dde1f205943a3d6e3aafff95a082eb1e773fb390a6c1c042964562feea7a8d46b4346a80d0c8670496fcf99a0476d24ca9b0955053401b6827750c10f7dbd194aebe65bbefab745b74d1e801de954db66a3078f84453331133f249c45eb063680ba02f5dbd5855c6586ff639246659910ed52ae144957efc46927381f9bde22f674ce1bb495fd0b81ce0d0a1d823ce9fc715037aaf31af8025caef4ddbda759fe163ed8a96aabf21ce4207bf476db6001fdfffa8f3cd73e7c83693053c64dccb39f13652337d25d981ae2933f3660e72936b2b8ac341914f0203010001a38201063082010230090603551d1304023000300b0603551d0f0404030203a8301d0603551d0e041604148ab59d2d99cb02fc9b00358b3b16cd7ce7ce8d0c306d0603551d230466306480145da7dd700651327ee7b66db3b5e5e060ea2e4defa149a4473045310b300906035504061302434831193017060355040a13104c696e7578207374726f6e675377616e311b3019060355040313127374726f6e675377616e20526f6f74204341820100301f0603551d1104183016821476656e75732e7374726f6e677377616e2e6f726730390603551d1f04323030302ea02ca02a8628687474703a2f2f63726c2e7374726f6e677377616e2e6f72672f7374726f6e677377616e2e63726c300d06092a864886f70d01010b050003820101005041aae28bfc721cfcd8f1cdb0c57f2452509a25396fdeca58c09598d5387c8e5ea485539be7bab675397eb0c3ece8309de53ffdfa48e2c6383285976418f27dd89d98e90ec0c477001e53be781bd1dcd7b38310a32e720c0f17030d06ca1d83a650dde68f307bfb28bf9b87b74ad927c493e52d2cdaeee531b30046895a841a6aa6cf3481d437e69490ff4a904fe8a354bf165515bca57d93335f6523338e1014c1862e76715acb427925aff2bee101429cc59e8541d5ec431a1049054077506bc279971f712e72b9ceb145f0a3ba8f65d1acf1b08a2a22bbbc83c5da60554d2e5c843032c4f52702c19eaa4772bec5ffbe20efe5e1544b8699f8d0f50ce827' -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 1 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 2 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 1, 3 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 4 -); - -INSERT INTO certificate_identity ( - certificate, identity -) VALUES ( - 2, 6 -); - -/* Private Keys */ - -INSERT INTO private_keys ( - type, data -) VALUES ( /* key of 'C=CH, O=Linux strongSwan, CN=venus.strongswan.org' */ - 1, X'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' -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 4 -); - -INSERT INTO private_key_identity ( - private_key, identity -) VALUES ( - 1, 6 -); - -/* Configurations */ - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - 'PH_IP_VENUS', 'PH_IP_SUN' -); - -INSERT INTO ike_configs ( - local, remote -) VALUES ( - '%any', '%any' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, virtual -) VALUES ( - 'nat-t', 1, 4, 5, '0.0.0.0' -); - -INSERT INTO peer_configs ( - name, ike_cfg, local_id, remote_id, auth_method -) VALUES ( - 'shunts', 2, 7, 7, 0 -); - -INSERT INTO child_configs ( - name -) VALUES ( - 'nat-t' -); - -INSERT INTO child_configs ( - name, mode, start_action -) VALUES ( - 'local-net', 4, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 1, 1 -); - -INSERT INTO peer_config_child_config ( - peer_cfg, child_cfg -) VALUES ( - 2, 2 -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 10.1.0.0/16 */ - 7, X'0a010000', X'0a01ffff' -); - -INSERT INTO traffic_selectors ( - type, start_addr, end_addr -) VALUES ( /* 0.0.0.0/0 */ - 7, X'00000000', X'ffffffff' -); - -INSERT INTO traffic_selectors ( - type -) VALUES ( /* dynamic/32 */ - 7 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 2, 1 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 1, 3, 2 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 1, 0 -); - -INSERT INTO child_config_traffic_selector ( - child_cfg, traffic_selector, kind -) VALUES ( - 2, 1, 1 -); diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql.in b/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql.in new file mode 100644 index 000000000..e70c29da2 --- /dev/null +++ b/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/ipsec.d/data.sql.in @@ -0,0 +1,199 @@ +/* Identities */ + +INSERT INTO identities ( + type, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPK_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */ + 11, X'CA_SPKI_HEX' +); + +INSERT INTO identities ( + type, data +) VALUES ( /* venus.strongswan.org */ + 2, X'76656e75732e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* sun.strongswan.org */ + 2, X'73756e2e7374726f6e677377616e2e6f7267' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=venus.strongswan.org' */ + 11, X'VENUS_SPK_HEX' + ); + +INSERT INTO identities ( + type, data +) VALUES ( /* %any */ + 0, '%any' +); + +/* Certificates */ + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */ + 1, 1, X'CA_CERT_HEX' +); + +INSERT INTO certificates ( + type, keytype, data +) VALUES ( /* C=CH, O=strongSwan Project, CN=venus.strongswan.org */ + 1, 1, X'VENUS_CERT_HEX' +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 1 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 2 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 1, 3 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 4 +); + +INSERT INTO certificate_identity ( + certificate, identity +) VALUES ( + 2, 6 +); + +/* Private Keys */ + +INSERT INTO private_keys ( + type, data +) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=venus.strongswan.org' */ + 1, X'VENUS_KEY_HEX' +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 4 +); + +INSERT INTO private_key_identity ( + private_key, identity +) VALUES ( + 1, 6 +); + +/* Configurations */ + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + 'PH_IP_VENUS', 'PH_IP_SUN' +); + +INSERT INTO ike_configs ( + local, remote +) VALUES ( + '%any', '%any' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, virtual +) VALUES ( + 'nat-t', 1, 4, 5, '0.0.0.0' +); + +INSERT INTO peer_configs ( + name, ike_cfg, local_id, remote_id, auth_method +) VALUES ( + 'shunts', 2, 7, 7, 0 +); + +INSERT INTO child_configs ( + name +) VALUES ( + 'nat-t' +); + +INSERT INTO child_configs ( + name, mode, start_action +) VALUES ( + 'local-net', 4, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 1, 1 +); + +INSERT INTO peer_config_child_config ( + peer_cfg, child_cfg +) VALUES ( + 2, 2 +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 10.1.0.0/16 */ + 7, X'0a010000', X'0a01ffff' +); + +INSERT INTO traffic_selectors ( + type, start_addr, end_addr +) VALUES ( /* 0.0.0.0/0 */ + 7, X'00000000', X'ffffffff' +); + +INSERT INTO traffic_selectors ( + type +) VALUES ( /* dynamic/32 */ + 7 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 2, 1 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 1, 3, 2 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 1, 0 +); + +INSERT INTO child_config_traffic_selector ( + child_cfg, traffic_selector, kind +) VALUES ( + 2, 1, 1 +); From 92c001f766ee37ce5c1c832ea9d740b8bb496657 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sun, 28 Apr 2019 20:39:26 +0200 Subject: [PATCH 08/20] testing: Remove dynamic keys and certs from repository --- testing/hosts/.gitignore | 4 + .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../alice/etc/ipsec.d/certs/aliceCert.pem | 25 -- .../alice/etc/ipsec.d/private/aliceKey.pem | 27 --- .../hosts/alice/etc/raddb/certs/aaaCert.pem | 25 -- .../hosts/alice/etc/raddb/certs/aaaKey.pem | 27 --- .../alice/etc/raddb/certs/strongswanCert.pem | 22 -- .../hosts/alice/etc/swanctl/rsa/aliceKey.pem | 27 --- .../alice/etc/swanctl/x509/aliceCert.pem | 25 -- .../etc/swanctl/x509ca/strongswanCert.pem | 22 -- .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../hosts/bob/etc/ipsec.d/certs/bobCert.pem | 25 -- .../hosts/bob/etc/ipsec.d/private/bobKey.pem | 27 --- testing/hosts/bob/etc/swanctl/rsa/bobKey.pem | 27 --- .../hosts/bob/etc/swanctl/x509/bobCert.pem | 25 -- .../bob/etc/swanctl/x509ca/strongswanCert.pem | 22 -- .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -- .../carol/etc/ipsec.d/private/carolKey.pem | 30 --- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 27 --- .../carol/etc/swanctl/x509/carolCert.pem | 25 -- .../etc/swanctl/x509ca/strongswanCert.pem | 22 -- .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 25 -- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --- .../hosts/dave/etc/swanctl/rsa/daveKey.pem | 27 --- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 25 -- .../etc/swanctl/x509ca/strongswanCert.pem | 22 -- .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../hosts/moon/etc/ipsec.d/certs/moonCert.pem | 25 -- .../moon/etc/ipsec.d/private/moonKey.pem | 27 --- .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 27 --- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 25 -- .../etc/swanctl/x509ca/strongswanCert.pem | 22 -- .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../hosts/sun/etc/ipsec.d/certs/sunCert.pem | 25 -- .../hosts/sun/etc/ipsec.d/private/sunKey.pem | 27 --- testing/hosts/sun/etc/swanctl/rsa/sunKey.pem | 27 --- .../hosts/sun/etc/swanctl/x509/sunCert.pem | 25 -- .../sun/etc/swanctl/x509ca/strongswanCert.pem | 22 -- .../etc/ipsec.d/cacerts/strongswanCert.pem | 22 -- .../venus/etc/ipsec.d/certs/venusCert.pem | 24 -- .../venus/etc/ipsec.d/private/venusKey.pem | 27 --- .../hosts/venus/etc/swanctl/rsa/venusKey.pem | 27 --- .../venus/etc/swanctl/x509/venusCert.pem | 24 -- .../etc/swanctl/x509ca/strongswanCert.pem | 22 -- testing/hosts/winnetou/etc/ca/.gitignore | 1 + .../openssl/bliss/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../etc/openssl/bliss/strongswan_blissKey.der | Bin 1310 -> 0 bytes .../07de9420646e493941432a451e7c14fd28fb9307 | Bin 1058 -> 0 bytes .../16bf9080ac60d035d7a75ca7f634ed4427f00c0f | Bin 1076 -> 0 bytes .../174b20a63b8469706e6695e185ac8cc90bb9e69f | Bin 965 -> 0 bytes .../24d9077c072f5a22ad0c6f65f9f20ebda2afa491 | Bin 965 -> 0 bytes .../3b389ed7670f8698f37e8a90b4f99389d3c8e3c0 | Bin 1060 -> 0 bytes .../53c790f4502ef25e04d6924ac63e65ec224495db | Bin 1061 -> 0 bytes .../548acbf0651d74df8175e709d52e24d9fcf1a1e5 | Bin 1062 -> 0 bytes .../55b8d682bccbba72d48faa4e31b885c589d94e35 | Bin 1060 -> 0 bytes .../57b8d46c89658ec3a53e7aec7fd99aa42636d8a8 | Bin 1062 -> 0 bytes .../5bd93cb213b4b31885da0a0efc2a79f4a7070708 | Bin 1080 -> 0 bytes .../65b352233dc5cf96ecd69271587e47eea59446f1 | Bin 1070 -> 0 bytes .../679aaf150f9eef2897cf419485667387a8b8579a | Bin 1059 -> 0 bytes .../694f095095ab926875841456736263fe40696930 | Bin 1062 -> 0 bytes .../878cbc01427f1c1f5335b68604256705e85bfcd1 | Bin 1043 -> 0 bytes .../8c16a693aa59f4f4ed7eec7fd8a4ba7799e3c531 | Bin 1119 -> 0 bytes .../9319a45e2618f95fa64c539edb6bb6ef5e19a27e | Bin 1062 -> 0 bytes .../982d8252943f432acfacb002a0e576442402ba50 | Bin 959 -> 0 bytes .../cb516460e6f70eb2601effee6b7b6c7884c23fdb | Bin 1095 -> 0 bytes .../e079576c2006eb01569cb79c6e39dbb488050a86 | Bin 1092 -> 0 bytes .../e1fc65a76e366f513effaba487ac6cf2c144b7a7 | Bin 1059 -> 0 bytes .../0855c55d208f71747b88da0fabcce348be495ac0 | Bin 1028 -> 0 bytes .../29d8bec44f188d61072bad52bfaf6f8553342f15 | Bin 1013 -> 0 bytes .../91b2e4f8a1612a34c646fb8320aaf374cc78ab7b | Bin 1072 -> 0 bytes .../fc384911d10e35814a20c92642873925eada85c3 | Bin 1132 -> 0 bytes .../35ef6b73537e090d3b09359bfee642eafa6192eb | Bin 1212 -> 0 bytes .../6645da3911d7f86e5410b698e2a441f1e2e4491a | Bin 1188 -> 0 bytes .../e2d52f0f42f61f786f1c570a4acc8fa8d72a329f | Bin 1210 -> 0 bytes .../f22389d26d00a7ddb5ff61f3b2e66022b18b2e3d | Bin 1190 -> 0 bytes .../3f24becda29cf44f0e4e89f894b925ab7e7a0aac | Bin 1056 -> 0 bytes .../937fb1c8fa8bb3b169c63c8f77562592e44cfb32 | Bin 1066 -> 0 bytes .../a4317f76f97afb3b6308c4b3496eb09d9efeed00 | Bin 1025 -> 0 bytes .../fcc1991dae2d8444c841c386e1921c59882afcf2 | Bin 1114 -> 0 bytes testing/hosts/winnetou/etc/openssl/crlnumber | 1 - .../hosts/winnetou/etc/openssl/crlnumber.old | 1 - testing/hosts/winnetou/etc/openssl/duck/.rand | Bin 1024 -> 0 bytes .../hosts/winnetou/etc/openssl/duck/crlnumber | 1 - .../winnetou/etc/openssl/duck/duckCert.pem | 23 -- .../winnetou/etc/openssl/duck/duckKey.pem | 27 --- .../winnetou/etc/openssl/duck/duckReq.pem | 16 -- .../hosts/winnetou/etc/openssl/duck/index.txt | 1 - .../winnetou/etc/openssl/duck/index.txt.attr | 1 - .../winnetou/etc/openssl/duck/index.txt.old | 0 .../winnetou/etc/openssl/duck/newcerts/01.pem | 24 -- .../winnetou/etc/openssl/duck/openssl.cnf | 170 -------------- .../hosts/winnetou/etc/openssl/duck/serial | 1 - .../winnetou/etc/openssl/duck/serial.old | 1 - .../hosts/winnetou/etc/openssl/ecdsa/.rand | Bin 1024 -> 0 bytes .../winnetou/etc/openssl/ecdsa/crlnumber | 1 - .../winnetou/etc/openssl/ecdsa/crlnumber.old | 1 - .../winnetou/etc/openssl/ecdsa/index.txt | 20 -- .../winnetou/etc/openssl/ecdsa/index.txt.attr | 1 - .../etc/openssl/ecdsa/index.txt.attr.old | 1 - .../winnetou/etc/openssl/ecdsa/index.txt.old | 19 -- .../etc/openssl/ecdsa/newcerts/01.pem | 20 -- .../etc/openssl/ecdsa/newcerts/02.pem | 18 -- .../etc/openssl/ecdsa/newcerts/03.pem | 19 -- .../etc/openssl/ecdsa/newcerts/04.pem | 18 -- .../etc/openssl/ecdsa/newcerts/05.pem | 18 -- .../etc/openssl/ecdsa/newcerts/06.pem | 19 -- .../etc/openssl/ecdsa/newcerts/08.pem | 16 -- .../etc/openssl/ecdsa/newcerts/09.pem | 15 -- .../etc/openssl/ecdsa/newcerts/0A.pem | 16 -- .../etc/openssl/ecdsa/newcerts/0B.pem | 15 -- .../etc/openssl/ecdsa/newcerts/0C.pem | 16 -- .../etc/openssl/ecdsa/newcerts/0D.pem | 17 -- .../etc/openssl/ecdsa/newcerts/0E.pem | 20 -- .../etc/openssl/ecdsa/newcerts/0F.pem | 19 -- .../etc/openssl/ecdsa/newcerts/10.pem | 18 -- .../etc/openssl/ecdsa/newcerts/11.pem | 19 -- .../etc/openssl/ecdsa/newcerts/12.pem | 18 -- .../etc/openssl/ecdsa/newcerts/13.pem | 18 -- .../etc/openssl/ecdsa/newcerts/14.pem | 19 -- .../winnetou/etc/openssl/ecdsa/openssl.cnf | 174 -------------- .../hosts/winnetou/etc/openssl/ecdsa/serial | 1 - .../winnetou/etc/openssl/ecdsa/serial.old | 1 - .../etc/openssl/ecdsa/strongswan_ecCert.pem | 17 -- .../etc/openssl/ecdsa/strongswan_ecKey.pem | 7 - .../openssl/ed25519/newcerts/carolCert.pem | 13 -- .../ed25519/newcerts/carolPolicyCert.pem | 13 -- .../etc/openssl/ed25519/newcerts/daveCert.pem | 13 -- .../etc/openssl/ed25519/newcerts/moonCert.pem | 13 -- .../etc/openssl/ed25519/newcerts/sunCert.pem | 13 -- .../etc/openssl/ed25519/newkeys/carolKey.pem | 3 - .../etc/openssl/ed25519/newkeys/daveKey.pem | 3 - .../etc/openssl/ed25519/newkeys/moonKey.pem | 3 - .../etc/openssl/ed25519/newkeys/sunKey.pem | 3 - .../openssl/ed25519/strongswan_ed25519.crl | Bin 252 -> 0 bytes .../ed25519/strongswan_ed25519Cert.pem | 11 - .../openssl/ed25519/strongswan_ed25519Key.pem | 3 - .../ed25519/strongswan_ed25519PolicyCert.pem | 12 - .../hosts/winnetou/etc/openssl/generate-crl | 68 ------ .../etc/openssl/generate-hash-and-url | 13 -- testing/hosts/winnetou/etc/openssl/index.txt | 56 ----- .../hosts/winnetou/etc/openssl/index.txt.attr | 1 - .../winnetou/etc/openssl/index.txt.attr.old | 1 - .../hosts/winnetou/etc/openssl/index.txt.old | 55 ----- .../winnetou/etc/openssl/monster/crlnumber | 1 - .../winnetou/etc/openssl/monster/index.txt | 2 - .../etc/openssl/monster/index.txt.attr | 1 - .../etc/openssl/monster/index.txt.attr.old | 1 - .../etc/openssl/monster/index.txt.old | 1 - .../etc/openssl/monster/newcerts/01.pem | 46 ---- .../etc/openssl/monster/newcerts/02.pem | 46 ---- .../winnetou/etc/openssl/monster/openssl.cnf | 174 -------------- .../hosts/winnetou/etc/openssl/monster/serial | 1 - .../winnetou/etc/openssl/monster/serial.old | 1 - .../monster/strongswanCert-monster.pem | 55 ----- .../openssl/monster/strongswanKey-monster.pem | 99 -------- .../winnetou/etc/openssl/newcerts/01.pem | 24 -- .../winnetou/etc/openssl/newcerts/02.pem | 24 -- .../winnetou/etc/openssl/newcerts/03.pem | 24 -- .../winnetou/etc/openssl/newcerts/04.pem | 24 -- .../winnetou/etc/openssl/newcerts/05.pem | 25 -- .../winnetou/etc/openssl/newcerts/06.pem | 25 -- .../winnetou/etc/openssl/newcerts/07.pem | 25 -- .../winnetou/etc/openssl/newcerts/08.pem | 25 -- .../winnetou/etc/openssl/newcerts/09.pem | 25 -- .../winnetou/etc/openssl/newcerts/0A.pem | 25 -- .../winnetou/etc/openssl/newcerts/0B.pem | 25 -- .../winnetou/etc/openssl/newcerts/0C.pem | 23 -- .../winnetou/etc/openssl/newcerts/0D.pem | 22 -- .../winnetou/etc/openssl/newcerts/0E.pem | 24 -- .../winnetou/etc/openssl/newcerts/0F.pem | 23 -- .../winnetou/etc/openssl/newcerts/10.pem | 25 -- .../winnetou/etc/openssl/newcerts/11.pem | 25 -- .../winnetou/etc/openssl/newcerts/12.pem | 25 -- .../winnetou/etc/openssl/newcerts/13.pem | 26 --- .../winnetou/etc/openssl/newcerts/14.pem | 24 -- .../winnetou/etc/openssl/newcerts/15.pem | 25 -- .../winnetou/etc/openssl/newcerts/16.pem | 25 -- .../winnetou/etc/openssl/newcerts/17.pem | 25 -- .../winnetou/etc/openssl/newcerts/18.pem | 24 -- .../winnetou/etc/openssl/newcerts/19.pem | 25 -- .../winnetou/etc/openssl/newcerts/1A.pem | 25 -- .../winnetou/etc/openssl/newcerts/1B.pem | 25 -- .../winnetou/etc/openssl/newcerts/1C.pem | 25 -- .../winnetou/etc/openssl/newcerts/1D.pem | 25 -- .../winnetou/etc/openssl/newcerts/1E.pem | 25 -- .../winnetou/etc/openssl/newcerts/1F.pem | 25 -- .../winnetou/etc/openssl/newcerts/20.pem | 84 ------- .../winnetou/etc/openssl/newcerts/21.pem | 83 ------- .../winnetou/etc/openssl/newcerts/22.pem | 25 -- .../winnetou/etc/openssl/newcerts/23.pem | 25 -- .../winnetou/etc/openssl/newcerts/24.pem | 25 -- .../winnetou/etc/openssl/newcerts/25.pem | 25 -- .../winnetou/etc/openssl/newcerts/26.pem | 25 -- .../winnetou/etc/openssl/newcerts/27.pem | 95 -------- .../winnetou/etc/openssl/newcerts/28.pem | 23 -- .../winnetou/etc/openssl/newcerts/29.pem | 25 -- .../winnetou/etc/openssl/newcerts/2A.pem | 25 -- .../winnetou/etc/openssl/newcerts/2B.pem | 25 -- .../winnetou/etc/openssl/newcerts/2D.pem | 25 -- .../winnetou/etc/openssl/newcerts/2E.pem | 25 -- .../winnetou/etc/openssl/newcerts/2F.pem | 25 -- .../winnetou/etc/openssl/newcerts/30.pem | 25 -- .../winnetou/etc/openssl/newcerts/31.pem | 25 -- .../winnetou/etc/openssl/newcerts/32.pem | 25 -- .../winnetou/etc/openssl/newcerts/33.pem | 25 -- .../winnetou/etc/openssl/newcerts/34.pem | 25 -- .../winnetou/etc/openssl/newcerts/35.pem | 25 -- .../winnetou/etc/openssl/newcerts/36.pem | 25 -- .../winnetou/etc/openssl/newcerts/37.pem | 25 -- .../winnetou/etc/openssl/newcerts/38.pem | 26 --- .../hosts/winnetou/etc/openssl/ocsp/ocsp.cgi | 11 - .../winnetou/etc/openssl/ocspCert-self.pem | 22 -- .../hosts/winnetou/etc/openssl/ocspCert.pem | 25 -- .../winnetou/etc/openssl/ocspKey-self.pem | 27 --- .../hosts/winnetou/etc/openssl/ocspKey.pem | 27 --- .../hosts/winnetou/etc/openssl/openssl.cnf | 177 -------------- .../hosts/winnetou/etc/openssl/research/.rand | Bin 1024 -> 0 bytes .../winnetou/etc/openssl/research/crlnumber | 1 - .../etc/openssl/research/crlnumber.old | 1 - .../winnetou/etc/openssl/research/index.txt | 12 - .../etc/openssl/research/index.txt.attr | 1 - .../etc/openssl/research/index.txt.attr.old | 1 - .../etc/openssl/research/index.txt.old | 11 - .../etc/openssl/research/newcerts/01.pem | 25 -- .../etc/openssl/research/newcerts/02.pem | 24 -- .../etc/openssl/research/newcerts/03.pem | 26 --- .../etc/openssl/research/newcerts/04.pem | 24 -- .../etc/openssl/research/newcerts/05.pem | 23 -- .../etc/openssl/research/newcerts/06.pem | 25 -- .../etc/openssl/research/newcerts/07.pem | 88 ------- .../etc/openssl/research/newcerts/08.pem | 26 --- .../etc/openssl/research/newcerts/09.pem | 24 -- .../etc/openssl/research/newcerts/0A.pem | 23 -- .../etc/openssl/research/newcerts/0B.pem | 25 -- .../etc/openssl/research/newcerts/0C.pem | 24 -- .../etc/openssl/research/ocsp/ocsp.cgi | 11 - .../etc/openssl/research/ocspCert.pem | 26 --- .../winnetou/etc/openssl/research/ocspKey.pem | 27 --- .../winnetou/etc/openssl/research/openssl.cnf | 172 -------------- .../etc/openssl/research/researchCert.der | Bin 965 -> 0 bytes .../etc/openssl/research/researchCert.pem | 23 -- .../etc/openssl/research/researchKey.pem | 27 --- .../winnetou/etc/openssl/research/serial | 1 - .../winnetou/etc/openssl/research/serial.old | 1 - .../hosts/winnetou/etc/openssl/rfc3779/.rand | Bin 1024 -> 0 bytes .../winnetou/etc/openssl/rfc3779/crl.pem | 15 -- .../winnetou/etc/openssl/rfc3779/crlnumber | 1 - .../etc/openssl/rfc3779/crlnumber.old | 1 - .../winnetou/etc/openssl/rfc3779/index.txt | 8 - .../etc/openssl/rfc3779/index.txt.attr | 1 - .../etc/openssl/rfc3779/index.txt.attr.old | 1 - .../etc/openssl/rfc3779/index.txt.old | 7 - .../etc/openssl/rfc3779/newcerts/01.pem | 28 --- .../etc/openssl/rfc3779/newcerts/02.pem | 28 --- .../etc/openssl/rfc3779/newcerts/03.pem | 27 --- .../etc/openssl/rfc3779/newcerts/04.pem | 27 --- .../etc/openssl/rfc3779/newcerts/05.pem | 28 --- .../etc/openssl/rfc3779/newcerts/06.pem | 28 --- .../etc/openssl/rfc3779/newcerts/07.pem | 27 --- .../etc/openssl/rfc3779/newcerts/08.pem | 27 --- .../winnetou/etc/openssl/rfc3779/openssl.cnf | 219 ------------------ .../hosts/winnetou/etc/openssl/rfc3779/serial | 1 - .../winnetou/etc/openssl/rfc3779/serial.old | 1 - .../etc/openssl/rfc3779/strongswanCert.pem | 26 --- .../etc/openssl/rfc3779/strongswanKey.pem | 27 --- .../hosts/winnetou/etc/openssl/sales/.rand | Bin 1024 -> 0 bytes .../winnetou/etc/openssl/sales/crlnumber | 1 - .../winnetou/etc/openssl/sales/crlnumber.old | 1 - .../winnetou/etc/openssl/sales/index.txt | 10 - .../winnetou/etc/openssl/sales/index.txt.attr | 1 - .../etc/openssl/sales/index.txt.attr.old | 1 - .../winnetou/etc/openssl/sales/index.txt.old | 9 - .../etc/openssl/sales/newcerts/01.pem | 24 -- .../etc/openssl/sales/newcerts/02.pem | 24 -- .../etc/openssl/sales/newcerts/03.pem | 26 --- .../etc/openssl/sales/newcerts/04.pem | 25 -- .../etc/openssl/sales/newcerts/05.pem | 24 -- .../etc/openssl/sales/newcerts/06.pem | 88 ------- .../etc/openssl/sales/newcerts/07.pem | 26 --- .../etc/openssl/sales/newcerts/08.pem | 24 -- .../etc/openssl/sales/newcerts/09.pem | 24 -- .../etc/openssl/sales/newcerts/0A.pem | 24 -- .../winnetou/etc/openssl/sales/ocsp/ocsp.cgi | 11 - .../winnetou/etc/openssl/sales/ocspCert.pem | 26 --- .../winnetou/etc/openssl/sales/ocspKey.pem | 27 --- .../winnetou/etc/openssl/sales/openssl.cnf | 173 -------------- .../winnetou/etc/openssl/sales/salesCert.der | Bin 959 -> 0 bytes .../winnetou/etc/openssl/sales/salesCert.pem | 22 -- .../winnetou/etc/openssl/sales/salesKey.pem | 27 --- .../hosts/winnetou/etc/openssl/sales/serial | 1 - .../winnetou/etc/openssl/sales/serial.old | 1 - testing/hosts/winnetou/etc/openssl/serial | 1 - testing/hosts/winnetou/etc/openssl/serial.old | 1 - .../etc/openssl/sha3-rsa/carolCert.pem | 28 --- .../etc/openssl/sha3-rsa/carolKey.pem | 39 ---- .../etc/openssl/sha3-rsa/daveCert.pem | 28 --- .../winnetou/etc/openssl/sha3-rsa/daveKey.pem | 39 ---- .../etc/openssl/sha3-rsa/moonCert.pem | 28 --- .../winnetou/etc/openssl/sha3-rsa/moonKey.pem | 39 ---- .../etc/openssl/sha3-rsa/strongswanCert.pem | 26 --- .../etc/openssl/sha3-rsa/strongswanKey.pem | 39 ---- .../winnetou/etc/openssl/sha3-rsa/sunCert.pem | 28 --- .../winnetou/etc/openssl/sha3-rsa/sunKey.pem | 39 ---- .../winnetou/etc/openssl/strongswanCert.der | Bin 953 -> 0 bytes .../winnetou/etc/openssl/strongswanCert.pem | 22 -- .../winnetou/etc/openssl/strongswanKey.pem | 27 --- .../winnetou/etc/openssl/winnetouCert.pem | 24 -- .../winnetou/etc/openssl/winnetouKey.pem | 27 --- testing/scripts/build-certs | 6 + 311 files changed, 11 insertions(+), 6776 deletions(-) create mode 100644 testing/hosts/.gitignore delete mode 100644 testing/hosts/alice/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/alice/etc/ipsec.d/certs/aliceCert.pem delete mode 100644 testing/hosts/alice/etc/ipsec.d/private/aliceKey.pem delete mode 100644 testing/hosts/alice/etc/raddb/certs/aaaCert.pem delete mode 100644 testing/hosts/alice/etc/raddb/certs/aaaKey.pem delete mode 100644 testing/hosts/alice/etc/raddb/certs/strongswanCert.pem delete mode 100644 testing/hosts/alice/etc/swanctl/rsa/aliceKey.pem delete mode 100644 testing/hosts/alice/etc/swanctl/x509/aliceCert.pem delete mode 100644 testing/hosts/alice/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/hosts/bob/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/bob/etc/ipsec.d/certs/bobCert.pem delete mode 100644 testing/hosts/bob/etc/ipsec.d/private/bobKey.pem delete mode 100644 testing/hosts/bob/etc/swanctl/rsa/bobKey.pem delete mode 100644 testing/hosts/bob/etc/swanctl/x509/bobCert.pem delete mode 100644 testing/hosts/bob/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/hosts/carol/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/hosts/dave/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/hosts/dave/etc/swanctl/rsa/daveKey.pem delete mode 100644 testing/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/moon/etc/ipsec.d/certs/moonCert.pem delete mode 100644 testing/hosts/moon/etc/ipsec.d/private/moonKey.pem delete mode 100644 testing/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100755 testing/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/sun/etc/ipsec.d/certs/sunCert.pem delete mode 100644 testing/hosts/sun/etc/ipsec.d/private/sunKey.pem delete mode 100644 testing/hosts/sun/etc/swanctl/rsa/sunKey.pem delete mode 100644 testing/hosts/sun/etc/swanctl/x509/sunCert.pem delete mode 100755 testing/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/hosts/venus/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/hosts/venus/etc/ipsec.d/certs/venusCert.pem delete mode 100644 testing/hosts/venus/etc/ipsec.d/private/venusKey.pem delete mode 100644 testing/hosts/venus/etc/swanctl/rsa/venusKey.pem delete mode 100644 testing/hosts/venus/etc/swanctl/x509/venusCert.pem delete mode 100644 testing/hosts/venus/etc/swanctl/x509ca/strongswanCert.pem create mode 100644 testing/hosts/winnetou/etc/ca/.gitignore delete mode 100644 testing/hosts/winnetou/etc/openssl/bliss/strongswan_blissCert.der delete mode 100644 testing/hosts/winnetou/etc/openssl/bliss/strongswan_blissKey.der delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/07de9420646e493941432a451e7c14fd28fb9307 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/16bf9080ac60d035d7a75ca7f634ed4427f00c0f delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/174b20a63b8469706e6695e185ac8cc90bb9e69f delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/24d9077c072f5a22ad0c6f65f9f20ebda2afa491 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/3b389ed7670f8698f37e8a90b4f99389d3c8e3c0 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/53c790f4502ef25e04d6924ac63e65ec224495db delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/548acbf0651d74df8175e709d52e24d9fcf1a1e5 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/55b8d682bccbba72d48faa4e31b885c589d94e35 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/57b8d46c89658ec3a53e7aec7fd99aa42636d8a8 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/5bd93cb213b4b31885da0a0efc2a79f4a7070708 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/65b352233dc5cf96ecd69271587e47eea59446f1 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/679aaf150f9eef2897cf419485667387a8b8579a delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/694f095095ab926875841456736263fe40696930 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/878cbc01427f1c1f5335b68604256705e85bfcd1 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/8c16a693aa59f4f4ed7eec7fd8a4ba7799e3c531 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/9319a45e2618f95fa64c539edb6bb6ef5e19a27e delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/982d8252943f432acfacb002a0e576442402ba50 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/cb516460e6f70eb2601effee6b7b6c7884c23fdb delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/e079576c2006eb01569cb79c6e39dbb488050a86 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/e1fc65a76e366f513effaba487ac6cf2c144b7a7 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/research/0855c55d208f71747b88da0fabcce348be495ac0 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/research/29d8bec44f188d61072bad52bfaf6f8553342f15 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/research/91b2e4f8a1612a34c646fb8320aaf374cc78ab7b delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/research/fc384911d10e35814a20c92642873925eada85c3 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/rfc3779/35ef6b73537e090d3b09359bfee642eafa6192eb delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/rfc3779/6645da3911d7f86e5410b698e2a441f1e2e4491a delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/rfc3779/e2d52f0f42f61f786f1c570a4acc8fa8d72a329f delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/rfc3779/f22389d26d00a7ddb5ff61f3b2e66022b18b2e3d delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/sales/3f24becda29cf44f0e4e89f894b925ab7e7a0aac delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/sales/937fb1c8fa8bb3b169c63c8f77562592e44cfb32 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/sales/a4317f76f97afb3b6308c4b3496eb09d9efeed00 delete mode 100644 testing/hosts/winnetou/etc/openssl/certs/sales/fcc1991dae2d8444c841c386e1921c59882afcf2 delete mode 100644 testing/hosts/winnetou/etc/openssl/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/crlnumber.old delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/.rand delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/duckCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/duckKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/duckReq.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/duck/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/.rand delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber.old delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr.old delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/02.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/03.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/04.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/05.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/06.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/08.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/09.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0A.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0B.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0C.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0D.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0E.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0F.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/10.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/11.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/12.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/13.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/14.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolPolicyCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newcerts/daveCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newcerts/moonCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newcerts/sunCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newkeys/carolKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newkeys/daveKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newkeys/moonKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/newkeys/sunKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519.crl delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Cert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Key.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519PolicyCert.pem delete mode 100755 testing/hosts/winnetou/etc/openssl/generate-crl delete mode 100755 testing/hosts/winnetou/etc/openssl/generate-hash-and-url delete mode 100644 testing/hosts/winnetou/etc/openssl/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/index.txt.attr.old delete mode 100644 testing/hosts/winnetou/etc/openssl/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/index.txt.attr.old delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/newcerts/02.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/strongswanCert-monster.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/monster/strongswanKey-monster.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/02.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/03.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/04.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/05.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/06.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/07.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/08.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/09.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/0A.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/0B.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/0C.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/0D.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/0E.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/0F.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/10.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/11.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/12.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/13.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/14.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/15.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/16.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/17.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/18.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/19.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/1A.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/1B.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/1C.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/1D.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/1E.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/1F.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/20.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/21.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/22.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/23.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/24.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/25.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/26.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/27.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/28.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/29.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/2A.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/2B.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/2D.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/2E.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/2F.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/30.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/31.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/32.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/33.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/34.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/35.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/36.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/37.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/newcerts/38.pem delete mode 100755 testing/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi delete mode 100644 testing/hosts/winnetou/etc/openssl/ocspCert-self.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ocspCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ocspKey-self.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/ocspKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/research/.rand delete mode 100644 testing/hosts/winnetou/etc/openssl/research/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/research/crlnumber.old delete mode 100644 testing/hosts/winnetou/etc/openssl/research/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/research/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/research/index.txt.attr.old delete mode 100644 testing/hosts/winnetou/etc/openssl/research/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/02.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/03.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/04.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/05.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/06.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/07.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/08.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/09.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/0A.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/0B.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/newcerts/0C.pem delete mode 100755 testing/hosts/winnetou/etc/openssl/research/ocsp/ocsp.cgi delete mode 100644 testing/hosts/winnetou/etc/openssl/research/ocspCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/ocspKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/research/researchCert.der delete mode 100644 testing/hosts/winnetou/etc/openssl/research/researchCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/researchKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/research/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/research/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/.rand delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/crl.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber.old delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr.old delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/02.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/03.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/04.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/05.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/06.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/07.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/08.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/strongswanCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/rfc3779/strongswanKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/.rand delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/crlnumber delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/crlnumber.old delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/index.txt delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/index.txt.attr delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/index.txt.attr.old delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/index.txt.old delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/01.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/02.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/03.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/04.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/05.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/06.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/07.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/08.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/09.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/newcerts/0A.pem delete mode 100755 testing/hosts/winnetou/etc/openssl/sales/ocsp/ocsp.cgi delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/ocspCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/ocspKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/openssl.cnf delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/salesCert.der delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/salesCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/salesKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/sales/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/serial delete mode 100644 testing/hosts/winnetou/etc/openssl/serial.old delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/carolCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/carolKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/daveCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/daveKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/moonCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/moonKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/sunCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/sha3-rsa/sunKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/strongswanCert.der delete mode 100644 testing/hosts/winnetou/etc/openssl/strongswanCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/strongswanKey.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/winnetouCert.pem delete mode 100644 testing/hosts/winnetou/etc/openssl/winnetouKey.pem diff --git a/testing/hosts/.gitignore b/testing/hosts/.gitignore new file mode 100644 index 000000000..54f6084f4 --- /dev/null +++ b/testing/hosts/.gitignore @@ -0,0 +1,4 @@ +*.der +*.pem +*.crl +index.txt diff --git a/testing/hosts/alice/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/alice/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/alice/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/alice/etc/ipsec.d/certs/aliceCert.pem b/testing/hosts/alice/etc/ipsec.d/certs/aliceCert.pem deleted file mode 100644 index fc195676f..000000000 --- a/testing/hosts/alice/etc/ipsec.d/certs/aliceCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBLTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTQzNloXDTE5MDgyNjE0NTQzNlowVzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MR0wGwYDVQQDFBRhbGljZUBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALRsk/ip4ejQVynEGmvF9+qh2MIS2Ci3q1s+7VAx47i4 -vu2uPBxb064ahyFw4xG08nz4ewTLw7sgrxhz7Ymi8VHY39Y1wVkUFjwNF4+JbL2v -B2prFnf1ewNmaa3hbyRJzu4Aja8oTW0RKY2o7cMi0ryTZo9Xon7q1cLdHZb4BW/a -TYzKcLo7FsmjgvbqWKVTolrI0726XPLCe1u+cvBkAY1OlpjjO1pWiJ3JJ/cG1oRA -8PxgNLupX36UBRtxw1Lrovip7uOKrShabQ+lzTSA4+F5gB8Q4VgK1zikNMWl7dIF -qsP10QcVrnkRGAOE398fXZ1YoAoCmOqCvgsXW7y3k1cCAwEAAaOCAQYwggECMAkG -A1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBT7NcHfcw4VcO5WuhtuHPfz -rkj82TBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0 -cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRhbGljZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBLXRISCSOxF4ln8+ub -oaHTs1JvfCFKCQ3vORWjrntd8v8SQ92xGRBrT5oCataVTiPbQwphdScOl377YUQU -EGDOSpbNRD0Au5Z1VryP/02B401TSbrpZ7DZyAnxSsR6Dz8lbCtW1GLCpEzFdxNS -Vi5j30k8yeCAy1VIYCCPsqNQpziIFYuzrQ87x0P1U9W0xUE0GHWDa79LRkkTv8uJ -wJ4RKMk8HHnac7ws9ybrhT8sv3oXAv8LRN4zFTq+YRWOm8hH/0BhGMKRi6SzvdK1 -i853cG4N7I2B60msO2n0lDkPAgH8EBE6IRpd2DdrXH6UyEwEAiJrdGWRMNJpD7OI -XSh6 ------END CERTIFICATE----- diff --git a/testing/hosts/alice/etc/ipsec.d/private/aliceKey.pem b/testing/hosts/alice/etc/ipsec.d/private/aliceKey.pem deleted file mode 100644 index 29512054d..000000000 --- a/testing/hosts/alice/etc/ipsec.d/private/aliceKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAtGyT+Knh6NBXKcQaa8X36qHYwhLYKLerWz7tUDHjuLi+7a48 -HFvTrhqHIXDjEbTyfPh7BMvDuyCvGHPtiaLxUdjf1jXBWRQWPA0Xj4lsva8HamsW -d/V7A2ZpreFvJEnO7gCNryhNbREpjajtwyLSvJNmj1eifurVwt0dlvgFb9pNjMpw -ujsWyaOC9upYpVOiWsjTvbpc8sJ7W75y8GQBjU6WmOM7WlaInckn9wbWhEDw/GA0 -u6lffpQFG3HDUuui+Knu44qtKFptD6XNNIDj4XmAHxDhWArXOKQ0xaXt0gWqw/XR -BxWueREYA4Tf3x9dnVigCgKY6oK+CxdbvLeTVwIDAQABAoIBAFB1oz9fMxmJ33UG -uOma7UY7StixYqg10DruwxHiTbVQ3gRMkQ3sfWfE+MIW/4wj74d/oAyxeeX3W15C -RIn+mjNvzdJPQpwg8xFwnTMri8zDQ0FX5Ds2w9buUu5x/AhoydklcgnMpUqgPrGn -xfAhlWz3JuOBpzuGKjGuPcXXcUVBipMzBz4KmcK88y2S3zhqRbvYrZlhdHlvrhsh -5UAiHn/A5BBiLJNtzfxIGEy9tl4PBbfQ5fpXMCyg4r9tNN64NZPfdzoEDIb4dZqZ -dzOFuoqjAkHXBf1VnfHoCJnmgYFIDMw9UU36NgGJHG43ZdMKR32lL81C76881PO3 -1YAEO1ECgYEA6+swZwhvQXNQuZgo/UsXPsu7AuVrRM6Wyt0FzCs7o4TqyKhlCgfk -YO318qh//kc3CNYHg28OZdIzi+b4TyYZIE1qRJ8s0iohbCwVGTJ/r8omkEzhlo1s -6kAVgnioFav68/70wVeKcljJhI4eRB8OtxMXLyKnqQZPOE2tsWi/TNUCgYEAw8gg -8fKHbL04wS8xFXWWQh1atcK3fTvNTY9hqwJojNOBo+slzXycJwC5tqg43AZDYzGE -mJrH5/augclQMd4efHd0VYQxgtAR5ZXpyYeThMdfb/Hq1K14JO3+bQzUHsAoRGfA -WfQUwaNPLe0o6EkPWXnnoLVMSH/MIC3yFwPXhXsCgYEAucNTNY36rLq0Ua9ydx/t -idC5zKoBMQjKy6oFqqJQL421oZKXHLLiLUCybQQo5HwG5bpB6EhGOf6t//c6hngl -SL4scyQzErmB379GTbTpve2bN/yRlQ5/OGSFi1qeX5Iv5HhZGPRpW2h2JR4Szuj1 -mUo68y6CfiEtt9PSdONZ3pECgYEAg0p49WeL85rtLXflNZvWON4Qj6VVgVESO3n0 -qEaEMDRCUteFUUjIOsucvuYOw1Yb6LAzWFcryd2+ZuDGu7pVvWgqBpMQ1MWNyuV+ -kxwtDDTbRmn37cmqsTE8loqs0TZRipX9AxXQuY43sffBoAwmk/1RHI+X6WJyU/4b -w91asXMCgYB+RVT6J7Xq0Q93TsJcShVFZF0nr2SbtqAMgqbdLv8ZHzJF5+W/nvV5 -Y9ZqB3aCcQn5vCyazSfZQqsXMxonuOharafGzEZRaV/7DOxW1EWbjTfMlZAvruuD -88Be/vGN8zIL1Cu1R5hWowlKj++fCqhqF3Aauh6EtfAWQlqNStav3Q== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/alice/etc/raddb/certs/aaaCert.pem b/testing/hosts/alice/etc/raddb/certs/aaaCert.pem deleted file mode 100644 index 42083c2a9..000000000 --- a/testing/hosts/alice/etc/raddb/certs/aaaCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBMzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE1MDgwNDE0NTUzMVoXDTE5MDkwNjE0NTUzMVowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEmFhYS5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcX -z9IzPMGarSbzZmGq/lpgeRpM2W5uN9QuWFqUnP+L4wjF5Yf+1bhj5DnrhKlOCjii -95dDkLdRMYe+4ovXpINF//+J9d9nyP4YNLClUTwivBwvJdC3cJyyzSO7juTm2GNS -rQFZw3iP3HxWy1dM9/P1+xlgqSou6HJlTDWpaQ+cO3P/WlYKTu9DvTT6/jj4bNS6 -fbiUEG0M0JYcnYSt0iwNWyRHMl2DKjmpibnfhHDNR46t0luSaSobq6A0sRszJ7UR -dE4Kxl3/HLTX8/+dq3qaFIdhqxXzoZKV6ylBK3+OjTbZw3uBV78qa2TUDuMCQVig -kkt6delFhC/tSxcIgz0CAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBRFNnP26ELy5j7KMOO+a8dh5pLe6DBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJhYWEuc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAsncNPDCCDd4mzIHs -nHY7b6H1tVQtFSbAQntV06D4D7vOp6Y+M5S8ta50hJu4f4GEeH5c7/hm8gbRdHt/ -TcjlV/UWBfhU3c/hNJo2LpmmtdmYUABLA3rdZ+FzOnAHX9H8eI988G7eHpI9T7L2 -FY2YEnWhIUVjFrojtH2+NbuA/Ori1QwSBiVhvJQgvUPjhKkjUtC+8zIdaCmJFErQ -GGObpAMtnTcQ74md9BQ791RPMp77tDe1fgm7m8QWIsoIyYEhvzyfk2VTBn1VlWyH -sbT0Vb3X9ubt0KXn2Xr491WTCpc5rzDWj9CNUYUgW7RaPxgw5cj2HK6oiLnGpO73 -xyr/Qw== ------END CERTIFICATE----- diff --git a/testing/hosts/alice/etc/raddb/certs/aaaKey.pem b/testing/hosts/alice/etc/raddb/certs/aaaKey.pem deleted file mode 100644 index adc47dd33..000000000 --- a/testing/hosts/alice/etc/raddb/certs/aaaKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpQIBAAKCAQEAtxfP0jM8wZqtJvNmYar+WmB5GkzZbm431C5YWpSc/4vjCMXl -h/7VuGPkOeuEqU4KOKL3l0OQt1Exh77ii9ekg0X//4n132fI/hg0sKVRPCK8HC8l -0LdwnLLNI7uO5ObYY1KtAVnDeI/cfFbLV0z38/X7GWCpKi7ocmVMNalpD5w7c/9a -VgpO70O9NPr+OPhs1Lp9uJQQbQzQlhydhK3SLA1bJEcyXYMqOamJud+EcM1Hjq3S -W5JpKhuroDSxGzMntRF0TgrGXf8ctNfz/52repoUh2GrFfOhkpXrKUErf46NNtnD -e4FXvyprZNQO4wJBWKCSS3p16UWEL+1LFwiDPQIDAQABAoIBAQCNeNG0+rA0bF7k -nOf8CZL1pFuOzdin8nQi+Bh/DRvufVlU+wyrM2ZSTqUXd/sOkuVk889ZyvQ0IYGj -AQStx1cvs9Pl0OTx1ZDBfVShNWv6imBNasTObB+QhLvro037Yr/KpyRUydY2/vn/ -/VSrRSbGE8gMyNqNZKdpVQo44Ij0bJXxx7kVJ7CfftB65bujkRSK5u7eGjFVyHGs -P9v4n72Pt0mVdC8yeiMjJAmmKLWaDf7U2SUoaxf0IRjRNPdVBuPjbYjfnJ0sGlxF -sCQtu+3JQ4b7vyxrAyUtImbTLwvFqQHTGIahZUvhGd/1aO0Zmls1mvuZ+VhUIsek -uBJh54jFAoGBAN7M08mBkA8oUns0IzzG+A0JYDmdbvOWbKtyQDRl7LkXOq/PckIj -PoliI/5aNZe9+Q8kq8xnvLVcsup7EX6Ovaqc6S3ODNEjy4XEqGMM9tkrz4R4N5f5 -hLayOg3MfdJiPOn3HF+cVvHp0Vwpt8K5TgVmOWkVSKTa+6eX4mhQUuKjAoGBANJg -Rmka90zo+7PPze4oo5ePeqwZrwQ3/6OeD/G1lqMFPOgk3MLGuv9HvtQA5gyyAH7+ -Qy/t+rdPSC7PZi29s8/cERmWTdbZ1ocuKa6xxSvktl7Ibv51d0sW1n+kfVin7cLL -SskoK8BRXjXsZg7jjZjE5f6iqdHq+JPA2JWM10CfAoGAOXTvJScxhIcshjNS5wiU -zZ/eXd1Y0J65VZl4L0sdujngW5iO6bl3FizmBWE0Mva99QbK+0LBarAGP+wO/elH -xmkCxVo++exWPyARIMImIqlmsc3i4GFrtUXPLOHQjOHivZ+JhKqnzWk0IaVsi14I -XeIX6h6gBkum3HiR3b7hMSsCgYEAtq7ftbmy8liG6hgTzTIBDUWM0xHihxlRpnVF -hzGWw61yvGv2QDVugOt+bH7zRib0g1KsaVyQkMoJ9ownQKUxFdkWCFAa++1iezS9 -AXRhscIEE76dk93RX6VPUrw2FNyOfM8n/BIkG/cMhmroHRnBBd5Fkp8SNLWEclnO -Od95tCUCgYEAgvohkyZAAKMRUFYEvHgwyxeXHifHVPIoK9UN022DJmIEJE2ISGtH -yHnBKgF52tlYhC9ijKwMG43C9IvycydRUtViOxDV8AiE4BV1tXuQHLl0jD2R7yq5 -9pNtnYgXW+ZKlx9705ltHj8hhKl6r2I8oXdR9KFGO83wq8fr6tyjqHc= ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/alice/etc/raddb/certs/strongswanCert.pem b/testing/hosts/alice/etc/raddb/certs/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/alice/etc/raddb/certs/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/alice/etc/swanctl/rsa/aliceKey.pem b/testing/hosts/alice/etc/swanctl/rsa/aliceKey.pem deleted file mode 100644 index 29512054d..000000000 --- a/testing/hosts/alice/etc/swanctl/rsa/aliceKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAtGyT+Knh6NBXKcQaa8X36qHYwhLYKLerWz7tUDHjuLi+7a48 -HFvTrhqHIXDjEbTyfPh7BMvDuyCvGHPtiaLxUdjf1jXBWRQWPA0Xj4lsva8HamsW -d/V7A2ZpreFvJEnO7gCNryhNbREpjajtwyLSvJNmj1eifurVwt0dlvgFb9pNjMpw -ujsWyaOC9upYpVOiWsjTvbpc8sJ7W75y8GQBjU6WmOM7WlaInckn9wbWhEDw/GA0 -u6lffpQFG3HDUuui+Knu44qtKFptD6XNNIDj4XmAHxDhWArXOKQ0xaXt0gWqw/XR -BxWueREYA4Tf3x9dnVigCgKY6oK+CxdbvLeTVwIDAQABAoIBAFB1oz9fMxmJ33UG -uOma7UY7StixYqg10DruwxHiTbVQ3gRMkQ3sfWfE+MIW/4wj74d/oAyxeeX3W15C -RIn+mjNvzdJPQpwg8xFwnTMri8zDQ0FX5Ds2w9buUu5x/AhoydklcgnMpUqgPrGn -xfAhlWz3JuOBpzuGKjGuPcXXcUVBipMzBz4KmcK88y2S3zhqRbvYrZlhdHlvrhsh -5UAiHn/A5BBiLJNtzfxIGEy9tl4PBbfQ5fpXMCyg4r9tNN64NZPfdzoEDIb4dZqZ -dzOFuoqjAkHXBf1VnfHoCJnmgYFIDMw9UU36NgGJHG43ZdMKR32lL81C76881PO3 -1YAEO1ECgYEA6+swZwhvQXNQuZgo/UsXPsu7AuVrRM6Wyt0FzCs7o4TqyKhlCgfk -YO318qh//kc3CNYHg28OZdIzi+b4TyYZIE1qRJ8s0iohbCwVGTJ/r8omkEzhlo1s -6kAVgnioFav68/70wVeKcljJhI4eRB8OtxMXLyKnqQZPOE2tsWi/TNUCgYEAw8gg -8fKHbL04wS8xFXWWQh1atcK3fTvNTY9hqwJojNOBo+slzXycJwC5tqg43AZDYzGE -mJrH5/augclQMd4efHd0VYQxgtAR5ZXpyYeThMdfb/Hq1K14JO3+bQzUHsAoRGfA -WfQUwaNPLe0o6EkPWXnnoLVMSH/MIC3yFwPXhXsCgYEAucNTNY36rLq0Ua9ydx/t -idC5zKoBMQjKy6oFqqJQL421oZKXHLLiLUCybQQo5HwG5bpB6EhGOf6t//c6hngl -SL4scyQzErmB379GTbTpve2bN/yRlQ5/OGSFi1qeX5Iv5HhZGPRpW2h2JR4Szuj1 -mUo68y6CfiEtt9PSdONZ3pECgYEAg0p49WeL85rtLXflNZvWON4Qj6VVgVESO3n0 -qEaEMDRCUteFUUjIOsucvuYOw1Yb6LAzWFcryd2+ZuDGu7pVvWgqBpMQ1MWNyuV+ -kxwtDDTbRmn37cmqsTE8loqs0TZRipX9AxXQuY43sffBoAwmk/1RHI+X6WJyU/4b -w91asXMCgYB+RVT6J7Xq0Q93TsJcShVFZF0nr2SbtqAMgqbdLv8ZHzJF5+W/nvV5 -Y9ZqB3aCcQn5vCyazSfZQqsXMxonuOharafGzEZRaV/7DOxW1EWbjTfMlZAvruuD -88Be/vGN8zIL1Cu1R5hWowlKj++fCqhqF3Aauh6EtfAWQlqNStav3Q== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/alice/etc/swanctl/x509/aliceCert.pem b/testing/hosts/alice/etc/swanctl/x509/aliceCert.pem deleted file mode 100644 index fc195676f..000000000 --- a/testing/hosts/alice/etc/swanctl/x509/aliceCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBLTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTQzNloXDTE5MDgyNjE0NTQzNlowVzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MR0wGwYDVQQDFBRhbGljZUBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALRsk/ip4ejQVynEGmvF9+qh2MIS2Ci3q1s+7VAx47i4 -vu2uPBxb064ahyFw4xG08nz4ewTLw7sgrxhz7Ymi8VHY39Y1wVkUFjwNF4+JbL2v -B2prFnf1ewNmaa3hbyRJzu4Aja8oTW0RKY2o7cMi0ryTZo9Xon7q1cLdHZb4BW/a -TYzKcLo7FsmjgvbqWKVTolrI0726XPLCe1u+cvBkAY1OlpjjO1pWiJ3JJ/cG1oRA -8PxgNLupX36UBRtxw1Lrovip7uOKrShabQ+lzTSA4+F5gB8Q4VgK1zikNMWl7dIF -qsP10QcVrnkRGAOE398fXZ1YoAoCmOqCvgsXW7y3k1cCAwEAAaOCAQYwggECMAkG -A1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBT7NcHfcw4VcO5WuhtuHPfz -rkj82TBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0 -cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRhbGljZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBLXRISCSOxF4ln8+ub -oaHTs1JvfCFKCQ3vORWjrntd8v8SQ92xGRBrT5oCataVTiPbQwphdScOl377YUQU -EGDOSpbNRD0Au5Z1VryP/02B401TSbrpZ7DZyAnxSsR6Dz8lbCtW1GLCpEzFdxNS -Vi5j30k8yeCAy1VIYCCPsqNQpziIFYuzrQ87x0P1U9W0xUE0GHWDa79LRkkTv8uJ -wJ4RKMk8HHnac7ws9ybrhT8sv3oXAv8LRN4zFTq+YRWOm8hH/0BhGMKRi6SzvdK1 -i853cG4N7I2B60msO2n0lDkPAgH8EBE6IRpd2DdrXH6UyEwEAiJrdGWRMNJpD7OI -XSh6 ------END CERTIFICATE----- diff --git a/testing/hosts/alice/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/alice/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/alice/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/bob/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/bob/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/bob/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/bob/etc/ipsec.d/certs/bobCert.pem b/testing/hosts/bob/etc/ipsec.d/certs/bobCert.pem deleted file mode 100644 index d12190827..000000000 --- a/testing/hosts/bob/etc/ipsec.d/certs/bobCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHjCCAwagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTYyNloXDTE5MDgyNjE0NTYyNlowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRswGQYDVQQDFBJib2JAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQC17WwJLZubKi5Z7jWgpDBXIMDtzIKtJlNwLAXomp/W -EuWsC8p8z0yaFlMCSQwWCFjLJjD/DH8NczEPyZZF4c3rXoph59tAXxj80C2/iU7K -l62ZDDRa00TVmMo04U47fJYzhLsclQVzbenoWB68kJ+z4WpKc2UtPGggNOnb/5xH -Alvx19DmMsGWpCpbp+H667xtB4T6CIXoVSmAMEkg10C8BlP3PgZY2As0vfZHITZ+ -p4y3KFOF/X3O5BHb4Ey9nl+680zB1mHkssrq4fMEgsf5mXWNSlhvcpdt7qIHG1IM -AC3FgZzV4thEk6Lb0lZkR+woW9No652l0TrrJAAwiuBJAgMBAAGjggEEMIIBADAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUHWrADkwud47tB9AmhN0r -ZXWlitkwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHQYDVR0RBBYwFIESYm9iQHN0cm9uZ3N3YW4u -b3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcv -c3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQELBQADggEBABnuiN+hpSNTLN1FrLWX -iWWDvMJVW//7ttgyNR5q9CCyuCbMYujhfLn+Qbzh0pTx6fJijmUqua0SbBlrtW/t -O4SvyCbisZij4XZcdoQltas+MTQyNBYdRx8g+bwqUPH/xB/kvXLogsVuO5IXm/Ey -DSLlb+K12IBGc5zLlv/PoM+6FxuMMerI4t+TQZF06O5yWZ2Yr+weqtI172BQLh0u -901s/3DOqv2fGTqAfK/8i+8H3gXNoxeRKmEH4+v2mBQDrfQpUqNF08Zbg9SRfdR1 -rHyi5hw0ynCIKYIbwSYhHjZQH0pQGY3uru6h14qSjnvt/LUiU1sExAsShyR4Lsgc -w24= ------END CERTIFICATE----- diff --git a/testing/hosts/bob/etc/ipsec.d/private/bobKey.pem b/testing/hosts/bob/etc/ipsec.d/private/bobKey.pem deleted file mode 100644 index 3d76cf6ba..000000000 --- a/testing/hosts/bob/etc/ipsec.d/private/bobKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAte1sCS2bmyouWe41oKQwVyDA7cyCrSZTcCwF6Jqf1hLlrAvK -fM9MmhZTAkkMFghYyyYw/wx/DXMxD8mWReHN616KYefbQF8Y/NAtv4lOypetmQw0 -WtNE1ZjKNOFOO3yWM4S7HJUFc23p6FgevJCfs+FqSnNlLTxoIDTp2/+cRwJb8dfQ -5jLBlqQqW6fh+uu8bQeE+giF6FUpgDBJINdAvAZT9z4GWNgLNL32RyE2fqeMtyhT -hf19zuQR2+BMvZ5fuvNMwdZh5LLK6uHzBILH+Zl1jUpYb3KXbe6iBxtSDAAtxYGc -1eLYRJOi29JWZEfsKFvTaOudpdE66yQAMIrgSQIDAQABAoIBAQCPNhTjrLlfjfbq -6C/jAxzimXAGQgVkVFU+aglEr+O+2yVdJ/MACRed/JDfra0L8woi8S+EtsuVROaM -LP5UiIpXDBcXNzNLGxFKgn5g1q/lnz0Sy56zGLiJBDu5INs6zLpYV9YLi+u8j/uf -4S5g9eAh9AJ+FRTCZVj6cWzet/rHkegCJ1KeA6Nxk9+cCnBUc6pD3Ars5miKGef+ -uuqg0MUJA5PHIwisQGyEx4KCjopZj4Lic0CXWf53wmm9eVWWMDwL0MgqYuXw/dTF -1Z3ShU6VLNE0qCuC4Q7/H1MSfWfatM93nOI2u0/0r3zEnlK/5IpyrY8EtOiHhZ2G -FAJw/Kl5AoGBAPEIC396ff3GbXmmLIkxF5Hq3Fdie0KbwpsVr1ibFvj6i63Zz7+P -BYmuAtCNz5jnriVdyJ7gZs1XO+4sxB5IRls8nOINrO7jXmJh8Ye4G4jklJ+sDipj -nvqg1gTWuJxopWD+/Pw+vKFW74LFVKFleJzn1f7v7sFM+AfWvvVZnX9/AoGBAME5 -u4q/U+9nu58sREtYqSuDYL8CdfaSLhdR7SN5xnvZnLmxOJEL2pSifU1P4HFvgWzl -pQrTzb2rB/O62GcHo+2bin2BNGoBGkMuXfnw9ElchGv1ksJwy293MFy2CQBJ9lgf -NfKO2EtunxYiFlZqKmThlf0IRtI4122EHbQBiYQ3AoGAFZEKtlVXgKWIliHwSjZC -TaQeIxOEw+j7+LRwBBWccJq6dMvQcutxK2iOh+qocJ4KTv2dPdoGWMk9a4pF4g/F -e9RolTF0D8v4XgU1f1dR32XUhpT2j4RqbTKG89finNwgMBWgvVE/v4/vzlupvuc9 -a4yy8SS20ET6zHjCjWF/XjECgYBTvGIyyaFlQY4Ed9mM0XpWehPGExnt5gGFZ6Kd -2hsS9wY9TrjV2s451YT5qSD557mt6IMygwFJLcI/dHxtgdkfkmVc6E4/lgS8km51 -b19eH3Lfmkekbd8rifpyYwzZjDPukm/9krvXTLQykkkd39pJZ51pT1nppmptcnCw -3m2q1wKBgHQ1HdDKGyqjfewGu/nuP7uCY3nledCYExMqo3e0dRx9y+6y3sFCdsVQ -iaaMHEJNPsFQa+nWQiVrzyQ47KP2MZnzom2xeguM4DrchVpK0xMSxe9KbzbjF5V5 -3qeswPRBBHghOX3W5+krYvDzjX+JlCaMFvXy0NKN1Ti1Y4BVi1hL ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/bob/etc/swanctl/rsa/bobKey.pem b/testing/hosts/bob/etc/swanctl/rsa/bobKey.pem deleted file mode 100644 index 3d76cf6ba..000000000 --- a/testing/hosts/bob/etc/swanctl/rsa/bobKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAte1sCS2bmyouWe41oKQwVyDA7cyCrSZTcCwF6Jqf1hLlrAvK -fM9MmhZTAkkMFghYyyYw/wx/DXMxD8mWReHN616KYefbQF8Y/NAtv4lOypetmQw0 -WtNE1ZjKNOFOO3yWM4S7HJUFc23p6FgevJCfs+FqSnNlLTxoIDTp2/+cRwJb8dfQ -5jLBlqQqW6fh+uu8bQeE+giF6FUpgDBJINdAvAZT9z4GWNgLNL32RyE2fqeMtyhT -hf19zuQR2+BMvZ5fuvNMwdZh5LLK6uHzBILH+Zl1jUpYb3KXbe6iBxtSDAAtxYGc -1eLYRJOi29JWZEfsKFvTaOudpdE66yQAMIrgSQIDAQABAoIBAQCPNhTjrLlfjfbq -6C/jAxzimXAGQgVkVFU+aglEr+O+2yVdJ/MACRed/JDfra0L8woi8S+EtsuVROaM -LP5UiIpXDBcXNzNLGxFKgn5g1q/lnz0Sy56zGLiJBDu5INs6zLpYV9YLi+u8j/uf -4S5g9eAh9AJ+FRTCZVj6cWzet/rHkegCJ1KeA6Nxk9+cCnBUc6pD3Ars5miKGef+ -uuqg0MUJA5PHIwisQGyEx4KCjopZj4Lic0CXWf53wmm9eVWWMDwL0MgqYuXw/dTF -1Z3ShU6VLNE0qCuC4Q7/H1MSfWfatM93nOI2u0/0r3zEnlK/5IpyrY8EtOiHhZ2G -FAJw/Kl5AoGBAPEIC396ff3GbXmmLIkxF5Hq3Fdie0KbwpsVr1ibFvj6i63Zz7+P -BYmuAtCNz5jnriVdyJ7gZs1XO+4sxB5IRls8nOINrO7jXmJh8Ye4G4jklJ+sDipj -nvqg1gTWuJxopWD+/Pw+vKFW74LFVKFleJzn1f7v7sFM+AfWvvVZnX9/AoGBAME5 -u4q/U+9nu58sREtYqSuDYL8CdfaSLhdR7SN5xnvZnLmxOJEL2pSifU1P4HFvgWzl -pQrTzb2rB/O62GcHo+2bin2BNGoBGkMuXfnw9ElchGv1ksJwy293MFy2CQBJ9lgf -NfKO2EtunxYiFlZqKmThlf0IRtI4122EHbQBiYQ3AoGAFZEKtlVXgKWIliHwSjZC -TaQeIxOEw+j7+LRwBBWccJq6dMvQcutxK2iOh+qocJ4KTv2dPdoGWMk9a4pF4g/F -e9RolTF0D8v4XgU1f1dR32XUhpT2j4RqbTKG89finNwgMBWgvVE/v4/vzlupvuc9 -a4yy8SS20ET6zHjCjWF/XjECgYBTvGIyyaFlQY4Ed9mM0XpWehPGExnt5gGFZ6Kd -2hsS9wY9TrjV2s451YT5qSD557mt6IMygwFJLcI/dHxtgdkfkmVc6E4/lgS8km51 -b19eH3Lfmkekbd8rifpyYwzZjDPukm/9krvXTLQykkkd39pJZ51pT1nppmptcnCw -3m2q1wKBgHQ1HdDKGyqjfewGu/nuP7uCY3nledCYExMqo3e0dRx9y+6y3sFCdsVQ -iaaMHEJNPsFQa+nWQiVrzyQ47KP2MZnzom2xeguM4DrchVpK0xMSxe9KbzbjF5V5 -3qeswPRBBHghOX3W5+krYvDzjX+JlCaMFvXy0NKN1Ti1Y4BVi1hL ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/bob/etc/swanctl/x509/bobCert.pem b/testing/hosts/bob/etc/swanctl/x509/bobCert.pem deleted file mode 100644 index d12190827..000000000 --- a/testing/hosts/bob/etc/swanctl/x509/bobCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHjCCAwagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTYyNloXDTE5MDgyNjE0NTYyNlowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRswGQYDVQQDFBJib2JAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQC17WwJLZubKi5Z7jWgpDBXIMDtzIKtJlNwLAXomp/W -EuWsC8p8z0yaFlMCSQwWCFjLJjD/DH8NczEPyZZF4c3rXoph59tAXxj80C2/iU7K -l62ZDDRa00TVmMo04U47fJYzhLsclQVzbenoWB68kJ+z4WpKc2UtPGggNOnb/5xH -Alvx19DmMsGWpCpbp+H667xtB4T6CIXoVSmAMEkg10C8BlP3PgZY2As0vfZHITZ+ -p4y3KFOF/X3O5BHb4Ey9nl+680zB1mHkssrq4fMEgsf5mXWNSlhvcpdt7qIHG1IM -AC3FgZzV4thEk6Lb0lZkR+woW9No652l0TrrJAAwiuBJAgMBAAGjggEEMIIBADAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUHWrADkwud47tB9AmhN0r -ZXWlitkwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHQYDVR0RBBYwFIESYm9iQHN0cm9uZ3N3YW4u -b3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcv -c3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQELBQADggEBABnuiN+hpSNTLN1FrLWX -iWWDvMJVW//7ttgyNR5q9CCyuCbMYujhfLn+Qbzh0pTx6fJijmUqua0SbBlrtW/t -O4SvyCbisZij4XZcdoQltas+MTQyNBYdRx8g+bwqUPH/xB/kvXLogsVuO5IXm/Ey -DSLlb+K12IBGc5zLlv/PoM+6FxuMMerI4t+TQZF06O5yWZ2Yr+weqtI172BQLh0u -901s/3DOqv2fGTqAfK/8i+8H3gXNoxeRKmEH4+v2mBQDrfQpUqNF08Zbg9SRfdR1 -rHyi5hw0ynCIKYIbwSYhHjZQH0pQGY3uru6h14qSjnvt/LUiU1sExAsShyR4Lsgc -w24= ------END CERTIFICATE----- diff --git a/testing/hosts/bob/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/bob/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/bob/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/carol/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/carol/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/carol/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/carol/etc/ipsec.d/certs/carolCert.pem b/testing/hosts/carol/etc/ipsec.d/certs/carolCert.pem deleted file mode 100644 index b08932435..000000000 --- a/testing/hosts/carol/etc/ipsec.d/certs/carolCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MDUzNloXDTE5MDgyNjE1MDUzNlowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBALfz1DcXyt/sOALi1IZ/RcuPa5m+4fiSST2wVWWr -lw3hUjeiwLfgoLrtKaGX4i+At82Zol2mdbEXFpO+9qxXliP2u0fexqP4mBuZus3E -LA82EOL0lQ2ahAi8O3qafkDMBSgvoeJpEwNe00Ugh53g7hT7dw8tSgcPGqQkWutI -IKT9T6e/HbHNjRtYlw9ZlHsp8gSYjg/Q6vV6ofttueMUD9NRv8w2Y76rnRRmUGf3 -GlNFFmgxZntCJRuYltnxV7VcCFoppyauYt/fPmjAxbPRuhHKacnzIzq83Ixf5fSj -MTlluGCfWFX/NGENXamBqChkRLHmuCHNexxRp9s2F1S10hECAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRcWXBiVy0qJJxclFab -iV7lxQW2vTBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBVqTw0DRABEwcw -kMsDkX1yIX4lODAadvSq/PP/M3e6VoZOXBphKQvqgAgaCpk+vAXoHNPImg+vRVeY -bIeS0E2lMo5nKQu7MCs8RpL97PMHL7NlzRBiS+CCKRaCHglJgCZtfwc1sapnrche -MoZat+GyjnyKVNTJh/QtGm5QL9DRKa125B9gS9FtdT0BkhxIsZ4TsEOeTqv5dHix -bc7x+MwETL6AxNraPqfIbt78cnsIB3PpIxYYTlDVY2Fwr2G0Ri9inEM/GZFAsJSU -iSyoTqQsyZhzzOmE/mK40JtBv+lg+pPOa4tC8w892KEKsnRX9dxX+U6vr3QtoIjN -wg8qvcUu ------END CERTIFICATE----- diff --git a/testing/hosts/carol/etc/ipsec.d/private/carolKey.pem b/testing/hosts/carol/etc/ipsec.d/private/carolKey.pem deleted file mode 100644 index 1454ec54c..000000000 --- a/testing/hosts/carol/etc/ipsec.d/private/carolKey.pem +++ /dev/null @@ -1,30 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,7E1D40A7901772BA4D22AF58AA2DC76F - -1jt4EsxtHvgpSLN8PA/kSVKgoAsBEBQb8RK6VGnZywMCnpJdLKdPisGGYKNPg53b -/0AFBmQVE60M8icbSAIUrAtyKxaBkoc9A7ibNCjobi0UzXTm3GcZZ1EC4/lE9PQZ -/2FbcPgQWN3kZraZDkeP9XBXl6PorES8xvQUxJ9pd4hL7/c28fIApGhEimkIZO8o -Qb7bR2cNCLYQAR6PeDoqhV39gvWoh77wp1WB3tQVbkS6MI/xl3wY2QVdq3Sbszh+ -f6lDU/SZS8BU0f44FRoInPp0GasgJ7MCiuEIshjuNPa50QkMcnNJsSgVEuw2hjN6 -LvAXx7vPt9pKpQfnu7YSJUsXDYN6PyXt7sZ8hDqraYIcI6eMpEBaTpItPSV2eckv -06KC24Oa66E1yufNFAY49S2OY+pJA0W5zmcCqCjdrfJ+wNQYKZpbrfGz4VRzlFJC -e3VkmAFwA5rcZdlp/mU2XREy+TaWsHMnpL0NcMHGmsfkTgaJIkRWalrdxlNTeitr -3boNHWk0ESyMcBYRpM3eNXsGpiYy93u0bhrPbnqJsV6miKqpbs1aBNjlJ9s1Y2fC -sko5/v7uMjb5tLF3lWQZfTu+bYtpGxFrqHJjhd8yd4gL1cFi30JcjczhwRY3Dily -c0BFekMGmPc1djn6tfIFu13X9xTxyidCpVaT9UGnOaQs9OF1u8XAnZDaQgPwjLiy -UlOE8xQ60LrhWLD582FsFnZz56bZ+QOQRWDMsB8nJeqnFXKfcRlnr0qlG6lTfA8h -XkK/qGpdVvivS+CpbhVP6ixdEfa91Rx4NjLj53LGqOYwFEkM/OAIuMJetBfx3v9T -iQfv594KE32nv9besnKlmJr2cGQWBYg1pUOtFj/aZ00yuXacv8qwzbrt4xGGDYGO -Aj5Yf93UEcVkTySO1xJ1yiC6GJv1lLm0i5StwykHypxFijKe/zOpgtHVa5v5igjO -v6cfhfJGGgIPTYrtt+EDKXcayvy2e2U/3HYVCHYiiMPX8AvP/R6m7MGrzYxm/WyO -t68EWXSDLfuR3qcIlpP4aSBxuSpKhY/dIkS/beKZ7Njx1s4jSuYDMbKuuCRFSU2H -8ISHS0kh3FetiS8IyIYzxab+KQZwnVtiGj4oaAhgFTIIoH26Fv5+xka74JdzOSUA -jR9puKuxaegVWQVBx4cCyg6hAdewRm64PAcbApZWrPvMPBfTZFnXeifmaurcdK8p -p/1eLrrPnNM6+Fh6lcKdX74yHPz3eWP3K1njZegzWnChhEWElPhJr6qYNQjd+lAS -7650RJ3CJLUxBffnRR9nTArxFNI5jGWg/plLJTaRT5x5qg1dGNMqntpoeiY++Ttk -GFDGVIOICBze6SOvzkZBbuXLJSWmWj5g9J2cYsLoOvlwsDT7FzKl8p6VY4V+SQb+ -4PN8qZWmOeczaLEhZ1QLmTKFpz9+wUZsXeBd1s78bWJR0zhraMPa0UJ9GBGq6uQ0 -yZ4Xm5KHKcgoewCUQMekU9ECsmR5NuC7VFDaa1OdPEVnEYR1xtaWUY0lYKOiixnd -+85fSq/yAXI/r0O4ISA55o9y1kDqVibTwJacb6xXGg8dHSH+TtigwD8fK9mekkDC ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/carol/etc/swanctl/rsa/carolKey.pem b/testing/hosts/carol/etc/swanctl/rsa/carolKey.pem deleted file mode 100644 index 6aae5f710..000000000 --- a/testing/hosts/carol/etc/swanctl/rsa/carolKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAt/PUNxfK3+w4AuLUhn9Fy49rmb7h+JJJPbBVZauXDeFSN6LA -t+Cguu0poZfiL4C3zZmiXaZ1sRcWk772rFeWI/a7R97Go/iYG5m6zcQsDzYQ4vSV -DZqECLw7epp+QMwFKC+h4mkTA17TRSCHneDuFPt3Dy1KBw8apCRa60ggpP1Pp78d -sc2NG1iXD1mUeynyBJiOD9Dq9Xqh+2254xQP01G/zDZjvqudFGZQZ/caU0UWaDFm -e0IlG5iW2fFXtVwIWimnJq5i398+aMDFs9G6EcppyfMjOrzcjF/l9KMxOWW4YJ9Y -Vf80YQ1dqYGoKGREsea4Ic17HFGn2zYXVLXSEQIDAQABAoIBAD+b2vgqDAceYcft -s9vGStY3A9goP2969kSUoxMDILq1/X4rk0SCMlIxDEJKiPYwJl68D38evne8Khxw -3k9+AfbxrJUPndS5c6+nmwboHOwtn+068gfANIPowxCEN8AkTGw2/F2UQ/TYZ2nx -87NOQkWTJvpiiMSkHmw//gh56n/iWgITnL48YuiVl2bHnEmHuD4khHhYLwdPTaDp -Re42FzFYPHUKygHA9WoOsaFPW5Q6XK/8+vtVfIz316yXaeRjKHxpTPPsjzYn0zOZ -RbtwbomvtaIhcQuE+Ub3viZiPlgrpWDFrMTKDpQ+ExBZhqPWdVRY490SoSqXBVIG -ui7fAtkCgYEA2jnemCf9dWCSW2ZDI4EJ4S6gbfJsrJD6dX3Y+iBy1VVcKmL0JhZ5 -RVkLr+WBsqy7Ut64Je2Zy3z0dZnpeSn1rshGzi1wY7Ox7YCFgDnGEj6l+CPQuBBt -IqviEtg4QB75A2ciFWsW5STbXiOEpa4tk6G+6R6vg7wtn1t8qqRxE68CgYEA18s2 -aRh5ZA9bQYIDXGHNzsDQT1L/Qraq0Y1AFYGP4kXvdpR8yi27d+SEXA2Y19Qy85xX -qw17nhItPSW+MD4eydDx/fG/MVIZSI3mWi+2jGVK/r5L9CKVnpXbDYjngsFAKKsD -Jut2hCq5PzsEuarvIHWj6LNhlYjZ3JyY9MrqJj8CgYEA1OljIObbZlrbUKt8U7aB -Mh9wzPSaTN+CTYGEYb2o7DVFH+G9vS9uEFfpjCsKmI3okdjUp8SiqaN3SwnofZuP -pYCnfF9e6ReYQFWFau5zLrfK7EfdSshUAmDayHIGp6DQaR6FZYo/I0ALe1SCBbfj -pcdIYV/b9FZz2KfFASRBYucCgYEAn90s3ujBrU3vFfWiVcMi+8M9zzY2Yo7+tyVE -T2pfVIro3tkcJY+BrU0+fQ+ZpnLOmEi/bbocVTs0BnO6lPTATFSdobqBIKGol2aA -O1nTi+jSiSwjCqbAXu63jCxbDjPqOvaN7DxN3ZXlDKHFW2L1qf9cwVx6s5Phihz8 -94SHuHMCgYBR/i9MzfbyU2QMfJdDT+w+Ty0xSdaZ5mKvGGBgXZCYbzK0BStnDUz3 -5pBBmtmnqHLA9EzriXxlA4KVrWoZd02lGmbmxQpN/HiVQuLcABWqOjgxEIDJWyI6 -CGvDdDwbhrhj93ioTK42QE2GllSn+VVCv5/u25j++tLa9NnvGX6Smg== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/carol/etc/swanctl/x509/carolCert.pem b/testing/hosts/carol/etc/swanctl/x509/carolCert.pem deleted file mode 100644 index b08932435..000000000 --- a/testing/hosts/carol/etc/swanctl/x509/carolCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MDUzNloXDTE5MDgyNjE1MDUzNlowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBALfz1DcXyt/sOALi1IZ/RcuPa5m+4fiSST2wVWWr -lw3hUjeiwLfgoLrtKaGX4i+At82Zol2mdbEXFpO+9qxXliP2u0fexqP4mBuZus3E -LA82EOL0lQ2ahAi8O3qafkDMBSgvoeJpEwNe00Ugh53g7hT7dw8tSgcPGqQkWutI -IKT9T6e/HbHNjRtYlw9ZlHsp8gSYjg/Q6vV6ofttueMUD9NRv8w2Y76rnRRmUGf3 -GlNFFmgxZntCJRuYltnxV7VcCFoppyauYt/fPmjAxbPRuhHKacnzIzq83Ixf5fSj -MTlluGCfWFX/NGENXamBqChkRLHmuCHNexxRp9s2F1S10hECAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRcWXBiVy0qJJxclFab -iV7lxQW2vTBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBVqTw0DRABEwcw -kMsDkX1yIX4lODAadvSq/PP/M3e6VoZOXBphKQvqgAgaCpk+vAXoHNPImg+vRVeY -bIeS0E2lMo5nKQu7MCs8RpL97PMHL7NlzRBiS+CCKRaCHglJgCZtfwc1sapnrche -MoZat+GyjnyKVNTJh/QtGm5QL9DRKa125B9gS9FtdT0BkhxIsZ4TsEOeTqv5dHix -bc7x+MwETL6AxNraPqfIbt78cnsIB3PpIxYYTlDVY2Fwr2G0Ri9inEM/GZFAsJSU -iSyoTqQsyZhzzOmE/mK40JtBv+lg+pPOa4tC8w892KEKsnRX9dxX+U6vr3QtoIjN -wg8qvcUu ------END CERTIFICATE----- diff --git a/testing/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/dave/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/dave/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/dave/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/dave/etc/ipsec.d/certs/daveCert.pem b/testing/hosts/dave/etc/ipsec.d/certs/daveCert.pem deleted file mode 100644 index 66b184ba9..000000000 --- a/testing/hosts/dave/etc/ipsec.d/certs/daveCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MTIwMloXDTE5MDgyNjE1MTIwMlowWzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEzARBgNVBAsTCkFjY291 -bnRpbmcxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3 -DQEBAQUAA4IBDwAwggEKAoIBAQDWPNxNxYTNX7XiBa3R0kITDxlil9YIPiVPPSCt -e+F/5P2AwfH2/HdKJm8Cr4IFO5OSmwHJ2lQRtAL0Zm/qpF3UWYhAJSTqkdmK35Qf -jjDe25z5g0HpCNPU8wybfWtQtfXiMZlCdodg3gwBJ8a6adcLCp1gXePDHmIY5ABK -0YcfAPGZQW5HchkCQ/svBradIlkuK8/GohkNL2Evj/Q1ZDCW2xoZdmqsFWPhd9+f -/y1RtuOPss1039aPGi8D5dfjx3IGrzfjO+umN26iOWB4IdghCUwmgX+M6KEwUkOk -69XEOQf/1edfSdcf7of/9gqREF2xWBYlN5C5k0z8/aXJnlZDAgMBAAGjggEFMIIB -ATAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU7BZjmSiBXgHMAifA -ucsf6reYcDcwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBCoL5/jrxie0rq -rCwKUA9TBDBBKBMZ9x5wdAQjP9L8b20Q4SDp1vAjhFr+Axgow76pqHaLDrd7qFKE -sBtlN0G5ZXOaVI0xloaef1K113mkSvYqbvUZNi/aTb3btI4nrCftj58EAM8TlvYW -jMOiLYPAhN/tfOTTaUzoYuRZ9v63fHYu3UiMvNojA0uxOeryRRdbcQecu4k2EBCj -mkNu+EkNoLNvGOC4sEjq7Gy4n52xeTuO/rI7eIt7CUS39j9OtiKQJfLVIh0Yz+o5 -ljiF0OyoxkpYG/cpoVib1RZdqL1DsHEWcQxYB+8SSG/teLxiNIZxvPHUezvi09He -ksxdvA73 ------END CERTIFICATE----- diff --git a/testing/hosts/dave/etc/ipsec.d/private/daveKey.pem b/testing/hosts/dave/etc/ipsec.d/private/daveKey.pem deleted file mode 100644 index 9261cc1cd..000000000 --- a/testing/hosts/dave/etc/ipsec.d/private/daveKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA1jzcTcWEzV+14gWt0dJCEw8ZYpfWCD4lTz0grXvhf+T9gMHx -9vx3SiZvAq+CBTuTkpsBydpUEbQC9GZv6qRd1FmIQCUk6pHZit+UH44w3tuc+YNB -6QjT1PMMm31rULX14jGZQnaHYN4MASfGumnXCwqdYF3jwx5iGOQAStGHHwDxmUFu -R3IZAkP7Lwa2nSJZLivPxqIZDS9hL4/0NWQwltsaGXZqrBVj4Xffn/8tUbbjj7LN -dN/WjxovA+XX48dyBq834zvrpjduojlgeCHYIQlMJoF/jOihMFJDpOvVxDkH/9Xn -X0nXH+6H//YKkRBdsVgWJTeQuZNM/P2lyZ5WQwIDAQABAoIBAQC2KNF5HzUoGvVf -1UxSV+Duq6v99PR71buLgIJEgEzgnigeTsoaI9iaJ8vEEM8Q+/MieMIwi39n/hN1 -E5Sdglx1rhr3z51wBctfFXOw0Qoks77pOP3V0zeqnW5e12lkGxOS3HFf3cCGUMcM -RHHpFw1Nyhy+T5bV1QO7/kFxXG7zoB4bMEt/fQ8szSGS386cPlxWY8k6EoRlL7C1 -C2jPsJO2ogpAhbw3cXsYAlXsxbjhD/vH3WioWSd1vGo5Lam0zzazkdN1ihb1x7Zk -cn2zz+Lc4xfxW/Jum6JZLHhaItzecoJWuHr3Ci87otMENOYMBPHw6azkFj1UIBfX -KkiSTrthAoGBAP757COa0rsFmWL+G5Mn/KYLR/+DyCOCE+mXb8hEPvtkD6qmlEfR -5l9Hfn8ARoOFirXSWwgtFYIHHrKU4Qtp/kAJgj96MppmsOdV9Ro927ovNnp6UXGQ -PM5T/eemZtM/ZGM/JUHdTWa5ZFptsgOcNx6f0rhO+LbOPCxzPBwt8bC9AoGBANcZ -EKTZBF6MT/haqb+1/iIIoS7RI+AnniHY3WI6yoYKEJTLxPzrEEyvTWvyowIoA2XX -1gNnDvdsdIyY9DXHYn4ShsebFhYrQzcjzE3X3JHXHSEAPchdq4sry0PoyLZvXrgn -A7x/qld+CJg7U/L1day2EF/14AXrbPoGWxdJWhL/AoGAcio1MTwBXvwC0fA1KI6e -8Tnb4ux+kGeNwumrg2ALU0RaP26WthGltMOuP+8/o2QH16F4YRDOsIm/lPZUTWgI -D2QyjXmJbtjMHMjAFh/cYmEBY5WhIdgTYc75wN8g6zVXHZkIdZVBMt2PsW2sZzFq -/KtTDnNNqYxuJPjz0SpBLYECgYEAhzE609GOvHpGHRumy1bwtqVj4VAT02QzMKTk -aEP5XIvg5hS46Bo6MWiRKcLkD4vkrtMcsSDKOFrTWjccbty1m/W6/qQMGrzwTyzR -0S9Wc9eXeFF1g4TUN/G7nSAnXvratrXW1FgNUVZmwn+vgOokHvyDiDy6pB3XbcIm -6Jjy4zMCgYB52RfZjkggHmof0/7zwa9MHdecdLeD2w1U1B87b+u4SedEh/MAJB5k -MEctah2stX+jLJP4l0MeZfQf300M+CBu6q8Xygw82rWr9fMim8Sxj61Ws+gj5G7Y -2Mo3OhmUZ1YJ0Brv4wgoW9/Nhv7EaOJdaREqW6J1Ax2GQmIFl+8vLA== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/dave/etc/swanctl/rsa/daveKey.pem b/testing/hosts/dave/etc/swanctl/rsa/daveKey.pem deleted file mode 100644 index 9261cc1cd..000000000 --- a/testing/hosts/dave/etc/swanctl/rsa/daveKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA1jzcTcWEzV+14gWt0dJCEw8ZYpfWCD4lTz0grXvhf+T9gMHx -9vx3SiZvAq+CBTuTkpsBydpUEbQC9GZv6qRd1FmIQCUk6pHZit+UH44w3tuc+YNB -6QjT1PMMm31rULX14jGZQnaHYN4MASfGumnXCwqdYF3jwx5iGOQAStGHHwDxmUFu -R3IZAkP7Lwa2nSJZLivPxqIZDS9hL4/0NWQwltsaGXZqrBVj4Xffn/8tUbbjj7LN -dN/WjxovA+XX48dyBq834zvrpjduojlgeCHYIQlMJoF/jOihMFJDpOvVxDkH/9Xn -X0nXH+6H//YKkRBdsVgWJTeQuZNM/P2lyZ5WQwIDAQABAoIBAQC2KNF5HzUoGvVf -1UxSV+Duq6v99PR71buLgIJEgEzgnigeTsoaI9iaJ8vEEM8Q+/MieMIwi39n/hN1 -E5Sdglx1rhr3z51wBctfFXOw0Qoks77pOP3V0zeqnW5e12lkGxOS3HFf3cCGUMcM -RHHpFw1Nyhy+T5bV1QO7/kFxXG7zoB4bMEt/fQ8szSGS386cPlxWY8k6EoRlL7C1 -C2jPsJO2ogpAhbw3cXsYAlXsxbjhD/vH3WioWSd1vGo5Lam0zzazkdN1ihb1x7Zk -cn2zz+Lc4xfxW/Jum6JZLHhaItzecoJWuHr3Ci87otMENOYMBPHw6azkFj1UIBfX -KkiSTrthAoGBAP757COa0rsFmWL+G5Mn/KYLR/+DyCOCE+mXb8hEPvtkD6qmlEfR -5l9Hfn8ARoOFirXSWwgtFYIHHrKU4Qtp/kAJgj96MppmsOdV9Ro927ovNnp6UXGQ -PM5T/eemZtM/ZGM/JUHdTWa5ZFptsgOcNx6f0rhO+LbOPCxzPBwt8bC9AoGBANcZ -EKTZBF6MT/haqb+1/iIIoS7RI+AnniHY3WI6yoYKEJTLxPzrEEyvTWvyowIoA2XX -1gNnDvdsdIyY9DXHYn4ShsebFhYrQzcjzE3X3JHXHSEAPchdq4sry0PoyLZvXrgn -A7x/qld+CJg7U/L1day2EF/14AXrbPoGWxdJWhL/AoGAcio1MTwBXvwC0fA1KI6e -8Tnb4ux+kGeNwumrg2ALU0RaP26WthGltMOuP+8/o2QH16F4YRDOsIm/lPZUTWgI -D2QyjXmJbtjMHMjAFh/cYmEBY5WhIdgTYc75wN8g6zVXHZkIdZVBMt2PsW2sZzFq -/KtTDnNNqYxuJPjz0SpBLYECgYEAhzE609GOvHpGHRumy1bwtqVj4VAT02QzMKTk -aEP5XIvg5hS46Bo6MWiRKcLkD4vkrtMcsSDKOFrTWjccbty1m/W6/qQMGrzwTyzR -0S9Wc9eXeFF1g4TUN/G7nSAnXvratrXW1FgNUVZmwn+vgOokHvyDiDy6pB3XbcIm -6Jjy4zMCgYB52RfZjkggHmof0/7zwa9MHdecdLeD2w1U1B87b+u4SedEh/MAJB5k -MEctah2stX+jLJP4l0MeZfQf300M+CBu6q8Xygw82rWr9fMim8Sxj61Ws+gj5G7Y -2Mo3OhmUZ1YJ0Brv4wgoW9/Nhv7EaOJdaREqW6J1Ax2GQmIFl+8vLA== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/dave/etc/swanctl/x509/daveCert.pem b/testing/hosts/dave/etc/swanctl/x509/daveCert.pem deleted file mode 100644 index 66b184ba9..000000000 --- a/testing/hosts/dave/etc/swanctl/x509/daveCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MTIwMloXDTE5MDgyNjE1MTIwMlowWzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEzARBgNVBAsTCkFjY291 -bnRpbmcxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3 -DQEBAQUAA4IBDwAwggEKAoIBAQDWPNxNxYTNX7XiBa3R0kITDxlil9YIPiVPPSCt -e+F/5P2AwfH2/HdKJm8Cr4IFO5OSmwHJ2lQRtAL0Zm/qpF3UWYhAJSTqkdmK35Qf -jjDe25z5g0HpCNPU8wybfWtQtfXiMZlCdodg3gwBJ8a6adcLCp1gXePDHmIY5ABK -0YcfAPGZQW5HchkCQ/svBradIlkuK8/GohkNL2Evj/Q1ZDCW2xoZdmqsFWPhd9+f -/y1RtuOPss1039aPGi8D5dfjx3IGrzfjO+umN26iOWB4IdghCUwmgX+M6KEwUkOk -69XEOQf/1edfSdcf7of/9gqREF2xWBYlN5C5k0z8/aXJnlZDAgMBAAGjggEFMIIB -ATAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU7BZjmSiBXgHMAifA -ucsf6reYcDcwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBCoL5/jrxie0rq -rCwKUA9TBDBBKBMZ9x5wdAQjP9L8b20Q4SDp1vAjhFr+Axgow76pqHaLDrd7qFKE -sBtlN0G5ZXOaVI0xloaef1K113mkSvYqbvUZNi/aTb3btI4nrCftj58EAM8TlvYW -jMOiLYPAhN/tfOTTaUzoYuRZ9v63fHYu3UiMvNojA0uxOeryRRdbcQecu4k2EBCj -mkNu+EkNoLNvGOC4sEjq7Gy4n52xeTuO/rI7eIt7CUS39j9OtiKQJfLVIh0Yz+o5 -ljiF0OyoxkpYG/cpoVib1RZdqL1DsHEWcQxYB+8SSG/teLxiNIZxvPHUezvi09He -ksxdvA73 ------END CERTIFICATE----- diff --git a/testing/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/moon/etc/ipsec.d/certs/moonCert.pem b/testing/hosts/moon/etc/ipsec.d/certs/moonCert.pem deleted file mode 100644 index 6f751a8b9..000000000 --- a/testing/hosts/moon/etc/ipsec.d/certs/moonCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NDQ1NloXDTE5MDgyNjE0NDQ1NlowRjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21vb24u -c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk -fAX6xRdB0f5bBjN08zOmO7CEYa8eCyYFqHUhCw+x10v2BnKB6vOlMzW+9DiRtG68 -TdJlYt/24oRuJBX0gAGvzsv0kC9rnoQcgCJQy4bxaLNVsgoiFCVlzxLaYjABbQlz -oSaegm/2PoX+1UP37rG8wlvAcuLSHsFQ720FUs/LvZh4Y0FjoKhvgKs64U4nIAJ7 -MnuL29n5fM5+dem7uovQOBg/+faZo8QkYSK9MW6eQkP+YnwN5zItNBxyGwKPbXXw -Ey5/aqNWfhRY8IEG6HJgrnCwBMHUA14C2UV+Af7Cy4eNnC1Mmu7TmUYcFncXaFn0 -87ryFUdshlmPpIHxfjufAgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQE -AwIDqDAdBgNVHQ4EFgQU2CY9Iex8275aOQxbcMsDgCHerhMwbQYDVR0jBGYwZIAU -XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK -ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC -AQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggr -BgEFBQcDATA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCpnj6Nc+PuPLPi -4E3g5hyJkr5VZy7SSglcs1uyVP2mfwj6JR9SLd5+JOsL1aCTm0y9qLcqdbHBxG8i -LNLtwVKU3s1hV4EIO3saHe4XUEjxN9bDtLWEoeq5ipmYX8RJ/fXKR8/8vurBARP2 -xu1+wqwEhymp4jBmF0LVovT1+o+GhH66zIJnx3zR9BtfMkaeL6804hrx2ygeopeo -buGvMDQ8HcnMB9OU7Y8fK0oY1kULl6hf36K5ApPA6766sRRKRvBSKlmViKSQTq5a -4c8gCWAZbtdT+N/fa8hKDlZt5q10EgjTqDfGTj50xKvAneq7XdfKmYYGnIWoNLY9 -ga8NOzX8 ------END CERTIFICATE----- diff --git a/testing/hosts/moon/etc/ipsec.d/private/moonKey.pem b/testing/hosts/moon/etc/ipsec.d/private/moonKey.pem deleted file mode 100644 index 50629df3d..000000000 --- a/testing/hosts/moon/etc/ipsec.d/private/moonKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEApHwF+sUXQdH+WwYzdPMzpjuwhGGvHgsmBah1IQsPsddL9gZy -gerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IABr87L9JAva56EHIAiUMuG8WizVbIK -IhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6xvMJbwHLi0h7BUO9tBVLPy72YeGNB -Y6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL0DgYP/n2maPEJGEivTFunkJD/mJ8 -DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhyYK5wsATB1ANeAtlFfgH+wsuHjZwt -TJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47nwIDAQABAoIBAAQDXqX6rxGVDQ6t -fQ3qbSUuKaVhOMOT5A6ZSJpQycY+CYVsLNkMoXszX6lUDhlH/Letcme03OAKMM77 -JGn9wYzHj+RcrDuE95Y2bh/oh1dWhaGeoW6pbSwpvD0FzkQKpANlOCr/5bltVxmb -nHftI/sGBvUQGIal53ORE+jgV1+SK6I0oAIWiCpU2oZpYMAtp7WxOngsAJaGtk// -m2ckH+T8uVHwe9gJ9HZnEk+Io6BXScMNNrsbd2J+pQ75wQXfzHEzHAj+ElhWzhtc -5XefqHw/DfpPDX/lby3VoSoagqzsVuUx7LylgzIDxTsb9HQVOLjDzOQ+vn22Xj7g -UCEjwLkCgYEA2EZguuzJdxRIWBSnIyzpCzfqm0EgybpeLuJVfzWla0yKWI6AeLhW -cr+7o9UE8nCQHVffIrgjWksjc/S5FhzC9TYSHpPa8TPgebTQK4VxnP9Qkh/XRpJj -CqgJ8k2MYleHYxa+AKQv/25yNhLdowkNR0iU1kbiaYRJMP0WigAmdAUCgYEAwrJe -Y3LAawOkalJFMFTtLXsqZE91TFwMt9TQnzysGH3Q6+9N+qypS5KCes650+qgrwBV -RmRNc1ixylToP3B0BKY5OD/BwMx1L/zSO3x7I4ZDasCu33y2ukGLcVSxrxTPTGdd -8fhEiVO1CDXcM08/kSeQa049J8ziY3M+4NDchlMCgYEAw2VCO1923Tjb64gtQOBw -ZAxOz5nVz6urL9yYted33is2yq9kbqzMnbuQAYKRh6Ae9APRuwJ2HjvIehjdp5aw -pO4HDM00f7sI0ayEbu2PKfKZjotp6X6UMKqE4f8iGC9QSDvhyZ6NJs9YLHZ6+7NP -5dkzbyx3njFAFxxxYpikJSkCgYByShB8YlUvvKCcRRUWbRQZWa6l2brqizJwCz43 -636+lcS5au2klAyBL0zm2Elfa+DNOe3U93Y7mrorIrJ+4v1H6We3bD3JdnvoIooq -n0UNsngKx3cf++6r4WQAsA3pz9ZsbFVKgEmDL58aZbuQZxnSlJ4DT5c4sN3IMVOc -1x5MvwKBgHudAaLvioIopBpYzOsK2OtEn6NQ7SwH0BLEUulHysaHqan5oExmM1bm -YeivMDc9hj0YLXA47ryQHTx4vB5Nv3TI/LoUG6VrCvZvocQOXe/n7TguwAjJj7ef -E55Gy8lXDRENyJMP1vif3N2iH8eQ1ASf8k/+gnBNkjSlYSSQUDfV ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/moon/etc/swanctl/rsa/moonKey.pem b/testing/hosts/moon/etc/swanctl/rsa/moonKey.pem deleted file mode 100644 index 50629df3d..000000000 --- a/testing/hosts/moon/etc/swanctl/rsa/moonKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEApHwF+sUXQdH+WwYzdPMzpjuwhGGvHgsmBah1IQsPsddL9gZy -gerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IABr87L9JAva56EHIAiUMuG8WizVbIK -IhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6xvMJbwHLi0h7BUO9tBVLPy72YeGNB -Y6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL0DgYP/n2maPEJGEivTFunkJD/mJ8 -DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhyYK5wsATB1ANeAtlFfgH+wsuHjZwt -TJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47nwIDAQABAoIBAAQDXqX6rxGVDQ6t -fQ3qbSUuKaVhOMOT5A6ZSJpQycY+CYVsLNkMoXszX6lUDhlH/Letcme03OAKMM77 -JGn9wYzHj+RcrDuE95Y2bh/oh1dWhaGeoW6pbSwpvD0FzkQKpANlOCr/5bltVxmb -nHftI/sGBvUQGIal53ORE+jgV1+SK6I0oAIWiCpU2oZpYMAtp7WxOngsAJaGtk// -m2ckH+T8uVHwe9gJ9HZnEk+Io6BXScMNNrsbd2J+pQ75wQXfzHEzHAj+ElhWzhtc -5XefqHw/DfpPDX/lby3VoSoagqzsVuUx7LylgzIDxTsb9HQVOLjDzOQ+vn22Xj7g -UCEjwLkCgYEA2EZguuzJdxRIWBSnIyzpCzfqm0EgybpeLuJVfzWla0yKWI6AeLhW -cr+7o9UE8nCQHVffIrgjWksjc/S5FhzC9TYSHpPa8TPgebTQK4VxnP9Qkh/XRpJj -CqgJ8k2MYleHYxa+AKQv/25yNhLdowkNR0iU1kbiaYRJMP0WigAmdAUCgYEAwrJe -Y3LAawOkalJFMFTtLXsqZE91TFwMt9TQnzysGH3Q6+9N+qypS5KCes650+qgrwBV -RmRNc1ixylToP3B0BKY5OD/BwMx1L/zSO3x7I4ZDasCu33y2ukGLcVSxrxTPTGdd -8fhEiVO1CDXcM08/kSeQa049J8ziY3M+4NDchlMCgYEAw2VCO1923Tjb64gtQOBw -ZAxOz5nVz6urL9yYted33is2yq9kbqzMnbuQAYKRh6Ae9APRuwJ2HjvIehjdp5aw -pO4HDM00f7sI0ayEbu2PKfKZjotp6X6UMKqE4f8iGC9QSDvhyZ6NJs9YLHZ6+7NP -5dkzbyx3njFAFxxxYpikJSkCgYByShB8YlUvvKCcRRUWbRQZWa6l2brqizJwCz43 -636+lcS5au2klAyBL0zm2Elfa+DNOe3U93Y7mrorIrJ+4v1H6We3bD3JdnvoIooq -n0UNsngKx3cf++6r4WQAsA3pz9ZsbFVKgEmDL58aZbuQZxnSlJ4DT5c4sN3IMVOc -1x5MvwKBgHudAaLvioIopBpYzOsK2OtEn6NQ7SwH0BLEUulHysaHqan5oExmM1bm -YeivMDc9hj0YLXA47ryQHTx4vB5Nv3TI/LoUG6VrCvZvocQOXe/n7TguwAjJj7ef -E55Gy8lXDRENyJMP1vif3N2iH8eQ1ASf8k/+gnBNkjSlYSSQUDfV ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/moon/etc/swanctl/x509/moonCert.pem b/testing/hosts/moon/etc/swanctl/x509/moonCert.pem deleted file mode 100644 index 6f751a8b9..000000000 --- a/testing/hosts/moon/etc/swanctl/x509/moonCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NDQ1NloXDTE5MDgyNjE0NDQ1NlowRjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21vb24u -c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk -fAX6xRdB0f5bBjN08zOmO7CEYa8eCyYFqHUhCw+x10v2BnKB6vOlMzW+9DiRtG68 -TdJlYt/24oRuJBX0gAGvzsv0kC9rnoQcgCJQy4bxaLNVsgoiFCVlzxLaYjABbQlz -oSaegm/2PoX+1UP37rG8wlvAcuLSHsFQ720FUs/LvZh4Y0FjoKhvgKs64U4nIAJ7 -MnuL29n5fM5+dem7uovQOBg/+faZo8QkYSK9MW6eQkP+YnwN5zItNBxyGwKPbXXw -Ey5/aqNWfhRY8IEG6HJgrnCwBMHUA14C2UV+Af7Cy4eNnC1Mmu7TmUYcFncXaFn0 -87ryFUdshlmPpIHxfjufAgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQE -AwIDqDAdBgNVHQ4EFgQU2CY9Iex8275aOQxbcMsDgCHerhMwbQYDVR0jBGYwZIAU -XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK -ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC -AQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggr -BgEFBQcDATA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCpnj6Nc+PuPLPi -4E3g5hyJkr5VZy7SSglcs1uyVP2mfwj6JR9SLd5+JOsL1aCTm0y9qLcqdbHBxG8i -LNLtwVKU3s1hV4EIO3saHe4XUEjxN9bDtLWEoeq5ipmYX8RJ/fXKR8/8vurBARP2 -xu1+wqwEhymp4jBmF0LVovT1+o+GhH66zIJnx3zR9BtfMkaeL6804hrx2ygeopeo -buGvMDQ8HcnMB9OU7Y8fK0oY1kULl6hf36K5ApPA6766sRRKRvBSKlmViKSQTq5a -4c8gCWAZbtdT+N/fa8hKDlZt5q10EgjTqDfGTj50xKvAneq7XdfKmYYGnIWoNLY9 -ga8NOzX8 ------END CERTIFICATE----- diff --git a/testing/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100755 index 0865ad22e..000000000 --- a/testing/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/sun/etc/ipsec.d/certs/sunCert.pem b/testing/hosts/sun/etc/ipsec.d/certs/sunCert.pem deleted file mode 100644 index a8c325709..000000000 --- a/testing/hosts/sun/etc/ipsec.d/certs/sunCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NDI0NVoXDTE5MDgyNjE0NDI0NVowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN1bi5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMci -IAR9SlszDJhGEtRq9eCFAYNdtL3bC7jcELs7ttqiB51iAUgdi9JZCzgWNAGHd8Iv -RDV529DDiUxXxOWCdYKUmQp0t5vR6oE5pmHmd5lcUguEyVrtqFSr6LMUqOXwFb41 -VUNPPR7YyLMdgUf9Ki0PZWdnVLVEp/ZKIY1OaqZLTnyfV7k0I/XQX2uW6UDCaC1A -QBljzEfrD2gUcG9+FLpb5qDsiGUyhhLB+nM1GNPnZvIlCppD+0t3xEI87+eg5N86 -yXBcu4o/O7rvVpP17GrhwKuYx0RHDBScBDo/WRNEOrn8/Q9jQUlry06+0ChVYY+R -328lHABkaoH/rB65JSECAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBTtzWNHzdEvtjAAtgVDBxNUTJ0xijBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAVne/5HKpkbv75eHk -x44aMVWT0DB6SF6nXrOQSzF7OV1FyNj2vibA9gAaiVnBXP+r798MDtwD/0N33TQl -QIR2rGJqkocsCTcUiQW6xLDO6AmJCBAaJbc5REjNT+HndjjMsQjn1NyY8hQbyow1 -ZOQ543zCY+Al7A3YcUtISLLH4EMIP3On1PFM2rWMUq1HoSo2kl7Awv+okvoqx6Sf -7/S2mj3dYGv+5eAVogkBL3mRCXEpGHC+6e6VW5nGYSYIRPkBRD2F4imB4+KYUR74 -GRopoaetH/TFRbDqiSWBf2L3Po2tXEPifIvkgavUXIn+tdgMhQ9BpVN8yEgPXLM5 -WdafVg== ------END CERTIFICATE----- diff --git a/testing/hosts/sun/etc/ipsec.d/private/sunKey.pem b/testing/hosts/sun/etc/ipsec.d/private/sunKey.pem deleted file mode 100644 index 9008f5c0e..000000000 --- a/testing/hosts/sun/etc/ipsec.d/private/sunKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAxyIgBH1KWzMMmEYS1Gr14IUBg120vdsLuNwQuzu22qIHnWIB -SB2L0lkLOBY0AYd3wi9ENXnb0MOJTFfE5YJ1gpSZCnS3m9HqgTmmYeZ3mVxSC4TJ -Wu2oVKvosxSo5fAVvjVVQ089HtjIsx2BR/0qLQ9lZ2dUtUSn9kohjU5qpktOfJ9X -uTQj9dBfa5bpQMJoLUBAGWPMR+sPaBRwb34UulvmoOyIZTKGEsH6czUY0+dm8iUK -mkP7S3fEQjzv56Dk3zrJcFy7ij87uu9Wk/XsauHAq5jHREcMFJwEOj9ZE0Q6ufz9 -D2NBSWvLTr7QKFVhj5HfbyUcAGRqgf+sHrklIQIDAQABAoIBAAYd0TfyFT+Z4NAo -jtmBc43y5+n+DdgrC0AhWk419lbe1TcLVJi/d5T9cS/G1tAZNh97zi+KT6so5mW2 -6HBYQn3BTLYaga1ClF5lw+uL5a6LPGXoLTsiw6HeKeaeQtXVOwW9o6HOpET3Sare -xCLO7uW1bFrxvJNYyYPyIPezKelzptM3FSmV+Z3kzjGb9DpiwBbh4Dfbn2jQ/bA/ -0aWkMS40xpjU3tj/PeVGpBBG1gVARoYxqQxw1bflUjFUoDT6Y4aTpgdaP2vc5Tms -CM0RCzD7EtQcd3RxZR4Bu6Zfv89g+8oJZCeU6SZFDQ8Ndi/8AVspvk2ojvz4rkfR -+HLQXPUCgYEA6mr/E7b1traPBAi/ODXu8kWj2Po4tNjbwEiZ5xGbg1tTHsTsTpFV -puLTbSeuixRXCTOCSfjPM+M5O5XmYKq7hqr/Oc9SB1/cl1JQwDnBP+GZn2Phap+z -vQVhSO6zcykoeAOAGAig5NryWIVymtQizlPY8zsY4tOGJIvENCvwRjcCgYEA2XeA -7thCV+YNlhZkfkHEhVbkXsMdczJ5b0Rr7MH9ra4kRnJjNSOW0B1saQ+jxApN4hKL -9SPzbGKkxR/2OI5WnYpvHc8LHTJbYdMoYhI+0KZ/eYPU69oB4OBSTWdYwEE/miRX -vFWZMOpQ1pqvoJtDUZcluUhpvZ9dy8/LRHh3w2cCgYAmZOvuYLMSAAigkoYvQLYo -PDu/2Avdov8rGTkL3ZhpBVYx3fMOU0OCF/ilEjDGWsh+m08lqnjVeMvw9HZNMumP -/wXahBhdWNgaeML9GPiL6/lrX8KV4h5gQTdT6LS/kegs7/XU+eTQVwQGd6TzsvcY -cCdCf1VuIVMBPVsfaGrsNQKBgQC+Dg8ErsPshgZBsXhKT7gswG/90ZAfaXFvqOCZ -nkDSVWsmljnV6zCW2eAxQZXicw72ETd4Gt9XTi6qiPBrJRrVvHK4HoacEbKDoEOe -0ktLlve5f1nKdlFF80Z6l2OdQmkPkcuLsVOcyGu14qKzPn5rBCnX8E1Zh7o1sXj4 -ckBY6QKBgExdm0dbKGjHfP+gN+f69sEuH4XFRmIxSDzj1//ZUUR4Ran7OIkAEy7c -Y/Smu4UhceJS6a+OjGQdhK/wzNVxP7+AW+dL+JpOL+Nu3TL9uMgNFClB1Y0tJ7wD -PJPmku6I346Jy/0SCclgeXQPRD5kHAixADcOtkSnkjojwj8VRAPP ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/sun/etc/swanctl/rsa/sunKey.pem b/testing/hosts/sun/etc/swanctl/rsa/sunKey.pem deleted file mode 100644 index 9008f5c0e..000000000 --- a/testing/hosts/sun/etc/swanctl/rsa/sunKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAxyIgBH1KWzMMmEYS1Gr14IUBg120vdsLuNwQuzu22qIHnWIB -SB2L0lkLOBY0AYd3wi9ENXnb0MOJTFfE5YJ1gpSZCnS3m9HqgTmmYeZ3mVxSC4TJ -Wu2oVKvosxSo5fAVvjVVQ089HtjIsx2BR/0qLQ9lZ2dUtUSn9kohjU5qpktOfJ9X -uTQj9dBfa5bpQMJoLUBAGWPMR+sPaBRwb34UulvmoOyIZTKGEsH6czUY0+dm8iUK -mkP7S3fEQjzv56Dk3zrJcFy7ij87uu9Wk/XsauHAq5jHREcMFJwEOj9ZE0Q6ufz9 -D2NBSWvLTr7QKFVhj5HfbyUcAGRqgf+sHrklIQIDAQABAoIBAAYd0TfyFT+Z4NAo -jtmBc43y5+n+DdgrC0AhWk419lbe1TcLVJi/d5T9cS/G1tAZNh97zi+KT6so5mW2 -6HBYQn3BTLYaga1ClF5lw+uL5a6LPGXoLTsiw6HeKeaeQtXVOwW9o6HOpET3Sare -xCLO7uW1bFrxvJNYyYPyIPezKelzptM3FSmV+Z3kzjGb9DpiwBbh4Dfbn2jQ/bA/ -0aWkMS40xpjU3tj/PeVGpBBG1gVARoYxqQxw1bflUjFUoDT6Y4aTpgdaP2vc5Tms -CM0RCzD7EtQcd3RxZR4Bu6Zfv89g+8oJZCeU6SZFDQ8Ndi/8AVspvk2ojvz4rkfR -+HLQXPUCgYEA6mr/E7b1traPBAi/ODXu8kWj2Po4tNjbwEiZ5xGbg1tTHsTsTpFV -puLTbSeuixRXCTOCSfjPM+M5O5XmYKq7hqr/Oc9SB1/cl1JQwDnBP+GZn2Phap+z -vQVhSO6zcykoeAOAGAig5NryWIVymtQizlPY8zsY4tOGJIvENCvwRjcCgYEA2XeA -7thCV+YNlhZkfkHEhVbkXsMdczJ5b0Rr7MH9ra4kRnJjNSOW0B1saQ+jxApN4hKL -9SPzbGKkxR/2OI5WnYpvHc8LHTJbYdMoYhI+0KZ/eYPU69oB4OBSTWdYwEE/miRX -vFWZMOpQ1pqvoJtDUZcluUhpvZ9dy8/LRHh3w2cCgYAmZOvuYLMSAAigkoYvQLYo -PDu/2Avdov8rGTkL3ZhpBVYx3fMOU0OCF/ilEjDGWsh+m08lqnjVeMvw9HZNMumP -/wXahBhdWNgaeML9GPiL6/lrX8KV4h5gQTdT6LS/kegs7/XU+eTQVwQGd6TzsvcY -cCdCf1VuIVMBPVsfaGrsNQKBgQC+Dg8ErsPshgZBsXhKT7gswG/90ZAfaXFvqOCZ -nkDSVWsmljnV6zCW2eAxQZXicw72ETd4Gt9XTi6qiPBrJRrVvHK4HoacEbKDoEOe -0ktLlve5f1nKdlFF80Z6l2OdQmkPkcuLsVOcyGu14qKzPn5rBCnX8E1Zh7o1sXj4 -ckBY6QKBgExdm0dbKGjHfP+gN+f69sEuH4XFRmIxSDzj1//ZUUR4Ran7OIkAEy7c -Y/Smu4UhceJS6a+OjGQdhK/wzNVxP7+AW+dL+JpOL+Nu3TL9uMgNFClB1Y0tJ7wD -PJPmku6I346Jy/0SCclgeXQPRD5kHAixADcOtkSnkjojwj8VRAPP ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/sun/etc/swanctl/x509/sunCert.pem b/testing/hosts/sun/etc/swanctl/x509/sunCert.pem deleted file mode 100644 index a8c325709..000000000 --- a/testing/hosts/sun/etc/swanctl/x509/sunCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NDI0NVoXDTE5MDgyNjE0NDI0NVowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN1bi5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMci -IAR9SlszDJhGEtRq9eCFAYNdtL3bC7jcELs7ttqiB51iAUgdi9JZCzgWNAGHd8Iv -RDV529DDiUxXxOWCdYKUmQp0t5vR6oE5pmHmd5lcUguEyVrtqFSr6LMUqOXwFb41 -VUNPPR7YyLMdgUf9Ki0PZWdnVLVEp/ZKIY1OaqZLTnyfV7k0I/XQX2uW6UDCaC1A -QBljzEfrD2gUcG9+FLpb5qDsiGUyhhLB+nM1GNPnZvIlCppD+0t3xEI87+eg5N86 -yXBcu4o/O7rvVpP17GrhwKuYx0RHDBScBDo/WRNEOrn8/Q9jQUlry06+0ChVYY+R -328lHABkaoH/rB65JSECAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBTtzWNHzdEvtjAAtgVDBxNUTJ0xijBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAVne/5HKpkbv75eHk -x44aMVWT0DB6SF6nXrOQSzF7OV1FyNj2vibA9gAaiVnBXP+r798MDtwD/0N33TQl -QIR2rGJqkocsCTcUiQW6xLDO6AmJCBAaJbc5REjNT+HndjjMsQjn1NyY8hQbyow1 -ZOQ543zCY+Al7A3YcUtISLLH4EMIP3On1PFM2rWMUq1HoSo2kl7Awv+okvoqx6Sf -7/S2mj3dYGv+5eAVogkBL3mRCXEpGHC+6e6VW5nGYSYIRPkBRD2F4imB4+KYUR74 -GRopoaetH/TFRbDqiSWBf2L3Po2tXEPifIvkgavUXIn+tdgMhQ9BpVN8yEgPXLM5 -WdafVg== ------END CERTIFICATE----- diff --git a/testing/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100755 index 0865ad22e..000000000 --- a/testing/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/venus/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/hosts/venus/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/venus/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/venus/etc/ipsec.d/certs/venusCert.pem b/testing/hosts/venus/etc/ipsec.d/certs/venusCert.pem deleted file mode 100644 index 6e951bf96..000000000 --- a/testing/hosts/venus/etc/ipsec.d/certs/venusCert.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEDzCCAvegAwIBAgIBLDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTIyN1oXDTE5MDgyNjE0NTIyN1owRzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHTAbBgNVBAMTFHZlbnVz -LnN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -s0NJSUJbtycdFMvKJ/dlsaFZbycstYbcGjmZtOZJpOvvJJB5DEQyJt3h8gWUOj1u -Oq//laCC6x53P7OQpsHAQpZFYv7qeo1GtDRqgNDIZwSW/PmaBHbSTKmwlVBTQBto -J3UMEPfb0ZSuvmW776t0W3TR6AHelU22ajB4+ERTMxEz8knEXrBjaAugL129WFXG -WG/2OSRmWZEO1SrhRJV+/EaSc4H5veIvZ0zhu0lf0Lgc4NCh2CPOn8cVA3qvMa+A -JcrvTdvadZ/hY+2Klqq/Ic5CB79HbbYAH9//qPPNc+fINpMFPGTcyznxNlIzfSXZ -ga4pM/NmDnKTayuKw0GRTwIDAQABo4IBBjCCAQIwCQYDVR0TBAIwADALBgNVHQ8E -BAMCA6gwHQYDVR0OBBYEFIq1nS2ZywL8mwA1izsWzXznzo0MMG0GA1UdIwRmMGSA -FF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UE -ChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENB -ggEAMB8GA1UdEQQYMBaCFHZlbnVzLnN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAw -LqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmww -DQYJKoZIhvcNAQELBQADggEBAFBBquKL/HIc/NjxzbDFfyRSUJolOW/eyljAlZjV -OHyOXqSFU5vnurZ1OX6ww+zoMJ3lP/36SOLGODKFl2QY8n3YnZjpDsDEdwAeU754 -G9Hc17ODEKMucgwPFwMNBsodg6ZQ3eaPMHv7KL+bh7dK2SfEk+UtLNru5TGzAEaJ -WoQaaqbPNIHUN+aUkP9KkE/oo1S/FlUVvKV9kzNfZSMzjhAUwYYudnFay0J5Ja/y -vuEBQpzFnoVB1exDGhBJBUB3UGvCeZcfcS5yuc6xRfCjuo9l0azxsIoqIru8g8Xa -YFVNLlyEMDLE9ScCwZ6qR3K+xf++IO/l4VRLhpn40PUM6Cc= ------END CERTIFICATE----- diff --git a/testing/hosts/venus/etc/ipsec.d/private/venusKey.pem b/testing/hosts/venus/etc/ipsec.d/private/venusKey.pem deleted file mode 100644 index 4e02a72e5..000000000 --- a/testing/hosts/venus/etc/ipsec.d/private/venusKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAs0NJSUJbtycdFMvKJ/dlsaFZbycstYbcGjmZtOZJpOvvJJB5 -DEQyJt3h8gWUOj1uOq//laCC6x53P7OQpsHAQpZFYv7qeo1GtDRqgNDIZwSW/Pma -BHbSTKmwlVBTQBtoJ3UMEPfb0ZSuvmW776t0W3TR6AHelU22ajB4+ERTMxEz8knE -XrBjaAugL129WFXGWG/2OSRmWZEO1SrhRJV+/EaSc4H5veIvZ0zhu0lf0Lgc4NCh -2CPOn8cVA3qvMa+AJcrvTdvadZ/hY+2Klqq/Ic5CB79HbbYAH9//qPPNc+fINpMF -PGTcyznxNlIzfSXZga4pM/NmDnKTayuKw0GRTwIDAQABAoIBAFIBCdl1fbc/MVJ+ -FzBJQEAN63epmA5CbxWgG+xhHHdRZsh3PqiZ2cdl4SJx4ujxiSdXs7ejAcDE4xBE -+HsQTv8m9v7eVi1Ry3JMOBxNZh+aPefj1s0L/hAL4Det0yeUYgUKykZI3En3liiL -KXnuGQBtZEiZ8lSihDv3iJ8pwlWtWL/xpvXFS6iI5XY4yHC+L2m1wrNkf5bKREll -s2FbiqFkCJp+YLQ0Yk9JkjqpuFWcuTlryN53/PVWCbQDkK0QQCIOZETnPtpaoltX -N1sW8REr0UVHPyPpUCkb/Gf6aZjrvSzlJKHeU/KRHseEfqZDRF5vagTArR4AzbUT -nOPfESECgYEA4B7ndYQdYR9BYZndBbY5YmwgfntEATSDBY7V4Ql62gKiMReRcj3M -sT8kNno54mXW2x9xRaimTtlKf7hXc3ac2QhTboT4UIQ0J4oyoPXXtSAuzfIrhB7e -w06NCzbWr25ukbkG9YXtAu/1nSqqwt46cMGirJcNXi0gAo5ML/kIyA0CgYEAzMLv -Nhh2grIWqzU7UtNXceTR+YZp8077kM8cOhCw/+zG06h1O4ycJhrxBAYbhXvqLnkW -7fqKe7vN6sTKdKniagY4FuglU1kSZtWVdFnCkxLl9weI3RGhELxRGPV8+uFkqsla -lx2yYQnqP0XuOh5FdNOvvVZX22uR7YvgiIeD68sCgYANHkH2AvGlSasOB2+EchIR -zLpqLNTiLSyuGpoyPdfPAvBzZynAQhXFGikId0cEFWnqEYETzrdNTjKqHyQfQgYU -PgSEJ4xRSiuzVMd53Gnv1B5pN4+MgDIRxHtE+MTAJ/qY1PevT1N8JId/14t/NHq/ -NtZKu9ywcnu5KpMTC8ST0QKBgQCfQhrGC17ZpmQlQ6Dheclwp1V9a0Mq38qgRcYh -j2vrkiDO7R5Jc8LbjGbbB1kOiGOLQ9lGvXBKbrbpG6iP9rZIWo/zmRm26vd6DjNR -LKM+uxsr+KtFrnmEx8OX0xAjHX2rrDKOiKV9/jU4g06X24WQKTlt3SM2YUM97GZ2 -Kli74wKBgQDMU5h0bgXRFHQTOnbzn/euTJU1ytR+EZUHVifCkxTlhkSB0uv1D2ZQ -8g922diELw6qBQgY6kjrU9yDb2gxDtcyz/G/liR+P9O8j0rarplM4kl5/fYxgQz8 -iMgszcmLKSjld6GKu7i/cVVp+7jvo4cx8jg37fcWsxX8hoFplot1vQ== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/venus/etc/swanctl/rsa/venusKey.pem b/testing/hosts/venus/etc/swanctl/rsa/venusKey.pem deleted file mode 100644 index 4e02a72e5..000000000 --- a/testing/hosts/venus/etc/swanctl/rsa/venusKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAs0NJSUJbtycdFMvKJ/dlsaFZbycstYbcGjmZtOZJpOvvJJB5 -DEQyJt3h8gWUOj1uOq//laCC6x53P7OQpsHAQpZFYv7qeo1GtDRqgNDIZwSW/Pma -BHbSTKmwlVBTQBtoJ3UMEPfb0ZSuvmW776t0W3TR6AHelU22ajB4+ERTMxEz8knE -XrBjaAugL129WFXGWG/2OSRmWZEO1SrhRJV+/EaSc4H5veIvZ0zhu0lf0Lgc4NCh -2CPOn8cVA3qvMa+AJcrvTdvadZ/hY+2Klqq/Ic5CB79HbbYAH9//qPPNc+fINpMF -PGTcyznxNlIzfSXZga4pM/NmDnKTayuKw0GRTwIDAQABAoIBAFIBCdl1fbc/MVJ+ -FzBJQEAN63epmA5CbxWgG+xhHHdRZsh3PqiZ2cdl4SJx4ujxiSdXs7ejAcDE4xBE -+HsQTv8m9v7eVi1Ry3JMOBxNZh+aPefj1s0L/hAL4Det0yeUYgUKykZI3En3liiL -KXnuGQBtZEiZ8lSihDv3iJ8pwlWtWL/xpvXFS6iI5XY4yHC+L2m1wrNkf5bKREll -s2FbiqFkCJp+YLQ0Yk9JkjqpuFWcuTlryN53/PVWCbQDkK0QQCIOZETnPtpaoltX -N1sW8REr0UVHPyPpUCkb/Gf6aZjrvSzlJKHeU/KRHseEfqZDRF5vagTArR4AzbUT -nOPfESECgYEA4B7ndYQdYR9BYZndBbY5YmwgfntEATSDBY7V4Ql62gKiMReRcj3M -sT8kNno54mXW2x9xRaimTtlKf7hXc3ac2QhTboT4UIQ0J4oyoPXXtSAuzfIrhB7e -w06NCzbWr25ukbkG9YXtAu/1nSqqwt46cMGirJcNXi0gAo5ML/kIyA0CgYEAzMLv -Nhh2grIWqzU7UtNXceTR+YZp8077kM8cOhCw/+zG06h1O4ycJhrxBAYbhXvqLnkW -7fqKe7vN6sTKdKniagY4FuglU1kSZtWVdFnCkxLl9weI3RGhELxRGPV8+uFkqsla -lx2yYQnqP0XuOh5FdNOvvVZX22uR7YvgiIeD68sCgYANHkH2AvGlSasOB2+EchIR -zLpqLNTiLSyuGpoyPdfPAvBzZynAQhXFGikId0cEFWnqEYETzrdNTjKqHyQfQgYU -PgSEJ4xRSiuzVMd53Gnv1B5pN4+MgDIRxHtE+MTAJ/qY1PevT1N8JId/14t/NHq/ -NtZKu9ywcnu5KpMTC8ST0QKBgQCfQhrGC17ZpmQlQ6Dheclwp1V9a0Mq38qgRcYh -j2vrkiDO7R5Jc8LbjGbbB1kOiGOLQ9lGvXBKbrbpG6iP9rZIWo/zmRm26vd6DjNR -LKM+uxsr+KtFrnmEx8OX0xAjHX2rrDKOiKV9/jU4g06X24WQKTlt3SM2YUM97GZ2 -Kli74wKBgQDMU5h0bgXRFHQTOnbzn/euTJU1ytR+EZUHVifCkxTlhkSB0uv1D2ZQ -8g922diELw6qBQgY6kjrU9yDb2gxDtcyz/G/liR+P9O8j0rarplM4kl5/fYxgQz8 -iMgszcmLKSjld6GKu7i/cVVp+7jvo4cx8jg37fcWsxX8hoFplot1vQ== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/venus/etc/swanctl/x509/venusCert.pem b/testing/hosts/venus/etc/swanctl/x509/venusCert.pem deleted file mode 100644 index 6e951bf96..000000000 --- a/testing/hosts/venus/etc/swanctl/x509/venusCert.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEDzCCAvegAwIBAgIBLDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTIyN1oXDTE5MDgyNjE0NTIyN1owRzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHTAbBgNVBAMTFHZlbnVz -LnN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -s0NJSUJbtycdFMvKJ/dlsaFZbycstYbcGjmZtOZJpOvvJJB5DEQyJt3h8gWUOj1u -Oq//laCC6x53P7OQpsHAQpZFYv7qeo1GtDRqgNDIZwSW/PmaBHbSTKmwlVBTQBto -J3UMEPfb0ZSuvmW776t0W3TR6AHelU22ajB4+ERTMxEz8knEXrBjaAugL129WFXG -WG/2OSRmWZEO1SrhRJV+/EaSc4H5veIvZ0zhu0lf0Lgc4NCh2CPOn8cVA3qvMa+A -JcrvTdvadZ/hY+2Klqq/Ic5CB79HbbYAH9//qPPNc+fINpMFPGTcyznxNlIzfSXZ -ga4pM/NmDnKTayuKw0GRTwIDAQABo4IBBjCCAQIwCQYDVR0TBAIwADALBgNVHQ8E -BAMCA6gwHQYDVR0OBBYEFIq1nS2ZywL8mwA1izsWzXznzo0MMG0GA1UdIwRmMGSA -FF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UE -ChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENB -ggEAMB8GA1UdEQQYMBaCFHZlbnVzLnN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAw -LqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmww -DQYJKoZIhvcNAQELBQADggEBAFBBquKL/HIc/NjxzbDFfyRSUJolOW/eyljAlZjV -OHyOXqSFU5vnurZ1OX6ww+zoMJ3lP/36SOLGODKFl2QY8n3YnZjpDsDEdwAeU754 -G9Hc17ODEKMucgwPFwMNBsodg6ZQ3eaPMHv7KL+bh7dK2SfEk+UtLNru5TGzAEaJ -WoQaaqbPNIHUN+aUkP9KkE/oo1S/FlUVvKV9kzNfZSMzjhAUwYYudnFay0J5Ja/y -vuEBQpzFnoVB1exDGhBJBUB3UGvCeZcfcS5yuc6xRfCjuo9l0azxsIoqIru8g8Xa -YFVNLlyEMDLE9ScCwZ6qR3K+xf++IO/l4VRLhpn40PUM6Cc= ------END CERTIFICATE----- diff --git a/testing/hosts/venus/etc/swanctl/x509ca/strongswanCert.pem b/testing/hosts/venus/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 0865ad22e..000000000 --- a/testing/hosts/venus/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuDCCAqCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDEwMDExOFoXDTE5MDkwNzEwMDExOFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9u -Z1N3YW4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/y -X2LqPVZuWLPIeknK86xhz6ljd3NNhC2z+P1uoCP3sBMuZiZQEjFzhnKcbXxCeo2f -FnvhOOjrrisSuVkzuu82oxXD3fIkzuS7m9V4E10EZzgmKWIf+WuNRfbgAuUINmLc -4YGAXBQLPyzpP4Ou48hhz/YQo58Bics6PHy5v34qCVROIXDvqhj91P8g+pS+F21/ -7P+CH2jRcVIEHZtG8M/PweTPQ95dPzpYd2Ov6SZ/U7EWmbMmT8VcUYn1aChxFmy5 -gweVBWlkH6MP+1DeE0/tL5c87xo5KCeGK8Tdqpe7sBRC4pPEEHDQciTUvkeuJ1Pr -K+1LwdqRxo7HgMRiDw8CAwEAAaOBsjCBrzASBgNVHRMBAf8ECDAGAQH/AgEBMAsG -A1UdDwQEAwIBBjAdBgNVHQ4EFgQUXafdcAZRMn7ntm2zteXgYOouTe8wbQYDVR0j -BGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkw -FwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJv -b3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACOSmqEBtBLR9aV3UyCI8gmzR5in -Lte9aUXXS+qis6F2h2Stf4sN+Nl6Gj7REC6SpfEH4wWdwiUL5J0CJhyoOjQuDl3n -1Dw3dE4/zqMZdyDKEYTU75TmvusNJBdGsLkrf7EATAjoi/nrTOYPPhSUZvPp/D+Y -vORJ9Ej51GXlK1nwEB5iA8+tDYniNQn6BD1MEgIejzK+fbiy7braZB1kqhoEr2Si -7luBSnU912sw494E88a2EWbmMvg2TVHPNzCpVkpNk7kifCiwmw9VldkqYy9y/lCa -Epyp7lTfKw7cbD04Vk8QJW782L6Csuxkl346b17wmOqn8AZips3tFsuAY3w= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/ca/.gitignore b/testing/hosts/winnetou/etc/ca/.gitignore new file mode 100644 index 000000000..7a30f828b --- /dev/null +++ b/testing/hosts/winnetou/etc/ca/.gitignore @@ -0,0 +1 @@ +db.strongswan.org.certs-and-keys diff --git a/testing/hosts/winnetou/etc/openssl/bliss/strongswan_blissCert.der b/testing/hosts/winnetou/etc/openssl/bliss/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/hosts/winnetou/etc/openssl/bliss/strongswan_blissKey.der b/testing/hosts/winnetou/etc/openssl/bliss/strongswan_blissKey.der deleted file mode 100644 index 76cafc19807599a97302667cd743125b5a438cb4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=r1A+sA0KRgBRa)<-1UM5_Zxmk?teMohT+x3L-m}5l zrCUhIdl4hk;1Y27=!AworeJvB+a+KUvgv&9bp*{%aK*!2rvAqp zxmK1!wl>$l+_zZ~fxAm5Y6Sts@~*~>PzdSTW*YLiEy&;+*0W{W$Jd!&sd;rRNhE`3 zOkJ$O^-zM0g?jU@FYYG3M6?uNjuwT`0Ylq39`cM5mLrW=6!p24R>q$>s+igj31|`Y z%kBY(J){k2KPnWBy%+`4PoEo=4X4Rz(6(s$*TfD)BNeSxzf09G&_y!0tj(Qr6tI@j4(93Eq_=my{Qw2^;6qOKAp`LlUY_B%bV=rVGOl9DSWLWlR-5;8djZ1ZWBF)z6s{>FrSH0A71+yl;*^V+;g|qW=MO84RyJZ={-pH(839O zW`GZKpPr?*{x|oro{LS1d2*M+DzQC%WjgB{W;CTKL>(3}Ec}`AFROo%X@|`b!+ueM z5y3?Hw4Pte=*<5gfe?Xr6ObQS(fYb*=7h?_fN11>Hrk8AhtVCDfXrBP=^PR)mJ|?} z*or|B0>+4XOse^W%;6=YDhg6{?(b@_p0hX_I7?XcaBqb~G8XNcVjyXsxuK}rfzlg% zvuB)BOM>v^aw~>syG9hD&6QweaBxMws3DwTCRsyJ?~M@>TQm)U98x0y?hw?433~LX z4e=adJtp(b3?nh{5p-RmvcC1IOXx|mx%3d0nbJ~vpScVQWIA!K%h+9Bye6eIN9_w* zO_%w!q5J^=Z^PgcF03*7LE;R$j^*NX6Mz(^&K84$?}~%^f6}B&Sp$K=0N@fpACNcT z0ssX74@ZJW&b1Bw`34fyw;wz#MQ7;D7)C UazG>y03VPD7yvip;s78XK!~X(F8}}l diff --git a/testing/hosts/winnetou/etc/openssl/certs/07de9420646e493941432a451e7c14fd28fb9307 b/testing/hosts/winnetou/etc/openssl/certs/07de9420646e493941432a451e7c14fd28fb9307 deleted file mode 100644 index 291812e54bd6ebc6f63999cf26458c8b7dac9f39..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1058 zcmXqLVv#dwVrE;w%*4pV#HeS$%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4NVLzjLZ#9 zOwEkUqJUgWAlD4aHHaYE8bJeokTu-G96_nYsfk6&8E~6Lgp%@;93ZwA1D&LoUzBdp z#HfVqCq`BV<|amd2B0_>QxhX2!`8PsoVv4TYw1P4GhML6AY9?V+cQmT)q)FjSYOPV ze@*D=8tzjy=Y3|01v7c_h;c-mRx|j|Q_ov$$bWL0>%+6J1${5m_%K6xjN&N$wNQunrX%@yJe=b7U#Zv5h1r{!u-t-v%HE^b!{>fOkUppKgXRZ z`s4Kr&x{UETcQ=c{NbX!Fx z*9dO?TYK(_;Oz%Kd*{XP`s{P?TH=#Ur(Qk$%+hrH=giVxuZaAj>ACL~u}cT>Fz6m_ zoOAWj4VTG_ZeI#Zaet!`eL3Ux+@%+-UaK$|bUpB7VrFDuT-?OS0t^uba8%0*voIMj z7;poFS(cxLg_((Yg@G)H!^a}VA|ji0fX_#-yzedh1+|vD+Nq^WyKWlff~1vM(hO1> zL}HiUEno{Ys(ZdIck|Y#4-#JK`MzK1xx}4HNeSdiuxkWa#0*3lu|>Hh$TjjTMg|53 zdJA+GXtil%l#~=$>FXyK<>;X%4}ByqP!>6*08>9Or7$u`zU#QZaH(>z&Ry3vTc>xX zHt#tU8vXzGwi`yKa#>##HtkS5ll0cpe_lN~3Pym(g>Id{hTH*%{knZ8d5(392s?wj+! z;M}Ue^ChhsYS#bhe$Rf7_3UEtiCT&5k6(YAA;P@&i)PSb*UQJEo3Bi)y;8cSX3;Yl zlT!s9noZIN)fDB-0_42{Bzxbjd$;g<*QCDcw|}-O1xK?S;TCFFsn9zib2twGyR(mx diff --git a/testing/hosts/winnetou/etc/openssl/certs/16bf9080ac60d035d7a75ca7f634ed4427f00c0f b/testing/hosts/winnetou/etc/openssl/certs/16bf9080ac60d035d7a75ca7f634ed4427f00c0f deleted file mode 100644 index fb342427267638f3931d17ae7a380214b5a82b97..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1076 zcmXqLVlgmiVwPCI%*4pV#HeY&%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4NVM83{8v- zOw3G8qkvpXAlDemHOL^^8bJeokTu-G96_nYsfk6&8HPLtTp%GjQ zxPP!_|5(qL#4ObKb|bTAgr$_V?cRb%wX(bI?X~NUur5B|_pMDVe}m%VDQAN})cp9a zExF?Tg}!^TZpYLPEp2$*!{##Y?y(EyH|{*|SpR|1wdS^LOj?8)uw(R9$^G zkO^j^75McsGy{s?`lL3PPH!xIX`B_+)nV44?$bvY0EMhDonYv#uOB9FK8%o75 z>dks>^PxoGj6p6)TA3xyAf-VhcKO``wm_r0=i72OZ+-e8;gz26`-PrM+^Lkbniv@j zQt*Tc+N0`Wzq?Q zfZb=`?qEE?T(O0pgQcPK_q@}8Z*+W1iQ-1DPhAJSJ-%*?b9kk#E z&rd&&ILZHtF%^q``$0zdc*o(%OE|ncu2`4p%3Hlne_MV1$Eumy$JThx4?Vu>%Hrkk zjT73p9-p<)_C~4IUHP1_x1W1MHt%5O2(g;{?7vp{YLH8e0VF)%Z* zG&MFghyrpgfm{Zl`kzt$VCaYx+*rOws+xu^dYRxM8E*)#T@p*%A)zqCY6BpiJFL`X! z&t?(DNE!9&DwZtg4|*zvcZB{P4!nLcGQntR-naOAz5D888->rvo&6FYcC%u7dNgqXj}shQdwa}#{Vp=2FyUpfEyT~ zvivM8z*NCzAPeH~v52vVJTLvQ;L}=#vu6{O&m2F&ulf0Ih=M^bNLraC%^;;gBzF1T z0=7V-y64++H*bCVAmNps@B4+GOWdiHj+z)5kmD4XK!I_}$k3a+FjrdlOk)g}k?5mS z(t1Lj+j&`M+plX_Sj;N5-~Gjj?M?~DST)?+Eq0&SXr$cvE8@Z7Pj?j(oTt7lI+t$| zBldmAnV0PcPp$a)_}wcXslJTO;;h>{?`$$~R!Ukot3BN^$LhFDyTIat13Wel+-7FH zEO|9Wuj%Q*dKWPPhg%yZ*&}AnV!NU~*|JjDW#`U4N97u``M+4o{NHwe?GgRtqbH6p zn0Zb#R%i3pH+S!Tvs;m`k->P()H_{k`x*P!2Duw!W4dhptj@ml;rJU;cG&9HrLV;d zN{>#dWc#)`ZT`QWAyMw`ww%elkC=0wTv^|0p4`VHnr!s$brEZV^tDe1(>f;s0Fer6 AO8@`> diff --git a/testing/hosts/winnetou/etc/openssl/certs/24d9077c072f5a22ad0c6f65f9f20ebda2afa491 b/testing/hosts/winnetou/etc/openssl/certs/24d9077c072f5a22ad0c6f65f9f20ebda2afa491 deleted file mode 100644 index b7dae35018125a2e0893b4c1a9ee2fd8cec29ae4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 965 zcmXqLVm@fl#I$k&GZP~d6QhO!FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH8e3WHZn3a zHZ?OciUM*ifm}l<*C3E+YXlAWLDp~!a|ERprzRF9XBdhY2tjP-h6#bJY+_VG_6#E{ z19KB2KLb#li>Zl`kzt$VCaYx+*rOws+xu^dYRxM8E*)#T@p*%A)zqCY6BpiJFL`X! z&t?(DNE!9&DwZtg4|*zvcZB{P4!nLcGQntR-naOAz5D888->rvo&6FYcC%u7dNgqXj}shQdwa}#{Vp=2FyUpfEyT~ zvivM8z*NCzAPeH~v52vVJTLvQ;L}=#vu6{O&m2F&ulf0Ih=M^bNLraC%^;;gBzF1T z0=7V-y64++H*bCVAmNps@B4+GOWdiHj+z)5kmD4XK!I_}$guG7qgFM~g?o3GFdZ^G z;>W&m#wshph>5++|NZ3jdfvn>mwcSdxymc&^>eAT?#=(j3cOdGj5la8=TZ1A*8cya z)-2(#wFUn!$E=(4?3=q@YsjB#VORK%?>x-zEndpwF}W`5^GE(b)BUfXE{_zN_PBbJ z;I!utml%9&G0wRXvv_8I=$Aavngw->9vl+VAG z*25QAckIJfsqC4`3siO+Ozy34{l@=CceC8h!{xuF44q4+-|c=do0-A4{G{%!xKG=6 zu|!{xw>&KH{^3ol6${O_*33}Uo?M^#_21^g*%5LTXP$maHIh&j1wXVrpV!WH_#* zz*6fKZOk*nP3TJ2*9WbP&9Phd-sawMM_{-0wp)wX=O!_F$aY_fX4yvfzgoKdsp;t0`$lMf?9So!`ZMJp%n{{8gfljD6- zhM|)$7*u)0Esxtg!P~IfGS>CPjc@zZ4t!&f>Wn-X^MCdG`#gMinEyMM-!)NnXenEh zlr^bchtpi7lXcgT4d-5Pc5(#i%f~f` zk{_tP;k{Al?cuTM_ycDS`{LzSKKk6++7qndBT(*#q?G2uX9~8dqP5>HN3#22U%$=o6CV6An=K=+%?|?rL}h^k diff --git a/testing/hosts/winnetou/etc/openssl/certs/53c790f4502ef25e04d6924ac63e65ec224495db b/testing/hosts/winnetou/etc/openssl/certs/53c790f4502ef25e04d6924ac63e65ec224495db deleted file mode 100644 index e9c6c8594e230a56a169e634fb0eb8b9ce39cd28..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1061 zcmXqLVo@|`V&+`H%*4pV#Heb(%f_kI=F#?@mywZ&mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4Gj$q49yLV zOw3I!qkvp9AlDSiHHakI8UX`7kTu-G?7<$6y2chJhO!3IV2edWk`s&aa~vSn7X#g- zmtT}_(8Q>O>?uZ82IeM4eg>d87gG}>Bf}1v837;HzutPuq2gst#KRr+PyZd}aLC9J zJ-nlGoBq4*piO4SAF-{O!Mt7|CPP`0Px_LW2;=#yIg3{0zOg#9sn)~lKxL_@`HtjD z_Q+W!e7}QVs4kx`VxXmVqP6_so#x}N=7Q2O$IP3`!{Ry?eiEFvvqZZ%BG5~IzK@Rv zmr%=&54%=vtNJnh$t3}vC(jqLZR4IO`}~AQ@%kH)HTRn@YO=>yY&|e-rpE7+zjm#A z@b?Hu`E4E9>+Wy5yL0cvAB;AAd{W18ibVcCxh49av$7XYid_0;@2u&wwyFJ++@Z6Q zFJ)WA8L3XUDQVX>Dkd#fxb;@ZQ|0=Gi+P9Nn!T&Ly8V3fc_wB?2FArrjBLOVVFJgs ztS}3c0fPZIFjQsvSy-5vm{%Ccf;fCEVk{y*tr$&~RupPS1V~I!b7m8G@v%0`AQvR9 z%#vo1(jXGM{B8kTpi$lPZMmDbK7EkzO3(NGLeC}cR7y)tj0^_yAnOEKBn-qFu}8Wk zNP#?yk%57M-U6KkT5TE`B_#z``ufR5IeMrGL?4L@ltoS}zzhIPD~t>kEq@Lh#Y}x? z^rGNj^!{LuL$cdW8t@0K5sLf$_J=it=%o`q-%n^8gi@%rR{Wez1C2WRl;yloY~ z{N%w*R;w@9xtRS^R$bB07ipdOWX82|6QptPSZ$Ucd|GCRHcmw zYd|h*;Ga+I|BvM^^9s_QP~&$0%5#GA!+sOTZ??r)pU^wA=B9S`vFDvco}D<<-QS zUH7NR_Zi%~J?Ce$<4caqS3dL1uFVeE`t_0FOsBH;gnK-U>c@6vUgzeTn-Kf>uw0VF z69%t~?eYvCXFBG&7fCWX|JG;QHdiT9Py76_MUuSwiTeFtOj8V|-IkIp%UUCv{ILA~ z{QtUv+aC9CI$Lu8TECP&^V92(j~B76H-BvXdYO6NBFlsd#T$y8K5C8iJuem-1UWBx zef5YX`~R!Y<2|p-zia>hjccMn?8XQ&Rr3iuC;R;QyY%F|FlQ!aMh3>kO^mF-5Mczz zwyZDQnQdF#^$39s~g-!JrB;!dU1)WpbOAP2HekVV`;v=M8Z zTY}`}S&R$}4D=T0EYNDx$S5f(u+rC0F3QnEO&|J5T%as+QUT@wU{YaZa9XghzHd)b zwb!dPI$Qz#!7K)j8p4v_f}yH?6#{l4kn1eD~ho(x<*g{cZnz7KZb})4qxI z9A2c`e4yq2+nOhrGksnpJ&FAGZ+lId-d&HLJ-3vZy*FCE`s6AeUC2IXcc+bSZUq&ZgG6p9t{M6kaX^2mQ%u_wu-t#HrBE7jJIE?>Mi=}hb% GzV85cBZq+i diff --git a/testing/hosts/winnetou/etc/openssl/certs/55b8d682bccbba72d48faa4e31b885c589d94e35 b/testing/hosts/winnetou/etc/openssl/certs/55b8d682bccbba72d48faa4e31b885c589d94e35 deleted file mode 100644 index c13108d30a68af8f8a897a66fe289392fba49f98..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1060 zcmXqLVo@+?V&+)D%*4pV#HeJz%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4Gjz|3``6x zj4ezIqkvpfAlDemCCi$`#6&%aRmDL2_413-4Vq9rz{twL+{DPw02Jq9YGPz$SUb`6 zfJEv1$5w&|y{u02wtTe`@w}D#_|%ix(Mkb}7;B4HOMJ|2Yc<$W9l`4-=JWmWvv6w@ z_xhCc(rOkFdA@%*T34Sr_ft%Lf5p>;_kOci+`8WN@XOmeo${_Xn+iie9b9)U=;f}x z(|+t`&Ja76JGEts*!fw@=6?;*z5eMV>z@Ca|36K;`A1rP@n`qYv;Pk$w%6qTGv2@#p?iIb_B-b(a~6vHQW5!dcp~ePmkRIs&mE1P#CdtSg5a)0V&)v~ z_rL9FU#WVZiJ6gsad8u)Brrro!SO09%)(^AV89KGI$3@e7G@^q6$Y{(4j+pci-^#( z;FnE@TdsE-znM6*D`lDIHoppkT#&RfOPWDSgGlW1y9I24Ms?4(T~W zJ(swX6``2vriqaO;u=8~F$0k%AuLfY404Ss3y%R88;3Rfs z#lAnT$k*1#_~_H{cmA*Jw9id$GGDUuV6RE8D0@LgvF+10)nfj4<=Ut9^JU#R6Lfcu z_>v`tX;pPLisxT;{IOT#R)=>@NarX?KdNS*fVi}88> v;OzlxEH{04V%hKhFk7MY*i^rtg6j9Gw2MM--qw2h=*^ePl#2bmYYqbdO$CfX diff --git a/testing/hosts/winnetou/etc/openssl/certs/57b8d46c89658ec3a53e7aec7fd99aa42636d8a8 b/testing/hosts/winnetou/etc/openssl/certs/57b8d46c89658ec3a53e7aec7fd99aa42636d8a8 deleted file mode 100644 index c99060ca1fc2ba568d29217d53629466607752db..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1062 zcmXqLVo@?^V&+=F%*4pV#Asl^%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4NVLzjLZ#9 z4NQ&AqJUgWAlD4aHHaeG8bJeokTu-G96_nYsfk6&8HTb3(qNlKM3NJW@^c&@_7?*k zrI%lnZqUT2gzPIuRtDxKMt%mMI2ThBBO}B1&sWUFPu+iG!Sv`#TfOV){_L6i9{!l* zX}cjbb@g=Khe76x4s3t0VAosCh0`DDH*7yUb5ZQF(v9L`llOgF6FyD(+iv%J#}@yX zAw6@~*&{mqW&)4COy!-`!m-D?YF3@Y8CDJbg^x0Ynd2_IDzwji@J{4+IlrzKJHONt zm8jPq3QPX_FW)b_@ocYj#B~11Db<>vSZ4I`UwHMkYT@tPosUKMF9+^FW0t&c^<0s( zfb{QD!LDK%hH2GKs?sy2-TWB7HHITfbGh2Or2F^nG7cQwd~uiHsmzm~m96&N>4|^( zWwD`U>W+l@5uyK05_w}+Hm=Y}aoPB6hvM04nZV_@&BQ~tUJ_(tW@KPo+{DNR3=t-9 zWXlS(Fc~lya05eCmY;=%nTdIYfh>r_$0Eie5))aF6t1hKGACwA*zC@@r$<@0?KQ{+ zNh`CY8Kg9b#4f*Ez!qp!_k3IK=B-a3B)rn|eZSCii93}NQxhYDfjr1MK^6%Eu}18X zZV6H#&tha?V4$}^XMt9mMn*|Vft9{~a#4;RY68(m;sRxn(+V&L0MiO1L+DBy6J7yE zVRnNFraKzNb-Krq$$=U$LZOimRrwmx^Y$d+7od` zZBg4FZtAP)3b}H!{fn+tUV#3Ei<)c8p2#P7U(7AFWt=4Av2mX82IqNxtACbMY|K6P z@y8h!pM4ESZr!q5ej@MQpQ36G_TrbyViJAEc3p&mo;@8@H GR1W|%2ZPK2 diff --git a/testing/hosts/winnetou/etc/openssl/certs/5bd93cb213b4b31885da0a0efc2a79f4a7070708 b/testing/hosts/winnetou/etc/openssl/certs/5bd93cb213b4b31885da0a0efc2a79f4a7070708 deleted file mode 100644 index 7e3c269a5b4c5298eedac6e4828ecbf4832006e7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1080 zcmXqLVlgpjVwPFJ%*4pV#HeDx%f_kI=F#?@mywZ=mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4Gj$q49yLV zOiT^Tqkvp9AlDSiHHaYE8UX`7kTu-G?7<$6x<*DOhB5|H5Q~L#^YiocAhs6+ourpv zly1<(sD$h%Mpg#qCPsb+pg0#(6C)$T5!=?S+tQ^cG5Zu1x5qHGPhPz-jJ zqHmI0W~|EUh|!s8Vq|hS@Pc;xin(PU4kR3SQp4r*_{y!AJF(}zPGZIQdo zZD5~O?@@BV=SF$umecExS(hA|S1g#V$!(B&e(pQ&6Lr_Z-G00Ynsw*>cIQCB#uI)4t^m|G5)X(y!ItyH;#int6Tg1|zc#(;jk%4h>6QdL`M8v>REi25z zWWZp+4GdISeijyHCgv3evLFs0ix`WDf1~H3qJ+u`nIh#jUEMN~$#ye-8{~qdm08jZ zQW`{Jm)|X53pA>GzAbn2)~62=Ug`P1U+B5Sok~fmiIKrT4rHAmi@1Sk6V^Bv2Fa_k z@ECBhacHwKva+%>Ga6We1m#(b3=9nP7U(R{YSYLlDJihh*H13WK}$6HNNETti=2Ld zc>wDRohGgJmO8v;=aje)9XWTGpWX18cZ$Yjjvv~ar>`z<3*JAO@eNnmbfurBDz;u6 z9GqJeCzP<;FF9d$ZO!+G+048py-8Bn{SGH=I`qbE_uIbw^-90~Yp!0-?j6p#cLFC{ z($6i^az4Cl|7>@XtGHM*s^XyEwtnf}nV(uG3mB!dUD^FQ(&|!h!Q4wts#ijeHTPBV zywPYfUbLn7yFl-412YcxrnZG=a-@7YWmGR-F}Z9V?)tcQ`n^YHJXU7g-8U^*B!9$C UImzj$@Aiu`s{(==Tz1(30OPuX1ONa4 diff --git a/testing/hosts/winnetou/etc/openssl/certs/65b352233dc5cf96ecd69271587e47eea59446f1 b/testing/hosts/winnetou/etc/openssl/certs/65b352233dc5cf96ecd69271587e47eea59446f1 deleted file mode 100644 index 4160279f9f3ba48a80a24368a6fbd4b8146f5fd4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1070 zcmXqLV$m{aVisD!%*4pV#3*mT%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4Gj#8jLeM; z4NQ#O>_bLY2IeM4eg>d87gG}>Bf}aK(+nH2nc7iJy5{B^h14dM zxU~M`-J%qm5Ur0U2m#*7pXxM3-FynSpDUZ|=#gEJD z-81Yef<-G-_yB~)xUO9jJFQe{XA3N79*rNS-e_!xw_40C? z_417|?-XA4Ol0@TJRrNI=IsyB8P(#<^Bx^_PF75zgxf-XjJ!nTkhtqPah<_((`@4&~u49mC{ucBZGkq$T~q5 zQ3K&dED>%Al9gvMGB7aETcEQ*t4$-Lq@=(~Uq87hM-Me|=p%7~vdHNKm=l2Mgpr}Q zE9=&@O4T{X(v7BV@QiakY;`PGbOOsi$7%fYC;tmLddAQBLV9!L$9ruZZx^+;Ei3xI zdr!ta*?%h|lM)ZKo{l-S<)g`TPR59Z{@#2drk|H(#4%Sdd3iOi)sxXy<#T4C(f^FE ztrP3^+Uv_rmFH7BdVWf@U#;2O-Z>dkkIv5D5Pr4d&X&9+C80I{ORgH;xpT_Y`@o83 z;h3z?A9Zd`zTEV&rqAzc!JQ5%si*xx607SHFA7ceEIH&BZe0Jec)>3#zE}FvUjIJ^ zy;N>HIAd`|LH8{ewH;^Q*m!1np5y=W+H#wty_~?*Q1<@XT}R`;JPo?bw)0auZ|tFE NE6?=bv`pW-3jjb>mazZ; diff --git a/testing/hosts/winnetou/etc/openssl/certs/679aaf150f9eef2897cf419485667387a8b8579a b/testing/hosts/winnetou/etc/openssl/certs/679aaf150f9eef2897cf419485667387a8b8579a deleted file mode 100644 index c21b3fed7d34e58e3b152cd51ccc355a7a68a7d5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1059 zcmXqLVv#p!VrE~!%*4pV#Hee)%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4NVLzjLZ#9 zOihfY#`|4=B zw*iKackI~rcAbq(^yPI@?TQ7D1-E>v`BBYs`tWXr^%BKzI~RQnym9}U>A^@5F&kd- z{?44e>)Eri#mc`{GpA*)eVDJ}dF~xU?|Kd2TtUs=6>kqKUD`7_tv`HG-K(pI?#fR4 z!J2=|x93#BE^D!qi<`c^idY)FDC)%Jy}M#Q9jcDrSM(u;vDa_fjK|hdVI6Z%s()v@ z*5dHtPlCzrmGN~`SfvXO2fbeOW97TYU28R>a`~5@HEDSKu(Cm3;9&&Ub&Dk?N0+|6 z#JcM6*Ng0;>na5$m|O1Omyewrv4D$d#;c}%+~U!DwoeXcVrFDuT-?OS1`H7)(Nsm7>G4uk913r z0(llA0|NuS1v(3~+B7msN(!v>^^=Qo^iUIsJ`xuwi=0+~$sd?j7#X}{g@ibjH;Q+r ze||lC;lj(CgYs(>y*PQ_TZ%4TR~`H5zmW6YjgkV{{<#nmn7Sz^d{~&2vP)7Y8eGcc-`o+aQ3U`9 CY=pW1 diff --git a/testing/hosts/winnetou/etc/openssl/certs/694f095095ab926875841456736263fe40696930 b/testing/hosts/winnetou/etc/openssl/certs/694f095095ab926875841456736263fe40696930 deleted file mode 100644 index 415f5c597ab3a2fd3af0d063ee15019d6f8a25af..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1062 zcmXqLVo@?^V&+=F%*4pV#Hek+%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4NVLzjLZ#9 zOiWD8qJUgWAlD4aHE<)^8W{sAh&95w`T2Qz5W9+j4$#XlN;ha?R6_OvBP#=Q6C*zZ zP@IdYiII_ENe%0-qvDPi|3$MImwYx}X1$>$alIV38taNuMQ;9$*S){76*a#4ywuoq z-xrICTk`h!UP?{6|Lsvro{H#~2FCU0PJfx8pFOWdra>v-blb;_&7qsPltffh&kNm3 zGGNT*EMBNKuPOhVUF*NA&fni{+;b@UK+&U1at8z6=duQ!KfQNGMY3b^f))7wtWG52LnGUZqJ(t?8(0orVUAu7n3bQa7Fc@$H167uvg@u`kd4+*2 zh{MMs#v*b<%~tVE&Fy_rmORk~rF75zgxf-XjJ!nTkhtq zPah<_((`@4&~u49l@d-9BZGk)$T~q5aRbpNtZ^<3l2>KnG2mk3&}L&~Wo2h(G_V8- z%Ci_57#Qd+&{?3>rjb!nQedU8pInrKmT2^m(hyJ`#1op^x9NAqikw`^@$_-bd@%o*`VJpX<@<$nIpzE=ksg})tp zTX$#;OS|UEM+Rx)PFELw`TDEBt)*_)nWpsPH5b1~#~ZoL(_e4$Nb2Kl4Y@_rSL8ih zZ(w30d-4qXnwNb>&?L&}OLQxhX2!)9ksPp9bZ>arrIPpN-T-MBC^UtMQw+Z`#(nOmNDE_wZ4WkMy7i;>#h zho4xdSlQ-Tt^YrDLDOrwa{J8_mK{9cG|e^X->a%#w=E`F4Hr(NvrPN*a~4b4C7+cW zrUnE%NN1>*@(6steR0aVeW|Z$j>w{Mlsf0+EXYuc*)isziz_q*qAW01f9f5qps#m`TeO=h)8xpUg`qgjw~ zt?JFjb(+SX)A))eXKQyIcAV(X#LURRxVVXt4HzO!;Fy&aW??d5FyID;sw_VX3o{e* z3IkaXhmS>!MWk!%T-}+cnf}aXFzvP$J6rSoTrZD7E=XFLCCwnEK_qth-2%2iqq^tY zayM^%`XJ$zp6~mGo=e=RlyaIF84Tn>)(Nsm7>G4tk913r0(llA0|NuS1v(3~+B7ms zN(!v>^^=Qo&=QC~QhEW(BBvE#atEdrMuq^#Rgb#=6v_O#@$u}2qxC950kc#s^Y5LC zI52g_Rg0RwxFxN@v!CzUR%%(d;qaRm26La<|NZ6h=$M63>+}?fPqjDZ&Undp;7B=x zT=2dM>5F%+Z*CS?tXIUtFV4)%c1pH+S-{EC+h+c_@RjF7@%*4pV#Hen-%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4UG(p4NVQq zOpFW+qJUg;AlC%SH3%cx8eRi#kTu-GEdI{H0fw>$(qLOfM3NJW@^c&@b{7L3q?ccm zZqUT2gzO_mRtDxKMt%mMI2ThBBO}8GHnf~wUU}l(a+ORDmd+p5Np;NgxNhG6U!!2Nd}CYvnP+Qx>hh1wHVh4) zbiaB^+edXPzF*vvBG#sKIk?5PpAuAHUfY(jl&4GboY{rY{qhX%C#BXOT`OX9ooAlL z%|z)%E4F_OTYl5}7bl0#?9#^uDRGkz}-B+-q|Bsln&GvH&cG0{2S>E5Fbk6b z12~Xn`B_+)nV44?$O3~{mXAe@MdavlacHwK zva+%>GP39!=o)Cl_y&w^@);#11y=g{`N_ovdZ>xT%EH3Jz`zn@x;zUoks9bN&{?3> zrUBKFT$F>RK_5v!P!>6%0kaM;p)oRS)4j3V;pO?2#)df)k2_TM#CP_o-FQDS{Z?V= zPxThX!#Nk1{tmdeiD|9Pl5B?v1IOcg4Nu)KXE?bgTHtY7Va`4;&$@_7_r8b)3Nh#y zKhoLy^h%!DqJUj(kB{vRSoBmd^GMsoKfbAToSu6xtvg%rV@B+XZRafxOM3q8F0z(7 z^GEXJL9vi$96Y|E@AM{QejJ zqw}u`ZOpV>9@R0YWZ(Ae6hY^b+_%FP-Vg92aDfu z`0p-PuDsH+C{Z=h;GMYpfsc>s!x{|MpIP@)WA|6r!$t*jbQrz{&Aa|t{b6l{$+jhb zk1*>eEV|#lQQi9S_J7VHmJ8p6*MH~cm3cP*PVjQ|s?*QxczbR(xAbGB!j5&Drr7O2?)KcNxY8ukRmxu` z_CC%u7dJ7o0Yiid9NDtM zEKCLr2He0gQ#91>v{pW@i$(OzG^$r%7`Vur{_tDGOF7QY7 zRk^$`tE@Y7=Y^cJ-Pu*w3>&VkTe1A^kH&=Gy7}DgYy0zJYxJsqxZLO3ZLz&>!(EcA2?W4HFwdJHG&P(mIXlVjk5uN<6ANqj=CWP~ E0FDiZ@&Et; diff --git a/testing/hosts/winnetou/etc/openssl/certs/982d8252943f432acfacb002a0e576442402ba50 b/testing/hosts/winnetou/etc/openssl/certs/982d8252943f432acfacb002a0e576442402ba50 deleted file mode 100644 index dafc9ed48adc19b493269b16e408a13a12f7ba44..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 959 zcmXqLV%}}g#I$$;GZP~d6QiO5FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH8e0VF)%Z* zG&M0cjskKmfm{zvj!*Tq!t?r8t_A`AR1e=QR7U@*P$mHlA8NW6!DwlWg9;39711 zXiAtWr1tZvoxHi!Wrd`uh3`7&-~OA1$Jw}wz{Dr(Z@*Kzm7v_XAy7HMyla)nom*S? ze9$_#eThZ?#qf)-t1o?BfAnifBNH4St~G z>Av^o{?_Z7Q1N%tHzDR(yN|Y~*%w*-Z2q=t^7ABgr!arAku+vg{*-^I-n z;?z}8bgG)MZr{_tQFmSDvNz1T@VsJ{D~D6kXN`b~Udt1sT8m9)J^dl_HG6vP&qdc5 z_66OVHDw|51L<`C%7p7?J00$-i#Uo|^6mdx_`Rk%CNa7O*RyYrq|rC8)E-K{yd|J(dPZdT@p##0t2 y2~JR)nr3e7yk_B4hSgC|Htu0(aO?J-UVQyvY)VY+Cv)@o6KVD@@@JPvXaE2UtZr2R diff --git a/testing/hosts/winnetou/etc/openssl/certs/cb516460e6f70eb2601effee6b7b6c7884c23fdb b/testing/hosts/winnetou/etc/openssl/certs/cb516460e6f70eb2601effee6b7b6c7884c23fdb deleted file mode 100644 index d23de6fd024642b24f3ad4e228491e863c8158a6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1095 zcmXqLVsSQTV%A>3%*4pV#3*OL%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4J-`}jZ6%U zObtzqqr`a)O@LfuDAypJXlvvRWI@(&3yb+X2L~twXQt<6=A|n*mX>7X7iE@I8p;?* zLEIsnpIls^2XRa>(1m*WMd=1jj7rE}WMpMvZerwT0E%-lH8C|wR@-gj)Hu?OGb zD?IO;x%ch~j~99WHJAJUFUC2)6mw(NRce;}+q=4;eMYv2Y31Vw2Sps^xxPPNyzEx? z|Fb18r!rWqx@MJdEM?&{Cd&xFzn>~NlDA#2npT-4VfjwI*LsnyN5^gFYgy$AS?ZPn z510ZZKUJNtP@c(n<>|(YhR?EF)?X-hbZgyU{Va=t-@0yUedG$I7oMK1Cr;7| zvLyO-&()cS9u?ev)$ZKF=ie-|?6tg-g?Q%dBB7}sg`27;6$h<;EVcCV7Z;IThfQxy z%&FaSh=KhESKvoppPN+|XFgle%hj-A;@z%A+23w&usd0}@`2^y#Sy&i7d9=QvptiE znUR5UaTB8yFhs<_F)u63!eqc;zzqykS$-B4W+vtp;3$ygV-aH!F`1Y*(P+P^s`D9* zlJ`xA!Y5S<7aQb))GD*28Kg9b#4f*Ez!qp!_k3IK=B-a3B)rn|eZSCii93~2RudzG zfgH#>K^AcX(I%{ME)0@aW#KX4V&l+eV`ODzXXZ4p1PRKs7#SEC=q=D$pw*_4QBqQ1 zrLUh{l!KON^pVmKP!>7;0J8`%{V+1*R$Nb;uk;~{JtU8$*cBXSsm*ow;i>c zEq!7({@VG@y1>{nTx#dkKw}0~X`fYFmWQrS&du)-&#K=r{hp^tmU`9(r-p0GX1`~N z6Rf@37oxDJ>`Ge1nmIz3zn%)2aZ2&c!O(^J8Qiff0hi(mRBs61bP43^a^jF^d6sxC zsWB6iwOe5g2QL4fG=ZFP=&E*w$x m`Fj0>@Q?DBB}cmW6vU0zSsYrrBB@n;;nJ_oRUcZ diff --git a/testing/hosts/winnetou/etc/openssl/certs/e079576c2006eb01569cb79c6e39dbb488050a86 b/testing/hosts/winnetou/etc/openssl/certs/e079576c2006eb01569cb79c6e39dbb488050a86 deleted file mode 100644 index f16e12410d18e3a346ea0d3bf5a60fb94d6975ab..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1092 zcmXqLVsS8NV%Au|%*4pV#Heh*%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rlfWkOWCF3kx9x6@v2fOB9?P4dldm4GjzpjSLLU zOf8L!qJUgeLqkJLDAyo`XlrB)q(Ihi3k!#37L}AH<|u>(_$jz2mZX*^RvJQOnT3UO z6N`%VATB8eI!`aZDBYlmQ3=_9jI0dIO^o~uKyfanCPqevOD1oQRknufo8><)PnxsG zfqUKI>3=f=dL$L?UY<>yoV$Gn8%qFBYsHHK234E%#6+!|59JEYPCH46zh%Bs@hE)q z?JNBg}_!cs`5j27xj~$usxt@BfkF`y5=i_Kwe_{nG*yR;_>W&TQHa zJK_BWvl9wRek^&Dm&UPk`uu`~D^0y>0-g~o`R}iryM%kmY38pD$p$lX&#e5KcJu2& z$AG6Rl#-YI>Ft;i_R_1b{&9-tY=K5~&$s1n-um=G!Ye)B_X|CjxKk-vH8C<6$bqaA zWDz$IZNeJo!XSB779ImGHV$nzMpjmKW<~=`kf1z^k%57M-U6KkT5TE`B_#z``ufR5 zIcSMSA1Mt1Ws%blFn<8k4DCk_>cEw{Ka?Sr#Jll7K+6Xs6Ly4d$V zh3)l?$VsQ-%`|SVkE?!V5OLy;Q_bUsxbQD$xl%&U$`-vza5(F+Ch%Xe{q8F7m7$l- z6lZDdTG|}!Y&M7I-ox8l*DO$wc35}1$YP6f#hot|Y#9o*%eq+JT=_72YyQU&kwtTD ztuEK;m09a3oIP+R<eD{KuN3=RRwR+y2$l4=X&{D|$WY zxN)UQ{IeYUO(CHS-oCl@+Rg{Ubh;L)eCXzVX=!1prP05TXs^7mlg6C*1yL>R$QEi25z zWWZp+4GdISeijyHCgv3evLFs0ix`W@v+cVU#Y|(m>t1tr>GzcAHwK613mfEuq?K9H z3{o0IVwc}7U<)*=d%i7q^VX*i5?<-~zF+9M#GOh>sfm%nKn`S`Ad9$xXd~7*w*<+{ zvltl|80am~S)kRXkx^1oV5P60T$H1Snm+WAxIkItqykL-z@);+pzHF{$LpcGUDiDA z%vK9O-`lIcEkAglz0tv*ZS^$1T?*Z&_Ia9~Tlq8bn@8+tk^gd8zt2Tk*Csh-JZ1Qm zp;@L-UD3kZ!BMoa<$7JJ#HnjXP3PF=uH5J^=`{1$)=kxu6%YD6dB#^S65O#^5di4ZMlAlFxt#VkK*EVoqu?%n8iG9AG}kvL;3) zWG^wYGB7tW@&moh$i>ve$jETW&sS|`kNM6(`Gu;xWDEREB4om5zxpDk@K0pBS+R%v zUv{zCq4!sn+pb)EUaH6MhWLj#Mi<%7bDa&3?Yfb;>AR1e=QR7U@*P$mHlA8NW6!Dw zlWg9;39711XiAtWr1tZvoxHi!Wrd`uh3`7&-~OA1$Jw}wz{Dr(Z@*Kzm7v_XAy7HM zyla)nom*S?e9$_#eThZ?#qf)-t1o?BfAnifBNH35i~as;IF{#kx#@5K#k+cwQU@ae^$e;a4= z6$P()i zPi{CWD0TT-+$ERqN3yG5{eST;F-|eR6S{W8438pNtiMnTu#W?ho?#TgCA2%+19z U>cScATe^6d#E+*<$+z+V0Lbxyvj6}9 diff --git a/testing/hosts/winnetou/etc/openssl/certs/research/29d8bec44f188d61072bad52bfaf6f8553342f15 b/testing/hosts/winnetou/etc/openssl/certs/research/29d8bec44f188d61072bad52bfaf6f8553342f15 deleted file mode 100644 index a82b76e5e8a3c1eeb554f7f59ebbb9affad2779d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1013 zcmXqLV*Y5*#B_53GZP~d6C;ZOFB_*;n@8JsUPeY%RtAGWLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xYfFC5qEzA*=TAZ3#l$>EGVju((Vix9x2`M-` z8pw(B8kifH7#SE?8kw4!M2Yhn8X1@vT0pr5QIuFIYak7_QbZ&t zi_#667?qHH$jHjT+{DPw02Jq9YGPz$IKRSAwR(z1se+wp<%KJa9v4gJuo!%BFphCv z)#G`jDRURUh|=pR`Y!LC$|};Q-}--r*F;m`O~AvC(*=K;{5kH~SK7w#zOu(j-DH0A z&NuOE{sjtYebO+0eS%l^wZw${Z`+Kw>hbaTH><^mYhQV*crWkyj{9-%pWJCveUd)m z?*B!_nPpaCyD#1QVl{7$h?z&rgT>ta!6eC)h7N?$ie(yy0i-R|g`vnE=x&JpRet*x8_8H+EC)!OH9~6-{wqkji(G6kAtIKR+xp! zfWd$p7^brPEG*1S%qt9JK^#67F&2^T6*vFB+AY@X$*0b=DVyV6sQ+D_f}ne29T?`2t+wN95@G~K82g>12&y_Mxd?{TZZ^SYJ? zVi_2}dUBc_*|Fp(*VeC&txH85F2*>=8&;mIJh|X}n(FKa8;?jO3p4pH{*ftmgPm6RU_laPRu1^!W{K zp;6OiqqlD7wVj&WCs6o!rMlJT)=H)$PyadHEi(*V+8@6oruU2S-?x_^O5Xld8nCKi k`N^aFwLNbCdwwsQe{5OEegp3wlZ(x*+8lE&o~y9|0I#2ZU;qFB diff --git a/testing/hosts/winnetou/etc/openssl/certs/research/91b2e4f8a1612a34c646fb8320aaf374cc78ab7b b/testing/hosts/winnetou/etc/openssl/certs/research/91b2e4f8a1612a34c646fb8320aaf374cc78ab7b deleted file mode 100644 index dd144594f9e4d5e48901466f85076535cb187ad8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1072 zcmXqLV$m^ZVisAz%*4pV#K>sC%f_kI=F#?@mywZ`mBAp;klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rg`;;0H-@3v&de7N;f_C1)6l7zlxcn1#7vLJH1~ z26E!O2BrqaM#cu_1|~+vQR2LY20*S6lxq-0iIuVj(qJn^M3NJW@^c&@4lD*bP%pnI z-Jpq43E78?tPIRejQk8haW1ANMn;D7EBsWer)ZQa*qK&dxYFoxv2+fL!3PK980S?z zo=2K8ckzoTy`G})^4_VeB7OR;|5tcTGzH!SJp4Fa@TbY21|}|1Y)Q8;`R$EwIV{ zvAjz$qLpcJ>Z#}VPISLGc;mQVP~e{Xf1~2}_xxy|5zcX<-E{Fm5qV=<1}CvCvdtAm zziz%e9Ww2)VKq0C%Y(+V2PY(&6(;(z_R6cb)G;h=W@2V!U|ih9$N~%z25`j73bQa7 zFc@$HLsgcag@u`kd4+*2h{MMs#v;4ycM)+(Gmo1lE=_z8Z^&v!!<7J4pmH*h67mZc3O!BHwKgh*`)LHYS5z{J$V z$YUT6vQCgi!a%GMd!(C#6v(p}80Z=3EYMn@(WaJBQc_^0ub*6$qlcP6^oyWrR}UzM zoKk>!0hm%48ALAMTb3Plak;H;`fjP%uQe<6>X#)s{`NU6|8Di-7x9-5hNQ1pfqLde=L$ zrV1VMeev?$gZ-D^ZTt9sRb0Tb&usH~_t&e|T*%t@n!zGNZ{7oyMP@dO8P06wzbzJe zwy*g3ykkEeO#D0b#oX`)d;R)L{Jx)_7^}FR3!TQ(cS>;W`s}jk=g9#N_!_w0a-THN z6FuXcc3|b^Tbp0A1vHBZ5;tex{de>|FT326XvcdImkRC+CU|kpl@6D6 Z(>?d!Fyn*GY|C3qJ@5Re`{7uX4*=cXlL`O; diff --git a/testing/hosts/winnetou/etc/openssl/certs/research/fc384911d10e35814a20c92642873925eada85c3 b/testing/hosts/winnetou/etc/openssl/certs/research/fc384911d10e35814a20c92642873925eada85c3 deleted file mode 100644 index 6a41d41f000c1040e74601659e929dfd65fa18a7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1132 zcmXqLV#zRQVh&iq%*4pV#K>&G%f_kI=F#?@mywZ`mBAp;klTQhjX9KsO_<5q!%)&d z9K_)g7Vyc;E3Hr{E-A{-OAjtj%rg`;;0H-@3v&de7N;f_C1)6l7zlxcn1#7vLJH1~ z26E!O2IdCFMy5uF2FAt)QR2LYMnJAHlxt8)w3QkLY7i^s;pY202L~twXQt<6=A|n* zmX>7X7iE@I8mby7LtG-0pIls^R|IvT9>o2{K=@8B- zAhhValXIQ$UBO+)omR2UW{T~)!+qPm)o}3g0>Evm8$`%~#N_O)Wb_OgJvf|v9v+_Dy%9OCPllimHO}MAK zT!WjhGo!kX*J8)UoT&HPc8IBM_%d5-S={@D5zq4b8+bI@-HxjCXPs_aed=>$N66P- zcORDj(fvF1`O4NGQO9DWg3nD^meFCE7H?{*9VYQUVuh?n`&;H2tZjCmAIm)R(fzke zGr{e??gthVy=&p`b(xqM85kEgF)9K>L>8PbWQAFn3>XZ!fuSqQ&%(mY#Js{l7R2FW z5n~bgENZdK>0FbORPDLXa`W7$Fc&=kXOIh$R%S^vNNEsxUix9dr?m=a&n76JIevm) z^Yh&hg@v9=+znibP6W~hl8~qsLL^3op#1z2U|Iu4o`E{ZIzbi%1Gy&rkuMBVsLH}) zz{SR)%?3>U?97}7<{&|N76Su41Dyq03pCo)GD=Dctn~Ghi*nFXk3KwA0p*aB5ilPC zlMy2WPi=YOTaHhqcc1Ne&YP}sXS$;mqtEWtrJt?56dzqpoOz}A%kt^oBD!@AikFQw zqxswSGc_HNe{@5kG+=J7si4u^OC_6k`WUCK`06vy@Nt&u#2>oM4^718$o$XoFwZPp z+%q%pvitOCc@>vk=j{LRL~h&X;UmGffVU}C;n;M>Dt`Nme1FRKxTt*Y=dJX6a-;n0 zQ;*mMmw)TFm|Gb6%ST8xh`38uR$4il^xajiv(5>8fmK!1nS=rzjVR%pHg7K%JoMczD&=s^YkDNCiwKX7MC)_j_{W$gj6 z3x|a`ZcjMi^ueQP+gb+h&G!Um&*{0it*&foSzk$qmv&`YOXQ8oydK_ZA29 z=5#2Wuli^1{U+<6#Y1(U=SAx;bn#3&rG1zG)S3^ARkG@*o6CoLnQnd9y7Kmx&?W5+ zW)Vv|DoXxpmrRis{P91BZ~lyZ`=@-L$ffZ@d*yO-CT2zk#>GvHoxl)j1;@XvFbk6b zg8?@%P-Xd9SeTiZR~X2GID9N(EFzAl@6KByuQR7?*M-{6rrxa+mMuSL(AWc#S7vE! zF=%XT5K*jO{@VP)Vs80`cbwSd1mkTk35YC=TM|RdB-X^q@M--s_f3A?ZU%B7*9fwR z8;CYxO%uW(c~ur311>fWZ8k<$R(57a14odcJd2fqg@M@ulLba?1{ozK1y=g{$wfJ6 ziAo=l#^Q_8l0i8@52(t(6=obGJ0s(N7Bd4A10fbB21WxOW@ZL1MrKxq11o?$IiMJm zfdsQ4!@mOz$bb>3?B7A;JHzq8$E625OD4;`{>Z1^$zEb}&nw(& z&(;?mKW*037G5@!y1DWEF_i-!6;^xw-kY59xt8I9<~g-97fy6Vyiqc0`0@3y?h}#3 z{t5doKALN?QfVcJhmF{JOZTQ{-Kr-9=kJ{A9W{SXN_NjAgGDQfa#!aTev++twE2K> z@a9PKDVhQ&*>ue&*fZWLZwz4xUNPmOnaM7J`%<+gUp}q;vz5!Cy;yPUXBGb)5pe9Jcvm;bxqP5Pdn`!=3U2{jh0 osZRfCed9u4->Qcib9S))@i>3G!T6ow`KObcQ$J0-X#MmV0DeEDv;Y7A diff --git a/testing/hosts/winnetou/etc/openssl/certs/rfc3779/6645da3911d7f86e5410b698e2a441f1e2e4491a b/testing/hosts/winnetou/etc/openssl/certs/rfc3779/6645da3911d7f86e5410b698e2a441f1e2e4491a deleted file mode 100644 index 1a40299f26daf5da4b0fc2058dcaa986bc18a966..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1188 zcmXqLVp(9&#N4rfnTe5!iIKyAmyJ`a&73yUI@DL^F^ zoE;71#CZ)(42_J;4J=GeOwFT!TuUI=5Xv=(pulb!11YfGBEl(&WvLDj2NVO{sh3}r zZqUT2gzQm9RtDxKMt%mMI2ThBBO}90l_dc;6xr_II`^scx7##3!F#!<V z!*8-b4E^)If94wff_15W^XD_p;BUHl{z!;aKt+^GYlOOPE&BuQmzi~MUcGqeI)SD5 z=)6jPXX6I$>&dHhyif3ysWd-#OYQP|l^Xrr<*o8d;{_L!7R|TNW9no$VX!8vYmL>9 zZEx9@*3{Y9I@@LX95+!~&c7<>;Ire4-aec4ar>J3y-duE42+AL7z=?Rk_(Q1Sz#6? z0|oBTF|RO?1#$RT#8^Z&NSv<>dG^*+II}vf?yv1hmTfcR4H|nu^2#iY zEe4H^4I+y5%U_#cSj;WI@QxFkoM61oB>|CzaZ6%onZ%kn89uFl=Dx|V+s!}@SGb;lZGXoQlI{rNe5gYpaE6q_L77LWFX`<7XHy201Z-KyFU`-#IOy38p` zrQAhK-r$Y?FI%ImHTTafoBBz56OZCMhM6}i+@?JH{gXLFaluu^L#x>KS|6-?W&Qm~ z&k9yASK+4*eGhVO@~^p);p^WmwDWL8;IZHK8rMVbb9eu=gm{CzV#-3b?ONb(!6-*o~++$u}AMu Xp5IboQ116DK5$`MrUO5B_-S(h8=0K( diff --git a/testing/hosts/winnetou/etc/openssl/certs/rfc3779/e2d52f0f42f61f786f1c570a4acc8fa8d72a329f b/testing/hosts/winnetou/etc/openssl/certs/rfc3779/e2d52f0f42f61f786f1c570a4acc8fa8d72a329f deleted file mode 100644 index 49f4ad7194bef3a0d0fbafb516754629b082733b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1210 zcmXqLV%cWU#5`{SGZP~d6C;}eFB_*;n@8JsUPeZ4RtAG8Lv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xIfDa_aEzBO|=4@QxhX2!~5OLD-y-usT|S%xlrC&X!h5pDz_QG(qHMFtb24! zVSZ*S@9m(H9%XsES#wVcw{*uedlxITcLnW!bV+_Wo8gVMGPmvoi?nt-eTb6HQdGaP zpt(^sv~p7Rw=d?JJ4H|DmL5qkNw5E5bbj-d4{06qq&~%@X7sWA-+1KPk;OSNi*%1w zT|WD>WZJJ>$G!eGNvB?3>fiBe(|Pt8is@hM#*n`M-#y zE!^4=cf2w6^$q1;SDxPa{W?%f_TM*Osk=F6|7)u=F*7nSE^cD%0ES2lIQnIUS(pqM z47h<|D$CEp!py|H!ax?p;bReF5jk&dS{GZGcAHWBn|<%GrQw|dS#J#*dqDEaER8J& zjg1W=iuKE1n_pPWEx+)N6Pui1yv-#6k%e(fVrZGdnm8Fgt$*ge$*`>Y?99QL)t?tCPPqGccXnwr9(P z6;rM>FTd+o=rN`C9LskDVZ(xO*)L8ZM$^t_&Z*pAG&}Tvx#7MA>&r^Ml}2l-z2BQX z;osTGaXQ>#X>TT)FHW8LYVnnuFJC@n7m#|eu-JG8`Ln7xLZ=X zri=T|)$&83AFIUU2*~a~g=7qZ)R{ej@ naM_gd&8OX$JzH`ynR}&33-7^cDZbSU%nAbUg@2QgT^a!ZZzZaF diff --git a/testing/hosts/winnetou/etc/openssl/certs/rfc3779/f22389d26d00a7ddb5ff61f3b2e66022b18b2e3d b/testing/hosts/winnetou/etc/openssl/certs/rfc3779/f22389d26d00a7ddb5ff61f3b2e66022b18b2e3d deleted file mode 100644 index 267516b0c1820b7194d26a4f0dca27e2ee389985..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1190 zcmXqLVp(L+#N4%jnTe5!iILramyJ`a&73yUI@DL^F^ zoE;71#CZ)(42_J;4J=FzjSZrJTuUI=5Xv=(q`+=j18K0`A|lC&Mfo`n5Em2!9jcdK zly1<(sD$iOMpg#qCPsb+pg0#(6C)$TM$N+Qhc48|aPE#eJnhbuix-uJ7TEcVPDs*U zV7QW5Ds`FYbJG~7$69}%6n2#vo|$X%YuDXBwy|aJvVWY}mMB>gZeKQa#=bMt>y^G( zyhwcR{Pe*6ebqjNg;REz@@+Uj@3tI+;F(iQU5B%e9xf5@6S_EO`N!w(6a2)(+fA0g zQf6On@MOn4kAoeo9H%7I%d*R7CW#!{yu#zsj{xV0!}`kWJ+tiAF5ADu zQ#T&6Q$4@qm?<|~isS*_^3?~mr!ktTxvqMUEGDG#Q6Xefqe>vN;jhUm_XL-%o;EWk zC+*wDvmYy#{bAn_DbA%bY3`H_4037Cmu$+KKbq)dZ@JFI%*epFxQVd{7$SM#1RyKS z!eqc;zzqylS$-B4W+vtp2C^UyABz}^$ZcCrZ)=ZBafdwR7Y8J~-7X?*eBGe22PCh| z(%53q*w`SVSik(W`Gv*Y@(b@cvB?R>+guV5Ss1q@hL&lpiId^e`e*K&{JPx?{%0{ZFf5`GbO)JhLF1GLy_oVc-Gj}?AnO=?F!F4%M@`Xv(?Y57T-5c3&z2|sb zp>TGY?Nhlw^BTK_jQT!EGgtGyV84_(U2|e>Ou5BIzyF!uPiNMZZLyxRK(YDqpVl3V zo+dp1FzeJh?%V1Krn?KK-db_E_s?VQLO%;jd6sJ(8*V6$mY?_2IXp<8nkW2R62s-6?&W30OINSpl&C8NkAftpVzy4Ivj{vK4} zx?tni8E;xneckE*tiodxm(v0dJ;`$m9}4|?8t(p6XUmsEFRRY9Rj*o7w(G&8npw$b a*X;;>7}P7#@mIFg$EM=iyqc(%GkXDdBAm|v diff --git a/testing/hosts/winnetou/etc/openssl/certs/sales/3f24becda29cf44f0e4e89f894b925ab7e7a0aac b/testing/hosts/winnetou/etc/openssl/certs/sales/3f24becda29cf44f0e4e89f894b925ab7e7a0aac deleted file mode 100644 index 83ae4280fd423d0ffdfa5888ad87706ea880ea6c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1056 zcmXqLVv#XuVrE&u%*4pV#K>sC%f_kI=F#?@mywZ`mBGNp#hL<1mzlpk!_ibffU#>5#f}?vQ!6%vxOBoQtW6k&)rl0>Mk#Zc0zq{uQZFs5t7g@&9xk&2@=a4m(adJ4fT+ zItJnHUzSfNN*9F$@mXm18nJWzKKETm-#XCu+u2po)r%iKUe^2MyaUexE4!<4W=QW|eC?2lf-|Hn7w;`UvDqLOB(2PnW{}b#5eO{ha^0tG4lVoNrev(vw{+#-yl7MOJ)6l# zIVLx`27O(o% zAKE_Z?szYF?`F(xr7Eo|=eWGUnX$dr_hcjXeACYmP1!m(%fd5$t?EK88|gQ`)4W(d zua6%f_kI=F#?@mywZ`mBGNFgYh zf9n{8yMI|eohV%t62xbr-D||o_50j+9ewLS-*0DEMOQC=_;^|Glk*Nd2dwO_#+f;J zR9y`UyYiRU>8C=Uiuw=FAS2$qdoN~iG&8g|ODsJz{GYV*hWEi)@A5C4y&S*pP9kFh+hX3jpHD6seY)=D zBDc%b%0kK4;wvwE<#Y8QjkGOlpPBtX_BlSOd2gxHD)c!|Cfw>COMj+H;%-}oox6LM z?T!5^p*&xov+4LD!Ocsy1#OtSG0sDtfr-_ppNW}~fpKvYBL^@h{L>3OdMF9+sphfEZlA!WIEZ~2MM2Du<qokz3N?$)exwybc4>hq^Sy)&Y zA*U8#E&!$$Mus-=*};~APj{y3ZNHT7_%Ep1M4bO&z1Dk`AEzvj{aJOX2JHKYi=Ba6V47>4|x_hbwpH;j-jDlXXjZPg~uY(z5too3BgEB}?zn zDcHcAw5&RryC3r4CO~W&NOj zsAKUB{?|KCsYG0#@M5XUclH}!0IMR?hqbjKIJvd`=^>^rsy4Q*|yVk%afmB Y2No#YTYHDm2CC+PT0OXoNxdwqmTLv|pTbLs#wKz4gC^^GW#6SpQA2&=0WMvbh z60(;VSs9p{82K51;#^EkjEoH1EH_y#d%zwYvE1H&Q&ekK(Rb-s+l|i~gsZ0Re3`iL z{(8w{n|?NnC`QVtS68uQIe*YoDZC@}_i*6#laUEVOCzuBy&1E7z9O4dVXg6X`%BF1 zG8Zy=rkp!ysF2zh>Sk8G$McC$z7 zvSthS+nq`eZOqm$x@Ya!(a(55sy(@So6_^ALGr%E*X!L^AKNH=M(*sF_`qBLaz&c^ zD}M869sJ0cD)ITq$sX~)LDEg8!X<|-=Dt~H$;8aaz__^asX^l-aD2%MGcx{XVKra| zQU=_>0F~uuVF9KMHUn7@hmS>!MdW$uhXtS3Dx5u=pnT@|34YDbcS95mazWC{ENKQQ z4I=Tgh24HC6rEtW+Oc)HkKXiG+>ft9{~a#4;RL`yL+RqEvzrRx`i(xVq(Az7c zb<7RU+IW9|`O#JNe~C8V{w9{JnVdT1I!>$#JGZrc57&-=F@ZbfP|(ze9esi?7c8AB zc!sy<_Qf~}lRcZtAB8qLPF4^8%Jo{Vrbd}(saL|(#Q-YBdd2_% diff --git a/testing/hosts/winnetou/etc/openssl/certs/sales/fcc1991dae2d8444c841c386e1921c59882afcf2 b/testing/hosts/winnetou/etc/openssl/certs/sales/fcc1991dae2d8444c841c386e1921c59882afcf2 deleted file mode 100644 index 63294efabed9c743f43831b4aa09f26acf3f3c95..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1114 zcmXqLVhJ;7Vzyhr%*4pV#K>&G%f_kI=F#?@mywZ`mBGN*)%p;{C|?meImGpYglgX4&FNp$vR_ zor$q)?pRA??{k=%out3J_jdKm?{|v)<~bQXn;Ffvyyfdl|B{Pyj<&BkJx|(J`^$#U z8f}K`5_69|^|TY3UMBmpJSqA6O}XPbIT0VjCLcS_K0D>}qjfLkA`HEQS^Z9)b9gsB z%Pjg?y-wp#=JD?)$XE=lbQZGn%rnU=?t^QpBuWS?|nUa!5Pj2@#}b} z$FgP|sOWY3F`to%nUR5UaTB97Fhs<`X+c()g~@=yfEyUJvivM8%uLKH3}itZJ{B<+ zk>uKkm4PQ~O!>}Fjrt%PYWpf7E6*SoB(2PnW{}b#5%lwWda+`+_v7Og58tonm7bcuAZ=Io@s+dJMV3E1cG+b0ne#zhZ{t~i zUaAOfK4xBY=yZ0Mb;QeNpW|=$TQB_n549IW z=bmYg^O`A~5ix5QTUGeJfE@X$LVr2_wSIItTE^R5`F&AZT9TIs-_5m3k2FoZL>TOq zRJ+c3u_>+FcWOz_kwZssnlxU?Dl{xfbi8AsX3|is#59|iJFdE}lmEgAt2F`_IcBm? OQi?r$&Wve#&29kRZHJ`* diff --git a/testing/hosts/winnetou/etc/openssl/crlnumber b/testing/hosts/winnetou/etc/openssl/crlnumber deleted file mode 100644 index eeee65ec4..000000000 --- a/testing/hosts/winnetou/etc/openssl/crlnumber +++ /dev/null @@ -1 +0,0 @@ -05 diff --git a/testing/hosts/winnetou/etc/openssl/crlnumber.old b/testing/hosts/winnetou/etc/openssl/crlnumber.old deleted file mode 100644 index 64969239d..000000000 --- a/testing/hosts/winnetou/etc/openssl/crlnumber.old +++ /dev/null @@ -1 +0,0 @@ -04 diff --git a/testing/hosts/winnetou/etc/openssl/duck/.rand b/testing/hosts/winnetou/etc/openssl/duck/.rand deleted file mode 100644 index 49c56672c49e207210b908f7ba234986e33c26b6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1024 zcmV+b1poV*-wD=QP43q3}=zgBKPe3`q=Gl5IUk%7M(EpOXQ>rb{qRTbal^g%IKb!)0kIAs7?}Q9{a$<*^-~QVF}f!UW?E~qYGf(r zt(B?sd$c}Bt*m17IYROP<30&74W5xy@@CIn6ae05>tI zaJdnbl}A2zXXqv{1>#Ws-PhARV@llrJgNhK$TSRy{V6HKtif|wt@$e#SQKwo>2*X2 z2A>+>lOeGlf_4))w&knLM3XFy<9qXe6I9U&wjL!}7Y(HQpcd@0Aj+~m^%mvz>MiIw zH^&$u_|0HVovaA(`&Cl((%t74g`h_&t!hh-hoQhBrw2JbDF}$0HUkyl93*khp<{%7 z>O}Jasovk54RS>#jk22{8l<8ycEqkv8|eMI4x)wfDr^XH@xw&_nlM7Sit%t#VK}Cv z39@T_4a({W(5}i(wH$HOq@)|?mSa^a+2zO5Jk(nwS@mVCr_V0_TnNkHMrMyOt^sWf zD8dtk4SYX~$^R$@iyV0R%B$P0j;9T&^*B_P(DLjnlSs+g;I)~z09G{Uj;Rjo*XEZ_ z6#~$NK<{~PUpdP-KplAOAj0L(isn2hlJWwA4A#-QGQ(dQ;RxIB4aS!tJ&4CVEd^c& un|<0D9ZNMY(5Eq1-Qm>{YCaz1n(!x?Tfw8*?sj94KpBh}D`vK#Lvj|Z*Y;ol diff --git a/testing/hosts/winnetou/etc/openssl/duck/crlnumber b/testing/hosts/winnetou/etc/openssl/duck/crlnumber deleted file mode 100644 index 8a0f05e16..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/crlnumber +++ /dev/null @@ -1 +0,0 @@ -01 diff --git a/testing/hosts/winnetou/etc/openssl/duck/duckCert.pem b/testing/hosts/winnetou/etc/openssl/duck/duckCert.pem deleted file mode 100644 index 2076242cc..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/duckCert.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID0jCCArqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE0MTEyODIyMDcwOFoXDTE5MDQwMTIyMDcw -OFowVjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMRkwFwYDVQQDExBEdWNrIFJlc2VhcmNoIENBMIIBIjAN -BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu984h2mkpbWJZc9Ydka6jC84EkPz -w6tqtEkIdftEawgc5gvlC80JXLTwnQySMTb49KByyt44S59ZWE6SHHV0u2P2ihiw -1duoY7NE+RZwODEsWVgnDRZmyume2Bj+Hpkugm6o+rL7jiGxhvNLeoFZK3RyD6IR -IcEfZeAv7URGz7xdrzmK/vWXukfEnU8DlrFDSQUb3NaJS5tVVVLFuTWQBSjuT3NX -7mdNHnpjcwT9/ruyOaNQ0DV2Bgz1nCiOup+oW396/AInb03CQ+wIqQpB9reWma0w -F0Bc9lZxnv9ppYgBPsOTjE3yyyeTptzk9Gw+DFV1cw8Crm+aew5VH18oEwIDAQAB -o4GvMIGsMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBSK -cODKpRxkbyuSuXNcAayQG/35NTBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBIDANBgkqhkiG9w0BAQsF -AAOCAQEAMtm7ldvd45818Ghl8+Z7PfCnRXDPbikyCJn5PXkuR3TSB62ekJSGT1Rd -i2rnDoIZpfSzDQSpKH616MuWtwJoomJh8n9wCzbdUv1sn1cfgjDSkgLqIbm/Xpc4 -zUcHnZFdwvMr3sq/xSO/SgkfgTHi8bFLLp2RQwPNsNycT94nNE7DRjSeRenpuEPM -4t4xIZCoUyX3sdusHvh+dDu4iuIVQoM0zaW9p7pVh210ALt0jac3HW0rQXtbfchE -VeuDLZ0G7baFZ9LLLWpuQB4zPRUET7puvzabsf+sHpO54y+zXRaB0tbiFIurt4gF -5n7mN4ssNQdcD86W5lnI9pT5s1uvdw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/duck/duckKey.pem b/testing/hosts/winnetou/etc/openssl/duck/duckKey.pem deleted file mode 100644 index a5b46cc6c..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/duckKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpQIBAAKCAQEAu984h2mkpbWJZc9Ydka6jC84EkPzw6tqtEkIdftEawgc5gvl -C80JXLTwnQySMTb49KByyt44S59ZWE6SHHV0u2P2ihiw1duoY7NE+RZwODEsWVgn -DRZmyume2Bj+Hpkugm6o+rL7jiGxhvNLeoFZK3RyD6IRIcEfZeAv7URGz7xdrzmK -/vWXukfEnU8DlrFDSQUb3NaJS5tVVVLFuTWQBSjuT3NX7mdNHnpjcwT9/ruyOaNQ -0DV2Bgz1nCiOup+oW396/AInb03CQ+wIqQpB9reWma0wF0Bc9lZxnv9ppYgBPsOT -jE3yyyeTptzk9Gw+DFV1cw8Crm+aew5VH18oEwIDAQABAoIBADxEv72xBkCinBEt -ExPeXLnb7ADwC6MZuoFbbHtsv+YWFC84YaIHhJlY8ldvUPa4y+SuFCVAZI7d76uE -iRrYEzqKNuzWPuRcMwjI2beOmzFrlO6UePKZ3R/7EhoA6oSmX2U4Wr0R7eEKrgi8 -w9no5NIr6Ota8mQBsDDeWoGjBZReLHcagK3P+LG7B9EfMbdedd4c+sAYypmbhjvf -pj2AE08D/eI1j9Jd0w9J4oVNel1p7iYT5wYnZzdHcJdAWHlzFrKFQVVfJBBviskX -dm8GUOP0ZdOc0xYAyVcFAyu1x0JBkrFM5zOs6UAsRSzP5PQ/J8VFK7BQAv9/TX1D -eZi2DwECgYEA3mPpG0VRsZXDF63KlWnCn7cl6i+CAhMxYVCVn8RwBGc7Q8Xtw+9b -y7VktDGTcgcZIxDh/T17FBAn2ZL28tbssRxnRD+lQG1pf86RKLU+HXQ4Ppt7CbA0 -G2oV7+qxA2At3yknHmeIyvzBp+OuCc2XboOhshN5ncgMXl9EzRsCilUCgYEA2EPT -dXf57rG4k9mcjdohIdutBB+mOXS8K9fbg+V/l+bmGxINWKxF4w2N3pulw4380TRr -caYI7dxjpmCopnxNEhBiyOuBOEEqdGxdm69CNSO/hFDE92pQECl+6+AIa9Kv/Z3+ -Wdxwo447xgz1wDclhEcVW9rD6sAshpLQREOvIMcCgYEAjxrDmeTVWO0CCW6v+c2A -i74TC8teYW9wSyrL3W9OlcbIACiRg4+3BjLHhpyQQMQIjOQESC0T0ilDO2KyvjlH -PgEFAoniEL9XMAMAra1TNyjeOItcdTOJlEqDq0redUmiuwOERLBi+hwDkcGU8IH3 -fAoANtMJY1qjeubbIxDKZbECgYEAleJkMtzFBq57m1TNkO6l2d5zShFZVibWp5hC -Fma/iJrJzec0Asna4eMp+Sdsuly05JVtBeYp+Bivo8cH++LYU3Wx0UiPVVqsvuW/ -9r9/pm6xNFX6PPOcq6bmxTmO/JOXz7FpcAQ8uM5CFSA0TlSqFsRhRDkZYaBw+4/S -8gzq2k8CgYEAz/0eK0YPxxh4NHwXVWEsMeTDmC37BmoXU5oOmcgFHmhWXFSvvJLn -OB5QojTUuEsU9soHqk8F5oCt8DTz/LkJt+lygcSZ+qDOLJ0c9fGxDIp0s3HxiX4G -BwiYDDqLzFNi6TOQsk15rWWVC9W+PaxsfkrdewvW4ZT695ZWxsKAHP8= ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/duck/duckReq.pem b/testing/hosts/winnetou/etc/openssl/duck/duckReq.pem deleted file mode 100644 index b5d3bcffd..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/duckReq.pem +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN CERTIFICATE REQUEST----- -MIICmzCCAYMCAQAwVjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xETAPBgNVBAsTCFJlc2VhcmNoMRkwFwYDVQQDExBEdWNrIFJlc2VhcmNo -IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIBRSgHCxHhMjsVZ -o4PtFnENkHNuMfyRDsc7m1KRDVt8N4h/EcbduU7xeq/RjxZSmlc1q6EWEgDv3KwD -YY0sX+qrpQKaub5AgsRa2fOOR9xfyf0Q7Nc3oR3keWqQUiigCuaw9NQRtdMm/JFd -XLNY3r60tBsOUHOJAPZNoGPey5UL9ZjjsN6ROUVTh0NAkFwkmnTRwmUvY5bi/T7u -lsSkO9BrfqKDh/pliP7uZANd0ZpPcrIc68WwrelpI1zu0kYGqu/y8HZpuPuAXtGq -S2jctrjSieeYi9wFLnS2tgV3ID4LzEEICSeqVqOvYgGKbarqLkARdxmdRKM9QYpu -+5J+YQIDAQABoAAwDQYJKoZIhvcNAQEFBQADggEBAIDZVgYXbPT9NMLOv5Uc6w06 -D5bvQ3/j3W4J8bMpYM/kbvIjwnsNmVggxhYeMmRDhidUcj849ybKRoJo7zrzTfvK -BR1v9xCenB+0mnJQWfxIt1aspEW0Y6Z9g3jW47WOxSQagS5BVKVCcw1qxLJ4q3JS -QqZJeQheHYNu9BQCa2w2rJeE0TT2WohcHxt0RpERZyjMfAlOOEUOB/m8Yx1N7/Zd -wJIWCd3o+HYoDqUCS11y3EN+VO6H/+8gcRANe7tKE5+gqc9+7gDpKLTL7hc0S6sh -e3yYo2CHZ8U2hsJGRFz7sFnZpwFi5KeI4+sKgyUurM2lxvcCzTC3DplG+4Wtcls= ------END CERTIFICATE REQUEST----- diff --git a/testing/hosts/winnetou/etc/openssl/duck/index.txt b/testing/hosts/winnetou/etc/openssl/duck/index.txt deleted file mode 100644 index 74c3462f1..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/index.txt +++ /dev/null @@ -1 +0,0 @@ -V 241128221822Z 01 unknown /C=CH/O=Linux strongSwan/OU=Duck Research/CN=carol@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/duck/index.txt.attr b/testing/hosts/winnetou/etc/openssl/duck/index.txt.attr deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/duck/index.txt.old b/testing/hosts/winnetou/etc/openssl/duck/index.txt.old deleted file mode 100644 index e69de29bb..000000000 diff --git a/testing/hosts/winnetou/etc/openssl/duck/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/duck/newcerts/01.pem deleted file mode 100644 index e960fc2b0..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/newcerts/01.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEBzCCAu+gAwIBAgIBATANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxGTAX -BgNVBAMTEER1Y2sgUmVzZWFyY2ggQ0EwHhcNMTQxMTI4MjIxODIyWhcNMjQxMTI4 -MjIxODIyWjBfMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dh -bjEWMBQGA1UECxMNRHVjayBSZXNlYXJjaDEdMBsGA1UEAxQUY2Fyb2xAc3Ryb25n -c3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBbHnfLRk -Lvxh9V7x/NoSs5qavpr8F51LnYpIfppgMvBDjpdeSnBPOOPakPlfUhKSvXIesESv -QI1HJOlGftswL9A5B1lTnsH65sqpgqgj67grh386U3O9ZccFhUj8Dw6TUo/qe4pK -sWDwUX/LG3mjOx/rOGvX8WxvZU7JVXXhU4g8TpIV3JRTQ+lF82z3qoS6dAfRt4xh -6pyLuMYbu6UtX5Al0iJDvpsWr9ZbKI2f8Dhkr0sZFRHl7Gs5jTN1Ra1EF0jCjIzo -6AkkY+ITBssvVvMFpeN/jb0ZhvLcRFU56lvLkmrj/InKUsk9qNm80+/wFBUzJ5N7 -GezXmBIPwXdlAgMBAAGjgdYwgdMwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYD -VR0OBBYEFLPw4VsFnIRIKhjd/OF7delHM9kiMHkGA1UdIwRyMHCAFIpw4MqlHGRv -K5K5c1wBrJAb/fk1oVWkUzBRMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXgg -c3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDASBgNVBAMTC1Jlc2VhcmNo -IENBggEKMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMA0GCSqGSIb3 -DQEBCwUAA4IBAQBoOfRRT8JCO4/76IpH0dkbo/MkwGYtSyyJZL+MJnedesk6EXyC -E4V4TmmDjrkIjIpah+zt2//snVzEIaU1f1YP+XnjMPvN1Ev4ZnzhdFlT1bK+e0gp -4Dah702EnMLkqhQBHJRMgaCWYy0Be6jPXNIepC8tuNyedWFiFNa1OoFm3R2RPoXR -XJBQ1iySZxDNjBy2T5wqqOrrRdiz+v2doCK5EYYCZwrJONxG3i+H2QUmY3t6qotj -60y83He54Q5U64rl6HWYQVI1BsH+XnI5/e8bScjk8BKuaPllXdAEgbOAyCwQglBq -3wl1aSHJq7OOZo3LsCdCA9sVfxv+jIatuqXg ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/duck/openssl.cnf b/testing/hosts/winnetou/etc/openssl/duck/openssl.cnf deleted file mode 100644 index b610836fc..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/openssl.cnf +++ /dev/null @@ -1,170 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl/duck -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/duckCert.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/duckKey.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 1825 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha256 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 1024 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -0.organizationalUnitName_default = Duck Research - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/duck/serial b/testing/hosts/winnetou/etc/openssl/duck/serial deleted file mode 100644 index 9e22bcb8e..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/serial +++ /dev/null @@ -1 +0,0 @@ -02 diff --git a/testing/hosts/winnetou/etc/openssl/duck/serial.old b/testing/hosts/winnetou/etc/openssl/duck/serial.old deleted file mode 100644 index 8a0f05e16..000000000 --- a/testing/hosts/winnetou/etc/openssl/duck/serial.old +++ /dev/null @@ -1 +0,0 @@ -01 diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/.rand b/testing/hosts/winnetou/etc/openssl/ecdsa/.rand deleted file mode 100644 index ff05826f2351a184d479e4bb447df4a29082c144..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1024 zcmV+b1poV@Zi?3YD2tJ%Z|sp{x#})ZK-aTbSj1W^bCBudp+RhQrDu-i{Mcx`V4cfS zixyemfKHSOiuPoHRu^xupwzjIk@@+CLMS2p07uIi)B`t0I$P#2E7n2lRneQSojsh_ zMYj5h_YITN4Wd9;lw8w${SP28C@rjjI4AdHYIV~6NwoCQTpfo_781w*!JXdTX-(pr z2rxs!a1&d9J7H$f`2k}Uo#ky*aJr55POL|8MY`jr5MmSO&(StfsnDVIuszv+qP2G? z{(zix=WzBjpDc-&Aejy8VD0|vbzTT6w29zZ>ETeTEa)(ssb3?S8RGwJ?lXTkQpR4z z-kV@i>(N(!s2Gi|0>`>>kPpl>zyRlRTooKd;INC?_~z7o_25z<&t%J=!CM|tjKOaFqjwKk;;)r7byVo`xH%g@mPWLlo~>8aY2Np zV2X^K0kXvqA7c$xSCDqbgfiSoJ4PbJwNI~vZS^kj>c1a5tzFTfPC1T;T`>IPx7K9Z ze1}8Jy6GU!;vSGm@9o^}1#joAK?<8Zb31Ksr!pt%c$LcBI31ofa zW@LzV8Cw2!d!;mhMm4MaMvyb_GTeawzzQy%>{_2mf>W3IO007Q8oJ7d4+R*wrDS-p z_@eAE7&bjymoqOe^S8Pgca1Lm1=Ckh_rrPId*8_@>hIe&UdXvV9ClrBN0d6n)NZeNn1)s z`+@+&Mf&qX{`s3+6 z4*l43mxn7TBa-FR)Fy>ZWqkAtvpR4hQKS0p=0umSdH&|91~3pC4fM#)@m`V8o*7z~ un9ejdB1X)+hb(jjs9l@+PxvG`-K<$b5H`<5e6o|{J5>_!OoCYof|ovlh!Hvf diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber b/testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber deleted file mode 100644 index 64969239d..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber +++ /dev/null @@ -1 +0,0 @@ -04 diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber.old b/testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber.old deleted file mode 100644 index 75016ea36..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/crlnumber.old +++ /dev/null @@ -1 +0,0 @@ -03 diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt b/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt deleted file mode 100644 index bc6b9d648..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt +++ /dev/null @@ -1,20 +0,0 @@ -R 130621144307Z 130627211828Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 521 bit/CN=moon.strongswan.org -R 130621161252Z 080622162459Z,keyCompromise 02 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -R 130621161359Z 130627211849Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=dave@strongswan.org -R 130621162918Z 130627211852Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -R 140611160633Z 180613112511Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=moon.strongswan.org -R 140611160706Z 180613112516Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=moon.strongswan.org -R 180602071743Z 180613112520Z,superseded 07 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=moon.strongswan.org -R 180602072050Z 180613112523Z,superseded 08 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=moon.strongswan.org -R 180602072738Z 180613112527Z,superseded 09 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -R 180602073154Z 180613112530Z,superseded 0A unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=carol@strongswan.org -R 180602073328Z 180613112534Z,superseded 0B unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=dave@strongswan.org -R 180602073519Z 180613112537Z,superseded 0C unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=dave@strongswan.org -R 180602100216Z 180613112944Z,superseded 0D unknown /C=CH/O=Linux strongSwan/OU=ECSA 521 bit/CN=moon.strongswan.org -V 230611120443Z 0E unknown /C=CH/O=Linux strongSwan/OU=ECDSA 521 bit/CN=moon.strongswan.org -V 230611121031Z 0F unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=dave@strongswan.org -V 230611121121Z 10 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -V 230611123432Z 11 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=carol@strongswan.org -V 230611123524Z 12 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=dave@strongswan.org -V 230611143131Z 13 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=moon.strongswan.org -V 230611143151Z 14 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=moon.strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr b/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr deleted file mode 100644 index 3a7e39e6e..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = no diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr.old b/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr.old deleted file mode 100644 index 3a7e39e6e..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.attr.old +++ /dev/null @@ -1 +0,0 @@ -unique_subject = no diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.old b/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.old deleted file mode 100644 index aa36356e7..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/index.txt.old +++ /dev/null @@ -1,19 +0,0 @@ -R 130621144307Z 130627211828Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 521 bit/CN=moon.strongswan.org -R 130621161252Z 080622162459Z,keyCompromise 02 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -R 130621161359Z 130627211849Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=dave@strongswan.org -R 130621162918Z 130627211852Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -R 140611160633Z 180613112511Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=moon.strongswan.org -R 140611160706Z 180613112516Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=moon.strongswan.org -R 180602071743Z 180613112520Z,superseded 07 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=moon.strongswan.org -R 180602072050Z 180613112523Z,superseded 08 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=moon.strongswan.org -R 180602072738Z 180613112527Z,superseded 09 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -R 180602073154Z 180613112530Z,superseded 0A unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=carol@strongswan.org -R 180602073328Z 180613112534Z,superseded 0B unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=dave@strongswan.org -R 180602073519Z 180613112537Z,superseded 0C unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=dave@strongswan.org -R 180602100216Z 180613112944Z,superseded 0D unknown /C=CH/O=Linux strongSwan/OU=ECSA 521 bit/CN=moon.strongswan.org -V 230611120443Z 0E unknown /C=CH/O=Linux strongSwan/OU=ECDSA 521 bit/CN=moon.strongswan.org -V 230611121031Z 0F unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=dave@strongswan.org -V 230611121121Z 10 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=carol@strongswan.org -V 230611123432Z 11 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 384 bit/CN=carol@strongswan.org -V 230611123524Z 12 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=dave@strongswan.org -V 230611143131Z 13 unknown /C=CH/O=Linux strongSwan/OU=ECDSA 256 bit/CN=moon.strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/01.pem deleted file mode 100644 index 5178c7f38..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/01.pem +++ /dev/null @@ -1,20 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDMDCCApKgAwIBAgIBATAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv -b3QgQ0EwHhcNMDgwNjIyMTQ0MzA3WhcNMTMwNjIxMTQ0MzA3WjBeMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg -NTIxIGJpdDEcMBoGA1UEAxMTbW9vbi5zdHJvbmdzd2FuLm9yZzCBmzAQBgcqhkjO -PQIBBgUrgQQAIwOBhgAEALmnl/PUy9v7Qsc914kdzY+TQ6VY2192oRoa9SkpxXrs -5GnWSJoz3yinpPHdchH0UknKt/C2Ik2k7izDH/Zau5gNAD1PqBrYWtcP+sLnH1G9 -BTibraniAUSpSaDhiWrfTteRNWqkzZI37a6YfKcBZozQcvYMW1co15EwZTptqykX -Eepuo4IBEzCCAQ8wCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFDVU -Hzs47lOG0dHsezm6aFqdwJwfMHgGA1UdIwRxMG+AFLpd+XG2E7Vq0d26Nreq0sHu -j9jSoUykSjBIMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dh -bjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBSb290IENBggkA9qJ1fiLvpokwHgYD -VR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzA8BgNVHR8ENTAzMDGgL6Athito -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fZWMuY3JsMAkGByqG -SM49BAEDgYwAMIGIAkIBDgZs1pXvm8SwT9S1m6nIHwuZsJDsDri/PWM6NXdMUXEt -l0p8cfq8PbJlK/0+eLz8Ec1zpWuF5vasFHkVhauHdnECQgEVuYTrlry9gAx7G4kH -mne2yDxTclEDziWxPG4UkZbkGttf9eZlsXmNoX/Z/fojXxMYZaPqM3eOT2h6ezMD -CI9WpQ== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/02.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/02.pem deleted file mode 100644 index 69f8841c9..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/02.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC6jCCAk6gAwIBAgIBAjAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv -b3QgQ0EwHhcNMDgwNjIyMTYxMjUyWhcNMTMwNjIxMTYxMjUyWjBfMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg -MjU2IGJpdDEdMBsGA1UEAxQUY2Fyb2xAc3Ryb25nc3dhbi5vcmcwVjAQBgcqhkjO -PQIBBgUrgQQACgNCAAQlXpPktKrfBWubyHuZOa6qs6oZEOyEvg2564RRwATbgbco -dyhpdDd4LAZSIcDznicaFnyAFXcH7petwggbFxY+o4IBFDCCARAwCQYDVR0TBAIw -ADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFKlXB+yOT1OKIF6OJJARCE2ehUfoMHgG -A1UdIwRxMG+AFLpd+XG2E7Vq0d26Nreq0sHuj9jSoUykSjBIMQswCQYDVQQGEwJD -SDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dh -biBFQyBSb290IENBggkA9qJ1fiLvpokwHwYDVR0RBBgwFoEUY2Fyb2xAc3Ryb25n -c3dhbi5vcmcwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5zdHJvbmdzd2Fu -Lm9yZy9zdHJvbmdzd2FuX2VjLmNybDAJBgcqhkjOPQQBA4GKADCBhgJBAUi8pORy -e8TjdVVGpvnMAyCfbY6XvMtn8leLAF1RLNGLvW9vYnpTJYwlFVQlnHDNp+bbVwfw -BxjbM3jZjh6IgWwCQVYJayzuhboLCs18sgr+VqOCEuVhVpDolGUFnP4427/6bQsq -hY98yakkyYM6xIHd7phMDg1v5ufWt0e/2Vp7r+v6 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/03.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/03.pem deleted file mode 100644 index 075d8f1e5..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/03.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDCTCCAmygAwIBAgIBAzAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv -b3QgQ0EwHhcNMDgwNjIyMTYxMzU5WhcNMTMwNjIxMTYxMzU5WjBeMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg -Mzg0IGJpdDEcMBoGA1UEAxQTZGF2ZUBzdHJvbmdzd2FuLm9yZzB2MBAGByqGSM49 -AgEGBSuBBAAiA2IABPxEg8AaVNAwCXqg0p21Zc7YzPLA3voAWf233CZJpsjb1w3y -IeTUeIeGU7aLWAyuXgeBsx+lKzWy00LzPELOgK+3ulTHzBZg7s8kMGhwPWfV4JLA -zrso5+i64+Y4wvRCBaOCARMwggEPMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0G -A1UdDgQWBBQxJAy8gaP3RNBt1WTD27/IMzANmTB4BgNVHSMEcTBvgBS6XflxthO1 -atHduja3qtLB7o/Y0qFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4 -IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gRUMgUm9vdCBDQYIJAPai -dX4i76aJMB4GA1UdEQQXMBWBE2RhdmVAc3Ryb25nc3dhbi5vcmcwPAYDVR0fBDUw -MzAxoC+gLYYraHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2Vj -LmNybDAJBgcqhkjOPQQBA4GLADCBhwJCAZaqaroyGwqd7nb5dVVWjTK8glVzDFJH -ru4F6R+7fDCGEOaFlxf4GRkSrvQQA8vfgo6Md9XjBwq0r+9s3xt5xJjJAkElSo1/ -wyn8KQ3XN07UIaMvPctipq2OgpfteQK/F81CtZ+YCLEQt3xT7NQpriaKwGQxJAQv -g+Z+grJzTppAqpwRpg== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/04.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/04.pem deleted file mode 100644 index 29709926a..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/04.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC7zCCAlGgAwIBAgIBBDAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv -b3QgQ0EwHhcNMDgwNjIyMTYyOTE4WhcNMTMwNjIxMTYyOTE4WjBfMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg -MjU2IGJpdDEdMBsGA1UEAxQUY2Fyb2xAc3Ryb25nc3dhbi5vcmcwWTATBgcqhkjO -PQIBBggqhkjOPQMBBwNCAAQgp/Z/GgzvVCDdVcIYqERml0KroZEaVqiF8uy8dlTS -4mxNs6snDdEWh/LzXTd3NVnCihT2XgHxOk8NrX4hBMMYo4IBFDCCARAwCQYDVR0T -BAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFLdhGhurno1dU2SMx7UGXpa/lgJ9 -MHgGA1UdIwRxMG+AFLpd+XG2E7Vq0d26Nreq0sHuj9jSoUykSjBIMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBFQyBSb290IENBggkA9qJ1fiLvpokwHwYDVR0RBBgwFoEUY2Fyb2xAc3Ry -b25nc3dhbi5vcmcwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5zdHJvbmdz -d2FuLm9yZy9zdHJvbmdzd2FuX2VjLmNybDAJBgcqhkjOPQQBA4GMADCBiAJCATa+ -sBFW3vCx/JgLyxU85F2QuLO0/zdNBhIU0kN7kr1cYBBr8mpbhuNKm6iFe2DsFJZx -ii3DQjwvG46is2Njzi4vAkIA72lPodCDtAFpD/2PUxjzo6xTAFazUejobkdDTUXn -s0f8qIzzeQuTwLbp6pDmR/JGzhAeRvQT82njCo0PJ8Hbz1c= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/05.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/05.pem deleted file mode 100644 index d5e61558e..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/05.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC7DCCAk+gAwIBAgIBBTAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv -b3QgQ0EwHhcNMDkwNjEyMTYwNjMzWhcNMTQwNjExMTYwNjMzWjBeMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg -MjU2IGJpdDEcMBoGA1UEAxMTbW9vbi5zdHJvbmdzd2FuLm9yZzBZMBMGByqGSM49 -AgEGCCqGSM49AwEHA0IABIU/UvJ7ro2AYsFWXZKH9K4FD9O5kNfi3/H3+10kAy6s -eQUab8qaAhTahBHuywzanVTiJPK5caQSvnpt+z1RJDqjggETMIIBDzAJBgNVHRME -AjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUq1PybZZ+RZuJICuoDUhXdLy/iacw -eAYDVR0jBHEwb4AUul35cbYTtWrR3bo2t6rSwe6P2NKhTKRKMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0GCCQD2onV+Iu+miTAeBgNVHREEFzAVghNtb29uLnN0cm9u -Z3N3YW4ub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dh -bi5vcmcvc3Ryb25nc3dhbl9lYy5jcmwwCQYHKoZIzj0EAQOBiwAwgYcCQWYZnZLl -iimVcAs5p7SXpHmcnlIX9C4EFzNtY+zoDfPM9Qx/vGY2hKa65tyhepn5RFyNqH6d -slr5EBqoT5Vt86kJAkIAx/dyiLLqT0+lJiyxjLQuAaLRWHwlgq7jaUhoQusxno62 -dIfe0U1QjgumA+zXoAnbLBF3KnnrKvHByv7ejeH0Ys4= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/06.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/06.pem deleted file mode 100644 index 45224b09b..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/06.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDCjCCAmygAwIBAgIBBjAJBgcqhkjOPQQBMEgxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJv -b3QgQ0EwHhcNMDkwNjEyMTYwNzA2WhcNMTQwNjExMTYwNzA2WjBeMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEWMBQGA1UECxMNRUNEU0Eg -Mzg0IGJpdDEcMBoGA1UEAxMTbW9vbi5zdHJvbmdzd2FuLm9yZzB2MBAGByqGSM49 -AgEGBSuBBAAiA2IABK4TajAd1pgzhJJsmyjw1Zb/CdEe0eWKmEyP1OjmwRwS37Tx -3wV9C9ZzCYBsJlvbH53kyeZYoAojUL5sXDVBq8qu23jSjBCesypSiNt/8akt+4bg -a4qMN2zutd/U1fC5C6OCARMwggEPMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0G -A1UdDgQWBBT43sZUBjwcO+QW4PXk7KoOxxkm3jB4BgNVHSMEcTBvgBS6XflxthO1 -atHduja3qtLB7o/Y0qFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4 -IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gRUMgUm9vdCBDQYIJAPai -dX4i76aJMB4GA1UdEQQXMBWCE21vb24uc3Ryb25nc3dhbi5vcmcwPAYDVR0fBDUw -MzAxoC+gLYYraHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2Vj -LmNybDAJBgcqhkjOPQQBA4GMADCBiAJCAUfrzEnQUA0dqpo9I2YaFh3Y+QnFosTg -b46jcbxm/LbIeWDxwU2HK3Qfo+tGsXJnh73lKo8B0o+OsXt4gP+GQutCAkIBu7Aw -0iUx8d84SqHiBZBDIk/X6NV62YZXVhO9rPON0r/kdmeZ8OvPD53JgE64irFf6Wp+ -3ictLD61ItW0nxNHlcE= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/08.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/08.pem deleted file mode 100644 index 7bf96cdc8..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/08.pem +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICdzCCAdqgAwIBAgIBCDAKBggqhkjOPQQDBDBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTEzMDYyODA3MjA1MFoXDTE4MDYwMjA3MjA1MFowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwdjAQBgcqhkjO -PQIBBgUrgQQAIgNiAAQh4YOVBbRxtdaM7uJvDrZqt6a1jJo+rijEV5Nw1OqU5jlk -srCtZwcZXrR67MlqzFNyvkHtbcWRuBjL55xjQE+YavKnltuKu42COUhWXh760M/c -2SNzsjvsJgGXAsiPwiajgYEwfzAfBgNVHSMEGDAWgBS6XflxthO1atHduja3qtLB -7o/Y0jAeBgNVHREEFzAVghNtb29uLnN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1MDMw -MaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9lYy5j -cmwwCgYIKoZIzj0EAwQDgYoAMIGGAkE35mfDj/fFUXGsetoU9l9Kt3jbIKYugJgE -2gmv/MW8jwrqoP7y6ATHXJkonA6AvEK+o0ZMrae55lIKPkBh5xk3XQJBfp5Eqg6Y -efRIXUeLksM56fRjVwJS6es7qb8l1q6+c1wC1A3lEHQvAs+kJxFfFyni2oxA923F -h2eoaYy9vSqET5Q= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/09.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/09.pem deleted file mode 100644 index a85635faf..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/09.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICXzCCAcCgAwIBAgIBCTAKBggqhkjOPQQDBDBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTEzMDYyODA3MjczOFoXDTE4MDYwMjA3MjczOFowXzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMFkwEwYHKoZI -zj0CAQYIKoZIzj0DAQcDQgAEwYQaBELkyAVAzNzWJr9LqoK8gdKDv+Ns6D+ZQSAj -BuX3bs5ZIn7BrRxYd+mbnpZ2in7FjXPWkcLkIK/cgay2n6OBgzCBgDAfBgNVHSME -GDAWgBS6XflxthO1atHduja3qtLB7o/Y0jAfBgNVHREEGDAWgRRjYXJvbEBzdHJv -bmdzd2FuLm9yZzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnN0cm9uZ3N3 -YW4ub3JnL3N0cm9uZ3N3YW5fZWMuY3JsMAoGCCqGSM49BAMEA4GMADCBiAJCAIU5 -nZLSfuiHElf7SFHl/sXCTSQ5FhEjSdhpMUvsgwq0vnEJRRdsdEOmmtVT5yQFHDUR -Z9YVl4/zP5EFyUepvCH5AkIB2WFJ5WZ3Ds76Tq9AxAPaFbsQapGgOmrRZ6lGkj49 -hzLfARkvr+fTbOrttOC4yTIfnYVygA2G1cQYzceY/JiSk00= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0A.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0A.pem deleted file mode 100644 index f43957143..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0A.pem +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICfDCCAd2gAwIBAgIBCjAKBggqhkjOPQQDBDBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTEzMDYyODA3MzE1NFoXDTE4MDYwMjA3MzE1NFowXzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMHYwEAYHKoZI -zj0CAQYFK4EEACIDYgAERiDlh/bOFDq6bSRdDq2ivOcNcxWSGlO5dy5yBRvAhTWl -NJcy93jxhDIzF5mxPpmgNXpdmSBRKbm3ydkw8LbWI+5/lje06Yl6nOLBO6Zb7GqH -XFO+BqJrUxzbdHXwxWqto4GDMIGAMB8GA1UdIwQYMBaAFLpd+XG2E7Vq0d26Nreq -0sHuj9jSMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1 -MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9l -Yy5jcmwwCgYIKoZIzj0EAwQDgYwAMIGIAkIA8mbKzo+mp8umjvpoQUo5pIvR1CQQ -lvBGCUWv7mtq1CVBXzv7Z+HQqPsrL388RymEErA7BzDMkPKTa5E3ZV5LL38CQgDx -+v/cIcJdYngOOF0IgVSDzcGgSvOmMlPF/D97eC4Od7XwdYl5p9Sxi4SjmDZZi4r/ -EArN3teDfoc7CZcRxWcDhQ== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0B.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0B.pem deleted file mode 100644 index c83be145d..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0B.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICXDCCAb2gAwIBAgIBCzAKBggqhkjOPQQDBDBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTEzMDYyODA3MzMyOFoXDTE4MDYwMjA3MzMyOFowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwWTATBgcqhkjO -PQIBBggqhkjOPQMBBwNCAAQ0aUuue3BcBvF6aEISID4c+mVBJyvSm2fPVRRkAQqh -RktTHMYDWY6B8e/iGr4GDeF5bjr46vMB5eEtVx3chWbQo4GBMH8wHwYDVR0jBBgw -FoAUul35cbYTtWrR3bo2t6rSwe6P2NIwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW5fZWMuY3JsMAoGCCqGSM49BAMEA4GMADCBiAJCAd5ols9c -CP6HPtfMXbPlSpUDKSRyB3c5Ix2Yn3z5ogMM1QSoS88FW8D7KKsb0qTY5TnlAls3 -45PmauVwEbI2cV6qAkIBphvsmhYWMnt/QMOij7DinihEL9Ib1vxOS2boUos6sHWi -gj3wfHyfgHM3Pgt0YYoZxELDIxcLVJeoa1TmNey7IaI= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0C.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0C.pem deleted file mode 100644 index e97709a3f..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0C.pem +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICeTCCAdqgAwIBAgIBDDAKBggqhkjOPQQDBDBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTEzMDYyODA3MzUxOVoXDTE4MDYwMjA3MzUxOVowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwdjAQBgcqhkjO -PQIBBgUrgQQAIgNiAATVOQOBWOH7PhHx/mc+y5+uDpW/maSCkGwpnPP1dWQl4Dpr -DokGZC8P+pm1j0sBvzbSCuHZCAkaSptYavgv4VVJ/X5u89tnj6QqQt/AtuPjCL7r -3k3F0Nsj/TGSjRmcMr6jgYEwfzAfBgNVHSMEGDAWgBS6XflxthO1atHduja3qtLB -7o/Y0jAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1MDMw -MaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9lYy5j -cmwwCgYIKoZIzj0EAwQDgYwAMIGIAkIB/x2+UiGE5T7229M2Ic2BMYLWSBQlZJeT -d3uniJb3NAkeQAhDgj0TOxVdMz1SkgScLRS2RKYpsxiVsV+tVuijTMQCQgHn1WtY -iiSY7OWcX9hQEqWDV0TxoNcgInEhsmtMbseCpR0dYXYsm54oC0pqVBeKp0GC7KJr -ZEmeb0/mRB56osgppA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0D.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0D.pem deleted file mode 100644 index 25f0538a7..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0D.pem +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICnTCCAf+gAwIBAgIBDTAKBggqhkjOPQQDBDBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTEzMDYyODEwMDIxNloXDTE4MDYwMjEwMDIxNlowXTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFTATBgNVBAsTDEVDU0Eg -NTIxIGJpdDEcMBoGA1UEAxMTbW9vbi5zdHJvbmdzd2FuLm9yZzCBmzAQBgcqhkjO -PQIBBgUrgQQAIwOBhgAEAGWctqQ4b4fNSACnlcg5A3nxHU5X5qir+Ep8QziYNokU -ri9N6ZPX3ipNlVAi6AYS7MXWZCBiT2g0yGFfwSxPha/rATR3m7acgyGQt0BE2UJ0 -Z7ZfjkjUPaKKEhmw0fy2t5gUhPaXMBXnu5hGjUz4gaaApsaJtr5eEwdQ0II9DG71 -tSA2o4GBMH8wHwYDVR0jBBgwFoAUul35cbYTtWrR3bo2t6rSwe6P2NIwHgYDVR0R -BBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzA8BgNVHR8ENTAzMDGgL6AthitodHRw -Oi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fZWMuY3JsMAoGCCqGSM49 -BAMEA4GLADCBhwJBAjPn1KkfPOlfn51b6AtISSpccCsKJ6LhJiSLuQp0SzMrg3mv -vSIkNpVrUigW0VVMwcanW3UuYKSxMBl3Z30+RpYCQgGh8v1XO4SO3DmVLD9+JLil -9Dp0TNkzNLdOqeuIX6ili5yhnLU8chwSlpJ9d81FdAjHP9EDPO+7fTswC2vYL+Rm -2A== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0E.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0E.pem deleted file mode 100644 index a4962286e..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0E.pem +++ /dev/null @@ -1,20 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDMTCCApOgAwIBAgIBDjAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMDQ0M1oXDTIzMDYxMTEyMDQ0M1owXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDUyMSBiaXQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwgZswEAYHKoZI -zj0CAQYFK4EEACMDgYYABADF8xmbPu/a05BVtNnZflimozXZgYi+Md7hKREzL7qr -dvtRwbyvki3XNo7zzc1HF/FcYyLJ7U1j71G6QVSN7mRHBgAspFYE1LpjBlrObWcx -JTF74PtzYGKaMWCP+YN52u3tGaOdlvrDiJVi8i/GAuGjIG2tYQVJZQzqUgHHSWPu -M2HRBKOCARMwggEPMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRl -8cuEZmUGoBIWQeXSYzWq/7ou4jB4BgNVHSMEcTBvgBS6XflxthO1atHduja3qtLB -7o/Y0qFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gRUMgUm9vdCBDQYIJAPaidX4i76aJMB4G -A1UdEQQXMBWCE21vb24uc3Ryb25nc3dhbi5vcmcwPAYDVR0fBDUwMzAxoC+gLYYr -aHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2VjLmNybDAKBggq -hkjOPQQDAgOBiwAwgYcCQgDtARCWbIy+tdsD9EYw/oTxfrnsWP0fw1/3UKXjSAlT -tZfJfE743Y7Zl2vqmRIeohQBYY09reTOFnUfYx/jONsTUQJBSB7w+z/CcTCQGIV8 -ISaaeAskxcg/+h87ha+5ZOkHoJDeJTqaatHu3dVx8OepEiQS0TSB9FNxj9g/9bYN -Vjo6NkA= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0F.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0F.pem deleted file mode 100644 index 35b3df49a..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/0F.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDDDCCAm2gAwIBAgIBDzAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMTAzMVoXDTIzMDYxMTEyMTAzMVowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHDAaBgNVBAMME2RhdmVAc3Ryb25nc3dhbi5vcmcwdjAQBgcqhkjO -PQIBBgUrgQQAIgNiAAQiPVu1BMrRbeXe2c7zSzBl1UeJfNeM0ocoAfYUe/8KzxU5 -7Gapbm2Gztkm/2V4Zb7PvK3LOKIrUnxNdE0nVvsdIZKSi/BZEm3BQu8lofvwQQxQ -rWnu3qzwqEfwb0iB2WyjggETMIIBDzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAd -BgNVHQ4EFgQUDCdvv80iOq2pGsjrnNiQFP2RjnsweAYDVR0jBHEwb4AUul35cbYT -tWrR3bo2t6rSwe6P2NKhTKRKMEgxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJvb3QgQ0GCCQD2 -onV+Iu+miTAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1 -MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9l -Yy5jcmwwCgYIKoZIzj0EAwIDgYwAMIGIAkIBMxGGwujqlwf+JFNXW/sbxZmynwzq -duPikzCw0wIq+YhFYJVi2YWDz0Ikfn4WUvoiUIC/uSBAJAw/3E3SHO5I4Y8CQgF2 -d6Ct2ocQwMcz5O00i3BsuOjiHvL3VB3GGG8rfIXAqwUAy4jXQo0bMh2yD+5WwKmP -GnRyvRuhwRkbBIGt6l1mbA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/10.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/10.pem deleted file mode 100644 index 646f6e8e3..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/10.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC8TCCAlKgAwIBAgIBEDAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMTEyMVoXDTIzMDYxMTEyMTEyMVowXzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHTAbBgNVBAMMFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMFkwEwYHKoZI -zj0CAQYIKoZIzj0DAQcDQgAE3WHJOZfpI6KZX6zlKRtCvY0VwHW/K8SWjDCuoq+C -Vb7NnQ0Lpfb22Cihwjf0/ne78AcYGapZdt8/tdxlpQm+9qOCARQwggEQMAkGA1Ud -EwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSpGHTyNt5Tfshldm2Oz0MlnHZ+ -aTB4BgNVHSMEcTBvgBS6XflxthO1atHduja3qtLB7o/Y0qFMpEowSDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9u -Z1N3YW4gRUMgUm9vdCBDQYIJAPaidX4i76aJMB8GA1UdEQQYMBaBFGNhcm9sQHN0 -cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25n -c3dhbi5vcmcvc3Ryb25nc3dhbl9lYy5jcmwwCgYIKoZIzj0EAwIDgYwAMIGIAkIA -7r9urYVPXwOUBU120HDb/0Z+ezMm8vFtGsrJPME9JdW7bdkb1IpWpSobn3Ua94Gm -q7PtKPYbOoF6m4aAIhouWkwCQgChGMvdnRhLQiItMGybWY5mLOYemM9U3CjNLRSE -gDIPWr67i05MwdofcT2hYPSFHAyeI7OfJikHrAfDcTok6kPA3A== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/11.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/11.pem deleted file mode 100644 index f3f4c6671..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/11.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDDjCCAm+gAwIBAgIBETAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMzQzMloXDTIzMDYxMTEyMzQzMlowXzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHTAbBgNVBAMMFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMHYwEAYHKoZI -zj0CAQYFK4EEACIDYgAExm8lmoXGUfLL8xzhhQFmadz7SjPdubASbH9m+t7h30OV -yo+NPmtve7uqrWzttyWfqR7tFSOLtP5joj8U9E580ilT/2MsjVQJpKOFpYaggPUK -f+fhRwfQMUunyyAoIRSbo4IBFDCCARAwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gw -HQYDVR0OBBYEFCQeIdu6skXTNWUg5w1Eb9HR1dU2MHgGA1UdIwRxMG+AFLpd+XG2 -E7Vq0d26Nreq0sHuj9jSoUykSjBIMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGlu -dXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBSb290IENBggkA -9qJ1fiLvpokwHwYDVR0RBBgwFoEUY2Fyb2xAc3Ryb25nc3dhbi5vcmcwPAYDVR0f -BDUwMzAxoC+gLYYraHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2Fu -X2VjLmNybDAKBggqhkjOPQQDAgOBjAAwgYgCQgGptTrYfjcWM+P66K5W+sq1d4X6 -E0+I2lXRKRiku2vPjpTQZJim4k4pAJNC19R2CCJMBgqab1ROUUsHMMHBNcyR/gJC -AN6S1J68o3UTQwAyN/zXW4ur8cxsPKV9uZYoz7O6Snz+eTliz/g8NPtfLYUseCii -VoXhdWwKkiRd8Cjck+RJHVWh ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/12.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/12.pem deleted file mode 100644 index 0f6315794..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/12.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC7TCCAlCgAwIBAgIBEjAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMzUyNFoXDTIzMDYxMTEyMzUyNFowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHDAaBgNVBAMME2RhdmVAc3Ryb25nc3dhbi5vcmcwWTATBgcqhkjO -PQIBBggqhkjOPQMBBwNCAATRc+i666sxHVohZ/4ld8ffz2xoa+x9+7TzM689nczQ -oZMs3+AJIjjNzdjvEe6kPHW73p51IdtlVF97Ib62hgQuo4IBEzCCAQ8wCQYDVR0T -BAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFDA3QkktCD5ZvWeiepNeQPWpcKP8 -MHgGA1UdIwRxMG+AFLpd+XG2E7Vq0d26Nreq0sHuj9jSoUykSjBIMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBFQyBSb290IENBggkA9qJ1fiLvpokwHgYDVR0RBBcwFYETZGF2ZUBzdHJv -bmdzd2FuLm9yZzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnN0cm9uZ3N3 -YW4ub3JnL3N0cm9uZ3N3YW5fZWMuY3JsMAoGCCqGSM49BAMCA4GKADCBhgJBOrfM -xT0Cn1uXVvuS977ANQZwzAX4O9y5POFXBkDKLFPL9hgWg7jxhREkDRcvViovMmiM -EAjoEZLD8SysfYrRZxcCQXtgWTfS2GAIDSQS1of1so/8Z/xZdfoIWxRoZ/xmH7jY -Yt3wK6yGjziEbX9LGN4MkOwkJKjEkTwbTygv7Wt3arz/ ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/13.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/13.pem deleted file mode 100644 index 961c8bec8..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/13.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC7jCCAlCgAwIBAgIBEzAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzE0MzEzMVoXDTIzMDYxMTE0MzEzMVowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwWTATBgcqhkjO -PQIBBggqhkjOPQMBBwNCAATCqc/Wov++N8wvG3IhsEAxa38bxoIBPQZeOqMyi/lV -breEsOSJD/POV3gkt1lKOaQ502XdJcjdAvCqjtbpzCMWo4IBEzCCAQ8wCQYDVR0T -BAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFAtkayAwMYDQqnlKDRvm7HNCIxY8 -MHgGA1UdIwRxMG+AFLpd+XG2E7Vq0d26Nreq0sHuj9jSoUykSjBIMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBFQyBSb290IENBggkA9qJ1fiLvpokwHgYDVR0RBBcwFYITbW9vbi5zdHJv -bmdzd2FuLm9yZzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnN0cm9uZ3N3 -YW4ub3JnL3N0cm9uZ3N3YW5fZWMuY3JsMAoGCCqGSM49BAMCA4GLADCBhwJBVnfl -l9eV6R+jNdUCuz+yDdM7c1UpQ+Qy7rtXq50KZY7d1xJsTk152LxXIkO8EJnHmO4l -s39RHlGXItWcYGffXIICQgCLB+R8QFnMcKlgpjrxsuO/Ljg1RcMav3y3zaHJJJLT -eJBEL7RhDaPGcJ/hKU4TPwvSEIkswQaDnN+oAZiz/gFDUw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/14.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/14.pem deleted file mode 100644 index a71ffdca1..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/newcerts/14.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDCzCCAm2gAwIBAgIBFDAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzE0MzE1MVoXDTIzMDYxMTE0MzE1MVowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwdjAQBgcqhkjO -PQIBBgUrgQQAIgNiAAQBXgnLJrtT2zS6BEj4WBRskabmIw8TVo3Q4+MyOBab2jzM -AVE44VFjo/ihd1YCeTs8KyZY+w8XPnCqm+z+Z9NeU2tN5wLlVYSBwyYzL9+Nhnam -F6qMSaPBnIE2CK2hgqGjggETMIIBDzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAd -BgNVHQ4EFgQUT4FEmRbCvjxKsXqruiQgzC50pj0weAYDVR0jBHEwb4AUul35cbYT -tWrR3bo2t6rSwe6P2NKhTKRKMEgxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJvb3QgQ0GCCQD2 -onV+Iu+miTAeBgNVHREEFzAVghNtb29uLnN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1 -MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9l -Yy5jcmwwCgYIKoZIzj0EAwIDgYsAMIGHAkIAhHCvrcHfCJbPcNDdyT4x3F3V2wq7 -96TzcVzlLJ+zSxr3Xo3eqOZaxAlnnoI4aQIukZ0RXzSCebDrOL9+k+5uRakCQU9k -W5MphqYKOys+lQmpKBEnzZlM1QvFfUUiXwoxN8Ilc9c0nSVXKl9m/uPgP7GZjvaE -J4juvRKmi2nMoxWIJtMt ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/openssl.cnf b/testing/hosts/winnetou/etc/openssl/ecdsa/openssl.cnf deleted file mode 100644 index ddd94d061..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/openssl.cnf +++ /dev/null @@ -1,174 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl/ecdsa -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/strongswan_ecCert.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/strongswan_ecKey.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 1825 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha256 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -serialNumber = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 1024 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -#0.organizationalUnitName_default = Research - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan_ec.crl - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME -#authorityInfoAccess = OCSP;URI:http://ocsp.strongswan.org:8880 -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan_ec.crl - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/serial b/testing/hosts/winnetou/etc/openssl/ecdsa/serial deleted file mode 100644 index 60d3b2f4a..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/serial +++ /dev/null @@ -1 +0,0 @@ -15 diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/serial.old b/testing/hosts/winnetou/etc/openssl/ecdsa/serial.old deleted file mode 100644 index 8351c1939..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/serial.old +++ /dev/null @@ -1 +0,0 @@ -14 diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecCert.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecCert.pem deleted file mode 100644 index 3480a434a..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecCert.pem +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICyDCCAiqgAwIBAgIJAPaidX4i76aJMAkGByqGSM49BAEwSDELMAkGA1UEBhMC -Q0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9uZ1N3 -YW4gRUMgUm9vdCBDQTAeFw0wODA2MjIxNDM2MDZaFw0xODA2MjAxNDM2MDZaMEgx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQD -ExVzdHJvbmdTd2FuIEVDIFJvb3QgQ0EwgZswEAYHKoZIzj0CAQYFK4EEACMDgYYA -BAEUx1NvjNKzbDHaRPMsqIf/6SbUpzBa78N/WIyF6rYj8e5McAqfTfzUfFJZYoQn -/mbP3VfjOxRuMDjrlfvdgMxwkwFDigWQfHg3CJbS7eQjjO1MrxxIJUtfSTnF29tM -h6IYMdxaZKloCGCOrpmGCGdxD2/KwoX1SA3BlnjaNt7kSTonkqOBujCBtzAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUul35cbYTtWrR3bo2 -t6rSwe6P2NIweAYDVR0jBHEwb4AUul35cbYTtWrR3bo2t6rSwe6P2NKhTKRKMEgx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQD -ExVzdHJvbmdTd2FuIEVDIFJvb3QgQ0GCCQD2onV+Iu+miTAJBgcqhkjOPQQBA4GM -ADCBiAJCAL5pU3X6NYWjOYe0cxrah27UxtUDLUNkFG/Ojl+gOH4QB0CKY0HXNyrq -cgba73dXF/U0Cg3Ij/9g4Kd9GgYq0GlSAkIAqgqMKqXni8wbeGMJE2Mn2/8aHM3Q -3flpHSoeNWOe/VzpRviw+VRgA4vbhhKUXBtQSiea77/DXLwOp5w7rkBoEUg= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecKey.pem b/testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecKey.pem deleted file mode 100644 index 4a3b7c479..000000000 --- a/testing/hosts/winnetou/etc/openssl/ecdsa/strongswan_ecKey.pem +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN EC PRIVATE KEY----- -MIHbAgEBBEFJlQ5poxh00lP7dd/rWQe5grTgrFtUqguppHAY/JZL0eKNiS7PpAb8 -xLmROFGAUcpraen+l6K7GKEzTCh/uUeeFaAHBgUrgQQAI6GBiQOBhgAEARTHU2+M -0rNsMdpE8yyoh//pJtSnMFrvw39YjIXqtiPx7kxwCp9N/NR8UllihCf+Zs/dV+M7 -FG4wOOuV+92AzHCTAUOKBZB8eDcIltLt5COM7UyvHEglS19JOcXb20yHohgx3Fpk -qWgIYI6umYYIZ3EPb8rChfVIDcGWeNo23uRJOieS ------END EC PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolCert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolCert.pem deleted file mode 100644 index 132b5d57a..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB4jCCAZSgAwIBAgIBAzAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDExWhcNMjExMjA0MjI0MDExWjBbMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MR0wGwYDVQQDDBRjYXJvbEBzdHJvbmdzd2FuLm9yZzAqMAUGAytlcAMh -APtwTFkrXyLYOWm9zlNm+ASZ3LzmpWmB2OwqnWZlFIXVo4GIMIGFMB8GA1UdIwQY -MBaAFCNOkpAKSIb2BV3+ead2AzqOcNj4MB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9u -Z3N3YW4ub3JnMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuc3Ryb25nc3dh -bi5vcmcvc3Ryb25nc3dhbl9lZDI1NTE5LmNybDAFBgMrZXADQQAC5ukfb9FmxhM5 -ynVSrYUvCfii+zD7SjA+kFabRZ6tgoTWBBUONT31dwLpD0Aqe0z7SWLTXpeVVAl4 -JbhZsPUD ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolPolicyCert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolPolicyCert.pem deleted file mode 100644 index 70d7664af..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/carolPolicyCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB/DCCAa6gAwIBAgIBBTAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTgwNjIxMTQzMDU1WhcNMjMwNjIxMTQzMDU1WjBbMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MR0wGwYDVQQDDBRjYXJvbEBzdHJvbmdzd2FuLm9yZzAqMAUGAytlcAMh -APtwTFkrXyLYOWm9zlNm+ASZ3LzmpWmB2OwqnWZlFIXVo4GiMIGfMB8GA1UdIwQY -MBaAFCNOkpAKSIb2BV3+ead2AzqOcNj4MB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9u -Z3N3YW4ub3JnMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuc3Ryb25nc3dh -bi5vcmcvc3Ryb25nc3dhbl9lZDI1NTE5LmNybDAYBgNVHSAEETAPMA0GCysGAQQB -gqAqAQEBMAUGAytlcANBAJAqyQd0TjQUTba+9NzVdboKhq3D6I/go7wjzx9G2O5s -xn1QimUMNHpY4i8eDD9ISvZIR2sziZgm79zV/sY1bQw= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/daveCert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/daveCert.pem deleted file mode 100644 index 18f0e088c..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/daveCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB4DCCAZKgAwIBAgIBBDAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjIzODQwWhcNMjExMjA0MjIzODQwWjBaMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRwwGgYDVQQDDBNkYXZlQHN0cm9uZ3N3YW4ub3JnMCowBQYDK2VwAyEA -fYCNzyBpr3lne+kVB27q7O7TvMkERDB9kRnzNSx30hijgYcwgYQwHwYDVR0jBBgw -FoAUI06SkApIhvYFXf55p3YDOo5w2PgwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW5fZWQyNTUxOS5jcmwwBQYDK2VwA0EAEG4SjQX49xhuMiyn -86uOCxDWy08KUQRBLoqan+cPfYDPgCbblpbmJOoCBtcUyzEYQ+L/gCQzwLAUZSbK -MEj7Dg== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/moonCert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/moonCert.pem deleted file mode 100644 index e67b224b6..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/moonCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB9TCCAaegAwIBAgIBATAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDQyWhcNMjExMjA0MjI0MDQyWjBaMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRwwGgYDVQQDExNtb29uLnN0cm9uZ3N3YW4ub3JnMCowBQYDK2VwAyEA -4X/jpRSEXr0/TmIHTOj7FqllkP+3e+ljkAU1FtYnX5ijgZwwgZkwHwYDVR0jBBgw -FoAUI06SkApIhvYFXf55p3YDOo5w2PgwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdz -d2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBBBgNVHR8EOjA4MDagNKAyhjBo -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fZWQyNTUxOS5jcmww -BQYDK2VwA0EAOjD6PXrI3R8Wj55gstR2FtT0Htu4vV2jCRekts8O0++GNVMn65BX -8ohW9fH7Ie2JTSOb0wzX+TPuMUAkLutUBA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/sunCert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/sunCert.pem deleted file mode 100644 index 70af02017..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newcerts/sunCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB8zCCAaWgAwIBAgIBAjAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDAyWhcNMjExMjA0MjI0MDAyWjBZMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRswGQYDVQQDExJzdW4uc3Ryb25nc3dhbi5vcmcwKjAFBgMrZXADIQBn -HgUv3QIepihJpxydVVtgTsIqminFnbGSER5ReAaQ+qOBmzCBmDAfBgNVHSMEGDAW -gBQjTpKQCkiG9gVd/nmndgM6jnDY+DAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dh -bi5vcmcwEwYDVR0lBAwwCgYIKwYBBQUHAwEwQQYDVR0fBDowODA2oDSgMoYwaHR0 -cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2VkMjU1MTkuY3JsMAUG -AytlcANBAC27Z6Q7/c21bPb3OfvbdnePhIpgGM3LVBL/0Pj9VOAtUec/Rv2rPNHq -8C1xtc/jMCsI/NdpXSZCeN0lQgf0mgA= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/carolKey.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/carolKey.pem deleted file mode 100644 index 5c3e2623d..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/carolKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIJk9u+XHU+E8YNCuj/bTDVRHbWDk2NzCyrTFqtzWRAv8 ------END PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/daveKey.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/daveKey.pem deleted file mode 100644 index bf84ef3dd..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/daveKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIF17ReOyn64y7tmC11XyYzcALKmu9lkS0VnWSd0l54FX ------END PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/moonKey.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/moonKey.pem deleted file mode 100644 index 491d36430..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/moonKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIKF9TGaPwvVmqoqowy6y8anmPMKpSi9bKc310bbXBMtk ------END PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/sunKey.pem b/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/sunKey.pem deleted file mode 100644 index b83f62c13..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/newkeys/sunKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIF8vNpW9TVnEB+DzglbCjuZr+1u84dHRofgHoybGL9j0 ------END PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519.crl b/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519.crl deleted file mode 100644 index b0320ad25f7b756a2bef969bdd84762d90cd9bf6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 252 zcmXqL{Atj*hKZ5UfR&9|JGH>T-;mpYlZ`o)g-w{r*~3uUKoZ2^5*8{hDay}F4=zv4 zQwS)^&q_@$F;q5C1W7UrOCd?RrWl!;8d@p@<>!|uI6I2-8k!jz8JHLunHU+HL;< diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Cert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Cert.pem deleted file mode 100644 index 9c5a06945..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Cert.pem +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIBljCCAUigAwIBAgIIBrMLy9hl4GQwBQYDK2VwME8xCzAJBgNVBAYTAkNIMRsw -GQYDVQQKExJzdHJvbmdTd2FuIFByb2plY3QxIzAhBgNVBAMTGnN0cm9uZ1N3YW4g -RWQyNTUxOSBSb290IENBMB4XDTE2MTIwNDIyMzU1NloXDTI2MTIwNDIyMzU1Nlow -TzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEG -A1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5IFJvb3QgQ0EwKjAFBgMrZXADIQAKMO0G -lvjTLC7k8FoSp78rca3x++nvf9xPACSqnBg5UKNCMEAwDwYDVR0TAQH/BAUwAwEB -/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCNOkpAKSIb2BV3+ead2AzqOcNj4 -MAUGAytlcANBAEimNd3OTwM42KM0D+E6nJMHbrGSLA1XAukJDH9w30tzkbQHxTSv -OPEN02ar1L30xfYVySJhV9i5cE8QkhThcAQ= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Key.pem b/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Key.pem deleted file mode 100644 index ae82fb9c0..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519Key.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIHb+63Ppcfc9m/E9EyoojCDUz6KcUmwTquU7sgpmctz0 ------END PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519PolicyCert.pem b/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519PolicyCert.pem deleted file mode 100644 index ec34ff0b0..000000000 --- a/testing/hosts/winnetou/etc/openssl/ed25519/strongswan_ed25519PolicyCert.pem +++ /dev/null @@ -1,12 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIBvzCCAXGgAwIBAgIIVuORAxPNUTQwBQYDK2VwME8xCzAJBgNVBAYTAkNIMRsw -GQYDVQQKExJzdHJvbmdTd2FuIFByb2plY3QxIzAhBgNVBAMTGnN0cm9uZ1N3YW4g -RWQyNTUxOSBSb290IENBMB4XDTE2MTIwNDIyMzU1NloXDTI2MTIwNDIyMzU1Nlow -TzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEG -A1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5IFJvb3QgQ0EwKjAFBgMrZXADIQAKMO0G -lvjTLC7k8FoSp78rca3x++nvf9xPACSqnBg5UKNrMGkwDwYDVR0TAQH/BAUwAwEB -/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCNOkpAKSIb2BV3+ead2AzqOcNj4 -MCcGA1UdIAQgMB4wDQYLKwYBBAGCoCoBAQEwDQYLKwYBBAGCoCoBAQIwBQYDK2Vw -A0EAmmq2gRBc3uVIa0e+LVHfAdWZ+PQU6aiwAqVMTK2aiaU4BECpNQE2MLYKMxWg -GjZr7I5qruXG76jCbjDTlGSbBA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/generate-crl b/testing/hosts/winnetou/etc/openssl/generate-crl deleted file mode 100755 index 1c62d643d..000000000 --- a/testing/hosts/winnetou/etc/openssl/generate-crl +++ /dev/null @@ -1,68 +0,0 @@ -#! /bin/sh -# generate a certificate revocation list (CRL) for the strongswan CA. -# -# Copyright (C) 2004 Andreas Steffen -# Zuercher Hochschule Winterthur -# -# This program is free software; you can redistribute it and/or modify it -# under the terms of the GNU General Public License as published by the -# Free Software Foundation; either version 2 of the License, or (at your -# option) any later version. See . -# -# This program is distributed in the hope that it will be useful, but -# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY -# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License -# for more details. - -# libgnutls, if pulled in by libcurl, does not properly cleanup all memory, -# which causes invalid frees during shutdown when leak detective is used -export LEAK_DETECTIVE_DISABLE=1 - -export COMMON_NAME=strongSwan - -ROOT=/var/www - -cd /etc/openssl -openssl ca -gencrl -crldays 30 -config /etc/openssl/openssl.cnf -out crl.pem -openssl crl -in crl.pem -outform der -out strongswan.crl -cp strongswan.crl ${ROOT} -cp strongswanCert.pem ${ROOT} -cp index.html ${ROOT} -# revoke moon's current CERT -pki --signcrl --cacert strongswanCert.pem --cakey strongswanKey.pem --lifetime 30 --reason key-compromise --cert newcerts/2B.pem --lastcrl strongswan.crl > strongswan_moon_revoked.crl -cp strongswan_moon_revoked.crl ${ROOT} -# generate a base CRL -pki --signcrl --lastcrl strongswan.crl --cacert strongswanCert.der --cakey strongswanKey.pem --lifetime 30 --crluri http://crl.strongswan.org/strongswan_delta.crl --digest sha256 > strongswan_base.crl -cp strongswan_base.crl ${ROOT} -# generate a delta CRL revoking moon's current cert -pki --signcrl --basecrl strongswan_base.crl --reason key-compromise --cert newcerts/2B.pem --cacert strongswanCert.der --cakey strongswanKey.pem --lifetime 10 --digest sha256 > strongswan_delta.crl -cp strongswan_delta.crl ${ROOT} -cd /etc/openssl/research -openssl ca -gencrl -crldays 15 -config /etc/openssl/research/openssl.cnf -out crl.pem -openssl crl -in crl.pem -outform der -out research.crl -cp research.crl ${ROOT} -cd /etc/openssl/sales -openssl ca -gencrl -crldays 15 -config /etc/openssl/sales/openssl.cnf -out crl.pem -openssl crl -in crl.pem -outform der -out sales.crl -cp sales.crl ${ROOT} -cd /etc/openssl/ecdsa -openssl ca -gencrl -crldays 15 -config /etc/openssl/ecdsa/openssl.cnf -out crl.pem -openssl crl -in crl.pem -outform der -out strongswan_ec.crl -cp strongswan_ec.crl ${ROOT} -cd /etc/openssl/monster -openssl ca -gencrl -crldays 15 -config /etc/openssl/monster/openssl.cnf -out crl.pem -openssl crl -in crl.pem -outform der -out strongswan-monster.crl -cp strongswan-monster.crl ${ROOT} -cd /etc/openssl/rfc3779 -openssl ca -gencrl -crldays 15 -config /etc/openssl/rfc3779/openssl.cnf -out crl.pem -openssl crl -in crl.pem -outform der -out strongswan_rfc3779.crl -cp strongswan_rfc3779.crl ${ROOT} -cd /etc/openssl/bliss -pki --signcrl --cacert strongswan_blissCert.der --cakey strongswan_blissKey.der --lifetime 30 --digest sha3_512 > strongswan_bliss.crl -cp strongswan_bliss.crl ${ROOT} -cd /etc/openssl/sha3-rsa -pki --signcrl --cacert strongswanCert.pem --cakey strongswanKey.pem --lifetime 30 --digest sha3_256 > strongswan-sha3-rsa.crl -cp strongswan-sha3-rsa.crl ${ROOT} -cd /etc/openssl/ed25519 -pki --signcrl --cacert strongswan_ed25519Cert.pem --cakey strongswan_ed25519Key.pem --lifetime 30 > strongswan_ed25519.crl -cp strongswan_ed25519.crl ${ROOT} diff --git a/testing/hosts/winnetou/etc/openssl/generate-hash-and-url b/testing/hosts/winnetou/etc/openssl/generate-hash-and-url deleted file mode 100755 index 08208ed65..000000000 --- a/testing/hosts/winnetou/etc/openssl/generate-hash-and-url +++ /dev/null @@ -1,13 +0,0 @@ -#! /bin/bash -# -# generates the SHA-1 hash required by the RFC 4306 -# HASH_AND_URL certificate fetching scheme -# - -for cert in $@ -do - openssl x509 -in $cert -outform der -out cert.der - hash=`sha1sum cert.der | awk '{ print $1 }'` - cp cert.der "$hash" -done -rm cert.der diff --git a/testing/hosts/winnetou/etc/openssl/index.txt b/testing/hosts/winnetou/etc/openssl/index.txt deleted file mode 100644 index 8cdb226ec..000000000 --- a/testing/hosts/winnetou/etc/openssl/index.txt +++ /dev/null @@ -1,56 +0,0 @@ -R 090909111334Z 090827094721Z,cessationOfOperation 01 unknown /C=CH/O=Linux strongSwan/CN=mars.strongswan.org -R 090909111553Z 090827094730Z,superseded 02 unknown /C=CH/O=Linux strongSwan/CN=sun.strongswan.org -R 090909111725Z 090827094735Z,superseded 03 unknown /C=CH/O=Linux strongSwan/CN=moon.strongswan.org -R 090909111826Z 090827094738Z,superseded 04 unknown /C=CH/O=Linux strongSwan/CN=venus.strongswan.org -R 090909112439Z 090827094746Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=alice@strongswan.org -R 090909112534Z 090827094749Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=bob@strongswan.org -R 090909112548Z 041226135423Z,keyCompromise 07 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 090909112651Z 090827094754Z,superseded 08 unknown /C=CH/O=Linux strongSwan/OU=Accounting/CN=dave@strongswan.org -R 091118162928Z 091124124946Z,superseded 09 unknown /C=CH/O=Linux strongSwan/OU=OCSP Signing Authority/CN=ocsp.strongswan.org -R 091231214318Z 090827113123Z,superseded 0A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 100216084430Z 100227205840Z,superseded 0B unknown /C=CH/O=Linux strongSwan/OU=Authorization Authority/CN=aa@strongswan.org -R 140321062536Z 050621195214Z,CACompromise 0C unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -R 140321062916Z 100406094423Z,superseded 0D unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -R 100607191714Z 070427213122Z,superseded 0E unknown /C=CH/O=Linux strongSwan/CN=winnetou.strongswan.org -R 100620195806Z 100406093001Z,superseded 0F unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -R 111007105811Z 111017123709Z,superseded 10 unknown /C=CH/O=Linux strongSwan/OU=SHA-256/CN=moon.strongswan.org -R 111007121250Z 111017123712Z,superseded 11 unknown /C=CH/O=Linux strongSwan/OU=SHA-384/CN=carol@strongswan.org -R 111007122112Z 111017123715Z,superseded 12 unknown /C=CH/O=Linux strongSwan/OU=SHA-512/CN=dave@strongswan.org -R 120224075857Z 120315063217Z,superseded 13 unknown /C=CH/O=Linux strongSwan/OU=OCSP/CN=carol@strongswan.org -R 120425210745Z 140414203104Z,superseded 14 unknown /C=CH/O=Linux strongSwan/CN=winnetou.strongswan.org -R 140406120117Z 140414203012Z,superseded 15 unknown /C=CH/O=Linux strongSwan/OU=Research/serialNumber=002/CN=carol@strongswan.org -R 140826095904Z 140827143322Z,superseded 16 unknown /C=CH/O=Linux strongSwan/CN=sun.strongswan.org -R 140826100332Z 140827143341Z,superseded 17 unknown /C=CH/O=Linux strongSwan/CN=moon.strongswan.org -R 140826100522Z 140827143345Z,superseded 18 unknown /C=CH/O=Linux strongSwan/CN=venus.strongswan.org -R 140826100724Z 140827143349Z,superseded 19 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=alice@strongswan.org -R 140826100818Z 140827143358Z,superseded 1A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=bob@strongswan.org -R 140826103106Z 090827103405Z,keyCompromise 1B unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 140826103739Z 140827143427Z,superseded 1C unknown /C=CH/O=Linux strongSwan/OU=Accounting/CN=dave@strongswan.org -R 140826104451Z 140827143432Z,superseded 1D unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 141123125153Z 141128194312Z,superseded 1E unknown /C=CH/O=Linux strongSwan/OU=OCSP Signing Authority/CN=ocsp.strongswan.org -V 150226210530Z 1F unknown /C=CH/O=Linux strongSwan/OU=Authorization Authority/CN=aa@strongswan.org -V 190404095350Z 20 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -V 190404095433Z 21 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -R 150803083841Z 150804144912Z,superseded 22 unknown /C=CH/O=Linux strongSwan/CN=aaa.strongswan.org -R 151119165922Z 151126081658Z,superseded 23 unknown /C=CH/O=Linux strongSwan/OU=Virtual VPN Gateway/CN=mars.strongswan.org -R 161015124507Z 161018152707Z,superseded 24 unknown /C=CH/O=Linux strongSwan/OU=SHA-224/CN=moon.strongswan.org -R 161015124759Z 161018152711Z,superseded 25 unknown /C=CH/O=Linux strongSwan/OU=SHA-384/CN=carol@strongswan.org -R 161015125030Z 161018152714Z,superseded 26 unknown /C=CH/O=Linux strongSwan/OU=SHA-512/CN=dave@strongswan.org -R 170314064200Z 170320204507Z,superseded 27 unknown /C=CH/O=Linux strongSwan/OU=OCSP/CN=carol@strongswan.org -R 240322135622Z 140322135700Z,CACompromise 28 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -V 190413204655Z 29 unknown /C=CH/O=Linux strongSwan/OU=Research/serialNumber=002/CN=carol@strongswan.org -V 190826144245Z 2A unknown /C=CH/O=Linux strongSwan/CN=sun.strongswan.org -V 190826144456Z 2B unknown /C=CH/O=Linux strongSwan/CN=moon.strongswan.org -V 190826145227Z 2C unknown /C=CH/O=Linux strongSwan/CN=venus.strongswan.org -V 190826145436Z 2D unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=alice@strongswan.org -V 190826145626Z 2E unknown /C=CH/O=Linux strongSwan/OU=Research/CN=bob@strongswan.org -R 190826150222Z 140827150343Z,keyCompromise 2F unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -V 190826150536Z 30 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -V 190826151202Z 31 unknown /C=CH/O=Linux strongSwan/OU=Accounting/CN=dave@strongswan.org -V 191127201436Z 32 unknown /C=CH/O=Linux strongSwan/OU=OCSP Signing Authority/CN=ocsp.strongswan.org -V 190906145531Z 33 unknown /C=CH/O=Linux strongSwan/CN=aaa.strongswan.org -V 190906082453Z 34 unknown /C=CH/O=Linux strongSwan/OU=Virtual VPN Gateway/CN=mars.strongswan.org -V 190905153713Z 35 unknown /C=CH/O=Linux strongSwan/OU=SHA-224/CN=moon.strongswan.org -V 190905154104Z 36 unknown /C=CH/O=Linux strongSwan/OU=SHA-384/CN=carol@strongswan.org -V 190905154224Z 37 unknown /C=CH/O=Linux strongSwan/OU=SHA-512/CN=dave@strongswan.org -V 190906205244Z 38 unknown /C=CH/O=Linux strongSwan/OU=OCSP/CN=carol@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/index.txt.attr b/testing/hosts/winnetou/etc/openssl/index.txt.attr deleted file mode 100644 index 3a7e39e6e..000000000 --- a/testing/hosts/winnetou/etc/openssl/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = no diff --git a/testing/hosts/winnetou/etc/openssl/index.txt.attr.old b/testing/hosts/winnetou/etc/openssl/index.txt.attr.old deleted file mode 100644 index 3a7e39e6e..000000000 --- a/testing/hosts/winnetou/etc/openssl/index.txt.attr.old +++ /dev/null @@ -1 +0,0 @@ -unique_subject = no diff --git a/testing/hosts/winnetou/etc/openssl/index.txt.old b/testing/hosts/winnetou/etc/openssl/index.txt.old deleted file mode 100644 index 139df4c27..000000000 --- a/testing/hosts/winnetou/etc/openssl/index.txt.old +++ /dev/null @@ -1,55 +0,0 @@ -R 090909111334Z 090827094721Z,cessationOfOperation 01 unknown /C=CH/O=Linux strongSwan/CN=mars.strongswan.org -R 090909111553Z 090827094730Z,superseded 02 unknown /C=CH/O=Linux strongSwan/CN=sun.strongswan.org -R 090909111725Z 090827094735Z,superseded 03 unknown /C=CH/O=Linux strongSwan/CN=moon.strongswan.org -R 090909111826Z 090827094738Z,superseded 04 unknown /C=CH/O=Linux strongSwan/CN=venus.strongswan.org -R 090909112439Z 090827094746Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=alice@strongswan.org -R 090909112534Z 090827094749Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=bob@strongswan.org -R 090909112548Z 041226135423Z,keyCompromise 07 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 090909112651Z 090827094754Z,superseded 08 unknown /C=CH/O=Linux strongSwan/OU=Accounting/CN=dave@strongswan.org -R 091118162928Z 091124124946Z,superseded 09 unknown /C=CH/O=Linux strongSwan/OU=OCSP Signing Authority/CN=ocsp.strongswan.org -R 091231214318Z 090827113123Z,superseded 0A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 100216084430Z 100227205840Z,superseded 0B unknown /C=CH/O=Linux strongSwan/OU=Authorization Authority/CN=aa@strongswan.org -R 140321062536Z 050621195214Z,CACompromise 0C unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -R 140321062916Z 100406094423Z,superseded 0D unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -R 100607191714Z 070427213122Z,superseded 0E unknown /C=CH/O=Linux strongSwan/CN=winnetou.strongswan.org -R 100620195806Z 100406093001Z,superseded 0F unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -R 111007105811Z 111017123709Z,superseded 10 unknown /C=CH/O=Linux strongSwan/OU=SHA-256/CN=moon.strongswan.org -R 111007121250Z 111017123712Z,superseded 11 unknown /C=CH/O=Linux strongSwan/OU=SHA-384/CN=carol@strongswan.org -R 111007122112Z 111017123715Z,superseded 12 unknown /C=CH/O=Linux strongSwan/OU=SHA-512/CN=dave@strongswan.org -R 120224075857Z 120315063217Z,superseded 13 unknown /C=CH/O=Linux strongSwan/OU=OCSP/CN=carol@strongswan.org -R 120425210745Z 140414203104Z,superseded 14 unknown /C=CH/O=Linux strongSwan/CN=winnetou.strongswan.org -R 140406120117Z 140414203012Z,superseded 15 unknown /C=CH/O=Linux strongSwan/OU=Research/serialNumber=002/CN=carol@strongswan.org -R 140826095904Z 140827143322Z,superseded 16 unknown /C=CH/O=Linux strongSwan/CN=sun.strongswan.org -R 140826100332Z 140827143341Z,superseded 17 unknown /C=CH/O=Linux strongSwan/CN=moon.strongswan.org -R 140826100522Z 140827143345Z,superseded 18 unknown /C=CH/O=Linux strongSwan/CN=venus.strongswan.org -R 140826100724Z 140827143349Z,superseded 19 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=alice@strongswan.org -R 140826100818Z 140827143358Z,superseded 1A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=bob@strongswan.org -R 140826103106Z 090827103405Z,keyCompromise 1B unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 140826103739Z 140827143427Z,superseded 1C unknown /C=CH/O=Linux strongSwan/OU=Accounting/CN=dave@strongswan.org -R 140826104451Z 140827143432Z,superseded 1D unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 141123125153Z 141128194312Z,superseded 1E unknown /C=CH/O=Linux strongSwan/OU=OCSP Signing Authority/CN=ocsp.strongswan.org -V 150226210530Z 1F unknown /C=CH/O=Linux strongSwan/OU=Authorization Authority/CN=aa@strongswan.org -V 190404095350Z 20 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -V 190404095433Z 21 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -R 150803083841Z 150804144912Z,superseded 22 unknown /C=CH/O=Linux strongSwan/CN=aaa.strongswan.org -R 151119165922Z 151126081658Z,superseded 23 unknown /C=CH/O=Linux strongSwan/OU=Virtual VPN Gateway/CN=mars.strongswan.org -R 161015124507Z 161018152707Z,superseded 24 unknown /C=CH/O=Linux strongSwan/OU=SHA-224/CN=moon.strongswan.org -R 161015124759Z 161018152711Z,superseded 25 unknown /C=CH/O=Linux strongSwan/OU=SHA-384/CN=carol@strongswan.org -R 161015125030Z 161018152714Z,superseded 26 unknown /C=CH/O=Linux strongSwan/OU=SHA-512/CN=dave@strongswan.org -R 170314064200Z 170320204507Z,superseded 27 unknown /C=CH/O=Linux strongSwan/OU=OCSP/CN=carol@strongswan.org -R 240322135622Z 140322135700Z,CACompromise 28 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -V 190413204655Z 29 unknown /C=CH/O=Linux strongSwan/OU=Research/serialNumber=002/CN=carol@strongswan.org -V 190826144245Z 2A unknown /C=CH/O=Linux strongSwan/CN=sun.strongswan.org -V 190826144456Z 2B unknown /C=CH/O=Linux strongSwan/CN=moon.strongswan.org -V 190826145227Z 2C unknown /C=CH/O=Linux strongSwan/CN=venus.strongswan.org -V 190826145436Z 2D unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=alice@strongswan.org -V 190826145626Z 2E unknown /C=CH/O=Linux strongSwan/OU=Research/CN=bob@strongswan.org -R 190826150222Z 140827150343Z,keyCompromise 2F unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -V 190826150536Z 30 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -V 190826151202Z 31 unknown /C=CH/O=Linux strongSwan/OU=Accounting/CN=dave@strongswan.org -V 191127201436Z 32 unknown /C=CH/O=Linux strongSwan/OU=OCSP Signing Authority/CN=ocsp.strongswan.org -V 190906145531Z 33 unknown /C=CH/O=Linux strongSwan/CN=aaa.strongswan.org -V 190906082453Z 34 unknown /C=CH/O=Linux strongSwan/OU=Virtual VPN Gateway/CN=mars.strongswan.org -V 190905153713Z 35 unknown /C=CH/O=Linux strongSwan/OU=SHA-224/CN=moon.strongswan.org -V 190905154104Z 36 unknown /C=CH/O=Linux strongSwan/OU=SHA-384/CN=carol@strongswan.org -V 190905154224Z 37 unknown /C=CH/O=Linux strongSwan/OU=SHA-512/CN=dave@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/monster/crlnumber b/testing/hosts/winnetou/etc/openssl/monster/crlnumber deleted file mode 100644 index eeee65ec4..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/crlnumber +++ /dev/null @@ -1 +0,0 @@ -05 diff --git a/testing/hosts/winnetou/etc/openssl/monster/index.txt b/testing/hosts/winnetou/etc/openssl/monster/index.txt deleted file mode 100644 index cd9407ee9..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/index.txt +++ /dev/null @@ -1,2 +0,0 @@ -V 390321140608Z 01 unknown /C=CH/O=Linux strongSwan/OU=Monster/CN=carol@strongswan.org -V 390321140716Z 02 unknown /C=CH/O=Linux strongSwan/OU=Monster/CN=moon.strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/monster/index.txt.attr b/testing/hosts/winnetou/etc/openssl/monster/index.txt.attr deleted file mode 100644 index 3a7e39e6e..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = no diff --git a/testing/hosts/winnetou/etc/openssl/monster/index.txt.attr.old b/testing/hosts/winnetou/etc/openssl/monster/index.txt.attr.old deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/index.txt.attr.old +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/monster/index.txt.old b/testing/hosts/winnetou/etc/openssl/monster/index.txt.old deleted file mode 100644 index fbbcb81d3..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/index.txt.old +++ /dev/null @@ -1 +0,0 @@ -V 390321140608Z 01 unknown /C=CH/O=Linux strongSwan/OU=Monster/CN=carol@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/monster/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/monster/newcerts/01.pem deleted file mode 100644 index 2ce2ce3c9..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/newcerts/01.pem +++ /dev/null @@ -1,46 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIINzCCBB+gAwIBAgIBATANBgkqhkiG9w0BAQ0FADBIMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBN -b25zdGVyIENBMB4XDTA5MDMyODE0MDYwOFoXDTM5MDMyMTE0MDYwOFowWTELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB01v -bnN0ZXIxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIICIjANBgkqhkiG -9w0BAQEFAAOCAg8AMIICCgKCAgEAqYq89COSvnLQplrjtSrDyvqvJqXN7mfmgfgR -yGVG6HVoA3DU/vJPo8xHT43eTIBkT9wxernYxGw7UZwG6iiY3Me7Q82f+2TmX8mp -dYtP53SWASOHBiLk7d3yJJjCY2GGP8Vb0avJa8GEOy9ZHTOf5HWwMDt9EQKxOzkw -BebpMLCf2Mi1robNUj/lEgE+3AGfikF39E3JaXhna3mm+7PwO5J5udpxC/rVa+bO -FPoBoBOY7v4fuq0CV5x5q/bXn9oVWteF/U1fnnOf5Dhe3P057oj7kARsmGk8e0DW -kk1vTt4jplSg6jhH7izy4OhiqWkR7QV/BMOQBqBd6bw9Ojk12LFZBQulM0Lmtou5 -mGabckTMvtI591UCGNqGMcVDsxFIX2ZMvfScMahS6pUq+hjiR95mwez2Z1Sg014l -cFg11mzjXGGBFuTCl3smJqRT7UaI6JfjNz1f6p/7z8QhjKChVA/xnJ5yoJWNPest -2X0psHe3AlocUFRxqnD2ZmNO6IuKN5bmN0O4Lfc50rl2hPATXdh0HC8HvcYbRK9C -uezkuM1QEvkev5SFbzgivXb1A2hdRCc1/XRND7Pm9sCjjh3tn5otCMnalc1mk5v+ -t8GhCKV6B7RTzFqu+ry0pe6OlqqzU0yNdqYFK1hoCDXUQzEMJzmI9mIw+n6EE3Hh -fTZstGECAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1Ud -DgQWBBTy8LU5yQdnV8pfwhCPY7q/CiNyzjB4BgNVHSMEcTBvgBQZYq2Wq8b7148Q -xFb/QGMiQnB2DqFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0 -cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gTW9uc3RlciBDQYIJAIORWNru -S4GuMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMEEGA1UdHwQ6MDgw -NqA0oDKGMGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi1tb25z -dGVyLmNybDANBgkqhkiG9w0BAQ0FAAOCBAEAi39l78OCI9S0I3X62HbkxiLguvnc -CbXY6Tqmz0Ms8xqZgYzJOk7FLB/4v/zJohOH5nd7KxJ81KbcERyASpybaLM0/V+V -oGT0rDGGH5cS4H2uYfs9HsKFKKPbZeCnExFyCamXjBZkl5IZNjdpS9TLyXRJSyFN -OIRNhILPSriqdtzgRuGOeX798U8o0ObizGQRVlT0p0lI4t64dzZbIh3jSXjCf1Tz -cmVOC8qhhGvxLlorSy5K98t2zNY7DvzwtvoQrNFGtso1kvfmaO4XRCvSZsmqPpC5 -mmWJjNEG2qcbmfpt8TotyUHgEJTZXwXlPVVb5OXHTW6jXk/MN0UiMTLJYcvJ1gji -kSnGNHzRH2rKlYRED+jlzzHAWSv0mBGcOTdmfBV6+TJ7QhWhLZBzAUfwqXpAy9Vk -idtyB0eSWBTIvhZY6SzB0Rvkdj0FtZ+tNURT4dPtiO0D+LXm/ojpdKKI2tFNOgwY -n8df2u3xnCRvHqcF6lvu+ptnwUkUDDGDuiM20+sm0HHhLIj51v8tTm3Q/MzI0BAb -G4HOSQNDzymWDgzIE67UTxBwXVDbSLkzH1vhFXtZQlD1UHqOUT/4FQm5ZlVMF8na -FKxHakqoh1CdI8TAmM64h3hp1zp+G9Zn0lfcHRhvWBvpU8mgF1cbEvgbzjd9+xLe -q45/8xuZPnU7XIBvDcZTUk8LRIThcTxQRlQdI1UJnvPOBYG3mUrLs2UdEZGwsooG -zMOj3EQwqrR67rQiuGo65IMPDix4mwHjcZ8Gr4eqLDwSUS5yoPX1qI2qNLQbI1Ni -8PEYMXQ0Xm+9Z86ZkI0dAIBWLkEGkz5Ngqk4O3JLzF1O/XPG4E9hGJ8WsHQW6pk9 -+quv5nVNCAO0z6FYfQoYprdbDBur+N/no+BYIcSFSpLcNgafLXgj3I65iJ2VmRi0 -V0xAfxcRiQN2+/7aao2zLrrSPHU8YsW48ISw9ibQ9EckZMVtnhuYpBJuX8+auZ8f -OgBmgRi7fCtEcMlXsiisQehymMs470eDRfWFUMzgJC8tMOQIWNdYM0Bo29wYUJPN -jD+NO0n+PisFMilBEyoT2pD1i94+5DWQau/7STb3GbpBsLb7JbIrQEp0oSdsvsNR -SaJQEqMxepJM0OGp3FMr79s+/a13+TMm+jl65M6sV/YTDdYFlplkWyHDjbL+WjUu -lvDEURfBJrtT7u673RakCEzl5e53fP01HXFhqgMSloR7j2XNiyCeEUBp+zetXxwb -8e6IKtbXWU+WcXIdNOHAL+OtD1vUK3gxupJPrRNW6daZKWUDbjRixzXnjeyIw8It -bRldc5VjyM0G4FMbmIROgRcvjJ74MUwnHpgPl9zQ28HmbxKbANiJJZHIDw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/monster/newcerts/02.pem b/testing/hosts/winnetou/etc/openssl/monster/newcerts/02.pem deleted file mode 100644 index e83798c07..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/newcerts/02.pem +++ /dev/null @@ -1,46 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIINTCCBB2gAwIBAgIBAjANBgkqhkiG9w0BAQ0FADBIMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBN -b25zdGVyIENBMB4XDTA5MDMyODE0MDcxNloXDTM5MDMyMTE0MDcxNlowWDELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB01v -bnN0ZXIxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwggIiMA0GCSqGSIb3 -DQEBAQUAA4ICDwAwggIKAoICAQC/9647SgAcK/or/Qs/3cRc19po7oex5EBdPR7b -vInAuzrVMK84+ifneBWscVhBnxcUI37D0SpKx0onrdskMOyv5nmkdcgQf8931eip -scNsw8bC8MJsbc5Jfn3DKPurbKK2/uFFE8ot7S65HY9tVBsxKsrjS5YFPE+DKKP+ -BgVk/9hL0Kqq2iKuWTq8YTRMu5iskpLIxqvuz362G46BKoW52pFegeDzpz/Bs/7y -0oWPRcNcuRQR5XFTpF2L3UosniMkr7aYU5Z8s7IqiEx7txGh5SxRB+TYIZwB1ODa -L+bnclQeMsBiFqlO9UI38UaxEQgk/+UhgpaX/DPrZg8KJmjW3e+x8xcwL3ouRLy2 -2Z99WMnV6TlwpTKj24EQJALmLG+UJG+hbV9P9j6Mkql3FHb4aLZH71CvyCqeg2yh -FGiuaGEe8vS9+Dj5LKv8hSbBe/MSQDiPhKT1gb84TiQMsWfxLN7oDXunohnhMZfu -sydB/c/R/ooA5ri+lE5c65bP2Mk+ml61p6z7lJv+DXBDXW/o4v8Imjx2OMsL85LZ -vYWJppdJrThd/m4OVnCXYfuHMZqedsIvNR5blnldATLBjWWbeoKhOyqZb8hZ6HFR -dlJ11LhxnGg9itG385L3Espl+EVcakWBZWrOn5/LGNKZH3UedclEBNci6lSadZaP -/UfRCwIDAQABo4IBGDCCARQwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0O -BBYEFOQpYirU7vrMZUWDkqDijTPuhPQiMHgGA1UdIwRxMG+AFBlirZarxvvXjxDE -Vv9AYyJCcHYOoUykSjBIMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ry -b25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBNb25zdGVyIENBggkAg5FY2u5L -ga4wHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzBBBgNVHR8EOjA4MDag -NKAyhjBodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4tbW9uc3Rl -ci5jcmwwDQYJKoZIhvcNAQENBQADggQBAAEsjsebEspAIANEBVWRjRpowIJlVSLf -WKzblIPlhClXafHGJbhiamdtS2FmEh/rkzz3Ml+9cJy1KnB1Pn6+4JLSJe5xAywK -lKTT2iY0KDdOsaK5j+CNJ2tW9NrJPxwtIz+nGGqqyyEUPJE1FYxphbLgmwFNBm2o -HyeUVYI+gyfmhyHaXHKOmbsDG0o+pUX2tVOs0KdyU6deaAtEf1E6aA5TpCAi1OZs -pdRDXFUfjdekRkfRr1PZ41Xwk3t6E32YhIE++r7QneQPhXymxVO9nepmpuSoHvlX -Hb4JN2EQ0zCkkkOfqCuF46zVxsR46/3cfKbRsaVmdfGjvmDSCDI47AreluYiPTGA -zN4XN91Y5rPZuT9OJYV4UrYv9N1jH5StVmSz19rbYOeozJXX0PBjdCKHEonD1FHY -xWRpijVUG6NWVLKpvdg3RiFw78wIrNPAeVDvLL+112nbszNDNLSoOJjOUBySHJda -WYFtg2IoAUis9r/o7uykNcC6KiU4Y1nC8PEIhMi4AMA9UgBCn4ixYtHI9jkfHcrD -O1kvPRUo3hKzrhftLYtfiBfTEh+3Xab615lt5vNNhdI7d4knqUXvVdURtvlfJLZv -W0YdvwjJtrVJAiCtX3wyxy72O1ZOG5kHCcK5oHUHg5W172rK9hK4LByk5ESqtc/t -YDG7TmZLtUceV5yK4gz7pwIwXthA8yayRy+lbk8BFxRMfOEfb6rPdm0vvmPpHHDu -yHR5SJTgpGo+/I8N1zS6PNeUBh0RAbSnxHJSMLn+GYTs8s6Atnq05SIuVYxvXyAQ -ULf+ppNN5lngSZHPaOFJNpC1QL1+DdMNueDITVxYx5DV8SkWRPhzS77tsYeUxVGI -IpUVEqSggGe6Q4YWv2smAjSeqaS5HNGxstE+Ybat/cp9QMbLc7gwKxwRQHhVRZ5O -0rVq2bZUyly8y4wX8G8WFMNuCoAcHAdMvKh4JtmdDDZlbxdC2mSVbLSuTBfGvKc1 -ScwOBtSqQkm9PsTMitZM31s97WJLQIZbq82g2ns7hfEXMMIgzcFLYlM1SovbDZI5 -ZM63NBVTaKyj+Gxy8FcAPBPtPWwAQT+Gdi8gFwtcEilTOBECL5y0hzlL9aJpsJEq -4KV5nnM5rutUufiYzQMZqME3g9VWk0kQteVpa4x+4zsKH9lJSSS/y0eCo/jArS8l -HSmzUDkj2cWmf/azdrcig7g/mHeEbKu1JH1X5lRdZekqcRCW6v1OjP025B/5nSnL -WYPUI9RLb01fmPjWdrc4+hPnHjePp8w6tuM6U6huMCwstnOel6d2FL5hOWvXNmIH -I+8zv7SHhIWQmUbC0YQn8BFqvqDC08In5x42YiTe+42YEtafkTkbY8o= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/monster/openssl.cnf b/testing/hosts/winnetou/etc/openssl/monster/openssl.cnf deleted file mode 100644 index 170daba56..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/openssl.cnf +++ /dev/null @@ -1,174 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl/monster -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/strongswanCert-monster.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/strongswanKey-monster.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 10950 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha512 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -serialNumber = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 1024 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -#0.organizationalUnitName_default = Research - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan-monster.crl - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME -#authorityInfoAccess = OCSP;URI:http://ocsp.strongswan.org:8880 -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan-monster.crl - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/monster/serial b/testing/hosts/winnetou/etc/openssl/monster/serial deleted file mode 100644 index 75016ea36..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/serial +++ /dev/null @@ -1 +0,0 @@ -03 diff --git a/testing/hosts/winnetou/etc/openssl/monster/serial.old b/testing/hosts/winnetou/etc/openssl/monster/serial.old deleted file mode 100644 index 9e22bcb8e..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/serial.old +++ /dev/null @@ -1 +0,0 @@ -02 diff --git a/testing/hosts/winnetou/etc/openssl/monster/strongswanCert-monster.pem b/testing/hosts/winnetou/etc/openssl/monster/strongswanCert-monster.pem deleted file mode 100644 index 03b57243b..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/strongswanCert-monster.pem +++ /dev/null @@ -1,55 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIJ0DCCBbigAwIBAgIJAIORWNruS4GuMA0GCSqGSIb3DQEBDQUAMEgxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJv -bmdTd2FuIE1vbnN0ZXIgQ0EwIBcNMDkwMzI4MDgwMDUzWhgPMjA1OTAzMTYwODAw -NTNaMEgxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4w -HAYDVQQDExVzdHJvbmdTd2FuIE1vbnN0ZXIgQ0EwggQiMA0GCSqGSIb3DQEBAQUA -A4IEDwAwggQKAoIEAQDL3Cy8fYlD/Lqc6vXnWakywyvB7rouV7CIdxZMGHz/6zO4 -4sZaeqWy4Fmp6zPuLI8RtxsIyrZAJzqnTDNRb6FhosdluTy/QL2N+M2U0fKeRjAd -2IInFOabqSSheB8Np53xK28oZ3xe75vbpSRiqGItmqZHioFPpNV+gRv2NC2NSUqr -ta9aRo35m2ZyQuav4+oOYalayApZWr44w8qQJRILvFo6jc7x5bE+LgFNRfe15/MY -dyrabatILkOucP61VE7QqftLj465w1GG3kzyt4PsX5FKkSkhs3wMnQKLJyvxUIlk -sC7m/NzABRAEAfLAODJJ9indUCVjcLDC81avQPoHOSD736hkYpWRnlrgvu14q+5d -kBRvyCQu+SoBPj0oMtEEdaPk7aBGjXDvKkeJAZYEcOP8h9oKUQjwYUQhQ7Np0f33 -YBaQSCv/6kfl+260XXMWQrQd4iDY17x5H8wA6mncTQ01JHIJy5pixXt09dPmWaAh -qZWaDbkSLslO05zai45QpTFQ2Qtw3d6w5BY3u2bREB7HnyFfZF8n43pvsInNv5pQ -HLVHN5/TP/YVwbZj4UXXgAjkL/4t6DGELk62VkrxB1dQDopimFRmaGctAGWbo8ro -UVpGDXnSHCn9SPmEqeetK1fJHcCeQskVFakIB3qdRJM+rsWcOFA4c40D6uKyvLHe -xZbqaOjpL2r9vfuzMtbUMUinZNBqVf7dCkxY02gdi1HpTB5p1VBSRbXdaC1Zow4O -Rn2Ekd6/lr5G45S8ljr7EeGnAUKFOoyU8F6dYmvgwBTgNwQsGa+MbWkuaaxuIq0f -/e3J3PYkdQ+7tNXPsqoDXcOtc0ZPlBRwDx9Js+qh86e5HKh85DzBjjl97giv/3PC -Ek6imgHhx0QsulWUfGzls+sd3SXf8azBFt6Jh7lUJQafNH++fLZvryGYa2gjEn4V -Cwr8PTaWLm5TwgHlyJTH8Zkk7yEVZvzJfs6UC8tEaYitmAb8e9cYTztA0e4gPeY/ -9UTyb0XAnol368DGKi5T5L1x1NVHkPc5zVXcGUvUFpEd4q4aJWj9xUyskt13fl8V -9BOKc1BJZUdCkxRSt1wF4tlcFs9EVbOoYOT2+KJiaWB59ke+O7HUxnjFzNfPFLO9 -ItgNHhahXrhX22e//B9QhzQ5O29UhXpX0y624DK/e/bj96c6ve5NqDIcZdOyVduT -XiEyfUpP0ZjvwRbS42A1VYs34ELBt5ntUhRvgivXAbBnC19pv/WFurMzaxueQgjh -e/TUX1FWXh8zq5qPvASxkupdo5GOrcjn6a8zTmRPS6V8jVLQmUHMsCsyFcVUECsL -99wet1nlFAloL59Z6Cjj3LkyLpeIG/o4ItGEdw5bAgMBAAGjgbowgbcwDwYDVR0T -AQH/BAUwAwEB/zALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFBlirZarxvvXjxDEVv9A -YyJCcHYOMHgGA1UdIwRxMG+AFBlirZarxvvXjxDEVv9AYyJCcHYOoUykSjBIMQsw -CQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMV -c3Ryb25nU3dhbiBNb25zdGVyIENBggkAg5FY2u5Lga4wDQYJKoZIhvcNAQENBQAD -ggQBAHcfJo343EP+u0T1DTa3oJbYtqON1F7UdkJcOUxRhp4HFlPEOFxSnHU5Qi2f -hzxWZTQEKI2q62AXdyHDygI44dCpSFZNPcZHdwBl26maMHubv7JXFl7TWupvki57 -71ttz+0wc5iU38g3ktVkrcjzUiqKU2BXnvIuLteOHfnSMGR+JG0v94nYl60EEtZr -/Ru0Orcq93mrQyih4MZMrcssNBI+2HSFmjITBSGAz9G81d/kojtCEsmY37dqpkqO -lOo57HLTUzuMHW1W+c7wCLAl2rhy0xIJ/t5XpNBvPzc7xKZex01A7kKIcUV5vlvj -8+NTuMF4NAZjgtODj0Z3kKsxaIlq0O1+SfubdnHE9pNZPXWm4SSW8w1C+n1+MAA2 -RpK7T1T7BiOQD2fSKsCPvocefiWFOUuHkyRPG5vE0Ob5XH5qT5R3xTq1ta1cpxsA -Rq0s4QHYePZ+gU/7edI7LvZtueOGL4BeR1TSIcbij5+LfFlIjz9ETp3cWc5rxjsm -xBGeHyCslH2EKuufzg5czqmnTdwC4zGNVUyn8c5YUVpOxEZOpnrrGpR7xCHG6n0s -PFpXRuSp6JHSDVCFkJLLrIH0MNmXirgsNLQEOX3WBPeK2hj9X3kzV+iRd5YXqBld -6x1Jnx66iNhJyKHDXfZ84PIZzxaKrDrR35PK3DsZUATx0l56uBWAY3n1Zl5ZrWkd -c66yvP8/WXqO1IctddURFn1ohkkbCVd8ke45ZQoyHIb+cC2gTU53aYNNAZDHh/C/ -MrU7+d5yH29dLjtv+J3JrDwdtBLMZa4RcIOZxhk7MhheNW3K+Q5xpKrdsqourQ2T -vBwEmrfiLHRb+Hk8UbPpDW5m3yaXYmn8bQinkD1BP2ru/f6r4Rj+aAtNvz8ofgAg -RcUcD+jeIDAEWnFCKtHxtp+fLYm5npnwfyCyOID2Lr3K1Z7SpqzoYYq9bfc3AdtL -uHr9RSjdfsuG0l44xESwC2+Pp6rHwvAIPfPgcZiOX1GObytxXexWYCy9g/DKmUVv -inTJNjHpH48ffPmCBE2LoylgBv/dSmf6hQSf5lqsKQ3tKApJv8t0oO6jqyvn+aqs -CTi4WALKhZn9YRKRzcwzYVav1g0fHkrwRQxv8TRM0tYWZ5V01qgumxD3L/37vqDR -8bx9KvgiF3DbP2q8IbVuVMLwjU6xPH+5sWJCS0Cx2haW1oVw7ppd9sgAkj/wxzt8 -9jl/bx3rD3YwoobFvqry0Rhe4J1LidAAKX+E69c4GwoTIe3eqL/TYkis7YIFLjea -cm2lumjrrFcnbZLvDK5S/+kfZ2Flt2QoUznNeTTNY1nAnJSgqOgOocvyYDA9vx6H -d/Fp6btmZH31IEyJrRNVOpCwZPI= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/monster/strongswanKey-monster.pem b/testing/hosts/winnetou/etc/openssl/monster/strongswanKey-monster.pem deleted file mode 100644 index 8d24aaecc..000000000 --- a/testing/hosts/winnetou/etc/openssl/monster/strongswanKey-monster.pem +++ /dev/null @@ -1,99 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIISKAIBAAKCBAEAy9wsvH2JQ/y6nOr151mpMsMrwe66LlewiHcWTBh8/+szuOLG -WnqlsuBZqesz7iyPEbcbCMq2QCc6p0wzUW+hYaLHZbk8v0C9jfjNlNHynkYwHdiC -JxTmm6kkoXgfDaed8StvKGd8Xu+b26UkYqhiLZqmR4qBT6TVfoEb9jQtjUlKq7Wv -WkaN+ZtmckLmr+PqDmGpWsgKWVq+OMPKkCUSC7xaOo3O8eWxPi4BTUX3tefzGHcq -2m2rSC5DrnD+tVRO0Kn7S4+OucNRht5M8reD7F+RSpEpIbN8DJ0Ciycr8VCJZLAu -5vzcwAUQBAHywDgySfYp3VAlY3CwwvNWr0D6Bzkg+9+oZGKVkZ5a4L7teKvuXZAU -b8gkLvkqAT49KDLRBHWj5O2gRo1w7ypHiQGWBHDj/IfaClEI8GFEIUOzadH992AW -kEgr/+pH5ftutF1zFkK0HeIg2Ne8eR/MAOpp3E0NNSRyCcuaYsV7dPXT5lmgIamV -mg25Ei7JTtOc2ouOUKUxUNkLcN3esOQWN7tm0RAex58hX2RfJ+N6b7CJzb+aUBy1 -Rzef0z/2FcG2Y+FF14AI5C/+LegxhC5OtlZK8QdXUA6KYphUZmhnLQBlm6PK6FFa -Rg150hwp/Uj5hKnnrStXyR3AnkLJFRWpCAd6nUSTPq7FnDhQOHONA+risryx3sWW -6mjo6S9q/b37szLW1DFIp2TQalX+3QpMWNNoHYtR6UweadVQUkW13WgtWaMODkZ9 -hJHev5a+RuOUvJY6+xHhpwFChTqMlPBenWJr4MAU4DcELBmvjG1pLmmsbiKtH/3t -ydz2JHUPu7TVz7KqA13DrXNGT5QUcA8fSbPqofOnuRyofOQ8wY45fe4Ir/9zwhJO -opoB4cdELLpVlHxs5bPrHd0l3/GswRbeiYe5VCUGnzR/vny2b68hmGtoIxJ+FQsK -/D02li5uU8IB5ciUx/GZJO8hFWb8yX7OlAvLRGmIrZgG/HvXGE87QNHuID3mP/VE -8m9FwJ6Jd+vAxiouU+S9cdTVR5D3Oc1V3BlL1BaRHeKuGiVo/cVMrJLdd35fFfQT -inNQSWVHQpMUUrdcBeLZXBbPRFWzqGDk9viiYmlgefZHvjux1MZ4xczXzxSzvSLY -DR4WoV64V9tnv/wfUIc0OTtvVIV6V9MutuAyv3v24/enOr3uTagyHGXTslXbk14h -Mn1KT9GY78EW0uNgNVWLN+BCwbeZ7VIUb4Ir1wGwZwtfab/1hbqzM2sbnkII4Xv0 -1F9RVl4fM6uaj7wEsZLqXaORjq3I5+mvM05kT0ulfI1S0JlBzLArMhXFVBArC/fc -HrdZ5RQJaC+fWego49y5Mi6XiBv6OCLRhHcOWwIDAQABAoIEAH/5PqgxElt4qtlY -8neCJKI2PSDoMT5oU+zG/VtVwBqT1wtIaQZhmeVZy0/M0/O/SyzuymzRfGl3du2Q -+2Iy9pcpLY1hJI5XIOef+cZjqa/MFeaWhNXt2/p5ywIGO1BCGfdMseImXL/oIOpY -mCfK1p8URy//9b8+lbttZ1U+Wh4olVSHoIXGZtf7wusVrmVaaRMQIdVYYI7JVUKj -PmUQsGxnmCjL3s6hx4tmK/ELbD5oVoXUQTWPxQdx65D1ZCAGxddd7d/4Rbu9rk9A -/AMeSxW2xKmPyMdcOhJc+jzKoV5ClY18wGTG9fkg9HXflzktzfv6KTvCVUZAduZb -Bd7MpmikZ11WgQpLjOM2CoytrrujCub3TK0Dcht+1Oyk2pWCmQ34n6NVvNitb+jj -nLaYJUmyaJyd17XEOx1TogZTzqwuZATH8EIw3FYyB2KLXWqig13FD/b2fnJBtBJB -cLpebYgbYqAqueAGTWuV1zOMIrKnLswS/lQQK08LydnPI9dZ5kQf/35mUjVPQr2+ -4WepIBk7yma8MaIFi2qp9bFpnIhpsIB8FRyZAZ8Gtv/fdBTtVP+8Y1iD/EdrTLJS -s5zpPPBkEF60UhEk2U7UWXi5mA+FWhpO/6GcUg4hGgbjqaerVUGzRM9++u0etcaj -q1HcCA/z/Y9K/chc3ZciirKb4CYdCZ/84QjurI13yubhKmODHBS8hsn7fPLroymQ -UkbREZwLYHii4LdesnWYuDn85WCM3uroiKtgCTTKMMTBbuZhg6Z89xy+Hr1gn/6l -VJ4W2ZfKgzKMAlcz91bqHZ2EsdMmvl78iFye/WjQe38hj4Ccgub+wGOIsdo4tWKD -phL5kGbUI2PNhcERva710o4K8KwMyfhZ5iRbE51TiCv1xlfaYh+kwSKHh49j14TF -P7Xp42DRAR4RYW4vs2krXQdoTwBMzC0DyWz0tSMU13XQsuut7A/rvhF8oUswBKCt -UfZ0LpDJd67jMKQ+8ccvax4Zcapv0Ifz7xOfQVQGEyKtpt32d3qgBbvDpq9BHGst -ux0cHi75g3aKpxZYSPsqRea0sKNdj84e1xUPc8JQGT5i4KrGof405OqnkOi4sl5z -WLD+9Y8hUzXE3UJ3DMMeQqddmAOS1LuSG/XOsAoM78ukBKv2yfYOcOZNCCJh24GE -KzHwLG5/AemObThqO2ztqttmcDlrKhg0VGngAXctxluCWPRHXwKrwtaWMsqadCQJ -Na3DigjXmuFteBX8Z5Jbw7pJtiINa9w3izoGQdM3vi99DDm22YjxpLBpB36eMoq4 -Mv0pgP0okjjZWmDZ0lTiGFHpzSTSZ5MzXKS/brUYX1WoUA83qwU9NbZ3vuniMuLZ -ksk9lJECggIBAOdVcKtE/7DHHj43W37T6oNxLN/L4nHIR6bQL02UPWuQpe9Ch4vi -ETDQiKGOw6fcz3+GCeCMQSPQJ9SZZOUKhpu0vkKRWSIg8JSXYu0ViaHo1SSUb5Gr -vDVcE2nmZI0ptf7DcP0NUPAKxCTM4ForSIgjPdyTXMYCBYcDe053y5Svebx1q9Vo -OzKtu0Bn7YALvRY82w3KKhRlR3TGOFPnLiKE7/K0EyrFV1OIRskLbtUVoeMQgaqH -P/UhDHz84JjeoE0xtwgdDUMejYADr/h7fjtixvqnEXZALlaTg+sO/aQ/e2Jlt43a -w+lJRBeujWQg59M9BTs7naLILB2o3gQJmmbs0uE1l7iZkEU4LsUPf727rfStZhqq -lQr/3XX1lFnYPAuY3fgLqnV8eohJVakgMmi7mj/ZjpjoUKk2W3Us1N/ro2bgFfuI -IntWYctiGK3XOQ8WicjDySe3lJa+vfKrCBBAugH3pcmj1p+I7fhRDtc8ogeI5GkU -urQQ9PJS0ArRw4soYo3khnf7vB7Ioos846sfPlgy4OHbyiu81l04v7+e6svoWKPb -TYyKW+qQpiKMb2O/5wqtvYTGlPM2MAUvYgVI7WalGjcbKtQ2q/uRjZzzFLyPo+7e -/6fqwuPXerAAVCZYJKGt2RGnmhxVm3eRkOXF+MXPejlh2T80iKP0diqpAoICAQDh -mM3Ppvsb61tQUE5bN3iQqr2AO3PKb3Nz8C90R243Qkz+OFwc75kziQL3IbcmOxJY -Wq3T+KQIkX1aDNwU/ip3Qf3wpqbtxlpzJpgYQpAEzFdEKzP36rMYdxekskeesVIu -s8v/PxYwJztfaHxeTuxsEDB7uxg6h9IkypY2w/vdpruKR6XOQSxKyxekLkRK2JTW -lzsVUt0VQHhIt65D7I8sN6RJaOhQpSnCVblZo/HrEN4pfkSffk3AUyd+AS2xjRa8 -Yp9FB/TRabC7kgWTIrBmXSWalR8K1B4y1DGXz9x/KUT85Id2k+kDC5y00FVtqsaQ -m6D2UkR0XLnvdCAj2Iky8HjSYuvvyoi/BaHJfLnw/S/j542yQxh55Z4bneH5wYgJ -KBU8KGTtuxP0RC1AmalkCWViWadItTP7mPtq5YbvyCoWNJEvQx7JbLVyYkCcFOY8 -+aNfkdhEMCQvLAkmwMqHwrVdSVHOic+kS/amVWtRjQwZJ7AIVlcIfLkTI/vZN+oV -58jqBruIDjW8zN62QYa/D4os8B7vyv60p/v4LufCThgtFiB4MevlD2LNjR/0q/nF -zsuFRKV4pfP8gtLEzkcfj827nGzOGT/1B2SoB+YJxNR3rfLloCvMNKvKtf60idRY -jAH5ArX56HH9XOcKeKalu0fvKAE8+sbxBNTaK3B3YwKCAgBSlziAjUPUc2Kix9TM -tRAXGYLx67LO+LhMICujQPekvaHgiBoooO+ORAVj2LqV5cnXN52zI5/mD10JFDLn -axif4qnCzm3KN4RtKJdTGctnmN7wDma+1Vd+nX744h6oH2owqMpgLi7lZJKeqN64 -kpd0s1BUve/zaalbiKyvWSm/zd5ioIhWyr3H3CrsVa5/drFtjRCQHctkOLyIPnTB -z9myzU91kUD+ljIVSqQrBv/s56pCjRQeM+drtv7kaMwvB9yncsZsCSNBAVl3iNl8 -l2p7/UoZFyiu1T81/bitZU69I0UD3ljoNmCXm2bKJbGpO+5IhpKlkSU4hsrpU+7f -9iW/9XFcomumpnzRmbto852hua3jmzzG7HwFz0/b22+5m+/kHBGzi0ayZ1y/557D -oREeP0xU23GDuf2CTDve28CsqU5PXlW61eGpsy97E2zIM/zVHDDZEr1whqRwJW1f -hBx+4P0H0sjH8syfbJ25eAcaZTVcB021DoeR3jP1iAdqtXVg62w0SJCRqbiCLROL -LpQB9kel6ZRMTtIhR2wpICelXDFr12o+Jf/L22Hxnu8Rip4COPNd5qWxD80CACio -0T/nrx/C89MmNXbXCSXhzReIH2kZ4RagI9GWu8QU4EuXJqbkgbeiWZUULohg8Vdu -GvRmdIXa6bYzYnHTlQfrsU228QKCAgBlZVibzGFw2wffwTh2pyf5XcRurkoM4qrx -oTKzAKf5DkOsv4gnOUmScDJ1ASJgfIxySc93Rnnzn/DHWKBSjypnD7IjR8QfeteM -ifwyazhv76gJa6Gf/E0i4eQukjK+kNRvSUCXKLPAUOHOsBe2C6MXru8bravmIsXA -441AcDX0GcyRCkLrwT83HrExidoICfBbwv07SFM2ChQGGwioXtq69QdSN2SzWoi6 -X+0+7QD+tkYkQCx3wz0PBFDrwXvYIaHmai1LyZevx+E3bRo0V5MRbyxHnl6lb1Fj -ZxwjL7nbLaFkSRLZqQFB7SYx3rGG6Qr2U/y0uaUq58JqbbdEZT7FNnAXn36L+Gwd -71oYRYcNWb78oEZ/qMiHgTzfDMdUijeqZemlcEJs13jQgRQVxPrti4uV+NXHSCpl -Gw1lrmRHwZ+o+1eF9pUP01x6XM7NWFdjcJCNk++wNjMNQK2cTWq6OjlqBFpQioBZ -SAtEF4B01wBpDf2Awc28ctJ8V+AKcac00UjsZrpDHJ/qi+pN4IW/uixQplxBSuvQ -JvCJTAu+uXsESL2vSEDOY2v1F0kVn3ZUAe5Xp9L3tx9Cj0pMSqqM9QVzHYuJ1q94 -YipLm8E5As68O+LAco086y+LnOEuJATdB5Cbayx/dopFZkwx2KiONO7P/xsPXWet -TI6ewId8IQKCAgEA1tzZKsVfohvP9CYa67EdkJ24HWEzmiv+8Y1/UZZXi4PTpBNt -EdgE3cc5K67aSzTV3yuLFCQ4xCrnMYo5ZdOEQAqkApW23M/fOkPQA1oPcmNVLSVb -DrXtjTk30ILr3jWG7ekLiQ2RrtGVzHTZd9mQL8uOL2+cDbkwR+gG38GR0V9TKXOP -HtnuSezc0B72SMs+TaTwZXmt8d603ImLAwCUj06PZlknySP+SFUn/P20cDyZCeHu -lKqONhsR5zJSXg8twJvEHuBK7ZtgoGmuQYIGSREiXZPl000+DQ4Tu6OF2CiUYl0C -2zCyuoBFJbEcTdvoQMcf1TZZ7uazCy9HkvK+KL/y+VVkHmYrrNvWZ2e7/dsca/Sp -ma1+ABfb2GaIWp97SNVNhmSAeEHkJVfKY7Aqlh5blGorXQSd4pxkjBWo+gY9ZNgJ -S3weoP2GSGTY+gUf1wCOhUS/738ee+af+4iGonIsdKV8IFOlnLH5rC+MFF0eBNBb -SuzYn8rl8eoZFIay/kivyx5IBU3d02If4a7vs4rMnPVX3Y0TFSa33Q8T9ykew8vQ -UJH9ZJs7lRPNB+x7GimfvLajR8jZB/ezYVpJ+gT5fkEgggBtJKpuDtPYUxFb6fld -T+9VoObYb60kv3hAomX9DmPAAHdJL0cPI+A97k4LLwj2gk3hMivjXWexJmw= ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/newcerts/01.pem deleted file mode 100644 index bf4ba9375..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/01.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEDTCCAvWgAwIBAgIBATANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMTMzNFoXDTA5MDkwOTExMTMzNFowRjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21hcnMu -c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA -zRlshdPlLggS7bpAlovamLpk9pxYUv3c8J4W0kV4knMPbSJywfctpce95iPZfU6V -ICV0fVOn/0utJG+0lMTYwcf5zvyIDPDccfsTT3WI+/PcaUpU6E5aaPAZxDG4na6w -UVUKiRcOyiuyXanulnu+b48nM7MgoMVZNDWY5q15enEZh1oO2Fy0DlKwweDKEuAi -8xSnu2RcZBFSZMDBCRCt3QgHGZygrzjP3vN6IgbvHL+YWIycMi5yiJR5EoCE6D17 -AT1dh0C8R9m1a0LUK8cKiN+akZQlK/AHYOCu77fg1vz84dMDRIs2PCUs6Ww/fvqy -N4r1BXg8XKTVH0zmqfQLAgMBAAGjggEFMIIBATAJBgNVHRMEAjAAMAsGA1UdDwQE -AwIDqDAdBgNVHQ4EFgQUbUWd4UeHwbTxn0Kr9io4nUGz6eAwbQYDVR0jBGYwZIAU -XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK -ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC -AQAwHgYDVR0RBBcwFYITbWFycy5zdHJvbmdzd2FuLm9yZzA5BgNVHR8EMjAwMC6g -LKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0G -CSqGSIb3DQEBBAUAA4IBAQBY0ab/r6K40Gni/db8apZGJqoO3XFPE4K7wi46LNZq -gB3mQgazLkf48luj06rcfux+vC/2W3DyqAtKD5JRccL0A5yxY55p3rrCNvz76Y9H -0AkVledhZTjd7SxdtsfxlRuok4nACwQii9GXcfs8qBc5QE8ZQRAtPwRxVx8hE19n -D3AllTSukJSC6nPJHf+4FXz1Dxt3aFZOnkJM4qERBjFREYE4jGLaz71HNNKshsYy -2UuwLAqsQk6zYogrJgpWLIuMVE2GHoth/rjpkzK/ErAwcV4OgMNdA1bHGl94soDy -zryvlFj1zaqlvdKayWATnrAQQTQeeYz3i0wF95CNR22b ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/02.pem b/testing/hosts/winnetou/etc/openssl/newcerts/02.pem deleted file mode 100644 index e7825e3db..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/02.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIECzCCAvOgAwIBAgIBAjANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMTU1M1oXDTA5MDkwOTExMTU1M1owRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN1bi5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOQ8 -foB9h5BZ92gA5JkQTJNuoF6FAzoq91Gh7To27/g74p01+SUnsSaBfPmNfGp4avdS -Ewy2dWMA/7uj0Dbe8MEKssNztp0JQubp2s7n8mrrQLGsqB6YAS09l75XDjS3yqTC -AtH1kD4zAl/j/AyeQBuLR4CyJEmC/rqD3/a+pr42CaljuFBgBRpCTUpU4mlslZSe -zv9wu61PwTFxb8VDlBHUd/lwkXThKgU3uEhWRxLahpSldEGmiTTmx30k/XbOMF2n -HObEHt5EY9uWRGGbj81ZRWiNk0dNtbpneUHv/NvdWLc591M8cEGEQdWW2XTVbL2G -N67q8hdzGgIvb7QJPMcCAwEAAaOCAQQwggEAMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBQ9xLkyCBbyQmRet0vvV1Fg6z5q2DBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dhbi5vcmcwOQYDVR0fBDIwMDAuoCyg -KoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuLmNybDANBgkq -hkiG9w0BAQQFAAOCAQEAGQQroiAa0SwwhJprGd7OM+rfBJAGbsa3DPzFCfHX1R7i -ZyDs9aph1DK+IgUa377Ev1U7oB0EldpmOoJJugCjtNLfpW3t1RXBERL/QfpO2+VP -Wt3SfZ0Oq48jiqB1MVLMZRPCICZEQjT4sJ3HYs5ZuucuvoxeMx3rQ4HxUtHtMD3S -5JNMwFFiOXAjyIyrTlb7YuRJTT5hE+Rms8GUQ5Xnt7zKZ7yfoSLFzy0/cLFPdQvE -JA7w8crODCZpDgEKVHVyUWuyt1O46N3ydUfDcnKJoQ9HWHm3xCbDex5MHTnvm1lk -Stx71CGM7TE6VPy028UlrSw0JqEwCVwstei2cMzwgA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/03.pem b/testing/hosts/winnetou/etc/openssl/newcerts/03.pem deleted file mode 100644 index d8fbfa1c9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/03.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEDTCCAvWgAwIBAgIBAzANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMTcyNVoXDTA5MDkwOTExMTcyNVowRjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21vb24u -c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv -ri4QmsCnG0N7bxqeUZTQhcmZ/iyN4RsmHwFsiOc06xpnZ7Fbx9gzi/OswU6KGL+F -f9PfvOY36bDTZU8V2QaL30RQUXz3JlG+jUyP9zjqlhsvVYS/cImvqgo3uUkQ0YCD -v2SafTlaQfBOaPFElNEP/H2YSiyB6X80IcHsOMYpskVqPY8785FehjF+pxuyRCK+ -9HXmd+iWdnC09u4qgKRa3L0IamU3q1/BK/afkHK2IAIN4YgM7GzepHVD0f7Exf9U -esJEeh4hDZwSjcMzdybrY9XBxzGqLGPOF128jr+5weUZiBW+RzeBw/gsK1nSPeuX -Od2lPJjTGj+6V3YK6qibAgMBAAGjggEFMIIBATAJBgNVHRMEAjAAMAsGA1UdDwQE -AwIDqDAdBgNVHQ4EFgQU5eQQh2wqxL6thUlCpt52WDA6n8EwbQYDVR0jBGYwZIAU -XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK -ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC -AQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzA5BgNVHR8EMjAwMC6g -LKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0G -CSqGSIb3DQEBBAUAA4IBAQAvLykhZnqldrsMcbYB36WzWKk+hOihr5dU3fv8Z4ec -tsa3gzxXSefDCxGoezVJ4QXdpdNxxFn31A+r1gxKyGI5JL6EyWz6Y462zp9lE7nW -EIC4ldJwxAXqzDEMcJphO29hApyU9TWsWDa4kL5AKtLFLwH3/Uv/jAzAy+qXIO8h -wLtB+wcmhSo8OFY9kX/cyhht7eb7yD/r2e3wVBOCRk7jePe4yWhN8NJAKwfrEd1K -iGq15ymdmeomhplHRsLZwA2VsCspUNZ/eXjG21s3nEoxcCOcQUz3Q7q4ZgBTZoCW -kAc6FQ5zxoZrmzNWFqzb06jmUVlt7baGtdjT7rEt+dcp ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/04.pem b/testing/hosts/winnetou/etc/openssl/newcerts/04.pem deleted file mode 100644 index 25a6941b0..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/04.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEDzCCAvegAwIBAgIBBDANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMTgyNloXDTA5MDkwOTExMTgyNlowRzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHTAbBgNVBAMTFHZlbnVz -LnN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -mlQ2s9J7bw73onkw0ZwwcM2JDJuU3KmmuzETlmLdtg7m8yFCdhoDg6cxrsIvPAWy -Gs++1e+1qzy7LTnNHckaHHFwJQf0JoIGE1bbUrJidX8B1T3sDdvZFbyfmQTWSEyJ -thrdqdPS92VJW/9XQOPeEhudIHr+NtWQfCm3OQFKDXGCEkHOjpVNHn3BPUiL99ON -FiLZX3gZy6vTERpEE8ga66fHtpM3RJfIxYoUQUdRw8iIa8iOvRGtJa/MfOWX6L/H -wquRv3SuCl4iMSph7e/VE+z5xx3OyKSAki914DgRFnQITKjyGxw1lORlDQlZy2w/ -nu0BAbXS1pb/2AiF8jDpbQIDAQABo4IBBjCCAQIwCQYDVR0TBAIwADALBgNVHQ8E -BAMCA6gwHQYDVR0OBBYEFEqPlXBYJh1knX0Q61HMcn9LOZ6sMG0GA1UdIwRmMGSA -FF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UE -ChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENB -ggEAMB8GA1UdEQQYMBaCFHZlbnVzLnN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAw -LqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmww -DQYJKoZIhvcNAQEEBQADggEBAEx3kXh2Z5CMH+tX6cJPyi6gSeOgXy7NBiNsEdXN -rwGp4DwN6uiSog4EYZJA203oqE3eaoYdBXKiOGvjW4vyigvpDr8H+MeW2HsNuMKX -PFpY4NucV0fJlzFhtkp31zTLHNESCgTqNIwGj+CbN0rxhHGE6502krnu+C12nJ7B -fdMzml1RmVp4JlZC5yfiTy0F2s/aH+8xQ2x509UoD+boNM9GR+IlWS2dDypISGid -hbM4rpiMLBj2riWD8HiuljkKQ6LemBXeZQXuIPlusl7cH/synNkHk8iiALM8xfGh -wTEmdo5Tp5sDI3cj3LVvhcsTxjiOA81her1F0itlxpEA/gA= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/05.pem b/testing/hosts/winnetou/etc/openssl/newcerts/05.pem deleted file mode 100644 index e99ae8ec7..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/05.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBBTANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMjQzOVoXDTA5MDkwOTExMjQzOVowVzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MR0wGwYDVQQDFBRhbGljZUBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAK7FyvkE18/oujCaTd8GXBNOH+Cvoy0ibJ8j2sNsBrer -GS1lgxRs8zaVfK9fosadu0UZeWIHsOKkew5469sPvkKK2SGGH+pu+x+xO/vuaEG4 -FlkAu8iGFWLQycLt6BJfcqw7FT8rwNuD18XXBXmP7hRavi/TEElbVYHbO7lm8T5W -6hTr/sYddiSB7X9/ba7JBy6lxmBcUAx5bjiiHLaW/llefkqyhc6dw5nvPZ2DchvH -v/HWvLF9bsvxbBkHU0/z/CEsRuMBI7EPEL4rx3UqmuCUAqiMJTS3IrDaIlfJOLWc -KlbsnE6hHpwmt9oDB9iWBY9WeZUSAtJGFw4b7FCZvQ0CAwEAAaOCAQYwggECMAkG -A1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRZmh0JtiNTjBsQsfD7ECNa -60iG2jBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0 -cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRhbGljZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBBAUAA4IBAQADdQIlJkFtmHEjtuyo -2aIcrsUx98FtvVgB7RpQB8JZlly7UEjvX0CIIvW/7Al5/8h9s1rhrRffX7nXQKAQ -AmPnvD2Pp47obDnHqm/L109S1fcL5BiPN1AlgsseUBwzdqBpyRncPXZoAuBh/BU5 -D/1Dip0hXgB/X6+QymSzRJoSKfpeXVICj1kYH1nIkn0YXthYF3BTrCheCzBlKn0S -CixbCUYsUjtSqld0nG76jyGb/gnWntNettH+RXWe1gm6qREJwfEFdeYviTqx2Uxi -6sBKG/XjNAcMArXb7V6w0YAwCyjwCl49B+mLZaFH+9izzBJ7NyVqhH8ToB1gt0re -JGhV ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/06.pem b/testing/hosts/winnetou/etc/openssl/newcerts/06.pem deleted file mode 100644 index 199d3eee2..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/06.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHjCCAwagAwIBAgIBBjANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMjUzNFoXDTA5MDkwOTExMjUzNFowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRswGQYDVQQDFBJib2JAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDAJaejS3/lJfQHgw0nzvotgSQS8ey/6tvbx7s5RsWY -27x9K5xd44aPrvP2Qpyq34IXRY6uPlIqeUTQN7EKpLrWCxMOT36x5N0Co9J5UWRB -fJC141D+8+1RwJ9/baEIecpCvb0GfDOX0GXN5ltcJk82hZjE4y1yHC1FN7V3zdRg -xmloupPuon+X3bTmyMQ93NKkg48CQGtqtfwQ0MqPiOWu8MBhdztfOyu6aW3EgviF -ithLc02SeNzlpqB3M8GDfX+mr3OVDhhhC2OI+VRlZzz7KxJ13DUR2KkvLZR8Ak4E -5lRjkUnTYd/f3OQYxfjC8idUmj5ojR6Fb0x1tsV/glzXAgMBAAGjggEEMIIBADAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUaLN5EPOkOkVU3J1Ud0sl -+27OOHswbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHQYDVR0RBBYwFIESYm9iQHN0cm9uZ3N3YW4u -b3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcv -c3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQEEBQADggEBAIyQLLxdeO8clplzRW9z -TRR3J0zSedvi2XlIZ/XCsv0ZVfoBLLWcDp3QrxNiVZXvXXtzjPsDs+DAveZF9LGq -0tIw1uT3JorbgNNrmWvxBvJoQTtSw4LQBuV7vF27jrposx3Hi5qtUXUDS6wVnDUI -5iORqsrddnoDuMN+Jt7oRcvKfYSNwTV+m0ZAHdB5a/ARWO5UILOrxEA/N72NcDYN -NdAd+bLaB38SbkSbh1xj/AGnrHxdJBF4h4mx4btc9gtBSh+dwBHOsn4TheqJ6bbw -7FlXBowQDCJIswKNhWfnIepQlM1KEzmq5YX43uZO2b7amRaIKqy2vNE7+UNFYBpE -Mto= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/07.pem b/testing/hosts/winnetou/etc/openssl/newcerts/07.pem deleted file mode 100644 index 5b742fc9e..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/07.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBBzANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMjU0OFoXDTA5MDkwOTExMjU0OFowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBAM5413q1B2EF3spcYD1u0ce9AtIHdxmU3+1E0hqV -mLqpIQtyp4SLbrRunxpoVUuEpHWXgLb3C/ljjlKCMWWmhw4wja1rBTjMNJLPj6Bo -5Qn4Oeuqm7/kLHPGbveQGtcSsJCk6iLqFTbq0wsji5Ogq7kmjWgQv0nM2jpofHLv -VOAtWVSj+x2b3OHdl/WpgTgTw1HHjYo7/NOkARdTcZ2/wxxM3z1Abp9iylc45GLN -IL/OzHkT8b5pdokdMvVijz8IslkkewJYXrVQaCNMZg/ydlXOOAEKz0YqnvXQaYs5 -K+s8XvQ2RFCr5oO0fRT2VbiI9TgHnbcnfUi25iHl6txsXg0CAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBTbA2TH3ca8tgCGkYy9 -OV/MqUTHAzBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBBAUAA4IBAQC9acuCUPEBOrWB -56vS8N9bksQwv/XcYIFYqV73kFBAzOPLX2a9igFGvBPdCxFu/t8JCswzE6to4LFM -2+6Z2QJf442CLPcJKxITahrjJXSxGbzMlmaDvZ5wFCJAlyin+yuInpTwl8rMZe/Q -O5JeJjzGDgWJtnGdkLUk/l2r6sZ/Cmk5rZpuO0hcUHVztMLQYPzqTpuMvC5p4JzL -LWGWhKRhJs53NmxXXodck/ZgaqiTWuQFYlbamJRvzVBfX7c1SWHRJvxSSOPKGIg3 -wphkO2naj/SQD+BNuWTRmZ9YCiLOQ64ybLpJzRZISETdqtLBPKsIqosUZwkxlR1N -9IcgYi5x ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/08.pem b/testing/hosts/winnetou/etc/openssl/newcerts/08.pem deleted file mode 100644 index abd1554e5..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/08.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBCDANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MDkxMDExMjY1MVoXDTA5MDkwOTExMjY1MVowWzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEzARBgNVBAsTCkFjY291 -bnRpbmcxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3 -DQEBAQUAA4IBDwAwggEKAoIBAQDGbCmUY6inir71/6RWebegcLUTmDSxRqpRONDx -2IRUEuES5EKc7qsjRz45XoqjiywCQRjYW33fUEEY6r7fnHk70CyUnWeZyr7v4D/2 -LjBN3smDE6/ZZrzxPx+xphlUigYOF/vt4gUiW1dOZ5rcnxG9+eNrSL6gWNNg1iuE -RflSTbmHV6TVmGU2PGddKGZ6XfqWfdA+6iOi2+oyqw6aH4u4hfXhJyMROEOhLdAF -UvzU9UizEXSqsmEOSodS9vypVJRYTbZcx70e9Q7g2MghHvtQY6mVgBzAwakDBCt/ -98lAlKDeXXOQqPcqAZSc2VjG8gEmkr1dum8wsJw8C2liKGRFAgMBAAGjggEFMIIB -ATAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU3pC10RxsZDx0UNNq -+Ihsoxk4+3IwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBBAUAA4IBAQAnotcnOE0tJDLy -8Vh1+naT2zrxx9UxfMIeFljwhDqRiHXSLDAbCOnAWoqj8C9riuZwW7UImIIQ9JT9 -Gdktt4bbIcG25rGMC3uqP71CfaAz/SwIZZ2vm8Jt2ZzzSMHsE5qbjDIRAZnq6giR -P2s6PVsMPSpvH34sRbE0UoWJSdtBZJP5bb+T4hc9gfmbyTewwMnjh09KkGJqVxKV -UC/1z1U9zb3X1Gc9y+zI67/D46wM6KdRINaqPdK26aYRFM+/DLoTfFk07dsyz7lt -0C+/ityQOvpfjVlZ/OepT92eWno4FuNRJuUP5/gYiHvSsjZbazqG02qGhJ6VgtGT -5qILUTmI ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/09.pem b/testing/hosts/winnetou/etc/openssl/newcerts/09.pem deleted file mode 100644 index 6ca9a58a4..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/09.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQzCCAyugAwIBAgIBCTANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA0MTExOTE2MjkyOFoXDTA5MTExODE2MjkyOFowZzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHzAdBgNVBAsTFk9DU1Ag -U2lnbmluZyBBdXRob3JpdHkxHDAaBgNVBAMTE29jc3Auc3Ryb25nc3dhbi5vcmcw -ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJ0y0yhF4iEygd8M73wNC -8RO590BqiD3Z3x9/5GSVCgfm+ao4hcg6CogNGicu4ybzgPoHt0V/El4D8JRkM8QB -pg/R7WI4L1ndSZGgTHcQ1vViXGr4PUsIiUR/EgVCSFs8+6Z73J4bJeMomy27Hn9w -s4leHbrqK87btA2TETV3UlCaDXC6NF8321ZH+D+8OFQaQ0SqKrThKMVYSTf+QdpX -BlI9vtce1SyS6Kiy4WLdXAt8mO7x+UjaVEzFNyi6SXb9FAGVvO9OXi3+mxm9eK2g -+s1kA4jqDvL17JftvJLKzFZ5irEuTe2+wHdQbwtlOkW1JFAsGL4O+r4NIoBuMBZF -AgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU -iAcKuK7HwQdcvmhqxKV/gR83tVYwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXg -YOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdT -d2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYIT -b2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA5BgNVHR8E -MjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4u -Y3JsMA0GCSqGSIb3DQEBBAUAA4IBAQA4jOyh+neFCkXMZ1gK0o98qkBr3vYEO2a0 -wb2hDv8Alx6T5kwLgdhAzZ5urZpAdiWF3NWE+z9KnEWnpep9MRDXNM8uBglgBO2v -SAmV1BXNw2ZDe63w6QvQnezgUuWkrTShfduEDmb8j5jVdzoY+kTKwjLYHPG0Ec79 -Os3PPqXlfeUOkzWnhGVP2EtHCj8SppMdA/XIuwIq8aLN14SITi6gvo/cDMa5N6sT -Q/UBAOWsxbLReaD7l5OXnAJOg3t/RM36vpRqPseGaAgrKy8805QDU2RxsCHrxwzF -Wi/17J6nmX3e4PuwqPAI/4MsHlFdExRvSq/gXBN/Ib4AHGkUr0/q ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/0A.pem b/testing/hosts/winnetou/etc/openssl/newcerts/0A.pem deleted file mode 100644 index 8492fbd45..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/0A.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBCjANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA1MDEwMTIxNDMxOFoXDTA5MTIzMTIxNDMxOFowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBALgbhJIECOCGyNJ4060un/wBuJ6MQjthK5CAEPgX -T/lvZynoSxhfuW5geDCCxQes6dZPeb6wJS4F5fH3qJoLM+Z4n13rZlCEyyMBkcFl -vK0aNFY+ARs0m7arUX8B7Pfi9N6WHTYgO4XpeBHLJrZQz9AU0V3S0rce/WVuVjii -S/cJhrgSi7rl87Qo1jYOA9P06BZQLj0dFNcWWrGpKp/hXvBF1OSP9b15jsgMlCCW -LJqXmLVKDtKgDPLJZR19mILhgcHvaxxD7craL9GR4QmWLb0m84oAIIwaw+0npZJM -YDMMeYeOtcepCWCmRy+XmsqcWu4rtNCu05W1RsXjYZEKBjcCAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRVNeym66J5uu+IfxhD -j9InsWdG0TBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBBAUAA4IBAQCxMEp+Zdclc0aI -U+jO3TmL81gcwea0BUucjZfDyvCSkDXcXidOez+l/vUueGC7Bqq1ukDF8cpVgGtM -2HPxM97ZSLPInMgWIeLq3uX8iTtIo05EYqRasJxBIAkY9o6ja6v6z0CZqjSbi2WE -HrHkFrkOTrRi7deGzbAAhWVjOnAfzSxBaujkdUxb6jGBc2F5qpAeVSbE+sAxzmSd -hRyF3tUUwl4yabBzmoedJzlQ4anqg0G14QScBxgXkq032gKuzNVVxWRp6OFannKG -C1INvsBWYtN62wjXlXXhM/M4sBFhmPpftVb+Amgr1jSspTX2dQsNqhI/WtNvLmfK -omBYfxqp ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/0B.pem b/testing/hosts/winnetou/etc/openssl/newcerts/0B.pem deleted file mode 100644 index 3c5c5d91d..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/0B.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEKjCCAxKgAwIBAgIBCzANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA1MDIxNzA4NDQzMFoXDTEwMDIxNjA4NDQzMFowZjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIDAeBgNVBAsTF0F1dGhv -cml6YXRpb24gQXV0aG9yaXR5MRowGAYDVQQDFBFhYUBzdHJvbmdzd2FuLm9yZzCC -ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Czo4Mds6Jz15DWop6ExWI -wWt9zU8Xu//ow1F0Kf9a4DLjo8qO+km3gybByNQQv1LrZ1eq+82Gy4RYXU1FnhC6 -dc8aobDmUQkY/8uYXtUmevKF5QcbYciDLp01W1q0DONAlc/9wmvJWhvjs9itWOBC -fAUcH3eUNvMgkc7hlQTqreZTH4zyJ6M54JibkTsyfVg/1yOT41zUU3b+vI/r9kNB -CYcp2DrdhdxX6mEiSTyDA/OMlgvCa7kPinUL4FJtQOFBozCsGcD28ONLc8Abkggf -NABXCclPVAXOTawJF3dRWcMhIlNLWxWMVRvEt5OkAEdy/mXGBvtVArmGnmA+8zcC -AwEAAaOCAQIwgf8wCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFA+6 -5KwThPKc9Vxn0048uRThft1tMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDq -Lk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dh -bjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEAMBwGA1UdEQQVMBOBEWFh -QHN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ry -b25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQEEBQADggEBAIeg -CjgR2yIGSuyrFolvEM/qoT3j+LpQREDZbx9BKr3kGmbqF75clwfpysJ4FlXZZ2CR -aH2GoPOZGXwsYc3poqGeeWSxo+fpt4XIGUc1eREXm1rKVMd+qb0u0PXuhq2+u1aY -ZJDY0yqUU2/7AInXjzG7lI120W+K6tuTM/5UVI5EPpAFwUVlCxnMh4Sl4VkgZ2Hw -YnO3/8SEHmHR03/GhOd5d8hD8a0AGHtdOPpZnUOR9PH5FszpQ/alUdn+NTdQ7O2v -Q8jqPCeQSAAkJbBBRvGA4bD6KXt1k74fXXUofiKWpQUozlO1Cc978Kfl5/do5bov -wTLSA/z7c8nVCVoZI9Y= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/0C.pem b/testing/hosts/winnetou/etc/openssl/newcerts/0C.pem deleted file mode 100644 index c380a5110..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/0C.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBDDANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA1MDMyMzA2MjUzNloXDTE0MDMyMTA2MjUzNlowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQEFBQADggEBAA4jpa5Vc/q94/X1 -LAHO2m7v2AFPl68SwspZLbCL7Le+iv5BUQ814Y9qCXMySak+NpZ5RLzm/cC+3GCa -6eyozhZnS5LDxIgtStXWaC3vIQKQhJMwnc43RgcqneqqS5/H5zNXz/f0g/bRG8bN -T6nO0ZRdpy8Zu0+fH3f/u9/sQPRX3iNL/rd3x/UVLoowkQHdKzZfjcrFm+8CPl4r -9xOKjzC6epPY2ApfXmLodd0zemf84CKSJCXfkVlk0cYw1YLKUINnHToFfDAw0kCL -cVc7wHWZlzSVSE3u0PYXVssnsm08RWqAGPL3TO09fnUntNMzlIxNpOTuWsKVXZPq -YO2C4HE= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/0D.pem b/testing/hosts/winnetou/etc/openssl/newcerts/0D.pem deleted file mode 100644 index e50477872..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/0D.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuzCCAqOgAwIBAgIBDTANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA1MDMyMzA2MjkxNloXDTE0MDMyMTA2MjkxNlowSzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH/QcWm1Xfqnc9qaPP -GoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq4JI87exSen1ggmCV -Eib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6XL9DKcRk3TxZtv9S -uDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562kDtfQdwezat0LAyO -sVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAjgbBRI1A3iqoU3Nq1 -vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOBrzCBrDAPBgNVHRMBAf8EBTADAQH/ -MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1p0wul+oLkygwbQYD -VR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNI -MRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2Fu -IFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQEFBQADggEBAJ7j3X20Q8ICJ2e+iUCpVUIV -8RudUeHt9qjSXalohuxxhegL5vu7I9Gx0H56RE4glOjLMCb1xqVZ55Odxx14pHaZ -9iMnQFpgzi96exYAmBKYCHl4IFix2hrTqTWSJhEO+o+PXnQTgcfG43GQepk0qAQr -iZZy8OWiUhHSJQLJtTMm4rnYjgPn+sLwx7hCPDZpHTZocETDars7wTiVkodCbeEU -uKahAbq4b6MvvC3+7quvwoEpAEStT7+Yml+QuK/jKmhjX0hcQcw4ZWi+m32RjUAv -xDJGEvBqV2hyrzRqwh4lVNJEBba5X+QB3N6a0So6BENaJrUM3v8EDaS2KLUWyu0= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/0E.pem b/testing/hosts/winnetou/etc/openssl/newcerts/0E.pem deleted file mode 100644 index 956c217d9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/0E.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEFTCCAv2gAwIBAgIBDjANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA1MDYwODE5MTcxNFoXDTEwMDYwNzE5MTcxNFowSjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIDAeBgNVBAMTF3dpbm5l -dG91LnN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEAwBkz95BmByWVZaEW8cDbeuGr4C1caGAj4QPmuwaIriK+7XqXuh16Ahe3S5vZ -F56WhUSvMDOIyULckKH84oSa3Jx/SCz0g7X42x8vZuq92tpsjcP/u7BlyqpBUtLa -r14qm5wYw/1nQqMcSG3k9MQOQ+e9KgaGqpidxWM/8T4M/41AaFRBK2gQGBUULo26 -sjoq3af7Z2jYmWkP/kzj1CHLy9Mgt+UvhKeA+ag5cZnyOG596cqVjlKyqG7vdggk -wW2n+/KDpHNOndYfT7GMFeGXUNzJPkCImWlttic7ssi0mjP3q3MuOP3FNHIRMd2H -AcNcqT0bgdJHqnNzGv8C0Ei9XQIDAQABo4IBCTCCAQUwCQYDVR0TBAIwADALBgNV -HQ8EBAMCA6gwHQYDVR0OBBYEFEMS0mbhrA4zDvmfKf4MntUNxkH4MG0GA1UdIwRm -MGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290 -IENBggEAMCIGA1UdEQQbMBmCF3dpbm5ldG91LnN0cm9uZ3N3YW4ub3JnMDkGA1Ud -HwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dh -bi5jcmwwDQYJKoZIhvcNAQEEBQADggEBACO4+j1Mwt/lbkopeSJst46uFh7OtegG -6IWNE30i3l3FIn9slSwAOMtmZR0hAF8sExvk61EPlzCR/d9trSJ5+gyjPkeF/enw -p61rxPMT13Grzomi9gYlk6Q/0zLmE9uYWEY69Q0bEIUcfdZfwB+F7kesa946JNMc -yHfVEhKtvzmns9ueG0S/8E+6MPDeJv+JHQ++SdWSvOVg6JNxXDGusnim2fjM2Aln -JmqA6iU4IaPl9DUCuXlLOVv/YhwhviNEbF94upyHq8xjOZdzPbKroHXg/2yvalAw -4aXc/ZsnFxqsq3i6a2Fj1Y4J7gYsNO/HwA0xvKz3loOTqHaJqO/qeow= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/0F.pem b/testing/hosts/winnetou/etc/openssl/newcerts/0F.pem deleted file mode 100644 index 154cff654..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/0F.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBDzANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA1MDYyMTE5NTgwNloXDTEwMDYyMDE5NTgwNlowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQEEBQADggEBAHArS2trQnBoMVcg -Br3HV78wYsa1MNAQCBAPhKMMd6EziO4FTwgNgecbKXpObX6ErFDgjtVTcLOMTvNX -fvZoNuPpdcitlgcWjfxZafNbj6j9ClE/rMbGDO64NLhdXuPVkbmic6yXRwGZpTuq -3CKgTguLvhzIEM47yfonXKaaJcKVPI7nYRZdlJmD4VflYrSUpzB361dCaPpl0AYa -0zz1+jfBBvlyic/tf+cCngV3f+GlJ4ntZ3gvRjyysHRmYpWBD7xcA8mJzgUiMyi1 -IKeNzydp+tnLfxwetfA/8ptc346me7RktAaASqO9vpS/N78eXyJRthZTKEf/OqVW -Tfcyi+M= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/10.pem b/testing/hosts/winnetou/etc/openssl/newcerts/10.pem deleted file mode 100644 index 307f4953e..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/10.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBEDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA2MTAwODEwNTgxMVoXDTExMTAwNzEwNTgxMVowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS0y -NTYxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDzXHm8D8sY1lmX7o1KK0jt/M+UzAI2Ifpx7nAqoviH -XQIPe56BOAm4zHhEIlojEMFd1nncplXvDDGjuV/2F0KK1bFxbNtom88Ix1jrRWtk -FLopYwj3ERC2970OhNO3nuPLrnEAzj6k3XPGMTA3drGnpRf162f7mHAdmYIRXtWm -mfaecs4wGFs8BFGdeDfo6SPhQXZSBwZqjzQxvk1PA7E1qifgR5IGNZkNQRQ9IZD0 -86xzjmZgg5DaJcQKw45elpiVKQN6OkdWTngR3uUBfseWNeRGP5UxCUbDnPijWUbA -6ZAdEfFXLgSpSoXHLNttvGg+SWm0kgKTpHYWYhvpflKNAgMBAAGjggEFMIIBATAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU0gL3aEo/H8c/Ld/GkBTb -W9Ma+nUwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCItzRn3TNWUzczBd8z -MtdPEsRl5Oi4fV3UecQxhjxAmJDLsEZT5I4uNa1XoLkJm6jVdSL7k+bjzjmpNJ1H -uL49cqia2yTdGP4IU0K8dTGaflg3ccaLLGGXTWU/NtgdI1o6yuZTwb6a9ZL7wWZT -x21BAsvyPTzCpUS1yCK4bFeYOxOYDphUGcwb0JTuRxx2/710b+p64BYiCfVkQJxT -eF1ZtjSW6nJgzMRg5n2zNpdrdXMMCPI6Nl7V6wxbs3Cphmz5qx3lijwi7nZt+jE5 -qK5gphph1MkKIhnA7MF66KEcx5Rknao68yLBBDIA/AISZ3bCIj8R1SGgl/tMYfep -sbRF ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/11.pem b/testing/hosts/winnetou/etc/openssl/newcerts/11.pem deleted file mode 100644 index d4b532323..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/11.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEITCCAwmgAwIBAgIBETANBgkqhkiG9w0BAQwFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA2MTAwODEyMTI1MFoXDTExMTAwNzEyMTI1MFowWTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS0z -ODQxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0B -AQEFAAOCAQ8AMIIBCgKCAQEAtCwjB6Yni4jSTbPJ4GX0kM06nr2tDBdU0PH6dZra -IXNaNiBthBNPNDeCYAQDG/ouwuywAJ6L2Lt0GYEhJSwfXMm87fYSG8qRP+C/nlKz -3fCfsuZ8yOAo5NAp2kgvbFVdB5cMeOtid21UqUvDxkncjFRDgpERtrjSthalUFYu -ObIcSMPdlcDho73jzq6zVK5XDJ4l1LHUQLbS4SzyrphCYKekTIoDy3YwRUys6Pdm -4QlFBIXuBwOYHjclvVu0HQVNSM4nWAJd+204KUm/+8neO0kn1Yakv9yoa47o3KGP -3XjtmcgY9SqBbuF+8yDcZQ7+5zUBjc0J+d8txdPoIjLi7wIDAQABo4IBBjCCAQIw -CQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFIUlEfDm3V0eDmRrpIvj -4FiPpGlpMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQsw -CQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMS -c3Ryb25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3 -YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQEMBQADggEBAL5ZmFmy8lW4Vdwq -hWB6qTtLLa1wwCvTXwbV9V+F8dK39AvHj6CHFqTiFhAbGIq/Ryt9cg2XGy1TDjVj -hQEua7mjp8XH2j2NLY2SiFTMjchbHmMylFk2FrHy2ZnmlRCiH83TAw+EnUWsQKj+ -gL+7Of9SpiaaIblrl+aCiBVktRuXcFSaxjYWTVXOeTCwnxQdF2SNtUKDoCuVPk1J -XCrs86mj575xL/FGjyN4SVbjTEZ4lm1emxrf/RblZOhCKp7mUic8KyP0kf7o6X8E -MXXjq9fDQVrSDG/q62uhZu7CyInnBpWnoUKiMImSxRn/cs0r7RUspC5DtJyhE33Y -DW2BzIc= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/12.pem b/testing/hosts/winnetou/etc/openssl/newcerts/12.pem deleted file mode 100644 index 73088cd1d..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/12.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBEjANBgkqhkiG9w0BAQ0FADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA2MTAwODEyMjExMloXDTExMTAwNzEyMjExMlowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS01 -MTIxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDL4+PsltDM0QCCS08tkefhll5Q0nb2VEdRZotBIdt6 -XEY1kmDlw0yQOp0XUznnIhcrxXpKeWpLqJdbo56jSxMaUB3Mod1u+aKvVhCgkOT8 -uQa7gIdcNMuXnfnch7yYYS6YxVfzdr/qXBxmVYNbR9sXy48vAD6glZLEVjDITHJO -a6tEVSrAOMyeuA9XTYJiGw5loj63YbUr6Ikp6W9SncPCtfX6G2Amk38MTuITu93W -Pd/bGB06ra6gmMQGAhXuGs14n3QZfQz9PWTp9TPsQNqQZdEjQyNdfeAKtPuz5jnO -cnZuhvVR0q4sxWuy64vkyZ57luTZAXyxdInBeBOp7sC3AgMBAAGjggEFMIIBATAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU0wvMMeoe59mocM/RiYnD -iw9NUm0wbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBDQUAA4IBAQC/uKe2O9elbSFgpKP5 -7ZjJrCkYu493iH/PDm5G4D76q6WkRvZDqTgGDSIrXrt1xRLIsVJES+HERxfED0DB -yXNe22p1jR8iZdCesZxmEsKYyLh9XmeixKCfnLvStWCVs0+vqwhJlIkyEAveZ4HR -Yq121khdmCDDUugpjEl/nU7CLvCRVgFrlhDm1QLs2rYqxwQrJ2SH4/1W0YRdkY2R -vKZ2ngjLBNjBfXWNXSOpEAG367nVam5lFAepUC0wZTshyCUXt1NzClTnxWABm6M6 -x2Qwg4D6Qt5iXSjR8+DGVh+LaBL/alQi1YYcjkxufdFHnko294c0HsZcTZ3KRghk -ue1F ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/13.pem b/testing/hosts/winnetou/etc/openssl/newcerts/13.pem deleted file mode 100644 index aeca7e1db..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/13.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEWzCCA0OgAwIBAgIBEzANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA3MDIyNTA3NTg1N1oXDTEyMDIyNDA3NTg1N1owVjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDTALBgNVBAsTBE9DU1Ax -HTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEF -AAOCAQ8AMIIBCgKCAQEAyO4WxrPomcQSspX+ZnPit3t+tzYE/wi1E8rH3h5aO3e5 -vVZX3YxNvBqge2RPB3oQHrWwWT8vKmqzZNjJUx4bRIqd1JdTRI7L0f6XJHjnrRv8 -G7M2uHe+JbHQKPRT7IefJ4PZ1FEA8SCwKfWs5vk1/w/cabM6DVzzjtWTV9DXKD6J -5rRlvXtJDbhAvI2w8pCC1Gt6H8qjVSb7ItJ+SD3BlW3tq3nBsYFJRL24TyQg+Kdt -kkCRQYirog29q+J59SErjolse59dte+MhNTv+SnVFgpQE9IGEo6yaKMAWLSTv0If -pPr/QaEV9rcsYFmR3RtHc+QaaP0hvDAPMaKdhQMIUwIDAQABo4IBQzCCAT8wCQYD -VR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFDRTWKccFIi95BslK3U92mIQ -2rWGMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYD -VQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ry -b25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4u -b3JnMDsGCCsGAQUFBwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL29jc3Auc3Ry -b25nc3dhbi5vcmc6ODg4MDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQAc -1bBYLYcc+js3UsHVk7W17Nr/qoNFzQZJ5Er3RjhNAgzAX1wOTrNgKXztwZde1Alj -o05ZLXUFkB4coQwl7xo7I3EMJPUmSdHoyYyG7c7AgfcL/wwnzz4rWQl74WIZjySc -ON0Ny9vrzbVboktYof/9Yp/+HgeKopfsaIiuNCAwmAWxiYqvDmlxxn16oOXeJFV8 -pFzZMirQ5l7QRD9iuabOdcnBp8ASH+5AbD4KjFQjo5RBVg92LwOkJo3Pf1twI57s -pObrcM4JbHVohDornYQYfr9ymkMxJbqqkEgD8oIip0NFSbziam4ZkwgUlRIMUMU1 -/xsH+BXYZtKJbYjlnyc8 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/14.pem b/testing/hosts/winnetou/etc/openssl/newcerts/14.pem deleted file mode 100644 index 7ce46c0da..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/14.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEFTCCAv2gAwIBAgIBFDANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA3MDQyNzIxMDc0NVoXDTEyMDQyNTIxMDc0NVowSjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIDAeBgNVBAMTF3dpbm5l -dG91LnN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEAyhjm+42JEXAkZX1ktLC6eS/r5zE72OlqfY0GB+mvuFDb69Z/2q8kjAFcQ98R -p0OEA/GvrUBCVOnfjWG0C325MH3BXxaovBaLMTWGDrZehns7T92Wvga01Gs8PDqa -7ZU/CQ9KrXaI5+7FkQYlCYR/m7kL6hX06XqkVFXCGodR8ERr3eKd9DhLfGuED8j9 -QlGmVLxddosS3ce/8jnUgx0EpNFYNeL3i+QxgkSczm8CQg13KBWFByoL83qccAer -zjT44/dPdcthlDuBtuY/g42nrTz7eYE7rTm4FPBPAnhRKQ6t2WOUFAA/LdP/+LXs -C0Y6Ux4zN5UP6MHae/herVBGiwIDAQABo4IBCTCCAQUwCQYDVR0TBAIwADALBgNV -HQ8EBAMCA6gwHQYDVR0OBBYEFE2oX5CxDsAnsxzCk9/TRoDowNQNMG0GA1UdIwRm -MGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290 -IENBggEAMCIGA1UdEQQbMBmCF3dpbm5ldG91LnN0cm9uZ3N3YW4ub3JnMDkGA1Ud -HwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dh -bi5jcmwwDQYJKoZIhvcNAQEFBQADggEBAEg3hsYbiNx3jjZeU09qZeHbrl+DM0Q3 -JuaeL18JuEcJI8cwB5vG5YXeeUXZWnXkmdhWDsq1hVcMfjBlikUvnGDcxm4tgbNn -1fhRi6yKRA7GVyBtDAZjONrjltFRSLBvEa+koQJGtSELm4G+vRaUd4/X1LJ2SoeH -2ZJvIB3sOeLgw8yXX6I2HDQ/UqSRnWEfTDGs2LQ+tEC8JPjd9sHIGjx9B2XwaO+l -E55Nk3jXAQH1bgAJKgdBas6P/DF+YIz3IepOtO0WIxQPNN0zbHvXxNmI/PFr/m6Y -mejqjn+LQzLO/X//KLspw0JiFhQWijLjmmmt78+3r6A0zicd7+37mrw= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/15.pem b/testing/hosts/winnetou/etc/openssl/newcerts/15.pem deleted file mode 100644 index 4ebebba5a..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/15.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEMDCCAxigAwIBAgIBFTANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDQwNzEyMDExN1oXDTE0MDQwNjEyMDExN1owaDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMQwwCgYDVQQFEwMwMDIxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3Jn -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXtFcjNbEEK76mVv1j3c -6YWBeunBl7V9Qf1bPpzwTTUIKFDkg6HtWaNa7fxhTtHlPFHH8hdgiEZTQt626GoH -8DKE1MaBOgvnW01vh2p1j8jW3VXSwBWBCM9vNnaxGic94Qiix6z+cAulCo1pzyY1 -XaJSGAvwG3Jap9/gChClAv65zg34mLWZpcXddUGoaOMu3JaRgVaNEiY4wGweMM3n -hgxJ7+3q9vX+z5EqUQB59WBzVz7fU9FygLgfeAD1McrvMQOjo/PtkpEBOJipnjq9 -0k/+Z3gKIHbi6YIoIXDs7bOSaw8myvD5Bi4vNr5tKPr7bdLBU+AyAzRlJWV4GBw/ -rQIDAQABo4IBBjCCAQIwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYE -FABqD2vvGFgP2xX2Qqjx26Mz1RR5MG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl -4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25n -U3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaB -FGNhcm9sQHN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9j -cmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQEFBQAD -ggEBAGuatpu8jxc22Iqglx5UIa8fkNSjfyLgO0RugCB+kPPilGttGWly+raLggQM -Hu1qdt4l0cj60pe03Dc4GuUwJCW9J4ntVvCp1/SLcifvd3pMTtlrdSMpj105L5ma -/nVksJ7UZPzcBLMq/8FtEg68H2WM+ixrmlm2cZiFDytMODEuAPCwWHOSP4WJNDzS -KKc95ONxwTsD1VDm/ShcKw083XgvT7oHoei2RRDYp70CkatWOOJ7eMxdKdICl8nu -9RlBLG8CJqcy7cJ4V7GOk6EOtGpGL/GR2gpLpvUnmWP9MUHYu8rVTzKQdW9A2Wjx -fmSZH0LzbAm+7XFrP71rBSJUaUI= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/16.pem b/testing/hosts/winnetou/etc/openssl/newcerts/16.pem deleted file mode 100644 index d0937bab8..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/16.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBFjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzA5NTkwNFoXDTE0MDgyNjA5NTkwNFowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN1bi5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+V -VIpn6Q5jaU//EN6p6A5cSfUfhBK0mFa2laFFZh/Y0h66AXqqrQ3X917h7YNsSk68 -oowY9h9I3gOx7hNVBsJr2VjdYC+b0q5NTha09/A5mimv/prYj6o0yawxoPjoDs9Y -h7D7Kf+F8fkgk0stlHJZX66J7dNrFXbg1xBld+Ep5Or2FbEZ9QWUpRQTuhdpNt/4 -9YuxQ59DemY9IRbwsrKCHH0mGrJsDdqeb0ap+8QvSXHjCt1fr9MNKWaAFAQLKQI4 -e0da1ntPCEQLeE833+NNRBgGufk0KqGT3eAXqrxa9AEIUJnVcPexQdqUMjcUpXFb -8WNzRWB8Egh3BDK6FsECAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBRW1p4v2qihzRlcI1PnxbZwluML+zBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAo37LYT9Awx0MK/nA -FZpPJqUr0Ey+O5Ukcsdx7nd00SlmpiQRY8KmuRXCBQnDEgdLstd3slQjT0pJEgWF -0pzxybnI6eOzYAhLfhart+X1hURiNGbXjggm2s4I5+K32bVIkNEqlsYnd/6F9oo5 -ZNO0/eTTruLZfkNe/zchBGKe/Z7MacVwlYWWCbMtBV4K1d5dGcRRgpQ9WivDlmat -Nh9wlscDSgSGk3HJkbxnq695VN7zUbDWAUvWWhV5bIDjlAR/xyT9ApqIxiyVVRul -fYrE7U05Hbt6GgAroAKLp6qJup9+TxQAKSjKIwJ0hf7OuYyQ8TZtVHS7AOhm+T/5 -G/jGGA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/17.pem b/testing/hosts/winnetou/etc/openssl/newcerts/17.pem deleted file mode 100644 index d5c970f41..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/17.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwMDMzMloXDTE0MDgyNjEwMDMzMlowRjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21vb24u -c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK -L2M91Lu6BYYhWxWgMS9z9TMSTwszm5rhO7ZIsCtMRo4PAeYw+++SGXt3CPXb/+p+ -SWKGlm11rPE71eQ3ehgh2C3hAurfmWO0iQQaCw+fdreeIVCqOQIOP6UqZ327h5yY -YpHk8VQv4vBJTpxclU1PqnWheqe1ZlLxsW773LRml/fQt/UgvJkCBTZZONLNMfK+ -7TDnYaVsAtncgvDN78nUNEe2qY92KK7SrBJ6SpUEg49m51F+XgsGcsgWVHS85on3 -Om/G48crLEVJjdu8CxewSRVgb+lPJWzHd8QsU0Vg/7vlqs3ZRMyNtNKrr4opSvVb -A6agGlTXhDCreDiXU8KHAgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQE -AwIDqDAdBgNVHQ4EFgQUapx00fiJeYn2WpTpifH6w2SdKS4wbQYDVR0jBGYwZIAU -XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK -ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC -AQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggr -BgEFBQcDATA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCctXg2xeMozaTV -jiBL1P8MY9uEH5JtU0EceQ1RbI5/2vGRdnECND9oADY5vamaaE2Mdq2Qh/vlXnML -o3ii5ELjsQlYdTYZOcMOdcUUXYvbbFX1cwpkBhyBl1H25KptHcgQ/HnceKp3kOuq -wYOYjgwePXulcpWXx0E2QtQCFQQZFPyEWeNJxH0oglg53QPXfHY9I2/Gukj5V0bz -p7ME0Gs8KdnYdmbbDqzQgPsta96/m+HoJlsrVF+4Gqihj6BWMBQ2ybjPWZdG3oH9 -25cE8v60Ry98D0Z/tygbAUFnh5oOvaf642paVgc3aoA77I8U+UZjECxISoiHultY -7QTufOwP ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/18.pem b/testing/hosts/winnetou/etc/openssl/newcerts/18.pem deleted file mode 100644 index c383667e6..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/18.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEDzCCAvegAwIBAgIBGDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwMDUyMloXDTE0MDgyNjEwMDUyMlowRzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHTAbBgNVBAMTFHZlbnVz -LnN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -s0UsstkyjuvNkpx/vmZlKpBITJyGmfTfFjl01uU4dUVwzE3yhllGPLN3ijLSteHP -3opUbDNd5dG4eVsa9DUiqIJlk/g+tnKS5IdQbA6yUf1nIHr39tVukOtX66sMeHBU -+M46KD7r4RRrGSBYT1FsyIv47D2uk24nBZ7Sf2+LoVQZfMIVdydIGfHxmQJxymzS -80mh57EN2y70oH9HMwn/bbGb8WrysN09WVbNbT2vdeYX3OJXi0xsmT/Ynev1VD9B -2mbA/XCf4c45xFL1HxKQ/+RTlmY6z6m4rBFuFGCscLPba5g290mXqrpMSpuWUagI -RZmOaeoyd3x25qbYwNe5QwIDAQABo4IBBjCCAQIwCQYDVR0TBAIwADALBgNVHQ8E -BAMCA6gwHQYDVR0OBBYEFI9cCmyxR/wbUXCARuBjbHpUAS1nMG0GA1UdIwRmMGSA -FF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UE -ChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENB -ggEAMB8GA1UdEQQYMBaCFHZlbnVzLnN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAw -LqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmww -DQYJKoZIhvcNAQELBQADggEBAK5Pi/g5Y234tEcTFWE0Vdg4cKxIfZRewFOOZI1z -/RWfzoqPZ6YzD15B1toKZrAGsqyhdJ4yQ/BwxJpdgNCscMelkzMubcLXL9QugPS4 -hz4MLkJR2tDCZA/mFUTEbAQwdNSCxSo/l0vZ5KXUg9y5zZhCWpZiHJBXnz/567wn -K16J3x9TYtdh4sT+y+0vHgvosUs2srRTkK2WDDxlh9XTch7DZyrLuiRRFrWjc6y9 -ThVH/qQNXwEBq2t9UYjQUVyx77gVQmiLrPU7UjL4IBoZmBNV/VJ10+rmGj1eG1nD -pgq6oBTrbEsv8Ix7y/MziTB8POj3dKjl2UZmRVBwMbnNqYk= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/19.pem b/testing/hosts/winnetou/etc/openssl/newcerts/19.pem deleted file mode 100644 index 49fe4b80b..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/19.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBGTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwMDcyNFoXDTE0MDgyNjEwMDcyNFowVzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MR0wGwYDVQQDFBRhbGljZUBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBANiNakgR5pct0NqirfPJEb9e3YZkYHvqZ/RUJ6Ea9ZGE -8KuQxGAHuLWqaf/3GrL/LYIs1fTJ7JTNMu+PSec8kf9I5AxItPzb+uSwI9hXQxhl -NJ8V+Zjs9Q3GX/59wS3DcHF4i8b88I/f7aLGwHOoRyT/UZPXPGIrHS9UWh/50//Q -/GLreivoW65Cfj7oNi3wMTYwZB5MyPY5q9MRcYyEPa0GNM0GzzYfIEkQz8nuSL/q -WQrmLmlS6Ktw5L3HXsUaKinGt0xI7jLGWh4ysnrjMNxKzRt2LITqSPtoTTR2JB6a -5/6544mB2FGErpSd/LgGTmwzOgloZLpsQgsN6xjpUvsCAwEAAaOCAQYwggECMAkG -A1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBQF2gQgjAL0KEcKz2x3LQZm -E9qGPDBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0 -cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRhbGljZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBWv4PhHGVpiLF5M3Rn -qQLSoRFjKqn3N9We81RWwVRpBzwoUEaHizelaVct9FJg6t7Fk/D8F0wag5EFKlcg -KQ8fd/0qLE393uwGb4Dvql2w49NFFDUsk5FC+pMUDAYsWHyFu26WKY5kfaMwNMNJ -HK6e4m6+Wmoy5ulkatwDJRDqkyG11YJ/p0n0HAG1DBJoL9079U+xQxT+9a2f7TaO -B/UbQNOvOgqaddk5uUDTjqnY/bltbAAuuI1ZNMrPCCNUorcdhySJb1tlF/JXTTB6 -N60XqYRYnk5T1yftNU0AA26ggskv4MMDwgYCGsyZuCX9vW+XsArRQJ5fsSZDiO7R -8FT2 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/1A.pem b/testing/hosts/winnetou/etc/openssl/newcerts/1A.pem deleted file mode 100644 index 00ecd5a2d..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/1A.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHjCCAwagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwMDgxOFoXDTE0MDgyNjEwMDgxOFowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRswGQYDVQQDFBJib2JAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDXwxTtozmxKaUhC0T5HvxVShfM5jQQKwIzSVAZeXUp -BgQ2uLT9Hn/J7boaUIE1Xf11zCRIlcy5Xkupha2gfqEmRbefYAOr/NFuC4pPEDeJ -jWg/miCZo9/DH2iWvCvU4GCcrY/LKDeDoKL9fc9H5FTtA/Y1ugbooOO1yoV04eot -MmvmYcqUtCX+h/Of9xM0w0m6aoDIXAhjcKEPMg/WL5acWuVVaWONa+x7HoQUDe+9 -MgoB1VmaoB77VYaK72jBhbvonF8GjEb3RiukfuMIOk5yN9OHzA9ODJbTDvSmmQkt -h/oEHAL/tzOQ2zjEptsKvwq/3drGbdREO/cp39I5/ZRFAgMBAAGjggEEMIIBADAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUYUK/uIcou7BS8ODHk9Ro -PGJP1FcwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHQYDVR0RBBYwFIESYm9iQHN0cm9uZ3N3YW4u -b3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcv -c3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQELBQADggEBAEIkmrK7GPm4H/FAEVCN -775XpuofsfGjT/bO/aPCqb+uPwwcKeUfxzICQDEqMv+mtxGuLjtfmTWwUcoPMgN+ -2HZDJGa1+kK2VLUz3QBIQXSdusbITb0ND/xCvbGwsk9y/0DGBnAo3xNBNM73ZQ8k -/A7mQ2nnQfzI9gQ342FOuTTb/kwrVNixQI3dhvf6Th5Dj5rZfQs6c09+9jRLGBFx -g7qQ1gej0fi6XYX4cSNwluu/Vo6xT5epEeTU5KoYn0mtOqFx6AY8xzIqQLvY4m8g -viGoGRqId1gqNiEfshb8KICPI29WyiBRzMKO6reeb+446A9CSLgMW0Ze3SCRXrjr -2nQ= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/1B.pem b/testing/hosts/winnetou/etc/openssl/newcerts/1B.pem deleted file mode 100644 index a92610c4f..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/1B.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBGzANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwMzEwNloXDTE0MDgyNjEwMzEwNlowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBAOHh/BBf9VwUbx3IU2ZvKJylwCUP2Gr40Velcexr -lR1PoK3nwZrJxxfhhxrxdx7Wnt/PDiF2eyzA9U4cOyS1zPpWuRt69PEOWfzQJZkD -e5C6bXZMHwJGaCM0h8EugnwI7/XgbEq8U/1PBwIeFh8xSyIwyn8NqyHWm+6haFZG -Urz7y0ZOAYcX5ZldP8vjm2SyAl0hPlod0ypk2K1igmO8w3cRRFqD27XhztgIJyoi -+BO3umc+BXcpPGoZ7IFaXvHcMVECrxbkrvRdpKiz/4+u8FakQJtBmYuqP2TLodRJ -TKSJ4UvIPXZ8DTEYC/Ja/wrm1hNfH4T3YjWGT++lVbYF7qECAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBQRnt9aYXsi/fgMXGVh -ZpTfg8kSYjBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBBAUAA4IBAQCY2EMqkuhtAls/ -jkjXm+sI5YVglE62itSYgJxKZhxoFn3l4Afc6+XBeftK8Y1IjXdeyQUg8qHhkctl -nBiEzRCClporCOXl5hOzWi+ft2hyKgcx8mFB8Qw5ZE9z8dvY70jdPCB4cH5EVaiC -6ElGcI02iO073iCe38b3rmpwfnkIWZ0FVjSFSsTiNPLXWH6m6tt9Gux/PFuLff4a -cdGfEGs01DEp9t0bHqZd6ESf2rEUljT57i9wSBfT5ULj78VTgudw/WhB0CgiXD+f -q2dZC/19B8Xmk6XmEpRQjFK6wFmfBiQdelJo17/8M4LdT/RfvTHJOxr2OAtvCm2Z -0xafBd5x ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/1C.pem b/testing/hosts/winnetou/etc/openssl/newcerts/1C.pem deleted file mode 100644 index f212e19cf..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/1C.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBHDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwMzczOVoXDTE0MDgyNjEwMzczOVowWzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEzARBgNVBAsTCkFjY291 -bnRpbmcxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3 -DQEBAQUAA4IBDwAwggEKAoIBAQDAB/JTbwVY5oNF0+8Behdbc0NOeX+bl0SOcgpZ -ha6nbMBQO41jtOI5r5Xbg9sK9l+DYOnZQZEsEhIVZDoK8yGI/FIEE+gWRf+OLmI8 -k2K+G1dklTC/VP2tZWMQYQWs6UnX3iiVpHccI3CQqqJWe9fZsIsq0J9j9hu6h9dG -IEbon6RXDLPI5DIiIKc3r0jDHNDsIUDzcjuUdCxKFCMuHUCfa1PBiqpj5pP6XT0G -gI6UjbgnNWPTPb2axE7P1x5gQmVwiFiYs+VTh2fq9O9xNxnn/YmzLk4/YNly7xYX -Q31NuhSvRpH7jsJ1p4VSuunYqvccPUKsp5PvCtCeGvNT2qt1AgMBAAGjggEFMIIB -ATAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU7n842u6huBpBd394 -8mdL6EOdjg4wbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQAyAbxrpMtTARw3 -jvBwuapaHXnTppz+TkWyfXVpgTwtPlf3rbhPk4DjhT2ygyMTI1azoqProf2aBbDr -DldCSQPsZAcuzOdruKKMo2CQwgLuBFXL+JUX0hiIpFS1ZZHA2aDKyUw4OyADOvDU -8r1/WiwRb91TdYP9nEu9qP30k0vkUg8DCbCmPI1/MVaxVzh9LRAFyOHrnKSCXG7o -StmVFm2Yf3pE4HS1W6DtommyPs7aUD5XAaQdr3DYKI/TazoU6t5g2aEqigu+pj2M -qk5idJkx5VCFvUU1hlChyX6NNNjJNnV6u5YiuatcdYQhpCTBsxnBoM+w0BvNOCl+ -1PdgEy1K ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/1D.pem b/testing/hosts/winnetou/etc/openssl/newcerts/1D.pem deleted file mode 100644 index 6c41df9c7..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/1D.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MDgyNzEwNDQ1MVoXDTE0MDgyNjEwNDQ1MVowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBANBdWU+BF7x4lyo+xHnr4UAOU89yQQuT5vdPoXzx -6kRPsjYAuuktgXR+SaLkQHw/YRgDPSKj5nzmmlOQf/rWRr+8O2q+C92aUICmkNvZ -Gamo5w2WlOMZ6T5dk2Hv+QM6xT/GzWyVr1dMYu/7tywD1Bw7aW/HqkRESDu6q95V -Wu+Lzg6XlxCNEez0YsZrN/fC6BL2qzKAqMBbIHFW8OOnh+nEY4IF5AzkZnFrw12G -I72Z882pw97lyKwZhSz/GMQFBJx+rnNdw5P1IJwTlG5PUdoDCte/Mcr1iiA+zOov -x55x1GoGxduoXWU5egrf1MtalRf9Pc8Xr4q3WEKTAmsZrVECAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBQfoamI2WSMtaCiVGQ5 -tPI9dF1ufDBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQC8pqX3KrSzKeul -GdzydAV4hGwYB3WiB02oJ2nh5MJBu7J0Kn4IVkvLUHSSZhSRxx55tQZfdYqtXVS7 -ZuyG+6rV7sb595SIRwfkLAdjbvv0yZIl4xx8j50K3yMR+9aXW1NSGPEkb8BjBUMr -F2kjGTOqomo8OIzyI369z9kJrtEhnS37nHcdpewZC1wHcWfJ6wd9wxmz2dVXmgVQ -L2BjXd/BcpLFaIC4h7jMXQ5FURjnU7K9xSa4T8PpR6FrQhOcIYBXAp94GiM8JqmK -ZBGUpeP+3cy4i3DV18Kyr64Q4XZlzhZClNE43sgMqiX88dc3znpDzT7T51j+d+9k -Rf5Z0GOR ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/1E.pem b/testing/hosts/winnetou/etc/openssl/newcerts/1E.pem deleted file mode 100644 index f84d1a877..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/1E.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQzCCAyugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTA5MTEyNDEyNTE1M1oXDTE0MTEyMzEyNTE1M1owZzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHzAdBgNVBAsTFk9DU1Ag -U2lnbmluZyBBdXRob3JpdHkxHDAaBgNVBAMTE29jc3Auc3Ryb25nc3dhbi5vcmcw -ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BT5LvsaxM0gOw9QM74ML -vbxXXxTv9W0L//oBnPohbVyueSl0/r2rcIeYa0g1eePgwRRBHwr356Om2mv/zXTp -lQA4qtY6YMZkoeYCOVhO/fJ4CGO213qWeWIYOe4njTuiPUiI20PWancgaic5UOAC -UBnyes94I5kB1OWx0THma4Sv0HdBRoWwO+ZqAA87fpV/Wagi6ElJBcjLbO5Hpy3J -dFvrjNWZwuJw2+qHQ4QOT4McpusfIjgXaZtyEpVIcbJ7knNSq+MapdP0RBS6wzXa -kWx9tMIAB9gKUfENTNl60ZnmqI0KgKiR3Yqia/bbsD7JcangOcOjWA2H0LKnnLdp -AgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU -NJFukTK/NSVDzCh074LCV5J5E3MwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXg -YOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdT -d2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYIT -b2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA5BgNVHR8E -MjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4u -Y3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBteNdmkKbr3bUJSKTaJ/qssbyPjL7MjAmi -QA1sSq5yIh7Ir23xEq/XQFF51N2yDNuXhLYk1fWou8BL+X9x97BlQkp9/nZ+BdJG -uH2zOUxcsfq57jtwMzlXGrmVUTMAJRtMqrSnVa9jbW+IF2p/sJfeSRRqJ2qwQoDW -ppvvBF4RfdWOVCCidtRmWKycEtP1ylSYyiHswVWhL2gLXQRQ0l5wJdgT2URRDopC -CBiE5mHOWn17gTWQw9SdGbY37o9jXNrY8GRgOeubHFRmdXa1Cli5P5HhIZygUBWX -tn5BvNDEIUz11/AT+HfpdMSKDiAXMq44wqWoYoUXsaLTIp+Vt6NM ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/1F.pem b/testing/hosts/winnetou/etc/openssl/newcerts/1F.pem deleted file mode 100644 index 61d1c34e2..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/1F.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEKjCCAxKgAwIBAgIBHzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDIyNzIxMDUzMFoXDTE1MDIyNjIxMDUzMFowZjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIDAeBgNVBAsTF0F1dGhv -cml6YXRpb24gQXV0aG9yaXR5MRowGAYDVQQDFBFhYUBzdHJvbmdzd2FuLm9yZzCC -ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKw0NWg8FpkrWoItNzexEiaS -dESF+blw2+2y51vVmbDk9edfJcjkzBNIEvY/0GXODmcthjExiTNgmNuCdQwapCHx -p39HaD902rzmvflI40dZTmlFcn0Pp41wNbvjVaOpn7f6Mov68YmsoLQr47+OU6sn -d3c8rx+BXO4g6YyRB0xpwB2kfO34FZh7FwOe4sVAJu5E7urK0hij2W1+adZNFg7K -SP2i7llfooxWpS+6Vi6ZjuJ/dcGyvXpXnr0H2x58sZeaB5n8Ay+mhPDX72xXfwEm -s7fztkhqmmix2TVEH96dR99ouCENF1Cm8OCbR1kkhWReL6P0tCbirbwFbZxKtOUC -AwEAAaOCAQIwgf8wCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFEvO -LmT1B7kU0IJsJtK+0nZMwxXgMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDq -Lk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dh -bjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEAMBwGA1UdEQQVMBOBEWFh -QHN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ry -b25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQELBQADggEBAI2K -atqWeSWcxmcylrBJXkXDOsZtFZAE/kGWD5+T/lDFzE5D0GeDWfHehojtooWGpnL3 -u7xo3h3+qVliYcCFy1zKtPE0lwkBWKFPSw4UNfOmaF4De6Tp1V6FSQE9JPNpcTL/ -aPWFkX69Py8elR8OIsXPlFtOfTbtjZxoGuLNn7BX1XjctG5iIhKs/3TVMdzcyjVL -wKiDE1xq8/Es2pPTgvF8jk7VcNyIGhrlj1IYq35h0RKTSXTCRlczf+lzoPo6Duov -G0r/8VLpI4bBmKN4cIvaRCa4zew8SWpJzg/06zm2QT8eEJVVB499usVf9OVS3Qa5 -8mcNXcKmqcyP2Tlnvbo= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/20.pem b/testing/hosts/winnetou/etc/openssl/newcerts/20.pem deleted file mode 100644 index d51918e89..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/20.pem +++ /dev/null @@ -1,84 +0,0 @@ -Certificate: - Data: - Version: 3 (0x2) - Serial Number: 32 (0x20) - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=CH, O=Linux strongSwan, CN=strongSwan Root CA - Validity - Not Before: Apr 6 09:53:50 2010 GMT - Not After : Apr 4 09:53:50 2019 GMT - Subject: C=CH, O=Linux strongSwan, OU=Research, CN=Research CA - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - RSA Public Key: (2048 bit) - Modulus (2048 bit): - 00:b6:39:b2:3a:a6:e0:07:5b:58:a7:3f:4f:b2:5a: - 85:6a:72:f7:1b:5d:3d:b1:e7:80:13:7a:95:b9:e9: - 61:a1:df:af:19:c6:b2:f9:83:14:21:59:1c:27:7b: - 7a:04:6a:43:f0:2e:24:71:dc:12:fd:c3:51:d7:c9: - 59:60:32:a5:59:d4:bd:d9:5c:a7:9f:21:06:3a:71: - 7d:33:d7:3f:d2:03:07:1c:d0:69:0c:94:ce:c1:31: - 20:65:8e:55:46:36:7b:bc:49:e4:12:81:9d:75:64: - a2:4d:e1:b5:8e:07:af:51:9d:a8:d8:7e:dc:b1:26: - 6d:e8:09:06:78:13:45:24:71:e0:f2:89:e7:81:4e: - fd:be:fc:2d:4c:c1:fa:b3:31:af:3c:70:fe:59:c8: - f2:31:26:02:d2:a5:ba:04:3b:73:d6:ae:31:e1:42: - cf:e3:66:95:27:e7:4a:85:a1:1c:de:6a:9b:ed:22: - 34:ac:b4:0b:ed:b9:22:e1:3c:36:af:a2:de:3b:41: - 88:8f:01:c0:1a:87:63:7b:b6:22:e7:e5:52:1f:4d: - 73:d7:7f:47:ab:c6:b1:13:cc:1e:cd:f4:5f:51:da: - fe:6d:14:83:8f:78:fb:0c:2a:c1:f1:01:65:18:f3: - c4:c9:8c:17:fd:52:1b:82:35:13:74:c3:38:9d:ec: - ae:39 - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Basic Constraints: critical - CA:TRUE - X509v3 Key Usage: - Certificate Sign, CRL Sign - X509v3 Subject Key Identifier: - E7:75:F0:A0:F2:AD:20:CD:CD:60:23:CC:C7:C8:0F:29:F3:DD:54:20 - X509v3 Authority Key Identifier: - keyid:5D:A7:DD:70:06:51:32:7E:E7:B6:6D:B3:B5:E5:E0:60:EA:2E:4D:EF - DirName:/C=CH/O=Linux strongSwan/CN=strongSwan Root CA - serial:00 - - Signature Algorithm: sha256WithRSAEncryption - 8d:6d:a1:6d:1b:2d:cc:81:5c:0a:32:15:e2:ca:1b:2e:12:89: - b7:0d:05:9b:3f:ae:80:a1:73:05:1a:bf:47:e8:c8:b7:42:60: - c6:05:28:47:87:38:bb:c8:b1:32:23:89:fa:58:e0:c3:f2:dd: - 20:60:43:95:e9:72:ce:6f:38:5c:16:f7:b8:cc:e9:87:c1:ca: - a8:f1:e3:ee:ea:4c:1a:8e:68:b3:17:05:b7:89:dc:b2:30:43: - 22:62:ae:9a:87:67:39:6c:3a:c7:1c:87:10:a3:70:c0:0c:3c: - e0:46:99:68:e9:74:ea:94:2e:82:e5:c1:7f:44:16:10:40:da: - b1:19:07:58:9a:9a:06:d4:27:93:39:79:13:44:b9:b9:bc:c5: - 1e:81:6b:0f:f4:39:1c:ff:b6:df:ad:c4:2f:63:c5:c8:c7:a0: - 99:ce:15:5d:2c:b3:b5:ec:dd:dd:f6:3e:a8:6f:28:68:01:c6: - 35:4b:67:2a:b7:cc:3f:eb:30:6d:b1:5d:5c:8a:3d:4e:3a:cd: - e9:4c:08:fd:54:76:c3:3a:da:d2:f5:73:00:22:e2:ca:24:6b: - 4d:86:42:b3:ff:af:00:61:1e:dd:b6:6c:93:0d:e2:03:6c:e4: - d4:af:85:37:63:8e:0c:15:63:32:ee:eb:72:05:60:1b:d6:f2: - c1:66:89:92 ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTM1MFoXDTE5MDQwNDA5NTM1MFowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBAI1toW0bLcyBXAoy -FeLKGy4SibcNBZs/roChcwUav0foyLdCYMYFKEeHOLvIsTIjifpY4MPy3SBgQ5Xp -cs5vOFwW97jM6YfByqjx4+7qTBqOaLMXBbeJ3LIwQyJirpqHZzlsOscchxCjcMAM -POBGmWjpdOqULoLlwX9EFhBA2rEZB1iamgbUJ5M5eRNEubm8xR6Baw/0ORz/tt+t -xC9jxcjHoJnOFV0ss7Xs3d32PqhvKGgBxjVLZyq3zD/rMG2xXVyKPU46zelMCP1U -dsM62tL1cwAi4soka02GQrP/rwBhHt22bJMN4gNs5NSvhTdjjgwVYzLu63IFYBvW -8sFmiZI= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/21.pem b/testing/hosts/winnetou/etc/openssl/newcerts/21.pem deleted file mode 100644 index 965543286..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/21.pem +++ /dev/null @@ -1,83 +0,0 @@ -Certificate: - Data: - Version: 3 (0x2) - Serial Number: 33 (0x21) - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=CH, O=Linux strongSwan, CN=strongSwan Root CA - Validity - Not Before: Apr 6 09:54:33 2010 GMT - Not After : Apr 4 09:54:33 2019 GMT - Subject: C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - RSA Public Key: (2048 bit) - Modulus (2048 bit): - 00:c2:4e:4d:26:99:8c:37:b9:51:1f:a1:25:ba:1d: - 70:4e:34:58:1c:56:9b:ea:f4:16:20:fe:14:b7:36: - 73:48:47:fd:07:16:9b:55:df:aa:77:3d:a9:a3:cf: - 1a:8c:4e:d8:17:f0:5e:01:44:1d:f3:9d:43:31:c6: - ba:d8:61:b2:f7:4c:3e:49:96:3f:56:77:b8:3a:f0: - b1:ca:ab:98:bc:aa:e0:92:3c:ed:ec:52:7a:7d:60: - 82:60:95:12:26:f9:e5:3e:1f:37:1a:d3:20:62:5a: - a1:ee:89:9f:db:fd:67:01:b6:07:e5:2b:de:71:40: - ff:07:5c:91:27:6a:27:17:3a:5c:bf:43:29:c4:64: - dd:3c:59:b6:ff:52:b8:37:ed:13:d1:bb:f3:b3:ba: - 3c:94:b2:7f:25:18:86:57:73:d4:46:5e:e4:f4:ec: - 52:80:1b:04:9d:03:0d:72:71:df:9e:b6:90:3b:5f: - 41:dc:1e:cd:ab:74:2c:0c:8e:b1:56:9b:62:af:f4: - 1b:f7:c1:67:02:cb:7a:be:2a:18:5d:be:dc:2b:2f: - 3f:b8:cd:5e:78:51:61:e4:af:db:ee:22:da:60:23: - 81:b0:51:23:50:37:8a:aa:14:dc:da:b5:bc:f0:2a: - ce:b7:a4:38:8f:d1:57:d1:eb:7b:d2:f5:af:c5:f5: - 74:81 - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Basic Constraints: critical - CA:TRUE - X509v3 Key Usage: - Certificate Sign, CRL Sign - X509v3 Subject Key Identifier: - 5F:9B:13:46:F9:20:72:C8:00:D5:88:B5:A7:4C:2E:97:EA:0B:93:28 - X509v3 Authority Key Identifier: - keyid:5D:A7:DD:70:06:51:32:7E:E7:B6:6D:B3:B5:E5:E0:60:EA:2E:4D:EF - DirName:/C=CH/O=Linux strongSwan/CN=strongSwan Root CA - serial:00 - - Signature Algorithm: sha256WithRSAEncryption - 24:65:4e:a5:cc:8c:7c:bb:af:ba:d6:9e:af:f4:f7:21:67:4d: - de:9d:fb:2e:8a:90:78:fd:92:f6:12:03:9a:bb:c5:87:66:3f: - 72:38:f9:83:f6:aa:93:e7:62:34:9e:c9:f3:02:97:86:48:c8: - c5:e7:7d:46:f3:e4:eb:ee:5e:9e:12:09:2d:20:21:42:7a:98: - ae:be:e5:fd:5a:dd:44:9d:07:80:9e:d0:e7:78:9a:45:08:42: - 62:f3:28:50:91:4a:a7:61:5a:85:73:34:9a:e5:f8:14:f5:6b: - 97:7d:f9:a2:d6:00:be:52:da:9a:94:a1:03:e0:1b:ae:0c:3e: - 08:72:dd:2c:94:6f:8a:81:7a:99:64:dc:97:51:ff:a3:a0:03: - 92:d0:78:db:4b:88:8e:d8:fd:d6:cc:33:64:6f:9f:6f:38:44: - 82:31:a7:64:ea:37:61:ee:a7:a0:4d:2c:7b:fa:7c:b8:b1:74: - 9a:4c:fa:71:bb:66:31:98:7f:ee:dd:9e:e6:3a:64:38:6f:22: - dd:7c:ce:bf:f6:9f:51:0b:05:03:e1:33:94:a3:62:11:90:21: - 95:66:37:33:43:ac:a1:95:00:ab:5a:e4:b1:bc:07:00:46:8b: - 4b:97:73:d7:c1:5d:64:5c:7d:f2:37:37:5f:c8:66:3f:e8:6f: - 9b:77:58:28 ------BEGIN CERTIFICATE----- -MIIDuzCCAqOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTQzM1oXDTE5MDQwNDA5NTQzM1owSzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH/QcWm1Xfqnc9qaPP -GoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq4JI87exSen1ggmCV -Eib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6XL9DKcRk3TxZtv9S -uDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562kDtfQdwezat0LAyO -sVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAjgbBRI1A3iqoU3Nq1 -vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOBrzCBrDAPBgNVHRMBAf8EBTADAQH/ -MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1p0wul+oLkygwbQYD -VR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNI -MRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2Fu -IFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACRlTqXMjHy7r7rWnq/09yFn -Td6d+y6KkHj9kvYSA5q7xYdmP3I4+YP2qpPnYjSeyfMCl4ZIyMXnfUbz5OvuXp4S -CS0gIUJ6mK6+5f1a3USdB4Ce0Od4mkUIQmLzKFCRSqdhWoVzNJrl+BT1a5d9+aLW -AL5S2pqUoQPgG64MPghy3SyUb4qBeplk3JdR/6OgA5LQeNtLiI7Y/dbMM2Rvn284 -RIIxp2TqN2Hup6BNLHv6fLixdJpM+nG7ZjGYf+7dnuY6ZDhvIt18zr/2n1ELBQPh -M5SjYhGQIZVmNzNDrKGVAKta5LG8BwBGi0uXc9fBXWRcffI3N1/IZj/ob5t3WCg= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/22.pem b/testing/hosts/winnetou/etc/openssl/newcerts/22.pem deleted file mode 100644 index 6aeb0c0b1..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/22.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBIjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDgwNDA4Mzg0MVoXDTE1MDgwMzA4Mzg0MVowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEmFhYS5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK2R -RcAYdZ/jOhHBSjrLDYT1OhRJ2mXjyuSbWyJQogF9c6sY8W2GhTC4e1gNThZM9+Pm -Vzs0R39kzxsmOFhuTfwIhavMzvkWJ7945WDvTpuo2teK4fTtfix3iuyycVXywa7W -Uum6vZb4uwNoFsZtlYSUFs+app/1VC3X8vEFvP9p//KW2fwbJ6PzR1XN/8AibxoF -AnfqAXUenRQ1Xs/07/xF4bkZ5MUNTFTo5H+BAc49lAC16TarSTPnX1D925kIGxni -wePHlIZrCYQTFr003+YNUehVvUxyv0NuIwlxFPokFPLDkQWk6SDvD87FW5IJ06cg -EbrCFjcIR9/2vIepJd8CAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBQS5lPpgsOE14sz7JGZimSmSbZOeDBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJhYWEuc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAqM2eqrsJmAop2roa -yNeJt8317sdAll8TvDf+s4EeCtcpDT0cIX5vCumpL6E7nV9NWWDazGCAOkwWDPpp -iuq6R0Js8r0MbyIUbVgOe3xIOqLKd9YW0sb1IwfR/zvWcPUjnUHlqfRH7gdiR4G2 -bWIvKenl3hOQege/XnJNPUwzxeVX7k/qPivOk4I3pLnBjTRtFQdweHM95ex7Fk/d -HoeWjw5q3MxS3ZwXpKQxZvWU5SDkkc2NJ0/0sm+wca8NC86cXkGqcLFEgJo2l3Dr -EpZgxIhllub0M88PU7dQrDmy8OQ5j0fhayB1xpVO+REn3norclXZ2yrl4uz0eWR4 -v42sww== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/23.pem b/testing/hosts/winnetou/etc/openssl/newcerts/23.pem deleted file mode 100644 index 5077ab15d..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/23.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQDCCAyigAwIBAgIBIzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMTEyMDE2NTkyMloXDTE1MTExOTE2NTkyMlowZDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAsTE1ZpcnR1 -YWwgVlBOIEdhdGV3YXkxHDAaBgNVBAMTE21hcnMuc3Ryb25nc3dhbi5vcmcwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNOzGeYVXLzZv43dinLxAC67D -l/1pUIwZIT7pzWGTbbeYBgRQDIV46HAAJTxnYWEq2eEecTbLQhgX7QPUeOJXk9vU -j5FeCrNXkv01FPsjwRdvBCWwEHYhGczeP9/8Gg7zU36t3EySv5ZRYKqv6O42lrg+ -E79wm2BwdPik7G5mCLmXn3Bg1IKNJhBJWKkP366dpAukywP1gGMwmW3MqfVm2fXB -QVDlqCJjpvyNiJhW6UqOf+NkKZPugjlfWMQKyFxEC6krBDT4WdnoKj5S0hyyeAvG -7HlL5YSiPhd1DNaxV0OX/aBwYFW0zMZOVmYLv2cwRVf3LlP/3Nv66BtjtxwZAgMB -AAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUuo7D -ahZ1x1JvkUAc2aAHvlfUu7EwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOou -Te+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2Fu -MRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbWFy -cy5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATA5BgNVHR8EMjAw -MC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3Js -MA0GCSqGSIb3DQEBCwUAA4IBAQCMaii+mvarQiElzu5VmIPQfrec+S5DUun9Di9/ -n23B8UdYtoITtu38vm2kHIo/oaYBFtUziBTFb48zyMJxVqc42JbwQ0CCO7TekJ2R -atGO72QG69hZkspfNijZr1576jBYyNxCfOOAXlf0zQpkVc0dcuxgQM1IrFH+cz+7 -ekupVdM2IZoouqWDU0M2nAze4du1rKAgG0Cuy3I4tCN43PR4BmggfaaKBOzU8Ju1 -b/FUFKKdPTrTfi52OywgzcDMZPyWgmHZb60koH7jXiVyP30OHVwMzU6kNXxOx2Le -i2lQE1/k8yL3k1ht48upXfuTZU4gUVCUc2CYUVHOOjNHk3BU ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/24.pem b/testing/hosts/winnetou/etc/openssl/newcerts/24.pem deleted file mode 100644 index bda4f528e..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/24.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIENDCCAxygAwIBAgIBJDANBgkqhkiG9w0BAQ4FADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTExMTAxNzEyNDUwN1oXDTE2MTAxNTEyNDUwN1owWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS0y -MjQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDEPYW1tmcbkgNMcnOHXAKHlgL2k7r1+rVWJ/8NF9vI -7MpQ8qomHPV3G00CYSQsCDgBVvK71pasiz+dsYdHAY28ihb2m/lsaSquwsb0Fexj -hJiqaohcLJk0MjTDUdArh6iddvDAYMDkfApM49TaXNxdz0sffV5KOIH0hrQe0wsw -P2p/SHTATNh3ebTLr8Y7dMKecxFrKQswZc+d7gvIftZXRvjsUprc77dDURGByPw3 -N+/23chuDXNNaxMylWQhmiTUne8tIyg0vtur3do5Dq1IqQKqvxSfBjRL6ZJU0/6l -KuhChV0cSVd2H2zzovuke5XzHzUsoESWXWYK9qIEj2HRAgMBAAGjggEaMIIBFjAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUT4FJonJgeZBpFHc8iosc -WWM+mPswbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2Fu -Lm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATA5BgNVHR8EMjAwMC6gLKAqhihodHRw -Oi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEB -DgUAA4IBAQA60WN0QwQuFVYg/C156POjKENZP9CGF8NyiC/NUYqgbIrGGTTpwTxs -pW/+YDG1tVtCkqtLGsO0uZRe8Ihs3afNsPMNlCiTCPgrs5erc4ZTv5MB7Ap2lyL5 -NSQ9SggICbQhkHQHP6TINtas9+FrAw10jWIa107DYLLC7Ea77Y5vryL6/ymrpwdL -Vwm9kAkGYvm0lmzw6YfzPskKc3MpWnjBTraPG42Z8oWTEDJnBtS761k60lNwndKC -JdRUxoOOegzsKIIzorRz9xCN2zA2CAeChqHMbBpNCRwl0dQ00ztXReONl97iNgw6 -NrdHsqCiH8Q+I2JCxU230Zl6UFKARLo+ ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/25.pem b/testing/hosts/winnetou/etc/openssl/newcerts/25.pem deleted file mode 100644 index 929f737c8..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/25.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEITCCAwmgAwIBAgIBJTANBgkqhkiG9w0BAQwFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTExMTAxNzEyNDc1OVoXDTE2MTAxNTEyNDc1OVowWTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS0z -ODQxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0B -AQEFAAOCAQ8AMIIBCgKCAQEAuByYUPGv67XSQHjpfFjhuH/l/sMIQGhsFcO4ebYv -7otSsjbH4gasmAOvEFxoIxkOG9IWFAHP1WyiqG3sOsyyfUg6wHl1FTe4Y3kHWZp0 -DvtT6CWnnxQwKibIhXfB3IPHRTcRG1zGN4J3Vl6IofIRlrl0K3NYUUofn0xMKAoS -hLjwuqq2eviX5NIQDOTnoga2C5Ed58hIc6/YWXzfg9EpB194tcCWmSj7yfq6ruD9 -xAh32ywd10fsi4tt3F/BWzXjySxBlBhvvh6kL/Nqa6OSWaXsvZqXmrYm+hm4LKkO -ZLZYzBqJRpRm1rEhYqMg2u0SSSTXsNFuw+027n7Vt8+DzwIDAQABo4IBBjCCAQIw -CQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFPk6ATSleHErWFAYkCZD -BhDo8X1qMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQsw -CQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMS -c3Ryb25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3 -YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQEMBQADggEBAHiE/MMyXJXuMuhw -/lu/UwjCHbbJMA9QrBJe++34OwAV0siM98loVLs23vHXk/52QHRIwZgMLO2FF9Pk -4JkFOvTXCgNPZKrUL28UhHsnJe8EZVOuir5o6yTSti+J/tR4M2YoY67JjW/KeTwU -BVBtBVH88gf/xm2mSlIrkHxG3/GWqyEdeY7BOaft1sFTTZ1gKKXQlARtWidho1mf -5Y1lZ//kOuvMjnk+hEWPWESq8lBzLOmQGBk65vaEH3LVZxSQVJbfG2E0dHgPZNgc -hFOS8Oc6L6AfKlWHAT0ZCR5+1YsxxnlsftHzxiA0ayGCgpn2qcN+OPjfzPCtC80N -6oXDLZM= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/26.pem b/testing/hosts/winnetou/etc/openssl/newcerts/26.pem deleted file mode 100644 index fc769c1c9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/26.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBJjANBgkqhkiG9w0BAQ0FADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTExMTAxNzEyNTAzMFoXDTE2MTAxNTEyNTAzMFowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS01 -MTIxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQCs5SBCzV3Is/w7CIzfBXRGv6uXwyDivRXXYsczeSRf -5mw/slRVAEtNbX8rQ8BWLIqiJPCLDek5ODkqKI+hArZVpJqMzZyql2Teosrtnokb -h/yA8EWtEr0jII2RxQ0xb8r25h+DwBosAM15B1rCAMmJOjbEMMBGmAb7y7N0K8nr -Z8RctwrRdCGVcg+f+LFrklF1tBLs0zGIrJsk1eB0XbrB+fEPar9Lmn+/q2QHGPCt -aOlR2ZxRsjqsYJW9yI8r33PVVm2aGmS/19UguEG8FC3owud0boHfP91/NvSIWfhP -iIuDPjJOBPEJ/I6OYjYXXQuOZYwFGau2WrpNDQioPgedAgMBAAGjggEFMIIBATAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU5re6olyWAt1HfN2l92Rb -7DDCnxMwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBDQUAA4IBAQAtRPFMSuEnPmqeC2mF -OE5N26r2p8HfB4FAPwarlg66IIvKvkk1zqn5YfZIXfMU/x5q+85aO31iQmjlAPpo -KXqRq7V0a0ldjXEr+Tz7xG3jno989dBrD3kQZnwXR57xGt1qTVGY7uQdbgXWzVHM -GYS6gjUw7Df9vAQcTfUxUpZc5wlDoiRrFkyPc1raFCZF3//Ig9agjO4r1SzPHYw7 -LrHJR1xkd0IWVTW8Z6xB14j452IiimhyK1zAR3zmh1vH9VuHDLHMhyjSl1R+gk5U -KzDPaqXd4NA7eIQNiAhysYTXfmUYytbFNZw9bamxTxlCmca1snuTIcFM5OYOfxRT -iKMh ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/27.pem b/testing/hosts/winnetou/etc/openssl/newcerts/27.pem deleted file mode 100644 index a1c57b0f0..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/27.pem +++ /dev/null @@ -1,95 +0,0 @@ -Certificate: - Data: - Version: 3 (0x2) - Serial Number: 39 (0x27) - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=CH, O=Linux strongSwan, CN=strongSwan Root CA - Validity - Not Before: Mar 15 06:42:00 2012 GMT - Not After : Mar 14 06:42:00 2017 GMT - Subject: C=CH, O=Linux strongSwan, OU=OCSP, CN=carol@strongswan.org - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - RSA Public Key: (2048 bit) - Modulus (2048 bit): - 00:b0:33:dd:ed:c0:d6:9d:01:de:eb:08:c4:f9:6a: - e9:46:10:f6:a4:cd:7d:aa:79:4b:c2:33:1f:61:40: - 40:de:06:9f:b8:2a:b0:84:cd:a7:79:c8:ee:a7:24: - 69:08:04:89:f8:7b:62:7e:03:9e:0a:d9:df:ff:7c: - 20:3c:a7:b1:86:7f:cc:e6:ad:0c:7e:6f:c4:9b:31: - 55:57:92:df:7b:94:86:f1:27:3a:0e:fa:0b:92:58: - ad:64:8a:40:46:5d:87:ca:11:20:03:ad:86:68:a5: - 0c:8a:19:ce:36:d0:55:bf:1f:00:47:c9:1a:af:c5: - ad:14:3c:d7:0c:9e:28:d9:61:1b:a2:a8:b7:f1:56: - a7:d9:3b:fa:09:08:2c:9b:75:e3:30:64:5e:93:80: - 48:94:35:0d:97:ca:ac:57:66:02:86:b6:1b:6b:f1: - 4a:86:30:74:48:38:46:1a:7d:07:61:30:15:33:b0: - 9d:50:fc:4d:8c:16:1e:30:13:9f:07:04:7a:3b:92: - 54:33:c7:3a:0b:67:e2:ba:46:b0:b3:0d:79:7f:e4: - ed:81:bd:34:cb:e5:30:f3:af:d4:dd:52:3e:f5:13: - 0e:c0:79:f8:43:c7:f5:b9:b0:12:6a:46:38:db:61: - 44:c8:4a:68:7b:77:34:68:63:ef:88:16:be:ae:89: - ff:89 - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Basic Constraints: - CA:FALSE - X509v3 Key Usage: - Digital Signature, Key Encipherment, Key Agreement - X509v3 Subject Key Identifier: - C5:E8:58:D7:63:B0:B8:D4:2E:22:04:E1:CB:35:34:95:DA:74:F0:E6 - X509v3 Authority Key Identifier: - keyid:5D:A7:DD:70:06:51:32:7E:E7:B6:6D:B3:B5:E5:E0:60:EA:2E:4D:EF - DirName:/C=CH/O=Linux strongSwan/CN=strongSwan Root CA - serial:00 - - X509v3 Subject Alternative Name: - email:carol@strongswan.org - Authority Information Access: - OCSP - URI:http://ocsp.strongswan.org:8880 - - X509v3 CRL Distribution Points: - URI:http://crl.strongswan.org/strongswan.crl - - Signature Algorithm: sha256WithRSAEncryption - b6:2d:d8:bb:40:e9:cf:a9:33:31:6c:91:c7:40:79:8c:5f:89: - 8e:26:d8:ef:91:67:da:71:75:f9:27:84:21:c3:6c:d1:a5:fb: - 50:de:b2:02:ad:3c:a4:6b:40:58:30:41:c7:bd:31:ca:df:77: - 00:c9:ac:5b:10:e3:66:71:6c:be:4a:49:7e:58:92:de:f4:16: - 51:12:00:2c:33:e2:2c:b5:e5:d4:6e:36:a2:50:ba:86:e3:c6: - bb:50:a2:e5:11:69:c4:86:91:fc:4d:65:7e:09:49:bd:d2:ae: - cd:70:f8:98:5d:a8:b6:cf:38:c3:19:49:fd:8b:72:3b:1a:cc: - fc:19:c9:c1:36:b2:39:ba:ed:9a:cd:db:2d:27:15:b0:ba:8a: - 64:4a:5c:8f:ff:db:78:7d:cd:78:c3:c6:13:ba:93:7b:b7:57: - da:a3:f2:16:9f:f7:24:95:57:df:f4:4f:c5:9f:d6:12:b1:69: - 39:a7:5a:88:9c:74:be:f7:b0:f3:b4:89:82:46:57:de:7d:a1: - 42:a2:c2:de:1c:37:19:66:60:2a:df:ed:25:e3:72:d3:f9:9b: - 84:05:b6:97:6a:63:63:5c:30:5d:01:7a:15:c4:6e:2c:a0:21: - d2:31:30:98:60:94:26:44:9a:08:b4:85:8d:52:00:98:ef:cb: - 07:4f:b7:8e ------BEGIN CERTIFICATE----- -MIIEWzCCA0OgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEyMDMxNTA2NDIwMFoXDTE3MDMxNDA2NDIwMFowVjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDTALBgNVBAsTBE9DU1Ax -HTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEF -AAOCAQ8AMIIBCgKCAQEAsDPd7cDWnQHe6wjE+WrpRhD2pM19qnlLwjMfYUBA3gaf -uCqwhM2necjupyRpCASJ+HtifgOeCtnf/3wgPKexhn/M5q0Mfm/EmzFVV5Lfe5SG -8Sc6DvoLklitZIpARl2HyhEgA62GaKUMihnONtBVvx8AR8kar8WtFDzXDJ4o2WEb -oqi38Van2Tv6CQgsm3XjMGRek4BIlDUNl8qsV2YChrYba/FKhjB0SDhGGn0HYTAV -M7CdUPxNjBYeMBOfBwR6O5JUM8c6C2fiukawsw15f+Ttgb00y+Uw86/U3VI+9RMO -wHn4Q8f1ubASakY422FEyEpoe3c0aGPviBa+ron/iQIDAQABo4IBQzCCAT8wCQYD -VR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFMXoWNdjsLjULiIE4cs1NJXa -dPDmMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYD -VQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ry -b25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4u -b3JnMDsGCCsGAQUFBwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL29jc3Auc3Ry -b25nc3dhbi5vcmc6ODg4MDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQC2 -Ldi7QOnPqTMxbJHHQHmMX4mOJtjvkWfacXX5J4Qhw2zRpftQ3rICrTyka0BYMEHH -vTHK33cAyaxbEONmcWy+Skl+WJLe9BZREgAsM+IsteXUbjaiULqG48a7UKLlEWnE -hpH8TWV+CUm90q7NcPiYXai2zzjDGUn9i3I7Gsz8GcnBNrI5uu2azdstJxWwuopk -SlyP/9t4fc14w8YTupN7t1fao/IWn/cklVff9E/Fn9YSsWk5p1qInHS+97DztImC -RlfefaFCosLeHDcZZmAq3+0l43LT+ZuEBbaXamNjXDBdAXoVxG4soCHSMTCYYJQm -RJoItIWNUgCY78sHT7eO ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/28.pem b/testing/hosts/winnetou/etc/openssl/newcerts/28.pem deleted file mode 100644 index 8702ee087..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/28.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDMyMjEzNTYyMloXDTI0MDMyMjEzNTYyMlowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBALbyLXPvJ/AE8R2B -l2GT4DwJ+zmycHmmrozGLWYL4PYWE7Xw5SupefJwuFjRxtOsz6Wfql/mUCyGdRXM -OjQ0DllN8TWpGi4J45nX+N4MQ5BY443CdRG16asX3iYrUS2ysco8k9OOKw48o8cz -2sdGQy7+Xxay29CdLdnTgLBP9UPYsrZDkQGNVZxIi56WMoP6MUwaavObvXQM12LJ -0AOYOiX+OUAm+AQcIorUOQBNwMKGiUHtGNDA2xjFfj5QSyWZN0vSAbI8g81Xy2gF -yTG9IhSBNtXq0Jp5Aj9YWyeGt4GJputEbyxKaZ0TlckUBTvwjIAImHtaAD8AfAKh -ftj6cdk= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/29.pem b/testing/hosts/winnetou/etc/openssl/newcerts/29.pem deleted file mode 100644 index a4d9812d9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/29.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEMDCCAxigAwIBAgIBKTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDQxNDIwNDY1NVoXDTE5MDQxMzIwNDY1NVowaDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMQwwCgYDVQQFEwMwMDIxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3Jn -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXQSXX8LtY/RlgvQxxCF -pq787RPVD1HQciKemGkzUcjC+J+3rHBKmPT68Prb/4j9ESYdPqvaI7KWGD7pkAv4 -BWv4rw5iAxKB7bEDSVg5Gjs9vXDifR27Pz8rfsQFo8+O9oYWb7Ah45TNU/B8+Pcr -Gajv0I7eHUbGJsKlgOOMBkSe3cbQd9jc54iv8AFFfMsh5riMz2+7LI8zaMzie3vN -aPjsSDcGTB7jDa9bY+ZMbHzdFaDzmodDrZNJOSKTeDp5QTuP/JTPrSCXiIqUEJbE -IUhWF2P1s8wH9SeW0ZQlw4Z0eETR/c7XQfzdJj7UCmWLJQ//eseoAXNc1DbV6EtJ -1QIDAQABo4IBBjCCAQIwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYE -FGkt9dMYc1d/MRpfoo1q6zzwdBDMMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl -4GDqLk3voUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25n -U3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaB -FGNhcm9sQHN0cm9uZ3N3YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9j -cmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQELBQAD -ggEBAEbfq0PDdexYL9OqqD1Q8U0UXIRi3hvruqGM+KW8UbKisRqJJnow5wCYBJLI -MFC7ze24AcADe0Az+uLdKzClVZ+87i/vMse0dCGxSvKKwUtI9bFeQOourrBEHHRw -xJJcY9eGlsJoyJXyuT8sEXI+YqAaVDtcAYDa+OjIQNrJeIZDv9t/+1q1wlh0gvIz -zfndSfL4xEIf+lw1Flvt8BwTx4jDk6QIS4jUO3YtHzrtZ+171/iqmSvGrEmfVceq -1KOn7zNgh7XHmqE92HU63R9sVu3zjVSzuAMIVDqT5v8qU6T85NJE8ebYXi/RL8ON -btGZ7+y4Z4CbdkjLZ+Oxtew0nwk= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/2A.pem b/testing/hosts/winnetou/etc/openssl/newcerts/2A.pem deleted file mode 100644 index a8c325709..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/2A.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NDI0NVoXDTE5MDgyNjE0NDI0NVowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN1bi5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMci -IAR9SlszDJhGEtRq9eCFAYNdtL3bC7jcELs7ttqiB51iAUgdi9JZCzgWNAGHd8Iv -RDV529DDiUxXxOWCdYKUmQp0t5vR6oE5pmHmd5lcUguEyVrtqFSr6LMUqOXwFb41 -VUNPPR7YyLMdgUf9Ki0PZWdnVLVEp/ZKIY1OaqZLTnyfV7k0I/XQX2uW6UDCaC1A -QBljzEfrD2gUcG9+FLpb5qDsiGUyhhLB+nM1GNPnZvIlCppD+0t3xEI87+eg5N86 -yXBcu4o/O7rvVpP17GrhwKuYx0RHDBScBDo/WRNEOrn8/Q9jQUlry06+0ChVYY+R -328lHABkaoH/rB65JSECAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBTtzWNHzdEvtjAAtgVDBxNUTJ0xijBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAVne/5HKpkbv75eHk -x44aMVWT0DB6SF6nXrOQSzF7OV1FyNj2vibA9gAaiVnBXP+r798MDtwD/0N33TQl -QIR2rGJqkocsCTcUiQW6xLDO6AmJCBAaJbc5REjNT+HndjjMsQjn1NyY8hQbyow1 -ZOQ543zCY+Al7A3YcUtISLLH4EMIP3On1PFM2rWMUq1HoSo2kl7Awv+okvoqx6Sf -7/S2mj3dYGv+5eAVogkBL3mRCXEpGHC+6e6VW5nGYSYIRPkBRD2F4imB4+KYUR74 -GRopoaetH/TFRbDqiSWBf2L3Po2tXEPifIvkgavUXIn+tdgMhQ9BpVN8yEgPXLM5 -WdafVg== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/2B.pem b/testing/hosts/winnetou/etc/openssl/newcerts/2B.pem deleted file mode 100644 index 6f751a8b9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/2B.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NDQ1NloXDTE5MDgyNjE0NDQ1NlowRjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAMTE21vb24u -c3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk -fAX6xRdB0f5bBjN08zOmO7CEYa8eCyYFqHUhCw+x10v2BnKB6vOlMzW+9DiRtG68 -TdJlYt/24oRuJBX0gAGvzsv0kC9rnoQcgCJQy4bxaLNVsgoiFCVlzxLaYjABbQlz -oSaegm/2PoX+1UP37rG8wlvAcuLSHsFQ720FUs/LvZh4Y0FjoKhvgKs64U4nIAJ7 -MnuL29n5fM5+dem7uovQOBg/+faZo8QkYSK9MW6eQkP+YnwN5zItNBxyGwKPbXXw -Ey5/aqNWfhRY8IEG6HJgrnCwBMHUA14C2UV+Af7Cy4eNnC1Mmu7TmUYcFncXaFn0 -87ryFUdshlmPpIHxfjufAgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQE -AwIDqDAdBgNVHQ4EFgQU2CY9Iex8275aOQxbcMsDgCHerhMwbQYDVR0jBGYwZIAU -XafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQK -ExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GC -AQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggr -BgEFBQcDATA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCpnj6Nc+PuPLPi -4E3g5hyJkr5VZy7SSglcs1uyVP2mfwj6JR9SLd5+JOsL1aCTm0y9qLcqdbHBxG8i -LNLtwVKU3s1hV4EIO3saHe4XUEjxN9bDtLWEoeq5ipmYX8RJ/fXKR8/8vurBARP2 -xu1+wqwEhymp4jBmF0LVovT1+o+GhH66zIJnx3zR9BtfMkaeL6804hrx2ygeopeo -buGvMDQ8HcnMB9OU7Y8fK0oY1kULl6hf36K5ApPA6766sRRKRvBSKlmViKSQTq5a -4c8gCWAZbtdT+N/fa8hKDlZt5q10EgjTqDfGTj50xKvAneq7XdfKmYYGnIWoNLY9 -ga8NOzX8 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/2D.pem b/testing/hosts/winnetou/etc/openssl/newcerts/2D.pem deleted file mode 100644 index fc195676f..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/2D.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBLTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTQzNloXDTE5MDgyNjE0NTQzNlowVzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MR0wGwYDVQQDFBRhbGljZUBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALRsk/ip4ejQVynEGmvF9+qh2MIS2Ci3q1s+7VAx47i4 -vu2uPBxb064ahyFw4xG08nz4ewTLw7sgrxhz7Ymi8VHY39Y1wVkUFjwNF4+JbL2v -B2prFnf1ewNmaa3hbyRJzu4Aja8oTW0RKY2o7cMi0ryTZo9Xon7q1cLdHZb4BW/a -TYzKcLo7FsmjgvbqWKVTolrI0726XPLCe1u+cvBkAY1OlpjjO1pWiJ3JJ/cG1oRA -8PxgNLupX36UBRtxw1Lrovip7uOKrShabQ+lzTSA4+F5gB8Q4VgK1zikNMWl7dIF -qsP10QcVrnkRGAOE398fXZ1YoAoCmOqCvgsXW7y3k1cCAwEAAaOCAQYwggECMAkG -A1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBT7NcHfcw4VcO5WuhtuHPfz -rkj82TBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkG -A1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0 -cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRhbGljZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBLXRISCSOxF4ln8+ub -oaHTs1JvfCFKCQ3vORWjrntd8v8SQ92xGRBrT5oCataVTiPbQwphdScOl377YUQU -EGDOSpbNRD0Au5Z1VryP/02B401TSbrpZ7DZyAnxSsR6Dz8lbCtW1GLCpEzFdxNS -Vi5j30k8yeCAy1VIYCCPsqNQpziIFYuzrQ87x0P1U9W0xUE0GHWDa79LRkkTv8uJ -wJ4RKMk8HHnac7ws9ybrhT8sv3oXAv8LRN4zFTq+YRWOm8hH/0BhGMKRi6SzvdK1 -i853cG4N7I2B60msO2n0lDkPAgH8EBE6IRpd2DdrXH6UyEwEAiJrdGWRMNJpD7OI -XSh6 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/2E.pem b/testing/hosts/winnetou/etc/openssl/newcerts/2E.pem deleted file mode 100644 index d12190827..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/2E.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHjCCAwagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE0NTYyNloXDTE5MDgyNjE0NTYyNlowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRswGQYDVQQDFBJib2JAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQC17WwJLZubKi5Z7jWgpDBXIMDtzIKtJlNwLAXomp/W -EuWsC8p8z0yaFlMCSQwWCFjLJjD/DH8NczEPyZZF4c3rXoph59tAXxj80C2/iU7K -l62ZDDRa00TVmMo04U47fJYzhLsclQVzbenoWB68kJ+z4WpKc2UtPGggNOnb/5xH -Alvx19DmMsGWpCpbp+H667xtB4T6CIXoVSmAMEkg10C8BlP3PgZY2As0vfZHITZ+ -p4y3KFOF/X3O5BHb4Ey9nl+680zB1mHkssrq4fMEgsf5mXWNSlhvcpdt7qIHG1IM -AC3FgZzV4thEk6Lb0lZkR+woW9No652l0TrrJAAwiuBJAgMBAAGjggEEMIIBADAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUHWrADkwud47tB9AmhN0r -ZXWlitkwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHQYDVR0RBBYwFIESYm9iQHN0cm9uZ3N3YW4u -b3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcv -c3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQELBQADggEBABnuiN+hpSNTLN1FrLWX -iWWDvMJVW//7ttgyNR5q9CCyuCbMYujhfLn+Qbzh0pTx6fJijmUqua0SbBlrtW/t -O4SvyCbisZij4XZcdoQltas+MTQyNBYdRx8g+bwqUPH/xB/kvXLogsVuO5IXm/Ey -DSLlb+K12IBGc5zLlv/PoM+6FxuMMerI4t+TQZF06O5yWZ2Yr+weqtI172BQLh0u -901s/3DOqv2fGTqAfK/8i+8H3gXNoxeRKmEH4+v2mBQDrfQpUqNF08Zbg9SRfdR1 -rHyi5hw0ynCIKYIbwSYhHjZQH0pQGY3uru6h14qSjnvt/LUiU1sExAsShyR4Lsgc -w24= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/2F.pem b/testing/hosts/winnetou/etc/openssl/newcerts/2F.pem deleted file mode 100644 index e9a75fadb..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/2F.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MDIyMloXDTE5MDgyNjE1MDIyMlowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBAMJhEfwaamqe85Wwr+AWO8YJbxX717rTX0tVLEVG -AB/Q1CAnQquMxo8Cf4Ufto/Odm+25Ihxy2Zedmjnoy8xe4s9vFUjEYPgo+wIT7t3 -I3nUhKJhJWEw7hdHwPHif1aAMK/Mrvkou/VFwzJwnCwA9VKe1/Mn4X1YNLak/cQD -L2Ci34uxJzvjt/5DVDmh7Fd/9wsNHOafycsxEJEyDtDpbZSMklIArTcA61U0+oxZ -MBZVZHMN9vJETR+BEBaZkEpFSn4vaYjtzpsLG+MicYiuspQ+v8dG50JzeTRpRRpP -HF3ob20kd9VOz1nU/43CVpvxFk3d+UNNYF89iIBCNZAf6gMCAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBQTfdv0x2BIOc0ZAvGE -VrABn/Jk6zBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQC6A+3G600itmdH -4+zQ1FskGsCUj6mUXn+4blshl41zzhyRmplJT51Wch926E1LUxca9FKUu8XT1tAP -Wo56RO92eX7M3OgeQz7NqtYxgNauqKfd+IFg+y1vC4etj25dfC56+ETfCrxOZzuZ -vFD0mhn1hzXw3CNjSIH3HtWHOJjat+jZKsSayiYg3jO+L7i+cz6arbMhQwwGzskb -wTJejXul+G1/lFhPwMFyep2ilKwRiLJpE3L17hYVwXNEerFcpq6q0OEylmCxXswd -uO4NPb7dDiKw1pbdIQfZh2HqUXr3Vb4FcCWpAHhSCnNtwQQGKMg0CZtiPvwaaeXI -oXwOnQXX ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/30.pem b/testing/hosts/winnetou/etc/openssl/newcerts/30.pem deleted file mode 100644 index b08932435..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/30.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MDUzNloXDTE5MDgyNjE1MDUzNlowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBALfz1DcXyt/sOALi1IZ/RcuPa5m+4fiSST2wVWWr -lw3hUjeiwLfgoLrtKaGX4i+At82Zol2mdbEXFpO+9qxXliP2u0fexqP4mBuZus3E -LA82EOL0lQ2ahAi8O3qafkDMBSgvoeJpEwNe00Ugh53g7hT7dw8tSgcPGqQkWutI -IKT9T6e/HbHNjRtYlw9ZlHsp8gSYjg/Q6vV6ofttueMUD9NRv8w2Y76rnRRmUGf3 -GlNFFmgxZntCJRuYltnxV7VcCFoppyauYt/fPmjAxbPRuhHKacnzIzq83Ixf5fSj -MTlluGCfWFX/NGENXamBqChkRLHmuCHNexxRp9s2F1S10hECAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRcWXBiVy0qJJxclFab -iV7lxQW2vTBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBVqTw0DRABEwcw -kMsDkX1yIX4lODAadvSq/PP/M3e6VoZOXBphKQvqgAgaCpk+vAXoHNPImg+vRVeY -bIeS0E2lMo5nKQu7MCs8RpL97PMHL7NlzRBiS+CCKRaCHglJgCZtfwc1sapnrche -MoZat+GyjnyKVNTJh/QtGm5QL9DRKa125B9gS9FtdT0BkhxIsZ4TsEOeTqv5dHix -bc7x+MwETL6AxNraPqfIbt78cnsIB3PpIxYYTlDVY2Fwr2G0Ri9inEM/GZFAsJSU -iSyoTqQsyZhzzOmE/mK40JtBv+lg+pPOa4tC8w892KEKsnRX9dxX+U6vr3QtoIjN -wg8qvcUu ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/31.pem b/testing/hosts/winnetou/etc/openssl/newcerts/31.pem deleted file mode 100644 index 66b184ba9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/31.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MTIwMloXDTE5MDgyNjE1MTIwMlowWzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEzARBgNVBAsTCkFjY291 -bnRpbmcxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3 -DQEBAQUAA4IBDwAwggEKAoIBAQDWPNxNxYTNX7XiBa3R0kITDxlil9YIPiVPPSCt -e+F/5P2AwfH2/HdKJm8Cr4IFO5OSmwHJ2lQRtAL0Zm/qpF3UWYhAJSTqkdmK35Qf -jjDe25z5g0HpCNPU8wybfWtQtfXiMZlCdodg3gwBJ8a6adcLCp1gXePDHmIY5ABK -0YcfAPGZQW5HchkCQ/svBradIlkuK8/GohkNL2Evj/Q1ZDCW2xoZdmqsFWPhd9+f -/y1RtuOPss1039aPGi8D5dfjx3IGrzfjO+umN26iOWB4IdghCUwmgX+M6KEwUkOk -69XEOQf/1edfSdcf7of/9gqREF2xWBYlN5C5k0z8/aXJnlZDAgMBAAGjggEFMIIB -ATAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU7BZjmSiBXgHMAifA -ucsf6reYcDcwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYETZGF2ZUBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBCoL5/jrxie0rq -rCwKUA9TBDBBKBMZ9x5wdAQjP9L8b20Q4SDp1vAjhFr+Axgow76pqHaLDrd7qFKE -sBtlN0G5ZXOaVI0xloaef1K113mkSvYqbvUZNi/aTb3btI4nrCftj58EAM8TlvYW -jMOiLYPAhN/tfOTTaUzoYuRZ9v63fHYu3UiMvNojA0uxOeryRRdbcQecu4k2EBCj -mkNu+EkNoLNvGOC4sEjq7Gy4n52xeTuO/rI7eIt7CUS39j9OtiKQJfLVIh0Yz+o5 -ljiF0OyoxkpYG/cpoVib1RZdqL1DsHEWcQxYB+8SSG/teLxiNIZxvPHUezvi09He -ksxdvA73 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/32.pem b/testing/hosts/winnetou/etc/openssl/newcerts/32.pem deleted file mode 100644 index f7c90d302..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/32.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQzCCAyugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MTEyODIwMTQzNloXDTE5MTEyNzIwMTQzNlowZzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHzAdBgNVBAsTFk9DU1Ag -U2lnbmluZyBBdXRob3JpdHkxHDAaBgNVBAMTE29jc3Auc3Ryb25nc3dhbi5vcmcw -ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEKXgcanpPoLMCxFLx1Br -9WYJGHxMIi6eGfHHFObA56DpDxEUfRA88wvOgcq/PxSjAJZLePO9VQLU+sdK9+u9 -7INf7AMQ7CSRfHgkjEAt2SK4iWAk01I957qdwbvTTsBvmEAiKtqpQVcKbkokx1dC -J7prB4TjJWQlxihMAfgRQEX8EWE1c2vmzQ8fVkEc37E/kWpwDYlKtVidn+Nrt5j7 -SuE+HKZOE9zc2hRXU9IE/5hgHmPd0sIkmusTYqr+feeS3x6FfiWn/xIMlf4eTQ6F -55EgdUsem4su0y30i369aMviOL5Rc9OAyT/eH5AU/5BBy9M/y0Sep3wgdrOLsD3h -AgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU -DPBHE7nzb272+F6creQm6ORqEkIwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXg -YOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdT -d2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYIT -b2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA5BgNVHR8E -MjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4u -Y3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBvnya63noZrXlKv5daWjqGTmpftPIvK5KA -tyQlZn4eSY0GDK4M9HPtPmg1o+gYJnQr9STADh737clPb3P05xzc1LLBiQ+laLZ4 -8KpZ4od5QSMTPCzYgx2LQxqKQz9PjbeLP1wcMLxRsluiwPJu9KnfZBDvHsow/UU8 -SPg62z3p17SZxoCk/87Q3eyZkI7BFJJtyrq4yiRf7lFjaLyw1SnM7sjwOMzoQBVO -bj21Spn1XQ/1X+DiCB3pFvsGEU0ZdfWKrURNeYgh+KX6S1q0mDusOwIunpR0z2Nx -Oc8QA3YT5fse48k3sUlRuKY+YSQZqj/vG12cHjBGGQRwmpbaTBHT ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/33.pem b/testing/hosts/winnetou/etc/openssl/newcerts/33.pem deleted file mode 100644 index 42083c2a9..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/33.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIDCCAwigAwIBAgIBMzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE1MDgwNDE0NTUzMVoXDTE5MDkwNjE0NTUzMVowRTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEmFhYS5z -dHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcX -z9IzPMGarSbzZmGq/lpgeRpM2W5uN9QuWFqUnP+L4wjF5Yf+1bhj5DnrhKlOCjii -95dDkLdRMYe+4ovXpINF//+J9d9nyP4YNLClUTwivBwvJdC3cJyyzSO7juTm2GNS -rQFZw3iP3HxWy1dM9/P1+xlgqSou6HJlTDWpaQ+cO3P/WlYKTu9DvTT6/jj4bNS6 -fbiUEG0M0JYcnYSt0iwNWyRHMl2DKjmpibnfhHDNR46t0luSaSobq6A0sRszJ7UR -dE4Kxl3/HLTX8/+dq3qaFIdhqxXzoZKV6ylBK3+OjTbZw3uBV78qa2TUDuMCQVig -kkt6delFhC/tSxcIgz0CAwEAAaOCARkwggEVMAkGA1UdEwQCMAAwCwYDVR0PBAQD -AgOoMB0GA1UdDgQWBBRFNnP26ELy5j7KMOO+a8dh5pLe6DBtBgNVHSMEZjBkgBRd -p91wBlEyfue2bbO15eBg6i5N76FJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoT -EExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIB -ADAdBgNVHREEFjAUghJhYWEuc3Ryb25nc3dhbi5vcmcwEwYDVR0lBAwwCgYIKwYB -BQUHAwEwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5zdHJvbmdzd2FuLm9y -Zy9zdHJvbmdzd2FuLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAsncNPDCCDd4mzIHs -nHY7b6H1tVQtFSbAQntV06D4D7vOp6Y+M5S8ta50hJu4f4GEeH5c7/hm8gbRdHt/ -TcjlV/UWBfhU3c/hNJo2LpmmtdmYUABLA3rdZ+FzOnAHX9H8eI988G7eHpI9T7L2 -FY2YEnWhIUVjFrojtH2+NbuA/Ori1QwSBiVhvJQgvUPjhKkjUtC+8zIdaCmJFErQ -GGObpAMtnTcQ74md9BQ791RPMp77tDe1fgm7m8QWIsoIyYEhvzyfk2VTBn1VlWyH -sbT0Vb3X9ubt0KXn2Xr491WTCpc5rzDWj9CNUYUgW7RaPxgw5cj2HK6oiLnGpO73 -xyr/Qw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/34.pem b/testing/hosts/winnetou/etc/openssl/newcerts/34.pem deleted file mode 100644 index cf0977489..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/34.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQDCCAyigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE1MTEyNjA4MjQ1M1oXDTE5MDkwNjA4MjQ1M1owZDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAsTE1ZpcnR1 -YWwgVlBOIEdhdGV3YXkxHDAaBgNVBAMTE21hcnMuc3Ryb25nc3dhbi5vcmcwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTvcinIErfzu8YZKl+a2MNTVY -+qjG83OkweWjWed/egAugxRjTyWeKjrSNf6DWpXC0pNhzja+Sj0njz4Kq8VczkFB -/yYEkFKpdpFQHXvbQo5h7wn1i3Omhvou5x0rRfddRpLGl7Z/Xg8gnHsZMHHN60hI -qiLZdRSu5QF25WNcy9tO58gz8Hvo5jsk8YDu6eGYolaygQo3cqxx/r8yWzehju0F -oWm4sLOrq+OTegeCQYI8PsOALAwLWgWdGfMPMT0ntq9tD97AcUD0EilvcXVdmwUW -44/hM9BZ0JS7N7Wv6fgIChC7xhZj1yo6vY+FDsmNMhz7vdeulKx2dqRJkn0XAgMB -AAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUvo44 -06FQwLI8P6VqNehTNHa2LNMwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOou -Te+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2Fu -MRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbWFy -cy5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATA5BgNVHR8EMjAw -MC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3Js -MA0GCSqGSIb3DQEBCwUAA4IBAQCWvHc0v5BhxsLRxPvcOu1bVoeexzA/5nftfRly -PumU2hYFQ8p7soJiT/jYPmnfNvl6halnmS0FrqLdTMNfXj/6WCZ3w4Xnokc5PYW4 -oL1VqdEgR7jyQjifZuzRkuPw+yAFoT+HbMttLdRMVTq9NXlPXtGaJTWbx5Z/gGP3 -1Ry47WhvzJyRSysPh/+9WJFOwS6nf6DFbNuyVtNXQRzXjpsGefZgN9ysntNRFMMZ -V0j+zFIkLBLh2WBkJsuLQM9EFAlZrpQZ7iwHuz7gU0jATxN6Qxnn9AemNPl4k8T3 -igPXeVhDbZFeTc+u/Z7X5i1HXhks2QGz/zGee6no54XOnBWB ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/35.pem b/testing/hosts/winnetou/etc/openssl/newcerts/35.pem deleted file mode 100644 index 20fd0249b..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/35.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBNTANBgkqhkiG9w0BAQ4FADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE2MTAxODE1MzcxM1oXDTE5MDkwNTE1MzcxM1owWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS0y -MjQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDpZ9FM1s4VqqweOS24P5dVW4uTVrN4HgK2c70P+umh -u5+pr8cyPn/Kdor7SU9B/GdV6onZumgSUaeNqCSmGzLA77x/nR1xRWtiszWStJUQ -ICszEb8/WkPq68jlsmgIsfpTmABOBPYTvAqh7bZCTSoySG2fKt+E4UAd5S+BH1CH -YruIvrvuNxVMA/z8J+tMFZGqjQ6DopatYgSpccbSX5kuAgXCA9g9cemoPoKjjjLD -w0JBKCErtNKimY9pvf+SaRqoCc0YTIw6ydyna0e+tuPQImFjopZTyelnGHIZ/l62 -lnmrfB+sw2Younp7L9Fh9ki4wBOcXS/g4fQgyjKvLAG/AgMBAAGjggEFMIIBATAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUwdMoB5LJvckJ8GY1vi2f -AiL8s5YwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBDgUAA4IBAQCzWf9dGTbHy8B91uSR -BAR0K/Wi/j2AqqhDxIH7/PHh78ww9Zb1bBeCt5iFnpqGdTe17vmbga8QGK3W7NHm -hFYUJhXGyxT3uclUzsePLXKqDnoG9tbZMLoJLzle3j4uJ4PjWN0Wsu+76/QZudOt -zoJUZRyMvDfBByLOLqbdR7KOm0hNPsjCkzEfj2ql+IDQdNhulatpThqTRxZcYDP8 -bxpDIOaJQPGwpQFKIkZ34kZBPjUVY6Ad/mvoTna/ydWrPCGjfqcn/n14vxFS0nyh -FRtEpelFVKTX/JDXs/IZ0Bsn+lWar4lgUEs2PlmS5sMS8EZVOgiazT+rdVNWHrQh -cS9u ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/36.pem b/testing/hosts/winnetou/etc/openssl/newcerts/36.pem deleted file mode 100644 index d786db30b..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/36.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEITCCAwmgAwIBAgIBNjANBgkqhkiG9w0BAQwFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE2MTAxODE1NDEwNFoXDTE5MDkwNTE1NDEwNFowWTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS0z -ODQxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0B -AQEFAAOCAQ8AMIIBCgKCAQEA0021rEucwTZnd5pGxpWrXvn6Vkhd8ibwiyQ7ynpk -1Wi+WB0eWqW6ciU3BbA6L8DXUZoo0BzhIlH68X1n+CWiSBS8lBC21QJTAYywdQar -TVzUusbhX5S7c6JQrk9Oj+Tt+X5D0Q91SMfcB/i+G9IpZZz9DiceCIxpBd0HxoPJ -PRANjThQnqot4TYYUm45N05PixAD+K3P8Yik7BTRHPV4JhflPeOd0pTZL2b4sg7O -vZctotdF/riDvDeixMS/OlYxrKqVeP1wafsTE4MwADooRgaWa9zkRTxO4JwNE9M3 -LQ2s8AUq73kHxwJqhvom18lgMD056iZYqN7RKSaE+Zn40QIDAQABo4IBBjCCAQIw -CQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFONu1FifPZHQiluTzIlQ -02i3SSqWMG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQsw -CQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMS -c3Ryb25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaCFGNhcm9sQHN0cm9uZ3N3 -YW4ub3JnMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc3Ryb25nc3dhbi5jcmwwDQYJKoZIhvcNAQEMBQADggEBAALEERUj19IbP7NL -fyNy+CRVZ9fT20jDjLhQ3yZpmYep2TEAAGIP2I550tc/eIXj4LCJJ3i5a/AdSQjW -09beMwXatszqrE+taY7tELSKGy5Pbnb32HIDPwKXs92Ivxt9FgwUaLrj3AtVUmxk -0bhGMSjkgtrxbeki9394+ISW0EdD9DZSheJSLKa6rykb7akQPU8J2hreVAFdNZnF -RDVpT/OI8ZoH0K12YvthC33fysmKyGNCjDRP/x4UsdrnRpHP7BMjVe1TJQBiu6cm -DWPvj6ZkKqRZ2P67GVZLSu7s3hHKu0O5p3oY0J3YLh6ZrCw53dfG0860vfAV78f3 -DhxaCpo= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/37.pem b/testing/hosts/winnetou/etc/openssl/newcerts/37.pem deleted file mode 100644 index 9c62f2132..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/37.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHzCCAwegAwIBAgIBNzANBgkqhkiG9w0BAQ0FADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE2MTAxODE1NDIyNFoXDTE5MDkwNTE1NDIyNFowWDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1NIQS01 -MTIxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQDOTJOm4HBLbc0fCUHKOSYSAJj+dbWmXo+M+ViblRwU -iTij2wBchH2T3SUuj/OimtxloyVWyfATS7eTjCbqPbduVc2aE1QqwpBzTGnh8hd2 -1IQ2Hg/ruAS1t6XlGbQXbzOmA53tePh7iLMeW1UzIlq/i1isducIKSOusc5/225j -2C3OHbfpIlBzW9NgtDZZqAc6BsI2z6XsaA/U0S+4YYv8mImsSm71aoeesGLV2Fqm -7xQLxzH7eQQS1gg8+iWfPTU6pHL6AYR7HKKCdMiqDUOrP6VEleueinnzh8MbWwa3 -z3iIJ8pGD1jBLJ+Tlt+qKu5ZE0fGX2WCVntkf0IWc7HRAgMBAAGjggEFMIIBATAJ -BgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU4jVZk42tDoUyFnMs869u -69kHafUwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJ -BgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJz -dHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITZGF2ZUBzdHJvbmdzd2Fu -Lm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3Jn -L3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBDQUAA4IBAQBvE869kmBTDlTm3LnK -Sj6tGRhE0rN/Ki3zHBTlVzGZvaggt9ZvPFcLypLZkC0BfPu5/z58ig/Z8dC/bITR -g6kr02wgpLlwOTrU2dNQ/ehKOKClG0gkNNlw4cdi5ayRFXVvYhWzZNPGvIY8O8EH -LY2oZ0LXBvttx+rSuFAYiOEXON5/oiiNpGxqGu2mYIeyAAIIcKa4PqvGu7DxEGtN -OKwJ+ez5bg4qpUVGgBYce1SbzShS+eAe87xLRL1QKxcBD0DVFb9c6hrPRIpdxHD3 -AEFEo87lj5npbvP9PExufP9mTl4Ko7mENhEYVo4/2eGsMmyD+FXUWUXr7bWY5Zrg -jSFJ ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/newcerts/38.pem b/testing/hosts/winnetou/etc/openssl/newcerts/38.pem deleted file mode 100644 index d1e85db8a..000000000 --- a/testing/hosts/winnetou/etc/openssl/newcerts/38.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEWzCCA0OgAwIBAgIBODANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE3MDMyMDIwNTI0NFoXDTE5MDkwNjIwNTI0NFowVjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDTALBgNVBAsTBE9DU1Ax -HTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEF -AAOCAQ8AMIIBCgKCAQEAqlph7feSim5jou6cNCWB/6E+ptfLuEwtpNv4oRa6wHGu -8qaOjRqaV/rsVJFPTMotGD9u0uHkI9j4hoRm6JgfKCrULQWHizE3mE8T5X9k2HNS -6ngwOEkxGZgV7p3kq/GW654rfmHdmbRlNNBZa6cO9H3o7iOYibVLHk4Yd93lC5/5 -WRqVVDPdGFMUT71kIRh4MZhpmKgxNL8tftDs+FeFw1j5HDFzlapurWniawlXJFbR -wjx2afYZ2wH1zFArQ2j8LvObEB4VSFrOy3B5J57hrslFP8609/jFeNuLOt0xc6Gj -2uStn7TIvjF4KpcZv++VQ+B0bTQoRN33NAM7sSzXkwIDAQABo4IBQzCCAT8wCQYD -VR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFJCYo8BXG9mSEkp2ag3HiT74 -TT+4MG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYD -VQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ry -b25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4u -b3JnMDsGCCsGAQUFBwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL29jc3Auc3Ry -b25nc3dhbi5vcmc6ODg4MDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCo -tFCDUTmBfPjeaDQVCv7uBausS0sZCw+Pw7zypqo3vyRm0R2Ds2eymfVI4/Zc1NwW -hYCy9D1f1r2gukI2jDWHdDwNMQPptyx0Kxr98SIlm9ms8jGT7GZ5l0SdkGe5GDMO -vq7FscqQZX/KkdFk3ye/ONffFS/ukjVRHu8971BNODcRbG0OBhEI2TQsIyxf/iir -taI23m8b9dclikqZx3FqoxfTHSN5T5KHntpH7KVIS00hrlavxkLLMn5oePRnkBWu -feSmpfbOBbnEpElLtJM5K8AjArGOx8nxrtw/KNjMiOsyfCim1r0ff1tnZGtHhHCq -ZCZKA5DsRXZVWasv1CIz ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi b/testing/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi deleted file mode 100755 index a62fe16bd..000000000 --- a/testing/hosts/winnetou/etc/openssl/ocsp/ocsp.cgi +++ /dev/null @@ -1,11 +0,0 @@ -#!/bin/bash - -cd /etc/openssl - -echo "Content-type: application/ocsp-response" -echo "" - -cat | /usr/bin/openssl ocsp -index index.txt -CA strongswanCert.pem \ - -rkey ocspKey.pem -rsigner ocspCert.pem \ - -nmin 5 \ - -reqin /dev/stdin -respout /dev/stdout | cat diff --git a/testing/hosts/winnetou/etc/openssl/ocspCert-self.pem b/testing/hosts/winnetou/etc/openssl/ocspCert-self.pem deleted file mode 100644 index e7dd26ecf..000000000 --- a/testing/hosts/winnetou/etc/openssl/ocspCert-self.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDrjCCApagAwIBAgIIF2S0XlfMpnQwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIzAhBgNVBAsTGk9DU1Ag -U2VsZi1TaWduZWQgQXV0aG9yaXR5MRwwGgYDVQQDExNvY3NwLnN0cm9uZ3N3YW4u -b3JnMB4XDTE5MDMzMDEzMzg1M1oXDTI5MDMzMDEzMzg1M1owazELMAkGA1UEBhMC -Q0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIzAhBgNVBAsTGk9DU1AgU2Vs -Zi1TaWduZWQgQXV0aG9yaXR5MRwwGgYDVQQDExNvY3NwLnN0cm9uZ3N3YW4ub3Jn -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBI4V4N1bFgoY9RJSEwE -UAQsaYcp+DZHblpaUTyO7/8jQHJqgiybwE9qlKKKLBN2Gj8k8/jj+e8dwNC7zbw/ -e5jldtI9mmKIGAWijwELb9j+vFj+ySMTOqgcReOD+87VsDS2qNWflrSOmRqLukOZ -TIGuafUCs6OFH8cC6kIewhvuwAv4gRcHIxxlArpu80v08xNgjVPvb63/1xkAAQkN -8SHIlkzFAqCZPVI3MvDKzPLUzUcX3kPn2AGiTg9pFZawt3DOmV9MqHrUJ4YJiptQ -/eqkwqsnxju6/57W9XO5hsmDkNH5sXUgYhz1BHImVOSFlyj7NMJBjGm+w07XzKvi -pwIDAQABo1YwVDAdBgNVHQ4EFgQUB6hIiW8FEkCQ7a34aKZHWtJ16y0wHgYDVR0R -BBcwFYITb2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTAN -BgkqhkiG9w0BAQsFAAOCAQEAxhQVgrlEz9suo2Anrfqdnwybws0xMMPs78wXYwna -03xOKIHmXz0pwVkKn6Yp/LjjZufHOeQ66adD/fPQXaQwXAcMLEsy1zGmvdk/Qd0N -WYU1JXAcfemqXylmMgs790ErMDPaVxeH3C/lSnhqxkZ9jRO7gToia5NbhZ5vD1+7 -JYJxq1RieLXPvmunxuy8NYB7pQWs/MVJL9CFM5JASydyQXfxQbp0NZ3RKdNhtYxE -QZi80oGpoWb5XzU5vnC270Iztc926z59IgDxOLCkYCbFd/RO65NSrh4AGFmGE2JC -ro2T6qLRlFYu12H+z6412xGwmhIwfzQy8tLGag2VsNJIQA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ocspCert.pem b/testing/hosts/winnetou/etc/openssl/ocspCert.pem deleted file mode 100644 index f7c90d302..000000000 --- a/testing/hosts/winnetou/etc/openssl/ocspCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQzCCAyugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MTEyODIwMTQzNloXDTE5MTEyNzIwMTQzNlowZzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHzAdBgNVBAsTFk9DU1Ag -U2lnbmluZyBBdXRob3JpdHkxHDAaBgNVBAMTE29jc3Auc3Ryb25nc3dhbi5vcmcw -ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEKXgcanpPoLMCxFLx1Br -9WYJGHxMIi6eGfHHFObA56DpDxEUfRA88wvOgcq/PxSjAJZLePO9VQLU+sdK9+u9 -7INf7AMQ7CSRfHgkjEAt2SK4iWAk01I957qdwbvTTsBvmEAiKtqpQVcKbkokx1dC -J7prB4TjJWQlxihMAfgRQEX8EWE1c2vmzQ8fVkEc37E/kWpwDYlKtVidn+Nrt5j7 -SuE+HKZOE9zc2hRXU9IE/5hgHmPd0sIkmusTYqr+feeS3x6FfiWn/xIMlf4eTQ6F -55EgdUsem4su0y30i369aMviOL5Rc9OAyT/eH5AU/5BBy9M/y0Sep3wgdrOLsD3h -AgMBAAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU -DPBHE7nzb272+F6creQm6ORqEkIwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXg -YOouTe+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdT -d2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYIT -b2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA5BgNVHR8E -MjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4u -Y3JsMA0GCSqGSIb3DQEBCwUAA4IBAQBvnya63noZrXlKv5daWjqGTmpftPIvK5KA -tyQlZn4eSY0GDK4M9HPtPmg1o+gYJnQr9STADh737clPb3P05xzc1LLBiQ+laLZ4 -8KpZ4od5QSMTPCzYgx2LQxqKQz9PjbeLP1wcMLxRsluiwPJu9KnfZBDvHsow/UU8 -SPg62z3p17SZxoCk/87Q3eyZkI7BFJJtyrq4yiRf7lFjaLyw1SnM7sjwOMzoQBVO -bj21Spn1XQ/1X+DiCB3pFvsGEU0ZdfWKrURNeYgh+KX6S1q0mDusOwIunpR0z2Nx -Oc8QA3YT5fse48k3sUlRuKY+YSQZqj/vG12cHjBGGQRwmpbaTBHT ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/ocspKey-self.pem b/testing/hosts/winnetou/etc/openssl/ocspKey-self.pem deleted file mode 100644 index 1af5ecdb9..000000000 --- a/testing/hosts/winnetou/etc/openssl/ocspKey-self.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAyBI4V4N1bFgoY9RJSEwEUAQsaYcp+DZHblpaUTyO7/8jQHJq -giybwE9qlKKKLBN2Gj8k8/jj+e8dwNC7zbw/e5jldtI9mmKIGAWijwELb9j+vFj+ -ySMTOqgcReOD+87VsDS2qNWflrSOmRqLukOZTIGuafUCs6OFH8cC6kIewhvuwAv4 -gRcHIxxlArpu80v08xNgjVPvb63/1xkAAQkN8SHIlkzFAqCZPVI3MvDKzPLUzUcX -3kPn2AGiTg9pFZawt3DOmV9MqHrUJ4YJiptQ/eqkwqsnxju6/57W9XO5hsmDkNH5 -sXUgYhz1BHImVOSFlyj7NMJBjGm+w07XzKvipwIDAQABAoIBABXLPk3yKQFjXQr6 -3fy9Ix8gRUI9kgnSx9cyinIc+akVDt7/V7DUcSbyv7ZvOkPw3sWfKURWUWcxb/lI -A502q2eoUR6vajx+DTsoqfuP7pIBfkZAH4kDhB24oFPQo9jzP/3Q0DD2DEtbYck1 -xhDFOlbGLZynLuMopeC/SgcAqt8UAIe5AHoUdkPUZH3MqJppH+PCjhkMzreaY9wc -mEh7tjKuItdGYt0ZmdrnQboyklMhOikn3nKOQWVINtzTLD4AsOcExPmO3m5j4m+n -h0AGDFyxUvY/l/DH2xC1C5qu13yumesJ1irURShdwO05nrWUzqT0BH4VyJCvcZiC -TnLhELkCgYEA6vmBxHXbh58VpJEfnXl8D01ZI7YgXHaNPb43j4GA26pd8JVYkPcQ -TBRZYRGEYL9CT7mfssJ6yie1ZLdGn+vkKyT2LWXxbO8kvfX5lG93sFmE1oauEuug -zau/eEh1k5fzlm6KClvFGnmMHqqxy0YMUVkAdT0Kb7PG36Bd9tDMLjsCgYEA2fkw -p8JVIAwyWF99iubxIL9sNnjJgq2j4Rj4zjtT45ZA1LCe7L1EGhQGsP/0u5u+miX6 -GdMSzwehHVBtTl/Gkg/IjWUQbL/jILeFQM2i6hdo8BCmi8k4f6ZF/Pf+m7ZRcLb/ -opJhvhhelnxfNwxHrshohCvGpGVGvSS8xtXzuoUCgYEAmxeuwHauPNkTFvk27eD2 -sr7x/DFFMOKLHVrFH3JyFAtiT96zg5OfbSftSrWeM6Fp6mdx8jKNi4skHmMeOYYg -px2RY6uq66T5Em0dnAzq6jpcBKEGmrRuAfK/wWvKN24POJajhGzIL05U3xT5n1sP -3E2rkLaGge4ecRJPkw6EBmsCgYBQWhL8lJ/Ku5RHjZP7A106JDag8e/e02HJFeqK -I8at6/KkNSOww6h6MI2y6/fsvOILcxp6MJwLY5WZ988DiDzsFRNqRCpE3Iu+wMhH -dkarIswVSx4KA7hnHgVI1qauAgyNj3g3Ft0fNV6Q/PIgmc9G+CvHJVgJvCfSi9tn -NPGu/QKBgExju7N5hrJUlfylwydp7X7jymHJGAac9J2+VhqWIhveCnTYrlwTcuJ6 -NqQDdBvDT0F+7fMxQ9wRglMadfnrwWh0Y7BGybzhlR4NDAAZk1GoxegWOR7HnacT -bbHir6keeWggJgWHsRew3Yxckzqvi+vn/v3MF/wfRijzXzSAenNl ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/ocspKey.pem b/testing/hosts/winnetou/etc/openssl/ocspKey.pem deleted file mode 100644 index 13a81f29d..000000000 --- a/testing/hosts/winnetou/etc/openssl/ocspKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAnBCl4HGp6T6CzAsRS8dQa/VmCRh8TCIunhnxxxTmwOeg6Q8R -FH0QPPMLzoHKvz8UowCWS3jzvVUC1PrHSvfrveyDX+wDEOwkkXx4JIxALdkiuIlg -JNNSPee6ncG7007Ab5hAIiraqUFXCm5KJMdXQie6aweE4yVkJcYoTAH4EUBF/BFh -NXNr5s0PH1ZBHN+xP5FqcA2JSrVYnZ/ja7eY+0rhPhymThPc3NoUV1PSBP+YYB5j -3dLCJJrrE2Kq/n3nkt8ehX4lp/8SDJX+Hk0OheeRIHVLHpuLLtMt9It+vWjL4ji+ -UXPTgMk/3h+QFP+QQcvTP8tEnqd8IHazi7A94QIDAQABAoIBAEP6NGZY3AuOgOZj -g7sgK/V6RGF92tZGpUuUPW3bus8XlU0ulN/5wZLqwp/GhQtcbJ67aLujCXfUiZE/ -UoNjDboCRQ8I/CTo1tzP/Hze4i2WQLtkiw4/RblVMEH62tclnEh/Zp/7TpcesM0I -UR9H/MgCCf8InWdbKA4UDAVfbjAEws/72QSMnhhsdUfNMKKFiaaDz596MXpI3AWY -SsenVmcqhMTP819DEem7GTSyOZbx482i7tr1Ix/HB/WlXoTZLB4IFsUOjbtQkoym -fJHftuCsuN6xg6xUq28zaWqcZzDje7pavqmexXfxvG7a8jXFGY/sagWIHSIp32la -0WoUO2ECgYEAy0pG09+zY5pHsHoNrSEsN3wIXOv4EIwwEuk4ZTqBPyh/lbHozHDp -JlO+ObJVzRG/NS4RnlJUicmAUtI7CSpdvTD1OclROBF3DPwiu18zEJTqXkGDcVyt -bmy8JQDZPYt4mE/TsuRN3uoc9+2jc1ZL6zvS3u6s0EV5j4SYxrn/oQ0CgYEAxIe5 -uBvR+wRXeWddRbIAKxQJa1PR4WDbIQWGm8TlXpcBWsyaqId3AIg9IoQH9AtFvl5F -+6QHjhl5jNK/PkzNM/xAMbS4X4S32zDVUtmJXheyze65lQvXVfUFQUCyb5DeBtvk -XOf6k5WfM8rAzCb4PNwp+U21vQW7dfOSWp1yEyUCgYEAv3QHeljOYHqXE4wPP0Lj -mqmUUrbk2+i7CcRdGXDc8jdY2QlBfvDDkxYBK+NZTRVup03ox9svxMhhsx5M/RfK -SnhGKxL/C7ffD/qRVzeUJwSoKPa4LNYke7+p/YtsDLtCauebL3o2ID8J4zEJ44Cd -ZT/lG5FabZdQoao2G8pmBi0CgYBrdG5mLMflwJz3Yz3LUqTm6OCxjzXtTeDiMDxG -RSTIUDZMaByT0uWNI/CRQ7F5jQRILxGColADMQiVp9ErBiEYsG6E/vPkPhOsxAmP -cCO8j6aTFFjiFoRZmkuSPwaRG5taErbM2YXXVfKjBdPei9wkophMmGGrBUxXFKNL -6lQqBQKBgFeDuiesvRr+3KUxO6FiRXdGzkhFpfVaSxnFpvyd03vByTsuI5AugjHt -UPHkOxnrXYg2bZwHSy5fvhUs18FdcucfJnsVl+/Clhl5jkeQzSOszoPx8lvhcck5 -uzlqo+L2XXWN3MaiBHvboA/duTiSQAvcPaEi8gpprxvLHojz/P9R ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/openssl.cnf b/testing/hosts/winnetou/etc/openssl/openssl.cnf deleted file mode 100644 index b1ef68a11..000000000 --- a/testing/hosts/winnetou/etc/openssl/openssl.cnf +++ /dev/null @@ -1,177 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/strongswanCert.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/strongswanKey.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 1825 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha256 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -serialNumber = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 1024 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -#0.organizationalUnitName_default = Research - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning -#extendedKeyUsage = serverAuth -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan.crl - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME -#authorityInfoAccess = OCSP;URI:http://ocsp.strongswan.org:8880 -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan.crl - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE #, pathlen:1 -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -#subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/research/.rand b/testing/hosts/winnetou/etc/openssl/research/.rand deleted file mode 100644 index 7479c2979f47f3626a2727262225a0fe9e1f2a67..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1024 zcmV+b1poWK9(mR|_l3X)*J?;qS{z=lje9Gcuy>q(@KG>Sv=3B=mGUBJ&4G*2F3^6g zgscSR8gr1Y(Zu6dMh%u5J5SvVRDa$SctO7V>v+4;e}FbDW&79^Y{H>d8?pED<$6u# zXl;1<7xruzYxIrsc!@P}ehU3qsEAmJt}cm2xeBj2(P5zXaj^y(qj&Dfi_S7hK8yPY z;W;28xuW|4l}dkKmlc#6@K`5D4}7dP9^V9Y!-XC0a@Kf(1=l z!YoJ+aZ*L6x#;U}dHsFQYXu;YXX(3;<8^Vu8e2>W{QY=3KX?BeXtGSxAxz}Ys1x9c zsXLGCwG!R<4YHttIU<8H@I6QD0I(i;d!4MxGFH2Tb%0CScl zs05iGMpz7td|KW{@UZH_U)EqmGbhD{np|?m{Og_RH#x=z%DrJGa0hF#02&=hoHpae zD3D>{rKC$b4T<&d2*W+Oh{JYJm$_i^*KtYA$JpNmV5@KWEvLEMs00`z>~&B+!C4#e zC4irtW50`ED~0f<@1~VYG!%mpv5fzI<6Eu9%9Fn9&$_k*Da66PPL@%nk~vw-2Dp`J z;Xy|a91X{vK`eZ}*juzLOoU6l|0ocWzU!J*6kY`1?ZWKo;RURG8U|PWOi~<}t($GV zUWrU5korvh59Mq}W;`YWG%@AKBf22n9fbYr-n^V(PsNQM$fWQlY;zSRTi(rYC@^JV zfBZs~sH#v51uqS(RX>s1BB{BLMIY^z&Shk&`7iQ?vvu$z&F;VNaFZw)&s6LsJ|MiH zwKf`T7-D~mj0^!}StvPZ!uC-#c%l}-9}wwteTly8W}(tT?p*9;IGa&@9u5PGg{Hi+ zOcj>LOzZg9B1=c>`kBEBLFg@n6UmkfnfskfW;G$0)wK>TGW3(q$HIW+5fw|$UQgAr z(riRtUrtq*D9}q^%28QO^xh!Bm#e!zbi}=3>C?jcr~*Yx4t4a8Z>B|Y+-IY^%P$9Ka3w=yskrHK}?@>!e(gYesj9)H)bF8QRuVr8xL;A|{Goy3D uy%VfL%3_pZh|}{_WE0}e8l-RPaO@NlsOBs}=!t}^$~@~^{HGfGE6uLpj{tT6 diff --git a/testing/hosts/winnetou/etc/openssl/research/crlnumber b/testing/hosts/winnetou/etc/openssl/research/crlnumber deleted file mode 100644 index 75016ea36..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/crlnumber +++ /dev/null @@ -1 +0,0 @@ -03 diff --git a/testing/hosts/winnetou/etc/openssl/research/crlnumber.old b/testing/hosts/winnetou/etc/openssl/research/crlnumber.old deleted file mode 100644 index 9e22bcb8e..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/crlnumber.old +++ /dev/null @@ -1 +0,0 @@ -02 diff --git a/testing/hosts/winnetou/etc/openssl/research/index.txt b/testing/hosts/winnetou/etc/openssl/research/index.txt deleted file mode 100644 index 8f3e8a659..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/index.txt +++ /dev/null @@ -1,12 +0,0 @@ -R 100322070423Z 100407091025Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 100615195710Z 100703145747Z,superseded 02 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -R 120323210330Z 140324140605Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=Research OCSP Signing Authority/CN=ocsp.research.strongswan.org -R 140323203747Z 140324142334Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=Research no CDP/CN=carol@strongswan.org -R 151103161503Z 141128215838Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Duck Research CA -R 150406092057Z 150426102340Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 150702151839Z 150722132235Z,superseded 07 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -V 240324140633Z 08 unknown /C=CH/O=Linux strongSwan/OU=Research OCSP Signing Authority/CN=ocsp.research.strongswan.org -V 240324142352Z 09 unknown /C=CH/O=Linux strongSwan/OU=Research no CDP/CN=carol@strongswan.org -V 190401220708Z 0A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Duck Research CA -V 190403102504Z 0B unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -V 190403133912Z 0C unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA diff --git a/testing/hosts/winnetou/etc/openssl/research/index.txt.attr b/testing/hosts/winnetou/etc/openssl/research/index.txt.attr deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/research/index.txt.attr.old b/testing/hosts/winnetou/etc/openssl/research/index.txt.attr.old deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/index.txt.attr.old +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/research/index.txt.old b/testing/hosts/winnetou/etc/openssl/research/index.txt.old deleted file mode 100644 index 43407542c..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/index.txt.old +++ /dev/null @@ -1,11 +0,0 @@ -R 100322070423Z 100407091025Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 100615195710Z 100703145747Z,superseded 02 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -R 120323210330Z 140324140605Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=Research OCSP Signing Authority/CN=ocsp.research.strongswan.org -R 140323203747Z 140324142334Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=Research no CDP/CN=carol@strongswan.org -R 151103161503Z 141128215838Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Duck Research CA -R 150406092057Z 150426102340Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org -R 150702151839Z 150722132235Z,superseded 07 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=Sales CA -V 240324140633Z 08 unknown /C=CH/O=Linux strongSwan/OU=Research OCSP Signing Authority/CN=ocsp.research.strongswan.org -V 240324142352Z 09 unknown /C=CH/O=Linux strongSwan/OU=Research no CDP/CN=carol@strongswan.org -V 190401220708Z 0A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Duck Research CA -V 190403102504Z 0B unknown /C=CH/O=Linux strongSwan/OU=Research/CN=carol@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/01.pem deleted file mode 100644 index 2990d6a12..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/01.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIELDCCAxSgAwIBAgIBATANBgkqhkiG9w0BAQUFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTA1MDMyMzA3MDQyM1oXDTEwMDMyMjA3MDQy -M1owWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCC -ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM+oTiV7lCh1ID41edDUgUjR -dZwEMPBAM1xDqoxJxIJpug8UIuuUL0TvQnZ4Z5fa/9QNNCkQ7FDh8ZcR+TT8x0mO -dYYA73mMQic0n4O57F+s/lESKvIoN+vIDR3rGJBv9rYztS4ODE+DJl9XK9TtId5u -57jfXu/k3IYl5GeQ3f+ic2l2Ola70t70Op6cFDZIhOCjs2xWw2yqGdPWODaN/Enw -5fOLv/om+7HHB4KgPGv4p4ohWIUCo2XK597Ii+jB2MdOUlG83/1aX7+M+IeYVwjI -hzWjwRQfMz0AQha0HYN4cvrZ7stUluMxewsCROCBzcGQYTZxYU4FjR8nhH4ApYMC -AwEAAaOCAQQwggEAMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSL -qNn96rsWg0kOJY/cyXD2JpnPIjBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBDDAfBgNVHREEGDAWgRRj -YXJvbEBzdHJvbmdzd2FuLm9yZzA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3Js -LnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG9w0BAQUFAAOCAQEA -FNPepmta0ac9TWe7Gl31fKkuf6ZiQftMwx/uq6PoX9PBVGeooktJMo+EiROQhL3N -Zomtl2nLfxYruXPHa7YaMWyv4+3NkV9p7jseC1K/2lCXipY4Vp8u14hqlRLCTejp -7uC/0+628e+qXlCm8wafDb9/JXzQar7rADhoLp7gJKI2PKMAzLUP2xZVzY5zx57G -+OCR/ZXonVeAPy9/0g9N8uQzJEXOVZYMjsoRra9rdlvnY1DgDoAK7QvJMC4VzENm -wKmz2rPrBlKaEcivubg7dwPMGNmb3f7F7w0HHuRbQd5Y0nDfEWBKCp0bVx1GLc7/ -MWjwPJs52qVJ3Ph++EF6bw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/02.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/02.pem deleted file mode 100644 index 90e207c4b..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/02.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEADCCAuigAwIBAgIBAjANBgkqhkiG9w0BAQUFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTA1MDYxNjE5NTcxMFoXDTEwMDYxNTE5NTcx -MFowSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAM -BgNVBAsTBVNhbGVzMREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH -/QcWm1Xfqnc9qaPPGoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq -4JI87exSen1ggmCVEib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6 -XL9DKcRk3TxZtv9SuDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562 -kDtfQdwezat0LAyOsVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAj -gbBRI1A3iqoU3Nq1vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOB6DCB5TAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1 -p0wul+oLkygwbQYDVR0jBGYwZIAU53XwoPKtIM3NYCPMx8gPKfPdVCChSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQwwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDov -L2NybC5zdHJvbmdzd2FuLm9yZy9yZXNlYXJjaC5jcmwwDQYJKoZIhvcNAQEFBQAD -ggEBAJW0/z17JK38rsn8zh0Ta+9Ql5fcA9UIUGcN/KfCvdGwrYaym8Dy6Pz+sZkO -clOv5t+3R1zKDiiLGQ4m8jYW6NcxeJZyyPhGtKaafanXZsQuMpaTpvkRr62jx/NB -b3c/HS3dqz2dTMvFJ6CC65vOnnGgzF1szhrrWymGI/NuHUge748WYPNw+OsLmBQI -koXJsMURGtPWXtJE98Rre+r/6O5kzZNv7V8LGoBkWf1Z6g1q2VvCcnJPxANcQoxf -Is+E+aqBhGJ6XlnQIlQB1SjoMhOnJ282JK9Hk3NmQYb/zvIzIfo3FCrjj1JI/XoA -/szZoxwnE2iHtIoMAhfHZpRvOkg= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/03.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/03.pem deleted file mode 100644 index 279b4191d..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/03.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEaDCCA1CgAwIBAgIBAzANBgkqhkiG9w0BAQUFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTA3MDMyNTIxMDMzMFoXDTEyMDMyMzIxMDMz -MFoweTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xKDAm -BgNVBAsTH1Jlc2VhcmNoIE9DU1AgU2lnbmluZyBBdXRob3JpdHkxJTAjBgNVBAMT -HG9jc3AucmVzZWFyY2guc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUA -A4IBDwAwggEKAoIBAQCuXf1wGjBk5wthfyJcNgYu5uVdK9fqB7k5Qswy76M2JjZ2 -ECv8JZMvGDC9ciKwEqL3QkN+E90RusdCqgabAl2K3AvbR4VOpaCdy31pdPaKfRXA -TazIH0GG8T/BImWTuweFt0XmsCl65ShoVul0DHWTli4jOAgHIj6eoYlQpRI6CbZs -qdcGZJRWzZMPa86Q3i2nKAsOiWh7jg04uLFsWu+2uBYmsPSbKqZe76FY5m+PgAwo -h0bFJI9qy4aryvNZiFT1+t3hd/wt/ZXnqYX4WsZcGlPOlKZoiDlmXzU1K1YY71io -HUiH7QOYBYY+8+Mc5kwt/ropYEbfLfAENC7WV+8tAgMBAAGjggEhMIIBHTAJBgNV -HRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU8xU4ukLOgkIafc7zHp5HlANw -5/4wbQYDVR0jBGYwZIAU53XwoPKtIM3NYCPMx8gPKfPdVCChSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQ8wJwYDVR0RBCAwHoIcb2NzcC5yZXNlYXJjaC5zdHJv -bmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA3BgNVHR8EMDAuMCygKqAo -hiZodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG -9w0BAQUFAAOCAQEADH13ce0I8nXd5rjnDWck3JdBOgFMu2Wl8zpKIeLVYZnUc/Sn -l0sULX6AIdMzKVsPh78CgsQf4tggdVCdbTURMp3SdLO5TDNlqPVMnjHjajWR+C0D -4TQWnBz/bEg3aXGjjJlu00eXWx8kRLrOP/wMWba+SEwYDqANgmUgxpcBeg8/0Q78 -d7xEJPOPDXlO5Nh3zeVIXaDT+y2ENzgyTx9YGoAURxl5eTpBNI7dJm5fjXdGlbwj -1vO+UprMEU6rB9BDFSfyXaXcQoIgRr0oZqvAUS/cF9LQRf4iUXCpr8Th7Wddqi2r -qiwDZt4o+3EYtCcMEK9zKJK3KMZc9A9HPCE+RA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/04.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/04.pem deleted file mode 100644 index f586a9414..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/04.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID+DCCAuCgAwIBAgIBBDANBgkqhkiG9w0BAQUFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTA5MDMyNDIwMzc0N1oXDTE0MDMyMzIwMzc0 -N1owYTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGDAW -BgNVBAsTD1Jlc2VhcmNoIG5vIENEUDEdMBsGA1UEAxQUY2Fyb2xAc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqE4le5QodSA+ -NXnQ1IFI0XWcBDDwQDNcQ6qMScSCaboPFCLrlC9E70J2eGeX2v/UDTQpEOxQ4fGX -Efk0/MdJjnWGAO95jEInNJ+DuexfrP5REiryKDfryA0d6xiQb/a2M7UuDgxPgyZf -VyvU7SHebue4317v5NyGJeRnkN3/onNpdjpWu9Le9DqenBQ2SITgo7NsVsNsqhnT -1jg2jfxJ8OXzi7/6JvuxxweCoDxr+KeKIViFAqNlyufeyIvowdjHTlJRvN/9Wl+/ -jPiHmFcIyIc1o8EUHzM9AEIWtB2DeHL62e7LVJbjMXsLAkTggc3BkGE2cWFOBY0f -J4R+AKWDAgMBAAGjgcowgccwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0O -BBYEFIuo2f3quxaDSQ4lj9zJcPYmmc8iMG0GA1UdIwRmMGSAFOd18KDyrSDNzWAj -zMfIDynz3VQgoUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ry -b25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEPMB8GA1UdEQQY -MBaBFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMA0GCSqGSIb3DQEBBQUAA4IBAQBiOKAx -ePEwlga++nOpkfBg6ESag5/VWfnAp1zRpXHXnRak10OTtCPDjmJiDUzlKBwolwJN -I6T3S7eg+M04E3r5IHn3i+HtQcENkq02YUPiUXS5cvLtzKMPIm8pYCj7/5pXxAek -nHGRdBZkQiGDz49H9rPKxLdJDTLCXpj4l9uOFgsbiQ3k5SyWq5oMhtZsf4VKqAd+ -77Mbn9pnjjy53wLuzjaMVX+K5KKotPNeSHH/pWh9RqNROmf6F2B0nZhW5Aryxa9/ -24GRkZEPZ+cqhtwgVjq5aImzdSrARJQ1tu6lZqNB5b9klYSAi+al0FrvUFoG58Qt -eWeiFXLvAtXTGoax ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/05.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/05.pem deleted file mode 100644 index bb205a0fd..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/05.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID0jCCArqgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTA5MTEwNDE2MTUwM1oXDTE1MTEwMzE2MTUw -M1owVjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMRkwFwYDVQQDExBEdWNrIFJlc2VhcmNoIENBMIIBIjAN -BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIBRSgHCxHhMjsVZo4PtFnENkHNu -MfyRDsc7m1KRDVt8N4h/EcbduU7xeq/RjxZSmlc1q6EWEgDv3KwDYY0sX+qrpQKa -ub5AgsRa2fOOR9xfyf0Q7Nc3oR3keWqQUiigCuaw9NQRtdMm/JFdXLNY3r60tBsO -UHOJAPZNoGPey5UL9ZjjsN6ROUVTh0NAkFwkmnTRwmUvY5bi/T7ulsSkO9BrfqKD -h/pliP7uZANd0ZpPcrIc68WwrelpI1zu0kYGqu/y8HZpuPuAXtGqS2jctrjSieeY -i9wFLnS2tgV3ID4LzEEICSeqVqOvYgGKbarqLkARdxmdRKM9QYpu+5J+YQIDAQAB -o4GvMIGsMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBR2 -KqikMafGcY8wJbwCZpvLF1SNIDBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBDzANBgkqhkiG9w0BAQsF -AAOCAQEAsHR1vDlz2sPQpD9xnt1PL4qX7XWSSM6d+QG3cjdiKCjH8t78ecEm1duv -YozLg6SYHGUF9qYuPz2SAZjQjmIWLlkQpBfQm8/orG+jbsQl5HkXFYX0UWAKZFGx -rjHnOzmQxnmIWHky4uMDT/UmhmWy6kuCmZbKeeOqkBR2gVxfLyzelTSbF4ntEm1C -1XqqtM4OfTOD5QUPD+6rZ5RoIPId9+2A8pJ2NyCUCf47FbkmYzU5+oiChhcGzsC5 -wDlgP32NA88kSiSJ2p2ZveYveRqcyZXZDAiTxRaIwJY0bt2Dk4wKicvy6vPdLA5v -DSlBqDpnqK8tEI9V9YeroihTcygrEg== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/06.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/06.pem deleted file mode 100644 index 69e5c05e3..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/06.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIELDCCAxSgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTEwMDQwNzA5MjA1N1oXDTE1MDQwNjA5MjA1 -N1owWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCC -ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOio9tKOkESjZumThDvt1aFy -dPDPNAhNrIon8aCvZMxFQBXsams1LOL47UKQEeOJcDUQ1s90P05vAwX+TwOA2nBD -hgVBe8c+RsBRfERmxcszK7dgj5yrjwbJFrUJPem04KEPnrR7LpT5s7+z1n+pZYr9 -HyJTvYJd3c968frowQW98mgEJG9xs2LfaqTV3RES1B9vIeQGWh64DSrF6Xy/HY+n -3MeSMGZ3UJoXS6YZIxvGNd7heB/2xxv3Vv0TNyGikmP8Z5ibgN5jn7mQkU9SM9Qz -Qb2ZY1m3Dn93cbJ5w3AXeClhJhoze6UvhVs4e/ASuJb6b9NLML4eB0BMCZD66Y8C -AwEAAaOCAQQwggEAMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBTE -AO+W2V1eu0sjCQcfemzz9lSRvTBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBIDAfBgNVHREEGDAWgRRj -YXJvbEBzdHJvbmdzd2FuLm9yZzA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3Js -LnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG9w0BAQsFAAOCAQEA -ajgFI8Kz611i0Ihu8+M1C2W1kFbL4EoYyon3trjRZ3Iqz6ksf9KSKCS6Fiylq4DG -il0mtMtlP+HKcXzRgSY96M4CO73w26liwmZsFBNaZKI/5vKRPPLyU9raGshfpBeC -CywZ4vcb+EViIPstzOYiK5y/1tSGsMEdnlX2JZsJAKhbLRTmC02O3MbGGBQQq1eU -n1xkR8pndTWTJmFZ61fZlUMSwLgLF9/VchAa7cIdEA044OCtTdabiYoyLFmqDutq -8GYvWOzLf2qOKcRxkHxPfeJDrWOLePEYnaMkSBkUKAUIkI+LaJbWF3ASTGgHqh2/ -pwU12A3BovJKUaR0B7Uy2A== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/07.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/07.pem deleted file mode 100644 index 8eaa6c6b7..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/07.pem +++ /dev/null @@ -1,88 +0,0 @@ -Certificate: - Data: - Version: 3 (0x2) - Serial Number: 7 (0x7) - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=CH, O=Linux strongSwan, OU=Research, CN=Research CA - Validity - Not Before: Jul 3 15:18:39 2010 GMT - Not After : Jul 2 15:18:39 2015 GMT - Subject: C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - RSA Public Key: (2048 bit) - Modulus (2048 bit): - 00:c2:4e:4d:26:99:8c:37:b9:51:1f:a1:25:ba:1d: - 70:4e:34:58:1c:56:9b:ea:f4:16:20:fe:14:b7:36: - 73:48:47:fd:07:16:9b:55:df:aa:77:3d:a9:a3:cf: - 1a:8c:4e:d8:17:f0:5e:01:44:1d:f3:9d:43:31:c6: - ba:d8:61:b2:f7:4c:3e:49:96:3f:56:77:b8:3a:f0: - b1:ca:ab:98:bc:aa:e0:92:3c:ed:ec:52:7a:7d:60: - 82:60:95:12:26:f9:e5:3e:1f:37:1a:d3:20:62:5a: - a1:ee:89:9f:db:fd:67:01:b6:07:e5:2b:de:71:40: - ff:07:5c:91:27:6a:27:17:3a:5c:bf:43:29:c4:64: - dd:3c:59:b6:ff:52:b8:37:ed:13:d1:bb:f3:b3:ba: - 3c:94:b2:7f:25:18:86:57:73:d4:46:5e:e4:f4:ec: - 52:80:1b:04:9d:03:0d:72:71:df:9e:b6:90:3b:5f: - 41:dc:1e:cd:ab:74:2c:0c:8e:b1:56:9b:62:af:f4: - 1b:f7:c1:67:02:cb:7a:be:2a:18:5d:be:dc:2b:2f: - 3f:b8:cd:5e:78:51:61:e4:af:db:ee:22:da:60:23: - 81:b0:51:23:50:37:8a:aa:14:dc:da:b5:bc:f0:2a: - ce:b7:a4:38:8f:d1:57:d1:eb:7b:d2:f5:af:c5:f5: - 74:81 - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Basic Constraints: critical - CA:TRUE - X509v3 Key Usage: - Certificate Sign, CRL Sign - X509v3 Subject Key Identifier: - 5F:9B:13:46:F9:20:72:C8:00:D5:88:B5:A7:4C:2E:97:EA:0B:93:28 - X509v3 Authority Key Identifier: - keyid:E7:75:F0:A0:F2:AD:20:CD:CD:60:23:CC:C7:C8:0F:29:F3:DD:54:20 - DirName:/C=CH/O=Linux strongSwan/CN=strongSwan Root CA - serial:20 - - X509v3 CRL Distribution Points: - URI:http://crl.strongswan.org/research.crl - - Signature Algorithm: sha256WithRSAEncryption - 33:e2:05:f4:db:4e:41:f0:45:da:6d:e2:20:18:ff:0c:74:00: - a2:b0:9c:5e:b7:eb:ed:44:fa:6f:1d:1e:7d:47:85:35:3c:15: - 99:22:44:2b:11:49:17:71:aa:9c:e9:ac:c8:1a:ea:fe:e4:b1: - 5d:bd:08:82:69:4d:c8:9a:0f:8f:12:db:35:8d:b2:24:36:bd: - f3:41:e1:47:a7:1b:8c:0a:54:6f:3b:e3:60:90:6a:40:b3:66: - 4f:fb:32:b1:ee:b6:4f:95:0d:c3:77:a0:67:2e:e2:01:44:08: - fc:eb:66:26:0f:4d:5b:fb:e0:f0:85:45:f7:77:ed:26:25:5e: - 63:74:28:5d:08:bf:38:2e:d8:33:70:24:d3:03:01:ae:ac:1e: - cf:bf:f0:7f:fb:05:bc:c7:c5:46:64:4f:bc:eb:4e:ec:b8:33: - 91:46:20:a9:65:40:1c:40:2e:9f:fc:37:f2:cd:e2:fc:f4:65: - b2:e0:6c:d5:3b:12:8d:7a:12:29:1b:10:04:94:b3:74:9c:9a: - 76:be:74:50:52:7d:ec:5f:d0:6f:68:aa:f1:ef:c6:35:8f:89: - 94:70:e9:9a:d2:e5:36:64:00:4d:43:99:da:8b:5b:04:cd:ab: - f1:68:69:e0:d6:b2:59:60:01:da:8c:03:67:cb:ee:2f:6d:b0: - 51:d9:55:89 ------BEGIN CERTIFICATE----- -MIIEADCCAuigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTEwMDcwMzE1MTgzOVoXDTE1MDcwMjE1MTgz -OVowSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAM -BgNVBAsTBVNhbGVzMREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH -/QcWm1Xfqnc9qaPPGoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq -4JI87exSen1ggmCVEib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6 -XL9DKcRk3TxZtv9SuDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562 -kDtfQdwezat0LAyOsVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAj -gbBRI1A3iqoU3Nq1vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOB6DCB5TAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1 -p0wul+oLkygwbQYDVR0jBGYwZIAU53XwoPKtIM3NYCPMx8gPKfPdVCChSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCASAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDov -L2NybC5zdHJvbmdzd2FuLm9yZy9yZXNlYXJjaC5jcmwwDQYJKoZIhvcNAQELBQAD -ggEBADPiBfTbTkHwRdpt4iAY/wx0AKKwnF636+1E+m8dHn1HhTU8FZkiRCsRSRdx -qpzprMga6v7ksV29CIJpTciaD48S2zWNsiQ2vfNB4UenG4wKVG8742CQakCzZk/7 -MrHutk+VDcN3oGcu4gFECPzrZiYPTVv74PCFRfd37SYlXmN0KF0Ivzgu2DNwJNMD -Aa6sHs+/8H/7BbzHxUZkT7zrTuy4M5FGIKllQBxALp/8N/LN4vz0ZbLgbNU7Eo16 -EikbEASUs3Scmna+dFBSfexf0G9oqvHvxjWPiZRw6ZrS5TZkAE1DmdqLWwTNq/Fo -aeDWsllgAdqMA2fL7i9tsFHZVYk= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/08.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/08.pem deleted file mode 100644 index b24767d19..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/08.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEaDCCA1CgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE0MDMyNDE0MDYzM1oXDTI0MDMyNDE0MDYz -M1oweTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xKDAm -BgNVBAsTH1Jlc2VhcmNoIE9DU1AgU2lnbmluZyBBdXRob3JpdHkxJTAjBgNVBAMT -HG9jc3AucmVzZWFyY2guc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUA -A4IBDwAwggEKAoIBAQC6Jq9DciPtR5iC73URlc9qcqFl+QGeRDxDLCtnLqFjkuWv -0ul17qZH0iMwxbbRU1UZo2bANNwAmWxBcT6VNf84V9Dj9m9UwUTSfegrkN2RVBEH -cHm5higeJzC25C46S+VCTQkq8QxS2k34sA2sK6vys1XDgzwmDfT/GYyHf3nl0blR -GkrotmgVAsweUVQ7a5ThcWVf4d06F3mN5xxGWNxgNoVxZ5Ki6a9dMuQRrNh54qje -N1pulp0fZWxshWK0YrQSpPhKgz5kAflSnIwrdyjFdFS8WKpLOAkXV/NyZa6urUw7 -mz3owNCZJqCrYjC2JdTS3wUqRZhx1xyY2DO+laLJAgMBAAGjggEhMIIBHTAJBgNV -HRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU/cGV4/+zOIk30UYg1R87H7V9 -GAgwbQYDVR0jBGYwZIAU53XwoPKtIM3NYCPMx8gPKfPdVCChSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCASAwJwYDVR0RBCAwHoIcb2NzcC5yZXNlYXJjaC5zdHJv -bmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA3BgNVHR8EMDAuMCygKqAo -hiZodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG -9w0BAQsFAAOCAQEAO5Dn8zzHElWX70e1bV11b1/+SD0JlAbdxZWuWJO2qtbSU/Bi -7Q+rxCY/NoItGAPm92b3nhIoX50v/qjdQDwR+cqDN/FQius3PEkCpgmpLoP9Hv0Q -vnYo60UwffReo4fTW9owrpzHCfpZTGaWEkSSv8qwSp1evrRXfpipUcKxr1Vchajn -P3bB5ghs5T3OpVh+I0x0Yj3DMYGkDao/JL+hFJCtjc1FLsrFG19DhC3tFOJ9Sp4y -oYtMWUF7lJaoG1mWE3LVuSHA6dowA5zvnPVVaizebYTHndn0Fbqx4DoX/p5+VEDm -k573X4NxOVfgKyuvFtWOjluDaDcKfmupsEV7Kw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/09.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/09.pem deleted file mode 100644 index e121032b1..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/09.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID+DCCAuCgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE0MDMyNDE0MjM1MloXDTI0MDMyNDE0MjM1 -MlowYTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGDAW -BgNVBAsTD1Jlc2VhcmNoIG5vIENEUDEdMBsGA1UEAxQUY2Fyb2xAc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPVagzyvHEGzA -6jWum0URx2TSMs8cM991OU3n8fkBiLEY9H8DUbjEZlZ0mgcxTOSXSmyqmW+10QCy -yHPBtR0kxNY/Bl/+QppnB7IpFCR9bsvA4bySYUbdlQWdIPGTmT1polGtoF1mPZ2r -JqN+Ai5jnFduJ+/189l8chqcz8KlJ2Jp72OaeYqQpgDfo63hqS71OzyY1Cu27vHl -ay186P+HW75yr5YMwxtYk/rZ6jHRMXFwmI+bq1vgpKYHTomaVCG3zDUD+1XsGVBX -u3z6qh6FaxxDPizT/fcCbYcYGbKjJw14JOqfddeAHZe+N41Wev0gAhOCIgUiMoxV -bbx0XkMzAgMBAAGjgcowgccwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0O -BBYEFHtMZgnElcGoYKmMUvCkQaloTKKfMG0GA1UdIwRmMGSAFOd18KDyrSDNzWAj -zMfIDynz3VQgoUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ry -b25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEgMB8GA1UdEQQY -MBaBFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMA0GCSqGSIb3DQEBCwUAA4IBAQAC1mG0 -nU2TfmYecE0uK8Dn44a8rn13gNyTxpVk+CTYKjPm83BBaf+/K/D2R6+HF3RMkMg6 -6aBHFUwCzIwgL0lBRKT6FioO83kqUkEulRp0jc4hCdUQcAgzqQ+tgT0beCaVHnMv -qMtKr7FEPVklFfIUQj2gV5bJAkjrjvawnVRaCz3kjk51c78wrNUXI04F3SaUrPjl -jcedQvptLspT81A+Itkjn3VOr50M2RVIoLpFBNoPs2RA6iW+R89NhQ3i7aLnbULT -rh+ra3xs+SS2rkV9gC7qDuHqVG5cyWvLl4Hjmo6nHM5i88qgcOzd0tWmT6H2SE9n -YYzmZo5QyNJg2qBU ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/0A.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/0A.pem deleted file mode 100644 index 2076242cc..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/0A.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID0jCCArqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE0MTEyODIyMDcwOFoXDTE5MDQwMTIyMDcw -OFowVjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMRkwFwYDVQQDExBEdWNrIFJlc2VhcmNoIENBMIIBIjAN -BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu984h2mkpbWJZc9Ydka6jC84EkPz -w6tqtEkIdftEawgc5gvlC80JXLTwnQySMTb49KByyt44S59ZWE6SHHV0u2P2ihiw -1duoY7NE+RZwODEsWVgnDRZmyume2Bj+Hpkugm6o+rL7jiGxhvNLeoFZK3RyD6IR -IcEfZeAv7URGz7xdrzmK/vWXukfEnU8DlrFDSQUb3NaJS5tVVVLFuTWQBSjuT3NX -7mdNHnpjcwT9/ruyOaNQ0DV2Bgz1nCiOup+oW396/AInb03CQ+wIqQpB9reWma0w -F0Bc9lZxnv9ppYgBPsOTjE3yyyeTptzk9Gw+DFV1cw8Crm+aew5VH18oEwIDAQAB -o4GvMIGsMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBSK -cODKpRxkbyuSuXNcAayQG/35NTBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBIDANBgkqhkiG9w0BAQsF -AAOCAQEAMtm7ldvd45818Ghl8+Z7PfCnRXDPbikyCJn5PXkuR3TSB62ekJSGT1Rd -i2rnDoIZpfSzDQSpKH616MuWtwJoomJh8n9wCzbdUv1sn1cfgjDSkgLqIbm/Xpc4 -zUcHnZFdwvMr3sq/xSO/SgkfgTHi8bFLLp2RQwPNsNycT94nNE7DRjSeRenpuEPM -4t4xIZCoUyX3sdusHvh+dDu4iuIVQoM0zaW9p7pVh210ALt0jac3HW0rQXtbfchE -VeuDLZ0G7baFZ9LLLWpuQB4zPRUET7puvzabsf+sHpO54y+zXRaB0tbiFIurt4gF -5n7mN4ssNQdcD86W5lnI9pT5s1uvdw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/0B.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/0B.pem deleted file mode 100644 index 698e47cc0..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/0B.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIELDCCAxSgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE1MDQyNjEwMjUwNFoXDTE5MDQwMzEwMjUw -NFowWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCC -ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKupuHqUUqSufsEtjSTZEkTF -sTGWXQkwZoLbAPNlZ4PV0Dx1ju3xRvVtjQHN3Tsx6IsB1JO3k/dMExwttbeBA8HK -oKYw+CFG8+6XWUU+tBT5xlwa5sdVUHIo8On1x7Rb3s+RDhJ2/YvCf/H13aOtqG+L -7Xyt7OwRQZNx4Gx60sgU2Zhr9WsMslWJQeS92va6UiGYN4c6qRNyrS9zTZEJ0yib -tflhd07LLcgz+jHqCdUcPK4g8+TH8HCtek0n2QRu3IfbEM+i6EaZjUJq1kp6k9HA -IgKR48r9HVk3zBsWJBo6sxUn8/avFM54vdwD8NAClNn9xobEXsO3jwGljc5mb40C -AwEAAaOCAQQwggEAMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRd -qfnvgHGNOog5OOLebmYkmJ/faTBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBIDAfBgNVHREEGDAWgRRj -YXJvbEBzdHJvbmdzd2FuLm9yZzA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3Js -LnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG9w0BAQsFAAOCAQEA -TgUJbXL83e11Fzo+XGMQ24FfxdUvlex9IcnnNZnjsy4cYaUhofdI1AIkOhdh7R4i -9dtdfbFLLQR3qc2jmL9ubdQP83FiZZQOXX55XV5/Gb4E4g2T2ZU8ahby+ZzQsEcI -jGeot7fRfbxUrcjnIKxZd7JsQSaR45rMrNcUOQpFT212urojUngrEoAeaC5USEiX -sF11P654UejR8DCczwLi4QBvjRTH3bcMC57FjsWt1n/KCB08dS0ojD+T+6lN7/1K -yLreeRNynXzc1GAln5G03Ivwm9STFT1mYjkBMOCY+3ihEOpzlR9pWCWl9p728db3 -mk0VsDm1jdOf3PK1Xd2PJw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/newcerts/0C.pem b/testing/hosts/winnetou/etc/openssl/research/newcerts/0C.pem deleted file mode 100644 index 4e4195184..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/newcerts/0C.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEADCCAuigAwIBAgIBDDANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE1MDcyMjEzMzkxMloXDTE5MDQwMzEzMzkx -MlowSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAM -BgNVBAsTBVNhbGVzMREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH -/QcWm1Xfqnc9qaPPGoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq -4JI87exSen1ggmCVEib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6 -XL9DKcRk3TxZtv9SuDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562 -kDtfQdwezat0LAyOsVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAj -gbBRI1A3iqoU3Nq1vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOB6DCB5TAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1 -p0wul+oLkygwbQYDVR0jBGYwZIAU53XwoPKtIM3NYCPMx8gPKfPdVCChSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCASAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDov -L2NybC5zdHJvbmdzd2FuLm9yZy9yZXNlYXJjaC5jcmwwDQYJKoZIhvcNAQELBQAD -ggEBAA02ru9JhdIdlASKIJeVq71tl1wCpLZXZHwogfJqxQ+4oFghXS1dlqQ6H3bC -FbjycssfGVEox349edq1s+4vbK+VS9j2kFBAwxw7NUXKOJ1tM0/FjSFrBTDzw53S -e7V12nzyep5p8Dzd4CMP2ThpKKofNWzaRb9o/K2vsk3nP2W/CVj+E32Chm5ySdl9 -sYHzAlNYoBi/xxHeSzWSzTA9gEMV5onNx025SGUx6TwQejMAD/DEp0QNGaqBD1lC -916UfBG0voUz8BpQzvRXeFCW3qPbNuJWvu3c/VRhYe5DRz3Cq1R9YoQnZhStjdRr -v7YJ5uRiz1rJ0yrQ/W1rMNFGirI= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/ocsp/ocsp.cgi b/testing/hosts/winnetou/etc/openssl/research/ocsp/ocsp.cgi deleted file mode 100755 index 32405f81c..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/ocsp/ocsp.cgi +++ /dev/null @@ -1,11 +0,0 @@ -#!/bin/bash - -cd /etc/openssl/research - -echo "Content-type: application/ocsp-response" -echo "" - -cat | /usr/bin/openssl ocsp -index index.txt -CA researchCert.pem \ - -rkey ocspKey.pem -rsigner ocspCert.pem \ - -nmin 5 \ - -reqin /dev/stdin -respout /dev/stdout | cat diff --git a/testing/hosts/winnetou/etc/openssl/research/ocspCert.pem b/testing/hosts/winnetou/etc/openssl/research/ocspCert.pem deleted file mode 100644 index b24767d19..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/ocspCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEaDCCA1CgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE0MDMyNDE0MDYzM1oXDTI0MDMyNDE0MDYz -M1oweTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xKDAm -BgNVBAsTH1Jlc2VhcmNoIE9DU1AgU2lnbmluZyBBdXRob3JpdHkxJTAjBgNVBAMT -HG9jc3AucmVzZWFyY2guc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUA -A4IBDwAwggEKAoIBAQC6Jq9DciPtR5iC73URlc9qcqFl+QGeRDxDLCtnLqFjkuWv -0ul17qZH0iMwxbbRU1UZo2bANNwAmWxBcT6VNf84V9Dj9m9UwUTSfegrkN2RVBEH -cHm5higeJzC25C46S+VCTQkq8QxS2k34sA2sK6vys1XDgzwmDfT/GYyHf3nl0blR -GkrotmgVAsweUVQ7a5ThcWVf4d06F3mN5xxGWNxgNoVxZ5Ki6a9dMuQRrNh54qje -N1pulp0fZWxshWK0YrQSpPhKgz5kAflSnIwrdyjFdFS8WKpLOAkXV/NyZa6urUw7 -mz3owNCZJqCrYjC2JdTS3wUqRZhx1xyY2DO+laLJAgMBAAGjggEhMIIBHTAJBgNV -HRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQU/cGV4/+zOIk30UYg1R87H7V9 -GAgwbQYDVR0jBGYwZIAU53XwoPKtIM3NYCPMx8gPKfPdVCChSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCASAwJwYDVR0RBCAwHoIcb2NzcC5yZXNlYXJjaC5zdHJv -bmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTA3BgNVHR8EMDAuMCygKqAo -hiZodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG -9w0BAQsFAAOCAQEAO5Dn8zzHElWX70e1bV11b1/+SD0JlAbdxZWuWJO2qtbSU/Bi -7Q+rxCY/NoItGAPm92b3nhIoX50v/qjdQDwR+cqDN/FQius3PEkCpgmpLoP9Hv0Q -vnYo60UwffReo4fTW9owrpzHCfpZTGaWEkSSv8qwSp1evrRXfpipUcKxr1Vchajn -P3bB5ghs5T3OpVh+I0x0Yj3DMYGkDao/JL+hFJCtjc1FLsrFG19DhC3tFOJ9Sp4y -oYtMWUF7lJaoG1mWE3LVuSHA6dowA5zvnPVVaizebYTHndn0Fbqx4DoX/p5+VEDm -k573X4NxOVfgKyuvFtWOjluDaDcKfmupsEV7Kw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/ocspKey.pem b/testing/hosts/winnetou/etc/openssl/research/ocspKey.pem deleted file mode 100644 index 1355fc3c6..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/ocspKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAuiavQ3Ij7UeYgu91EZXPanKhZfkBnkQ8QywrZy6hY5Llr9Lp -de6mR9IjMMW20VNVGaNmwDTcAJlsQXE+lTX/OFfQ4/ZvVMFE0n3oK5DdkVQRB3B5 -uYYoHicwtuQuOkvlQk0JKvEMUtpN+LANrCur8rNVw4M8Jg30/xmMh3955dG5URpK -6LZoFQLMHlFUO2uU4XFlX+HdOhd5jeccRljcYDaFcWeSoumvXTLkEazYeeKo3jda -bpadH2VsbIVitGK0EqT4SoM+ZAH5UpyMK3coxXRUvFiqSzgJF1fzcmWurq1MO5s9 -6MDQmSagq2IwtiXU0t8FKkWYcdccmNgzvpWiyQIDAQABAoIBAQCqbIBI31bFBac7 -OL+VOfKLIidhlHdGznHdjbKu5KIc54AhWJckwTi6yEgvftPBEOn4bwDDN6GzasMR -pvwE30qp6rvz+Mo0bjzz+RF10UsIok504SSQFaLk+DxBNOaduJ5L9PtPtR/zOqnn -5EagOdtSd50tQhjvPhfu9RUTeEHBhJDILUIZeJ4pCkM6/+agsgnDP2/4PucCXHkD -8k6FLw2eoYMY3e9UKuiWUGXiCVopIZmZcG33ipQ3VFUzrP9JmE7ji4/p40VfShvV -/fKWPEGe11IOQf8VJfcTYjluCbq8+UkIO4HgZxa36sxtYTjC+4MR9MDfMNIM+GzH -mh+qd84BAoGBANx2v3tCY0zVAkqhoilOTYAixeTJjzsFRjR/9XkxfkrGJt8kl7jk -s3hl4VUlblT1FWytk2vN8mE2MfT73mie0TpsNCefrWN9Xd9Yi7xjpJDfyMs8spD4 -8snmLK5euFNMNqbu9tyi2sfUR41FBi8kUzA7WAMx+M/pHUug6i/Xn4XlAoGBANgo -DPF7M+BCsls8OibT49+K4nF3rQWY4axojcCb5UZQRMDysg0ji0nwYqQktDjBk74w -3uIITVlB6UaG5dZ9O6C3ZP1+yi9Egoj6XYG74YKebgZnH7F1EKEdZnh7BPlTOQsl -kv9Ccm2r4RrxSsbXpDIel/54s8rdVPHfdfiv1psVAoGAMIWSLza1VDutfW+FmUG6 -nPEKTQhvlbXbdcKT7FCQUzS5aXNMUU1EksMZjPvoBJrMVFb/k0KIjgy3ggvNL4mE -0y7ta6shJjx5ZKbAWn4zwg7+ynxZcL7Z8MXQH7CJMQwdGzCM9JKDRGfcN6NxcP61 -sG/fNxTQhjHwWKzZ3h2+5mECgYBd254rKO0QnsVlWlSB0ZXr1hmXXXjSqlyriUar -8MVwb6A7C+cGT33G4EtkrM9Yqa1mc0AEc8hqTnVle2PHa999XMTMUcanGZ94rQX3 -NEaqefKacyLO4l8TJnn9LKWvQVTOo0Ud85NOTcjT8xweFTqlzKUBCRZAqzScRgSq -tGeCNQKBgE9nGL9anLDb7CD05ya0L3mW0cIkPz42NKCNI7zCs17ujABII6BpDXK1 -ApiZf3JxoTlp8czTvS6hqBZhicd6WxFqSBRhC8nOuq5YKPBPRQssayirzJiEi/JV -qEZzKbKKRUl33ESWI8ltWz/hg/WE0gSQyJVpyPo3IOI22a+KHvNe ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/research/openssl.cnf b/testing/hosts/winnetou/etc/openssl/research/openssl.cnf deleted file mode 100644 index f5ae64e36..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/openssl.cnf +++ /dev/null @@ -1,172 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl/research -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/researchCert.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/researchKey.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 1825 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha256 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 2048 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -0.organizationalUnitName_default = Research - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning -crlDistributionPoints = URI:http://crl.strongswan.org/research.crl - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME -crlDistributionPoints = URI:http://crl.strongswan.org/research.crl - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/research/researchCert.der b/testing/hosts/winnetou/etc/openssl/research/researchCert.der deleted file mode 100644 index 0cbb57b996248b076a344001bd14e42ff304ec7f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 965 zcmXqLVm@fl#I$k&GZP~d6QhCwFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH8e0VF)%Z* zG&MFghyrpgfm{Zl`kzt$VCaYx+*rOws+xu^dYRxM8E*)#T@p*%A)zqCY6BpiJFL`X! z&t?(DNE!9&DwZtg4|*zvcZB{P4!nLcGQntR-naOAz5D888->rvo&6FYcC%u7dNgqXj}shQdwa}#{Vp=2FyUpfEyT~ zvivM8z*NCzAPeH~v52vVJTLvQ;L}=#vu6{O&m2F&ulf0Ih=M^bNLraC%^;;gBzF1T z0=7V-y64++H*bCVAmNps@B4+GOWdiHj+z)5kmD4XK!I_}$k3a+FjrdlOk)g}k?5mS z(t1Lj+j&`M+plX_Sj;N5-~Gjj?M?~DST)?+Eq0&SXr$cvE8@Z7Pj?j(oTt7lI+t$| zBldmAnV0PcPp$a)_}wcXslJTO;;h>{?`$$~R!Ukot3BN^$LhFDyTIat13Wel+-7FH zEO|9Wuj%Q*dKWPPhg%yZ*&}AnV!NU~*|JjDW#`U4N97u``M+4o{NHwe?GgRtqbH6p zn0Zb#R%i3pH+S!Tvs;m`k->P()H_{k`x*P!2Duw!W4dhptj@ml;rJU;cG&9HrLV;d zN{>#dWc#)`ZT`QWAyMw`ww%elkC=0wTv^|0p4`VHnr!s$brEZV^tDe1(>f;s0Fer6 AO8@`> diff --git a/testing/hosts/winnetou/etc/openssl/research/researchCert.pem b/testing/hosts/winnetou/etc/openssl/research/researchCert.pem deleted file mode 100644 index d53365f78..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/researchCert.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTM1MFoXDTE5MDQwNDA5NTM1MFowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBAI1toW0bLcyBXAoy -FeLKGy4SibcNBZs/roChcwUav0foyLdCYMYFKEeHOLvIsTIjifpY4MPy3SBgQ5Xp -cs5vOFwW97jM6YfByqjx4+7qTBqOaLMXBbeJ3LIwQyJirpqHZzlsOscchxCjcMAM -POBGmWjpdOqULoLlwX9EFhBA2rEZB1iamgbUJ5M5eRNEubm8xR6Baw/0ORz/tt+t -xC9jxcjHoJnOFV0ss7Xs3d32PqhvKGgBxjVLZyq3zD/rMG2xXVyKPU46zelMCP1U -dsM62tL1cwAi4soka02GQrP/rwBhHt22bJMN4gNs5NSvhTdjjgwVYzLu63IFYBvW -8sFmiZI= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/research/researchKey.pem b/testing/hosts/winnetou/etc/openssl/research/researchKey.pem deleted file mode 100644 index 5e6f030f9..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/researchKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEAtjmyOqbgB1tYpz9PslqFanL3G109seeAE3qVuelhod+vGcay -+YMUIVkcJ3t6BGpD8C4kcdwS/cNR18lZYDKlWdS92VynnyEGOnF9M9c/0gMHHNBp -DJTOwTEgZY5VRjZ7vEnkEoGddWSiTeG1jgevUZ2o2H7csSZt6AkGeBNFJHHg8onn -gU79vvwtTMH6szGvPHD+WcjyMSYC0qW6BDtz1q4x4ULP42aVJ+dKhaEc3mqb7SI0 -rLQL7bki4Tw2r6LeO0GIjwHAGodje7Yi5+VSH01z139Hq8axE8wezfRfUdr+bRSD -j3j7DCrB8QFlGPPEyYwX/VIbgjUTdMM4neyuOQIDAQABAoIBAA0xhjb66BOASJ3r -VpDaPvijFEMV8CaWVU6TvI12WUxIDrx2B3VLSUTU19X/+aiiLQMRxC++OF3JK37N -JDxzzkb/wTMgoz5BPNs0ZlU/i25gK76pVEHF8GZKcUcJFCF+Rl0umGXCnqzmOV4c -LnH3Gnl1SclK/h2RY7m+FYrSElp+COHYBnW0agLIfRv/fF/1yApBP6jGegEFXp5z -ZEwmmS2GbjVRq7ClqXfadQaPwRmGuueChq9S0DaY2z6/EAQJM/mHZYkeZGNTJqTk -KWY0RmFZlCXRIxs+hG1agPZ/jdRwnxghPDcpnNZHKXLyoQhUa9oXn+RuUxPdK/s3 -9nB30xECgYEA6snKErKb04Sj6sB0/ONMK3OENVcbBYZlhyzymuSgpFY8FhhyDFIG -H80eMGzlusvrBfV7OfJd17Mwuy0H3WBSGapbqXUa/vNc37VSGCiTObz/5RDhyU1N -6zq5RZKPVDgnJ3VBTEr8Ito6b5iZWtyaRw0e4Xv1K0tdQPTLe2TaAEUCgYEAxrA6 -A94jBZWMwrXrUa7DCi0Y7BPh8hbZwHH1qEr8xNALnXGHSA5BbhjqLkYCWP5GlvrC -G0TNrX1SMTv739wQL/GqvLTM1Jc/jrmPkLBymLNyweaKBXFt1qJDOdvtMwZdDo0y -9hKXfyCDMURi3JhP/GLzA3bUruw28njZYgWI92UCgYBSKHyKoG+Ay7hkTCZj29Hq -noiT9cAh5c6fR645X2mLOBXckX9PKmC0Ph2jSmf1PqgmNKmDNHl8IlsaFH7dC3iP -PJrIqI7iyhwkuBlbFM+385gD+y1XOLLcbncojkmTafbhitlnrhGezIiIRnjbX7io -xkGZG7xGAyBFu6N8sWTLlQKBgHdPN2c/KxSdWytJBofEQ8aGkiKhRdqTsiqHxBZN -AUBGFdNzauLv/IZaW7VxwNMjzcu3xHuPc1qsmICMHpGsmePQYNB0WVOHh1jzQKyH -6CieCVk6UMM3+9cZFPlXgTZUqeilDWcKfwKNyXn6MMt6gv1xhbAc2VY47j3oJ9Fe -tYKpAoGAAWY1MTen71hatSFA7UGweuTqok5vhp0CPtGwCXLNHUcEhy1Fc640EO9i -8i35fLA79haYWgpZ+GvrW9eYLPB8djidGSfzajc5C2CITHOrDQ6YQzKhwLjRHvB5 -gFQ8pdzFiXmSEvtfRwhoJvW19wdCZZx41VZ554ILOYrjtkntOB8= ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/research/serial b/testing/hosts/winnetou/etc/openssl/research/serial deleted file mode 100644 index 8af8809ac..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/serial +++ /dev/null @@ -1 +0,0 @@ -0D diff --git a/testing/hosts/winnetou/etc/openssl/research/serial.old b/testing/hosts/winnetou/etc/openssl/research/serial.old deleted file mode 100644 index d73cdef37..000000000 --- a/testing/hosts/winnetou/etc/openssl/research/serial.old +++ /dev/null @@ -1 +0,0 @@ -0C diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/.rand b/testing/hosts/winnetou/etc/openssl/rfc3779/.rand deleted file mode 100644 index b41b2202b37e44f27076206e1a5686093eb2cedf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1024 zcmV+b1poUy`~)a}wA@8>UT^q~N_5&xtQ*bmwn^+3vscPX=7soM`o7EsvK3b2pYT5m zz)DR!DT6FZzFInUPj~V-TqhzBc;}Gd;}cp*IhNJ{=z3i#qc~#OWM$gt_1b3m&3AaI z>N=4e<9CJK@V-E2InWz+@~7IErJ=3ny21v);yKmzu^7|>jJLv>3E@tCIk*QcHCPLD z-NfBW>0aGSe$tXpA}2F`h0E02gT7g;x(>rfI1rIiEQN9?_spnt|BJ$uzb(sCwMa1;@;R;$QcVO>h! zK#=$=#PY5ZCyHP)XROpu0&U@o)?&nz0fWBxxCbxLLYtm>p=TH!^Bd}o!<8#22a2N3 zsJr;H8mC%vx+prXe$QK-iZ8}?jqb_-MHE_Tf!9k^c&vnYipjR-5CM3I+Q&cPd8*^_ z+{M4XDUM>j`a?90J|aIeSEa;Mskiv-30ViVxpgjzpV?c%U)l5v02||w*w^P_sO`GR zpbDj0uI(5ZgZ6f*o=r2Pc09oS2CD;7GJNZO1#^ZF7sxoM$0O+M&+7`7{tD{jwK~g+ zPNg>4q9ky_h)-UUn4^HhTDlIseN#eS*#KfFmWg9b>7*={7yB+MC?Tg=zt$^26yJ@y ze$68zE;@V3vQ4WG=J3AEp}-H{(BjHD|F5$~)jdMQYBF18u3Fb!a~FeGX^%J)yY(BS z@ogxk58^nX>*Hntbpl|bXe`H1vRnopb_!qEE;=iW5TZ!q08bB>5(BM4og;qa*3S;^ zBZ=`%n^uCMO2f=J4oc2p7bwCAS>Jy09pOuvG+Yk@d>`~~KDv`R%%W7x;UN))+^kUK zE8bj0=iMuS)s@j8p$2!EMH0r-y<(Gw?&M(?*KCq;eLK4;dd%H1iC8@+<%fTO;`YjR zu479ZRMg2P{KAnEZxA5zTJf{Iqq2wsVL~nv2dlkg0qJs+RX*vgOBqTB02}DIE7>&vuB_=k u>zgdYaqR?P&p~1GK^+-@W~eEXIg9$n)aasw<|3zbsQ-mwFR0>EIKN%w)CJN2 diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/crl.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/crl.pem deleted file mode 100644 index 70a9d4c87..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/crl.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN X509 CRL----- -MIICRTCCAS0CAQEwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCQ0gxGTAXBgNV -BAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHjAcBgNVBAMT -FXN0cm9uZ1N3YW4gUkZDMzc3OSBDQRcNMDkxMjIzMDk0MjUxWhcNMTAwMTA3MDk0 -MjUxWqCBnjCBmzCBjAYDVR0jBIGEMIGBgBQhf6frN9CjCx+h3EIGHhFfPNIQFKFe -pFwwWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xEDAO -BgNVBAsTB1JGQzM3NzkxHjAcBgNVBAMTFXN0cm9uZ1N3YW4gUkZDMzc3OSBDQYIJ -AMxcts8OCFQAMAoGA1UdFAQDAgECMA0GCSqGSIb3DQEBCwUAA4IBAQDLEmxXy56A -UkZSg59BlPW1R2Fv9fBWiup4OoC1vBcSpPzbiBcD68h62T7hFMx935maBoYa4eLw -sADS2TkRCBEZzAhYkAMQi72jCtPfJwYUJewlQ+V2As3cygkErBm2Vvo3Om37GKil -uQaHvHlBSFGrC5IxeIxR2FOH1BeBD6MM9p7yRJ9yEt++jH2dLiGFYX1cmJ6m8aFr -09tfjTwzw5VclQBjjXaqhrzr33hjAEv0thpx0VQVngq+8WX6HQv/QS1xNJVq8bes -9GChW+MdNIx0ZH4Tb1hv8dafnSyHIVYzY8UuL4X/+LJDSPjyS8wtZWuj1k+cA9u2 -3TDt0F6MgNAH ------END X509 CRL----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber b/testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber deleted file mode 100644 index 75016ea36..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber +++ /dev/null @@ -1 +0,0 @@ -03 diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber.old b/testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber.old deleted file mode 100644 index 9e22bcb8e..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/crlnumber.old +++ /dev/null @@ -1 +0,0 @@ -02 diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt b/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt deleted file mode 100644 index bfafdee5d..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt +++ /dev/null @@ -1,8 +0,0 @@ -R 141222133356Z 141227062317Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=moon.strongswan.org -R 141222133521Z 141227062321Z,superseded 02 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=sun.strongswan.org -R 141222133612Z 141227062326Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=carol@strongswan.org -R 141222133736Z 141227062335Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=dave@strongswan.org -V 191221064542Z 05 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=moon.strongswan.org -V 191221064900Z 06 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=sun.strongswan.org -V 191221085130Z 07 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=carol@strongswan.org -V 191221085457Z 08 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=dave@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr b/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr.old b/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr.old deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.attr.old +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.old b/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.old deleted file mode 100644 index 56242a38b..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/index.txt.old +++ /dev/null @@ -1,7 +0,0 @@ -R 141222133356Z 141227062317Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=moon.strongswan.org -R 141222133521Z 141227062321Z,superseded 02 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=sun.strongswan.org -R 141222133612Z 141227062326Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=carol@strongswan.org -R 141222133736Z 141227062335Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=dave@strongswan.org -V 191221064542Z 05 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=moon.strongswan.org -V 191221064900Z 06 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=sun.strongswan.org -V 191221085130Z 07 unknown /C=CH/O=Linux strongSwan/OU=RFC3779/CN=carol@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/01.pem deleted file mode 100644 index 7f5f8d703..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/01.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEuDCCA6CgAwIBAgIBATANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTA5MTIyMzEzMzM1NloXDTE0 -MTIyMjEzMzM1NlowWDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKaLLTmKX45Qm -RjIaBSxBwofzqqkZWtl1mu0cDp6rGWr//hC31OO9MbLeRZBX0UBtuKouceAjdrwG -aK7ChR0Ft+qlLZ6Z9BH2Dna4vTdESsB3Sn+uXuU4WNdwmmJuRBXfl/7h/Rt+34Cs -BP82/RtR4GVpS7u73iSLlN4RaeWdySTqhtYH4cKt1H9MiSbwwomwdLedQo3UoOeU -lkWPrzFKT3gzU4vHr1sgpbF54o/iBr5/YyJpUT9UVeDTffAEMxnAe8/Q/a3pgSLO -wJ3HnSvcSH0w8zuH1YXOtfmqsphkwVBJGiLzUHWlYxVIAoCKdrv4eoSJLqlL5b51 -vGkmL83RAgMBAAGjggGJMIIBhTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNV -HQ4EFgQU5zzmRRlKa8+cm1g4RYg4lKNkQz4wgYwGA1UdIwSBhDCBgYAUIX+n6zfQ -owsfodxCBh4RXzzSEBShXqRcMFoxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMzNzc5MR4wHAYDVQQDExVzdHJvbmdT -d2FuIFJGQzM3NzkgQ0GCCQDyr+ZHsk6LRjAeBgNVHREEFzAVghNtb29uLnN0cm9u -Z3N3YW4ub3JnMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEEGA1UdHwQ6MDgwNqA0oDKG -MGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9yZmMzNzc5LmNy -bDBFBggrBgEFBQcBBwEB/wQ2MDQwEgQCAAEwDAMDAAoBAwUAwKgAATAeBAIAAjAY -AxEA/sAAAAAAAAAAAAAAAAAAAQMDAP7BMA0GCSqGSIb3DQEBCwUAA4IBAQBVFKeX -QIH5Zk0dp/7u/V0TKqu5vZ9x6ZrshAZ9nzbLgmSP+++yDXmlQe0D0i2Men4D095S -smFqw1nMWM5oEPpP58+jhCOHzn7InMp+SRRBkX2j06wT9qbynAHiIun/qcdq13w1 -Fs0PiKVQZbbz72mwl9J3Hkj/JkLtOX00wMPqIFU6veeagGiwOW7KkehFUVqoD9+O -vgkHnUti2XzgskEGcEWmE1EYv7Qo0OdZB15oNoUV5i8WelfmWO+nz9/QKciATNoC -kAUVcEV9XY9sSKjazdyG6QfEd3l6lQ+KAt8MnqA89i0yIQ1lg+3Jfe67SMvM1gy6 -Y0Y2hqCja6SsIjVc ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/02.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/02.pem deleted file mode 100644 index 9ccd47a2c..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/02.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEtjCCA56gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTA5MTIyMzEzMzUyMVoXDTE0 -MTIyMjEzMzUyMVowVzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxGzAZBgNVBAMTEnN1bi5zdHJvbmdzd2Fu -Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK1HhvoVh/fM14RE -CTXr4to9ZEeGSqHLl5du+eYZl1fC7qLYaCtlaH+eLfDsCgYpe+XsDLHIxpTK9R6k -XgLP1Jraxz3rtv5qJKkV3aDTjQ2d+cFc0EgiZmn53VEmI/IlcJS/VZzHhNvEJk7H -k0YpoazpGPtNzFGaehV5mXUAeVPx4RH8fjcSiPbuPS3WC7cqtYvVwk97dj05VfEC -VnG+90+eFKztvawBzNGwGQ7xZV7kSiPHNyGAV0qrKvhXZ0VPnm/OEiGCAlIo8uno -Yb/4UMM/a5usCaA9Hgbf8+qqmrzavSUkFEa0y/p9bOBHaqfNP002xktbqBCCodRr -6QgmiysCAwEAAaOCAYgwggGEMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1Ud -DgQWBBTaKhy7PH1ihWsD+3/bJQ3e3Isj+DCBjAYDVR0jBIGEMIGBgBQhf6frN9Cj -Cx+h3EIGHhFfPNIQFKFepFwwWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4 -IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHjAcBgNVBAMTFXN0cm9uZ1N3 -YW4gUkZDMzc3OSBDQYIJAPKv5keyTotGMB0GA1UdEQQWMBSCEnN1bi5zdHJvbmdz -d2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBBBgNVHR8EOjA4MDagNKAyhjBo -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fcmZjMzc3OS5jcmww -RQYIKwYBBQUHAQcBAf8ENjA0MBIEAgABMAwDAwAKAgMFAMCoAAIwHgQCAAIwGAMR -AP7AAAAAAAAAAAAAAAAAAAIDAwD+wjANBgkqhkiG9w0BAQsFAAOCAQEAOqdCIldA -mPp2aAWVPBiKXNrk4VJoIGlwZaUtYNxGQ46wUqAro/taKwZd4B1yvwsX/cHX3Y6j -C1mQtiXw9onJm1qJM1a804U9yPcgdI+9RMiU0hA+aVmyMlS6WQsKFubU17qP2Ljd -4hOwVQ681Hi8zfQjJdYpaO1yLcpy2dkotreJS3wA24ssnskRBI/cuAN0dfbV6SDQ -TK91qz0emHoK3efgtvX4oEpsxI4NrwMstaZSVsHn4npKTGYu82dmPoK6WPblGEHZ -Iavl08lGcYBV5I2ZGuWOekWQzUuBSveV3AFjieeaDIG3Ue3AKaihn6dCLz6l+t7E -dXN+1axy9zQ34g== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/03.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/03.pem deleted file mode 100644 index 3243bc294..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/03.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEojCCA4qgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTA5MTIyMzEzMzYxMloXDTE0 -MTIyMjEzMzYxMlowWTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3 -YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD8OrNy0w+T2 -cru3RQgskGCGppwpvLH/QZVHD/UbumxjKVTrz4FskqN39sFxDFDSre1bps+F7jW/ -zmOFe7c7jmZhK1mPnbviYTS4LXdo1j02pPeBNBk4b6VAIKPaYmO3UIoZZ4SPnnVZ -P7Aj3mU1ztsTbUQqgRmTsdfqiPaBNZ0zylWYPDOkTS+1sbRQHkgdZvw4fYno+Rd+ -hDK1scggL4kRg4uGvFojYciSxo5lC53Am4r8T2zI0aI6L8g57j4cX1XYQwM3tkHM -2BiCRM/c1wQc+vn+xp1oh/GYM4qoSoZyLTD9A0gqmbnF9//wvSmwpDpSkDoHZ5O3 -Ur6HZ8mByQIDAQABo4IBcjCCAW4wCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYD -VR0OBBYEFL9rU6QFDLvUOEIFNZROVYWN5v++MIGMBgNVHSMEgYQwgYGAFCF/p+s3 -0KMLH6HcQgYeEV880hAUoV6kXDBaMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGlu -dXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBSRkMzNzc5IENBggkA8q/mR7JOi0YwHwYDVR0RBBgwFoEUY2Fyb2xAc3Ry -b25nc3dhbi5vcmcwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC5zdHJvbmdz -d2FuLm9yZy9zdHJvbmdzd2FuX3JmYzM3NzkuY3JsMEIGCCsGAQUFBwEHAQH/BDMw -MTAUBAIAATAOAwUACgMAAQMFAMCoAGQwGQQCAAIwEwMRAP7AAAAAAAAAAAAAAAAA -ABAwDQYJKoZIhvcNAQELBQADggEBAHhgG8qqLZX3uXDVX9uBZM8jErI78pyL9F8q -ibTW5UPp+rbbMDY7tphBbFkg5Q0pzJhOzB6I6Oy/QWVVEC20DE7lhOpMu7auS3Gn -z1t6DCIDR9NYXtKs6UXcMA0PSQ1r7iHQWvtZ0uD998k6UQfZCCOwBbonng2DAp/m -FKkaCYiZmJw2YBwf+oVNLQp2fHI61uoguiiRQ4AV5Htho0z6MDqpMyrg2F7Uf2cq -kQY/ZyvMe8VG5KuiaMJPIMdJPnRED2R4qiyHe8eDXgGYHsNhkt7VHRRgo3izqIdG -1oCv+CHQ2XSK+4dA42U0Vw7V/ExmcLy99bZfCEZwNWG6Y/5Qwww= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/04.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/04.pem deleted file mode 100644 index dffbc67e9..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/04.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEoDCCA4igAwIBAgIBBDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTA5MTIyMzEzMzczNloXDTE0 -MTIyMjEzMzczNlowWDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLwvUPUNIZnbX -eyz8U0COp5RM7ZLFT2iJmSGxznZ30phUNHSy3WX9V8h2kQ2fBks2x0KYWEg8Lh2y -ggZipePRpuHRnZlcll5/HY/YOUgdV2GE6euNiWKcDB6uE51sxZ+on5KasI9EJMdp -hJpytYUFjx6pExsoqWMQLigrT6A4bYogkweOZHiUyHiqgtUQcHnmmKwxgeUAkZCb -00dk7CYnXNQZ1uHj/08TDwrS37SGXfWEIcBGEx/awqlF+s2HTI6zw7NC2HhQsiSp -Yo1nz8TBr/8XnO9KyYUg04TMkcQqBFDt/qiUswLRLapn9HSyd43BxaF+YuvJ1+ip -M4G05K1nAgMBAAGjggFxMIIBbTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNV -HQ4EFgQUJ/+79KP+Ea9vdAIMkUYx++cu6R0wgYwGA1UdIwSBhDCBgYAUIX+n6zfQ -owsfodxCBh4RXzzSEBShXqRcMFoxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMzNzc5MR4wHAYDVQQDExVzdHJvbmdT -d2FuIFJGQzM3NzkgQ0GCCQDyr+ZHsk6LRjAeBgNVHREEFzAVgRNkYXZlQHN0cm9u -Z3N3YW4ub3JnMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuc3Ryb25nc3dh -bi5vcmcvc3Ryb25nc3dhbl9yZmMzNzc5LmNybDBCBggrBgEFBQcBBwEB/wQzMDEw -FAQCAAEwDgMFAAoDAAIDBQDAqADIMBkEAgACMBMDEQD+wAAAAAAAAAAAAAAAAAAg -MA0GCSqGSIb3DQEBCwUAA4IBAQBlOlqceKqgr0putV9fUf2vekg5QtZGDtHFUOTH -0gDIe2DJ60bWY5IXpjj2KtzRdoP448fpPaprrh8VEljWoVvAF8LaePKGggqwcG+D -Z7ioDYlnV1j+/NnbZGM/hPqa841dh5jesTuTAF2giMod6P6eMiiRcnl9X3ltgSWp -Ahk5C8CNYw+sISJcCHtFQHdKOM4QN7wAWksvpjMWkSDQgf/rnDUgW8DXAwX/9K4V -G2etJ6/8drpjB115p6h+GYz8xFG28/MSf9BqNX03dBs5oyko2+FgSrb3ACK+pAO4 -Cpi2NKZfUH+M7Loo4baI+f5iavpDjDfar8KTiV610DAp0W2S ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/05.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/05.pem deleted file mode 100644 index 124e2ae46..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/05.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEuDCCA6CgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTE0MTIyNzA2NDU0MloXDTE5 -MTIyMTA2NDU0MlowWDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeHiAGNal9DT6 -GgCewdXa4Nf/46YgbhZNmSpi/zH+XmA7JLS6eoVt5vJ/LJEHSzkRoEetptAILenu -uakByawEoPZgkCYZgJB9opGEOoWIwTitaF0ZVV8diNQtnl+rkvwPpxWybvIwOwRA -PUIenoQPkVhfd/ALaRl88pG0rcAW0MMSCNuQwELwSIK2rQALs94Qm5yM0bZ+dqV2 -jnSISit5doRZ4vIYghJPKPqFKb1zUw1siCDPev43S+xqwTjhJ0zncq/QigySyivd -D8qs8KMkan+XNx9XSjW14YWp27RVpIeANlikiHh0/St0lBsR+P9sDp+Yvr+U95EK -KOgrqac3AgMBAAGjggGJMIIBhTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNV -HQ4EFgQUQcvdnqQfLJx2utB9szVLhZCmp84wgYwGA1UdIwSBhDCBgYAUIX+n6zfQ -owsfodxCBh4RXzzSEBShXqRcMFoxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMzNzc5MR4wHAYDVQQDExVzdHJvbmdT -d2FuIFJGQzM3NzkgQ0GCCQDyr+ZHsk6LRjAeBgNVHREEFzAVghNtb29uLnN0cm9u -Z3N3YW4ub3JnMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEEGA1UdHwQ6MDgwNqA0oDKG -MGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9yZmMzNzc5LmNy -bDBFBggrBgEFBQcBBwEB/wQ2MDQwEgQCAAEwDAMDAAoBAwUAwKgAATAeBAIAAjAY -AxEA/sAAAAAAAAAAAAAAAAAAAQMDAP7BMA0GCSqGSIb3DQEBCwUAA4IBAQAi0XQL -aEHg8aXBiXSTHuvxDieJB3Q83kpXOry16Ij5PKx9cdM2Gtmxz8YkwPEgq0r7vWNo -830A4CnOJszQyIpY7CIygPj1wy3kFGGPkL7R4p00qSKpCEg8Fq85R4LmiyXIEZ+5 -lUtan7xka4ySMKKocm2rbXHyHXjis8AzU7NZN5QpEMkGLTaQPwHad4FUBFOolNE2 -NLoQ3xp9NPTyqfy1CkCHcyG18yRPciU4m8Cubyb+zBHyBADm9Q0P3++vznsU8LrR -pzjRqS0e+FD2bzdXH/2g7Ge8+b6xzWRVMxZ8e2f5O9jQUY6q4SicuAX8SM/bgDPu -Mc/lk4Nl8pHRO+Xm ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/06.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/06.pem deleted file mode 100644 index a93121da1..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/06.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEtjCCA56gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTE0MTIyNzA2NDkwMFoXDTE5 -MTIyMTA2NDkwMFowVzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxGzAZBgNVBAMTEnN1bi5zdHJvbmdzd2Fu -Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO+7A6hhF+4kxCv5 -oR9DEpv1gnpGmPpn6i7JfuLGIJ9phQ3bUnSMIx8+mp3JE4SLXINLcyCHilK74tIf -pwYx2K0c2txTFIWLQvBaHWohJ9Sgg4ElVXmSa/b0Nym5FcttdcRgNGd/+DLPs9Tw -ZoieGvJcZWiOBP+xxPbEo2xcoi3GetPN+XSW+m1BvU88Ysrp0o+4+rLPB5iipUB1 -Iksb51SvF4iG4BHfoTKGlHLwVyjJnp7YnYJtjY6Xaw1GbCf6wcwLlq71uoMj39cd -0clncpi/s13K2Sh0YHiCcQD5vIkP9BRmobWAXseBZevYI/rU5dz761EqHf72TRrd -bM3/KycCAwEAAaOCAYgwggGEMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1Ud -DgQWBBTPOzV+XXFm2wEX9j+NxqVXiRBq7TCBjAYDVR0jBIGEMIGBgBQhf6frN9Cj -Cx+h3EIGHhFfPNIQFKFepFwwWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4 -IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHjAcBgNVBAMTFXN0cm9uZ1N3 -YW4gUkZDMzc3OSBDQYIJAPKv5keyTotGMB0GA1UdEQQWMBSCEnN1bi5zdHJvbmdz -d2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBBBgNVHR8EOjA4MDagNKAyhjBo -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fcmZjMzc3OS5jcmww -RQYIKwYBBQUHAQcBAf8ENjA0MBIEAgABMAwDAwAKAgMFAMCoAAIwHgQCAAIwGAMR -AP7AAAAAAAAAAAAAAAAAAAIDAwD+wjANBgkqhkiG9w0BAQsFAAOCAQEAgJDWuKCu -7H/K4U7xFRarSKtj9oMAAsq2vLSQqJTUg6fdTnFIlH3OBPcwEzFwVx30QlQyls1p -nHm/cptV/3cxvqCvdnT2dVspJu+9a5D+zZNeLAtWZuyRN6Nlmeqj1Nnp6eEHEBrg -oXMzmAf0ulzIZJsEVYwJSCXm0AMOlyvoIYqKxty3L2VZ1iAU1z15lnFhcvamraGx -k7yaI9ujVR4xQZOOgh05pUrEKaXI3XR1rIoL3NV3ws/JgHch/CQw/If7x4VQmGcD -yJbKkKn0S18TJr0KhPqbM4+inldEwyX/zjGmlHezy0em5qTRYwupFIQNwZZkTXug -NnBR3lf2HB2lWA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/07.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/07.pem deleted file mode 100644 index bf8a4919d..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/07.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEojCCA4qgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTE0MTIyNzA4NTEzMFoXDTE5 -MTIyMTA4NTEzMFowWTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3 -YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSlxt8LQf1wJ -u1rDltyU0dEjEqA+TxWQYi+gMakDGmWmFec1XELjKv3kcYp2McydNPq63fw9XXbu -a/jMtmEZdFc/dpWYvsyXfyL0OOhh50PlwN++e0xxcZS4NQ6wz57bHgARzMoCisNr -xcN0F44S0Zyn8edHkE4XV4c0p+ojB6cw5LieSMGIBQjKGCd2a3eZYhTCs6hI0vhQ -Q1jDLyOvSWo+raa/uDTBYXCVYdN3lbHCPiXPuMY1CwZkGcANd6vBK5YBNiZFquBj -FhIk8SBUkoEkUQMx+pMk3hGmq5aZXGxm9rHN8Xim/AewWRcKJJKdlLAAHmZD0jx2 -g/E0LGu01wIDAQABo4IBcjCCAW4wCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYD -VR0OBBYEFNs9CUs7SNJewkkfo1Bg7bcUEzPXMIGMBgNVHSMEgYQwgYGAFCF/p+s3 -0KMLH6HcQgYeEV880hAUoV6kXDBaMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGlu -dXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBSRkMzNzc5IENBggkA8q/mR7JOi0YwHwYDVR0RBBgwFoEUY2Fyb2xAc3Ry -b25nc3dhbi5vcmcwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC5zdHJvbmdz -d2FuLm9yZy9zdHJvbmdzd2FuX3JmYzM3NzkuY3JsMEIGCCsGAQUFBwEHAQH/BDMw -MTAUBAIAATAOAwUACgMAAQMFAMCoAGQwGQQCAAIwEwMRAP7AAAAAAAAAAAAAAAAA -ABAwDQYJKoZIhvcNAQELBQADggEBAEYqXkheXXHiC5JnrZm5QUo11Vu4CtNRGeg0 -atuG8ZNHgQfa7wjjeCDNpj3lHvyegYsSMo7wGwN7DugH0mmXKZF9XHc4sU7/aUvl -mX52tDuUoCGD0/yFuKLlYOfwmsquC9snYDW7cJXaqMON/OMLcU44OR8E1oiw2ePT -FqyGFbfparp+Q8I7VHwJBs+mDphdNUlFbpuO9m2eEtqdYVyXlfUnbFpMMyWxxIY/ -6CIyWcRRKeWRRXxkk/dSeEWgsfWY7ITK9blP5nhIsgpCoEguGc6h4RL65VdH+Sy0 -9MLpesyGe6qkdrrg4nyaY82uuFXhUo0YiP0ddUw8eNaefFqEzL0= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/08.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/08.pem deleted file mode 100644 index 88ce01ed5..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/newcerts/08.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEoDCCA4igAwIBAgIBCDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTE0MTIyNzA4NTQ1N1oXDTE5 -MTIyMTA4NTQ1N1owWDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHDAaBgNVBAMUE2RhdmVAc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJKRQ2CEG39rO -8nX7RpY+Ed5tyx+rkug3HrSInie+fgkDnLES2U1X3wvM2OczLp6L1ccROv+SzEW+ -OKfCZSz7T4GLwaRodi9KtHvfOCsbDx/vkFFwui2yt9rVUSpcbk1OiVQsA9R0G6vz -eqFIL9GtrtHWQ+dkvWy61i2A+T1X2QfhVfzvj5msL3CuZU6fnwGYD4LZz8RUGlB4 -WkSFWCctfQfgK+lpfuzq6OFFkARzxZ55D0MzgAvXY6osS8gMdiSD50Zlik7qZVvn -RO0j6TOg0WKinzguAokAyDCsaoqsOvi27QalfH48PUM+aUzHNCKnD6pswebHou3m -mvG3rH+9AgMBAAGjggFxMIIBbTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNV -HQ4EFgQUsBjPeVTm7TUTaXtmfv09yQS2mV8wgYwGA1UdIwSBhDCBgYAUIX+n6zfQ -owsfodxCBh4RXzzSEBShXqRcMFoxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMzNzc5MR4wHAYDVQQDExVzdHJvbmdT -d2FuIFJGQzM3NzkgQ0GCCQDyr+ZHsk6LRjAeBgNVHREEFzAVgRNkYXZlQHN0cm9u -Z3N3YW4ub3JnMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuc3Ryb25nc3dh -bi5vcmcvc3Ryb25nc3dhbl9yZmMzNzc5LmNybDBCBggrBgEFBQcBBwEB/wQzMDEw -FAQCAAEwDgMFAAoDAAIDBQDAqADIMBkEAgACMBMDEQD+wAAAAAAAAAAAAAAAAAAg -MA0GCSqGSIb3DQEBCwUAA4IBAQCNyAyUvqeCgWnPEMkfFFb1kBbd3me3aLRxXFb4 -TY44L6SBiFNy1s3UyFCLw1xXnSMgTpvZqHmB7fnzX7Aj6BNkPFIThEiHYN85ai4t -U9bO2nqwXfIINFt2Qlokd0QWHzDsL/o9Mmqs38ymlfIbsgwh7gCZ2HhGlOb7+QNU -IaDVIcKqBr07wX7qO/fEjKgFSkUT5eFNwQmyT3zUaE1PixK5w1hRxvs/KAsLgbfe -5ofLD88rfxvkqLwhRNU8PUzqIpqxfV1P+wS/k78z0tG+JI8yeEkcksuj9UOzlTr2 -jWL1QoxUEinR3N4dTqsW4u/Jz7R4MHdO+l9RoYZpQA8LV8s3 ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/openssl.cnf b/testing/hosts/winnetou/etc/openssl/rfc3779/openssl.cnf deleted file mode 100644 index 11ff172ac..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/openssl.cnf +++ /dev/null @@ -1,219 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl/rfc3779 -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/strongswanCert.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/strongswanKey.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 1820 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha256 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -serialNumber = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 1024 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -0.organizationalUnitName_default = RFC3779 - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning -extendedKeyUsage = serverAuth -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan_rfc3779.crl - -sbgp-ipAddrBlock = critical, @host-addr-section - -[host-addr-section] - -#moon networks -#IPv4.0 = 192.168.0.1 -#IPv4.1 = 10.1.0.0/16 -#IPv6.0 = fec0::1 -#IPv6.1 = fec1::/16 - -#sun networks -IPv4.0 = 192.168.0.2 -IPv4.1 = 10.2.0.0/16 -IPv6.0 = fec0::2 -IPv6.1 = fec2::/16 - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME -#authorityInfoAccess = OCSP;URI:http://ocsp.strongswan.org:8880 -crlDistributionPoints = URI:http://crl.strongswan.org/strongswan_rfc3779.crl - -#sbgp-ipAddrBlock = critical, IPv4:192.168.0.0/24, IPv6:inherit - -sbgp-ipAddrBlock = critical, @user-addr-section - -[user-addr-section] - -#carol networks -#IPv4.0 = 192.168.0.100 -#IPv4.1 = 10.3.0.1 -#IPv6.0 = fec0::10 - -#dave networks -IPv4.0 = 192.168.0.200 -IPv4.1 = 10.3.0.2 -IPv6.0 = fec0::20 - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE, pathlen:1 -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always - -sbgp-ipAddrBlock = critical, @ca-addr-section - -[ca-addr-section] - -IPv4.0 = 192.168.0.0/24 -IPv4.1 = 10.1.0.0/16 -IPv4.2 = 10.2.0.0/16 -IPv4.3 = 10.3.0.1 - 10.3.3.232 -IPv6.0 = fec0::/16 -IPv6.1 = fec1::/16 -IPv6.2 = fec2::/16 - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/serial b/testing/hosts/winnetou/etc/openssl/rfc3779/serial deleted file mode 100644 index 86397e5c1..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/serial +++ /dev/null @@ -1 +0,0 @@ -09 diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/serial.old b/testing/hosts/winnetou/etc/openssl/rfc3779/serial.old deleted file mode 100644 index adb9de8ee..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/serial.old +++ /dev/null @@ -1 +0,0 @@ -08 diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/strongswanCert.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/strongswanCert.pem deleted file mode 100644 index 8e872d89f..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/strongswanCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEXTCCA0WgAwIBAgIJAPKv5keyTotGMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMz -Nzc5MR4wHAYDVQQDExVzdHJvbmdTd2FuIFJGQzM3NzkgQ0EwHhcNMDkxMjIzMTMz -MDUwWhcNMTkxMjIxMTMzMDUwWjBaMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGlu -dXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBSRkMzNzc5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -zP4z54hRFM3bg0WWxpa9yBh8CrloV8wWd3YQR9daJjErXdZfbnECZqoK5obWPkQJ -Cp2xGijnB5CDxvAdiFANgNxDeDuAD5jGzQALWVYgbhQ/y4qRw49IPs9k+Uf1OHVr -b3qP8uSvWEmb1SlAJ24PGChB8Y5NwJJzFY5P0TJI/Zg3zgbLTsbgiplImgi/ZG7Y -GE/DCb6UAzcRwE2y41U4ZVG86UW2ARnvOCXJZHdt16O3KzUJ78BA1IgMsNZs8cQF -Avg1ZAUJW6oMLXu2XCwKOKTwJxdA2wpYadus2KEY/UyVovHSpyBa/zzSDXsP01PU -EKNZhloVQVt9NX3MCUItfQIDAQABo4IBJDCCASAwEgYDVR0TAQH/BAgwBgEB/wIB -ATALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFCF/p+s30KMLH6HcQgYeEV880hAUMIGM -BgNVHSMEgYQwgYGAFCF/p+s30KMLH6HcQgYeEV880hAUoV6kXDBaMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3 -OTEeMBwGA1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBggkA8q/mR7JOi0YwTwYI -KwYBBQUHAQcBAf8EQDA+MCgEAgABMCIwCgMDAAoBAwMACgIwDgMFAAoDAAEDBQAK -AwPoAwQAwKgAMBIEAgACMAwwCgMDBv7AAwMA/sIwDQYJKoZIhvcNAQELBQADggEB -ABXhehDhC9jLipmZbP9r2t8ARjIjeHUk5UIX3sW9pKlwuOiFy/oEmJD72LYSPDFm -uKK4NDAllhJWKw1KA1j1h1NxE6tEjQTpj9mizjULI6T1HPWyn5E93vqFIK71k4ud -rxZXyq7fPrXM2QVKHpiT1DlAcopGe92Vxo0qooYEXIHd6XwVftSIo/1bi08p8jZS -Oc+kjoOKkfqmBSKpqYzTtlbafdVOPBAEaTa3k516ks3bDQn3gtU+2ucNB3fIvVVA -MI2//EaIMBIXorpcnOU3ja0nYCAf9kHAybRpBObWt7OLKFHcSatdE9El4Ri3YeJX -fN8iF5kHn7S+Nd9ZFlf3S1w= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/rfc3779/strongswanKey.pem b/testing/hosts/winnetou/etc/openssl/rfc3779/strongswanKey.pem deleted file mode 100644 index 95897a2fe..000000000 --- a/testing/hosts/winnetou/etc/openssl/rfc3779/strongswanKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAzP4z54hRFM3bg0WWxpa9yBh8CrloV8wWd3YQR9daJjErXdZf -bnECZqoK5obWPkQJCp2xGijnB5CDxvAdiFANgNxDeDuAD5jGzQALWVYgbhQ/y4qR -w49IPs9k+Uf1OHVrb3qP8uSvWEmb1SlAJ24PGChB8Y5NwJJzFY5P0TJI/Zg3zgbL -TsbgiplImgi/ZG7YGE/DCb6UAzcRwE2y41U4ZVG86UW2ARnvOCXJZHdt16O3KzUJ -78BA1IgMsNZs8cQFAvg1ZAUJW6oMLXu2XCwKOKTwJxdA2wpYadus2KEY/UyVovHS -pyBa/zzSDXsP01PUEKNZhloVQVt9NX3MCUItfQIDAQABAoIBAQC4iI1I/BmhVL8q -qNZV5xTor8HaFZWsk3gWCh4VzfLFNrYHPxehX/H9YU12wCLU4oIRIGtxVSjEUn+N -8lFjiEzfl2jVLxrU737mxAdzYGjJL0lOfWtCVBWBFUmcbf592JXiQL6ctOhz3a9+ -cCfkVtsXsAXM4YF0vWEEIpwPgeja/zKX9M0vRBgIfXdeh2cYQKDGxmEspbfMnTyW -XVGmTbgDHQGkvN88OyJEOPulYwmZ1BgsQ2buQgR6OlxzulUmH1VOO+Xm8O6rA0Qn -SjQRd6Q38KLPSEKXucHUIzpQemGdar3ziUoCgUiHJkl79h50W+WIIZTNv1LUR48u -u14aT5eBAoGBAPZDaOK7/w5639WBG84iqLDMiFIuzKADjxrQqmVJXXH3nf1wnS93 -Iy9iAelUmq/He6aruvLJf8GdkFfC/sj4vdnlbvtT1wHiFznLxO49craxgr1J0SXO -HLE5RvyrJrAArWQr33oy6YSOMob95imK58kwMwfpoQuWK3CZaVdMfbzFAoGBANUZ -Ebo/N8bl9Opo/81zYcFpkUlxBP3vJR8aJ5Bx/0fbXCSwvt1AEHqnYiLBStfMyUTC -N4MWCUoZ1H6yRyxqPg+QFnYFCqX/Y3DFhkV5d9kTRWvzxc+mumh81+bRsNU6AyxD -9VFWpAkSA+K8IWCjx5fQ+jeLc7GQ1EjYpSiaEClZAoGBALL6tS0ssyfD+BBFQH8l -w3KThHQuXTviukwj4eOxWX/uFl5PTX5k2Saj1X3OpoogsmalIz83YWnHaVPPfbt0 -xQ6raGizO22782NnDJ6V/Fx5UOrfzmjqjwHi/gu/HGQIafyGwmoevIdBjcl8mJ4S -vXkEVeJnU0uHfdTdOqlfB3d9AoGALimZGoSZW5/zF1iZmXMWSSTKUWOHVk8Y9oze -5z6as4FEi7oyDpHTQA7Ehozi3q7BJwD/r4j1iDTiQHP0UR3OxeZLx1M+REl3zDUt -6hzvJnozPrh3MI2IshvhVWI1cWt4xn0ORomDTWe2qcZhYKL6GNwvaBrwfBXItuMf -nBULzTkCgYAcK5LKu6dwUlnv9iro6Jff24qb3P32HdSC2uZTZMcaTXqqUBO/lST2 -elKAHqQxjGGxFf5buQwfFrOKfNlMhQRHppo2/gJLiiChZ7R3GaF49f/4I5YJOo2a -k/bv70YB3Zf/8p+ip9w9H6N65YAyvzu5yUfoFXgKQQNv0y0B5rtZsw== ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/.rand b/testing/hosts/winnetou/etc/openssl/sales/.rand deleted file mode 100644 index dd489598f40e847164177b078f42b632b40d38f6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1024 zcmV+b1poVGwr;*?F_EQL2>adl-Rc7;O_}Vs=|r6J zZ|uC`;?)3+8rUd_Py37XSvtb5WVgaw&js%3It8nw==NLccFrrKuZ1Bff*dF&Ts|)3 zRkkRC+s-hF-ADg7&mEPSGE-K60k6*thATKob*LB#uBq<5hIhJA$(8CG@11yI9^j~J z>f1ETvLR_uXi_YuNpYXKnrRA$Ue*xInSPSc;r7ib!B ztrwE&N+S7&044n$!V{Y~W|F|hYvZtU()NXtMU=`J%UYjPgv10 zb*#M&BfF5ePF?8b16dD4@~n~gKOyyit~xW_o$I*U@no_1IIKGI9!v?F6#} zIH+?H`1eEN{|Jx$_pABUVhV&eH)v)`=Lifw9v(vX`+X9D*eQDi!>r|P=;DoqkWz)^ z6sido3`)c12p-*i_C)snk+K6&jnsqxHk=}yykzqlB0;D643E9V1{IXH-TBkTXIyGU za^$v|@jsSYa4ycOL#Grg#IPzu${ou-!+sKOuMo2vVXg9F6xXpmM`C*=BR35 zSO)H|+PolcW);ay)}Mv#j0;&{1`VU;DR!jxJgu&2`pN?zfoisIEUS~1*v)Fh$#h3dXTR8XZFWO|it9G;R?f(tEHNj)T!k_W&|Z9F6uDtzS$X0E$Z&yokN{ zEm{0nZ!^tdybSFqGFWm~L;)GFBLhql$!D&$8awUD+U3nC4VcMwqBz%>$HX3a=Ivg1 z!0mh8xxNcTM9o}?N{T=ruK2BNTz?G@s86nWm;DD%lDFFNUO|Imzyc5Njx@v zef2-Ijc+c|e>P$20LV74`%^AOJ}j`-dbYifpWiRD**G7#VBorVd=A~MeJquk)j+;O z3^*mzt~42F%Kz`OZ8SPoCw+3~A+TxtqS-vEw1(OD7r;{~@aCMsskCTtwz&|Rr70Yw us1F$V^>XO$(F$Pz diff --git a/testing/hosts/winnetou/etc/openssl/sales/crlnumber b/testing/hosts/winnetou/etc/openssl/sales/crlnumber deleted file mode 100644 index eeee65ec4..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/crlnumber +++ /dev/null @@ -1 +0,0 @@ -05 diff --git a/testing/hosts/winnetou/etc/openssl/sales/crlnumber.old b/testing/hosts/winnetou/etc/openssl/sales/crlnumber.old deleted file mode 100644 index 718f9f12e..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/crlnumber.old +++ /dev/null @@ -1 +0,0 @@ -O4 diff --git a/testing/hosts/winnetou/etc/openssl/sales/index.txt b/testing/hosts/winnetou/etc/openssl/sales/index.txt deleted file mode 100644 index 95f29fdd8..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/index.txt +++ /dev/null @@ -1,10 +0,0 @@ -R 100322071017Z 100407093948Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=dave@strongswan.org -R 100615195536Z 100703150410Z,superseded 02 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -R 120323211811Z 140324141327Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=Sales OCSP Signing Authority/CN=ocsp.sales.strongswan.org -R 140323211053Z 140324141726Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=Sales no CDP/CN=dave@strongswan.org -R 150406094241Z 150426095935Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=dave@strongswan.org -R 150702152829Z 150722132042Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -V 240324141524Z 07 unknown /C=CH/O=Linux strongSwan/OU=Sales OCSP Signing Authority/CN=ocsp.sales.strongswan.org -V 240324152702Z 08 unknown /C=CH/O=Linux strongSwan/OU=Sales no CDP/CN=dave@strongswan.org -V 190403102220Z 09 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=dave@strongswan.org -V 190403133601Z 0A unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA diff --git a/testing/hosts/winnetou/etc/openssl/sales/index.txt.attr b/testing/hosts/winnetou/etc/openssl/sales/index.txt.attr deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/index.txt.attr +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/sales/index.txt.attr.old b/testing/hosts/winnetou/etc/openssl/sales/index.txt.attr.old deleted file mode 100644 index 8f7e63a34..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/index.txt.attr.old +++ /dev/null @@ -1 +0,0 @@ -unique_subject = yes diff --git a/testing/hosts/winnetou/etc/openssl/sales/index.txt.old b/testing/hosts/winnetou/etc/openssl/sales/index.txt.old deleted file mode 100644 index d54916ffe..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/index.txt.old +++ /dev/null @@ -1,9 +0,0 @@ -R 100322071017Z 100407093948Z,superseded 01 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=dave@strongswan.org -R 100615195536Z 100703150410Z,superseded 02 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -R 120323211811Z 140324141327Z,superseded 03 unknown /C=CH/O=Linux strongSwan/OU=Sales OCSP Signing Authority/CN=ocsp.sales.strongswan.org -R 140323211053Z 140324141726Z,superseded 04 unknown /C=CH/O=Linux strongSwan/OU=Sales no CDP/CN=dave@strongswan.org -R 150406094241Z 150426095935Z,superseded 05 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=dave@strongswan.org -R 150702152829Z 150722132042Z,superseded 06 unknown /C=CH/O=Linux strongSwan/OU=Research/CN=Research CA -V 240324141524Z 07 unknown /C=CH/O=Linux strongSwan/OU=Sales OCSP Signing Authority/CN=ocsp.sales.strongswan.org -V 240324152702Z 08 unknown /C=CH/O=Linux strongSwan/OU=Sales no CDP/CN=dave@strongswan.org -V 190403102220Z 09 unknown /C=CH/O=Linux strongSwan/OU=Sales/CN=dave@strongswan.org diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/01.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/01.pem deleted file mode 100644 index b76032480..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/01.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHDCCAwSgAwIBAgIBATANBgkqhkiG9w0BAQUFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTA1MDMyMzA3MTAxN1oXDTEwMDMyMjA3MTAxN1owVjEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsT -BVNhbGVzMRwwGgYDVQQDFBNkYXZlQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG -9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqAR0itGIuSt/RR8IHjFTLH/lywprmHUw0GS -zZwo/q4AE4v6OeWRG3JUUg44K40yBwr7zvcsLztRTfbNqlt7o+Hjpo3kz0AMwDo+ -1V42Qkh61VJW1P0NQvkgjiQn+ElSMg1u3uiYCIMAhYMYo2ZMKxHXxRqjU79AVuJN -P3p8wUpfwReImAy3/n685YbSzWcbPqCfjRH/YrnYS8Ga7m/QzdNfrtxhAWAGow1+ -+eTSMvLXSkQeujU6OCJNOPUNB3nnJ1IoZrQm8wNP8Y5B5HzvOSyFEvNuHFc63gSP -aSRhuz0gubuMpr1d9Rgjny8JgsfCEbOktlKwnbFeSB8AAgVMjwIDAQABo4H/MIH8 -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSCy57rUdNRbytUkRGY -GjmjvXfIszBtBgNVHSMEZjBkgBRfmxNG+SByyADViLWnTC6X6guTKKFJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBDTAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3 -YW4ub3JnMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc2FsZXMuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQB+BknSxFKaDhbRVobOAU2P -p9cirkVCitoZrvK2QIS/7WRoqy85RQ+zorJb3jyTxQl4Pu9Qrap9Zn0H8GQXGlQw -ZJqdDqRaIa4nCc57qP5DsuQKIQRxc1QMCiWyIRAESn+r8IbxLbjvEd7ZXNsieip6 -Q15uUZldjTveHVi89i9oFWS1nWo4SV+tJaEqPBvsTZZKBPAEu6+7lRzbJ4ukzRsA -DjuvmaPNUTyf21fD66I4sgrwgxoPhZ7r6qsqISJ5f0EzTXgYNi1yk/TXoAaot3c/ -Gu5+iyO/espV6kPADSOzPSFwsGHYG4kXi1VY0Z7x6UnjQSdEelOBplJ5XYDzEn4+ ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/02.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/02.pem deleted file mode 100644 index efb939e3a..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/02.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID/TCCAuWgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTA1MDYxNjE5NTUzNloXDTEwMDYxNTE5NTUzNlowUTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsT -CFJlc2VhcmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHf -rxnGsvmDFCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9ID -BxzQaQyUzsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx -4PKJ54FO/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5q -m+0iNKy0C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha -/m0Ug494+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOB5TCB4jAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPM -x8gPKfPdVCAwbQYDVR0jBGYwZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyihSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQ0wNAYDVR0fBC0wKzApoCegJYYjaHR0cDov -L2NybC5zdHJvbmdzd2FuLm9yZy9zYWxlcy5jcmwwDQYJKoZIhvcNAQEFBQADggEB -AJ2EkXnpgdJpsBIMcH+3oTUks8gAT5bR+LdVQSMHqvjgfaCq5fuZY15niLm5QeFr -Yhv2KtfHfF+tZgE+qWcqS33Y2U/jwUMO45Wqi5HXQDk8AM/gcvQZ8+PINkGdVdup -Wyw3MM08S/fp8UUl/3QrDr+CBGqZCSx3LEIFILm2hvdXK1/okAtkwlKV4YiOEemg -pZURzA2M29FeGDS8snfiVYFBkydT9QrrHnx8IwyVGykfOA4tnjRsjTvcs0qhtLcL -rjK2FSmzBTCVl6/lBOYmB765KUHev6WF4hdMKHf7lsH2nhYb97jxoT54y73jVd1S -uaJ2yDwEhOHn3ihb1bqlanM= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/03.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/03.pem deleted file mode 100644 index ce2ff7b9d..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/03.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEVjCCAz6gAwIBAgIBAzANBgkqhkiG9w0BAQUFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTA3MDMyNTIxMTgxMVoXDTEyMDMyMzIxMTgxMVowczEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xJTAjBgNVBAsT -HFNhbGVzIE9DU1AgU2lnbmluZyBBdXRob3JpdHkxIjAgBgNVBAMTGW9jc3Auc2Fs -ZXMuc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB -AQDGgB20WTzEVUNGDU/iwxN/eybmYAQ2rUytxoyKUHoN8Q7tATg7bwH3HrMdc5JV -AA4uiWFdrNw7GGu+QJVrYi+7jdt76ffcck6eQjLmmVsGp4T16U900ZzFh6zLnhs9 -K/Sw8yiGMQcYncblST4Sl3Yd6XdiY/fZHscsbFjxVpPGxwebZPPirukeWDFLUwVO -yc5A7pdqNlvmfy5tiO5Ds8hQMQyVqpmlDYwTQz3yZS2+X4In8GrgvBnUZ/etGzq8 -N+309wX/g2WvcKYDpWLqu3KxkwL+QTTYhIM6NvQXtPGCf3M5yBtoNqPzgIqXveuT -oMwJwF+uDZddBWjAeI1G+J8BAgMBAAGjggEbMIIBFzAJBgNVHRMEAjAAMAsGA1Ud -DwQEAwIDqDAdBgNVHQ4EFgQUY33heVHJfDUOz5Va8B1VPepgam4wbQYDVR0jBGYw -ZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyihSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3Qg -Q0GCAQ0wJAYDVR0RBB0wG4IZb2NzcC5zYWxlcy5zdHJvbmdzd2FuLm9yZzATBgNV -HSUEDDAKBggrBgEFBQcDCTA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3NhbGVzLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAXvU0ucW8 -DUgNkNdzIYtL48d44e+vDRuVZ6BmuovHqZuuWXfmxtM0q8zPUgrtXwX50nhVg8Y3 -csLLa4o7WOmDTMftvzuh9+T9CV8WIX6vioI7zS550ZwUwB0V08JTfrCiRaCql7Eg -pDEZDfKXJCaq+I/FAH1Q03vXsDk+wTtJSeqoWCt7IiEYePwFLQ0ANjPhK6BbbcyH -XkqZE2hYmroGele+UGwflRL9CP6F8UTFdg2LefeiZmZiSkgO2a0i4ik0ShQAPyIl -is5KBiKuvsqkbMTCxdk0gdRqcTF0YUHcOCY0gHMiApsNC157fokP0Mg6rBDRCJkH -kiJdzc42Apd8uw== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/04.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/04.pem deleted file mode 100644 index cae8184f6..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/04.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIELTCCAxWgAwIBAgIBBDANBgkqhkiG9w0BAQUFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTA5MDMyNDIxMTA1M1oXDTE0MDMyMzIxMTA1M1owXTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFTATBgNVBAsT -DFNhbGVzIG5vIENEUDEcMBoGA1UEAxQTZGF2ZUBzdHJvbmdzd2FuLm9yZzCCASIw -DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqgEdIrRiLkrf0UfCB4xUyx/5cs -Ka5h1MNBks2cKP6uABOL+jnlkRtyVFIOOCuNMgcK+873LC87UU32zapbe6Ph46aN -5M9ADMA6PtVeNkJIetVSVtT9DUL5II4kJ/hJUjINbt7omAiDAIWDGKNmTCsR18Ua -o1O/QFbiTT96fMFKX8EXiJgMt/5+vOWG0s1nGz6gn40R/2K52EvBmu5v0M3TX67c -YQFgBqMNfvnk0jLy10pEHro1OjgiTTj1DQd55ydSKGa0JvMDT/GOQeR87zkshRLz -bhxXOt4Ej2kkYbs9ILm7jKa9XfUYI58vCYLHwhGzpLZSsJ2xXkgfAAIFTI8CAwEA -AaOCAQgwggEEMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSCy57r -UdNRbytUkRGYGjmjvXfIszBtBgNVHSMEZjBkgBRfmxNG+SByyADViLWnTC6X6guT -KKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4x -GzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBDTAeBgNVHREEFzAVgRNkYXZl -QHN0cm9uZ3N3YW4ub3JnMDwGCCsGAQUFBwEBBDAwLjAsBggrBgEFBQcwAYYgaHR0 -cDovL29jc3AyLnN0cm9uZ3N3YW4ub3JnOjg4ODIwDQYJKoZIhvcNAQEFBQADggEB -ADn1ow4aGxckB4HsJQf1Z6LFpiCOExqhqcK/+fsFcl/WM3F0F+1TbEWzwFzDj3Yu -5gH6DQ/c0Fp+WYCKAbZXdYoKHJDSZY0BsoD7Nglc1r+l1wFRv1UGF5DoYZPryHGA -FkusMTUQMvWRRmN9PsURQ77DsmAtryKi5aDQ/rAiPIJK67bQ0HmvPAynO8IF2Fd9 -GpqFSc0gZni9NQszVUH33nuLlZP1hFC5MDeqhcqgmUL/GZbs7DZYThF4INBryfOg -xFE73CpyNQHHmfT23TLsrFD5IXCp3z3oMtCtTphwUnCJrEzZ1H7mJ+xSJoJ3MOqd -mNs1ygehz0a99cPoX1j/iwo= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/05.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/05.pem deleted file mode 100644 index 91df37a81..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/05.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHDCCAwSgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTEwMDQwNzA5NDI0MVoXDTE1MDQwNjA5NDI0MVowVjEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsT -BVNhbGVzMRwwGgYDVQQDFBNkYXZlQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG -9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztqGSb3H9Xh6I4xiDkmsN5WRjKnEQfSRZsSi -0umR7a1jysVvMgLKnmk2hAMJkDTjBXndEemnLiXemxNq4Wp3x0ZgpNWC6y1klZY6 -J7T76/4YhpIIs8HA1+ZiIAEhYCkeqy/ULPk0qa6yK6Ma2FKLEC4wz6OBbjhctqLz -VsxxKDkLaivnJ16bX8CCNsCq86Ba64m6K1Mpsev5RKnOz0Ey1WwBhgLmipZRgAMH -K6yPTRaOccvFVrOpi1bfprKXkrCYt6sQoDjbfheZ/tKyW2iJ+WbH0lsA4NbPi1s/ -5/rOIH+16CGfanXiZvZ7NbxLyb8ffPIXFxDTqiS8wFreRZR85wIDAQABo4H/MIH8 -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRnEIHshwPhDDGr3xLV -MnUEbroVIjBtBgNVHSMEZjBkgBRfmxNG+SByyADViLWnTC6X6guTKKFJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBITAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3 -YW4ub3JnMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc2FsZXMuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQB5H5jjp9LvEDyJp/3x7Caq -OhIBSl5n3g7Oi1gXT5GHLBh9/l5i6Swk1eey2oMzpHgsdDogLytlvzRKXupJAZt5 -xWab5I7BfichRCV4bOutN/F8DiNChG0SnYEBizRi5K06LAadtDT0NLv7iE/I49Nb -E8OdqnET1zHq82mbtVZCEzmRe+cmlB7EeECED+GxTOnYLRWeKg+AWIE4/fLN7s0e -q94lSUtym71LZ9kmMMAHkIyEbblvVIa7k5j4T6j0XwPPcYVMSjogqeze+qbf3EQ+ -JkRlGdzL/17ToLWYnVwkLqQDn6B+RfwnPk2EXndutPrNz6C3Wy7zNNniciAtXAq+ ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/06.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/06.pem deleted file mode 100644 index 3a40e2829..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/06.pem +++ /dev/null @@ -1,88 +0,0 @@ -Certificate: - Data: - Version: 3 (0x2) - Serial Number: 6 (0x6) - Signature Algorithm: sha256WithRSAEncryption - Issuer: C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA - Validity - Not Before: Jul 3 15:28:29 2010 GMT - Not After : Jul 2 15:28:29 2015 GMT - Subject: C=CH, O=Linux strongSwan, OU=Research, CN=Research CA - Subject Public Key Info: - Public Key Algorithm: rsaEncryption - RSA Public Key: (2048 bit) - Modulus (2048 bit): - 00:b6:39:b2:3a:a6:e0:07:5b:58:a7:3f:4f:b2:5a: - 85:6a:72:f7:1b:5d:3d:b1:e7:80:13:7a:95:b9:e9: - 61:a1:df:af:19:c6:b2:f9:83:14:21:59:1c:27:7b: - 7a:04:6a:43:f0:2e:24:71:dc:12:fd:c3:51:d7:c9: - 59:60:32:a5:59:d4:bd:d9:5c:a7:9f:21:06:3a:71: - 7d:33:d7:3f:d2:03:07:1c:d0:69:0c:94:ce:c1:31: - 20:65:8e:55:46:36:7b:bc:49:e4:12:81:9d:75:64: - a2:4d:e1:b5:8e:07:af:51:9d:a8:d8:7e:dc:b1:26: - 6d:e8:09:06:78:13:45:24:71:e0:f2:89:e7:81:4e: - fd:be:fc:2d:4c:c1:fa:b3:31:af:3c:70:fe:59:c8: - f2:31:26:02:d2:a5:ba:04:3b:73:d6:ae:31:e1:42: - cf:e3:66:95:27:e7:4a:85:a1:1c:de:6a:9b:ed:22: - 34:ac:b4:0b:ed:b9:22:e1:3c:36:af:a2:de:3b:41: - 88:8f:01:c0:1a:87:63:7b:b6:22:e7:e5:52:1f:4d: - 73:d7:7f:47:ab:c6:b1:13:cc:1e:cd:f4:5f:51:da: - fe:6d:14:83:8f:78:fb:0c:2a:c1:f1:01:65:18:f3: - c4:c9:8c:17:fd:52:1b:82:35:13:74:c3:38:9d:ec: - ae:39 - Exponent: 65537 (0x10001) - X509v3 extensions: - X509v3 Basic Constraints: critical - CA:TRUE - X509v3 Key Usage: - Certificate Sign, CRL Sign - X509v3 Subject Key Identifier: - E7:75:F0:A0:F2:AD:20:CD:CD:60:23:CC:C7:C8:0F:29:F3:DD:54:20 - X509v3 Authority Key Identifier: - keyid:5F:9B:13:46:F9:20:72:C8:00:D5:88:B5:A7:4C:2E:97:EA:0B:93:28 - DirName:/C=CH/O=Linux strongSwan/CN=strongSwan Root CA - serial:21 - - X509v3 CRL Distribution Points: - URI:http://crl.strongswan.org/sales.crl - - Signature Algorithm: sha256WithRSAEncryption - b4:53:55:44:bc:6e:96:f7:36:bc:16:57:f6:88:13:a2:bd:32: - fb:57:d6:43:f3:31:46:d9:83:29:30:3a:6e:20:d6:37:c3:9a: - a6:cf:c3:6f:17:e9:86:44:49:0d:81:6c:6d:50:46:1d:d2:52: - 94:a8:4f:9b:e9:94:f7:03:e0:e0:af:dc:e4:4a:00:2c:c6:87: - 1e:31:7a:67:7b:4e:96:0f:f1:d9:e9:b5:f9:3a:e9:c7:c5:08: - ff:88:b7:4b:78:84:fe:39:06:a9:60:55:97:dd:e5:90:0e:fe: - 88:11:43:ed:ac:ef:d3:9b:73:95:cf:ab:f4:a1:1a:f0:a8:9c: - 65:4e:3c:3b:aa:91:6a:cf:fc:84:88:31:d0:57:14:7a:a4:5b: - 25:b6:e1:ef:ca:ce:ae:e9:3c:c1:b5:f0:47:2d:ec:d0:38:81: - 15:d2:89:6c:74:53:7d:e5:85:63:5a:b0:fb:d2:2a:d2:a0:0b: - a7:5c:99:13:6a:8f:24:c7:42:81:72:d3:61:4b:80:a3:f5:a7: - 6d:78:4e:12:e4:4a:bf:5d:80:74:fa:7b:af:51:ec:44:bd:56: - 29:f7:0d:48:0f:b8:97:65:5d:c6:b1:fc:15:a6:ea:02:ee:82: - a1:dc:5d:51:85:ca:e5:4f:90:34:a0:3d:db:3a:9b:42:90:70: - 45:67:b9:a5 ------BEGIN CERTIFICATE----- -MIID/TCCAuWgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTEwMDcwMzE1MjgyOVoXDTE1MDcwMjE1MjgyOVowUTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsT -CFJlc2VhcmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHf -rxnGsvmDFCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9ID -BxzQaQyUzsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx -4PKJ54FO/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5q -m+0iNKy0C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha -/m0Ug494+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOB5TCB4jAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPM -x8gPKfPdVCAwbQYDVR0jBGYwZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyihSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCASEwNAYDVR0fBC0wKzApoCegJYYjaHR0cDov -L2NybC5zdHJvbmdzd2FuLm9yZy9zYWxlcy5jcmwwDQYJKoZIhvcNAQELBQADggEB -ALRTVUS8bpb3NrwWV/aIE6K9MvtX1kPzMUbZgykwOm4g1jfDmqbPw28X6YZESQ2B -bG1QRh3SUpSoT5vplPcD4OCv3ORKACzGhx4xemd7TpYP8dnptfk66cfFCP+It0t4 -hP45BqlgVZfd5ZAO/ogRQ+2s79Obc5XPq/ShGvConGVOPDuqkWrP/ISIMdBXFHqk -WyW24e/Kzq7pPMG18Ect7NA4gRXSiWx0U33lhWNasPvSKtKgC6dcmRNqjyTHQoFy -02FLgKP1p214ThLkSr9dgHT6e69R7ES9Vin3DUgPuJdlXcax/BWm6gLugqHcXVGF -yuVPkDSgPds6m0KQcEVnuaU= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/07.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/07.pem deleted file mode 100644 index 5c2a19bdf..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/07.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEVjCCAz6gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE0MDMyNDE0MTUyNFoXDTI0MDMyNDE0MTUyNFowczEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xJTAjBgNVBAsT -HFNhbGVzIE9DU1AgU2lnbmluZyBBdXRob3JpdHkxIjAgBgNVBAMTGW9jc3Auc2Fs -ZXMuc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB -AQC6zwcVirVu3/hsJRQY19GOO9Rw1BbCGd3t+dSYfkCFFt3l4JeAwAvPlXB1fbfT -vCJryl/xIcfgq58ZIgqjC0tEOKaVYa0ySvdlmI7HdqTWrFx5dqQpsSiU14U8xb5U -QAr9ha0AhRc5et2evsdg4bFNwlbOdrcKfQ82F+gRUi6v4n4PLLKDhH//L+PmUNBn -CTkmVcDVxlRkTvjwKhWpSbh99lFRhR2BuB91frCGXuZUnyue0FOXQrFLeY1bgzJa -hC+pvAMfx7P0XY/3V+H+vMlJOfYM2e2+np9Ca4l6mpmA3dvuiDHNe8xGl48EKT5m -iY3wk3wluBl5vEzz1UBp7i4RAgMBAAGjggEbMIIBFzAJBgNVHRMEAjAAMAsGA1Ud -DwQEAwIDqDAdBgNVHQ4EFgQUUHRhgpplj7IuGGKeMOaU0UEKTcEwbQYDVR0jBGYw -ZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyihSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3Qg -Q0GCASEwJAYDVR0RBB0wG4IZb2NzcC5zYWxlcy5zdHJvbmdzd2FuLm9yZzATBgNV -HSUEDDAKBggrBgEFBQcDCTA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3NhbGVzLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAthiwX0jr -/xoYPd3jFX+tYksuNOfRQKXZecVdxu8HnEO/Rd18QXWsBbr7JUQoMCS5fYbNSOEc -YJNGq51KqnrtLM/XrdV6RFcvXmCxnTyZIPHsGi2s83rNtFuSDXIzPAFm9+wLOuQt -dYYPgW7D0ZbuSRkamMBHDu+mU2DKY7ymgLrk7Ujg7SdwU8koD67AYlhq0JctOUIt -n9OKUOgjRUPZoYHag7Ktg+b3UR4CjJgpUz27P6Pl+NDKyB1CYKrKU/975lnalA93 -ZQBEaPInnGT32A1rtWEoPhdFyOkOsT+i1lQCk+bFq4NbaPnRV1Nw367Tm3LJ7H6G -5f4iQ6TuvWan8g== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/08.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/08.pem deleted file mode 100644 index 5d3255a8d..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/08.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID7TCCAtWgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE0MDMyNDE1MjcwMloXDTI0MDMyNDE1MjcwMlowXTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFTATBgNVBAsT -DFNhbGVzIG5vIENEUDEcMBoGA1UEAxQTZGF2ZUBzdHJvbmdzd2FuLm9yZzCCASIw -DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7tkn1sXzlBRzSVHoPoct2D0kht -E/Tf+LnryMsw79IBMfiOU61ijdwx2jCLxUh7t90NEIN4CdpIYqzc/1Yi/LWXD9+G -8gBwft5nqTIz8S8Lf6Qiy4LjGXV3VWpDMZLLRJL5ZWm+0ZN8Wtp9qglVh4LnQSiy -+NYTlxnRtPB7xkwia287wn4aQfNJpNhlocXdSpGIF5bNIQm32n84SDMafXtuA+vv -8/72nBiy2SWhkAd+CiNq5dnZkYGnIFL718V6Zu4kmZQhzM3gi/7POZCkOCeSZVeh -AJJf1mJI7SJH54XYkZLUS5EG6ad3kBf1nFGRAjPgwxQHhfUlP8njpjsV7WUCAwEA -AaOByTCBxjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUmH74J5yy -dZzGxw3ds3aOtEKctBwwbQYDVR0jBGYwZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyih -SaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRsw -GQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCASEwHgYDVR0RBBcwFYETZGF2ZUBz -dHJvbmdzd2FuLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAXyaXqyW20j8uhBWoBrbX -Vhg8+lop62xGzLX9UqCGIJzO8BqA1YZm80ieXJWQYzJ9vMnTXExswxY6/7Z4fxAX -9IqUHpBEgyhkntgNlQB+u+uLTy4prT64szVjypWbrFLmp8uGttdmaSaGx0zQeWbD -9fp+p7RU4Qdse9soXliafAB4pS6ZxnCWvTyAYOk7uEZhm0pJoOOho+ZQEPfl1tbv -StHkpmGZqE1PT6rm6/FDG+2IMHphQDV0I7n+acgVpjiflea/UnpZGwE20i11zLRx -7hv8Hc+hawqG0DzZWMlCk1MzkPvsSfEDvxzfc26pgfDEIBojBnoeqaIwm+dh8Qz4 -kg== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/09.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/09.pem deleted file mode 100644 index 4718e7a16..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/09.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHDCCAwSgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE1MDQyNjEwMjIyMFoXDTE5MDQwMzEwMjIyMFowVjEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsT -BVNhbGVzMRwwGgYDVQQDFBNkYXZlQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG -9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNnrgEQdETpkdY/PaSj9KeNrg8+MCwCH/SPk -UE6ijIn++yyhaZaji5JrA3z9ya+si0R/4PjxsgwjuqrxARV4gG63jKOmOLWMK9ER -0/APr9KmXfnmFddqZwltGdo9hmDiBQimEdvvK4XK4nA2BY+pJ0b5go+5P4gIbHUN -5GGh1u34R/9JDCvX1HHnIYmKv4ERD5TbODnKDjR7KT3q8Qy+DEndji+2Y1NWLot8 -XOynqCNW9Ii0Zs7850wzV1gz1kkm4Qdte0ndlUQu+gSbS7uM+AVPEgd0ZGY23ecA -V2HsNtCGecj/OnsQ4z8+gSIKJfwEqeumVsSbZimllo5mf3l7jwIDAQABo4H/MIH8 -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSBwMHfoTTG9g4LmkL/ -kBl3thRfxzBtBgNVHSMEZjBkgBRfmxNG+SByyADViLWnTC6X6guTKKFJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBITAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3 -YW4ub3JnMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc2FsZXMuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQC5VfuhrOErCX6nlfnzgXIB -HheWTfcuobNz1cRatdIGRZVBLIktkQjABsX62t0wcCJ4gUMgT0DxgR/bZQDv9tp5 -q6bo5XJM+bFkuf0NiPme+w9Or+VYcuyiljHnHF3rihK2ZFOBXl2kY667tiGFML3B -jhaYQVHA0ZsSfe3Auxccku0U25dJNLq1+ATjeDuye8/NJqS95YBcMZzWiwG/VgMF -mCeiygAobWmIk2LOijFFpNN2ySCiLimueQp/DO3kBdWlhael3Ee9lkA5bqoFchpb -HH8eQKyOLhRnB2Lk/RhC3mGIFjW127sJdjdWkroyULepnULLyQQA6jy+tEu4XZ2C ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/newcerts/0A.pem b/testing/hosts/winnetou/etc/openssl/sales/newcerts/0A.pem deleted file mode 100644 index c8ef183c0..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/newcerts/0A.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID/TCCAuWgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE1MDcyMjEzMzYwMVoXDTE5MDQwMzEzMzYwMVowUTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsT -CFJlc2VhcmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHf -rxnGsvmDFCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9ID -BxzQaQyUzsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx -4PKJ54FO/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5q -m+0iNKy0C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha -/m0Ug494+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOB5TCB4jAPBgNV -HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPM -x8gPKfPdVCAwbQYDVR0jBGYwZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyihSaRHMEUx -CzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQD -ExJzdHJvbmdTd2FuIFJvb3QgQ0GCASEwNAYDVR0fBC0wKzApoCegJYYjaHR0cDov -L2NybC5zdHJvbmdzd2FuLm9yZy9zYWxlcy5jcmwwDQYJKoZIhvcNAQELBQADggEB -AExl2Twec2R2A187Ythn+by+HmP2KYcwt80MwgAXX8jYGiidmv05g6Oa+cvP1Hxo -ilCZwTbMSOGmSJSpBDeJq3iQOnOONvNuhiu37ziqMY2CBSOVBzxp6gATp1k3m3m9 -oKR/LWl74VhgHxoF4E4Tds4BYzD0T6mrEo5Vi8tNr4T4LKhoe+pfwNvqSzefWEKY -27ehiMPhQoAr4S/aBynp9qtzrrvGFIFqbINKMCDZy5P3BzI6ki69J6FkvkO75SEa -31JRvEB8jyfxaJz9EzdvmfEAsSc5Akzc3ZLR7e0T+NaJitbtFoaqZc+1TIfKNbdt -dSLmfo9Q/ieLbkd0Tljl/Cg= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/ocsp/ocsp.cgi b/testing/hosts/winnetou/etc/openssl/sales/ocsp/ocsp.cgi deleted file mode 100755 index 74a2aebc2..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/ocsp/ocsp.cgi +++ /dev/null @@ -1,11 +0,0 @@ -#!/bin/bash - -cd /etc/openssl/sales - -echo "Content-type: application/ocsp-response" -echo "" - -cat | /usr/bin/openssl ocsp -index index.txt -CA salesCert.pem \ - -rkey ocspKey.pem -rsigner ocspCert.pem \ - -nmin 5 \ - -reqin /dev/stdin -respout /dev/stdout | cat diff --git a/testing/hosts/winnetou/etc/openssl/sales/ocspCert.pem b/testing/hosts/winnetou/etc/openssl/sales/ocspCert.pem deleted file mode 100644 index 5c2a19bdf..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/ocspCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEVjCCAz6gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE0MDMyNDE0MTUyNFoXDTI0MDMyNDE0MTUyNFowczEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xJTAjBgNVBAsT -HFNhbGVzIE9DU1AgU2lnbmluZyBBdXRob3JpdHkxIjAgBgNVBAMTGW9jc3Auc2Fs -ZXMuc3Ryb25nc3dhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB -AQC6zwcVirVu3/hsJRQY19GOO9Rw1BbCGd3t+dSYfkCFFt3l4JeAwAvPlXB1fbfT -vCJryl/xIcfgq58ZIgqjC0tEOKaVYa0ySvdlmI7HdqTWrFx5dqQpsSiU14U8xb5U -QAr9ha0AhRc5et2evsdg4bFNwlbOdrcKfQ82F+gRUi6v4n4PLLKDhH//L+PmUNBn -CTkmVcDVxlRkTvjwKhWpSbh99lFRhR2BuB91frCGXuZUnyue0FOXQrFLeY1bgzJa -hC+pvAMfx7P0XY/3V+H+vMlJOfYM2e2+np9Ca4l6mpmA3dvuiDHNe8xGl48EKT5m -iY3wk3wluBl5vEzz1UBp7i4RAgMBAAGjggEbMIIBFzAJBgNVHRMEAjAAMAsGA1Ud -DwQEAwIDqDAdBgNVHQ4EFgQUUHRhgpplj7IuGGKeMOaU0UEKTcEwbQYDVR0jBGYw -ZIAUX5sTRvkgcsgA1Yi1p0wul+oLkyihSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYD -VQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3Qg -Q0GCASEwJAYDVR0RBB0wG4IZb2NzcC5zYWxlcy5zdHJvbmdzd2FuLm9yZzATBgNV -HSUEDDAKBggrBgEFBQcDCTA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3NhbGVzLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAthiwX0jr -/xoYPd3jFX+tYksuNOfRQKXZecVdxu8HnEO/Rd18QXWsBbr7JUQoMCS5fYbNSOEc -YJNGq51KqnrtLM/XrdV6RFcvXmCxnTyZIPHsGi2s83rNtFuSDXIzPAFm9+wLOuQt -dYYPgW7D0ZbuSRkamMBHDu+mU2DKY7ymgLrk7Ujg7SdwU8koD67AYlhq0JctOUIt -n9OKUOgjRUPZoYHag7Ktg+b3UR4CjJgpUz27P6Pl+NDKyB1CYKrKU/975lnalA93 -ZQBEaPInnGT32A1rtWEoPhdFyOkOsT+i1lQCk+bFq4NbaPnRV1Nw367Tm3LJ7H6G -5f4iQ6TuvWan8g== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/ocspKey.pem b/testing/hosts/winnetou/etc/openssl/sales/ocspKey.pem deleted file mode 100644 index 288aecb08..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/ocspKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAus8HFYq1bt/4bCUUGNfRjjvUcNQWwhnd7fnUmH5AhRbd5eCX -gMALz5VwdX2307wia8pf8SHH4KufGSIKowtLRDimlWGtMkr3ZZiOx3ak1qxceXak -KbEolNeFPMW+VEAK/YWtAIUXOXrdnr7HYOGxTcJWzna3Cn0PNhfoEVIur+J+Dyyy -g4R//y/j5lDQZwk5JlXA1cZUZE748CoVqUm4ffZRUYUdgbgfdX6whl7mVJ8rntBT -l0KxS3mNW4MyWoQvqbwDH8ez9F2P91fh/rzJSTn2DNntvp6fQmuJepqZgN3b7ogx -zXvMRpePBCk+ZomN8JN8JbgZebxM89VAae4uEQIDAQABAoIBAB8kFe08Y0RpZ7M3 -dyMxDwjj5mUspeKTh1B9fjgxi7Xj+vewOfFHknB3W/jqDTPpv98yLE45MGW+llYN -O7K0Vka4HuT2FHY20wkHpn2PxKjYsM26vmEI3Ff7mYVo/XJz/qEGoLFefmGhnsIw -0XHQDcuFowzl81t3P4rn71K73XaKRUjS8EMnuyqN2vKIsOyoexslRRfab01Iypb1 -IIpWgL4ZGy1KSaymT+F6KfblAR3W6txsHyLKz39YzwMAVC5tL1zFlWMr2oUkjCn5 -DphKGSF/rUOLN82VwXj3+vKdp+8FG7KyxS5yI208srwuHi3PiPNZj8Mjo2rqZ7Aq -iT+MDrECgYEA3XjNNSBg0aJMv894K3eQTFG879iByQBHv5zIuuaJwRPTAAkKAcBe -XEZyvf72CAzkQJdUGkxhaNPI2S9+euzitlGwTp4XWC6/N1pZWVWpu4daiihBgw1j -hsOpvnJCR0SCSWQXTF+G4cJ6L8JF4nECfRpmZKRkY/pfWg5x2VqlLj0CgYEA1+7H -UTD+dng7hD9Amn/yl5d/5utUW5hTzeTDGm16Xrzhszi/Lj62/OcnnF3FVSgqcLoi -jti32P7XeeZYe8BcwF5rrk1/xEfs0HtRDL3Fw3ZatJNL+MqkWmTOftbvZq0vJqmA -Y03Gwc4Wk8u+s88m4Yd0Uu/fQoZTochlpHNtsGUCgYAKXwbVDxAZoQ0RCmkpN+8k -88ryPGRPgljZy0DHJ9aZmREPdlzmmhiRH6dt6EujMt9ZevywQpVpMEm+ie/VV9SC -Dy8/bz3OnlnMAMogWdeZ9Yuy3pG6zlyzyePgDD+4UKf9Qdepduu9FLteEy3snbgt -HZhf7CbbW7UtZXHFaO5FTQKBgEMucSjbm2/0fF/q5giroihz5EFOGlLdE8XNVL5W -LWpoTbhbAXA75ubMbFCEBC84bevgnXvgBWMn9pZgiksGUFUxi0MRrZy92/oJQ/A4 -4tyraBEietKPCY9uKajg6l8BptfaiK1ct2f43KFjFJQQ8UHdyN088DNcY4zEMot1 -tjzZAoGBAMtLZ5chaulGceF9B4EOFlAfZ73Wnd3okLkmVNr1pV2m4JM43lMtyBVk -lsrzNDyj7mqpdbdTk9L93SMzuN710+uV8m3Km+nszW0OkzLshR6QUrn8guXFu6a7 -B2bbVtgUDGt+mMuwrgVFPLStmNAUfbIAFp03+sQxD29Oy0Dvv3xv ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/openssl.cnf b/testing/hosts/winnetou/etc/openssl/sales/openssl.cnf deleted file mode 100644 index f1d080c0b..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/openssl.cnf +++ /dev/null @@ -1,173 +0,0 @@ -# openssl.cnf - OpenSSL configuration file -# - -# This definitions were set by the ca_init script DO NOT change -# them manually. -CAHOME = /etc/openssl/sales -RANDFILE = $CAHOME/.rand - -#################################################################### - -[ ca ] -default_ca = root_ca # The default ca section - -#################################################################### - -[ root_ca ] - -dir = $CAHOME -certs = $dir/certs # Where the issued certs are kept -crl_dir = $dir/crl # Where the issued crl are kept -database = $dir/index.txt # database index file. -new_certs_dir = $dir/newcerts # default place for new certs. - -certificate = $dir/salesCert.pem # The CA certificate -serial = $dir/serial # The current serial number -crl = $dir/crl.pem # The current CRL -crlnumber = $dir/crlnumber # The current CRL serial number -private_key = $dir/salesKey.pem # The private key -RANDFILE = $dir/.rand # private random number file - -x509_extensions = host_ext # The extensions to add to the cert - -crl_extensions = crl_ext # The extensions to add to the CRL - -default_days = 1825 # how long to certify for -default_crl_days= 30 # how long before next CRL -default_md = sha256 # which md to use. -preserve = no # keep passed DN ordering -email_in_dn = no # allow/forbid EMail in DN - -policy = policy_match # specifying how similar the request must look - -#################################################################### - -# the 'match' policy -[ policy_match ] -countryName = match -stateOrProvinceName = optional -localityName = optional -organizationName = match -organizationalUnitName = optional -userId = optional -commonName = supplied -emailAddress = optional - -# the 'anything' policy -[ policy_anything ] -countryName = optional -stateOrProvinceName = optional -localityName = optional -organizationName = optional -organizationalUnitName = optional -commonName = supplied -emailAddress = optional - -#################################################################### - -[ req ] -default_bits = 2048 -default_keyfile = privkey.pem -distinguished_name = req_distinguished_name -attributes = req_attributes -x509_extensions = ca_ext # The extensions to add to the self signed cert -# req_extensions = v3_req # The extensions to add to a certificate request - - -# This sets a mask for permitted string types. There are several options. -# default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. -# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -# MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr - -# req_extensions = v3_req # The extensions to add to a certificate request - -#################################################################### - -[ req_distinguished_name ] -countryName = Country Name (2 letter code) -countryName_default = CH -countryName_min = 2 -countryName_max = 2 - -#stateOrProvinceName = State or Province Name (full name) -#stateOrProvinceName_default = ZH - -#localityName = Locality Name (eg, city) -#localityName_default = Winterthur - -organizationName = Organization Name (eg, company) -organizationName_default = Linux strongSwan - -0.organizationalUnitName = Organizational Unit Name (eg, section) -0.organizationalUnitName_default = Sales - -#1.organizationalUnitName = Type (eg, Staff) -#1.organizationalUnitName_default = Staff - -#userId = UID - -commonName = Common Name (eg, YOUR name) -commonName_default = $ENV::COMMON_NAME -commonName_max = 64 - -#0.emailAddress = Email Address (eg, foo@bar.com) -#0.emailAddress_min = 0 -#0.emailAddress_max = 40 - -#1.emailAddress = Second Email Address (eg, foo@bar.com) -#1.emailAddress_min = 0 -#1.emailAddress_max = 40 - -#################################################################### - -[ req_attributes ] - -#################################################################### - -[ host_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = DNS:$ENV::COMMON_NAME -#extendedKeyUsage = OCSPSigning -crlDistributionPoints = URI:http://crl.strongswan.org/sales.crl - -#################################################################### - -[ user_ext ] - -basicConstraints = CA:FALSE -keyUsage = digitalSignature, keyEncipherment, keyAgreement -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always -subjectAltName = email:$ENV::COMMON_NAME -crlDistributionPoints = URI:http://crl.strongswan.org/sales.crl -#authorityInfoAccess = OCSP;URI:http://ocsp2.strongswan.org:8882 - -#################################################################### - -[ ca_ext ] - -basicConstraints = critical, CA:TRUE -keyUsage = cRLSign, keyCertSign -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid, issuer:always - -#################################################################### - -[ crl_ext ] - -# CRL extensions. -# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL. - -#issuerAltName = issuer:copy -authorityKeyIdentifier = keyid:always, issuer:always - -# eof diff --git a/testing/hosts/winnetou/etc/openssl/sales/salesCert.der b/testing/hosts/winnetou/etc/openssl/sales/salesCert.der deleted file mode 100644 index dafc9ed48adc19b493269b16e408a13a12f7ba44..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 959 zcmXqLV%}}g#I$$;GZP~d6QiO5FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH8e0VF)%Z* zG&M0cjskKmfm{zvj!*Tq!t?r8t_A`AR1e=QR7U@*P$mHlA8NW6!DwlWg9;39711 zXiAtWr1tZvoxHi!Wrd`uh3`7&-~OA1$Jw}wz{Dr(Z@*Kzm7v_XAy7HMyla)nom*S? ze9$_#eThZ?#qf)-t1o?BfAnifBNH4St~G z>Av^o{?_Z7Q1N%tHzDR(yN|Y~*%w*-Z2q=t^7ABgr!arAku+vg{*-^I-n z;?z}8bgG)MZr{_tQFmSDvNz1T@VsJ{D~D6kXN`b~Udt1sT8m9)J^dl_HG6vP&qdc5 z_66OVHDw|51L<`C%7p7?J00$-i#Uo|^6mdx_`Rk%CNa7O*RyYrq|rC8)E-K{yd|J(dPZdT@p##0t2 y2~JR)nr3e7yk_B4hSgC|Htu0(aO?J-UVQyvY)VY+Cv)@o6KVD@@@JPvXaE2UtZr2R diff --git a/testing/hosts/winnetou/etc/openssl/sales/salesCert.pem b/testing/hosts/winnetou/etc/openssl/sales/salesCert.pem deleted file mode 100644 index a10a18cba..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/salesCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuzCCAqOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTQzM1oXDTE5MDQwNDA5NTQzM1owSzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH/QcWm1Xfqnc9qaPP -GoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq4JI87exSen1ggmCV -Eib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6XL9DKcRk3TxZtv9S -uDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562kDtfQdwezat0LAyO -sVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAjgbBRI1A3iqoU3Nq1 -vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOBrzCBrDAPBgNVHRMBAf8EBTADAQH/ -MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1p0wul+oLkygwbQYD -VR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNI -MRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2Fu -IFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACRlTqXMjHy7r7rWnq/09yFn -Td6d+y6KkHj9kvYSA5q7xYdmP3I4+YP2qpPnYjSeyfMCl4ZIyMXnfUbz5OvuXp4S -CS0gIUJ6mK6+5f1a3USdB4Ce0Od4mkUIQmLzKFCRSqdhWoVzNJrl+BT1a5d9+aLW -AL5S2pqUoQPgG64MPghy3SyUb4qBeplk3JdR/6OgA5LQeNtLiI7Y/dbMM2Rvn284 -RIIxp2TqN2Hup6BNLHv6fLixdJpM+nG7ZjGYf+7dnuY6ZDhvIt18zr/2n1ELBQPh -M5SjYhGQIZVmNzNDrKGVAKta5LG8BwBGi0uXc9fBXWRcffI3N1/IZj/ob5t3WCg= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/salesKey.pem b/testing/hosts/winnetou/etc/openssl/sales/salesKey.pem deleted file mode 100644 index 96dab2928..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/salesKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAwk5NJpmMN7lRH6Eluh1wTjRYHFab6vQWIP4UtzZzSEf9Bxab -Vd+qdz2po88ajE7YF/BeAUQd851DMca62GGy90w+SZY/Vne4OvCxyquYvKrgkjzt -7FJ6fWCCYJUSJvnlPh83GtMgYlqh7omf2/1nAbYH5SvecUD/B1yRJ2onFzpcv0Mp -xGTdPFm2/1K4N+0T0bvzs7o8lLJ/JRiGV3PURl7k9OxSgBsEnQMNcnHfnraQO19B -3B7Nq3QsDI6xVptir/Qb98FnAst6vioYXb7cKy8/uM1eeFFh5K/b7iLaYCOBsFEj -UDeKqhTc2rW88CrOt6Q4j9FX0et70vWvxfV0gQIDAQABAoIBACypguJUeP52Akea -6ukUyzOupHIfFkezQ0LiJDDYuzbqFScD80CR4MT3z35vpFKL7O/TuEfiOGA+zasr -WtdR3akqRUb02iot6pLhsHw9ZSY4wNXcW3PuoWkgPdelbD65QhA9bJUl4lO5MW97 -Atu2K28hQD9VDhRKNFSk2liM9d9IjGeO3Eg0FnN/gDiFRHN0A5vrjqnmkUWqeJzh -561pomDuNxyGK1NkgZ+Cc75e+KJYwLX4sSzPiyMJhTt+ERLBb1ngcXpjcRn9Kjq+ -1QCsFbeuk1F034GnMEf5b1flu6vrmpWC3wnNQLRLuYommQ1O+uQtl9be2a+olCTd -jD8aAuECgYEA5SnJtLNPQPTj6LzIE9EGZzp78OOzJaHDNfungGAAnv8xV55ap8g1 -3KORa+QKwpCa2MgV9UKtsuql1OjfslYjFARaOp24Qh7z+GFfzsWX4V7C4zlYbGfj -Fe905/5sNeZnZwgiwKK0kQpZ/dyS1RI1koXphVBAb+sLh9gRdm3Qw/sCgYEA2Q+B -Rv6WpymV09Vp7c3yHDWmVwLJCoFZoWgSuu6XPUF1MuH3omYN211M3lA526OiH1ce -wqY1jtA5vSe0w7ZVMhBYkNG6GI/aKBdMzpCoBtWYW/QZ+fl6F36DkEKPBPloPxLP -0hR9xCsBvU/6VlSlBPGNFmsX5eNNMeHY68WdhLMCgYBlNynByBjPJdqr5wWvyvi7 -C1fGs6tiiaoA49+9kal0kF4oxuZfiMxRYWVPc+9UtC3QZb9dDlBN39nSyfBTgjwI -EUwQ66yAd89l+wwn9Zn5jrMhTSjC6Leh7puCBBujStqM5UkEMFj0XtAUkiHAPkSv -LLpRiXqMdBIps8MyvZohlQKBgEPB7U8mJg0klBq+YgTT5yIbNUOwIOXgnwQdossr -s5Zxmo45r73IMccqhtZXINiJahByd623iLx+D6gWfv0hK9Mm+x6p+Xe1YBpnu5g3 -29vWTWtW9czsrcoruhIMVOzuljYqPymLL/9OlYptLu5IGgNDDBHVeG5Q2EYcBEUF -OTi1AoGBAND42O8VS8tGsoR7QLeEwxjT8hCvSXYoTWcCVzbKjsPdGBkX2LiKwEr1 -B5pOfvNfFEgSmRm4LU5R/pG7seFQzlaAZCAavv2NUfC9F+5hwx95VHKXjZF+yE4m -J6e8kb0p2zcyCZCC/61kztGk7FqH9sb/6E+6CDMP+1QYxytrkYYR ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sales/serial b/testing/hosts/winnetou/etc/openssl/sales/serial deleted file mode 100644 index eb589e9da..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/serial +++ /dev/null @@ -1 +0,0 @@ -0B diff --git a/testing/hosts/winnetou/etc/openssl/sales/serial.old b/testing/hosts/winnetou/etc/openssl/sales/serial.old deleted file mode 100644 index d9bb888f8..000000000 --- a/testing/hosts/winnetou/etc/openssl/sales/serial.old +++ /dev/null @@ -1 +0,0 @@ -0A diff --git a/testing/hosts/winnetou/etc/openssl/serial b/testing/hosts/winnetou/etc/openssl/serial deleted file mode 100644 index a2720097d..000000000 --- a/testing/hosts/winnetou/etc/openssl/serial +++ /dev/null @@ -1 +0,0 @@ -39 diff --git a/testing/hosts/winnetou/etc/openssl/serial.old b/testing/hosts/winnetou/etc/openssl/serial.old deleted file mode 100644 index e522732c7..000000000 --- a/testing/hosts/winnetou/etc/openssl/serial.old +++ /dev/null @@ -1 +0,0 @@ -38 diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/carolCert.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/carolCert.pem deleted file mode 100644 index 94f2c0a19..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/carolCert.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEtTCCAx2gAwIBAgIBAzANBglghkgBZQMEAw4FADBXMQswCQYDVQQGEwJDSDEb -MBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MQ4wDAYDVQQLEwVTSEEtMzEbMBkG -A1UEAxMSc3Ryb25nU3dhbiBSb290IENBMB4XDTE2MDkyMjEwMzYwMloXDTI2MDky -MjEwMzYwMlowWTELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJv -amVjdDEOMAwGA1UECxMFU0hBLTMxHTAbBgNVBAMMFGNhcm9sQHN0cm9uZ3N3YW4u -b3JnMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAw7ArNq1Cs5RMc1Mu -HO5BZAIAc9v04THLSpCs+zNQlyJCXaijsiTQUbATyhgB5O11HKh69J8PRITx+dqI -W/are3KGAKbvo8G5AgVOPhO+X3n7iOwTPqtaAlAa4/qpVyD/RSfOiQPXj+SFtBz9 -Js36gZegcm/w3d0QVOPUIEMWpSMIHCAmv6Ji/QHyOEVyOuiW0PTKVxqY8iFgnT8d -jDo0xWU40RNcIC7qyMkmGD8xR+kIbBcH8akPB6NgNvFVUZPK4EQfr19JNAQp7KbP -A6tlzRxR6z0eL57zRUU47g3cf9Ie1zNj4FrIfv/+nA9ZVpR/DsGe3qmJvTVDfuba -GkFE4AKxUEGcm0N4gHXo1PBj7hayJJSUIuAfoIfmkorqrPTp3bRoH2NWmMveBU6W -4c8Vocv4ceWmCsrodcNdzqcnU4QGFc9xKPeiD232KeBZdpK4vs1ewkzftWmOVYUB -G0X5oNNYoT54Qr8YXTWTI/3Rp7TbVGh7Z6iqH7hQ9gNGOe+NAgMBAAGjgYkwgYYw -HwYDVR0jBBgwFoAU5MnNjPKIbR2nLtdeeTGlZlU1zgIwHwYDVR0RBBgwFoEUY2Fy -b2xAc3Ryb25nc3dhbi5vcmcwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybC5z -dHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuLXNoYTMtcnNhLmNybDANBglghkgBZQME -Aw4FAAOCAYEAHxkcN7plS2BvO/yXxE5WJ+2k9IP/IupuE6ChuFHDq5SrGNMsStsG -sGpV6/yxvLSHchNGnGMIOyLTMzKgWy5dnDy4YX2FqZkI8ZBa0FJ9iO2IxILCsmyw -ouShOv47YkNuAzJWIZjRz3+7mNhfX3TsdEr26cNKf1JqawTyFCDq0t/UYS6K/8O+ -+6Q1kmy2mRgR19XkxA0ts3xno+eeB0NelnVEjJwqZPFgmVYK/2T4fUKraJyQzwhp -xghLtlmwNuN6jetB4Z9k3hQQaPlUy2wxrqdsNfV9Ysgy+3LcI2ynoFMYShrS4avW -FI2z0hb8sDkvS4Knif4UCv14Gycb/8nSgiingEMU+UmPOxwUl79/99e4LvIaslp4 -S0AiLwe0Tz2NqQ6uhvVppw3lYptIt+EK042cYpm/CPTMlMhT+Pi8l/POWIdquNLp -85NuiVBbt3wMff+qTu+/ppyQsytTfDMD6XLggorLni/Owf9PoBakcdGuPW9MAUTf -6Idv0tl5T0qX ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/carolKey.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/carolKey.pem deleted file mode 100644 index db6c98d89..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/carolKey.pem +++ /dev/null @@ -1,39 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIG4gIBAAKCAYEAw7ArNq1Cs5RMc1MuHO5BZAIAc9v04THLSpCs+zNQlyJCXaij -siTQUbATyhgB5O11HKh69J8PRITx+dqIW/are3KGAKbvo8G5AgVOPhO+X3n7iOwT -PqtaAlAa4/qpVyD/RSfOiQPXj+SFtBz9Js36gZegcm/w3d0QVOPUIEMWpSMIHCAm -v6Ji/QHyOEVyOuiW0PTKVxqY8iFgnT8djDo0xWU40RNcIC7qyMkmGD8xR+kIbBcH -8akPB6NgNvFVUZPK4EQfr19JNAQp7KbPA6tlzRxR6z0eL57zRUU47g3cf9Ie1zNj -4FrIfv/+nA9ZVpR/DsGe3qmJvTVDfubaGkFE4AKxUEGcm0N4gHXo1PBj7hayJJSU -IuAfoIfmkorqrPTp3bRoH2NWmMveBU6W4c8Vocv4ceWmCsrodcNdzqcnU4QGFc9x -KPeiD232KeBZdpK4vs1ewkzftWmOVYUBG0X5oNNYoT54Qr8YXTWTI/3Rp7TbVGh7 -Z6iqH7hQ9gNGOe+NAgMBAAECggGAKuC3F0vviZm9Bqf7OquZ+GfX4YsYpR9cBAKf -ZIth5TvEfvEsrSQT4VJLg8Su5ZKCTr07883GcqUOwEh6CGyMNohphEsPxznzZ9Xx -xvhchl8cFmxj6x9woYEb40hRQp4gUO7f+nW1DfpssYKIlbAca7jlly2gAX0mzvL8 -z/TjSVvbsw34b5UNS5LZmCrfVLkSEscQbvWM/cECgnIJ72fxmC8NvAIZ9ZNSLpyk -lDuEeNU+2zBQtUrt2CacNm263B0dvHrW9QSTdi1GvIjxhc3ab8OT0ZDNzo/S2eRJ -InN77gwkYgEu1jeloBsicG4ZAAdbQU5/X4prnJIy2novnA/2C+hrmpYDhxqOT4Uk -AhoMiyvrJF6rxPZj+R5qzc4RUzZapcXUNzH0lCwtwd19Ogfw38LUkHCtqQQpleme -AL7FeVDXDu9oe6c5YrZihehT7p8ExKwlwiWy4u2bnoip77wOCuLo+D6eZpt64w4e -XiHpWtmkADqhfzMgt/WUMpD/+gcBAoHBAPTa6zMClhGP6su624Rv9HSVClacXR7d -zJNo5stnPierfcIZs8loWthR6AgGx36q9bOqtfIdFRc/PajF7oggnTcxMBZdCoU8 -Oi3vWEH+aIzIX3KICUjRYjj1kpm9xcy7XPGc6bEit+PM1DJ1jXCTiC30uQpavNxr -klV4+ROIt9MYsb3tQw7CO1mGNR37jAEUqbJ7sK2OnvmjZPJlwJs0AyN1j7ZUihDO -VT5UhjwB4KUH6BEirXTkoaDxZwsRfR5SaQKBwQDMmFm2M8J9AOxgrYTY80YIRQpy -vrcX7Xrzn4Lu8M8Xr6RlS5bbXApAH7WtRHGlIj14lItmvZpRSOTzawtn65AzeIUF -82/EMxLJaGjMBviTyNy+ta9wn8Qdy5c2ZZ5dKgsQ4PprSkAvNOnpd1wG48pbGg7/ -n3tVs9zdD2wa35KVjoyueu9Ls9BbND8v7OYmkmSNqFlA5KuLIeQkuLNxjxQsV5Vg -S8pyg1jlYs7KmYs9GIFHAVEf5LG6a/3huWfuR4UCgcAGWfdn51VFN1p71mkDUnQg -4gzWmk/AETjRShNSi2cNWGF2u3vyaYaRve4q5yIdowmkk3UMxrxZUgajbh714QKy -/8+jhN5U/m7z6hV8AMFthXUUX3r+LJBDsfsPieCrouCSU+Or+J6Uhieq92mn1eve -ZU63egsUHKY7GVw8qXs7OpTBvHnU1Cz98YFHOdMz4/lS6+p1VhHBn/9qWkFYxUyf -itkjfaXnMbL8XuzseY/+N+pJJ4EgWx3mMtzdaKK6OqECgcAttOdt1fhgFsG4A2vH -T+nYVRw1cDfVJ5+tJ3iHytJpFzshyhZEoTZFBxB+SekdnB2hf4X5COiduiwz2Tku -GSkY5pbJMo5IhaRvzFyFIBWOZnQyQsKT5Y1Znq8EXwVXCNp6BdjL+UWHhkmvd5Pe -kisV2Sd6ofVauxjfZd+fzUyhDryNCjfFcMFebrijC0iLW28NWou9/Jf6ODMQpRap -iu5Vzac4YRY0KPXGISHTjyPVHVFcPIYUGvI9lHyeXd5DFEUCgcA9s3ei/H000sC6 -3q5iELW8kxFCpwvu7uKCFfakAqQn8nponHEUgRS7eLjzS1NB0qysIiOMtZPAVMCz -puETLsi9PxD8de4RyEyZC2yd973j+TqFQmPyiWF3QNW55zM2iELW5sGeEVk/Z15c -nlItcy7KOJOJU0TAKvUUjr4ug5N7sVSN1aeF4tiaFz0GFIqV3qAkcTMfpaOKfuSc -huiHBdBaY7m4uNK4/ZOi1JitocO7wpRsX/eRJ4AuNrro8EHHAe0= ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/daveCert.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/daveCert.pem deleted file mode 100644 index c5c769cb5..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/daveCert.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEszCCAxugAwIBAgIBBDANBglghkgBZQMEAw4FADBXMQswCQYDVQQGEwJDSDEb -MBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MQ4wDAYDVQQLEwVTSEEtMzEbMBkG -A1UEAxMSc3Ryb25nU3dhbiBSb290IENBMB4XDTE2MDkyMjEwMzcwN1oXDTI2MDky -MjEwMzcwN1owWDELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJv -amVjdDEOMAwGA1UECxMFU0hBLTMxHDAaBgNVBAMME2RhdmVAc3Ryb25nc3dhbi5v -cmcwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDa0Mg8XicEZYIYmuet -XWekjDifPbi7WyIOUPV5LajXuxhMGd/NAaRrJb13D+GHLdsY2uwaa7Cv+VMyfWDc -qD5RDQw0hYY+zdRYt4Hk4GNDiZZOYcqXQCi/ZCcU7k9Prd/nurBk4FcwsnMh06UE -mS7mTEG7SphP8WxfjQpHRBLOXlq3tAfm0nzV4Ee5VosQmuDmFiSpoOW0a+KxR5Sj -OjmyKMx828lRvBhC0vtRCsAzIUMAeoeTH9Fo6Q4/nwV2bNOKGpFcs5tVWs4xarql -MBEKyx0OFwD/LZC1xDN+0JsgP3/6EzHzJHIPQVs9wMLoK+vFXNRPKoE2Nb1mesN8 -jGuqJGdrsWeN+r2ANjFi0NcaO/HU90inVmCKKJDQEtZBXzD66MqAznbDLxgx2cJM -N1whWat6jTZqa7i3FffB/1gB4a1DmA1CQlKihkSPA6epWGKo0MSPEOCgSywAn9VC -1LCPftSDUAVn1sHbH5g20Llv8yPRjiiTuY74G60OJPOTDncCAwEAAaOBiDCBhTAf -BgNVHSMEGDAWgBTkyc2M8ohtHacu1155MaVmVTXOAjAeBgNVHREEFzAVgRNkYXZl -QHN0cm9uZ3N3YW4ub3JnMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwuc3Ry -b25nc3dhbi5vcmcvc3Ryb25nc3dhbi1zaGEzLXJzYS5jcmwwDQYJYIZIAWUDBAMO -BQADggGBAISXAxemOSUmXqkf7cgTQHpreMH1Y9LPJxZUUq5GVErmPzhLaZDSqZSy -ZXcu3EWPA0RElaYBd9CSgFx0I89tw41dIYOLDyLnrEDHmcsgcJl74YYBSzebB/TJ -OGXtV3S9M9OF1vSdugaXI1hDXck7cODUR6nyZAWOp5kBSItAH5bglCRtaQlAuSxM -wRWYhBErUR5tZvu0loCN+11hVg/ddQ3r+FeHUt35KNenxkd6hWlHljbPv/eTtqgc -/5VGEC96I2rD6WNcszj/SKK40zA9GuF1mIwNKEdcYnPRxoszlD6C7cdGJZ8VpJLc -d7sO0QJur5HNtj6oUbM3HuHAaZBjg7uh5GDj+RehhKCybYyJQ1fu4iRaNYKdPwZh -/F6hBRLytkt1qjJhngmBmQU4Ent8GL0Zn6Q8/HvbTP/xw4VXkY9JHdMIkzH8zokd -TVjkunPPt+zdzeMq4hOewYR8HfiKcAnNUG7eO6PnUvC2NKsqX8a7/z0OV68XybZs -gjC1FqvMvg== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/daveKey.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/daveKey.pem deleted file mode 100644 index 85ad0d826..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/daveKey.pem +++ /dev/null @@ -1,39 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIG5QIBAAKCAYEA2tDIPF4nBGWCGJrnrV1npIw4nz24u1siDlD1eS2o17sYTBnf -zQGkayW9dw/hhy3bGNrsGmuwr/lTMn1g3Kg+UQ0MNIWGPs3UWLeB5OBjQ4mWTmHK -l0Aov2QnFO5PT63f57qwZOBXMLJzIdOlBJku5kxBu0qYT/FsX40KR0QSzl5at7QH -5tJ81eBHuVaLEJrg5hYkqaDltGvisUeUozo5sijMfNvJUbwYQtL7UQrAMyFDAHqH -kx/RaOkOP58FdmzTihqRXLObVVrOMWq6pTARCssdDhcA/y2QtcQzftCbID9/+hMx -8yRyD0FbPcDC6CvrxVzUTyqBNjW9ZnrDfIxrqiRna7Fnjfq9gDYxYtDXGjvx1PdI -p1ZgiiiQ0BLWQV8w+ujKgM52wy8YMdnCTDdcIVmreo02amu4txX3wf9YAeGtQ5gN -QkJSooZEjwOnqVhiqNDEjxDgoEssAJ/VQtSwj37Ug1AFZ9bB2x+YNtC5b/Mj0Y4o -k7mO+ButDiTzkw53AgMBAAECggGACY1lwGTn1SRNSp+wj3vtY1yPuDvsjZlL4k4c -eT7KCSjsxZ23jG6O6/KI0+LImKsiznH4LqsW2ofK3wBkMx3RIp6sMrrFgoZfx8Oz -EvfMvY0LF77jJjkxzjEkF6DTq4nOpYIb4zt78u9HYWmo4YuCZaFcmT2Haq4CaiVx -Fm1dWM77rNtaIPR9aKTS3L9vcLkiKkk7LoCMppSzH8QdNAb9r85iJu09W6kXcgtd -10rd2x2PnDy9IGoaLTdHXPWnOmVDviFgCp9zxBk4g/SWDR2AdHOgg3D2mvOmFkVK -SLxr8RKhzzQfbRQuV4F3so9QVfkKyH8xsOpjAqjQwJC1LIWMJipzmc8o/AnUw0Rj -UvU1sDYV8MHimgoftG000vB72hws8tv/XQHl13Tig8y46lSOYxavBJZuHjPPhkQF -YlsfyUV5B11EmlyZ+KsNCHj9vXGRL6bw3Hu1UeG5cnXBXNkPq7ssNpgwdJrpqcW3 -8KWtl7w/b68ZLwyMpxKbmUNIyNkJAoHBAP9KBnqa91RA8gg0/Kp91NLiNXT9ibN3 -cQ6Y6HXuCWrKIKVKMmxRkhM9lMzOVfVVw5ydWZ3B5tzMiIfVCnyzs357vxBGsQEk -TQ9I/kdFuR1gSMZVbXSH1Cbf/Ealg7j/w5/3WpQSaszUN2dmkJ64I3iEWELjT/VV -RaxEhdNmZiRieOglkpvt+4X2Cr5oKXUofb11QX8bBmPnZklWUTuEfQu2KFc7T2im -2ZonJKdxRMMFcnHqS3StX8OYqK8qqTC9hQKBwQDbbMIAp2omxd+iiN4hCIgZ1mK3 -HzBBwam6A/ZLqbByB4Ch1TNRK959xtJW6FLibZPYCi12b1ILwjOVO7aQHKnhKItX -rhwAdhaBd3tJTxu2jDB0Bx1UkKbTDQ3bipnLY+VX/r/rMKbRsWgzejLs/CjafOj7 -OaFSpQOiQfOkpGKpwTab2H0CYqCMxK/4VYBP/NWwM0o0gaL5dJCjZ5i72CnHtmx7 -3D69TCieFY7RiDyf4Pix0tonwD5FfVHfH1SpjssCgcEAxJIcYQW4EhEcDIO4VhMj -7+msndOn1x/OVx4YSM4sRCU1c/Co2M0KfHQ7gmQSviD2yT5DxfyLJlL7ghPhylmY -iXkBiqfUHXv1NiLPYNPoER2Vi9o1uLfp/LEVkNRbk/SkjiUpgsCXqfZyXtUT4JML -BP5q874SUGcDif0NStUbK0MDtEVSGWzq8qCcbzbHTWYLQ/non9WQWxbPpQKo8/o1 -SvJNJ7YMlBl9jnw7dg76kmw8TkjJJyNkjLickpx3wIb9AoHBAIx01s6SW9nL6fZh -xEbC7lQTrobn2P0OmbWv2ZXfXknv0YBGOB4qhbZfcb8d4gh8+hldknJwmcVbH6fU -XG1tW7T8Pg33LoeBD7D6KZnooKW+oTl0YGsEWTVZ8tfopb/TBzjHolRLhU1PUZM6 -EqUuWHxbXsuJvWForaXMr8hhTaK6QlmKP6MqPPk+4iGFoagSATtT6Zkorokd+4QN -yW/c1Am6FUFH34VO3eUriYtIuP3ihW9WuDyfy3yx1pmLtab/9wKBwQDbBXYm9ugE -wRSIxCywJ+aPNRQKanCKORwQMNJZ80rrXIs7saomY4Os+utJpOhoksTJB7mAn3ij -kopmXn6NOsXdOlp9Ty55YRylGmOIQpsO7kSfylE1NFioHqksuQndbUwZFbskI0cN -egyoihqnbfoLyxGu1/M521IseW3AwFIc0gAGdQ7i4ZXVlXOXWvdZFxnpd6PAfFMb -J9mOicxHQ6Yv5b30RUvSIN+LHnUNGGk9XAxCH/jKtU7886jD6f34ru8= ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/moonCert.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/moonCert.pem deleted file mode 100644 index bea7e81f8..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/moonCert.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEyDCCAzCgAwIBAgIBAjANBglghkgBZQMEAw4FADBXMQswCQYDVQQGEwJDSDEb -MBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MQ4wDAYDVQQLEwVTSEEtMzEbMBkG -A1UEAxMSc3Ryb25nU3dhbiBSb290IENBMB4XDTE2MDkyMjEwMzU0N1oXDTI2MDky -MjEwMzU0N1owWDELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJv -amVjdDEOMAwGA1UECxMFU0hBLTMxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5v -cmcwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCcPfHpuwuPBQ/0FTT6 -ENKjbxcGfVozz5Q7mfleee5DwIMH4yqkQeA297vUUEPwap/Z2Frmt9HHkeFdvDoF -kwJN1SzmjEexo6XksbCnxbgbUFLGh9VPvLN+eZb/6U8RHbMmdds6VV9bxSgRuwB9 -ekKv950m8G7XSSTVUeOucwkgMaU1zg1F7ToNxhJv/sCBE3q6Y9Cv65HOfmMVcnJE -6PHTSAfz0bNkho1yLKJjBoJkUF24HK1SFovxEowD4zFasHUgJCATuEhNle8kmDZS -4R763eVcxJ8qhkfJTaxMG1y1dqfqt/9eYLQ7cF/tFPCgWYO8mUCmB+kvVAh7yAfW -GL826RNiySb7NZg+QkDNzALIybKFkVi/SvSnJstYjWFnzF5OvsxJu0iay/GXybHA -bvBG1ZLkEp3SSR7+CisIQjwBhmPfc0AbnyJfj7PvjnPhQ01MODVueMHZ9PDhzQAP -tM4hTvpmySEYqPgntkzN5DlhcswVGamqfSn2htKpfCDrZ1cCAwEAAaOBnTCBmjAf -BgNVHSMEGDAWgBTkyc2M8ohtHacu1155MaVmVTXOAjAeBgNVHREEFzAVghNtb29u -LnN0cm9uZ3N3YW4ub3JnMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEIGA1UdHwQ7MDkw -N6A1oDOGMWh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbi1zaGEz -LXJzYS5jcmwwDQYJYIZIAWUDBAMOBQADggGBAAHZATrdzGmUIq+0+EdA1AbPdcaT -UDKJvDS30JyOkUnAv5jr63PHyfw+RS92zgE2UyB4+u43BiggBNmTNCjpaEUmViAo -tdywkzIKm7q3dr0078IZ8LU8Wo+hoeRNkBJOxdgflsSislQYDeTd7syoQ4BW7whs -jjFK2Lbthd+/33Iw3LMekYuZF7ZUbHY7D3nlBidrmTIQQCvOnsW2lJi/S83FEYzl -noK+of3eo4Ryg1/428FHts26PxSmnHv+ckj9R4Jf5kH8kd1WhrgDyHQMnihWlUJ2 -pintDBgislbZytqiBOGeYpbpxKl57zHs421wmUs329asu7zgfJFnCynkUgvuRXdc -gDJ+DAiVaXCJlYnk36P87028SR9/C0JLzHA3O5CcfUdFEUs0BvVe1D3b9kC28rdA -5V86DFCL+gp6rB+wDtq6YnCddaNk+ZCs/QAPidqOFAytaBBKaagMIFk+wlsFge79 -ZssIfKy33Frluw0HCj0LNs2tjWvG4Ku8xkFO1Q== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/moonKey.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/moonKey.pem deleted file mode 100644 index f24b3ebf3..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/moonKey.pem +++ /dev/null @@ -1,39 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIG4wIBAAKCAYEAnD3x6bsLjwUP9BU0+hDSo28XBn1aM8+UO5n5XnnuQ8CDB+Mq -pEHgNve71FBD8Gqf2dha5rfRx5HhXbw6BZMCTdUs5oxHsaOl5LGwp8W4G1BSxofV -T7yzfnmW/+lPER2zJnXbOlVfW8UoEbsAfXpCr/edJvBu10kk1VHjrnMJIDGlNc4N -Re06DcYSb/7AgRN6umPQr+uRzn5jFXJyROjx00gH89GzZIaNciyiYwaCZFBduByt -UhaL8RKMA+MxWrB1ICQgE7hITZXvJJg2UuEe+t3lXMSfKoZHyU2sTBtctXan6rf/ -XmC0O3Bf7RTwoFmDvJlApgfpL1QIe8gH1hi/NukTYskm+zWYPkJAzcwCyMmyhZFY -v0r0pybLWI1hZ8xeTr7MSbtImsvxl8mxwG7wRtWS5BKd0kke/gorCEI8AYZj33NA -G58iX4+z745z4UNNTDg1bnjB2fTw4c0AD7TOIU76ZskhGKj4J7ZMzeQ5YXLMFRmp -qn0p9obSqXwg62dXAgMBAAECggGAHb2g3efv5FKHXePniK5JGjkcPe0AjZo20j2V -/UjidN0hVBAG3ut3PZ9cjqaUuB/ju7j2XLKi6QU4y/n3ZXY9Wwl4GY6cWxEWk/jK -8rStPe3FQ+s5TItT84A7oQ0NMunfXzPR/kGf/D0ESpO5HSl3pj1RGcdsoehXbY+/ -8kYNd6Zbl2lYl3X3tgV9Hvp0NF2739z+LW5++7qNK9j0LW/WEGzGrr+9ESaXqCMc -6hKkIWo23MQArf6Ctunb4yWNEIFEDi1r9DzMbZN/lVhDx77Q0KYLH1P31R5rOc1G -NYXPF4F3CSfUsgd48dB2/1FCTnDJ4PmOU/R1L8jAgnSOroTAYDVzY4DJ7vyKGvIE -DL7eKlbwOfS5swyANUKgHO6QiHt9WzcNUGpeinTa3wJ4KoAdG+lzDMuiwRFdSRRU -z7t1ptTf2LuCAtva2daP2SPed+ITg2QB6X4BSQkqR0vPYBQIZAtFjMWH78E2PLrD -01+LpOj8TBRerd834etDODg4ddiRAoHBAMiYg7hWfChw3SdnmAmkhDAZN80pvsUU -bzzAiQ5EI59JYMoi/amYyLd6hUK4Z8g4gcdXzBYw9iwJuj8LMpPBZlplAxVnFdId -23I+GNDmcX2ovOpl6skKy1grNhBigxRUQUGsS9oxrYeuy2VymDzeZPCQmrrhsXk/ -Mac237nncJj2n8I5RtDOoSOFD0+grs7MXs4P+W2HHzWgkN7mBgKeFfUPLI3Kyy3p -F7tXegtJqIJsXlfZ/fzR40QTy7/VbwAW/wKBwQDHZVDYtYe4YoHKdwtAqs/J08QA -29fGkM4ZawLNTY4jz9rdtOuBWg0FPAo82x21xlbRQLsaTKzy9O6a3cQ5oaKtKCh/ -XmKCssrnzJsYZYnhkP4f4VXK8nai/9LFo8TWhB8hNy62GGmfXffsqhAIqIqZA02F -/mOfR6Wrqs7yfzYnJnVsjbR1B2zSiNAYKtk1VtQdGjuagSn/dEyhSCaQRXotXUKX -SJDzPf/H2mj97Cg+3bCtdE/h//N1/cmV/5QEx6kCgcEAh1ua7oW1bBiUsuVNi5wu -8sHhjJiRuS0LzsPg9/Z0zyRVorCv2IRXVK/hQl9q8Ilo0VnmRkctphO+UJI+w8Nq -TK8CwKt55vnsvY83cac+h9uX9tdk8dpN0qX96lp/NvWPv0ADQy3oebkyWLdWESTE -miwJrPdkqXtCByKZHzoUGbO5o/bAWWBFDdHYvhOgQb1Yb9YJqqXWInrBpxcykQuZ -p25g0yE3rzgtomXp3boLck6r7r4TjEkZATQWddERAM+DAoHAEW4w6BDOYXbzA6Du -ceO8sFb7vlt5fFkyOxSYtRu/fi/wYQssvy0BEGEUQAejjD1fX4F6Ga10PPTeWtli -CuuvTdXB3IiCsgwxIpxHPpW5vOcw39aR6mDRsCQO58oOLfZ0xjGNustdiFntj1m6 -dxdMrl2UjE8VpFneCKiw2I/4SunYv/mPOd/BSpI9Jq+wNzJ07mpZpYL/Cd6/yCWH -gXshWA/b/1+PlEPqNS1JmlDnn78/b5pIVWhLfxgFZEBoTxapAoHAY/58nLcWpvpY -3IZC0fBuR7usTACbxr9Z4okHzJUNnoJe+MSE+wQwuE3nP+vc1CrmBSwCjN2wyVLc -gy3idN77NthU9l0oElrPbGFKdFEaa85IcKtnfnspzmvo9AJn2wveZUAlZAzu2zBN -vKI8ubXgoS56uHQnNsWOIugTW/P1I8FnlD4jPItaACGJ3yZWolh9g/WOGS29qJvV -E/6hT4QPPXPZFEnOKO0/3YsMXBwcnEqm2mQ+c4rGMKrTcynk4KaE ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanCert.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanCert.pem deleted file mode 100644 index 29ad5b942..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEazCCAtOgAwIBAgIBADANBglghkgBZQMEAw4FADBXMQswCQYDVQQGEwJDSDEb -MBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MQ4wDAYDVQQLEwVTSEEtMzEbMBkG -A1UEAxMSc3Ryb25nU3dhbiBSb290IENBMB4XDTE2MDkyMjA5NDA1NVoXDTMxMDky -MjA5NDA1NVowVzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJv -amVjdDEOMAwGA1UECxMFU0hBLTMxGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBD -QTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAJpHGoOCJSiZoJhPXHqF -XWvrY8zyGwlUCiwphOobq4nhqo2EchTuKdPvCckxtXp/pF5IJsXpptbMmNUmgN7K -VMI/zmI9estFUZg8hn5LSMAbnm102W3xLzM6FRJWMcwe2gajg/NCww02mPsohONC -R4nNMUgYOZdesPDmtYUKk3sr5ZNdpBL6hESBMzFYmYLBzaoeseuzra7U850tF9JU -YfpJStBXNDz8iVPCqOkgKf1hFrPNNxtmsBW68V2ARmYNzqnaP3nLs/U43zZQiT6t -b+zcAE1h6RGgVXjF1b1KG64J153n0YELrC2TpaF2JAGQVvzQgxoZbgiWCKt0m7wx -Qb7P3euy8MxsMGmqHDMtztrg6AAzRKoJN56qHqdP2qExc32uu/BwfmbFv7MLxKQw -g0VykfWBSNyx/2HMDHw79idgFpzHr2nj4CDqB6QLWtRMCWtlT8R7rlz5JlcsJY1U -7Rlwokje9Ctj/5gToXctnLbo+j2506GLtbhxNOaH1s7GswIDAQABo0IwQDAPBgNV -HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU5MnNjPKIbR2n -LtdeeTGlZlU1zgIwDQYJYIZIAWUDBAMOBQADggGBAF+Q4zABKa1ZWohHqsTgru6v -4ru0Pnfbmg3vhlc5ur93Sd0C+fX+e+78n+0QpUNa0N9Vw54r/aF4ki0ceL4Dl4w0 -aXcDa2ozl/hksSeKwIp14W/NHTAjzP2aNpN5/dqd1DM+vojJhlcArepuVVH+NIKt -YYUXwvsjJN9OAAKkMCbnda8gOnKMGJkVIUOTz2DOyzqd5iQ3h3zxzluP4KIya5/k -FZV0wXy8v7phLGgbPJ5DtGuTCjao7+nF6lLkJ+/l3vPC1luB4/UbMGML4GxVwVIM -riCepPT1I9CNuHy2qKpsEmCv8zb5pxXrxv0uIYn8MZx7VCnLuD61AOqIExTYvxv2 -Z3JbOuOsgHJeMKJbhY8r8HkktNLOeLrOW2KSilNpE915EFN0exGMC3zG4IgzRc9u -kGGDVV9BsTkAYjQrWBuuWqxy8TCRPNpe6hnVJIQLLjE9M1V/PW3MD5ObndgT8jA3 -sMMwCxo+S11MZIcKCgnCCcGhgTLT7rFpC0hwRa6dkA== ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanKey.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanKey.pem deleted file mode 100644 index acf3199c7..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/strongswanKey.pem +++ /dev/null @@ -1,39 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIG4wIBAAKCAYEAmkcag4IlKJmgmE9ceoVda+tjzPIbCVQKLCmE6hurieGqjYRy -FO4p0+8JyTG1en+kXkgmxemm1syY1SaA3spUwj/OYj16y0VRmDyGfktIwBuebXTZ -bfEvMzoVElYxzB7aBqOD80LDDTaY+yiE40JHic0xSBg5l16w8Oa1hQqTeyvlk12k -EvqERIEzMViZgsHNqh6x67OtrtTznS0X0lRh+klK0Fc0PPyJU8Ko6SAp/WEWs803 -G2awFbrxXYBGZg3Oqdo/ecuz9TjfNlCJPq1v7NwATWHpEaBVeMXVvUobrgnXnefR -gQusLZOloXYkAZBW/NCDGhluCJYIq3SbvDFBvs/d67LwzGwwaaocMy3O2uDoADNE -qgk3nqoep0/aoTFzfa678HB+ZsW/swvEpDCDRXKR9YFI3LH/YcwMfDv2J2AWnMev -aePgIOoHpAta1EwJa2VPxHuuXPkmVywljVTtGXCiSN70K2P/mBOhdy2ctuj6PbnT -oYu1uHE05ofWzsazAgMBAAECggGATQJoHDP3K2yAKvcWYPw4VVni79b8IuxlxYSW -GavlNQbFtS1jKsp1a5p65oifH34ehId8fzcx9i+brG4zTsJti6cA9K3eoR/Ban3v -3pPixS4kJ1v3+ra1CluYUBZhdhQCXeT6RQ/SwEI8G8auiqg3gHRCAMxC1ynHpgBr -pHTSiF2xk51e/LA7HNznOl8RBaGK8TuwMUj3zfjzf8YWCYHghGhYZWXaKAUg4YQd -/3x0KUvw4qBxvQZFqBswRy10NpX2CAe/ha+AFSK5KlcjXBybvllOnrE8wnInfcC2 -Aef0kbGsMvulRuiNDR+HWIava1vHhYHqQ6rFIiOqN8Eq2bREuZFQrvbZJleztSOv -n23uiRr0E1LpHCC8lnsa4nLOP7T7k+P0q+/vDyef+ZXCEI7enFyLeyaeYWPdgnZX -1xGVtn079t6OkoU60GuDOmfZaix4Sx7WfDHD70iTImAgW+ysqgI9JHCwC4wEJAE5 -azkUZOiCszv3QEBddAuuRvpHCxsxAoHBAMqAju3lV7VylfC+DPaQp2vgbxYkPeLi -+nLiA4f3KQ4yGrKul6tQGnV/L1i48RPTVFq0nz4dZ/FQ84J3DLhb8QajoReJtpEm -rzxzvKDgg8gf66BQVUCxJHzfOLDAUylqrHZ8hPbFT+JEg6A8N4cI7TfuqdG2FPZf -jHzQEcz3ZpV0UM+z6JWQCxGaphvf4OH4GHZbl+cIl7Ifsauv07DrAELZfFX5Y6Au -3QGgzPDfUyiqHT/Qr1ChmE11gR8tSfvIgwKBwQDDCRMeAIXaN27YcWnMvlGSbeT0 -5bTTeqvBc0bEuBO7pBckU9mmq+AeHL7fiVf1auHnmZrXuyTdjel0ivUChIR1h8hN -/QkwAgFWGP6JwYukK+yLl5J0sDY6TPKa1hgeVzv3PVqYDGfrxNWYwh4YQKFg4Ba0 -OoA5zYB9HgyWEPsLiKixeft2lVBFeMndwcNLgyUfEVnnYNCg7jasMBjwEzq/ZXd+ -Qj4Im2fB25VHe4qW9cOmoaXnqBDi03X/u3IJ0hECgcAb8R9HvjSbCeOco2zAfPdN -EFvjrz6G1xD91yfrk/QrTEiYzTSKY/QysEkFMge515g1J+UtOfuEtcnT/79WlQEu -DFgHGm6BmtflPIcTn8cvTxBBP7Rzx72kKVz2LqOK/HgtpULnlhROwWt0KbrzvAyX -giwWjsxXrpmBA2jhYmXaS4F3F3kJYiXU2QUApaSvKX+enUbZjzr3Th5C9XD9YX/Y -uY/JgS75BF5kgh6lQfuEieydSJtYQeP1FDir56DkyCcCgcAVt/L7Ck/dhwK+85I2 -jJME3Vv7sYC7dBOgTTf6PA1mfdVd5EB+gPFKKSVQOzkiSS6y3bYSg/KNAXqX0cmK -6Drf46j4lk7pm6+OaOYfbQAh3gpPWSej+uNvBpaVi3XQGyLAW4K1H9yKsraedi9n -v/q4kPu2QjV5Olsuk6QPKgDqveMbMFxCTkpMEjFYknUu+YGuvf3m+C8DXMOV1R1R -zrJiEeiGlNXXm4aoXc130lgSi3eoHKQe8eY/fBDN04/VbCECgcEAtXL9CAd7L7rD -yIdFrEt36FhQF8PovFb4pokhZ/sI0uN0kCcwl5OCmeqaiq5ecxHTb9ACVWbe5YIC -J1cGvNd1k0yJieXk7DUuguCIJ/PpaTEuaLEaZtdtcqrGsljgFgkrKXhIL0SfVMda -CTgHD+CawFG5ZV7m7RpuQg5Q5Lz0/1tMgvbMSZOWZnolwXLKmLZ2VGEJYoHY+7ua -DMVScCE8kdgXXxxKodQz0x4fVPArKULS+dt1QSK3SPoI1JpZdgkl ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/sunCert.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/sunCert.pem deleted file mode 100644 index f1c086ee9..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/sunCert.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIExjCCAy6gAwIBAgIBATANBglghkgBZQMEAw4FADBXMQswCQYDVQQGEwJDSDEb -MBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MQ4wDAYDVQQLEwVTSEEtMzEbMBkG -A1UEAxMSc3Ryb25nU3dhbiBSb290IENBMB4XDTE2MDkyMjEwMzUzMFoXDTI2MDky -MjEwMzUzMFowVzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJv -amVjdDEOMAwGA1UECxMFU0hBLTMxGzAZBgNVBAMTEnN1bi5zdHJvbmdzd2FuLm9y -ZzCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBALqBhFVeobbsy2Xe6HmR -2M5zGwS33zs9pfrdF6h01AOOHjOeymWTAwHHNIGb2VlRTQ5jlqV6cW0kKMwPA4G/ -W/QWJDVhyltda8Eh6uZs5owTBN/eKQ783Vd7TJkhq4UtNBMhVly56aq75DU7YiJu -pzR4na6jOIsW14nmzow4t2dbyCRzrjIlAXvCr2e6fKuDKUQA6RAeeuTVnfuf2MuA -xAnqQXJkJ/vT5/+hb3WH6HQYp/UMjvu8bIEJZ8elyNR3ojHQehBPK+ADlW2VrHhC -ZFKP2YbEJObSGCmQdfL6P/J5wB5+q3s/m3pZqOJf94XLUZ/LdPC6e00cZyFMBi/G -/AcbQJEfU9PXbsBNSkbeIfz7AkcdR1ijfYPyrDovGT6wYs/oaB4SL/qb0OHIhLgt -WX+gHpRFJyP0YekbiJBI7orDZOsy+hYvSdkVg012ObyXVE25kIaEKW5l98lnSci5 -/by2ivyA4WoLmDrolBymOe41l2cFv2w92ucItPCSwm9GoQIDAQABo4GcMIGZMB8G -A1UdIwQYMBaAFOTJzYzyiG0dpy7XXnkxpWZVNc4CMB0GA1UdEQQWMBSCEnN1bi5z -dHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg -NaAzhjFodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4tc2hhMy1y -c2EuY3JsMA0GCWCGSAFlAwQDDgUAA4IBgQACXiUqwisoOZUH3CPfi+aGaluK3mO7 -nj/gX5X9oE2JC3haWjbnC9fsKai72U8makp12xCpWjHsuiytVlXiiSCRxBGAaFm0 -cy2AI4Ttj+4+GAaI4BkqYBTApdSSXXUH3X4Lwb4LReX+16TsJ4E+d2U/j70gyGRK -F/KgkKj/Bi4F//4/uXHPbgp2istKmkQ4wlcUb5EdM0tUiAUwYGMhdUhSryq4+7y8 -1QaPGg0Zv3nvGgoj332BOczflmNzoonXcihZk97iMRc/TvBOoizvuH9COCSbw/AB -hnVG1lyTQjBAcE2U4MP5yUVuIqBgPnKtbyN3gf30Iq3g/ThVekchrYGO3PWMWAzS -ecfr2yN11BC6nDca039Yub41AuzQqBQR1gY5sHouXNTx4Bs0g4xk+3rGa8MMgI0+ -jXhDVAorQFYuACDuto6skRtkcmXJ/1psvVEv5dcKAHdZCNKkgtXe2XoVvrjNxnPw -MTVros8o+8Bz2R4qArLjwrZtvYI+czZx6dk= ------END CERTIFICATE----- diff --git a/testing/hosts/winnetou/etc/openssl/sha3-rsa/sunKey.pem b/testing/hosts/winnetou/etc/openssl/sha3-rsa/sunKey.pem deleted file mode 100644 index a694bbb8f..000000000 --- a/testing/hosts/winnetou/etc/openssl/sha3-rsa/sunKey.pem +++ /dev/null @@ -1,39 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIG4wIBAAKCAYEAuoGEVV6htuzLZd7oeZHYznMbBLffOz2l+t0XqHTUA44eM57K -ZZMDAcc0gZvZWVFNDmOWpXpxbSQozA8Dgb9b9BYkNWHKW11rwSHq5mzmjBME394p -DvzdV3tMmSGrhS00EyFWXLnpqrvkNTtiIm6nNHidrqM4ixbXiebOjDi3Z1vIJHOu -MiUBe8KvZ7p8q4MpRADpEB565NWd+5/Yy4DECepBcmQn+9Pn/6FvdYfodBin9QyO -+7xsgQlnx6XI1HeiMdB6EE8r4AOVbZWseEJkUo/ZhsQk5tIYKZB18vo/8nnAHn6r -ez+belmo4l/3hctRn8t08Lp7TRxnIUwGL8b8BxtAkR9T09duwE1KRt4h/PsCRx1H -WKN9g/KsOi8ZPrBiz+hoHhIv+pvQ4ciEuC1Zf6AelEUnI/Rh6RuIkEjuisNk6zL6 -Fi9J2RWDTXY5vJdUTbmQhoQpbmX3yWdJyLn9vLaK/IDhaguYOuiUHKY57jWXZwW/ -bD3a5wi08JLCb0ahAgMBAAECggGALeWxq1Cee2XKqEcy7rf1otiwzXhydyG0twex -ysL1aeqPhCSPqm+DTey3/y1bT5+yVtgrOo3nW/SKFa2cL1HoTykjv/9QzSswWVb/ -d7VVByOnD3CcqhOQZPby4rxmeV+mcQ7DMg6OcnXKs07p149jloYYR+HjCFeWs1kZ -e2h5ufXcSxwswipZMxu2DtDV3V9pyFJxCIZ3t9jaCBJOR8ZoeAguEviS3mZHsaEI -zOOlUOzAaI2uokS8bwThhUBHLAJEe5hglKtu5N1QGUo5x62wIK1+4McKqX5cphvW -63N5P7yB30hfc1xM9VP/fi5UzmgccNmHl3ErJX6EbHbVNUv0a/wI6cp+s/DQRZMc -Injr5BJIIFbzmqYST+UxEwtxUL7uV1s/eTXwsFxfQPJnx8rWbeyvGJHU6VykWJ2n -vHmOItgaw4Lm0iw5XH2g0QC7nYFW6qC5sk7LIS3xUzN73JWjV2Z1E5nLfKxZ9sXz -aA8WNrMSHUM/KkFaUri1xoH6gdABAoHBAPfA/gcZaoMemP06BIWKwgb/91GRsvc+ -slrmyZy+nq2bQaJw8oYyUmgWfh9X8pD6eVQN7jJBuA3BMg3L4Vn/R65rcwwYKA20 -pHgZF2MbwRlbBDtFQJe8kmwFu+TkHpGcoo94V6MdpbqoRKwQs66WOcjp4vzRLOL0 -ueynDrAPxpOaNIsr66s7xjd01VwEXYlfOfNBpOF/+3vN+O++k45/rnlEWgLeq6ie -1xkv9vZp4FuNf6gnBXcNhu8aDJvJEMfxnQKBwQDAtqgE9K7Rhq9ht8w8P+QZUGYL -c8mL4IGsPgmucuuheeWpmvLuAhsTxWBQhrO8/eEK4je+li6R/x0HYqgytsnOxlQH -xH8ZsvouPtacUF9pv8x7GLnGlvdxdQzmnjYqR5MzFEX/L8+8skiyY95V/kNiWE/T -X/Q8JgqyQ7VlykHtaToYchEhgY2m2Zxw6YhrI/ghtlP6NwOJDYsFxe7cfVvBQj9K -qtwAidr8pKSLyJFaot+dAdSqAYZxiO90aSt/i9UCgcEAjzv7YR1Xj+CjsFrXfGFB -VYysbnMelYSg1p7w1nb6BAJrir9j5yO2ssi2N+a/rQOyG19GY7XM897K0mEZss88 -oOEsDUT1+x6Bq5FODRVhqQgOxTl/Y3o46MzT2TvtVF/LN8jqWbptMyHPOe8aAoiF -dduKSIGiQsAbsW7PtggY1QLk98T3pfKT4UHhjCZV8XKlbTZ5XYmBWg01q11xr4Ov -2hojM9+KPJ1AXCZ3z/RcKnH+6LdOmIqwhRF5UqOG2SGdAoHAEA+pFTCnWUMWXtiI -pwTUJ9/xgUbXJ1dAt3A8MlPVm5GjOG13jaqTQySSEGQJmti15shPyQyPOQ/ABZuN -VRyy2Q7idftEdIncG/qUvFZefVvE2QWIhiqS2NvehWHuNbvdYsZvxwLfF2TsdiGo -qBYW251smbtHibPJ9G18Ms2WjQjWFK99CgPYIG3GggqUmglXZsfhW9s16jg8u/Bx -JeM0wHia+cgfqdPTcnbuV9ARfTJR3K4IYVrbL58wBc22GF05AoHAQvhfvtieWCJ8 -ATqOBjOcUHJ2WLiOslWsYOoqXy7v2YuVt8XFWAWZmLlzcC+8Tv79lCLpOmpiseQw -kP9Mihi+8T15AmRUUsPREeGb7wCDNbd/KixPimhnelNGPNAV+6DPonSa4WcF9jZk -nDa51PBPWCEPB5GHdbg/E5yiWMbr63bcTQNZxlRDaljNSRPp8xprs+JT1AIZI2wq -hEyK6IMjYIj80jB8JZIM7nNgRhzCKCo7RdR3JMb5tduOgzvEheC3 ------END RSA PRIVATE KEY----- diff --git a/testing/hosts/winnetou/etc/openssl/strongswanCert.der b/testing/hosts/winnetou/etc/openssl/strongswanCert.der deleted file mode 100644 index c11cf21da7e200cb8ea7d42000a2e00416b3bc77..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 953 zcmXqLV%}=d#58vSGZP~d6C;BGFB_*;n@8JsUPeY1Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C>- zA`{anab80p*T4eGrIs~Kj7rEJU}R-rZerwTFlb`rVrpV!WZ3^HKIxThSYE{D6IGt4 zKCekUzcRVJ*tbP@^N+uI3zWZa5Y|gm3lK6aZY!FTTjNyKJ728&p~Z{W>$HV-MjG#W zZ?;(U@ZC=;=br4IeYHY3mL=UnO*2XUXLhgaw+Bp5In0voJZx-;5#hGid1>Fg?(vDl z^WOv(&u8pBZDmulbAO!{XNaF-!TVJbf3N&k_%&spcy9fh|4s547Yl<}WM{j5IDh`& zlk?8^V(qOW%9Gc>RI3l(C^mDmn*Y(5z|OB38iisxJDb_3vSy~pFXsOpa8KC(t^RbI z_fnP`>TTLb?yj1?dxMD6qsd1E3N93>T-oQoPCfXw_FM0RwN!>sFmb_tQXzh^5RZ`0UY zw#{I|!6KfL{ZmS9*5=<`d-8bMYs<^~R|N@Yf7NJVsIW-p`15@#^Ilu2YX_qa_X(VE z+yA|zi~0QXUwkRvLE2hh*WKsd6VQ94*)B_Q`mP3Vc=1wq^^fv>S7+^? zD=IJg3!Y|R=cuGMeRo4&SidT`LH8wRgQ-8 z%6FQZ8kXe;H1*Gp`BdNX@05+|MRTf}%`;XT ${HOST_KEY} # Put a copy into swanctl directory tree + mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/rsa cp ${HOST_KEY} ${HOST_DIR}/${SWANCTL_DIR}/rsa # Convert host key into DER format @@ -308,6 +312,7 @@ issue_cert() HOST_DIR="${DIR}/hosts/${2}" HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${2}Key.pem" HOST_CERT="${HOST_DIR}/${IPSEC_DIR}/certs/${2}Cert.pem" + mkdir -p ${HOST_DIR}/${IPSEC_DIR}/certs pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${3} \ --serial ${1} --dn "C=CH, O=${PROJECT},${OU} CN=${3}" \ @@ -315,6 +320,7 @@ issue_cert() cp ${HOST_CERT} ${CA_DIR}/certs/${1}.pem # Put a certificate copy into swanctl directory tree + mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/x509 cp ${HOST_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509 } From 2a72056cee70330652aa6dec64ea3782552cf710 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 29 Apr 2019 14:53:28 +0200 Subject: [PATCH 09/20] testing: Exclude files that are ignored in Git from the distribution Since the complete hosts and tests directories are part of the tarball this would include generated certificates and keys. --- testing/Makefile.am | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/testing/Makefile.am b/testing/Makefile.am index 0195c8951..0ad9f1748 100644 --- a/testing/Makefile.am +++ b/testing/Makefile.am @@ -2,3 +2,11 @@ EXTRA_DIST = do-tests make-testing ssh start-testing stop-testing \ testing.conf ssh_config config hosts images scripts tests \ README +# exclude all files ignored by Git from the tarball +dist-hook: + if git -C $(srcdir) ls-files --error-unmatch hosts > /dev/null 2>&1; then \ + find $(abs_srcdir)/hosts $(abs_srcdir)/tests -print0 | \ + sed -z -e "s|^$(abs_srcdir)/||" | \ + git -C $(srcdir) check-ignore -z --stdin | \ + xargs -0 -I{} rm -rf $(distdir)/{}; \ + fi From cfeae14b06aa621591642f9f787dddd0d4b4ebee Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sat, 4 May 2019 15:23:57 +0200 Subject: [PATCH 10/20] testing: Deleting dynamic test keys and certificates --- testing/tests/botan/.gitignore | 2 + .../hosts/moon/etc/swanctl/pkcs8/moonKey.pem | 3 - .../hosts/moon/etc/swanctl/x509/moonCert.pem | 13 ----- .../etc/swanctl/x509ca/strongswanCert.pem | 11 ---- .../hosts/sun/etc/swanctl/pkcs8/sunKey.pem | 3 - .../hosts/sun/etc/swanctl/x509/sunCert.pem | 13 ----- .../sun/etc/swanctl/x509ca/strongswanCert.pem | 11 ---- .../moon/etc/swanctl/pkcs12/moonCert.p12 | Bin 3661 -> 0 bytes .../hosts/sun/etc/swanctl/pkcs12/sunCert.p12 | Bin 3661 -> 0 bytes .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 39 ------------- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/sun/etc/swanctl/rsa/sunKey.pem | 39 ------------- .../hosts/sun/etc/swanctl/x509/sunCert.pem | 28 --------- .../sun/etc/swanctl/x509ca/strongswanCert.pem | 26 --------- testing/tests/ha/.gitignore | 1 + .../alice/etc/ipsec.d/certs/marsCert.pem | 25 -------- .../alice/etc/ipsec.d/private/marsKey.pem | 27 --------- .../hosts/moon/etc/ipsec.d/certs/marsCert.pem | 25 -------- .../moon/etc/ipsec.d/private/marsKey.pem | 27 --------- .../alice/etc/ipsec.d/certs/marsCert.pem | 25 -------- .../alice/etc/ipsec.d/private/marsKey.pem | 27 --------- .../hosts/moon/etc/ipsec.d/certs/marsCert.pem | 25 -------- .../moon/etc/ipsec.d/private/marsKey.pem | 27 --------- testing/tests/ikev1/.gitignore | 1 + .../dave/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../dave/etc/ipsec.d/private/carolKey.pem | 30 ---------- .../dave/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../dave/etc/ipsec.d/private/carolKey.pem | 30 ---------- .../etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../dave/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../dave/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- testing/tests/ikev2/.gitignore | 4 ++ .../hosts/moon/etc/ipsec.d/aacerts/aaCert.pem | 19 ------ .../ipsec.d/acerts/carol-sales-finance.pem | 18 ------ .../etc/ipsec.d/acerts/dave-marketing.pem | 18 ------ .../etc/ipsec.d/acerts/dave-sales-expired.pem | 18 ------ .../hosts/moon/etc/ipsec.d/private/aaKey.pem | 27 --------- .../ipsec.d/acerts/carol-finance-expired.pem | 18 ------ .../carol/etc/ipsec.d/acerts/carol-sales.pem | 18 ------ .../hosts/moon/etc/ipsec.d/aacerts/aaCert.pem | 19 ------ .../hosts/moon/etc/ipsec.d/private/aaKey.pem | 27 --------- .../carol/etc/ipsec.d/acerts/carol-sales.pem | 18 ------ .../etc/ipsec.d/acerts/dave-expired-aa.pem | 18 ------ .../etc/ipsec.d/acerts/dave-marketing.pem | 18 ------ .../etc/ipsec.d/aacerts/aaCert-expired.pem | 19 ------ .../hosts/moon/etc/ipsec.d/aacerts/aaCert.pem | 19 ------ .../etc/ipsec.d/private/aaKey-expired.pem | 27 --------- .../hosts/moon/etc/ipsec.d/private/aaKey.pem | 27 --------- .../etc/ipsec.d/cacerts/strongswanCert.pem | 55 ------------------ .../carol/etc/ipsec.d/certs/carolCert.pem | 46 --------------- .../carol/etc/ipsec.d/private/carolKey.pem | 51 ---------------- .../etc/ipsec.d/cacerts/strongswanCert.pem | 55 ------------------ .../hosts/moon/etc/ipsec.d/certs/moonCert.pem | 46 --------------- .../moon/etc/ipsec.d/private/moonKey.pem | 51 ---------------- .../hosts/moon/etc/ipsec.d/certs/moonCert.der | Bin 952 -> 0 bytes .../moon/etc/ipsec.d/private/moonKey.pem | 27 --------- .../hosts/sun/etc/ipsec.d/certs/sunCert.der | Bin 951 -> 0 bytes .../hosts/sun/etc/ipsec.d/private/sunKey.pem | 27 --------- .../hosts/carol/etc/ipsec.d/crls/stale.crl | Bin 560 -> 0 bytes .../hosts/moon/etc/ipsec.d/crls/stale.crl | Bin 560 -> 0 bytes .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../dave/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../dave/etc/ipsec.d/private/carolKey.pem | 30 ---------- .../etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../dave/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../dave/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../ipsec.d/cacerts/research_by_salesCert.pem | 24 -------- .../ipsec.d/cacerts/sales_by_researchCert.pem | 24 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 24 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/duckCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../hosts/moon/etc/ipsec.d/certs/moonPub.pem | Bin 294 -> 0 bytes .../hosts/sun/etc/ipsec.d/certs/sunPub.pem | Bin 294 -> 0 bytes .../etc/ipsec.d/cacerts/strongswanCert.pem | 11 ---- .../hosts/moon/etc/ipsec.d/certs/moonCert.pem | 13 ----- .../moon/etc/ipsec.d/private/moonKey.pem | 3 - .../etc/ipsec.d/cacerts/strongswanCert.pem | 11 ---- .../hosts/sun/etc/ipsec.d/certs/sunCert.pem | 13 ----- .../hosts/sun/etc/ipsec.d/private/sunKey.pem | 3 - .../moon/etc/ipsec.d/private/moonCert.p12 | Bin 3661 -> 0 bytes .../hosts/sun/etc/ipsec.d/private/sunCert.p12 | Bin 3661 -> 0 bytes .../hosts/moon/etc/ipsec.d/certs/moonPub.pem | Bin 291 -> 0 bytes .../hosts/moon/etc/ipsec.d/certs/sunPub.pem | Bin 292 -> 0 bytes .../hosts/sun/etc/ipsec.d/certs/moonPub.pem | Bin 291 -> 0 bytes .../hosts/sun/etc/ipsec.d/certs/sunPub.pem | Bin 292 -> 0 bytes .../etc/ipsec.d/cacerts/strongswanCert.pem | 26 --------- .../hosts/moon/etc/ipsec.d/certs/moonCert.pem | 28 --------- .../moon/etc/ipsec.d/private/moonKey.pem | 27 --------- .../etc/ipsec.d/cacerts/strongswanCert.pem | 26 --------- .../hosts/sun/etc/ipsec.d/certs/sunCert.pem | 28 --------- .../hosts/sun/etc/ipsec.d/private/sunKey.pem | 27 --------- .../moon/etc/ipsec.d/private/moonKey.der | Bin 1187 -> 0 bytes .../hosts/sun/etc/ipsec.d/private/sunKey.der | Bin 1189 -> 0 bytes .../etc/ipsec.d/ocspcerts/ocspCert-self.pem | 22 ------- .../etc/ipsec.d/ocspcerts/ocspCert-self.pem | 22 ------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 24 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../carol/etc/ipsec.d/certs/carolCert.pem | 25 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../carol/etc/ipsec.d/certs/carolCert.pem | 26 --------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../carol/etc/ipsec.d/certs/carolCert.pem | 24 -------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../hosts/dave/etc/ipsec.d/certs/daveCert.pem | 25 -------- .../dave/etc/ipsec.d/private/daveKey.pem | 27 --------- .../moon/etc/ipsec.d/cacerts/researchCert.pem | 23 -------- .../moon/etc/ipsec.d/cacerts/salesCert.pem | 22 ------- .../carol/etc/ipsec.d/certs/carolCert.pem | 26 --------- .../carol/etc/ipsec.d/private/carolKey.pem | 27 --------- .../alice/etc/ipsec.d/certs/marsCert.pem | 25 -------- .../alice/etc/ipsec.d/private/marsKey.pem | 27 --------- .../hosts/moon/etc/ipsec.d/certs/marsCert.pem | 25 -------- .../moon/etc/ipsec.d/private/marsKey.pem | 27 --------- .../hosts/moon/etc/ipsec.d/certs/moonPub.pem | Bin 294 -> 0 bytes .../ipsec.d/cacerts/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../carol/etc/ipsec.d/certs/carolCert.der | Bin 2175 -> 0 bytes .../carol/etc/ipsec.d/private/carolKey.der | Bin 1182 -> 0 bytes .../ipsec.d/cacerts/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/dave/etc/ipsec.d/certs/daveCert.der | Bin 2179 -> 0 bytes .../dave/etc/ipsec.d/private/daveKey.der | Bin 1310 -> 0 bytes .../ipsec.d/cacerts/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/moon/etc/ipsec.d/certs/moonCert.der | Bin 2200 -> 0 bytes .../moon/etc/ipsec.d/private/moonKey.der | Bin 1310 -> 0 bytes .../ipsec.d/cacerts/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../carol/etc/ipsec.d/certs/carolCert.der | Bin 2175 -> 0 bytes .../carol/etc/ipsec.d/private/carolKey.der | Bin 1182 -> 0 bytes .../ipsec.d/cacerts/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/dave/etc/ipsec.d/certs/daveCert.der | Bin 2179 -> 0 bytes .../dave/etc/ipsec.d/private/daveKey.der | Bin 1310 -> 0 bytes .../ipsec.d/cacerts/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/moon/etc/ipsec.d/certs/moonCert.der | Bin 2200 -> 0 bytes .../moon/etc/ipsec.d/private/moonKey.der | Bin 1310 -> 0 bytes .../carol/etc/ipsec.d/private/carolKey.pem | 29 --------- .../dave/etc/ipsec.d/private/daveKey.pem | 30 ---------- .../moon/etc/ipsec.d/private/moonKey.pem | 28 --------- .../etc/ipsec.d/certs/carolCert-sha384.pem | 25 -------- .../etc/ipsec.d/private/carolKey-aes192.pem | 30 ---------- .../etc/ipsec.d/certs/daveCert-sha512.pem | 25 -------- .../etc/ipsec.d/private/daveKey-aes256.pem | 30 ---------- .../etc/ipsec.d/certs/moonCert-sha224.pem | 25 -------- .../etc/ipsec.d/private/moonKey-aes128.pem | 30 ---------- .../carol/etc/ipsec.d/certs/carolCert-002.pem | 25 -------- .../etc/ipsec.d/private/carolKey-002.pem | 27 --------- testing/tests/ipv6/.gitignore | 1 + .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 27 --------- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/sun/etc/swanctl/rsa/sunKey.pem | 27 --------- .../hosts/sun/etc/swanctl/x509/sunCert.pem | 28 --------- .../sun/etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 27 --------- .../carol/etc/swanctl/x509/carolCert.pem | 27 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/dave/etc/swanctl/rsa/daveKey.pem | 27 --------- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 27 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 27 --------- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../ecdsa-certs/hosts/.gitignore | 1 + .../carol/etc/swanctl/ecdsa/carolKey.pem | 8 --- .../carol/etc/swanctl/x509/carolCert.pem | 18 ------ .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../hosts/dave/etc/swanctl/ecdsa/daveKey.pem | 6 -- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 19 ------ .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../hosts/moon/etc/swanctl/ecdsa/moonKey.pem | 7 --- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 20 ------- .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- testing/tests/openssl-ikev2/.gitignore | 2 + .../hosts/moon/etc/ipsec.conf | 24 -------- .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 27 --------- .../hosts/moon/etc/swanctl/x509/moonCert.der | Bin 952 -> 0 bytes .../hosts/sun/etc/ipsec.conf | 24 -------- .../hosts/sun/etc/swanctl/rsa/sunKey.pem | 27 --------- .../hosts/sun/etc/swanctl/x509/sunCert.der | Bin 951 -> 0 bytes .../carol/etc/swanctl/ecdsa/carolKey.pem | 8 --- .../carol/etc/swanctl/x509/carolCert.pem | 18 ------ .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../hosts/dave/etc/swanctl/ecdsa/daveKey.pem | 6 -- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 19 ------ .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../hosts/moon/etc/swanctl/ecdsa/moonKey.pem | 7 --- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 20 ------- .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../carol/etc/swanctl/pkcs8/carolKey.pem | 7 --- .../carol/etc/swanctl/x509/carolCert.pem | 18 ------ .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../hosts/dave/etc/swanctl/pkcs8/daveKey.pem | 8 --- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 19 ------ .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../hosts/moon/etc/swanctl/pkcs8/moonKey.pem | 7 --- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 20 ------- .../etc/swanctl/x509ca/strongswanCert.pem | 15 ----- .../moon/etc/swanctl/pkcs12/moonCert.p12 | Bin 3661 -> 0 bytes .../hosts/sun/etc/swanctl/pkcs12/sunCert.p12 | Bin 3661 -> 0 bytes testing/tests/swanctl/.gitignore | 2 + .../carol/etc/swanctl/x509/carolCert.pem | 22 ------- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 22 ------- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 27 --------- .../carol/etc/swanctl/x509/carolCert.pem | 25 -------- .../hosts/dave/etc/swanctl/rsa/daveKey.pem | 27 --------- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 24 -------- .../moon/etc/swanctl/x509ca/researchCert.pem | 23 -------- .../moon/etc/swanctl/x509ca/salesCert.pem | 22 ------- .../hosts/moon/etc/swanctl/pkcs8/moonKey.pem | 3 - .../hosts/moon/etc/swanctl/x509/moonCert.pem | 13 ----- .../etc/swanctl/x509ca/strongswanCert.pem | 11 ---- .../hosts/sun/etc/swanctl/pkcs8/sunKey.pem | 3 - .../hosts/sun/etc/swanctl/x509/sunCert.pem | 13 ----- .../sun/etc/swanctl/x509ca/strongswanCert.pem | 11 ---- .../hosts/moon/etc/swanctl/pubkey/moonPub.pem | 9 --- .../hosts/moon/etc/swanctl/pubkey/sunPub.pem | 9 --- .../hosts/sun/etc/swanctl/pubkey/moonPub.pem | 9 --- .../hosts/sun/etc/swanctl/pubkey/sunPub.pem | 9 --- .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 39 ------------- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/sun/etc/swanctl/rsa/sunKey.pem | 39 ------------- .../hosts/sun/etc/swanctl/x509/sunCert.pem | 28 --------- .../sun/etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 27 --------- .../carol/etc/swanctl/x509/carolCert.pem | 26 --------- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 27 --------- .../carol/etc/swanctl/x509/carolCert.pem | 25 -------- .../carol/etc/swanctl/x509ca/researchCert.pem | 23 -------- .../hosts/dave/etc/swanctl/rsa/daveKey.pem | 27 --------- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 24 -------- .../dave/etc/swanctl/x509ca/salesCert.pem | 22 ------- .../moon/etc/swanctl/x509ca/researchCert.pem | 23 -------- .../moon/etc/swanctl/x509ca/salesCert.pem | 22 ------- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 27 --------- .../carol/etc/swanctl/x509/carolCert.pem | 26 --------- .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 30 ---------- .../carol/etc/swanctl/pubkey/carolPub.pem | Bin 294 -> 0 bytes .../hosts/dave/etc/swanctl/pubkey/davePub.pem | Bin 294 -> 0 bytes .../hosts/moon/etc/swanctl/pubkey/moonPub.pem | Bin 294 -> 0 bytes .../hosts/carol/etc/swanctl/rsa/carolKey.pem | 39 ------------- .../carol/etc/swanctl/x509/carolCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/dave/etc/swanctl/rsa/daveKey.pem | 39 ------------- .../hosts/dave/etc/swanctl/x509/daveCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../hosts/moon/etc/swanctl/rsa/moonKey.pem | 39 ------------- .../hosts/moon/etc/swanctl/x509/moonCert.pem | 28 --------- .../etc/swanctl/x509ca/strongswanCert.pem | 26 --------- .../carol/etc/swanctl/pkcs8/carolKey.pem | 3 - .../carol/etc/swanctl/x509/carolCert.pem | 13 ----- .../etc/swanctl/x509ca/strongswanCert.pem | 12 ---- .../hosts/dave/etc/swanctl/pkcs8/daveKey.pem | 3 - .../hosts/dave/etc/swanctl/x509/daveCert.pem | 13 ----- .../etc/swanctl/x509ca/strongswanCert.pem | 12 ---- .../hosts/moon/etc/swanctl/pkcs8/moonKey.pem | 3 - .../hosts/moon/etc/swanctl/x509/moonCert.pem | 13 ----- .../etc/swanctl/x509ca/strongswanCert.pem | 12 ---- .../carol/etc/swanctl/bliss/carolKey.der | Bin 1182 -> 0 bytes .../carol/etc/swanctl/x509/carolCert.der | Bin 2175 -> 0 bytes .../swanctl/x509ca/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/dave/etc/swanctl/bliss/daveKey.der | Bin 1310 -> 0 bytes .../hosts/dave/etc/swanctl/x509/daveCert.der | Bin 2179 -> 0 bytes .../swanctl/x509ca/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/moon/etc/swanctl/bliss/moonKey.der | Bin 1310 -> 0 bytes .../hosts/moon/etc/swanctl/x509/moonCert.der | Bin 2200 -> 0 bytes .../swanctl/x509ca/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../carol/etc/swanctl/bliss/carolKey.der | Bin 1182 -> 0 bytes .../carol/etc/swanctl/x509/carolCert.der | Bin 2175 -> 0 bytes .../swanctl/x509ca/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/dave/etc/swanctl/bliss/daveKey.der | Bin 1310 -> 0 bytes .../hosts/dave/etc/swanctl/x509/daveCert.der | Bin 2179 -> 0 bytes .../swanctl/x509ca/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../hosts/moon/etc/swanctl/bliss/moonKey.der | Bin 1310 -> 0 bytes .../hosts/moon/etc/swanctl/x509/moonCert.der | Bin 2200 -> 0 bytes .../swanctl/x509ca/strongswan_blissCert.der | Bin 2086 -> 0 bytes .../carol/etc/swanctl/pubkey/carolPub.pem | 9 --- .../carol/etc/swanctl/pubkey/moonPub.pem | 9 --- .../hosts/dave/etc/swanctl/pubkey/davePub.pem | 9 --- .../hosts/dave/etc/swanctl/pubkey/moonPub.pem | 9 --- .../moon/etc/swanctl/pubkey/carolPub.pem | 9 --- .../hosts/moon/etc/swanctl/pubkey/davePub.pem | 9 --- .../hosts/moon/etc/swanctl/pubkey/moonPub.pem | 9 --- .../hosts/moon/etc/swanctl/pubkey/sunPub.pem | 9 --- .../carol/etc/swanctl/pubkey/carolPub.pem | 9 --- .../carol/etc/swanctl/pubkey/moonPub.pem | 9 --- .../hosts/dave/etc/swanctl/pubkey/davePub.pem | 9 --- .../hosts/dave/etc/swanctl/pubkey/moonPub.pem | 9 --- .../moon/etc/swanctl/pubkey/carolPub.pem | 9 --- .../hosts/moon/etc/swanctl/pubkey/davePub.pem | 9 --- .../hosts/moon/etc/swanctl/pubkey/moonPub.pem | 9 --- testing/tests/tkm/.gitignore | 1 + .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes .../hosts/sun/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes .../hosts/sun/etc/tkm/sunKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes .../hosts/moon/etc/tkm/moonKey.der | Bin 1191 -> 0 bytes .../hosts/moon/etc/tkm/strongswanCert.der | Bin 956 -> 0 bytes testing/tests/tnc/.gitignore | 1 + .../hosts/alice/etc/swanctl/rsa/aaaKey.pem | 27 --------- .../hosts/alice/etc/swanctl/x509/aaaCert.pem | 25 -------- .../hosts/alice/etc/swanctl/rsa/aaaKey.pem | 27 --------- .../hosts/alice/etc/swanctl/x509/aaaCert.pem | 25 -------- .../hosts/alice/etc/swanctl/rsa/aaaKey.pem | 27 --------- .../hosts/alice/etc/swanctl/x509/aaaCert.pem | 25 -------- .../hosts/alice/etc/swanctl/rsa/aaaKey.pem | 27 --------- .../hosts/alice/etc/swanctl/x509/aaaCert.pem | 25 -------- 370 files changed, 16 insertions(+), 6382 deletions(-) create mode 100644 testing/tests/botan/.gitignore delete mode 100644 testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/pkcs8/moonKey.pem delete mode 100644 testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/pkcs8/sunKey.pem delete mode 100644 testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509/sunCert.pem delete mode 100644 testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/botan/net2net-pkcs12/hosts/moon/etc/swanctl/pkcs12/moonCert.p12 delete mode 100644 testing/tests/botan/net2net-pkcs12/hosts/sun/etc/swanctl/pkcs12/sunCert.p12 delete mode 100644 testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/rsa/sunKey.pem delete mode 100644 testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/x509/sunCert.pem delete mode 100644 testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem create mode 100644 testing/tests/ha/.gitignore delete mode 100644 testing/tests/ha/active-passive/hosts/alice/etc/ipsec.d/certs/marsCert.pem delete mode 100644 testing/tests/ha/active-passive/hosts/alice/etc/ipsec.d/private/marsKey.pem delete mode 100644 testing/tests/ha/active-passive/hosts/moon/etc/ipsec.d/certs/marsCert.pem delete mode 100644 testing/tests/ha/active-passive/hosts/moon/etc/ipsec.d/private/marsKey.pem delete mode 100644 testing/tests/ha/both-active/hosts/alice/etc/ipsec.d/certs/marsCert.pem delete mode 100644 testing/tests/ha/both-active/hosts/alice/etc/ipsec.d/private/marsKey.pem delete mode 100644 testing/tests/ha/both-active/hosts/moon/etc/ipsec.d/certs/marsCert.pem delete mode 100644 testing/tests/ha/both-active/hosts/moon/etc/ipsec.d/private/marsKey.pem create mode 100644 testing/tests/ikev1/.gitignore delete mode 100644 testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev1/dynamic-responder/hosts/dave/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev1/dynamic-responder/hosts/dave/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-init/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-init/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev1/multi-level-ca/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem create mode 100644 testing/tests/ikev2/.gitignore delete mode 100644 testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem delete mode 100644 testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/acerts/carol-sales-finance.pem delete mode 100644 testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/acerts/dave-marketing.pem delete mode 100644 testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/acerts/dave-sales-expired.pem delete mode 100644 testing/tests/ikev2/acert-cached/hosts/moon/etc/ipsec.d/private/aaKey.pem delete mode 100644 testing/tests/ikev2/acert-fallback/hosts/carol/etc/ipsec.d/acerts/carol-finance-expired.pem delete mode 100644 testing/tests/ikev2/acert-fallback/hosts/carol/etc/ipsec.d/acerts/carol-sales.pem delete mode 100644 testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem delete mode 100644 testing/tests/ikev2/acert-fallback/hosts/moon/etc/ipsec.d/private/aaKey.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/carol/etc/ipsec.d/acerts/carol-sales.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/dave/etc/ipsec.d/acerts/dave-expired-aa.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/dave/etc/ipsec.d/acerts/dave-marketing.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aaCert-expired.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/aacerts/aaCert.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aaKey-expired.pem delete mode 100644 testing/tests/ikev2/acert-inline/hosts/moon/etc/ipsec.d/private/aaKey.pem delete mode 100644 testing/tests/ikev2/after-2038-certs/hosts/carol/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/tests/ikev2/after-2038-certs/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/after-2038-certs/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/after-2038-certs/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/tests/ikev2/after-2038-certs/hosts/moon/etc/ipsec.d/certs/moonCert.pem delete mode 100644 testing/tests/ikev2/after-2038-certs/hosts/moon/etc/ipsec.d/private/moonKey.pem delete mode 100644 testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.d/certs/moonCert.der delete mode 100644 testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.d/private/moonKey.pem delete mode 100644 testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/certs/sunCert.der delete mode 100644 testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/private/sunKey.pem delete mode 100644 testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/stale.crl delete mode 100644 testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.d/crls/stale.crl delete mode 100644 testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-init/hosts/carol/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-init/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-init/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-init/hosts/dave/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-init/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-init/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-resp/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-cr-resp/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-loop/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-loop/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-loop/hosts/moon/etc/ipsec.d/cacerts/research_by_salesCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-loop/hosts/moon/etc/ipsec.d/cacerts/sales_by_researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-pathlen/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-pathlen/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-pathlen/hosts/moon/etc/ipsec.d/cacerts/duckCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-pathlen/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-revoked/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-skipped/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-skipped/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-skipped/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-strict/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-strict/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-strict/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-strict/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca-strict/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/multi-level-ca/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/multi-level-ca/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem delete mode 100644 testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/ipsec.d/certs/sunPub.pem delete mode 100644 testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/certs/moonCert.pem delete mode 100644 testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/private/moonKey.pem delete mode 100644 testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/certs/sunCert.pem delete mode 100644 testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/private/sunKey.pem delete mode 100644 testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/ipsec.d/private/moonCert.p12 delete mode 100644 testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/ipsec.d/private/sunCert.p12 delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/moonPub.pem delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/ipsec.d/certs/sunPub.pem delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.pem delete mode 100644 testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/sunPub.pem delete mode 100644 testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/certs/moonCert.pem delete mode 100644 testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/private/moonKey.pem delete mode 100644 testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem delete mode 100644 testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/certs/sunCert.pem delete mode 100644 testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/private/sunKey.pem delete mode 100644 testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.d/private/moonKey.der delete mode 100644 testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.d/private/sunKey.der delete mode 100644 testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/ipsec.d/ocspcerts/ocspCert-self.pem delete mode 100644 testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/ipsec.d/ocspcerts/ocspCert-self.pem delete mode 100644 testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert.pem delete mode 100644 testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem delete mode 100644 testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem delete mode 100644 testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert.pem delete mode 100644 testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/certs/marsCert.pem delete mode 100644 testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/private/marsKey.pem delete mode 100644 testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/certs/marsCert.pem delete mode 100644 testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/private/marsKey.pem delete mode 100644 testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/carol/etc/ipsec.d/cacerts/strongswan_blissCert.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/carol/etc/ipsec.d/certs/carolCert.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/carol/etc/ipsec.d/private/carolKey.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/cacerts/strongswan_blissCert.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/certs/daveCert.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/private/daveKey.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/cacerts/strongswan_blissCert.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/certs/moonCert.der delete mode 100644 testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/private/moonKey.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/carol/etc/ipsec.d/cacerts/strongswan_blissCert.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/carol/etc/ipsec.d/certs/carolCert.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/carol/etc/ipsec.d/private/carolKey.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/cacerts/strongswan_blissCert.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/certs/daveCert.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/private/daveKey.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/cacerts/strongswan_blissCert.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/certs/moonCert.der delete mode 100644 testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/private/moonKey.der delete mode 100644 testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/ipsec.d/private/carolKey.pem delete mode 100644 testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/ipsec.d/private/daveKey.pem delete mode 100644 testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/ipsec.d/private/moonKey.pem delete mode 100644 testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/ipsec.d/certs/carolCert-sha384.pem delete mode 100644 testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/ipsec.d/private/carolKey-aes192.pem delete mode 100644 testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/ipsec.d/certs/daveCert-sha512.pem delete mode 100644 testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/ipsec.d/private/daveKey-aes256.pem delete mode 100644 testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/ipsec.d/certs/moonCert-sha224.pem delete mode 100644 testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/ipsec.d/private/moonKey-aes128.pem delete mode 100644 testing/tests/ikev2/two-certs/hosts/carol/etc/ipsec.d/certs/carolCert-002.pem delete mode 100644 testing/tests/ikev2/two-certs/hosts/carol/etc/ipsec.d/private/carolKey-002.pem create mode 100644 testing/tests/ipv6/.gitignore delete mode 100644 testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/swanctl/rsa/sunKey.pem delete mode 100644 testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/swanctl/x509/sunCert.pem delete mode 100644 testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/swanctl/rsa/daveKey.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem create mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/.gitignore delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/swanctl/ecdsa/carolKey.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/swanctl/ecdsa/daveKey.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/swanctl/ecdsa/moonKey.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem create mode 100644 testing/tests/openssl-ikev2/.gitignore delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/ipsec.conf delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/swanctl/x509/moonCert.der delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/ipsec.conf delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/rsa/sunKey.pem delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/x509/sunCert.der delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/ecdsa/carolKey.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/ecdsa/daveKey.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/ecdsa/moonKey.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/pkcs8/carolKey.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/pkcs8/daveKey.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/pkcs8/moonKey.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/pkcs12/moonCert.p12 delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/swanctl/pkcs12/sunCert.p12 create mode 100644 testing/tests/swanctl/.gitignore delete mode 100644 testing/tests/swanctl/crl-to-cache/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/crl-to-cache/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/dave/etc/swanctl/rsa/daveKey.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/moon/etc/swanctl/x509ca/researchCert.pem delete mode 100644 testing/tests/swanctl/multi-level-ca/hosts/moon/etc/swanctl/x509ca/salesCert.pem delete mode 100644 testing/tests/swanctl/net2net-ed25519/hosts/moon/etc/swanctl/pkcs8/moonKey.pem delete mode 100644 testing/tests/swanctl/net2net-ed25519/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/swanctl/net2net-ed25519/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/net2net-ed25519/hosts/sun/etc/swanctl/pkcs8/sunKey.pem delete mode 100644 testing/tests/swanctl/net2net-ed25519/hosts/sun/etc/swanctl/x509/sunCert.pem delete mode 100644 testing/tests/swanctl/net2net-ed25519/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/net2net-pubkey/hosts/moon/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/net2net-pubkey/hosts/moon/etc/swanctl/pubkey/sunPub.pem delete mode 100644 testing/tests/swanctl/net2net-pubkey/hosts/sun/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/net2net-pubkey/hosts/sun/etc/swanctl/pubkey/sunPub.pem delete mode 100644 testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/rsa/sunKey.pem delete mode 100644 testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/x509/sunCert.pem delete mode 100644 testing/tests/swanctl/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/ocsp-disabled/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/ocsp-disabled/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/carol/etc/swanctl/x509ca/researchCert.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/dave/etc/swanctl/rsa/daveKey.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/dave/etc/swanctl/x509ca/salesCert.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/moon/etc/swanctl/x509ca/researchCert.pem delete mode 100644 testing/tests/swanctl/ocsp-multi-level/hosts/moon/etc/swanctl/x509ca/salesCert.pem delete mode 100644 testing/tests/swanctl/ocsp-signer-cert/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/ocsp-signer-cert/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/rw-cert/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/rw-dnssec/hosts/carol/etc/swanctl/pubkey/carolPub.pem delete mode 100644 testing/tests/swanctl/rw-dnssec/hosts/dave/etc/swanctl/pubkey/davePub.pem delete mode 100644 testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/swanctl/rsa/carolKey.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/swanctl/rsa/daveKey.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/swanctl/rsa/moonKey.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/swanctl/rw-eap-tls-sha3-rsa/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/carol/etc/swanctl/pkcs8/carolKey.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/carol/etc/swanctl/x509/carolCert.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/dave/etc/swanctl/pkcs8/daveKey.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/dave/etc/swanctl/x509/daveCert.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/moon/etc/swanctl/pkcs8/moonKey.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/moon/etc/swanctl/x509/moonCert.pem delete mode 100644 testing/tests/swanctl/rw-ed25519-certpol/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/carol/etc/swanctl/bliss/carolKey.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/carol/etc/swanctl/x509/carolCert.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/carol/etc/swanctl/x509ca/strongswan_blissCert.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/bliss/daveKey.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/x509/daveCert.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/x509ca/strongswan_blissCert.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/bliss/moonKey.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/x509/moonCert.der delete mode 100644 testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/x509ca/strongswan_blissCert.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/bliss/carolKey.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/x509/carolCert.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/x509ca/strongswan_blissCert.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/bliss/daveKey.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/x509/daveCert.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/x509ca/strongswan_blissCert.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/bliss/moonKey.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/x509/moonCert.der delete mode 100644 testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/x509ca/strongswan_blissCert.der delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/carolPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/davePub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/carolPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/davePub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/sunPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/carolPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/davePub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/moonPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/carolPub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/davePub.pem delete mode 100644 testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/moonPub.pem create mode 100644 testing/tests/tkm/.gitignore delete mode 100644 testing/tests/tkm/host2host-initiator/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/host2host-initiator/hosts/moon/etc/tkm/strongswanCert.der delete mode 100644 testing/tests/tkm/host2host-responder/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/host2host-responder/hosts/moon/etc/tkm/strongswanCert.der delete mode 100644 testing/tests/tkm/host2host-xfrmproxy/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/host2host-xfrmproxy/hosts/moon/etc/tkm/strongswanCert.der delete mode 100644 testing/tests/tkm/multiple-clients/hosts/sun/etc/tkm/strongswanCert.der delete mode 100644 testing/tests/tkm/multiple-clients/hosts/sun/etc/tkm/sunKey.der delete mode 100644 testing/tests/tkm/net2net-initiator/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/net2net-xfrmproxy/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/net2net-xfrmproxy/hosts/moon/etc/tkm/strongswanCert.der delete mode 100644 testing/tests/tkm/xfrmproxy-expire/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/xfrmproxy-expire/hosts/moon/etc/tkm/strongswanCert.der delete mode 100644 testing/tests/tkm/xfrmproxy-rekey/hosts/moon/etc/tkm/moonKey.der delete mode 100644 testing/tests/tkm/xfrmproxy-rekey/hosts/moon/etc/tkm/strongswanCert.der create mode 100644 testing/tests/tnc/.gitignore delete mode 100644 testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/swanctl/rsa/aaaKey.pem delete mode 100644 testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/swanctl/x509/aaaCert.pem delete mode 100644 testing/tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/swanctl/rsa/aaaKey.pem delete mode 100644 testing/tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/swanctl/x509/aaaCert.pem delete mode 100644 testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/swanctl/rsa/aaaKey.pem delete mode 100644 testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/swanctl/x509/aaaCert.pem delete mode 100644 testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/swanctl/rsa/aaaKey.pem delete mode 100644 testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/swanctl/x509/aaaCert.pem diff --git a/testing/tests/botan/.gitignore b/testing/tests/botan/.gitignore new file mode 100644 index 000000000..c67f9a278 --- /dev/null +++ b/testing/tests/botan/.gitignore @@ -0,0 +1,2 @@ +*.pem +*.p12 diff --git a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/pkcs8/moonKey.pem b/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/pkcs8/moonKey.pem deleted file mode 100644 index 491d36430..000000000 --- a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/pkcs8/moonKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIKF9TGaPwvVmqoqowy6y8anmPMKpSi9bKc310bbXBMtk ------END PRIVATE KEY----- diff --git a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509/moonCert.pem b/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509/moonCert.pem deleted file mode 100644 index e67b224b6..000000000 --- a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509/moonCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB9TCCAaegAwIBAgIBATAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDQyWhcNMjExMjA0MjI0MDQyWjBaMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRwwGgYDVQQDExNtb29uLnN0cm9uZ3N3YW4ub3JnMCowBQYDK2VwAyEA -4X/jpRSEXr0/TmIHTOj7FqllkP+3e+ljkAU1FtYnX5ijgZwwgZkwHwYDVR0jBBgw -FoAUI06SkApIhvYFXf55p3YDOo5w2PgwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdz -d2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBBBgNVHR8EOjA4MDagNKAyhjBo -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fZWQyNTUxOS5jcmww -BQYDK2VwA0EAOjD6PXrI3R8Wj55gstR2FtT0Htu4vV2jCRekts8O0++GNVMn65BX -8ohW9fH7Ie2JTSOb0wzX+TPuMUAkLutUBA== ------END CERTIFICATE----- diff --git a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 9c5a06945..000000000 --- a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIBljCCAUigAwIBAgIIBrMLy9hl4GQwBQYDK2VwME8xCzAJBgNVBAYTAkNIMRsw -GQYDVQQKExJzdHJvbmdTd2FuIFByb2plY3QxIzAhBgNVBAMTGnN0cm9uZ1N3YW4g -RWQyNTUxOSBSb290IENBMB4XDTE2MTIwNDIyMzU1NloXDTI2MTIwNDIyMzU1Nlow -TzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEG -A1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5IFJvb3QgQ0EwKjAFBgMrZXADIQAKMO0G -lvjTLC7k8FoSp78rca3x++nvf9xPACSqnBg5UKNCMEAwDwYDVR0TAQH/BAUwAwEB -/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCNOkpAKSIb2BV3+ead2AzqOcNj4 -MAUGAytlcANBAEimNd3OTwM42KM0D+E6nJMHbrGSLA1XAukJDH9w30tzkbQHxTSv -OPEN02ar1L30xfYVySJhV9i5cE8QkhThcAQ= ------END CERTIFICATE----- diff --git a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/pkcs8/sunKey.pem b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/pkcs8/sunKey.pem deleted file mode 100644 index b83f62c13..000000000 --- a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/pkcs8/sunKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIF8vNpW9TVnEB+DzglbCjuZr+1u84dHRofgHoybGL9j0 ------END PRIVATE KEY----- diff --git a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509/sunCert.pem b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509/sunCert.pem deleted file mode 100644 index 70af02017..000000000 --- a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509/sunCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB8zCCAaWgAwIBAgIBAjAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDAyWhcNMjExMjA0MjI0MDAyWjBZMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRswGQYDVQQDExJzdW4uc3Ryb25nc3dhbi5vcmcwKjAFBgMrZXADIQBn -HgUv3QIepihJpxydVVtgTsIqminFnbGSER5ReAaQ+qOBmzCBmDAfBgNVHSMEGDAW -gBQjTpKQCkiG9gVd/nmndgM6jnDY+DAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dh -bi5vcmcwEwYDVR0lBAwwCgYIKwYBBQUHAwEwQQYDVR0fBDowODA2oDSgMoYwaHR0 -cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2VkMjU1MTkuY3JsMAUG -AytlcANBAC27Z6Q7/c21bPb3OfvbdnePhIpgGM3LVBL/0Pj9VOAtUec/Rv2rPNHq -8C1xtc/jMCsI/NdpXSZCeN0lQgf0mgA= ------END CERTIFICATE----- diff --git a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index 9c5a06945..000000000 --- a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIBljCCAUigAwIBAgIIBrMLy9hl4GQwBQYDK2VwME8xCzAJBgNVBAYTAkNIMRsw -GQYDVQQKExJzdHJvbmdTd2FuIFByb2plY3QxIzAhBgNVBAMTGnN0cm9uZ1N3YW4g -RWQyNTUxOSBSb290IENBMB4XDTE2MTIwNDIyMzU1NloXDTI2MTIwNDIyMzU1Nlow -TzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEG -A1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5IFJvb3QgQ0EwKjAFBgMrZXADIQAKMO0G -lvjTLC7k8FoSp78rca3x++nvf9xPACSqnBg5UKNCMEAwDwYDVR0TAQH/BAUwAwEB -/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCNOkpAKSIb2BV3+ead2AzqOcNj4 -MAUGAytlcANBAEimNd3OTwM42KM0D+E6nJMHbrGSLA1XAukJDH9w30tzkbQHxTSv -OPEN02ar1L30xfYVySJhV9i5cE8QkhThcAQ= ------END CERTIFICATE----- diff --git a/testing/tests/botan/net2net-pkcs12/hosts/moon/etc/swanctl/pkcs12/moonCert.p12 b/testing/tests/botan/net2net-pkcs12/hosts/moon/etc/swanctl/pkcs12/moonCert.p12 deleted file mode 100644 index 365da741f555c7c8a71e6691ae20e32d976d9bab..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3661 zcmV-T4zlquf(}Un0Ru3C4i5$iDuzgg_YDCD0ic2o00e>!{4jzI_%MP9uLcP!hDe6@ z4FLxRpn?dXFoFo20s#Opf(Vrc2`Yw2hW8Bt2LUh~1_~;MNQUL0TQ|)0%G7sUrdF!Ia)~77*N82 zXQC|utgJ`f7!Cvl>KP66?DOmO&+(%#LIuo;UyxnKv%K(ew3F*R{?@KW9I?lFIT@G< zoHl4Vt$rF`6Fv^ZSmAZc9!av&@~D`NrYi~ zxtv&^oOmWoFLOqGJhk3F`H z)~^*-ZX0o``yK^Ls?)LV|7ChQ7CQRNrXdWvSacYCR{xP~ANbvUNXF@b^%#`5#bgd2 z`ZjU4;b)&q>O@t(Wca8cM0Kf3a6G1(U1$al0$IH8{?81JqyzP!lN--voO^wnBo#p+ z^Vc&lR&)kRQp;&~==Et^i-?D}q1xTyUHxD|)^Ta7zb<4R^-=K2TMqfAx}uvGGzJsV zX+=fuo-4tSjdR|@2ZV*U}qCC?x}`?TXpM7sI?~_+@gT1*`zU6WGLc1*RtBypVsDf0HyG&QG&8;0dx( zzt2p8PALJ1f$VRRpc#?$6+9_^RLGb3U6p1Wy|qIMbDQew2-(h3u^*6~9P0(25R94@ zTSL9J^Rj|hT$0OIo?T1I={;eF>&MRVJ_3(ajS3vGHt^_U6}N+8djvsZTFeRZCB?kz za%fT*(e>k6()ZphY2aC#kCA*nYQK8`hS}fBqRVCDbR7V>qBLl#DKig+;RN`|g4j1z zLH!2ZOFTGu@0feAUik#I15=YkZ712)@_zvrT&87j^-$3Zi&qCSM8MLX;0(?3ce&WM zkDP?8y`RfB*~NPN{Hw5pY@Z@+VxeEl|5aUl3S%@22d?n_c*^d`a&ONz#Mg`$psE)P z?)^R|mq+JEO0g<|cISF7YnueLuuZbSRDYIRTl9lnG`2hX| z$Mau4Y($g{jX-UiiS=UX zMphF>hF-2P0W3D~=h%PZz=k=>u8!zcoSs*AY%YPzv`8(9ho*P34wcg*Ola@4>hVkqX317#8S7QA@3P%tb*Lp1K!L*_`8?*m9zQE^_eoQCPsuBQ^|GLjz zeq9dNO(j*|8{mGlDUymcm2c3_5ufZx=P*ZnUyG^>lGXZ$)*%jk1Q4m2u(TvAWZz{+ zQa|_d!|idOwAJ47O;K_$G#u=A#poLS9=}OGPN5;UZVG{&Ee8J<3)n2a`SsZN?E+q( zmF!W)XxG?&Vf`S)H1oZYJb2Ux7;;{1p=IyY+SkptKWZN<#oox+zU7=fbZFd=_?9G12Lq2G@{ZJ3a2dWU;ANo!b{KXjh+g5zW4q`-u>WJj%mtaSZK zA=bnlwE@((>>e4OtxZk~%P>hVI9vHSjJxw`Wo6H8;9ig{|C7+jl4dClht(NEyzY%r z)xk2;eWWB)9Ba_HD;bkctLTLxSTBPVtZx&XFh-ti1tj>L#%b^d>w3NNnG-^q*YLnq zS!W4!z53TPfY)lvA~U>-R`k z8AyekCSA>wMB|KTase}%pH2O&6u=*gFuJ)-_T^7AIXyf+VY-eC>;oI08hP9w?98N& zas z-cduJz+`n)GEp#g8a*cT z`Cg)v@nJzH_nl#OwRD>g$8ePIK5W{^Vgs?I%4{(~;66$(E_c1K!ZMDy2S%%Wb8AF` zm0R>OGk`_JfTUk1pac)W3tUZ6bh7RcvCN1Q0OBF|4&WGTf|jZ_tfquUsQ_FY_7E~` zKDz)e@GzKLUZe{^~B#FRov1A;emuv+DOU|&MIIX*5qsS^eCR<4{f2ZQQY z8jX5vZ62*FZE&LNQUOfv7Zr zgm!Y>PJiJhP3`NW>0@kEz%_cJez%MLNGYfiR{A^W)%JGeZz?|`I7^3zz*G07bIdQT zsVG1cXST2Xyz7jwPA!62LrFDNi@ie4|A5D*aYdlV!C+bykQm?nSWNz6aWcCD_N&;s zUy}`;FR2gqm&Yjbe0nark3B4;fY4a}6I-?>M^!^>x+7r=6;fVeMM(vpUU}&U)Q%SI zrB6<(w#XPevQ~AMG{)?6|D2{I5}iLK>^h}?kJ(sdQ#`mam0~#BXvCeP86^Fe^zrVX zQkyCwUdn3)Md!>Z8HX(*T_Kivh#^+|{r0WyrVWBuaIo+|cm8(v?MazJRxpNC0n4A9 z2+7*d0o2@`z^nb9hi9ktWo7rV`(604^E{r)=Eq1n2z_qK(l_excWEtQ zweaX0c^HlO1HUe^BCHVF_gCt@1o47DyE<~A32D%`@jCr&FZC>Xz1Pu9o^w22QQyk! zGK!k{X^7ucs6QyIKVA~1{Z4~=o{40oJ3#++xAsa8j6hSPJ1?e}D5swE5LS?!J~%Fu z#BMl0aEWWgfN&pK%f@Q?gS2zz?1soI%~|;e-h%%gzEC*FA@PCWRQv?T>^KQl(7m3O zG4i9eM9VqyhUn(XRq=XvM`kQH0Z(BQZfR^vB-^^tvv!y!5qLVcb}I>4Y{YJi5syqz z9fkf9-y(N|ZtYEIIYu%HPoZd4yjDEot=b?tU^gE3hr9I*A|E(lB%97zij9h0iGzpO z<7nn+jk+et`J9Py(XwTtSBfTQc1Zyflc>cgi$V15g*nrM zlj4TBHdcMO zHl36z8*njpt5v)14xnsehH5C7Y50ip{naHmLV<~kxly}5j@}txZ;2d(f1}@G* zB&k z>Iq(RN=Pp`dq*xpO-K{R#TvkQ1TV^tb7q9XM0dI zuif`6?wHiaEd7@)j)@|&qT--%DGk*fru`Gp)VmjG+aS;RDJ06B*`vDP$XQm9)z-k_ z9eIG%Oii{6y*ZUjmvHZIu#0#FH!0x3BvmmbFe3&DDuzgg z_YDCF6)_eB6lqThP?f8aXmx}XR&!!w{y=GIFfcJNAutIB1uG5%0vZJX1Qc`&n{B>C f_(2!{4jzI_%MP9uLcP!hDe6@ z4FLxRpn?dXFoFo20s#Opf(Vrc2`Yw2hW8Bt2LUh~1_~;MNQU_Jy}sJ9caQb?jI`x=bQHmzTE5-uP&)eIDR@_= zIy-lbI0vjdZq>{T2d2n7B4L9?ToaHq@B>-maCF$eh~sV3IwAWKF;{uy3z^kNOlg$- zk^wW*K6Cp&6fomCZ}#@S9;74Voc(H?SM$;bki%6ql<` z-CTgSEqD<9Hub{3OPnI)rqrCxmp1Is^+%EXu6E+&ylB2hbSi&d`8@kJz{qqLUX~3y z4s1?RR>?;CO9|28xqjUudn81$S$K^iGl}GEIX#D5#sQ#8`1l@sMNWqCqap*mH>P)6sO5@jMe0AsL#j|-_119EnSN$|b@7+-` zKtB(A3FH`H7*pD1^6t~SrWv2lgqx*J(58y1{_-cPb$ams8A-)z$rAu`3|m+-o^i&y z8-k0sZQ9X1c&u8W#|4k4@jdM7Y{xU_hEMr)VvL&+IiOpaLW(Lqd(4hRJl(v4%6o_~ zah9=M561E{M=RIc;W2%%oG zYh)e_=%hF@jtRgEa@SgNLggA*#NEanYi;L@@PQLGltJg^uEK|C;~%*~KcgYr>1rh= z_>*?}Lp}f{P!9b~*xB+stWpyqw^cTk#gbXzYV0_eHtc2Y5+^8Z5=t4z$FVoT<;d!u z%--_emFD=ew))DHJ@j2g*&9VdSQKLi{$T9L#2>QOLXw>DSR0g}teNOzjIG#w#?lo7cD&s3ff5(X7DhQ0JnT1) zIqUKBgl$toaP+Syt^!}}6EeG5Ore?|_7zEohlf+{DxN?ebS`RZ?ry2xXBcAJiMO(T z<#t)Mc?A#1Y~x&#*_d*d?!MN*1Z0k>K5O076p{c@`~1u8QtYr-Ks`1)ZrdUNJ`^EP zH7@V3$Sn`hsLTvd2Mb`xk-CsCs$VuBLdxyFm=S^ZMeECu$3dMEE0d{fHMuJM`c8cx zx(`(Q6gV@*qIo7%r`y#m@k4)N`%{sR@rRSRD=#B>Up!`t)x@keL2@IMMb z;&*q#r!tVBB6lDBHpzr;*tP%Nnu@6Oy`Yfer6)TP%NQUn=yiCSe@NTohD=N-?o}tR zD=mIqnjw(Dt1=?X?WJo8hc)}`bY9TtQuYypXsH2O8BoR}h%PBx{-mY-`z%LP42zq* zYjL(SUylbWa^HfQLefmm=U{MRRWXzvJjM!mNB|F!q*jK! z7!=!!TArQTG6Ng9bytsQPo2|fP_MOH#*9>$r)sL1|1|emU^n>|XHCTY-_;;oL(Np@xH?ro1Em7tWcg-`u%d0i)g}75eXVL)zta2rcOnhwn3KnVqJz=F2PYI z$wocJWh{#TO$`oHjlxT%-xr|gzku6rFmILWYk1Lv)Sa$jb^E7q69{|wC6c07OfZQ~ zkQ*#C0E_5_qRp)pGt-gb!(<(!5}3(TcSw)&n}yx&l3)MVE*!8E(uD0sFW|5@AokxE#+cpaAY$$tzYOC25f%AP9#_xSXQb+;B zwmsaPGq46XSZdQ(s$5i*5EFxVU@y`SEA6#8kJ86*{BrJfI;YO;eTX&3AwZ!;MymFe zUabl_PE^zE!D_7Y7KJ)~8orS= zJ08^culbp|wk9S$o#BW)$TiRaJ_!Nq$|E+N>9fk>hQ}p#w%>l(4p+cl^|9&V-rAQW zD$B4`*V50^voY=%liU?T1k#hk@abW8lo%+CWBAt$ZNXv-o+z6HQ4YRYsxUaVzM+I3 z>q!0{PD^JY^Yd;X*4x2lpO5fJaSTQz6l9%ZxcTtEr~ng#Qs5UdLthmQ+=<}>mZ@hW zJ`C)4EH9})yICe-mD$&0%~9zxX>myb{I~t2 z`Wob{L?2fFKc)^m4!dzU3dpkxLK}9-h7)X;&`$c7PdcUPX%~)770w=UgZeqmjIOUQN1##~zuH-dfifF3Y(LM%igqKz9bRH|((OXv6DTs(#j}PP_N= z%Re-TC)MzM=Hz(~w6w9Uvnn<_7RQWgKY$JVO2ELD)(A_A8DPtaND@VV9m^ym8@t3^ z3+rDh0ezU*I9?}ZLBr9isAhDoA0qB8yrMEy3lCt}FoFd^1_>&LNQUcsM4VbMl64w_ zFKhLtZQNlW^4Kx!*ivj`<@*$-d7>mZie+NT}=v8&P z_-{mhp_oH5mh5rLx^z^}lLnq7$=9|;4e4g~r<|P$u74H0_K8C$(Zeuf8R;!tPY-kQ6-He{$2)Y^AGy`%k)>wwQw? zW`b%lG<2)o&Vm}Y@hsuQI^^6R&JJcoLG&k|tTKh!2a06UzP^ zFVRuUWXpf$<_j19F=PIAewQP2msg3>S*l2vG3aU-z3=iYEKu(e9s)`%B-oj|w@kde z`J)BNjdrA)hUstgUZ^pl+q+>S52twEf-2Zz`K1dWB&KT+e4jq(me*=i=A0HMr0N82 zZMkBFhfPr7G*KdG0PP^%;pAcn5`(K#l%hgew$#d!QmcHTtD!~aP6sToQ{;0E4H(8m z(LKUHd9wujV^_VT{+4!&v}iTF+zbJjnC}_ztBp!`EP~#4%Su3W?kY<-% zLUqMH&qs;xq{TwiOqm{hP*e~-k3JB7i8mz9`Fz+?18TrCcclH3?(@P%cEy#^g=im(P!)3UsvP63XkJ=Rc8O~9 zgtiKqLGw^$Y`7ocda+h+rN$oh3L@O5?wF%^?ic*eZU>2Sx}HJZOLicB%j1JQOr*ku z$CgQv&O|xSUQYVJ?+=?pNnw^XX@PfcD|V6}scFtpLWjQ#(hm*S8ch8a|J-SiU7A_Yw1 z*%Lih78?wUZ*#V5c}QU|-jcE-S|Uejhe55T#$j)T)cHqdfCkwJ1+$Zp#lLbJ^YWM% zof2i<-|<3Vf``LhAO8broT92!z0+-5p<9pYv`V@8*x&^ zy5I;TjYtJ9Q>YaMc2Vxa;4jdTim}xrHOcmagq^xud%t)n3r@F>BfgxVepelFwixJ{ z)KRX?{!Pv6o)^d>1KjJUC#2caUU4;BbtQ_iZ6eHQg)Lr?BrdLG^nGS<8c!@K(l2a6 zy%UPepk!{Q^T3;l8@Qz{Y8hUw8b|DWeOe@W(8a%yG}#hm7s>z}r3o=5Fe3&DDuzgg z_YDCF6)_eB6gxPc*JlrgnDc&$khJ-eiPOmAz%Vf|AutIB1uG5%0vZJX1QY;}Y_ktf fTC)@Hh$p-Q;7T~RLz)B#m(K%kx?(9M0s;sC?UyX(Qxs7MfdT71PV}rJjTOU8; zGlSpnCrMV9b9}x1|5cr5QrooL(lsBguRbxal2E*%`;h6?{h7&II$5N+`RA8ypQjkG z%94rCeyLV^?e6wDGm<7g`52=A=!2)GsT zo|#OnW|0<`&KiE&_txNf;?f+Zn|GQ%oPB@tii!KSmHlNJ>n^Pks`8r3(%hf+Jg_c~ zo2}@CSV+m9XPw`z@{c_}uC3$h*?W5rxA+E6(S-b${;E00%a7;;yC(eK{dCpYn=WU1 zw_IAizDv{VYc%t+1yUi`TMSlLSWFK-)Xv1r$iTR`ahXBmVgq?#ILa!sNEnDUh{P_x zTfi1*RQG&a?&hseA0)ie^L=k12T~x&B5oksgf*}Q*f_P>7+Dyb7HBatGX7^_Fc1dm zP-WpU;9}zdO0lxCGcy`kf&}GRj0_A6^cLtW&}!4jC@Cqh($`Ne%0Y`ieWd6F$|6T4 zFfjt7l96G4@$oHNr7l{|+&TTnJ2769_f0+WqVqXKk8XIl;>rUF!5U5d=!gF@BQz3w zo$qYl_%tlw9kcG)BOa=0b<6&pPvLEdd+G1Ywdm7qh4Zdk{>V)(I-+t|?6*<)qrG}B z_a*XseQ_~wdMC3;)-vO_^hc@LSFXH|ZJl{2NBB_sd$MFzCNi&;B{Dl+}48gem#HBdrXYX+j2Ll z+V4g1lIQX*_p=HgESRKNeEGYko)_Eqlux%>bm~59J=^orV9$ePCtKXlJ+E_K#9wc2 W!v5IMB+hKx;?FMmD=smHPXPd1m~$rp diff --git a/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.d/private/moonKey.pem b/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.d/private/moonKey.pem deleted file mode 100644 index 4d99866f7..000000000 --- a/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.d/private/moonKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAyi9jPdS7ugWGIVsVoDEvc/UzEk8LM5ua4Tu2SLArTEaODwHm -MPvvkhl7dwj12//qfklihpZtdazxO9XkN3oYIdgt4QLq35ljtIkEGgsPn3a3niFQ -qjkCDj+lKmd9u4ecmGKR5PFUL+LwSU6cXJVNT6p1oXqntWZS8bFu+9y0Zpf30Lf1 -ILyZAgU2WTjSzTHyvu0w52GlbALZ3ILwze/J1DRHtqmPdiiu0qwSekqVBIOPZudR -fl4LBnLIFlR0vOaJ9zpvxuPHKyxFSY3bvAsXsEkVYG/pTyVsx3fELFNFYP+75arN -2UTMjbTSq6+KKUr1WwOmoBpU14Qwq3g4l1PChwIDAQABAoIBACBFB/Xqajv6fbn9 -K6pxrz02uXwGmacXAtVIDoPzejWmXS4QA4l17HrJDmelSnhelDKry8nnYHkTrTz7 -mn0wQ4HDWy86o/okJUG/TKRLd6bf79aRQqqohqd3iQkHk43GyzuXH+oGioVKF0fc -ACDWw4wfjL7FMNdHCZ4Bz9DrHO/ysHe9B6rvSYm3VZRhSxaneIkaLkkDadKpVx3f -XNFlMxY4qKPJYYSoJZ61iMqrO7+rnA93tmyDDs8PKU3BtnpfNrdePgleJHhk8Zqy -Ev2/NOCSUxbKE8NCtLpGTs+T0qjjnu4k3WPd3ZOBAan0uPDekHZeHB/aXGLhYcxx -J5SurqECgYEA+F1gppkER5Jtoaudt/CUpdQ1sR9wxf75VBqJ4FiYABGQz9xlG4oj -zL/o572s0iV3bwFpnQa+WuWrxGkP6ZuB/Z82npc0N/vLou/b4dxvg4n7K+eOOEf0 -8FMjsse2tqTIXKCqcmQnR0NPQ1jwuvEKsXP5w/JOlnRXAXnd4jxsJI0CgYEA0GaT -61ySttUW9jC3mxuY6jkQy8TEQqR3nOFvWwmCXIWOpN/MTTPus+Telxp/pdKhU+mo -PmX3Unyne5PvwleWDq3YzltX5ZDZGJ5UJlKuNnfGIzQ6OcHRbb7zBpQG6qSRPuug -bgo688hTnb1L59nK88zWVK45euf6pyuoI+SwIGMCgYEA7yvE8knyhBXvezuv0z1b -eGHmHp5/VDwY0DQKSEAoiBBiWrkLqLybgwXf/KJ8dZZc8En08aFX2GLJyYe/KiB1 -ys3ypEBJqgvRayP+o/9KZ+qNNRd0rqAksPXvL7ABNNt0kzapTSVDae3Yu6s/j1am -DIL5qAeERIDedG5uDPpQzdUCgYB7MtjpP63ABhLv8XbpbBQnCxtByw3W89F+Xcrt -v55gQdhE4cSuMzA/CuMH4vNpPS6AI9aBJNhj3CtKo/cOJachAGb1/wvkO5ALvLW0 -fhZdPstUTnDJain7vfF/hwzbs/PlhXgu9T9KlLfRvXFdG+Sd4g8mumRiozcLkoRw -y6XPTwKBgDJP+s9wXmdG90HST/aqC7FKrVXLpB63dY5swNUfQP6sa0pFnON0r0JC -h/YCsGFFIAebQ2uOkM3g3f9nkwTp7910ov+/5uThvRI2w2BBPy0mVuALPjyyF1Z2 -cb9zpyKiIuXoXRCf4sd8r1lR9bn0Fxx0Svpxf+fpMGSI5quHNBKY ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/certs/sunCert.der b/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/certs/sunCert.der deleted file mode 100644 index c1efb6719c6435ede4afe4e5466156bc84a9194e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 951 zcmXqLV%}`f#58*WGZP~d6DPyMqEn))of>Kkc-c6$+C196^D;7WvoaXC8gd(OvN4CU zun99cdl*U@h=Vv>!U8^-d8HK!#U(}gdFjFBiFt<729h8tW?>nx_Y`su*a$UVc%!K@+1AvIiJh8JL?G`5A!X zTue=jj12duhIFOBlT_Cmmq2`lU-$XY`er27qR77}} zc&6F?A78sSI?s2mO0!iI`><(KlT59e)TSKXTl4bWR{lPs?^*bm>u&t|%e5nTsqf zjQ*Hh?3z#`#8J*-v`g$D6EhRfk=~3F=ki`uyJa$F|sf=Ezn|QWc<&HPu8o#mSh-Y~E5o;&yG$t(pf z=6zAstBiZSIJWMxkomYeDCF?xg`ytc--(}kE3tRsR$cwZT;_istl@!6JzcJ8{`u3Q znRo2zJdJfauOE9vi=@ambw~1Y=TFs3Ivl&?2H(Tnm3zGZihW4GzNU{^_SO1o^)#Ke O^SLCBwmd#!eg**BcxnOw diff --git a/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/private/sunKey.pem b/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/private/sunKey.pem deleted file mode 100644 index d8fad9aad..000000000 --- a/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.d/private/sunKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA35VUimfpDmNpT/8Q3qnoDlxJ9R+EErSYVraVoUVmH9jSHroB -eqqtDdf3XuHtg2xKTryijBj2H0jeA7HuE1UGwmvZWN1gL5vSrk1OFrT38DmaKa/+ -mtiPqjTJrDGg+OgOz1iHsPsp/4Xx+SCTSy2Ucllfront02sVduDXEGV34Snk6vYV -sRn1BZSlFBO6F2k23/j1i7FDn0N6Zj0hFvCysoIcfSYasmwN2p5vRqn7xC9JceMK -3V+v0w0pZoAUBAspAjh7R1rWe08IRAt4Tzff401EGAa5+TQqoZPd4BeqvFr0AQhQ -mdVw97FB2pQyNxSlcVvxY3NFYHwSCHcEMroWwQIDAQABAoIBADH51hjN2zk9HVgl -QmcTAWzcUie5cLMhrP+M9mtC8O3jcCwwFY6OwfnbMU8DHy0GMqHg5lB8b99UUVPw -HLAzjDw/ESkc6pgZs4EEhJTsxJLsvTnePgHssEgyXnXf7gRVEqJkPohfy+Zy0UCH -eIUQXiMlOQ7xg7iDMhwNa+UdWSt539DztSKilQn2xdPZjFnMT0/prvl4NA/8Zn54 -/SdWDq5yRdLWb6EK1V7yJ3687GXR1jzGtgy7TXuncUJVTYgX7RdP1Tn6gWD8YAQ/ -RfT0DdWYm4WHSgSb9/NW8lBZH2yy3hg+lNgofXEvTfBkO5QyW31LIr0tCV6zhJIc -Y9MxaKUCgYEA9sktaXfhPLe0ECjdeQEOq5EKuDrCviSKCOuAV4BDSOsdw6+5LWfY -Vb/oke8N70lL3RCblcj1pOKWUi2O/SpEJdDRduiw2gM9cXt3/bChSTHC4TsIxxN/ -Db9OGg72kZ4sRY5Au+zyAAQYBwXhFWux194Jk5qK0JblNG9J5QMqZDcCgYEA5+5h -BgHUMEO+pdME5lAiSc5PcNTejpA6j+OikCh4/HFXy3C/dLx+Cs1+egw64c8iVaIv -NEo7n7E9I0e3XqanPRXhMnBRrP+39OVsWPmZ18Li2Hi84KwJyi8Y11l3XJOqaYpF -wMVUuZpxR0dfG5k/5GwT/tEkmQBglOgG3m2zUMcCgYEA4m3Vd9ahV5dp5AXKpzKc -JjiPMFfhxJo7+FEz0ZUCp03qYljBu/Jy4MKS/grrqyiCLdQGHNlk4SNxLvdUId78 -5gGBnuuDEJU2dAAIKUE9yq2YlBUZSacOxStI2snt28/X6P3LUWHm7LLU5OS1D3Vf -mKPF/6MlSJuas5CEqVZNN+MCgYBH9Qh7IaQgmVQUBKVXg3Mv7OduvUyTdKIGtHxi -N3xZ7hxsDP4JjNWaKmlcGmFGX8pqQRheI83d3NJ4GK8GmbP3Wst0p65fezMqsudr -r30QmPFicgs/tYCQDw6o+aPzwAi2F+VOSqrfrtAIaldSq7hL+VA21dKB+cD9UgOX -jPd+TwKBgQCbKeg2QNS2qhPIG9eaqJDROuxmxb/07d7OBctgMgxVvKhqW9hW42Sy -gJ59fyz5QjFBaSfcOdf4gkKyEawVo45/q6ymIQU37R4vF4CW9Z3CfaIbwJp7LcHV -zH07so/HNsZua6GWCSCLJU5MeCRiZzk2RFiS9KIaLP4gZndv4lXOiQ== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/stale.crl b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/ipsec.d/crls/stale.crl deleted file mode 100644 index 75e8b0959776b78745df3c44bc89048a3e047f36..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 560 zcmXqLV$v~aViaLwWHjJqZ0=5Gj82?6@Pu>+AJ}JjLwG>rWSsf;OLOf%JW2Uq2$$?(^r%-jMxw)(G^8}42Be8o$R)=fVi+WK5&-Jfj86`z>9VQFAs z!aJ3Ux6jNr*gj_Z#B@O>_`Z0=5Gj82?6@Pu>+AJ}JjLwG>rWSsf;OLOf%JW2Uq2$$?(^r%-jMxw)(G^8}42Be8o$R)=fVi+WK5&-Jfj86`z>9VQFAs z!aJ3Ux6jNr*gj_Z#B@O>_`0ondAf&n5h4F(A+hDe6@4FLfG1potr0S^E$f&mHwf&l>lqanhL;hlX4d*f~G#qjp0*`HV@Dnb7YNJ+u6j<0s{d60cstB0ondAf&n5h4F(A+hDe6@4FLfG1potr0S^E$f&mHwf&l>l$08sEeM(z1446g| z)N1wMg#m+Iw7uI4xZDuCJGR=Q2c2R8NF9sPSqnH8Gy#Wq!Y@QMdE3y#iA-0-<$`sB zl$i>2x0})GfjOpO=69J~QVWF1TJ5M*tLU>7sO9h#zBN@tPdy&k$g>@RNBt@-4`pX( zRJBB>_DUg*PHLu0PJEwNxilm7&|hno=|IA0EkHmSW6VeE4`>u{Z+;ZITjrqbh-ET{ z62ba&H5k+9X7VKpnnU|bcf>+G@8_W8-#W=~T)T=tJG$>yllAOs;lQhy$3#aA6r2P) sKUot*I=TG)4`V?|Ys*f)&?r@5kCESRB^&@`YJvZ(9=RnU0s{d60ihv&rT_o{ diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 9c5a06945..000000000 --- a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIBljCCAUigAwIBAgIIBrMLy9hl4GQwBQYDK2VwME8xCzAJBgNVBAYTAkNIMRsw -GQYDVQQKExJzdHJvbmdTd2FuIFByb2plY3QxIzAhBgNVBAMTGnN0cm9uZ1N3YW4g -RWQyNTUxOSBSb290IENBMB4XDTE2MTIwNDIyMzU1NloXDTI2MTIwNDIyMzU1Nlow -TzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEG -A1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5IFJvb3QgQ0EwKjAFBgMrZXADIQAKMO0G -lvjTLC7k8FoSp78rca3x++nvf9xPACSqnBg5UKNCMEAwDwYDVR0TAQH/BAUwAwEB -/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCNOkpAKSIb2BV3+ead2AzqOcNj4 -MAUGAytlcANBAEimNd3OTwM42KM0D+E6nJMHbrGSLA1XAukJDH9w30tzkbQHxTSv -OPEN02ar1L30xfYVySJhV9i5cE8QkhThcAQ= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/certs/moonCert.pem b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/certs/moonCert.pem deleted file mode 100644 index e67b224b6..000000000 --- a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/certs/moonCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB9TCCAaegAwIBAgIBATAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDQyWhcNMjExMjA0MjI0MDQyWjBaMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRwwGgYDVQQDExNtb29uLnN0cm9uZ3N3YW4ub3JnMCowBQYDK2VwAyEA -4X/jpRSEXr0/TmIHTOj7FqllkP+3e+ljkAU1FtYnX5ijgZwwgZkwHwYDVR0jBBgw -FoAUI06SkApIhvYFXf55p3YDOo5w2PgwHgYDVR0RBBcwFYITbW9vbi5zdHJvbmdz -d2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBBBgNVHR8EOjA4MDagNKAyhjBo -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fZWQyNTUxOS5jcmww -BQYDK2VwA0EAOjD6PXrI3R8Wj55gstR2FtT0Htu4vV2jCRekts8O0++GNVMn65BX -8ohW9fH7Ie2JTSOb0wzX+TPuMUAkLutUBA== ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/private/moonKey.pem b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/private/moonKey.pem deleted file mode 100644 index 491d36430..000000000 --- a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/ipsec.d/private/moonKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIKF9TGaPwvVmqoqowy6y8anmPMKpSi9bKc310bbXBMtk ------END PRIVATE KEY----- diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 9c5a06945..000000000 --- a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIBljCCAUigAwIBAgIIBrMLy9hl4GQwBQYDK2VwME8xCzAJBgNVBAYTAkNIMRsw -GQYDVQQKExJzdHJvbmdTd2FuIFByb2plY3QxIzAhBgNVBAMTGnN0cm9uZ1N3YW4g -RWQyNTUxOSBSb290IENBMB4XDTE2MTIwNDIyMzU1NloXDTI2MTIwNDIyMzU1Nlow -TzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoTEnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEG -A1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5IFJvb3QgQ0EwKjAFBgMrZXADIQAKMO0G -lvjTLC7k8FoSp78rca3x++nvf9xPACSqnBg5UKNCMEAwDwYDVR0TAQH/BAUwAwEB -/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCNOkpAKSIb2BV3+ead2AzqOcNj4 -MAUGAytlcANBAEimNd3OTwM42KM0D+E6nJMHbrGSLA1XAukJDH9w30tzkbQHxTSv -OPEN02ar1L30xfYVySJhV9i5cE8QkhThcAQ= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/certs/sunCert.pem b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/certs/sunCert.pem deleted file mode 100644 index 70af02017..000000000 --- a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/certs/sunCert.pem +++ /dev/null @@ -1,13 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIB8zCCAaWgAwIBAgIBAjAFBgMrZXAwTzELMAkGA1UEBhMCQ0gxGzAZBgNVBAoT -EnN0cm9uZ1N3YW4gUHJvamVjdDEjMCEGA1UEAxMac3Ryb25nU3dhbiBFZDI1NTE5 -IFJvb3QgQ0EwHhcNMTYxMjA0MjI0MDAyWhcNMjExMjA0MjI0MDAyWjBZMQswCQYD -VQQGEwJDSDEbMBkGA1UEChMSc3Ryb25nU3dhbiBQcm9qZWN0MRAwDgYDVQQLEwdF -ZDI1NTE5MRswGQYDVQQDExJzdW4uc3Ryb25nc3dhbi5vcmcwKjAFBgMrZXADIQBn -HgUv3QIepihJpxydVVtgTsIqminFnbGSER5ReAaQ+qOBmzCBmDAfBgNVHSMEGDAW -gBQjTpKQCkiG9gVd/nmndgM6jnDY+DAdBgNVHREEFjAUghJzdW4uc3Ryb25nc3dh -bi5vcmcwEwYDVR0lBAwwCgYIKwYBBQUHAwEwQQYDVR0fBDowODA2oDSgMoYwaHR0 -cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2VkMjU1MTkuY3JsMAUG -AytlcANBAC27Z6Q7/c21bPb3OfvbdnePhIpgGM3LVBL/0Pj9VOAtUec/Rv2rPNHq -8C1xtc/jMCsI/NdpXSZCeN0lQgf0mgA= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/private/sunKey.pem b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/private/sunKey.pem deleted file mode 100644 index b83f62c13..000000000 --- a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/ipsec.d/private/sunKey.pem +++ /dev/null @@ -1,3 +0,0 @@ ------BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIF8vNpW9TVnEB+DzglbCjuZr+1u84dHRofgHoybGL9j0 ------END PRIVATE KEY----- diff --git a/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/ipsec.d/private/moonCert.p12 b/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/ipsec.d/private/moonCert.p12 deleted file mode 100644 index 365da741f555c7c8a71e6691ae20e32d976d9bab..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3661 zcmV-T4zlquf(}Un0Ru3C4i5$iDuzgg_YDCD0ic2o00e>!{4jzI_%MP9uLcP!hDe6@ z4FLxRpn?dXFoFo20s#Opf(Vrc2`Yw2hW8Bt2LUh~1_~;MNQUL0TQ|)0%G7sUrdF!Ia)~77*N82 zXQC|utgJ`f7!Cvl>KP66?DOmO&+(%#LIuo;UyxnKv%K(ew3F*R{?@KW9I?lFIT@G< zoHl4Vt$rF`6Fv^ZSmAZc9!av&@~D`NrYi~ zxtv&^oOmWoFLOqGJhk3F`H z)~^*-ZX0o``yK^Ls?)LV|7ChQ7CQRNrXdWvSacYCR{xP~ANbvUNXF@b^%#`5#bgd2 z`ZjU4;b)&q>O@t(Wca8cM0Kf3a6G1(U1$al0$IH8{?81JqyzP!lN--voO^wnBo#p+ z^Vc&lR&)kRQp;&~==Et^i-?D}q1xTyUHxD|)^Ta7zb<4R^-=K2TMqfAx}uvGGzJsV zX+=fuo-4tSjdR|@2ZV*U}qCC?x}`?TXpM7sI?~_+@gT1*`zU6WGLc1*RtBypVsDf0HyG&QG&8;0dx( zzt2p8PALJ1f$VRRpc#?$6+9_^RLGb3U6p1Wy|qIMbDQew2-(h3u^*6~9P0(25R94@ zTSL9J^Rj|hT$0OIo?T1I={;eF>&MRVJ_3(ajS3vGHt^_U6}N+8djvsZTFeRZCB?kz za%fT*(e>k6()ZphY2aC#kCA*nYQK8`hS}fBqRVCDbR7V>qBLl#DKig+;RN`|g4j1z zLH!2ZOFTGu@0feAUik#I15=YkZ712)@_zvrT&87j^-$3Zi&qCSM8MLX;0(?3ce&WM zkDP?8y`RfB*~NPN{Hw5pY@Z@+VxeEl|5aUl3S%@22d?n_c*^d`a&ONz#Mg`$psE)P z?)^R|mq+JEO0g<|cISF7YnueLuuZbSRDYIRTl9lnG`2hX| z$Mau4Y($g{jX-UiiS=UX zMphF>hF-2P0W3D~=h%PZz=k=>u8!zcoSs*AY%YPzv`8(9ho*P34wcg*Ola@4>hVkqX317#8S7QA@3P%tb*Lp1K!L*_`8?*m9zQE^_eoQCPsuBQ^|GLjz zeq9dNO(j*|8{mGlDUymcm2c3_5ufZx=P*ZnUyG^>lGXZ$)*%jk1Q4m2u(TvAWZz{+ zQa|_d!|idOwAJ47O;K_$G#u=A#poLS9=}OGPN5;UZVG{&Ee8J<3)n2a`SsZN?E+q( zmF!W)XxG?&Vf`S)H1oZYJb2Ux7;;{1p=IyY+SkptKWZN<#oox+zU7=fbZFd=_?9G12Lq2G@{ZJ3a2dWU;ANo!b{KXjh+g5zW4q`-u>WJj%mtaSZK zA=bnlwE@((>>e4OtxZk~%P>hVI9vHSjJxw`Wo6H8;9ig{|C7+jl4dClht(NEyzY%r z)xk2;eWWB)9Ba_HD;bkctLTLxSTBPVtZx&XFh-ti1tj>L#%b^d>w3NNnG-^q*YLnq zS!W4!z53TPfY)lvA~U>-R`k z8AyekCSA>wMB|KTase}%pH2O&6u=*gFuJ)-_T^7AIXyf+VY-eC>;oI08hP9w?98N& zas z-cduJz+`n)GEp#g8a*cT z`Cg)v@nJzH_nl#OwRD>g$8ePIK5W{^Vgs?I%4{(~;66$(E_c1K!ZMDy2S%%Wb8AF` zm0R>OGk`_JfTUk1pac)W3tUZ6bh7RcvCN1Q0OBF|4&WGTf|jZ_tfquUsQ_FY_7E~` zKDz)e@GzKLUZe{^~B#FRov1A;emuv+DOU|&MIIX*5qsS^eCR<4{f2ZQQY z8jX5vZ62*FZE&LNQUOfv7Zr zgm!Y>PJiJhP3`NW>0@kEz%_cJez%MLNGYfiR{A^W)%JGeZz?|`I7^3zz*G07bIdQT zsVG1cXST2Xyz7jwPA!62LrFDNi@ie4|A5D*aYdlV!C+bykQm?nSWNz6aWcCD_N&;s zUy}`;FR2gqm&Yjbe0nark3B4;fY4a}6I-?>M^!^>x+7r=6;fVeMM(vpUU}&U)Q%SI zrB6<(w#XPevQ~AMG{)?6|D2{I5}iLK>^h}?kJ(sdQ#`mam0~#BXvCeP86^Fe^zrVX zQkyCwUdn3)Md!>Z8HX(*T_Kivh#^+|{r0WyrVWBuaIo+|cm8(v?MazJRxpNC0n4A9 z2+7*d0o2@`z^nb9hi9ktWo7rV`(604^E{r)=Eq1n2z_qK(l_excWEtQ zweaX0c^HlO1HUe^BCHVF_gCt@1o47DyE<~A32D%`@jCr&FZC>Xz1Pu9o^w22QQyk! zGK!k{X^7ucs6QyIKVA~1{Z4~=o{40oJ3#++xAsa8j6hSPJ1?e}D5swE5LS?!J~%Fu z#BMl0aEWWgfN&pK%f@Q?gS2zz?1soI%~|;e-h%%gzEC*FA@PCWRQv?T>^KQl(7m3O zG4i9eM9VqyhUn(XRq=XvM`kQH0Z(BQZfR^vB-^^tvv!y!5qLVcb}I>4Y{YJi5syqz z9fkf9-y(N|ZtYEIIYu%HPoZd4yjDEot=b?tU^gE3hr9I*A|E(lB%97zij9h0iGzpO z<7nn+jk+et`J9Py(XwTtSBfTQc1Zyflc>cgi$V15g*nrM zlj4TBHdcMO zHl36z8*njpt5v)14xnsehH5C7Y50ip{naHmLV<~kxly}5j@}txZ;2d(f1}@G* zB&k z>Iq(RN=Pp`dq*xpO-K{R#TvkQ1TV^tb7q9XM0dI zuif`6?wHiaEd7@)j)@|&qT--%DGk*fru`Gp)VmjG+aS;RDJ06B*`vDP$XQm9)z-k_ z9eIG%Oii{6y*ZUjmvHZIu#0#FH!0x3BvmmbFe3&DDuzgg z_YDCF6)_eB6lqThP?f8aXmx}XR&!!w{y=GIFfcJNAutIB1uG5%0vZJX1Qc`&n{B>C f_(2!{4jzI_%MP9uLcP!hDe6@ z4FLxRpn?dXFoFo20s#Opf(Vrc2`Yw2hW8Bt2LUh~1_~;MNQU_Jy}sJ9caQb?jI`x=bQHmzTE5-uP&)eIDR@_= zIy-lbI0vjdZq>{T2d2n7B4L9?ToaHq@B>-maCF$eh~sV3IwAWKF;{uy3z^kNOlg$- zk^wW*K6Cp&6fomCZ}#@S9;74Voc(H?SM$;bki%6ql<` z-CTgSEqD<9Hub{3OPnI)rqrCxmp1Is^+%EXu6E+&ylB2hbSi&d`8@kJz{qqLUX~3y z4s1?RR>?;CO9|28xqjUudn81$S$K^iGl}GEIX#D5#sQ#8`1l@sMNWqCqap*mH>P)6sO5@jMe0AsL#j|-_119EnSN$|b@7+-` zKtB(A3FH`H7*pD1^6t~SrWv2lgqx*J(58y1{_-cPb$ams8A-)z$rAu`3|m+-o^i&y z8-k0sZQ9X1c&u8W#|4k4@jdM7Y{xU_hEMr)VvL&+IiOpaLW(Lqd(4hRJl(v4%6o_~ zah9=M561E{M=RIc;W2%%oG zYh)e_=%hF@jtRgEa@SgNLggA*#NEanYi;L@@PQLGltJg^uEK|C;~%*~KcgYr>1rh= z_>*?}Lp}f{P!9b~*xB+stWpyqw^cTk#gbXzYV0_eHtc2Y5+^8Z5=t4z$FVoT<;d!u z%--_emFD=ew))DHJ@j2g*&9VdSQKLi{$T9L#2>QOLXw>DSR0g}teNOzjIG#w#?lo7cD&s3ff5(X7DhQ0JnT1) zIqUKBgl$toaP+Syt^!}}6EeG5Ore?|_7zEohlf+{DxN?ebS`RZ?ry2xXBcAJiMO(T z<#t)Mc?A#1Y~x&#*_d*d?!MN*1Z0k>K5O076p{c@`~1u8QtYr-Ks`1)ZrdUNJ`^EP zH7@V3$Sn`hsLTvd2Mb`xk-CsCs$VuBLdxyFm=S^ZMeECu$3dMEE0d{fHMuJM`c8cx zx(`(Q6gV@*qIo7%r`y#m@k4)N`%{sR@rRSRD=#B>Up!`t)x@keL2@IMMb z;&*q#r!tVBB6lDBHpzr;*tP%Nnu@6Oy`Yfer6)TP%NQUn=yiCSe@NTohD=N-?o}tR zD=mIqnjw(Dt1=?X?WJo8hc)}`bY9TtQuYypXsH2O8BoR}h%PBx{-mY-`z%LP42zq* zYjL(SUylbWa^HfQLefmm=U{MRRWXzvJjM!mNB|F!q*jK! z7!=!!TArQTG6Ng9bytsQPo2|fP_MOH#*9>$r)sL1|1|emU^n>|XHCTY-_;;oL(Np@xH?ro1Em7tWcg-`u%d0i)g}75eXVL)zta2rcOnhwn3KnVqJz=F2PYI z$wocJWh{#TO$`oHjlxT%-xr|gzku6rFmILWYk1Lv)Sa$jb^E7q69{|wC6c07OfZQ~ zkQ*#C0E_5_qRp)pGt-gb!(<(!5}3(TcSw)&n}yx&l3)MVE*!8E(uD0sFW|5@AokxE#+cpaAY$$tzYOC25f%AP9#_xSXQb+;B zwmsaPGq46XSZdQ(s$5i*5EFxVU@y`SEA6#8kJ86*{BrJfI;YO;eTX&3AwZ!;MymFe zUabl_PE^zE!D_7Y7KJ)~8orS= zJ08^culbp|wk9S$o#BW)$TiRaJ_!Nq$|E+N>9fk>hQ}p#w%>l(4p+cl^|9&V-rAQW zD$B4`*V50^voY=%liU?T1k#hk@abW8lo%+CWBAt$ZNXv-o+z6HQ4YRYsxUaVzM+I3 z>q!0{PD^JY^Yd;X*4x2lpO5fJaSTQz6l9%ZxcTtEr~ng#Qs5UdLthmQ+=<}>mZ@hW zJ`C)4EH9})yICe-mD$&0%~9zxX>myb{I~t2 z`Wob{L?2fFKc)^m4!dzU3dpkxLK}9-h7)X;&`$c7PdcUPX%~)770w=UgZeqmjIOUQN1##~zuH-dfifF3Y(LM%igqKz9bRH|((OXv6DTs(#j}PP_N= z%Re-TC)MzM=Hz(~w6w9Uvnn<_7RQWgKY$JVO2ELD)(A_A8DPtaND@VV9m^ym8@t3^ z3+rDh0ezU*I9?}ZLBr9isAhDoA0qB8yrMEy3lCt}FoFd^1_>&LNQUcsM4VbMl64w_ zFKhLtZQNlW^4Kx!*ivj`<@*$-d7>mZie+NT}=v8&P z_-{mhp_oH5mh5rLx^z^}lLnq7$=9|;4e4g~r<|P$u74H0_K8C$(Zeuf8R;!tPY-kQ6-He{$2)Y^AGy`%k)>wwQw? zW`b%lG<2)o&Vm}Y@hsuQI^^6R&JJcoLG&k|tTKh!2a06UzP^ zFVRuUWXpf$<_j19F=PIAewQP2msg3>S*l2vG3aU-z3=iYEKu(e9s)`%B-oj|w@kde z`J)BNjdrA)hUstgUZ^pl+q+>S52twEf-2Zz`K1dWB&KT+e4jq(me*=i=A0HMr0N82 zZMkBFhfPr7G*KdG0PP^%;pAcn5`(K#l%hgew$#d!QmcHTtD!~aP6sToQ{;0E4H(8m z(LKUHd9wujV^_VT{+4!&v}iTF+zbJjnC}_ztBp!`EP~#4%Su3W?kY<-% zLUqMH&qs;xq{TwiOqm{hP*e~-k3JB7i8mz9`Fz+?18TrCcclH3?(@P%cEy#^g=im(P!)3UsvP63XkJ=Rc8O~9 zgtiKqLGw^$Y`7ocda+h+rN$oh3L@O5?wF%^?ic*eZU>2Sx}HJZOLicB%j1JQOr*ku z$CgQv&O|xSUQYVJ?+=?pNnw^XX@PfcD|V6}scFtpLWjQ#(hm*S8ch8a|J-SiU7A_Yw1 z*%Lih78?wUZ*#V5c}QU|-jcE-S|Uejhe55T#$j)T)cHqdfCkwJ1+$Zp#lLbJ^YWM% zof2i<-|<3Vf``LhAO8broT92!z0+-5p<9pYv`V@8*x&^ zy5I;TjYtJ9Q>YaMc2Vxa;4jdTim}xrHOcmagq^xud%t)n3r@F>BfgxVepelFwixJ{ z)KRX?{!Pv6o)^d>1KjJUC#2caUU4;BbtQ_iZ6eHQg)Lr?BrdLG^nGS<8c!@K(l2a6 zy%UPepk!{Q^T3;l8@Qz{Y8hUw8b|DWeOe@W(8a%yG}#hm7s>z}r3o=5Fe3&DDuzgg z_YDCF6)_eB6gxPc*JlrgnDc&$khJ-eiPOmAz%Vf|AutIB1uG5%0vZJX1QY;}Y_ktf fTC)@Hh$p-Q;7T~RLz)B#m(K%kx?(9M0s;sCV4y%UL^j~gL^H*50b#sPDwGC-{C#W(%hnK>Vr0!$uDU8+^7=S%@pzVzs!s3gXlqDtg_d-aTDQ?V;@ z9cWNaPhiHN=EV$^5qdg{ax*EJjj~m+Jua6%06~hzsN3JQhU&#=-S9#T6M%*ZjKkYB zZ=lmj<=P<$XsK;X@PNL>?O#vfbOyz>w$_9bxDGy4xjtzmC0r;8Uko%0aoiJRhQLQ;!V q8KAN#Hn^l-e6ffR>l$7Bbp1EPd{W|50s#a4XoqhA diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.pem b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/ipsec.d/certs/moonPub.pem deleted file mode 100644 index 55bd362a5ed22b72410337ba2cab7c6bf47799b3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 291 zcmV+;0o?vDf&m{e4F(A+hDe6@4FLfG1potr0So{zf&m8tf&l=2nn#2PUO}6+=MG6E zerPAl^x2)%V4y%UL^j~gL^H*50b#sPDwGC-{C#W(%hnK>Vr0!$uDU8+^7=S%@pzVzs!s3gXlqDtg_d-aTDQ?V;@ z9cWNaPhiHN=EV$^5qdg{ax*EJjj~m+Jua6%06~hzsN3JQhU&#=-S9#T6M%*ZjKkYB zZ=lmj<=P<$XsK;X@PNL>?O#vfbOyz>w$_9bxDGy4xjtzmC0r;8Uko%0aoiJRhQLQ;!V q8KAN#Hn^l-e6ffR>l$7Bbp1EPd{W|50s#a4XoqhA diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 8e872d89f..000000000 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEXTCCA0WgAwIBAgIJAPKv5keyTotGMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMz -Nzc5MR4wHAYDVQQDExVzdHJvbmdTd2FuIFJGQzM3NzkgQ0EwHhcNMDkxMjIzMTMz -MDUwWhcNMTkxMjIxMTMzMDUwWjBaMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGlu -dXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBSRkMzNzc5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -zP4z54hRFM3bg0WWxpa9yBh8CrloV8wWd3YQR9daJjErXdZfbnECZqoK5obWPkQJ -Cp2xGijnB5CDxvAdiFANgNxDeDuAD5jGzQALWVYgbhQ/y4qRw49IPs9k+Uf1OHVr -b3qP8uSvWEmb1SlAJ24PGChB8Y5NwJJzFY5P0TJI/Zg3zgbLTsbgiplImgi/ZG7Y -GE/DCb6UAzcRwE2y41U4ZVG86UW2ARnvOCXJZHdt16O3KzUJ78BA1IgMsNZs8cQF -Avg1ZAUJW6oMLXu2XCwKOKTwJxdA2wpYadus2KEY/UyVovHSpyBa/zzSDXsP01PU -EKNZhloVQVt9NX3MCUItfQIDAQABo4IBJDCCASAwEgYDVR0TAQH/BAgwBgEB/wIB -ATALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFCF/p+s30KMLH6HcQgYeEV880hAUMIGM -BgNVHSMEgYQwgYGAFCF/p+s30KMLH6HcQgYeEV880hAUoV6kXDBaMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3 -OTEeMBwGA1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBggkA8q/mR7JOi0YwTwYI -KwYBBQUHAQcBAf8EQDA+MCgEAgABMCIwCgMDAAoBAwMACgIwDgMFAAoDAAEDBQAK -AwPoAwQAwKgAMBIEAgACMAwwCgMDBv7AAwMA/sIwDQYJKoZIhvcNAQELBQADggEB -ABXhehDhC9jLipmZbP9r2t8ARjIjeHUk5UIX3sW9pKlwuOiFy/oEmJD72LYSPDFm -uKK4NDAllhJWKw1KA1j1h1NxE6tEjQTpj9mizjULI6T1HPWyn5E93vqFIK71k4ud -rxZXyq7fPrXM2QVKHpiT1DlAcopGe92Vxo0qooYEXIHd6XwVftSIo/1bi08p8jZS -Oc+kjoOKkfqmBSKpqYzTtlbafdVOPBAEaTa3k516ks3bDQn3gtU+2ucNB3fIvVVA -MI2//EaIMBIXorpcnOU3ja0nYCAf9kHAybRpBObWt7OLKFHcSatdE9El4Ri3YeJX -fN8iF5kHn7S+Nd9ZFlf3S1w= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/certs/moonCert.pem b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/certs/moonCert.pem deleted file mode 100644 index 124e2ae46..000000000 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/certs/moonCert.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEuDCCA6CgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTE0MTIyNzA2NDU0MloXDTE5 -MTIyMTA2NDU0MlowWDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeHiAGNal9DT6 -GgCewdXa4Nf/46YgbhZNmSpi/zH+XmA7JLS6eoVt5vJ/LJEHSzkRoEetptAILenu -uakByawEoPZgkCYZgJB9opGEOoWIwTitaF0ZVV8diNQtnl+rkvwPpxWybvIwOwRA -PUIenoQPkVhfd/ALaRl88pG0rcAW0MMSCNuQwELwSIK2rQALs94Qm5yM0bZ+dqV2 -jnSISit5doRZ4vIYghJPKPqFKb1zUw1siCDPev43S+xqwTjhJ0zncq/QigySyivd -D8qs8KMkan+XNx9XSjW14YWp27RVpIeANlikiHh0/St0lBsR+P9sDp+Yvr+U95EK -KOgrqac3AgMBAAGjggGJMIIBhTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNV -HQ4EFgQUQcvdnqQfLJx2utB9szVLhZCmp84wgYwGA1UdIwSBhDCBgYAUIX+n6zfQ -owsfodxCBh4RXzzSEBShXqRcMFoxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMzNzc5MR4wHAYDVQQDExVzdHJvbmdT -d2FuIFJGQzM3NzkgQ0GCCQDyr+ZHsk6LRjAeBgNVHREEFzAVghNtb29uLnN0cm9u -Z3N3YW4ub3JnMBMGA1UdJQQMMAoGCCsGAQUFBwMBMEEGA1UdHwQ6MDgwNqA0oDKG -MGh0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9yZmMzNzc5LmNy -bDBFBggrBgEFBQcBBwEB/wQ2MDQwEgQCAAEwDAMDAAoBAwUAwKgAATAeBAIAAjAY -AxEA/sAAAAAAAAAAAAAAAAAAAQMDAP7BMA0GCSqGSIb3DQEBCwUAA4IBAQAi0XQL -aEHg8aXBiXSTHuvxDieJB3Q83kpXOry16Ij5PKx9cdM2Gtmxz8YkwPEgq0r7vWNo -830A4CnOJszQyIpY7CIygPj1wy3kFGGPkL7R4p00qSKpCEg8Fq85R4LmiyXIEZ+5 -lUtan7xka4ySMKKocm2rbXHyHXjis8AzU7NZN5QpEMkGLTaQPwHad4FUBFOolNE2 -NLoQ3xp9NPTyqfy1CkCHcyG18yRPciU4m8Cubyb+zBHyBADm9Q0P3++vznsU8LrR -pzjRqS0e+FD2bzdXH/2g7Ge8+b6xzWRVMxZ8e2f5O9jQUY6q4SicuAX8SM/bgDPu -Mc/lk4Nl8pHRO+Xm ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/private/moonKey.pem b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/private/moonKey.pem deleted file mode 100644 index 11607c8cb..000000000 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/ipsec.d/private/moonKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEA2Hh4gBjWpfQ0+hoAnsHV2uDX/+OmIG4WTZkqYv8x/l5gOyS0 -unqFbebyfyyRB0s5EaBHrabQCC3p7rmpAcmsBKD2YJAmGYCQfaKRhDqFiME4rWhd -GVVfHYjULZ5fq5L8D6cVsm7yMDsEQD1CHp6ED5FYX3fwC2kZfPKRtK3AFtDDEgjb -kMBC8EiCtq0AC7PeEJucjNG2fnaldo50iEoreXaEWeLyGIISTyj6hSm9c1MNbIgg -z3r+N0vsasE44SdM53Kv0IoMksor3Q/KrPCjJGp/lzcfV0o1teGFqdu0VaSHgDZY -pIh4dP0rdJQbEfj/bA6fmL6/lPeRCijoK6mnNwIDAQABAoIBAAutG9rU/CcBcCYZ -ZvUpQW7H9/6uedR/+6X94AJs/3ZYAtrN1Q3F9BKEhYoEjmIVVaO0wIkGWWxHhbnB -u/MDvMqXIBL/U37Gp4SPU0gNnAxPV85KtdLa/wFp0wAO7dwkVoJFoe74+wlM9aK9 -ayaZqEfqsBieMI19Asnxj5huUtEoIiU9ekz6HLeALwy6OxJLrempDugDe2icaWSt -pLIU3ZXmzVbOFLNtq+KMpanQzamAvSTUq5Wmuz+C6nTEv+JjGWFblX8pM2ACA6cV -VouefUFfKpMXjHTlsvw0JiDzLeYRxRZZMxnTxzbnoigZfW6ZDxP2w9KRv/7LuSj/ -ktqfVKkCgYEA8qlkPka0cfIKcjloe6oNEMt0dX6V+5LmS59DRnnhu+6FuIVncS7/ -intBGag603wJvGlA7HuUAZbcr4ilDIe1cUm0d8rftjvw0uOBU/gfNVmxhpFzs8Ku -4Fry6lKow1ecqFQ1i4VZi2qQJVv3m6tRojMTh6xVA9/FLD9iiu3V2dMCgYEA5F6I -HV1sqY2Q8aU48dch+I1ItrqiURwY7qejuIprpXBoRQPQV3OoYgJcKtdlSKrbDGQd -iJmL0aoy/ONThrfOtygQtth/f79ktKZZHja8Ew+0/lzfxMSb69kl6Rxx9OKJILPE -caezhYFGozEKwLddcrqxrSd3Fvz78CVRRiAx2o0CgYEA4g0wh98f24Hpf0zBa2oX -b8zIOWfp2giXply/tBh4U7S4NxN3MHXisaNuGrOf0UEcZLr8MxBP6UcbYB3/+vM0 -8EsD5hBEZKPkDODIqmtazz015jD7QrsaY3/2CJlmA0tLcXe4xbc8mmZzz4mj2Q04 -J8xC5kGAlPJQ4I5PgzJZ4+cCgYAHyqHiPpnCfy3+0KBMwAZMsKVWdq+rDMZc/iM7 -3J0nm9oy4JpvIWcRUPtMCuVNwWaP2aqYSoTWtnPe5PKomgTXgupvEpvnA+SvtS09 -NqjcDaEjPI/16q9XMKV2ep34uPHsx7VgG1SorWx3jOjNAnSRwYTmX35UrnT6EIvh -VJ/e0QKBgCgI41QtJ4ShFxpSdxzy3Gfz/EFTUGIjtmXQe/7GixxoXJkpGXCGhToU -KVF+HUEYKOQ1vX9SNUyY+1LyqO3vj+QzuJ0q4GrtEY7vxDH817QvJLecj5i22Hof -50MqUdow2BnOSFuJvWhR1DdodRX3vh1awod/CoIufnfEI4MuMO6H ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem deleted file mode 100644 index 8e872d89f..000000000 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/cacerts/strongswanCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEXTCCA0WgAwIBAgIJAPKv5keyTotGMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRAwDgYDVQQLEwdSRkMz -Nzc5MR4wHAYDVQQDExVzdHJvbmdTd2FuIFJGQzM3NzkgQ0EwHhcNMDkxMjIzMTMz -MDUwWhcNMTkxMjIxMTMzMDUwWjBaMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGlu -dXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwGA1UEAxMVc3Ryb25n -U3dhbiBSRkMzNzc5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -zP4z54hRFM3bg0WWxpa9yBh8CrloV8wWd3YQR9daJjErXdZfbnECZqoK5obWPkQJ -Cp2xGijnB5CDxvAdiFANgNxDeDuAD5jGzQALWVYgbhQ/y4qRw49IPs9k+Uf1OHVr -b3qP8uSvWEmb1SlAJ24PGChB8Y5NwJJzFY5P0TJI/Zg3zgbLTsbgiplImgi/ZG7Y -GE/DCb6UAzcRwE2y41U4ZVG86UW2ARnvOCXJZHdt16O3KzUJ78BA1IgMsNZs8cQF -Avg1ZAUJW6oMLXu2XCwKOKTwJxdA2wpYadus2KEY/UyVovHSpyBa/zzSDXsP01PU -EKNZhloVQVt9NX3MCUItfQIDAQABo4IBJDCCASAwEgYDVR0TAQH/BAgwBgEB/wIB -ATALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFCF/p+s30KMLH6HcQgYeEV880hAUMIGM -BgNVHSMEgYQwgYGAFCF/p+s30KMLH6HcQgYeEV880hAUoV6kXDBaMQswCQYDVQQG -EwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3 -OTEeMBwGA1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBggkA8q/mR7JOi0YwTwYI -KwYBBQUHAQcBAf8EQDA+MCgEAgABMCIwCgMDAAoBAwMACgIwDgMFAAoDAAEDBQAK -AwPoAwQAwKgAMBIEAgACMAwwCgMDBv7AAwMA/sIwDQYJKoZIhvcNAQELBQADggEB -ABXhehDhC9jLipmZbP9r2t8ARjIjeHUk5UIX3sW9pKlwuOiFy/oEmJD72LYSPDFm -uKK4NDAllhJWKw1KA1j1h1NxE6tEjQTpj9mizjULI6T1HPWyn5E93vqFIK71k4ud -rxZXyq7fPrXM2QVKHpiT1DlAcopGe92Vxo0qooYEXIHd6XwVftSIo/1bi08p8jZS -Oc+kjoOKkfqmBSKpqYzTtlbafdVOPBAEaTa3k516ks3bDQn3gtU+2ucNB3fIvVVA -MI2//EaIMBIXorpcnOU3ja0nYCAf9kHAybRpBObWt7OLKFHcSatdE9El4Ri3YeJX -fN8iF5kHn7S+Nd9ZFlf3S1w= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/certs/sunCert.pem b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/certs/sunCert.pem deleted file mode 100644 index a93121da1..000000000 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/certs/sunCert.pem +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEtjCCA56gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEQMA4GA1UECxMHUkZDMzc3OTEeMBwG -A1UEAxMVc3Ryb25nU3dhbiBSRkMzNzc5IENBMB4XDTE0MTIyNzA2NDkwMFoXDTE5 -MTIyMTA2NDkwMFowVzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9u -Z1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxGzAZBgNVBAMTEnN1bi5zdHJvbmdzd2Fu -Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO+7A6hhF+4kxCv5 -oR9DEpv1gnpGmPpn6i7JfuLGIJ9phQ3bUnSMIx8+mp3JE4SLXINLcyCHilK74tIf -pwYx2K0c2txTFIWLQvBaHWohJ9Sgg4ElVXmSa/b0Nym5FcttdcRgNGd/+DLPs9Tw -ZoieGvJcZWiOBP+xxPbEo2xcoi3GetPN+XSW+m1BvU88Ysrp0o+4+rLPB5iipUB1 -Iksb51SvF4iG4BHfoTKGlHLwVyjJnp7YnYJtjY6Xaw1GbCf6wcwLlq71uoMj39cd -0clncpi/s13K2Sh0YHiCcQD5vIkP9BRmobWAXseBZevYI/rU5dz761EqHf72TRrd -bM3/KycCAwEAAaOCAYgwggGEMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1Ud -DgQWBBTPOzV+XXFm2wEX9j+NxqVXiRBq7TCBjAYDVR0jBIGEMIGBgBQhf6frN9Cj -Cx+h3EIGHhFfPNIQFKFepFwwWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4 -IHN0cm9uZ1N3YW4xEDAOBgNVBAsTB1JGQzM3NzkxHjAcBgNVBAMTFXN0cm9uZ1N3 -YW4gUkZDMzc3OSBDQYIJAPKv5keyTotGMB0GA1UdEQQWMBSCEnN1bi5zdHJvbmdz -d2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATBBBgNVHR8EOjA4MDagNKAyhjBo -dHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW5fcmZjMzc3OS5jcmww -RQYIKwYBBQUHAQcBAf8ENjA0MBIEAgABMAwDAwAKAgMFAMCoAAIwHgQCAAIwGAMR -AP7AAAAAAAAAAAAAAAAAAAIDAwD+wjANBgkqhkiG9w0BAQsFAAOCAQEAgJDWuKCu -7H/K4U7xFRarSKtj9oMAAsq2vLSQqJTUg6fdTnFIlH3OBPcwEzFwVx30QlQyls1p -nHm/cptV/3cxvqCvdnT2dVspJu+9a5D+zZNeLAtWZuyRN6Nlmeqj1Nnp6eEHEBrg -oXMzmAf0ulzIZJsEVYwJSCXm0AMOlyvoIYqKxty3L2VZ1iAU1z15lnFhcvamraGx -k7yaI9ujVR4xQZOOgh05pUrEKaXI3XR1rIoL3NV3ws/JgHch/CQw/If7x4VQmGcD -yJbKkKn0S18TJr0KhPqbM4+inldEwyX/zjGmlHezy0em5qTRYwupFIQNwZZkTXug -NnBR3lf2HB2lWA== ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/private/sunKey.pem b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/private/sunKey.pem deleted file mode 100644 index 55f5f8037..000000000 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/ipsec.d/private/sunKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA77sDqGEX7iTEK/mhH0MSm/WCekaY+mfqLsl+4sYgn2mFDdtS -dIwjHz6anckThItcg0tzIIeKUrvi0h+nBjHYrRza3FMUhYtC8FodaiEn1KCDgSVV -eZJr9vQ3KbkVy211xGA0Z3/4Ms+z1PBmiJ4a8lxlaI4E/7HE9sSjbFyiLcZ60835 -dJb6bUG9TzxiyunSj7j6ss8HmKKlQHUiSxvnVK8XiIbgEd+hMoaUcvBXKMmentid -gm2NjpdrDUZsJ/rBzAuWrvW6gyPf1x3RyWdymL+zXcrZKHRgeIJxAPm8iQ/0FGah -tYBex4Fl69gj+tTl3PvrUSod/vZNGt1szf8rJwIDAQABAoIBAQDf/YrzXpTva+bn -d7y16wOOORyKh0AUZ9eFk7s8xAZjLEKnqc8nGnEOln39A417AIOWIX8WW85Ac1EB -J5X10ck0JovP5Mh95prK3Egzi3sdzkRQ/MMablb2TUTldQwKIOIyc/lC42zSfQL3 -6Q7Eg4WGAhK2WEwPZNg2AZD4hKz7unK+IAar9uLi39E4iVzDavzwK5y+fsy3HVFD -cJbPWAr4+4teinF5wkRzK7OInwkPc9IrUF/9wp1ZWp/Rc1YEkCVwmu5v7kPzALI0 -SLwYLil8mXfvG0VZjYIlhCSOJJRuw/0JR2cCDJ9WFppK+YKNh+uLoPXhJxbXM8fB -BmCHhpdRAoGBAPpc7DhUQv8mxGCOy9O/ec50GTPj0bWD0WLrJoqvHu+LyN8OwTdG -KMdV4Mp/tpAWbAlKH22/+7P/QCOCwByHQaUisnbkqx+5/JhZsQB7rLAdQ8SHLdj2 -iO2+6cgYPOFm6W4QT7/vl4BHAK4Glw5NPyS5sN9JBTY4bpzFHunsRe27AoGBAPUg -zoUZnZ/6g+8XRSH77aLAbKScMBGusyxfhFAesqaXcrCrg8FG6Wcpuv2HsBE1v0d0 -7/1oJdT+p+uB2V3iZqTOeJeOCVYXgU82NRZl7R8hqYzkD8rFUZVg6hlm2xi+IUpE -ya4itKWIckSvnexEqiBov7k8sPmb7R/7HWGWUOuFAoGADz8PZ5LCDbW3qcWoZfm4 -Gjl5u245PBuN6b82NqXZdW8GyYalf483NoRlTw+d94JWC+7GoTFay6hUqJTyzAn0 -lnDZe2ILhcAWwNRdchEWABeYI+Szhw3kYs4IgJXxRyy0NG6r3J1jlX09bluaYVWU -7dCdE8vnlFi1a7iZXFd2HrcCgYBknEGHqdrjdbw/Hwr2BuQjf91Xtu+X4l+SH+Y7 -yE3FSLX/Q3aBluxntl4Uf2PJvIi0+I8kMGIOyTL827/u4+UDUed3NQop9t3ROEuT -1OP9eiCQPm8o59IzgKK1KF1XC3q4dAFfYslIg/d6r6Ye+pPlV3kRu5Jb8R7jmHsX -uc2ezQKBgQDgouR4ipkb+sQcMKkhzHUEx67aHEVH69v2R9lm8YgPHjvPCA++DgPZ -dwWALnW5wKRfdGy4b1yTIICUgjKIIlD2owJB/J5Z4SzrzbOAEJkNURGAhp6njsf+ -QYRyoXLOb/8jAQqLx9hOB8L2gsRSDddvvYw/DTP2cKM8vJtYFWam+A== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.d/private/moonKey.der b/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.d/private/moonKey.der deleted file mode 100644 index 49e0111f2815f2200aa2a23c6fe6a09904e06a38..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1187 zcmV;U1YG+tf&`xe00M#m0DhWBga}?io3-Z-NhE$~C(HENoz&zvRr3{QayhmW6_YsQI<-{lm@Qm7!FX!e@UeiY0ErT?*v>iyebZ>hSc<5Zc_7CSh00; zhDfyyX?iE9GCzlx!jh!!X42aeinl%f519Zk&1F_;Hc-|D*QrX1l-{=2!RFfb?==xW z2odfS$(jp2b&bg{X#3o#64}iZ@%6vVi|T{x6#J9ZX<&J+Xkdx=mz~wNI!T!trUBNw z&p+JGo5U=`(4&Cffm^~^2asHv8DT-&=iKbRfqja!!oS_~i%@jzM4xbQEjraIj{fKj zL#)WOBj)7~Y2EeAV*&vK0)hbm6&bdc0c8sBNc-2e+iGU9OsLN9qkCSCQ!Yc5r@g$I z%=!%s{oT%uwCaVBqV0A#L$@KAtH;p<0%FVRj7BZy_cXaD)(>5uTvx|IBYqF(xP9Z~ z9g~wm3?3}z>9Iz$3YM8m7;w^NczM{D9*R{0nScl)JC0`FV$N1hoHrL3lc4CSM@d-^ z?>S4I?V;y6H?hWK(&TnZa0z-hpSo$UT2tMz{>b`a@j)h`3z1XdS7x>UWW8yt8 zHaMAC_yp)H6QxJq%zbV50)c@5!5fDK20Ugi;Gt-_1iRVA6arIV$6iC{#tb|cgl^t3 zyQ3)IuZq7>F?I72q$V~++Ybkq%6~S{Pnl+bcOqn_JRf$VqW&ccpvsPx5+pdi)w3t* zC3GN1^0(0bKc?yjp$yri4~dkiTJ;4HVKG=tU&2SH)}8Q+`oXoLJA4&?0)c@5r`6oW zH0F9>xfl?eduGqAH{L_H)et4W+E2YO?mBZeEQg;SB^*cXn506pJKVAnE?T0oU_x$P zYAhSFE)Y&_w_gQy*?HrEM%bOWl!XBL(`yKIR|`K1#dSnL(M?N7`c=1k9V?JCnH)-m zf>vWES<);O11IK#Vyrin+CJCs*vlTbl`JpCIliD>QPz1D(o(qp0)c>U zvJ4`9cRoQwTYg3KUn!YrkAUPkZC2jSgTRuM_TygvML8IPA!0oh}_zyqPN7%j{E#jn1wInn(m#cN98@=<%_nry8^b8p|K*3z(^Zt9Z`l|1355y BKKlRw diff --git a/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.d/private/sunKey.der b/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.d/private/sunKey.der deleted file mode 100644 index 7c284f93917a34b466a47bac2d68aa61fce9d685..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1189 zcmV;W1X}wrf&`%g00M#m0RW;(D{>uZP)<)^#-QfK43!ajI*W2MDVdG3 zRj@rSmp%YNipHqh-?fJ7#c18|LJSjth6#+r+ca;W(@EvpAqi-yZA|chzQyfdPvLY1 z#kIE9gf~T#7m@xa=D7W;*n@%ch!3oeiic_m!c_A$EPd-Z>I!^P;!^?v0|J5p00ip)DwigBo-q{SNk+Am)6?7~45B3fVVkaA-Ea{Q z#+R@X9GwAaZhRpGG?2j9JI%=ry<86o!cHo#x_F@$C}4R!w5i|Hbfy%hIHGWY=J&0R z4wmTdx9&ubq?Le_8?s(Z&rN|$VH0!oo1kH73*2nx+sRKgeCC)DzYjp?fVM-+=iqh& zA0tkLD?z*v`zu&c`TEjsI|aZ6`1EK z6_;R|cbW)}Ho@!RUb|kJcXZj=&5)5WFu0B(U!G?E4XXPYiaWW~<|lh%RABAm*i7g1 zGfVbCf}DbFycJ1eQ+LG|+X8`s0RH1Jiysz;Uh7P!x@wz`l6ma!@MSTo;=54N%)fst z2?6rO;6{aPRKqy*x0yrut!*Hwf8eBthRtP~|36jZsKmgWtx{=q7!4dL1-b%@SltDu z9Xcj~Q~KsEwdwwmgt8Bxy<%$=1x!lKel6yiG}#=#Bb<6;$jHs+0HXjr z*qFkXGBbCr?$@-k6x?{|zYUx$3-46zQ)p#Jml#LaKn@*%RTQ4~LS9lq@{2>r)hkHS zfv!)-&{&@Mt(xgt1>z};_IVRrz}<6rVIDR!fQ2IyzuYC9+a*KQ(b2S$_5)tWDj+3N zoL&EEm91p4x8B2}by`s%bEONYIRb%!0IBTD2Wk%l>GCrgd`A*rw)^u+phI?X?0n#i zh<~aau&ehjm4sOG<1EmlB@oy99!S7&|LYi9S>8juswz1`aDyuo9yaj!y0d5-SthJp z<>;<&Xwh!~;-^F(Bk@#W10i3()0XlLSlx#+sdMiT&E^v-7rmzKF*f$S;_p9iM*@L> zY^u{c5P`ZOccmVmI(T-tlKVx}v%PY%pN;d3@I!?UWraE_v=gf1V-%z;KH-5(T-Vz; z$A#gm$%=(FkZJoKXGS~&>>IOA`(i!S==Y_T6eJ>5t`}l|=ou3{!-9^B;Uf&B0zWTt zYQv0ZKB`7z$nDF|>DR(eJT?`gZU@DC0)c@5zlK~s*+!Gc@oohDbCR8VN;)ZRVH4|{ z0qA{P^S*JfqWCzas4ADWUV{k&QWP;R-u*jw$%zF^@{Y(G^O&7!hH=Ye>dEjH%oA^F zw~XY~(}QuC?xpOG&{w*S4sRq1U?3rJ_FL(a*SytE;P?aOy=#MoB0E(?4hdT*@Eg4f DYy?a> diff --git a/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/ipsec.d/ocspcerts/ocspCert-self.pem b/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/ipsec.d/ocspcerts/ocspCert-self.pem deleted file mode 100644 index e7dd26ecf..000000000 --- a/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/ipsec.d/ocspcerts/ocspCert-self.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDrjCCApagAwIBAgIIF2S0XlfMpnQwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIzAhBgNVBAsTGk9DU1Ag -U2VsZi1TaWduZWQgQXV0aG9yaXR5MRwwGgYDVQQDExNvY3NwLnN0cm9uZ3N3YW4u -b3JnMB4XDTE5MDMzMDEzMzg1M1oXDTI5MDMzMDEzMzg1M1owazELMAkGA1UEBhMC -Q0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIzAhBgNVBAsTGk9DU1AgU2Vs -Zi1TaWduZWQgQXV0aG9yaXR5MRwwGgYDVQQDExNvY3NwLnN0cm9uZ3N3YW4ub3Jn -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBI4V4N1bFgoY9RJSEwE -UAQsaYcp+DZHblpaUTyO7/8jQHJqgiybwE9qlKKKLBN2Gj8k8/jj+e8dwNC7zbw/ -e5jldtI9mmKIGAWijwELb9j+vFj+ySMTOqgcReOD+87VsDS2qNWflrSOmRqLukOZ -TIGuafUCs6OFH8cC6kIewhvuwAv4gRcHIxxlArpu80v08xNgjVPvb63/1xkAAQkN -8SHIlkzFAqCZPVI3MvDKzPLUzUcX3kPn2AGiTg9pFZawt3DOmV9MqHrUJ4YJiptQ -/eqkwqsnxju6/57W9XO5hsmDkNH5sXUgYhz1BHImVOSFlyj7NMJBjGm+w07XzKvi -pwIDAQABo1YwVDAdBgNVHQ4EFgQUB6hIiW8FEkCQ7a34aKZHWtJ16y0wHgYDVR0R -BBcwFYITb2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTAN -BgkqhkiG9w0BAQsFAAOCAQEAxhQVgrlEz9suo2Anrfqdnwybws0xMMPs78wXYwna -03xOKIHmXz0pwVkKn6Yp/LjjZufHOeQ66adD/fPQXaQwXAcMLEsy1zGmvdk/Qd0N -WYU1JXAcfemqXylmMgs790ErMDPaVxeH3C/lSnhqxkZ9jRO7gToia5NbhZ5vD1+7 -JYJxq1RieLXPvmunxuy8NYB7pQWs/MVJL9CFM5JASydyQXfxQbp0NZ3RKdNhtYxE -QZi80oGpoWb5XzU5vnC270Iztc926z59IgDxOLCkYCbFd/RO65NSrh4AGFmGE2JC -ro2T6qLRlFYu12H+z6412xGwmhIwfzQy8tLGag2VsNJIQA== ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/ipsec.d/ocspcerts/ocspCert-self.pem b/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/ipsec.d/ocspcerts/ocspCert-self.pem deleted file mode 100644 index e7dd26ecf..000000000 --- a/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/ipsec.d/ocspcerts/ocspCert-self.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDrjCCApagAwIBAgIIF2S0XlfMpnQwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIzAhBgNVBAsTGk9DU1Ag -U2VsZi1TaWduZWQgQXV0aG9yaXR5MRwwGgYDVQQDExNvY3NwLnN0cm9uZ3N3YW4u -b3JnMB4XDTE5MDMzMDEzMzg1M1oXDTI5MDMzMDEzMzg1M1owazELMAkGA1UEBhMC -Q0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xIzAhBgNVBAsTGk9DU1AgU2Vs -Zi1TaWduZWQgQXV0aG9yaXR5MRwwGgYDVQQDExNvY3NwLnN0cm9uZ3N3YW4ub3Jn -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBI4V4N1bFgoY9RJSEwE -UAQsaYcp+DZHblpaUTyO7/8jQHJqgiybwE9qlKKKLBN2Gj8k8/jj+e8dwNC7zbw/ -e5jldtI9mmKIGAWijwELb9j+vFj+ySMTOqgcReOD+87VsDS2qNWflrSOmRqLukOZ -TIGuafUCs6OFH8cC6kIewhvuwAv4gRcHIxxlArpu80v08xNgjVPvb63/1xkAAQkN -8SHIlkzFAqCZPVI3MvDKzPLUzUcX3kPn2AGiTg9pFZawt3DOmV9MqHrUJ4YJiptQ -/eqkwqsnxju6/57W9XO5hsmDkNH5sXUgYhz1BHImVOSFlyj7NMJBjGm+w07XzKvi -pwIDAQABo1YwVDAdBgNVHQ4EFgQUB6hIiW8FEkCQ7a34aKZHWtJ16y0wHgYDVR0R -BBcwFYITb2NzcC5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDCTAN -BgkqhkiG9w0BAQsFAAOCAQEAxhQVgrlEz9suo2Anrfqdnwybws0xMMPs78wXYwna -03xOKIHmXz0pwVkKn6Yp/LjjZufHOeQ66adD/fPQXaQwXAcMLEsy1zGmvdk/Qd0N -WYU1JXAcfemqXylmMgs790ErMDPaVxeH3C/lSnhqxkZ9jRO7gToia5NbhZ5vD1+7 -JYJxq1RieLXPvmunxuy8NYB7pQWs/MVJL9CFM5JASydyQXfxQbp0NZ3RKdNhtYxE -QZi80oGpoWb5XzU5vnC270Iztc926z59IgDxOLCkYCbFd/RO65NSrh4AGFmGE2JC -ro2T6qLRlFYu12H+z6412xGwmhIwfzQy8tLGag2VsNJIQA== ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/certs/carolCert.pem b/testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/certs/carolCert.pem deleted file mode 100644 index 698e47cc0..000000000 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/certs/carolCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIELDCCAxSgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE1MDQyNjEwMjUwNFoXDTE5MDQwMzEwMjUw -NFowWjELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAP -BgNVBAsTCFJlc2VhcmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCC -ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKupuHqUUqSufsEtjSTZEkTF -sTGWXQkwZoLbAPNlZ4PV0Dx1ju3xRvVtjQHN3Tsx6IsB1JO3k/dMExwttbeBA8HK -oKYw+CFG8+6XWUU+tBT5xlwa5sdVUHIo8On1x7Rb3s+RDhJ2/YvCf/H13aOtqG+L -7Xyt7OwRQZNx4Gx60sgU2Zhr9WsMslWJQeS92va6UiGYN4c6qRNyrS9zTZEJ0yib -tflhd07LLcgz+jHqCdUcPK4g8+TH8HCtek0n2QRu3IfbEM+i6EaZjUJq1kp6k9HA -IgKR48r9HVk3zBsWJBo6sxUn8/avFM54vdwD8NAClNn9xobEXsO3jwGljc5mb40C -AwEAAaOCAQQwggEAMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRd -qfnvgHGNOog5OOLebmYkmJ/faTBtBgNVHSMEZjBkgBTndfCg8q0gzc1gI8zHyA8p -891UIKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xGzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBIDAfBgNVHREEGDAWgRRj -YXJvbEBzdHJvbmdzd2FuLm9yZzA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3Js -LnN0cm9uZ3N3YW4ub3JnL3Jlc2VhcmNoLmNybDANBgkqhkiG9w0BAQsFAAOCAQEA -TgUJbXL83e11Fzo+XGMQ24FfxdUvlex9IcnnNZnjsy4cYaUhofdI1AIkOhdh7R4i -9dtdfbFLLQR3qc2jmL9ubdQP83FiZZQOXX55XV5/Gb4E4g2T2ZU8ahby+ZzQsEcI -jGeot7fRfbxUrcjnIKxZd7JsQSaR45rMrNcUOQpFT212urojUngrEoAeaC5USEiX -sF11P654UejR8DCczwLi4QBvjRTH3bcMC57FjsWt1n/KCB08dS0ojD+T+6lN7/1K -yLreeRNynXzc1GAln5G03Ivwm9STFT1mYjkBMOCY+3ihEOpzlR9pWCWl9p728db3 -mk0VsDm1jdOf3PK1Xd2PJw== ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/private/carolKey.pem b/testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/private/carolKey.pem deleted file mode 100644 index 3a5d7c487..000000000 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/carol/etc/ipsec.d/private/carolKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAq6m4epRSpK5+wS2NJNkSRMWxMZZdCTBmgtsA82Vng9XQPHWO -7fFG9W2NAc3dOzHoiwHUk7eT90wTHC21t4EDwcqgpjD4IUbz7pdZRT60FPnGXBrm -x1VQcijw6fXHtFvez5EOEnb9i8J/8fXdo62ob4vtfK3s7BFBk3HgbHrSyBTZmGv1 -awyyVYlB5L3a9rpSIZg3hzqpE3KtL3NNkQnTKJu1+WF3TsstyDP6MeoJ1Rw8riDz -5MfwcK16TSfZBG7ch9sQz6LoRpmNQmrWSnqT0cAiApHjyv0dWTfMGxYkGjqzFSfz -9q8Uzni93APw0AKU2f3GhsRew7ePAaWNzmZvjQIDAQABAoIBAEJqa+GhOUhV6ty6 -zv0Ory7EfgX9cwl3HHJMYVXKSf6L3wFFSoNs8lNKi1/DUnDwolQF5UUxpaHsYQhp -9wCEffugdf9WuunFFeOd0wAjfnEPIlvIXLmKnJFOnccnPJjfYplUOemS+A32tqHa -ymHlcmGV9dBjSmMbWg+942KVMrAOHtCnAk0yT2WlE+9efLTuXoZIQCx+Ico6Lwp8 -JCmZYW2pfUk9co9di6UCl50C+A5RcvpsE7CZcXCzEAqz06eFz4imgQuzQSLaedup -F77cyPd13nD2N7+YGfWrWKbdqGMuQnmfrOQWZf94rlOsQjyCzbHIeItJsXT+DBKT -0SwEIQECgYEA1mcoUiCYOcQcA+FtSO8byzSu0uQZO1cS/VES5mbtRIuLo33L0P0y -bVnBIfk3iaBq70GU98XjhCGUwNwQDQm+zbLK+p+j+4L2ayvjtOV5ql0b2gk6eyRZ -oX14evsmxC2OFqGmGD+VePN4pP+Q39QMCFvf26BMtKHyXQnkwA61G30CgYEAzPfH -Lp3iT9xLqpp9zP9j2m9Ts6m6/Uzzuazpzl7rYMlLkd6fBWBquQ46qbO5Wv+SO7yZ -aWU7OuWGe6zng1VWSrLBZlRMfu+ze1uEETNdedRI858nv1bMlHmt9+RiZgOgZe7H -3D4dLphrQrJC8tlsaP0GWYRZkf64n+37KZX2QVECgYEAyKcmbyYeEQHeDius8XMF -mfmmG6xpiMWG+hgkDgkJyPqoJswWMXKk/P3g6ACq31yId33zAqfqs8ARzSSmyOzz -6uKHYGKDP2FjaQ1cP/H7GVumMzorxw9P6vjYBpCByVuw/LEwFsV7CAUkRZcAaNm0 -oSYKrSqqXuqpPjWCJdQd3qkCgYAdIf6ylohLN5GdrxXAZHBp5Lbt62sDg8OEmZol -1gH4oMPX+N97YSfqI6ac5kmrMHY1fWoEu/m+Nk92Fq5VUXTRazTn+YVh6WoGV4ye -8UERBuZTkkSRAqJTXDQo7tI5k7xhoJ3RpRZ6v/lG4pV3dQXeqlATuycMBDtzp9yy -HXmB8QKBgQCut7SsOJ0DtgpzjatYzKBh43WgwjbeRyReyT6OWuPiLUiKQYN8W5od -pZ51zorvFxu6iEMjAzXs0k1zbM4/EaQwwatTEZF0ZQMYMvm46f0ndhN3fY0O0ENY -zZES5DrfCgboPlmrWoVexU3xEDCWO8hO0fLmwqIK8F4EU8ByOVsHcg== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/certs/daveCert.pem b/testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/certs/daveCert.pem deleted file mode 100644 index 4718e7a16..000000000 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/certs/daveCert.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEHDCCAwSgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE1MDQyNjEwMjIyMFoXDTE5MDQwMzEwMjIyMFowVjEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsT -BVNhbGVzMRwwGgYDVQQDFBNkYXZlQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG -9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNnrgEQdETpkdY/PaSj9KeNrg8+MCwCH/SPk -UE6ijIn++yyhaZaji5JrA3z9ya+si0R/4PjxsgwjuqrxARV4gG63jKOmOLWMK9ER -0/APr9KmXfnmFddqZwltGdo9hmDiBQimEdvvK4XK4nA2BY+pJ0b5go+5P4gIbHUN -5GGh1u34R/9JDCvX1HHnIYmKv4ERD5TbODnKDjR7KT3q8Qy+DEndji+2Y1NWLot8 -XOynqCNW9Ii0Zs7850wzV1gz1kkm4Qdte0ndlUQu+gSbS7uM+AVPEgd0ZGY23ecA -V2HsNtCGecj/OnsQ4z8+gSIKJfwEqeumVsSbZimllo5mf3l7jwIDAQABo4H/MIH8 -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSBwMHfoTTG9g4LmkL/ -kBl3thRfxzBtBgNVHSMEZjBkgBRfmxNG+SByyADViLWnTC6X6guTKKFJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBITAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3 -YW4ub3JnMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5v -cmcvc2FsZXMuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQC5VfuhrOErCX6nlfnzgXIB -HheWTfcuobNz1cRatdIGRZVBLIktkQjABsX62t0wcCJ4gUMgT0DxgR/bZQDv9tp5 -q6bo5XJM+bFkuf0NiPme+w9Or+VYcuyiljHnHF3rihK2ZFOBXl2kY667tiGFML3B -jhaYQVHA0ZsSfe3Auxccku0U25dJNLq1+ATjeDuye8/NJqS95YBcMZzWiwG/VgMF -mCeiygAobWmIk2LOijFFpNN2ySCiLimueQp/DO3kBdWlhael3Ee9lkA5bqoFchpb -HH8eQKyOLhRnB2Lk/RhC3mGIFjW127sJdjdWkroyULepnULLyQQA6jy+tEu4XZ2C ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/private/daveKey.pem b/testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/private/daveKey.pem deleted file mode 100644 index ebba49cae..000000000 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/dave/etc/ipsec.d/private/daveKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAvNnrgEQdETpkdY/PaSj9KeNrg8+MCwCH/SPkUE6ijIn++yyh -aZaji5JrA3z9ya+si0R/4PjxsgwjuqrxARV4gG63jKOmOLWMK9ER0/APr9KmXfnm -FddqZwltGdo9hmDiBQimEdvvK4XK4nA2BY+pJ0b5go+5P4gIbHUN5GGh1u34R/9J -DCvX1HHnIYmKv4ERD5TbODnKDjR7KT3q8Qy+DEndji+2Y1NWLot8XOynqCNW9Ii0 -Zs7850wzV1gz1kkm4Qdte0ndlUQu+gSbS7uM+AVPEgd0ZGY23ecAV2HsNtCGecj/ -OnsQ4z8+gSIKJfwEqeumVsSbZimllo5mf3l7jwIDAQABAoIBAAeecxXVqaaMSIlF -qASCFtSdzDShJvE6sEHSNN/YjE5HMvZHMqvj2+1BlvepD0QXxkpIFTCqWnXob3iU -dOyqRRZJYTZXU9lt2Z3a7XEzei6JvRSFhHbVHgHSK4ijeV/2gKfbVXfa+6cx2qGQ -DV3kEdr3zhEqYzrg7hYSEuFn3vOgzFu7PgZYU9b4XQ/nlVaXIH+0Mqrjx9WscLFR -+9Z9WPHx9lzL52ggAoCSHla/NWTe9RZXYX8Px8Ho5rxJ33IXvdQ4A2SiN5s6BhTM -BfC4TVvdcjEUQpCNjW4us9XUEQQ6RSZr7CMDdap4rLENfR51GiMHlDDRWkxqfevI -JYHXpGECgYEA7cZwenYQ/IN2SmBEMCCSh45B6E3pkII+yoLac2phQVRWi0yOwLwp -L2BiWn+HnSdO+d44aiR69MpTF4pEeBbs2bOEU1RO5ywU82kbU0Jzru1nfjYpkzqP -VFEeFshZubqO345cUMsnlECQsmsDmMdllRiXsj14Gp3w8IIVxyZQ420CgYEAy1OC -Plwrr57PEhQWwjRhpqpPO9CD265m7/7Ru6TDjdPw98ANxNn01pRk4X2VcFp0ICgV -b/orF9QZMPyntGRs9m2fzKGYkTAYQX1XyChvK3vSSdY1DgK2KRAQXbHl1w5VqGbd -6QTcIpjF3aNE9jdBj7M+VzUI0AF21ceWUbKDAWsCgYEA1xTTldLK1r/L9sdRpv8v -zLLf51Ti27cVOXZYSGKICuJRTrw3vRv3XUWgciA9+egexmM/QLQzDM8fjoGiIccL -BHogTohKv03evbfr4cqQfkF9hmtT/DvSfwDJaO5eS2T37D0IQIUkDjTBLsMig8aK -mu2d+rsjs1//HG9vZ6+/J5kCgYEAxt/JlwFEYaSt2Xr4v7/Ie+I9Wb4cGvW9DaVq -s2T3OXRCT7H0RcUCLBg9jCjv0FNJHmLWhQ5mtAnrEfUue812npqfIOI2flxSfUwC -Xm7ePeQAzePNRQT187gYqexlaTJGKk9jYpY0U0qmzqDxxPpLECk8IsRm+D1WZMex -iftXFD0CgYB9EZErbxigNj3qlLEMNoEYgPCRfrM0/n/1XgXTnReExrX+gLDwqddD -L9VQMPoNJ6cFWdu1tHerJnD0w7C3NqIgUbOFbA0G9HskfivXsRVwlH7/21NVe2w2 -mAtK0sAKmNmOpx6+lrwWA44Pkdf4aoS0B8ehmvcnVYlj2W51oiSY+w== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem b/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem deleted file mode 100644 index d53365f78..000000000 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTM1MFoXDTE5MDQwNDA5NTM1MFowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBAI1toW0bLcyBXAoy -FeLKGy4SibcNBZs/roChcwUav0foyLdCYMYFKEeHOLvIsTIjifpY4MPy3SBgQ5Xp -cs5vOFwW97jM6YfByqjx4+7qTBqOaLMXBbeJ3LIwQyJirpqHZzlsOscchxCjcMAM -POBGmWjpdOqULoLlwX9EFhBA2rEZB1iamgbUJ5M5eRNEubm8xR6Baw/0ORz/tt+t -xC9jxcjHoJnOFV0ss7Xs3d32PqhvKGgBxjVLZyq3zD/rMG2xXVyKPU46zelMCP1U -dsM62tL1cwAi4soka02GQrP/rwBhHt22bJMN4gNs5NSvhTdjjgwVYzLu63IFYBvW -8sFmiZI= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem b/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem deleted file mode 100644 index a10a18cba..000000000 --- a/testing/tests/ikev2/ocsp-multi-level/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuzCCAqOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTQzM1oXDTE5MDQwNDA5NTQzM1owSzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH/QcWm1Xfqnc9qaPP -GoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq4JI87exSen1ggmCV -Eib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6XL9DKcRk3TxZtv9S -uDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562kDtfQdwezat0LAyO -sVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAjgbBRI1A3iqoU3Nq1 -vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOBrzCBrDAPBgNVHRMBAf8EBTADAQH/ -MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1p0wul+oLkygwbQYD -VR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNI -MRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2Fu -IFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACRlTqXMjHy7r7rWnq/09yFn -Td6d+y6KkHj9kvYSA5q7xYdmP3I4+YP2qpPnYjSeyfMCl4ZIyMXnfUbz5OvuXp4S -CS0gIUJ6mK6+5f1a3USdB4Ce0Od4mkUIQmLzKFCRSqdhWoVzNJrl+BT1a5d9+aLW -AL5S2pqUoQPgG64MPghy3SyUb4qBeplk3JdR/6OgA5LQeNtLiI7Y/dbMM2Rvn284 -RIIxp2TqN2Hup6BNLHv6fLixdJpM+nG7ZjGYf+7dnuY6ZDhvIt18zr/2n1ELBQPh -M5SjYhGQIZVmNzNDrKGVAKta5LG8BwBGi0uXc9fBXWRcffI3N1/IZj/ob5t3WCg= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem deleted file mode 100644 index e9a75fadb..000000000 --- a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/certs/carolCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEIjCCAwqgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE0MDgyNzE1MDIyMloXDTE5MDgyNjE1MDIyMlowWjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMR0wGwYDVQQDFBRjYXJvbEBzdHJvbmdzd2FuLm9yZzCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBAMJhEfwaamqe85Wwr+AWO8YJbxX717rTX0tVLEVG -AB/Q1CAnQquMxo8Cf4Ufto/Odm+25Ihxy2Zedmjnoy8xe4s9vFUjEYPgo+wIT7t3 -I3nUhKJhJWEw7hdHwPHif1aAMK/Mrvkou/VFwzJwnCwA9VKe1/Mn4X1YNLak/cQD -L2Ci34uxJzvjt/5DVDmh7Fd/9wsNHOafycsxEJEyDtDpbZSMklIArTcA61U0+oxZ -MBZVZHMN9vJETR+BEBaZkEpFSn4vaYjtzpsLG+MicYiuspQ+v8dG50JzeTRpRRpP -HF3ob20kd9VOz1nU/43CVpvxFk3d+UNNYF89iIBCNZAf6gMCAwEAAaOCAQYwggEC -MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBQTfdv0x2BIOc0ZAvGE -VrABn/Jk6zBtBgNVHSMEZjBkgBRdp91wBlEyfue2bbO15eBg6i5N76FJpEcwRTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGzAZBgNVBAMT -EnN0cm9uZ1N3YW4gUm9vdCBDQYIBADAfBgNVHREEGDAWgRRjYXJvbEBzdHJvbmdz -d2FuLm9yZzA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4u -b3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQC6A+3G600itmdH -4+zQ1FskGsCUj6mUXn+4blshl41zzhyRmplJT51Wch926E1LUxca9FKUu8XT1tAP -Wo56RO92eX7M3OgeQz7NqtYxgNauqKfd+IFg+y1vC4etj25dfC56+ETfCrxOZzuZ -vFD0mhn1hzXw3CNjSIH3HtWHOJjat+jZKsSayiYg3jO+L7i+cz6arbMhQwwGzskb -wTJejXul+G1/lFhPwMFyep2ilKwRiLJpE3L17hYVwXNEerFcpq6q0OEylmCxXswd -uO4NPb7dDiKw1pbdIQfZh2HqUXr3Vb4FcCWpAHhSCnNtwQQGKMg0CZtiPvwaaeXI -oXwOnQXX ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem deleted file mode 100644 index 7b72371cc..000000000 --- a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/ipsec.d/private/carolKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAwmER/Bpqap7zlbCv4BY7xglvFfvXutNfS1UsRUYAH9DUICdC -q4zGjwJ/hR+2j852b7bkiHHLZl52aOejLzF7iz28VSMRg+Cj7AhPu3cjedSEomEl -YTDuF0fA8eJ/VoAwr8yu+Si79UXDMnCcLAD1Up7X8yfhfVg0tqT9xAMvYKLfi7En -O+O3/kNUOaHsV3/3Cw0c5p/JyzEQkTIO0OltlIySUgCtNwDrVTT6jFkwFlVkcw32 -8kRNH4EQFpmQSkVKfi9piO3Omwsb4yJxiK6ylD6/x0bnQnN5NGlFGk8cXehvbSR3 -1U7PWdT/jcJWm/EWTd35Q01gXz2IgEI1kB/qAwIDAQABAoIBAQCNiPD3iKSEDkl/ -bbAikw3jHWttrnte5ho1WEdsCZR9lilfYDcDgvXxm/gOjxD3lXZX0eyGDZX1bEL8 -D+6apoU21jUUKPzP8fpqG4MzFYUXaM9LDUGSi3ZSLUUo26us6JqK55dghXCXH70K -NUUCJZB8IH1N6HQgOOHpPCorV8ZfrfOklNmCJgevVi2ySJ9Oke5YGhhIgNBuXMAB -Llpg8mc6WqQVCzQnQqOMLT+cHGVcSiwyP04J0vhRWtFCKhaOTJfEG2/RwyHMeOwV -cjOIHZhviW1QmYV3/kIUaYtOW7HqxCzPHxXlulgWjF6jF7cFmHtsVmjfZxqNDMID -Fdz+ODQBAoGBAOp/kSOOCK93sojk2zmJdeuiWzIQaQ9Dkt9sgq2h98pFfcQ6veTH -s2IHbr5nCFl4DvX+Ugh5H/hNIG2FOQ/XWpasXJvQKvttBXXTBHSi8/ZwmcR5xPsA -+9xLaajg4PFIYY2aiSV5Ydoe55dve+8AMNvFmt5chW9hBZ4XdPJL25hBAoGBANQz -xxm+bI4Y942zKOJRfMc+7zNlQBRcB4TisAEYjviEONRFyWg+mToV2WYGhdU9wduy -8etriCUTKlS7i+MR80vT874oak+ZK9eDGdzTcNQwKo5pUvBpGkHea+QyWrm0oWg4 -mX4F1TGRFLDdkKPK4F42n8cjozGljjoQb7QH2tFDAoGAMA+lN5xMu2nU9amyJMC/ -omPMPR6P6cj3uUMMJXokxxgnBqjjcphbc6QCVpPXaj7pEhHlzkbE/qcQFmJPp6eD -sY3yDR1FMfLOQ6/UIfOj/MZnPZWXgbpZ5HSwWyR79ffXxqX9peiS3Zmn7amzxPBN -Ez4U164uyv0foZ89IMvbXgECgYB7V2E58HpOmeqCPYndCnpZoZYNrKNzcg6Yyd59 -tJWdk9UoZSvtYL1Vis+jQtVVniDpH3kIWqd2zU4ElEJ6CLv+7kK12+33OFPIX5aP -yYLCgwCpaETiImU1th/GMxKS8JAE8SkenCtQNUDukMp6ufhyKpPyfx9jQxSJYXZc -EVi52wKBgHpfgXTUHASyAGDaNr5pUk6xZC59eLW3+JquQVxl5GjTDCXK5ilaMLtq -sLT6B0AWd3QKQQHKOl8rVeMA3/SkXXxTooRisgL1OvzEuJg9mHOM/tLLYFTg6Dna -RKtXeklyTaEsmmFT+zgRVqp0qDN7JhlNtCfUYz4fW70kx3Iet/Tv ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert.pem b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert.pem deleted file mode 100644 index d1e85db8a..000000000 --- a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/certs/carolCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEWzCCA0OgAwIBAgIBODANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE3MDMyMDIwNTI0NFoXDTE5MDkwNjIwNTI0NFowVjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDTALBgNVBAsTBE9DU1Ax -HTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEF -AAOCAQ8AMIIBCgKCAQEAqlph7feSim5jou6cNCWB/6E+ptfLuEwtpNv4oRa6wHGu -8qaOjRqaV/rsVJFPTMotGD9u0uHkI9j4hoRm6JgfKCrULQWHizE3mE8T5X9k2HNS -6ngwOEkxGZgV7p3kq/GW654rfmHdmbRlNNBZa6cO9H3o7iOYibVLHk4Yd93lC5/5 -WRqVVDPdGFMUT71kIRh4MZhpmKgxNL8tftDs+FeFw1j5HDFzlapurWniawlXJFbR -wjx2afYZ2wH1zFArQ2j8LvObEB4VSFrOy3B5J57hrslFP8609/jFeNuLOt0xc6Gj -2uStn7TIvjF4KpcZv++VQ+B0bTQoRN33NAM7sSzXkwIDAQABo4IBQzCCAT8wCQYD -VR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFJCYo8BXG9mSEkp2ag3HiT74 -TT+4MG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYD -VQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ry -b25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4u -b3JnMDsGCCsGAQUFBwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL29jc3Auc3Ry -b25nc3dhbi5vcmc6ODg4MDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCo -tFCDUTmBfPjeaDQVCv7uBausS0sZCw+Pw7zypqo3vyRm0R2Ds2eymfVI4/Zc1NwW -hYCy9D1f1r2gukI2jDWHdDwNMQPptyx0Kxr98SIlm9ms8jGT7GZ5l0SdkGe5GDMO -vq7FscqQZX/KkdFk3ye/ONffFS/ukjVRHu8971BNODcRbG0OBhEI2TQsIyxf/iir -taI23m8b9dclikqZx3FqoxfTHSN5T5KHntpH7KVIS00hrlavxkLLMn5oePRnkBWu -feSmpfbOBbnEpElLtJM5K8AjArGOx8nxrtw/KNjMiOsyfCim1r0ff1tnZGtHhHCq -ZCZKA5DsRXZVWasv1CIz ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey.pem b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey.pem deleted file mode 100644 index 2d7938a1b..000000000 --- a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/ipsec.d/private/carolKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAqlph7feSim5jou6cNCWB/6E+ptfLuEwtpNv4oRa6wHGu8qaO -jRqaV/rsVJFPTMotGD9u0uHkI9j4hoRm6JgfKCrULQWHizE3mE8T5X9k2HNS6ngw -OEkxGZgV7p3kq/GW654rfmHdmbRlNNBZa6cO9H3o7iOYibVLHk4Yd93lC5/5WRqV -VDPdGFMUT71kIRh4MZhpmKgxNL8tftDs+FeFw1j5HDFzlapurWniawlXJFbRwjx2 -afYZ2wH1zFArQ2j8LvObEB4VSFrOy3B5J57hrslFP8609/jFeNuLOt0xc6Gj2uSt -n7TIvjF4KpcZv++VQ+B0bTQoRN33NAM7sSzXkwIDAQABAoIBAGuC6UU3NyvYqVc+ -AiVC+r1rdU/052Rj53ahQVPhNXGZDdGkXlkdTgVynk5s+sA65KTl+7ppyAL7vzWe -QBhRUXCXPxs+3yFwqWadmbAAa5PTjKPfwIb1YmCFxGm5CoWdziLbyxVTDHkiCbGA -QL8ZSu3wvN32ZyGZ4lO48+ZKi3B+uO5IRPN1YfJAa9g4q+Xt7nybS7hQnriZAn/v -5ff5StjalQ/241U5LUOrfgeUQIp2DxPiUwHiH/HH1KrcR4Vm4dQrZdOSqUHptoc9 -D7PorAJ0cB7m2FdqAUgEKh4ONy11spf1do79Yi2+XaacTgoCoX8E/1+icmfYvQV7 -rWIBasECgYEA3MIvMrOHgqSNQDgpmA5aq2HsjLgL+KBcQWIFAVhNZ8MOtTYdDIXV -ZKz0HJjaRi4dSvSGPxze9iRmvhydAupJANBJndTrgAoyRo/tLvGBbuYq9B8R+XM/ -gKBUx5/AwenM4JbSodVIzQIJX7lo+Or1H5TuxJ1Xm79rQMg1GOoMSmECgYEAxYxC -lIWpHrVKoktazeuNF9E56fB/EAAjsmpJE7PM+SFDvGWbRJR5Y7faiCySetCW4/LC -Urs2IxnkV7Mo+HgIRmp/K8BBIQ7UAC72mU/qlZeTtf0DH4NMSarPB9+pse8lcPrZ -dyr7q1o2TDd1Q+fFfNWU3KAi2RHtmqKwRECKLnMCgYBPYK9x7qXiLuLvXYJvP3IQ -v9Q7wQ3k51xk0ib0ldi3X6bRN9T4JMNXQO1BvyB1La2wvv3qgaoWHX6oC0fVvYJk -fYCK9P18+62aO7RQNdyRkMePIgDnji4eRQhXAzVfRH87nl+8eyGDPaE7P0Lkhi9/ -nKDCJ8VRpmGdWJ/nBnlG4QKBgQC9ZOuwWTT7K/SSBIzaP6rV2tIbZ2dqf7e5pgzJ -xugNMccvKHrkFTUMVYg+Zf1JohIIGQYVK0eL/5bcPfhZvzqvyAqEd535g63dPylN -c0EEin4jTJ9h5w+M0SYL9nNLFGxhFR7JEXyXm7XS/JiAsgS02lAN9blzQ6z5RGCa -DwZr4QKBgBJBG343JQqRNiQDolaiwzWdSmUxBjfEPzP+pvXJ8pazAUeBdugcm59v -2whpaffSBJzy4ixInTDmAMhIqvkLlc6GrlTPIur4Gts+hssAjsQN0wEPpG1z+ui4 -4KH/klS64465eK40dplWn1akjOb0KaQsjNwffyfzszvh5+8PkzgB ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert.pem deleted file mode 100644 index e121032b1..000000000 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/certs/carolCert.pem +++ /dev/null @@ -1,24 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID+DCCAuCgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjERMA8GA1UECxMIUmVzZWFyY2gxFDAS -BgNVBAMTC1Jlc2VhcmNoIENBMB4XDTE0MDMyNDE0MjM1MloXDTI0MDMyNDE0MjM1 -MlowYTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xGDAW -BgNVBAsTD1Jlc2VhcmNoIG5vIENEUDEdMBsGA1UEAxQUY2Fyb2xAc3Ryb25nc3dh -bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPVagzyvHEGzA -6jWum0URx2TSMs8cM991OU3n8fkBiLEY9H8DUbjEZlZ0mgcxTOSXSmyqmW+10QCy -yHPBtR0kxNY/Bl/+QppnB7IpFCR9bsvA4bySYUbdlQWdIPGTmT1polGtoF1mPZ2r -JqN+Ai5jnFduJ+/189l8chqcz8KlJ2Jp72OaeYqQpgDfo63hqS71OzyY1Cu27vHl -ay186P+HW75yr5YMwxtYk/rZ6jHRMXFwmI+bq1vgpKYHTomaVCG3zDUD+1XsGVBX -u3z6qh6FaxxDPizT/fcCbYcYGbKjJw14JOqfddeAHZe+N41Wev0gAhOCIgUiMoxV -bbx0XkMzAgMBAAGjgcowgccwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0O -BBYEFHtMZgnElcGoYKmMUvCkQaloTKKfMG0GA1UdIwRmMGSAFOd18KDyrSDNzWAj -zMfIDynz3VQgoUmkRzBFMQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ry -b25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBSb290IENBggEgMB8GA1UdEQQY -MBaBFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMA0GCSqGSIb3DQEBCwUAA4IBAQAC1mG0 -nU2TfmYecE0uK8Dn44a8rn13gNyTxpVk+CTYKjPm83BBaf+/K/D2R6+HF3RMkMg6 -6aBHFUwCzIwgL0lBRKT6FioO83kqUkEulRp0jc4hCdUQcAgzqQ+tgT0beCaVHnMv -qMtKr7FEPVklFfIUQj2gV5bJAkjrjvawnVRaCz3kjk51c78wrNUXI04F3SaUrPjl -jcedQvptLspT81A+Itkjn3VOr50M2RVIoLpFBNoPs2RA6iW+R89NhQ3i7aLnbULT -rh+ra3xs+SS2rkV9gC7qDuHqVG5cyWvLl4Hjmo6nHM5i88qgcOzd0tWmT6H2SE9n -YYzmZo5QyNJg2qBU ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/private/carolKey.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/private/carolKey.pem deleted file mode 100644 index f4b0af38c..000000000 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/carol/etc/ipsec.d/private/carolKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpQIBAAKCAQEA1z1WoM8rxxBswOo1rptFEcdk0jLPHDPfdTlN5/H5AYixGPR/ -A1G4xGZWdJoHMUzkl0psqplvtdEAsshzwbUdJMTWPwZf/kKaZweyKRQkfW7LwOG8 -kmFG3ZUFnSDxk5k9aaJRraBdZj2dqyajfgIuY5xXbifv9fPZfHIanM/CpSdiae9j -mnmKkKYA36Ot4aku9Ts8mNQrtu7x5WstfOj/h1u+cq+WDMMbWJP62eox0TFxcJiP -m6tb4KSmB06JmlQht8w1A/tV7BlQV7t8+qoehWscQz4s0/33Am2HGBmyoycNeCTq -n3XXgB2XvjeNVnr9IAITgiIFIjKMVW28dF5DMwIDAQABAoIBAQC44viRw8OgCAzT -HZwlMzz+S5/gK0Lav/g38pRoI+M4HRm7DPI5gK5NDnc/S7vX7mwBRS3Y0Voy/Kgz -6pn8j73MAsTieHBmsQF+dQ7l2GaL1GtzcLSRrLu5xLOAyHaayawGHCc7FKCGHXFd -PiB8MhV0/Svg9K9cPy3XhxAzGQfi4kF9+a3+3NDWnV4kcQbW6s3ykGBF9xxqZu5K -gbvDxNhZFrcv65SMBwghjdDldngtjMB3ZbiMRltobbvTRWHwqgd9V1qf2g3at1dZ -z8ws8UFOhWgCsvT/W+2pPBCJFz0dvfJXCiaWbA4kCmHViJVIoxtdREj5EtmaSQtT -cENSR0HRAoGBAO9jbCUy/dfqPvFowEfpDu1jBrGFoxL8UY8K8wr+NCjbusmbB7+a -n5XLkrpyBGlNSYa1zP1eNpsLq+ee5XTwEbXMWDaOfMNlURNiHy9KfHnEZ4UVDKfa -WW9skfS7adFxwkOxAOM7BynsIrcJ8OgBrP+gKTM4aKvZNRcfGfZAhaj5AoGBAOYs -7c8z0M9JvN9RDpyXT51Rus24n2ApsupPwMeGZwoz45EJPzK9FUFq+x6abENFCGrp -xQ4Sg8QSGSAL78j2jEo+d8qRGoUr7o8zJElfsx/ZvELR3cGgv8Aut7vwW6/SNKlz -MTDiqaf9H9FEEwKV1hbauuJrS1VOMtMAbGG27KSLAoGBAKTozcg2f24tXVz6d3NS -VskrraG/WN6sWRb8SP+qrI31CJD3rnfM8eDEU3kDMIzGBD+7n9JvA5j9ilfOO226 -L8kYUzCKKeKFOjvrHWZ7npJXvaSNIqHDJlc+6LE6JiR1hIkTN3RR5pZ3qFaFj6KT -/PRABgHV+y1fPVaHQ2BDhJApAoGAU9PxGBFK7vNv8fTXWXhR6n2lht7CTIdjPaqm -DwSH6lNTgbLYbWYno5eOtWqQGz+8/RL+TU2452Of+ufeAFaqaS+u+Ps3qWCClWyO -vpo35lWqFrvQA4DD1P4utCepfLMVstDdDWy/VQr+13vvYHWpbtFiVqu01/CO2gHB -dyTjslkCgYEAhsDsPqKdlh1DzVZudNUeMRaE2V6yG937Vf9VB/rNphm+gEwwmM3l -/kfErgTcYzgjV/2csIVZxm9nk17A+ZnPUnIDW2keI1+eIPw/IEWceX+4adKwiv5h -IL5HsD/O12ZD8Mi5mmkGgNVI4nN8TldxiHvh7tAxQQiMrv/AnHTiA8A= ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert.pem deleted file mode 100644 index 843f60bba..000000000 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/certs/daveCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIELTCCAxWgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEOMAwGA1UECxMFU2FsZXMxETAPBgNV -BAMTCFNhbGVzIENBMB4XDTE0MDMyNDE1MjcwMloXDTI0MDMyNDE1MjcwMlowXTEL -MAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFTATBgNVBAsT -DFNhbGVzIG5vIENEUDEcMBoGA1UEAxQTZGF2ZUBzdHJvbmdzd2FuLm9yZzCCASIw -DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7tkn1sXzlBRzSVHoPoct2D0kht -E/Tf+LnryMsw79IBMfiOU61ijdwx2jCLxUh7t90NEIN4CdpIYqzc/1Yi/LWXD9+G -8gBwft5nqTIz8S8Lf6Qiy4LjGXV3VWpDMZLLRJL5ZWm+0ZN8Wtp9qglVh4LnQSiy -+NYTlxnRtPB7xkwia287wn4aQfNJpNhlocXdSpGIF5bNIQm32n84SDMafXtuA+vv -8/72nBiy2SWhkAd+CiNq5dnZkYGnIFL718V6Zu4kmZQhzM3gi/7POZCkOCeSZVeh -AJJf1mJI7SJH54XYkZLUS5EG6ad3kBf1nFGRAjPgwxQHhfUlP8njpjsV7WUCAwEA -AaOCAQgwggEEMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSYfvgn -nLJ1nMbHDd2zdo60Qpy0HDBtBgNVHSMEZjBkgBRfmxNG+SByyADViLWnTC6X6guT -KKFJpEcwRTELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4x -GzAZBgNVBAMTEnN0cm9uZ1N3YW4gUm9vdCBDQYIBITAeBgNVHREEFzAVgRNkYXZl -QHN0cm9uZ3N3YW4ub3JnMDwGCCsGAQUFBwEBBDAwLjAsBggrBgEFBQcwAYYgaHR0 -cDovL29jc3AyLnN0cm9uZ3N3YW4ub3JnOjg4ODIwDQYJKoZIhvcNAQELBQADggEB -AHsXEeaTYTOW31G8xwq8vhedtha2G5BAS1fvZ0BguTDCxw5eWq9uBqWJl4oazbJi -WmWNwRB9sbuH6AAddnJsJMUPM3x5PDbc08BOdUmnGHSGxSdY19WI6wIB9n4Hk5up -fEX4o2CdlQgD5cjtm5vj3rf4QgyY8WmAWnn4l3G/wskOr8iFnGCusjdwmoRdOIxl -jWF1XM/ztMu29vph5F18BhlNixC1uj5uao3mVJL6WDdcEW3JfdhD7rEw/SNm2dl0 -qwC/S09aRD1cFo957vPUCVmzTwutU9pFBkewXm5f/OfcHd2xojW5V33Ty32CblJm -4mTYfThX5lQaUUAjmeoh/jA= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/private/daveKey.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/private/daveKey.pem deleted file mode 100644 index e4054aee9..000000000 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/dave/etc/ipsec.d/private/daveKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEAzu2SfWxfOUFHNJUeg+hy3YPSSG0T9N/4uevIyzDv0gEx+I5T -rWKN3DHaMIvFSHu33Q0Qg3gJ2khirNz/ViL8tZcP34byAHB+3mepMjPxLwt/pCLL -guMZdXdVakMxkstEkvllab7Rk3xa2n2qCVWHgudBKLL41hOXGdG08HvGTCJrbzvC -fhpB80mk2GWhxd1KkYgXls0hCbfafzhIMxp9e24D6+/z/vacGLLZJaGQB34KI2rl -2dmRgacgUvvXxXpm7iSZlCHMzeCL/s85kKQ4J5JlV6EAkl/WYkjtIkfnhdiRktRL -kQbpp3eQF/WcUZECM+DDFAeF9SU/yeOmOxXtZQIDAQABAoIBAHGuCqBk/RtTRW8Z -zR3igdg4Jzoq0p/gu6BIbJNUWywgA/ftGQNT9WNW7+tjngpoDWafWscfFyqYQb19 -27jSl8qbJtlCJYkgRFKi2E0ARCv4QTNG+k75vG7QFFjAeWePzCiCYrhpYHGKC8+k -4dkm579+lElrqVDSilxg3OqQ1SvVcBPn+ADsFBR30Z7xvxU2iJV+A+zw7tV9EQhU -4t0zGny5lsxNSr57FbJDn5Y+aUoXo7okty2MAjL0jEXM5bwgOsgBYWQass1hhFRb -EnGk+WJTZUs0o1+WPi+2hrNHFwAKBzfI4ZRigEPa4monRDeCnyOe64qhb+koC/AA -MNulG4ECgYEA5zIAmtGivoC92ffuQd+uk0mXNYSnKQFIYbs7L/GO8xLX1lzZQeA3 -tRRUM6s3aAmoB1q69x60HFulL/WmMvx+uKGrRIIimXTvRunxt2QFHAcnkAR3C4Vt -habUbilP9qbj6wWU6GCyopkPC2OQmQgy9bE6f/6E6ArlYafatPMzQAkCgYEA5SEL -oVbUXfyD9M7dm0q9R4GvzKIyg1l+afdXCCS4VoEhg+Sq94wBDjpezctt/8WhICau -uoZzTZ9Y1SEsQ9JMQ0XCurV6C9eIR+mNrq4Ik7oqVMe7IbOoaYwuOpY8cJQXRNfR -6EGthY2wZtzE7a4OyuinWUkfyzQcnwV6nb/6oX0CgYA5bIwF6Ef59VQyjYhaSEq+ -PqsWGerDHpRx4eVjlSYibe26SrmTyTNNAM2hP8e1SaC4ouqJctDdsk2nSeaMB3ca -ON2nWINrhkXgYT8ug+NZANXsyY8gB3YamkNtUUmRRAacW3iO92WnSUkZVROXTxgJ -OooDPJ6aXAp5ZQ3HoBh8sQKBgFXT5AxifxhZr4AzQRWbkH1JmfWYSD2ld1HwQZye -TKKyqkBClrw1qGuQ99Q0wJaPjASEGO1r0aMg7mCflXouOzzz07ampfnrmXP+i4EE -VdgoYxTw4CsGpi4rQWHWxvsQrgquoUVT3NDrO0m8ptO1YHsnXRB38L3oXlQ+9ChF -MnftAoGAOVoCOlqqnkUY/u7U3tWu2W5WUnqdsopBxXHhygFKoJS9IcKx5gYoxTTj -XJBGrKU/PD7TIQevRvdIqZFI+PtinhSF1z3zFMoCoKhaNOnul+hNYMn/IwxJFv1Y -XqDI8srXac4vcTsKV0OtPnirx3+pnRlrQupNRZLocZciygUY7PM= ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem deleted file mode 100644 index d53365f78..000000000 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/researchCert.pem +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDwTCCAqmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTM1MFoXDTE5MDQwNDA5NTM1MFowUTELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xETAPBgNVBAsTCFJlc2Vh -cmNoMRQwEgYDVQQDEwtSZXNlYXJjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBALY5sjqm4AdbWKc/T7JahWpy9xtdPbHngBN6lbnpYaHfrxnGsvmD -FCFZHCd7egRqQ/AuJHHcEv3DUdfJWWAypVnUvdlcp58hBjpxfTPXP9IDBxzQaQyU -zsExIGWOVUY2e7xJ5BKBnXVkok3htY4Hr1GdqNh+3LEmbegJBngTRSRx4PKJ54FO -/b78LUzB+rMxrzxw/lnI8jEmAtKlugQ7c9auMeFCz+NmlSfnSoWhHN5qm+0iNKy0 -C+25IuE8Nq+i3jtBiI8BwBqHY3u2IuflUh9Nc9d/R6vGsRPMHs30X1Ha/m0Ug494 -+wwqwfEBZRjzxMmMF/1SG4I1E3TDOJ3srjkCAwEAAaOBrzCBrDAPBgNVHRMBAf8E -BTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU53XwoPKtIM3NYCPMx8gPKfPd -VCAwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNV -BAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJv -bmdTd2FuIFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBAI1toW0bLcyBXAoy -FeLKGy4SibcNBZs/roChcwUav0foyLdCYMYFKEeHOLvIsTIjifpY4MPy3SBgQ5Xp -cs5vOFwW97jM6YfByqjx4+7qTBqOaLMXBbeJ3LIwQyJirpqHZzlsOscchxCjcMAM -POBGmWjpdOqULoLlwX9EFhBA2rEZB1iamgbUJ5M5eRNEubm8xR6Baw/0ORz/tt+t -xC9jxcjHoJnOFV0ss7Xs3d32PqhvKGgBxjVLZyq3zD/rMG2xXVyKPU46zelMCP1U -dsM62tL1cwAi4soka02GQrP/rwBhHt22bJMN4gNs5NSvhTdjjgwVYzLu63IFYBvW -8sFmiZI= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem b/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem deleted file mode 100644 index a10a18cba..000000000 --- a/testing/tests/ikev2/ocsp-strict-ifuri/hosts/moon/etc/ipsec.d/cacerts/salesCert.pem +++ /dev/null @@ -1,22 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDuzCCAqOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTEwMDQwNjA5NTQzM1oXDTE5MDQwNDA5NTQzM1owSzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDjAMBgNVBAsTBVNhbGVz -MREwDwYDVQQDEwhTYWxlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMJOTSaZjDe5UR+hJbodcE40WBxWm+r0FiD+FLc2c0hH/QcWm1Xfqnc9qaPP -GoxO2BfwXgFEHfOdQzHGuthhsvdMPkmWP1Z3uDrwscqrmLyq4JI87exSen1ggmCV -Eib55T4fNxrTIGJaoe6Jn9v9ZwG2B+Ur3nFA/wdckSdqJxc6XL9DKcRk3TxZtv9S -uDftE9G787O6PJSyfyUYhldz1EZe5PTsUoAbBJ0DDXJx3562kDtfQdwezat0LAyO -sVabYq/0G/fBZwLLer4qGF2+3CsvP7jNXnhRYeSv2+4i2mAjgbBRI1A3iqoU3Nq1 -vPAqzrekOI/RV9Hre9L1r8X1dIECAwEAAaOBrzCBrDAPBgNVHRMBAf8EBTADAQH/ -MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUX5sTRvkgcsgA1Yi1p0wul+oLkygwbQYD -VR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOouTe+hSaRHMEUxCzAJBgNVBAYTAkNI -MRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMRswGQYDVQQDExJzdHJvbmdTd2Fu -IFJvb3QgQ0GCAQAwDQYJKoZIhvcNAQELBQADggEBACRlTqXMjHy7r7rWnq/09yFn -Td6d+y6KkHj9kvYSA5q7xYdmP3I4+YP2qpPnYjSeyfMCl4ZIyMXnfUbz5OvuXp4S -CS0gIUJ6mK6+5f1a3USdB4Ce0Od4mkUIQmLzKFCRSqdhWoVzNJrl+BT1a5d9+aLW -AL5S2pqUoQPgG64MPghy3SyUb4qBeplk3JdR/6OgA5LQeNtLiI7Y/dbMM2Rvn284 -RIIxp2TqN2Hup6BNLHv6fLixdJpM+nG7ZjGYf+7dnuY6ZDhvIt18zr/2n1ELBQPh -M5SjYhGQIZVmNzNDrKGVAKta5LG8BwBGi0uXc9fBXWRcffI3N1/IZj/ob5t3WCg= ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert.pem b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert.pem deleted file mode 100644 index d1e85db8a..000000000 --- a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/certs/carolCert.pem +++ /dev/null @@ -1,26 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEWzCCA0OgAwIBAgIBODANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE3MDMyMDIwNTI0NFoXDTE5MDkwNjIwNTI0NFowVjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xDTALBgNVBAsTBE9DU1Ax -HTAbBgNVBAMUFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMIIBIjANBgkqhkiG9w0BAQEF -AAOCAQ8AMIIBCgKCAQEAqlph7feSim5jou6cNCWB/6E+ptfLuEwtpNv4oRa6wHGu -8qaOjRqaV/rsVJFPTMotGD9u0uHkI9j4hoRm6JgfKCrULQWHizE3mE8T5X9k2HNS -6ngwOEkxGZgV7p3kq/GW654rfmHdmbRlNNBZa6cO9H3o7iOYibVLHk4Yd93lC5/5 -WRqVVDPdGFMUT71kIRh4MZhpmKgxNL8tftDs+FeFw1j5HDFzlapurWniawlXJFbR -wjx2afYZ2wH1zFArQ2j8LvObEB4VSFrOy3B5J57hrslFP8609/jFeNuLOt0xc6Gj -2uStn7TIvjF4KpcZv++VQ+B0bTQoRN33NAM7sSzXkwIDAQABo4IBQzCCAT8wCQYD -VR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0OBBYEFJCYo8BXG9mSEkp2ag3HiT74 -TT+4MG0GA1UdIwRmMGSAFF2n3XAGUTJ+57Zts7Xl4GDqLk3voUmkRzBFMQswCQYD -VQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ry -b25nU3dhbiBSb290IENBggEAMB8GA1UdEQQYMBaBFGNhcm9sQHN0cm9uZ3N3YW4u -b3JnMDsGCCsGAQUFBwEBBC8wLTArBggrBgEFBQcwAYYfaHR0cDovL29jc3Auc3Ry -b25nc3dhbi5vcmc6ODg4MDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0 -cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQCo -tFCDUTmBfPjeaDQVCv7uBausS0sZCw+Pw7zypqo3vyRm0R2Ds2eymfVI4/Zc1NwW -hYCy9D1f1r2gukI2jDWHdDwNMQPptyx0Kxr98SIlm9ms8jGT7GZ5l0SdkGe5GDMO -vq7FscqQZX/KkdFk3ye/ONffFS/ukjVRHu8971BNODcRbG0OBhEI2TQsIyxf/iir -taI23m8b9dclikqZx3FqoxfTHSN5T5KHntpH7KVIS00hrlavxkLLMn5oePRnkBWu -feSmpfbOBbnEpElLtJM5K8AjArGOx8nxrtw/KNjMiOsyfCim1r0ff1tnZGtHhHCq -ZCZKA5DsRXZVWasv1CIz ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey.pem b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey.pem deleted file mode 100644 index 2d7938a1b..000000000 --- a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/ipsec.d/private/carolKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAqlph7feSim5jou6cNCWB/6E+ptfLuEwtpNv4oRa6wHGu8qaO -jRqaV/rsVJFPTMotGD9u0uHkI9j4hoRm6JgfKCrULQWHizE3mE8T5X9k2HNS6ngw -OEkxGZgV7p3kq/GW654rfmHdmbRlNNBZa6cO9H3o7iOYibVLHk4Yd93lC5/5WRqV -VDPdGFMUT71kIRh4MZhpmKgxNL8tftDs+FeFw1j5HDFzlapurWniawlXJFbRwjx2 -afYZ2wH1zFArQ2j8LvObEB4VSFrOy3B5J57hrslFP8609/jFeNuLOt0xc6Gj2uSt -n7TIvjF4KpcZv++VQ+B0bTQoRN33NAM7sSzXkwIDAQABAoIBAGuC6UU3NyvYqVc+ -AiVC+r1rdU/052Rj53ahQVPhNXGZDdGkXlkdTgVynk5s+sA65KTl+7ppyAL7vzWe -QBhRUXCXPxs+3yFwqWadmbAAa5PTjKPfwIb1YmCFxGm5CoWdziLbyxVTDHkiCbGA -QL8ZSu3wvN32ZyGZ4lO48+ZKi3B+uO5IRPN1YfJAa9g4q+Xt7nybS7hQnriZAn/v -5ff5StjalQ/241U5LUOrfgeUQIp2DxPiUwHiH/HH1KrcR4Vm4dQrZdOSqUHptoc9 -D7PorAJ0cB7m2FdqAUgEKh4ONy11spf1do79Yi2+XaacTgoCoX8E/1+icmfYvQV7 -rWIBasECgYEA3MIvMrOHgqSNQDgpmA5aq2HsjLgL+KBcQWIFAVhNZ8MOtTYdDIXV -ZKz0HJjaRi4dSvSGPxze9iRmvhydAupJANBJndTrgAoyRo/tLvGBbuYq9B8R+XM/ -gKBUx5/AwenM4JbSodVIzQIJX7lo+Or1H5TuxJ1Xm79rQMg1GOoMSmECgYEAxYxC -lIWpHrVKoktazeuNF9E56fB/EAAjsmpJE7PM+SFDvGWbRJR5Y7faiCySetCW4/LC -Urs2IxnkV7Mo+HgIRmp/K8BBIQ7UAC72mU/qlZeTtf0DH4NMSarPB9+pse8lcPrZ -dyr7q1o2TDd1Q+fFfNWU3KAi2RHtmqKwRECKLnMCgYBPYK9x7qXiLuLvXYJvP3IQ -v9Q7wQ3k51xk0ib0ldi3X6bRN9T4JMNXQO1BvyB1La2wvv3qgaoWHX6oC0fVvYJk -fYCK9P18+62aO7RQNdyRkMePIgDnji4eRQhXAzVfRH87nl+8eyGDPaE7P0Lkhi9/ -nKDCJ8VRpmGdWJ/nBnlG4QKBgQC9ZOuwWTT7K/SSBIzaP6rV2tIbZ2dqf7e5pgzJ -xugNMccvKHrkFTUMVYg+Zf1JohIIGQYVK0eL/5bcPfhZvzqvyAqEd535g63dPylN -c0EEin4jTJ9h5w+M0SYL9nNLFGxhFR7JEXyXm7XS/JiAsgS02lAN9blzQ6z5RGCa -DwZr4QKBgBJBG343JQqRNiQDolaiwzWdSmUxBjfEPzP+pvXJ8pazAUeBdugcm59v -2whpaffSBJzy4ixInTDmAMhIqvkLlc6GrlTPIur4Gts+hssAjsQN0wEPpG1z+ui4 -4KH/klS64465eK40dplWn1akjOb0KaQsjNwffyfzszvh5+8PkzgB ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/certs/marsCert.pem b/testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/certs/marsCert.pem deleted file mode 100644 index cf0977489..000000000 --- a/testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/certs/marsCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQDCCAyigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE1MTEyNjA4MjQ1M1oXDTE5MDkwNjA4MjQ1M1owZDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAsTE1ZpcnR1 -YWwgVlBOIEdhdGV3YXkxHDAaBgNVBAMTE21hcnMuc3Ryb25nc3dhbi5vcmcwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTvcinIErfzu8YZKl+a2MNTVY -+qjG83OkweWjWed/egAugxRjTyWeKjrSNf6DWpXC0pNhzja+Sj0njz4Kq8VczkFB -/yYEkFKpdpFQHXvbQo5h7wn1i3Omhvou5x0rRfddRpLGl7Z/Xg8gnHsZMHHN60hI -qiLZdRSu5QF25WNcy9tO58gz8Hvo5jsk8YDu6eGYolaygQo3cqxx/r8yWzehju0F -oWm4sLOrq+OTegeCQYI8PsOALAwLWgWdGfMPMT0ntq9tD97AcUD0EilvcXVdmwUW -44/hM9BZ0JS7N7Wv6fgIChC7xhZj1yo6vY+FDsmNMhz7vdeulKx2dqRJkn0XAgMB -AAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUvo44 -06FQwLI8P6VqNehTNHa2LNMwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOou -Te+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2Fu -MRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbWFy -cy5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATA5BgNVHR8EMjAw -MC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3Js -MA0GCSqGSIb3DQEBCwUAA4IBAQCWvHc0v5BhxsLRxPvcOu1bVoeexzA/5nftfRly -PumU2hYFQ8p7soJiT/jYPmnfNvl6halnmS0FrqLdTMNfXj/6WCZ3w4Xnokc5PYW4 -oL1VqdEgR7jyQjifZuzRkuPw+yAFoT+HbMttLdRMVTq9NXlPXtGaJTWbx5Z/gGP3 -1Ry47WhvzJyRSysPh/+9WJFOwS6nf6DFbNuyVtNXQRzXjpsGefZgN9ysntNRFMMZ -V0j+zFIkLBLh2WBkJsuLQM9EFAlZrpQZ7iwHuz7gU0jATxN6Qxnn9AemNPl4k8T3 -igPXeVhDbZFeTc+u/Z7X5i1HXhks2QGz/zGee6no54XOnBWB ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/private/marsKey.pem b/testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/private/marsKey.pem deleted file mode 100644 index 14f9440ee..000000000 --- a/testing/tests/ikev2/redirect-active/hosts/alice/etc/ipsec.d/private/marsKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAsU73IpyBK387vGGSpfmtjDU1WPqoxvNzpMHlo1nnf3oALoMU -Y08lnio60jX+g1qVwtKTYc42vko9J48+CqvFXM5BQf8mBJBSqXaRUB1720KOYe8J -9Ytzpob6LucdK0X3XUaSxpe2f14PIJx7GTBxzetISKoi2XUUruUBduVjXMvbTufI -M/B76OY7JPGA7unhmKJWsoEKN3Kscf6/Mls3oY7tBaFpuLCzq6vjk3oHgkGCPD7D -gCwMC1oFnRnzDzE9J7avbQ/ewHFA9BIpb3F1XZsFFuOP4TPQWdCUuze1r+n4CAoQ -u8YWY9cqOr2PhQ7JjTIc+73XrpSsdnakSZJ9FwIDAQABAoIBAQCe+TYMClamMUXV -+YYK2noIJAzY4qVA/DbLmi3S8GDnovNWwKAfCm+oCCUFJPQ1wZpVO4h5QPNEWjvK -pFv0JV6nfyZzjdkAboYu+uf+9PB//oS6uiAr0AS5YnweYYl9qxXGw+gFtzEhsavO -iX61bwIapsIApMrqPld1GE7f03vrTjyqYeJC+V5WEVZe1fkZtKFFJiHN1boPwoWt -VRQ4UGlq9eto5pddmMcPl/uR9/TItdMC8AZ7fcRYP9RdYFEp8jS+tx3CDNs0XrlF -qKlroDSdwBt475Ud5irtNwjGoohl3xCHvEne9l+fjlmQFynfRNeOb9rgVIsT3OoO -MFSeW9HBAoGBAOiAjYCWoQHSlbi3Nkd5fsfTd4iZOkeeZi+2PJOhDByH1Hsq87CP -KoYejjYUQ6QvJY2WDJCU8qXxPJkDuI6XZ6QbTDPad2xXDkA4pxuPi/c+Hb/eqLQ+ -24ebIzauC5iLdddp22oQXQOngKwUMihYggKs9cIpem8G99bcMfq1OeaDAoGBAMM6 -Z790eySPDIaKZZ/KVOu4hJe1s5vIJqN9xtV0o55PTR2wFCgwCogiXQchyhF8Qo6q -BEpcKpY1bAivmL8T2PBsLUuKC4LAr8uzW8rVFbG3HfC62RoaVOZWmH+yBABi6eej -Lh8KNhal+HzVOlMsw78FAkhq9aubWBywxfULFyrdAoGAPmnsEn3dIPkf+iMsrgk+ -cHQjHYdMrtclxV8daeAMuUf5UUsZeeck2jYvpPLRqayCXzzNiK6DaOqWgtkN3TFl -wBcX4L+f2XSRPco3id2CDFAfeldSYHiTRBbwYAhe0od1jes73IAiCA4aK5eMU2pX -FFLL8mBiHpX3SDV6MTwfG/MCgYEApgLXUC3LvVXLL+kl65ARUHUSgzNmrNSxTptY -5hCORcNnbxRYv6fCfOrDspngC6hfrJMUnOrs59g7qtMvD2TgN+m1RqP3j9Msagp1 -xvAVx45QbnFkxdaYVVpTyVpmHrH99xSC1rBHOFEgEX78XtgVCC1JOK2DhM7PSW5k -lzA8Hh0CgYBVXNnQsy4x+9D09zeFP2TKXsk7N154yUP6oxXu6OjZC+cfxHOGyi/g -PVe8ukBIknZkFRz+ZXdfZzXXuJslENOVeFEInqVAu2W55KeCPc/3SU6hB2lj6MBl -WIZ7yrUmtdalU3cPkFnHkQTL2glYAzjB2z22AxyXNzy37ZhtFpovtg== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/certs/marsCert.pem b/testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/certs/marsCert.pem deleted file mode 100644 index cf0977489..000000000 --- a/testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/certs/marsCert.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEQDCCAyigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEZ -MBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEbMBkGA1UEAxMSc3Ryb25nU3dhbiBS -b290IENBMB4XDTE1MTEyNjA4MjQ1M1oXDTE5MDkwNjA4MjQ1M1owZDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHDAaBgNVBAsTE1ZpcnR1 -YWwgVlBOIEdhdGV3YXkxHDAaBgNVBAMTE21hcnMuc3Ryb25nc3dhbi5vcmcwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTvcinIErfzu8YZKl+a2MNTVY -+qjG83OkweWjWed/egAugxRjTyWeKjrSNf6DWpXC0pNhzja+Sj0njz4Kq8VczkFB -/yYEkFKpdpFQHXvbQo5h7wn1i3Omhvou5x0rRfddRpLGl7Z/Xg8gnHsZMHHN60hI -qiLZdRSu5QF25WNcy9tO58gz8Hvo5jsk8YDu6eGYolaygQo3cqxx/r8yWzehju0F -oWm4sLOrq+OTegeCQYI8PsOALAwLWgWdGfMPMT0ntq9tD97AcUD0EilvcXVdmwUW -44/hM9BZ0JS7N7Wv6fgIChC7xhZj1yo6vY+FDsmNMhz7vdeulKx2dqRJkn0XAgMB -AAGjggEaMIIBFjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHQ4EFgQUvo44 -06FQwLI8P6VqNehTNHa2LNMwbQYDVR0jBGYwZIAUXafdcAZRMn7ntm2zteXgYOou -Te+hSaRHMEUxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2Fu -MRswGQYDVQQDExJzdHJvbmdTd2FuIFJvb3QgQ0GCAQAwHgYDVR0RBBcwFYITbWFy -cy5zdHJvbmdzd2FuLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATA5BgNVHR8EMjAw -MC6gLKAqhihodHRwOi8vY3JsLnN0cm9uZ3N3YW4ub3JnL3N0cm9uZ3N3YW4uY3Js -MA0GCSqGSIb3DQEBCwUAA4IBAQCWvHc0v5BhxsLRxPvcOu1bVoeexzA/5nftfRly -PumU2hYFQ8p7soJiT/jYPmnfNvl6halnmS0FrqLdTMNfXj/6WCZ3w4Xnokc5PYW4 -oL1VqdEgR7jyQjifZuzRkuPw+yAFoT+HbMttLdRMVTq9NXlPXtGaJTWbx5Z/gGP3 -1Ry47WhvzJyRSysPh/+9WJFOwS6nf6DFbNuyVtNXQRzXjpsGefZgN9ysntNRFMMZ -V0j+zFIkLBLh2WBkJsuLQM9EFAlZrpQZ7iwHuz7gU0jATxN6Qxnn9AemNPl4k8T3 -igPXeVhDbZFeTc+u/Z7X5i1HXhks2QGz/zGee6no54XOnBWB ------END CERTIFICATE----- diff --git a/testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/private/marsKey.pem b/testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/private/marsKey.pem deleted file mode 100644 index 14f9440ee..000000000 --- a/testing/tests/ikev2/redirect-active/hosts/moon/etc/ipsec.d/private/marsKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAsU73IpyBK387vGGSpfmtjDU1WPqoxvNzpMHlo1nnf3oALoMU -Y08lnio60jX+g1qVwtKTYc42vko9J48+CqvFXM5BQf8mBJBSqXaRUB1720KOYe8J -9Ytzpob6LucdK0X3XUaSxpe2f14PIJx7GTBxzetISKoi2XUUruUBduVjXMvbTufI -M/B76OY7JPGA7unhmKJWsoEKN3Kscf6/Mls3oY7tBaFpuLCzq6vjk3oHgkGCPD7D -gCwMC1oFnRnzDzE9J7avbQ/ewHFA9BIpb3F1XZsFFuOP4TPQWdCUuze1r+n4CAoQ -u8YWY9cqOr2PhQ7JjTIc+73XrpSsdnakSZJ9FwIDAQABAoIBAQCe+TYMClamMUXV -+YYK2noIJAzY4qVA/DbLmi3S8GDnovNWwKAfCm+oCCUFJPQ1wZpVO4h5QPNEWjvK -pFv0JV6nfyZzjdkAboYu+uf+9PB//oS6uiAr0AS5YnweYYl9qxXGw+gFtzEhsavO -iX61bwIapsIApMrqPld1GE7f03vrTjyqYeJC+V5WEVZe1fkZtKFFJiHN1boPwoWt -VRQ4UGlq9eto5pddmMcPl/uR9/TItdMC8AZ7fcRYP9RdYFEp8jS+tx3CDNs0XrlF -qKlroDSdwBt475Ud5irtNwjGoohl3xCHvEne9l+fjlmQFynfRNeOb9rgVIsT3OoO -MFSeW9HBAoGBAOiAjYCWoQHSlbi3Nkd5fsfTd4iZOkeeZi+2PJOhDByH1Hsq87CP -KoYejjYUQ6QvJY2WDJCU8qXxPJkDuI6XZ6QbTDPad2xXDkA4pxuPi/c+Hb/eqLQ+ -24ebIzauC5iLdddp22oQXQOngKwUMihYggKs9cIpem8G99bcMfq1OeaDAoGBAMM6 -Z790eySPDIaKZZ/KVOu4hJe1s5vIJqN9xtV0o55PTR2wFCgwCogiXQchyhF8Qo6q -BEpcKpY1bAivmL8T2PBsLUuKC4LAr8uzW8rVFbG3HfC62RoaVOZWmH+yBABi6eej -Lh8KNhal+HzVOlMsw78FAkhq9aubWBywxfULFyrdAoGAPmnsEn3dIPkf+iMsrgk+ -cHQjHYdMrtclxV8daeAMuUf5UUsZeeck2jYvpPLRqayCXzzNiK6DaOqWgtkN3TFl -wBcX4L+f2XSRPco3id2CDFAfeldSYHiTRBbwYAhe0od1jes73IAiCA4aK5eMU2pX -FFLL8mBiHpX3SDV6MTwfG/MCgYEApgLXUC3LvVXLL+kl65ARUHUSgzNmrNSxTptY -5hCORcNnbxRYv6fCfOrDspngC6hfrJMUnOrs59g7qtMvD2TgN+m1RqP3j9Msagp1 -xvAVx45QbnFkxdaYVVpTyVpmHrH99xSC1rBHOFEgEX78XtgVCC1JOK2DhM7PSW5k -lzA8Hh0CgYBVXNnQsy4x+9D09zeFP2TKXsk7N154yUP6oxXu6OjZC+cfxHOGyi/g -PVe8ukBIknZkFRz+ZXdfZzXXuJslENOVeFEInqVAu2W55KeCPc/3SU6hB2lj6MBl -WIZ7yrUmtdalU3cPkFnHkQTL2glYAzjB2z22AxyXNzy37ZhtFpovtg== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem b/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.d/certs/moonPub.pem deleted file mode 100644 index 672473596a41d846e63d7d0d4a88dbd7778480e5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 294 zcmV+>0ondAf&n5h4F(A+hDe6@4FLfG1potr0S^E$f&mHwf&l>lqanhL;hlX4d*f~G#qjp0*`HV@Dnb7YNJ+u6j<0s{d60cstBpL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/ikev2/rw-newhope-bliss/hosts/carol/etc/ipsec.d/certs/carolCert.der b/testing/tests/ikev2/rw-newhope-bliss/hosts/carol/etc/ipsec.d/certs/carolCert.der deleted file mode 100644 index 8a520c0b4e5cedeefd6c775637615623bbea39b5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2175 zcmb7^dpy&NAI9xsNVHrx8k04Y%h&yqnM>~QdG<>rPHEQr%r$T`n`U?f6kxJ>v>+U=lT5cc>~#!nLxI zE4!OV96LRLEima_Fc1`!U9(dh0umPk2!_&t6b!N-3X=yrxEQJe$nRp4yj*e$H6fnt zofa04_M|3IB1tKR8i4wD6C#iJ$+UNO_4Y;+6B1I;4t9W=vW%fAU~Xh?Xl`t5WD=+> zV+8ypfdl`d4i3nEualOS_|f5Nhyqmq8K9s*3Zo{(+Wwf4{B5It0+kG8L%4v-PX~fP zKMAlnBpX5#b8cBV(|s_ihmUi4egLN%s-L=Xnv=hzw4-hYX^Y@W4IxYDsmMoC<(*`p z7NZt9N;Y}xqzx*83i6XEEbE?@>P8BSl*%O9SKicd3&;z_*!R_R>|^H%F}g+Mb2>u| z$0ji`tA3t|eSX-husF;qvBdka8oKT8RE~I=UaOP=?(b6O>5J882wsb zmY1dC!(}Xc9-F7f#zJ}r;!eS1pcHI<@k%(IdyYx^_%!AQO*7*C=vjqrN#9z~*9x1n+u0sH9Tk>Us$qndXwi6{svJNf zPTgJvCG}A3^63qouaPDoX&gbtxh)6VHX4w7oe*A?OUfSZgI!fK18nqOq;YNOeii$# zUk`t(&ghWmrkRJ;1@4K0x)!6*+}Uv<@jlVPEmTyuDf&`FWJ9!iUfR1&wCbSRtje_E zuCPyg(FV><$Y*)hQ4&4yh0+q*4*W}SX^>yUD;=s%d^x{iJWK7K@w=`?j_kSljBVi| zYFBXMFdwW%WithGbEo^1t77xTINjNn4AC2pP|>eXG@7V53%`L>7%C%chTH2dq)*(b z;RKNr?Pn371wh{EGIg%#MRExc>08F}ZZpNMH?1<9L>c$(x}xXtA2rb`)^$42&RnEA zZ@R`Y_?RVi^fgq`7!6v^Wd45G>B<(-%1W-gul%J#Ix6Eej&w@8O;^;nAqMj3osug( z!FUvb>_M)k0rA9_ALHb^sPn{&w*)a-utiixf-JCez$9!h%hOjD+!hb%{ zU(IlEDMs0S9-d+Gu)7AGtRiMTBkjg`!5;my9)7?rxECb+So-o8j=~xgbD}i(NZ+a5!9^7z2~Z|4)#Aej6c)=TYr39(O0p2A0jSyx1x+bO?;84D~2%2wsdp&)UvilwWp#H!$}O3i!g z`b^d-0Q(PFUu4%9SucD&l;9!=As~8HyoQpB75d?z+N_e)z}}UsMsFAM;Z}u);dC{Q z&4q{E?Uyn=if{wzC32F0=8VY!u?}MJg9ar>tGc}!qe1VJv|WDAl?Q7;h#vDet`yYDxYtFKO*)GB>_T9E2JtLXD& z#7q0&D^^l8<8X|}c7M#Yw>V95ng+iP-i*yDsp32?plfs1iMLOi^H=Bvnn88y{!hVo z8zIR@^507~swP}k*xO@Q0h_<$6+bd^oMI$n(ec>WSvWYA^ob->dvjXVHnrRFfbGK+*mIAi#sC|F$%n(E=9}=^HmqlT%dIFFg=lM;V?24WNwwMssR_JQvz1sN~ zIl_>;)JWJrA1w`tJk$lFcdjkbXyz^ssel?(p^ENMe(8v8Yy-c=ZHW+R1Zu`y>Of(4 zPvPTd`cq$HSvTcJ=>;dL%FvVqL`OVSBdNk(t@81E@m3B4!f6mcjmDwqaB?( zw+d&>u5cDYyWKN-8 zCLpcc%PcQHg9VF0_12qg{@yhUf$%~2Um~{#P<$;>I&)!8eHhs!+<@wqopLjq;@7N> z;Q^nnEjLng!P?Q(p=viKo?^8SB_un?4zmulFL1VEh@qK{WB1!>y@4ZS^VOFW9C0Qf ztsuINtAeqRPrkIAIi4F~O{{46*M=JsFk@2Q$m{`ezG^{>h^DpX88iV4Jxv-%u7f77 z)menRO=6yeV}j7Y2Du(KFg`8eccDOtSDaP6ykgrQinJ4zI~-B|qW< zm|Rz6_EovUgC!zxVPNfoQFZ7k%h zdHCl~VEC}vA*ymcI9J7X1|4~TWJFOppsl?a6;r50qZamMzeD0k>PWeFlAPn zl2fiVCi<%JibnW(%|W+l=|A@)AR0WRDFn5I86T@`rGA$g-s6Ul@))M92A zIx;{onqwa#en@}Mp^97{=yn}wSpahSlpZ-I{zIznl?9TTT~@`$kOP5%0005p0002Y z006`Q0|3kr5EMW&5COo$@BkeX00RUN0dogH0Wbp)05k*y!0-hy7sCX>01ylS5CH%X z05HRFbU*+wRMcDmGXnr~P!tD1%)mt-F~9%=00aOG05CiO001yR000mi05Ai<07L)) z1H}ZvG&2AI#0(D|06+mT`~!i30MGys00Rd^F${B53{1dJ0K@=53i zA3*>^0RI3G8~_vy08hX$&_GN;006*1Fb^>Y0RRwO%s>D!0}ucJ09OD6JU|3M!2|$A wKmY_&!wdvK6ac`$KnDN-3_ZXDK*I$A1VIb|Ffb7SGywn%1OsqD01N=bFmb=)-2eap diff --git a/testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/cacerts/strongswan_blissCert.der b/testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/cacerts/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/certs/daveCert.der b/testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/certs/daveCert.der deleted file mode 100644 index 75a114339ab20f3e9b5b03e23bb16ee7719dd5dc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2179 zcmb7^dpOe#AI8mQhU74rmE&kKncvJg!eX*bCdbHeF^4f>l4o8vhn$jSPSKOY5<){1 z$)T5$s1(wXBB4S;^y=xY=lSF5z25hq_s`FDf3NGlzkl2}z=b6NT(O| z%9Vhxk5PaOR7w{Lf`GW?7%?zNOaySmNdXd2up0yl7d>zgw+lf21WCAjOl&kWlJ0UM zAX1$g%?t~o#o{yowVxswuJnsYpg6d=s2^rBW7QAX0ICRSoDpDRV1hF-1n_2F2x$Z0 z7X*&}A9nJ9>`yx>xWr!`4h{}DWnkx@5ftFZ0^)+K|H={bBP5m?O$WH(iXZylAA&%? zfT%c_3+9LfMY0jf5p~-O?wAIT0frZeU|cQP>imG=?n7J5ZB2^7AD8w~t)^}c-ovBu zX;1QOvvim(Qsp0yr3S^l3IxkwBCdxvKo9zS(N;t`cpfg7ZG(5vvfL)jJa37r3Rtqw zofD7L@wk}bIyt!h6H=bas&&pgH2LItp?Z z{bCZPmjE&Qco%7faLK-wfzhSwRPtpU`lGubl6qZu+W!VhAzd-WGwm~MJCGrbQcpT=9b=TG&qsJquzzk~v!5aXvP=iJ%^Rj8mu zH9)u{Ym*ug;zJJ(WO8d(vj(1rOv?94*YJ*9`+YF8J$zeV8fe9SH%}ri58|d>4EAn* zk-|iGN-na$Fs5qkunhk60N(`-AKA5dx%5-!zuInRBW<1t*rV6t-O!vzYD2L||NQx# zx1k>?Z&9#UII;S#0AZm1YY0*6=rOJ1H`gbIO9;>@I!o^#rHfjJUxjkQJJc7(3Mzh^ zp}KxQL^)!JLpR)=YHD3Zg)(ULUf~n|K$6Id68@2gjU<$O6K{Bql#6+kr)zv|)nhf3 zY>^+Q{LcHGa=njk%EYL4+rz7K)J9~Ac@ZpQ7*XxsEM!U5X(UfZ@%YJmxtPkVq5v|) zxApr&-N?eOO3xnIILvAEhszPEnP_5JL!w!O?PKey?hE^G?kJRzDLsEmR39tO>(KwC zBqA9uy}n{_`D?b9WwFwO zF_7854(2$*-(Nyg2jWu2Ndq|CKbJ&B6QTqtCM(R*IPTw0q}IClw|#m zkDjZ@K@h+W&j0MX)lXdwVhR`ohUEt3Ksq)gHa5y!U!NAu!2ahh=>Ls=fsD|Y80?Rm z|C+)d>p&4{ZA|q4vie{U(rZMFaAWI1lQi=}!14fwiQSJxpMu7bijct>E9b zm89kt`rk-tn0bu3r(PD-a04fVIaCz%v&osrmNPMt*4LH2o*b>J>lP8kk4^Fgn~cP$ z8>J$PuyA@Mk}$fNu3PW?ZUk*bV@AqIpAVZlnX#$xR)~O@*r{Gw#H7F6434YO9<;wF zYvjRf%ke-o@w8%pt7P+Xu^M}Yu5x?PpJH2d)$ei#cOK7v{6IYJP*HtZu5+&&6-Lf6 ziWbw3Fqif2s@iE0k`3LHM(#R2jmhXtdPy?AHH=%eRGCJ+K0;pr8B|Ej@Wjo&*Piob zO{3P=Xjp>2`^M7Db19KOJk~Ikc79Vxd4S-FzeTI0Ol-c5YBN|a)@7xs62?-cNEf{{ z2{!A5p!%Lj0<3O}ZfYu_azbuJTu?QW%!AH6;=Q_0=dOjogn|T1{<(A;t=Ihlf#Xm2 z*g#Gq7Ht&f&r-nBPQJ&(|YaivUxMS{yC)LTvojxegnEms!+W% zgdIxt6hwPJ9|Fw|*}eDiQj&LS>fTdINe`=O*pfQxq3O5+6Xqn#eHJ8yj_E5hsOIRD zKfG7o%yRY(w@c{p@fj8Lwp{4;feR(o3C+iQH7~7eD<*I_9!)dR7xwaJ!oaG7<<^BF zR43AY2+=1a7}O3;9zEPeVYCMMm{?_1v4uiMV#^ki>|n)LHq4RBmv(9w+OYhx8#hwR z{Z607;)kK%zF=a~(cjD+QyDRssMF9OSHj2lo!!+IFDctrPn`k7B_{5dnPIPJjYVL< zpX02PVS(n0#|ZB!W4ojnfy?eD|Fn7Q6rpr%u2Z-9&W*0=h(kfsC{xrPC)?DmfU~|g QC(=xTOXDBz8l*-48`(ypDF6Tf diff --git a/testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/private/daveKey.der b/testing/tests/ikev2/rw-newhope-bliss/hosts/dave/etc/ipsec.d/private/daveKey.der deleted file mode 100644 index 0ec528ddf6695691e10aaffc4f5655c76bb5477e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=q1A+sA0A+4`7aVP>4wc6^X4Nn>rA7lWsY^ed z$TTHR{BI1g7G~}5J5WF1y~@ioCNqWCkVJ|pZ?g-a?PP>ycHUwG4=QcAX{`oGUH2yz zB1u?Mpb)kbx?_q}*g06j0v@Dw5Zh6GS*n!3X1z;2ph{8fTSQc&BYjxefJU|Tq|sXs zHM)ZH>GgNEkoI+_s5y?mhY?#COn6d>xvh6W_(qv3+P+4yDu7BCGe^jLv*b_Og2XnM z(c*+Xa$}Yb>3A)qGgSEEQK^-INh=?wooG}uZB+0@M87sQ(Z(2%#Sj6L-?3@&Bpw2+ zBgIBHaF$RL!D^5x8%wPQj0d$T6cMFgb9&?NFa<|=Qw)bF@ZORF&^?N$k! zls-yGx#4D7@Z*eZE@d*o15|4vL6cI@FHn!V`ssz*ObVA z0Nk0BSB@q3tIIPs zYjv6`@=#Vv*sveON>+X5b|qJ9%$JAN-G2%|y1=(-78VrqAe$*BEHz1WQ!0F%VCn=A zUzMPG78&em(hH1D!D{9;e4NGRHIfy!=AfeE)-y?PS{Z*=be*s`0}l(t4jnJljSsYD zTFJm665NPhh5^THtYXIY@-nOXi&{OH7|+!KIXk*<))!!42_q>4Qv-p)02~4c1CBrd z0)GG?2mllS00000f)C&Uz$72X0CA4s00#q*0N{VXAMgl2fC&Kq&jj!=p01g2p5D){7Km-5)Ao5S+fCnHBdgO2jpL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/certs/moonCert.der b/testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/certs/moonCert.der deleted file mode 100644 index d0ea364b0e645d5cc91aae74ee1be3a3132f3ddc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2200 zcmb7^dpy$%AIEJo=9bHt`~5EFH+Pat#0U{)BXY}ixoi_oWLpzPvbltu4q~~SoCr;l zCif^4(&^z4bE%^jaw<7TM^As8UeELV^Zfbwe!j2Q=kxvJ`v$165`YRtRztubFc=nn zF&I65ng|2L1w;-DfcQbwY6B<)1my!fQ6hkl0K}hP01kFSqZ9%8uR<6uMI;dt6QX@n z!xGfI35juMBSWdp#LLI@}TWOoCqBDEyE3iQUVmdHGrQ>OiVz2t3f>Ih)g6z15`-Of&b5eAkcRL z41-W16h4>fVBz;S9q-Kb5^@4|TRI*y;JO{!35C{&>eL%I#vD1|dF=$X!7=go*S)1y z=rYTZ28`K{6Ei7OaZj>kmy9OapHlL*Q$h!?r3$;nPFi&fdhFX|gnbEzEgsTED{tK~G!7=P$(afts&7y)S zv}*J&xs%(vzs>~>`#@G@uG6g_-Pw$eAi3X)?Ou#O|NBH*pI>%NDRg0q^@Vb*X!Lg& zB3(N{;aPu3yhilOF1$Xu(e%YBj!zwcnU(f6Q62x}K3>l{jP0|U@M<{UwM>nVa>kG+ zw)59jN*vCyX`{qMqXJ0Vg4vY`j|xL_6(({C2Zwky$IgPboc=N%Qye8Rf7K6SwUOP`Ni710XKSh!pLS%Sys~lI%fIK34a5&}H4QV3JrWcp0yCI4^L4|J zYP8ruhqeO)*5oW#bc4}h58X^_WgKR^IAlxW?4`->6W8yjTrCz;ml;Ej{|$p zde0u63zx0jHvK@D>Bz;~;!gERg+9X#zPFOl@NzBBb#@nlHP5oT-!i~Z5@5c0qRM67 z4Xblf(x{1#Qg!W1$vgQI(`)dH8xJVi#cZ)~9k(DVs)gMLd=Vc=wpu{fD!w{&<85<8 z@s{DtmSa4!q4%BP;7(%=vD|gYBcxT6kuNWA_~a5swTv^Js7uxrA(plXt0?MM-luRdI3@n# z>c;AqrG-_Ij;xc<-K10klxzP6iLxfY9DpE8uSHNWC*q^^`GYMR9m>34KZUC*Nr!!)&;6))nq8AR)$T3B&O;ZkpboYZJ_Ij!Th)<;%!YUm zYxaQNxnD({-c}rI1gw!dCJC}M%lTQQyP~x&t!THs;T4315C1P+?u`m2L{=4URTc@2 z5sMhLu)TWaXQtWpYf2Ckz?TLIamu{BFn6;~jr$|>IoVW1$Dy5*Vy<4y_?P;{B6YKw zk9Ul;9$IbzSKaPy<^|^HtWG#L_FohFOX^v_OpH#%Fdvg?ePd6Ryr}(TZmvJ}cJ^;sjC~$8 zcdTnFHP4nnS(t0&GDOHa8n>-?f<` zy^gGC4xeCLHoajD2Ce;MQ71?3tSYKGZgDi^F?FSSlNw9zOWkpaHd#z_RnPqF*Zx6E kSkG*Q&w1DBuuLeTFV7H{J`^8-w7ZmUOjy4wKjTRL8{S~8-~a#s diff --git a/testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/private/moonKey.der b/testing/tests/ikev2/rw-newhope-bliss/hosts/moon/etc/ipsec.d/private/moonKey.der deleted file mode 100644 index c989f91e58a61c46f4b4c4fc23ce0cb32be59822..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=r1A+sA07lha3iG2uu-(6MhgbQowZoAUC$%MR zjyVpbA*t=mLBRsvC2kCpkmQ3K}{n~FKWu<&PNbV{db zyWwkg?9h0^RE21j1>n@C|A9h~%IpXhc_nTd&%|D9B4_6L6QyyfGuKkVQKT?d*c4MT zAIPS=etQ})FDCCq@ir^uH9?KL%0H_tc>ZYI{NEl<}Vv6KwvLxkB=f<}=A{gc2LS(d#DPv#$ zROMJTq84BymRq}Yr$IcS4dr$#eQ_N3#rw~{Wj)h-^GrQo<5o&soOv zI1nOEN0^92N(%_9*rvPdkpcyDFg5T?oJQVBSSC*qEvf*4oR|NU?iowf=o5bJyn%(2 zxD8?^Nn3(3uDHT5{}07+IN(U48`}<^>#L}f@hsNyL2E9kzwRu?^r@k9m`BGogsSujKUoMJwR%^z zq6S+j2jt}syr;?+BdwLy6?yOAs#y5 z5C{N}P$2Qg0DeFKl5iYi2LA#;;Q$CD@(%;yzypE700*9Ufx!R*Pve4k1n@W=amVBV zz(0a901?Ol5CQ-KKU|Ip00IExfPmwGQ3UV^C-5-+0EQr*4;!J#Ab^M*4hI|%2P5(M z_yRcG@xULDKj3fx00HpL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/ikev2/rw-ntru-bliss/hosts/carol/etc/ipsec.d/certs/carolCert.der b/testing/tests/ikev2/rw-ntru-bliss/hosts/carol/etc/ipsec.d/certs/carolCert.der deleted file mode 100644 index 8a520c0b4e5cedeefd6c775637615623bbea39b5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2175 zcmb7^dpy&NAI9xsNVHrx8k04Y%h&yqnM>~QdG<>rPHEQr%r$T`n`U?f6kxJ>v>+U=lT5cc>~#!nLxI zE4!OV96LRLEima_Fc1`!U9(dh0umPk2!_&t6b!N-3X=yrxEQJe$nRp4yj*e$H6fnt zofa04_M|3IB1tKR8i4wD6C#iJ$+UNO_4Y;+6B1I;4t9W=vW%fAU~Xh?Xl`t5WD=+> zV+8ypfdl`d4i3nEualOS_|f5Nhyqmq8K9s*3Zo{(+Wwf4{B5It0+kG8L%4v-PX~fP zKMAlnBpX5#b8cBV(|s_ihmUi4egLN%s-L=Xnv=hzw4-hYX^Y@W4IxYDsmMoC<(*`p z7NZt9N;Y}xqzx*83i6XEEbE?@>P8BSl*%O9SKicd3&;z_*!R_R>|^H%F}g+Mb2>u| z$0ji`tA3t|eSX-husF;qvBdka8oKT8RE~I=UaOP=?(b6O>5J882wsb zmY1dC!(}Xc9-F7f#zJ}r;!eS1pcHI<@k%(IdyYx^_%!AQO*7*C=vjqrN#9z~*9x1n+u0sH9Tk>Us$qndXwi6{svJNf zPTgJvCG}A3^63qouaPDoX&gbtxh)6VHX4w7oe*A?OUfSZgI!fK18nqOq;YNOeii$# zUk`t(&ghWmrkRJ;1@4K0x)!6*+}Uv<@jlVPEmTyuDf&`FWJ9!iUfR1&wCbSRtje_E zuCPyg(FV><$Y*)hQ4&4yh0+q*4*W}SX^>yUD;=s%d^x{iJWK7K@w=`?j_kSljBVi| zYFBXMFdwW%WithGbEo^1t77xTINjNn4AC2pP|>eXG@7V53%`L>7%C%chTH2dq)*(b z;RKNr?Pn371wh{EGIg%#MRExc>08F}ZZpNMH?1<9L>c$(x}xXtA2rb`)^$42&RnEA zZ@R`Y_?RVi^fgq`7!6v^Wd45G>B<(-%1W-gul%J#Ix6Eej&w@8O;^;nAqMj3osug( z!FUvb>_M)k0rA9_ALHb^sPn{&w*)a-utiixf-JCez$9!h%hOjD+!hb%{ zU(IlEDMs0S9-d+Gu)7AGtRiMTBkjg`!5;my9)7?rxECb+So-o8j=~xgbD}i(NZ+a5!9^7z2~Z|4)#Aej6c)=TYr39(O0p2A0jSyx1x+bO?;84D~2%2wsdp&)UvilwWp#H!$}O3i!g z`b^d-0Q(PFUu4%9SucD&l;9!=As~8HyoQpB75d?z+N_e)z}}UsMsFAM;Z}u);dC{Q z&4q{E?Uyn=if{wzC32F0=8VY!u?}MJg9ar>tGc}!qe1VJv|WDAl?Q7;h#vDet`yYDxYtFKO*)GB>_T9E2JtLXD& z#7q0&D^^l8<8X|}c7M#Yw>V95ng+iP-i*yDsp32?plfs1iMLOi^H=Bvnn88y{!hVo z8zIR@^507~swP}k*xO@Q0h_<$6+bd^oMI$n(ec>WSvWYA^ob->dvjXVHnrRFfbGK+*mIAi#sC|F$%n(E=9}=^HmqlT%dIFFg=lM;V?24WNwwMssR_JQvz1sN~ zIl_>;)JWJrA1w`tJk$lFcdjkbXyz^ssel?(p^ENMe(8v8Yy-c=ZHW+R1Zu`y>Of(4 zPvPTd`cq$HSvTcJ=>;dL%FvVqL`OVSBdNk(t@81E@m3B4!f6mcjmDwqaB?( zw+d&>u5cDYyWKN-8 zCLpcc%PcQHg9VF0_12qg{@yhUf$%~2Um~{#P<$;>I&)!8eHhs!+<@wqopLjq;@7N> z;Q^nnEjLng!P?Q(p=viKo?^8SB_un?4zmulFL1VEh@qK{WB1!>y@4ZS^VOFW9C0Qf ztsuINtAeqRPrkIAIi4F~O{{46*M=JsFk@2Q$m{`ezG^{>h^DpX88iV4Jxv-%u7f77 z)menRO=6yeV}j7Y2Du(KFg`8eccDOtSDaP6ykgrQinJ4zI~-B|qW< zm|Rz6_EovUgC!zxVPNfoQFZ7k%h zdHCl~VEC}vA*ymcI9J7X1|4~TWJFOppsl?a6;r50qZamMzeD0k>PWeFlAPn zl2fiVCi<%JibnW(%|W+l=|A@)AR0WRDFn5I86T@`rGA$g-s6Ul@))M92A zIx;{onqwa#en@}Mp^97{=yn}wSpahSlpZ-I{zIznl?9TTT~@`$kOP5%0005p0002Y z006`Q0|3kr5EMW&5COo$@BkeX00RUN0dogH0Wbp)05k*y!0-hy7sCX>01ylS5CH%X z05HRFbU*+wRMcDmGXnr~P!tD1%)mt-F~9%=00aOG05CiO001yR000mi05Ai<07L)) z1H}ZvG&2AI#0(D|06+mT`~!i30MGys00Rd^F${B53{1dJ0K@=53i zA3*>^0RI3G8~_vy08hX$&_GN;006*1Fb^>Y0RRwO%s>D!0}ucJ09OD6JU|3M!2|$A wKmY_&!wdvK6ac`$KnDN-3_ZXDK*I$A1VIb|Ffb7SGywn%1OsqD01N=bFmb=)-2eap diff --git a/testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/cacerts/strongswan_blissCert.der b/testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/cacerts/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/certs/daveCert.der b/testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/certs/daveCert.der deleted file mode 100644 index 75a114339ab20f3e9b5b03e23bb16ee7719dd5dc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2179 zcmb7^dpOe#AI8mQhU74rmE&kKncvJg!eX*bCdbHeF^4f>l4o8vhn$jSPSKOY5<){1 z$)T5$s1(wXBB4S;^y=xY=lSF5z25hq_s`FDf3NGlzkl2}z=b6NT(O| z%9Vhxk5PaOR7w{Lf`GW?7%?zNOaySmNdXd2up0yl7d>zgw+lf21WCAjOl&kWlJ0UM zAX1$g%?t~o#o{yowVxswuJnsYpg6d=s2^rBW7QAX0ICRSoDpDRV1hF-1n_2F2x$Z0 z7X*&}A9nJ9>`yx>xWr!`4h{}DWnkx@5ftFZ0^)+K|H={bBP5m?O$WH(iXZylAA&%? zfT%c_3+9LfMY0jf5p~-O?wAIT0frZeU|cQP>imG=?n7J5ZB2^7AD8w~t)^}c-ovBu zX;1QOvvim(Qsp0yr3S^l3IxkwBCdxvKo9zS(N;t`cpfg7ZG(5vvfL)jJa37r3Rtqw zofD7L@wk}bIyt!h6H=bas&&pgH2LItp?Z z{bCZPmjE&Qco%7faLK-wfzhSwRPtpU`lGubl6qZu+W!VhAzd-WGwm~MJCGrbQcpT=9b=TG&qsJquzzk~v!5aXvP=iJ%^Rj8mu zH9)u{Ym*ug;zJJ(WO8d(vj(1rOv?94*YJ*9`+YF8J$zeV8fe9SH%}ri58|d>4EAn* zk-|iGN-na$Fs5qkunhk60N(`-AKA5dx%5-!zuInRBW<1t*rV6t-O!vzYD2L||NQx# zx1k>?Z&9#UII;S#0AZm1YY0*6=rOJ1H`gbIO9;>@I!o^#rHfjJUxjkQJJc7(3Mzh^ zp}KxQL^)!JLpR)=YHD3Zg)(ULUf~n|K$6Id68@2gjU<$O6K{Bql#6+kr)zv|)nhf3 zY>^+Q{LcHGa=njk%EYL4+rz7K)J9~Ac@ZpQ7*XxsEM!U5X(UfZ@%YJmxtPkVq5v|) zxApr&-N?eOO3xnIILvAEhszPEnP_5JL!w!O?PKey?hE^G?kJRzDLsEmR39tO>(KwC zBqA9uy}n{_`D?b9WwFwO zF_7854(2$*-(Nyg2jWu2Ndq|CKbJ&B6QTqtCM(R*IPTw0q}IClw|#m zkDjZ@K@h+W&j0MX)lXdwVhR`ohUEt3Ksq)gHa5y!U!NAu!2ahh=>Ls=fsD|Y80?Rm z|C+)d>p&4{ZA|q4vie{U(rZMFaAWI1lQi=}!14fwiQSJxpMu7bijct>E9b zm89kt`rk-tn0bu3r(PD-a04fVIaCz%v&osrmNPMt*4LH2o*b>J>lP8kk4^Fgn~cP$ z8>J$PuyA@Mk}$fNu3PW?ZUk*bV@AqIpAVZlnX#$xR)~O@*r{Gw#H7F6434YO9<;wF zYvjRf%ke-o@w8%pt7P+Xu^M}Yu5x?PpJH2d)$ei#cOK7v{6IYJP*HtZu5+&&6-Lf6 ziWbw3Fqif2s@iE0k`3LHM(#R2jmhXtdPy?AHH=%eRGCJ+K0;pr8B|Ej@Wjo&*Piob zO{3P=Xjp>2`^M7Db19KOJk~Ikc79Vxd4S-FzeTI0Ol-c5YBN|a)@7xs62?-cNEf{{ z2{!A5p!%Lj0<3O}ZfYu_azbuJTu?QW%!AH6;=Q_0=dOjogn|T1{<(A;t=Ihlf#Xm2 z*g#Gq7Ht&f&r-nBPQJ&(|YaivUxMS{yC)LTvojxegnEms!+W% zgdIxt6hwPJ9|Fw|*}eDiQj&LS>fTdINe`=O*pfQxq3O5+6Xqn#eHJ8yj_E5hsOIRD zKfG7o%yRY(w@c{p@fj8Lwp{4;feR(o3C+iQH7~7eD<*I_9!)dR7xwaJ!oaG7<<^BF zR43AY2+=1a7}O3;9zEPeVYCMMm{?_1v4uiMV#^ki>|n)LHq4RBmv(9w+OYhx8#hwR z{Z607;)kK%zF=a~(cjD+QyDRssMF9OSHj2lo!!+IFDctrPn`k7B_{5dnPIPJjYVL< zpX02PVS(n0#|ZB!W4ojnfy?eD|Fn7Q6rpr%u2Z-9&W*0=h(kfsC{xrPC)?DmfU~|g QC(=xTOXDBz8l*-48`(ypDF6Tf diff --git a/testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/private/daveKey.der b/testing/tests/ikev2/rw-ntru-bliss/hosts/dave/etc/ipsec.d/private/daveKey.der deleted file mode 100644 index 0ec528ddf6695691e10aaffc4f5655c76bb5477e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=q1A+sA0A+4`7aVP>4wc6^X4Nn>rA7lWsY^ed z$TTHR{BI1g7G~}5J5WF1y~@ioCNqWCkVJ|pZ?g-a?PP>ycHUwG4=QcAX{`oGUH2yz zB1u?Mpb)kbx?_q}*g06j0v@Dw5Zh6GS*n!3X1z;2ph{8fTSQc&BYjxefJU|Tq|sXs zHM)ZH>GgNEkoI+_s5y?mhY?#COn6d>xvh6W_(qv3+P+4yDu7BCGe^jLv*b_Og2XnM z(c*+Xa$}Yb>3A)qGgSEEQK^-INh=?wooG}uZB+0@M87sQ(Z(2%#Sj6L-?3@&Bpw2+ zBgIBHaF$RL!D^5x8%wPQj0d$T6cMFgb9&?NFa<|=Qw)bF@ZORF&^?N$k! zls-yGx#4D7@Z*eZE@d*o15|4vL6cI@FHn!V`ssz*ObVA z0Nk0BSB@q3tIIPs zYjv6`@=#Vv*sveON>+X5b|qJ9%$JAN-G2%|y1=(-78VrqAe$*BEHz1WQ!0F%VCn=A zUzMPG78&em(hH1D!D{9;e4NGRHIfy!=AfeE)-y?PS{Z*=be*s`0}l(t4jnJljSsYD zTFJm665NPhh5^THtYXIY@-nOXi&{OH7|+!KIXk*<))!!42_q>4Qv-p)02~4c1CBrd z0)GG?2mllS00000f)C&Uz$72X0CA4s00#q*0N{VXAMgl2fC&Kq&jj!=p01g2p5D){7Km-5)Ao5S+fCnHBdgO2jpL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/certs/moonCert.der b/testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/certs/moonCert.der deleted file mode 100644 index d0ea364b0e645d5cc91aae74ee1be3a3132f3ddc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2200 zcmb7^dpy$%AIEJo=9bHt`~5EFH+Pat#0U{)BXY}ixoi_oWLpzPvbltu4q~~SoCr;l zCif^4(&^z4bE%^jaw<7TM^As8UeELV^Zfbwe!j2Q=kxvJ`v$165`YRtRztubFc=nn zF&I65ng|2L1w;-DfcQbwY6B<)1my!fQ6hkl0K}hP01kFSqZ9%8uR<6uMI;dt6QX@n z!xGfI35juMBSWdp#LLI@}TWOoCqBDEyE3iQUVmdHGrQ>OiVz2t3f>Ih)g6z15`-Of&b5eAkcRL z41-W16h4>fVBz;S9q-Kb5^@4|TRI*y;JO{!35C{&>eL%I#vD1|dF=$X!7=go*S)1y z=rYTZ28`K{6Ei7OaZj>kmy9OapHlL*Q$h!?r3$;nPFi&fdhFX|gnbEzEgsTED{tK~G!7=P$(afts&7y)S zv}*J&xs%(vzs>~>`#@G@uG6g_-Pw$eAi3X)?Ou#O|NBH*pI>%NDRg0q^@Vb*X!Lg& zB3(N{;aPu3yhilOF1$Xu(e%YBj!zwcnU(f6Q62x}K3>l{jP0|U@M<{UwM>nVa>kG+ zw)59jN*vCyX`{qMqXJ0Vg4vY`j|xL_6(({C2Zwky$IgPboc=N%Qye8Rf7K6SwUOP`Ni710XKSh!pLS%Sys~lI%fIK34a5&}H4QV3JrWcp0yCI4^L4|J zYP8ruhqeO)*5oW#bc4}h58X^_WgKR^IAlxW?4`->6W8yjTrCz;ml;Ej{|$p zde0u63zx0jHvK@D>Bz;~;!gERg+9X#zPFOl@NzBBb#@nlHP5oT-!i~Z5@5c0qRM67 z4Xblf(x{1#Qg!W1$vgQI(`)dH8xJVi#cZ)~9k(DVs)gMLd=Vc=wpu{fD!w{&<85<8 z@s{DtmSa4!q4%BP;7(%=vD|gYBcxT6kuNWA_~a5swTv^Js7uxrA(plXt0?MM-luRdI3@n# z>c;AqrG-_Ij;xc<-K10klxzP6iLxfY9DpE8uSHNWC*q^^`GYMR9m>34KZUC*Nr!!)&;6))nq8AR)$T3B&O;ZkpboYZJ_Ij!Th)<;%!YUm zYxaQNxnD({-c}rI1gw!dCJC}M%lTQQyP~x&t!THs;T4315C1P+?u`m2L{=4URTc@2 z5sMhLu)TWaXQtWpYf2Ckz?TLIamu{BFn6;~jr$|>IoVW1$Dy5*Vy<4y_?P;{B6YKw zk9Ul;9$IbzSKaPy<^|^HtWG#L_FohFOX^v_OpH#%Fdvg?ePd6Ryr}(TZmvJ}cJ^;sjC~$8 zcdTnFHP4nnS(t0&GDOHa8n>-?f<` zy^gGC4xeCLHoajD2Ce;MQ71?3tSYKGZgDi^F?FSSlNw9zOWkpaHd#z_RnPqF*Zx6E kSkG*Q&w1DBuuLeTFV7H{J`^8-w7ZmUOjy4wKjTRL8{S~8-~a#s diff --git a/testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/private/moonKey.der b/testing/tests/ikev2/rw-ntru-bliss/hosts/moon/etc/ipsec.d/private/moonKey.der deleted file mode 100644 index c989f91e58a61c46f4b4c4fc23ce0cb32be59822..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=r1A+sA07lha3iG2uu-(6MhgbQowZoAUC$%MR zjyVpbA*t=mLBRsvC2kCpkmQ3K}{n~FKWu<&PNbV{db zyWwkg?9h0^RE21j1>n@C|A9h~%IpXhc_nTd&%|D9B4_6L6QyyfGuKkVQKT?d*c4MT zAIPS=etQ})FDCCq@ir^uH9?KL%0H_tc>ZYI{NEl<}Vv6KwvLxkB=f<}=A{gc2LS(d#DPv#$ zROMJTq84BymRq}Yr$IcS4dr$#eQ_N3#rw~{Wj)h-^GrQo<5o&soOv zI1nOEN0^92N(%_9*rvPdkpcyDFg5T?oJQVBSSC*qEvf*4oR|NU?iowf=o5bJyn%(2 zxD8?^Nn3(3uDHT5{}07+IN(U48`}<^>#L}f@hsNyL2E9kzwRu?^r@k9m`BGogsSujKUoMJwR%^z zq6S+j2jt}syr;?+BdwLy6?yOAs#y5 z5C{N}P$2Qg0DeFKl5iYi2LA#;;Q$CD@(%;yzypE700*9Ufx!R*Pve4k1n@W=amVBV zz(0a901?Ol5CQ-KKU|Ip00IExfPmwGQ3UV^C-5-+0EQr*4;!J#Ab^M*4hI|%2P5(M z_yRcG@xULDKj3fx00H?UyX(Qxs7MfdT71PV}rJjTOU8; zGlSpnCrMV9b9}x1|5cr5QrooL(lsBguRbxal2E*%`;h6?{h7&II$5N+`RA8ypQjkG z%94rCeyLV^?e6wDGm<7g`52=A=!2)GsT zo|#OnW|0<`&KiE&_txNf;?f+Zn|GQ%oPB@tii!KSmHlNJ>n^Pks`8r3(%hf+Jg_c~ zo2}@CSV+m9XPw`z@{c_}uC3$h*?W5rxA+E6(S-b${;E00%a7;;yC(eK{dCpYn=WU1 zw_IAizDv{VYc%t+1yUi`TMSlLSWFK-)Xv1r$iTR`ahXBmVgq?#ILa!sNEnDUh{P_x zTfi1*RQG&a?&hseA0)ie^L=k12T~x&B5oksgf*}Q*f_P>7+Dyb7HBatGX7^_Fc1dm zP-WpU;9}zdO0lxCGcy`kf&}GRj0_A6^cLtW&}!4jC@Cqh($`Ne%0Y`ieWd6F$|6T4 zFfjt7l96G4@$oHNr7l{|+&TTnJ2769_f0+WqVqXKk8XIl;>rUF!5U5d=!gF@BQz3w zo$qYl_%tlw9kcG)BOa=0b<6&pPvLEdd+G1Ywdm7qh4Zdk{>V)(I-+t|?6*<)qrG}B z_a*XseQ_~wdMC3;)-vO_^hc@LSFXH|ZJl{2NBB_sd$MFzCNi&;B{Dl+}48gem#HBdrXYX+j2Ll z+V4g1lIQX*_p=HgESRKNeEGYko)_Eqlux%>bm~59J=^orV9$ePCtKXlJ+E_K#9wc2 W!v5IMB+hKx;?FMmD=smHPXPd1m~$rp diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/ipsec.conf b/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/ipsec.conf deleted file mode 100644 index f176bcd92..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/ipsec.conf +++ /dev/null @@ -1,24 +0,0 @@ -# /etc/ipsec.conf - strongSwan IPsec configuration file - -config setup - -conn %default - ikelifetime=60m - keylife=20m - rekeymargin=3m - keyingtries=1 - keyexchange=ikev2 - ike=aes128-sha256-ecp256! - esp=aes128gcm16! - mobike=no - -conn net-net - left=PH_IP_SUN - leftcert=sunCert.der - leftid=@sun.strongswan.org - leftsubnet=10.2.0.0/16 - leftfirewall=yes - right=PH_IP_MOON - rightid=@moon.strongswan.org - rightsubnet=10.1.0.0/16 - auto=add diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/rsa/sunKey.pem b/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/rsa/sunKey.pem deleted file mode 100644 index d8fad9aad..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/rsa/sunKey.pem +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA35VUimfpDmNpT/8Q3qnoDlxJ9R+EErSYVraVoUVmH9jSHroB -eqqtDdf3XuHtg2xKTryijBj2H0jeA7HuE1UGwmvZWN1gL5vSrk1OFrT38DmaKa/+ -mtiPqjTJrDGg+OgOz1iHsPsp/4Xx+SCTSy2Ucllfront02sVduDXEGV34Snk6vYV -sRn1BZSlFBO6F2k23/j1i7FDn0N6Zj0hFvCysoIcfSYasmwN2p5vRqn7xC9JceMK -3V+v0w0pZoAUBAspAjh7R1rWe08IRAt4Tzff401EGAa5+TQqoZPd4BeqvFr0AQhQ -mdVw97FB2pQyNxSlcVvxY3NFYHwSCHcEMroWwQIDAQABAoIBADH51hjN2zk9HVgl -QmcTAWzcUie5cLMhrP+M9mtC8O3jcCwwFY6OwfnbMU8DHy0GMqHg5lB8b99UUVPw -HLAzjDw/ESkc6pgZs4EEhJTsxJLsvTnePgHssEgyXnXf7gRVEqJkPohfy+Zy0UCH -eIUQXiMlOQ7xg7iDMhwNa+UdWSt539DztSKilQn2xdPZjFnMT0/prvl4NA/8Zn54 -/SdWDq5yRdLWb6EK1V7yJ3687GXR1jzGtgy7TXuncUJVTYgX7RdP1Tn6gWD8YAQ/ -RfT0DdWYm4WHSgSb9/NW8lBZH2yy3hg+lNgofXEvTfBkO5QyW31LIr0tCV6zhJIc -Y9MxaKUCgYEA9sktaXfhPLe0ECjdeQEOq5EKuDrCviSKCOuAV4BDSOsdw6+5LWfY -Vb/oke8N70lL3RCblcj1pOKWUi2O/SpEJdDRduiw2gM9cXt3/bChSTHC4TsIxxN/ -Db9OGg72kZ4sRY5Au+zyAAQYBwXhFWux194Jk5qK0JblNG9J5QMqZDcCgYEA5+5h -BgHUMEO+pdME5lAiSc5PcNTejpA6j+OikCh4/HFXy3C/dLx+Cs1+egw64c8iVaIv -NEo7n7E9I0e3XqanPRXhMnBRrP+39OVsWPmZ18Li2Hi84KwJyi8Y11l3XJOqaYpF -wMVUuZpxR0dfG5k/5GwT/tEkmQBglOgG3m2zUMcCgYEA4m3Vd9ahV5dp5AXKpzKc -JjiPMFfhxJo7+FEz0ZUCp03qYljBu/Jy4MKS/grrqyiCLdQGHNlk4SNxLvdUId78 -5gGBnuuDEJU2dAAIKUE9yq2YlBUZSacOxStI2snt28/X6P3LUWHm7LLU5OS1D3Vf -mKPF/6MlSJuas5CEqVZNN+MCgYBH9Qh7IaQgmVQUBKVXg3Mv7OduvUyTdKIGtHxi -N3xZ7hxsDP4JjNWaKmlcGmFGX8pqQRheI83d3NJ4GK8GmbP3Wst0p65fezMqsudr -r30QmPFicgs/tYCQDw6o+aPzwAi2F+VOSqrfrtAIaldSq7hL+VA21dKB+cD9UgOX -jPd+TwKBgQCbKeg2QNS2qhPIG9eaqJDROuxmxb/07d7OBctgMgxVvKhqW9hW42Sy -gJ59fyz5QjFBaSfcOdf4gkKyEawVo45/q6ymIQU37R4vF4CW9Z3CfaIbwJp7LcHV -zH07so/HNsZua6GWCSCLJU5MeCRiZzk2RFiS9KIaLP4gZndv4lXOiQ== ------END RSA PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/x509/sunCert.der b/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/x509/sunCert.der deleted file mode 100644 index c1efb6719c6435ede4afe4e5466156bc84a9194e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 951 zcmXqLV%}`f#58*WGZP~d6DPyMqEn))of>Kkc-c6$+C196^D;7WvoaXC8gd(OvN4CU zun99cdl*U@h=Vv>!U8^-d8HK!#U(}gdFjFBiFt<729h8tW?>nx_Y`su*a$UVc%!K@+1AvIiJh8JL?G`5A!X zTue=jj12duhIFOBlT_Cmmq2`lU-$XY`er27qR77}} zc&6F?A78sSI?s2mO0!iI`><(KlT59e)TSKXTl4bWR{lPs?^*bm>u&t|%e5nTsqf zjQ*Hh?3z#`#8J*-v`g$D6EhRfk=~3F=ki`uyJa$F|sf=Ezn|QWc<&HPu8o#mSh-Y~E5o;&yG$t(pf z=6zAstBiZSIJWMxkomYeDCF?xg`ytc--(}kE3tRsR$cwZT;_istl@!6JzcJ8{`u3Q znRo2zJdJfauOE9vi=@ambw~1Y=TFs3Ivl&?2H(Tnm3zGZihW4GzNU{^_SO1o^)#Ke O^SLCBwmd#!eg**BcxnOw diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/ecdsa/carolKey.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/ecdsa/carolKey.pem deleted file mode 100644 index c277ba4f6..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/ecdsa/carolKey.pem +++ /dev/null @@ -1,8 +0,0 @@ ------BEGIN EC PRIVATE KEY----- -Proc-Type: 4,ENCRYPTED -DEK-Info: AES-128-CBC,E62D0EE78FCCAD3B03EA4F93FEFD057C - -CppPKxfVWWaXK3iuFa27YOe/0lWsvzhYKShyq9XanpjuCkcmxKD97eAH1TKokasH -7ffgnKzbLloxJN6g0GMTPpfiRndeK36DyTwktkyt+h+LU1xooSmNnsaM41P0GaPB -71Y87B5E5DCmWQO0icQKbQPj66GNwxBh9S6a8OaxnkU= ------END EC PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509/carolCert.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509/carolCert.pem deleted file mode 100644 index 646f6e8e3..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509/carolCert.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC8TCCAlKgAwIBAgIBEDAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMTEyMVoXDTIzMDYxMTEyMTEyMVowXzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHTAbBgNVBAMMFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMFkwEwYHKoZI -zj0CAQYIKoZIzj0DAQcDQgAE3WHJOZfpI6KZX6zlKRtCvY0VwHW/K8SWjDCuoq+C -Vb7NnQ0Lpfb22Cihwjf0/ne78AcYGapZdt8/tdxlpQm+9qOCARQwggEQMAkGA1Ud -EwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSpGHTyNt5Tfshldm2Oz0MlnHZ+ -aTB4BgNVHSMEcTBvgBS6XflxthO1atHduja3qtLB7o/Y0qFMpEowSDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9u -Z1N3YW4gRUMgUm9vdCBDQYIJAPaidX4i76aJMB8GA1UdEQQYMBaBFGNhcm9sQHN0 -cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25n -c3dhbi5vcmcvc3Ryb25nc3dhbl9lYy5jcmwwCgYIKoZIzj0EAwIDgYwAMIGIAkIA -7r9urYVPXwOUBU120HDb/0Z+ezMm8vFtGsrJPME9JdW7bdkb1IpWpSobn3Ua94Gm -q7PtKPYbOoF6m4aAIhouWkwCQgChGMvdnRhLQiItMGybWY5mLOYemM9U3CjNLRSE -gDIPWr67i05MwdofcT2hYPSFHAyeI7OfJikHrAfDcTok6kPA3A== ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index a1a86a222..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICUTCCAbKgAwIBAgIJAPaidX4i76aJMAoGCCqGSM49BAMEMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0EwHhcNMTMwNjEzMDAwMDAwWhcNMjMwNjEzMDAwMDAwWjBI -MQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UE -AxMVc3Ryb25nU3dhbiBFQyBSb290IENBMIGbMBAGByqGSM49AgEGBSuBBAAjA4GG -AAQBFMdTb4zSs2wx2kTzLKiH/+km1KcwWu/Df1iMheq2I/HuTHAKn0381HxSWWKE -J/5mz91X4zsUbjA465X73YDMcJMBQ4oFkHx4NwiW0u3kI4ztTK8cSCVLX0k5xdvb -TIeiGDHcWmSpaAhgjq6ZhghncQ9vysKF9UgNwZZ42jbe5Ek6J5KjQjBAMA8GA1Ud -EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS6XflxthO1atHd -uja3qtLB7o/Y0jAKBggqhkjOPQQDBAOBjAAwgYgCQgGC5TVO0Yy05OIO9GwQ1X7E -J08tyxmzQnCPfXKEEUOD+DDnSCcK0aCrGAIZCTmLR7euOCZ8gkPurJbML5RAjJjd -YQJCAL9qmPe6hWCEEOiOgCsy50nr5Qwo+FfS05ZItrUGVUQZES9BtmpkhjZlAOrA -ihgk0RArH39otlUFPSbSE9bicCDy ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/ecdsa/daveKey.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/ecdsa/daveKey.pem deleted file mode 100644 index 40a76935e..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/ecdsa/daveKey.pem +++ /dev/null @@ -1,6 +0,0 @@ ------BEGIN EC PRIVATE KEY----- -MIGkAgEBBDBz89+bQmsMHvfaCsI0N1bInZ+oxA9JZHZrAAkHGHaWFUQZFXBMB88n -2+6S2JvUbcygBwYFK4EEACKhZANiAAQiPVu1BMrRbeXe2c7zSzBl1UeJfNeM0oco -AfYUe/8KzxU57Gapbm2Gztkm/2V4Zb7PvK3LOKIrUnxNdE0nVvsdIZKSi/BZEm3B -Qu8lofvwQQxQrWnu3qzwqEfwb0iB2Ww= ------END EC PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509/daveCert.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509/daveCert.pem deleted file mode 100644 index 35b3df49a..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509/daveCert.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDDDCCAm2gAwIBAgIBDzAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMTAzMVoXDTIzMDYxMTEyMTAzMVowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHDAaBgNVBAMME2RhdmVAc3Ryb25nc3dhbi5vcmcwdjAQBgcqhkjO -PQIBBgUrgQQAIgNiAAQiPVu1BMrRbeXe2c7zSzBl1UeJfNeM0ocoAfYUe/8KzxU5 -7Gapbm2Gztkm/2V4Zb7PvK3LOKIrUnxNdE0nVvsdIZKSi/BZEm3BQu8lofvwQQxQ -rWnu3qzwqEfwb0iB2WyjggETMIIBDzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAd -BgNVHQ4EFgQUDCdvv80iOq2pGsjrnNiQFP2RjnsweAYDVR0jBHEwb4AUul35cbYT -tWrR3bo2t6rSwe6P2NKhTKRKMEgxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJvb3QgQ0GCCQD2 -onV+Iu+miTAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1 -MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9l -Yy5jcmwwCgYIKoZIzj0EAwIDgYwAMIGIAkIBMxGGwujqlwf+JFNXW/sbxZmynwzq -duPikzCw0wIq+YhFYJVi2YWDz0Ikfn4WUvoiUIC/uSBAJAw/3E3SHO5I4Y8CQgF2 -d6Ct2ocQwMcz5O00i3BsuOjiHvL3VB3GGG8rfIXAqwUAy4jXQo0bMh2yD+5WwKmP -GnRyvRuhwRkbBIGt6l1mbA== ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index a1a86a222..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICUTCCAbKgAwIBAgIJAPaidX4i76aJMAoGCCqGSM49BAMEMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0EwHhcNMTMwNjEzMDAwMDAwWhcNMjMwNjEzMDAwMDAwWjBI -MQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UE -AxMVc3Ryb25nU3dhbiBFQyBSb290IENBMIGbMBAGByqGSM49AgEGBSuBBAAjA4GG -AAQBFMdTb4zSs2wx2kTzLKiH/+km1KcwWu/Df1iMheq2I/HuTHAKn0381HxSWWKE -J/5mz91X4zsUbjA465X73YDMcJMBQ4oFkHx4NwiW0u3kI4ztTK8cSCVLX0k5xdvb -TIeiGDHcWmSpaAhgjq6ZhghncQ9vysKF9UgNwZZ42jbe5Ek6J5KjQjBAMA8GA1Ud -EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS6XflxthO1atHd -uja3qtLB7o/Y0jAKBggqhkjOPQQDBAOBjAAwgYgCQgGC5TVO0Yy05OIO9GwQ1X7E -J08tyxmzQnCPfXKEEUOD+DDnSCcK0aCrGAIZCTmLR7euOCZ8gkPurJbML5RAjJjd -YQJCAL9qmPe6hWCEEOiOgCsy50nr5Qwo+FfS05ZItrUGVUQZES9BtmpkhjZlAOrA -ihgk0RArH39otlUFPSbSE9bicCDy ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/ecdsa/moonKey.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/ecdsa/moonKey.pem deleted file mode 100644 index 24f07b5d7..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/ecdsa/moonKey.pem +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN EC PRIVATE KEY----- -MIHcAgEBBEIAtiNgtSnZ9gKIXkKvb8f1J+ubRkBssvOaHYjv7RMvVOqw5kQGb11B -qXHVf2Qt25/1DccijDu27YQJQLVTY0k5elSgBwYFK4EEACOhgYkDgYYABADF8xmb -Pu/a05BVtNnZflimozXZgYi+Md7hKREzL7qrdvtRwbyvki3XNo7zzc1HF/FcYyLJ -7U1j71G6QVSN7mRHBgAspFYE1LpjBlrObWcxJTF74PtzYGKaMWCP+YN52u3tGaOd -lvrDiJVi8i/GAuGjIG2tYQVJZQzqUgHHSWPuM2HRBA== ------END EC PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509/moonCert.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509/moonCert.pem deleted file mode 100644 index a4962286e..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509/moonCert.pem +++ /dev/null @@ -1,20 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDMTCCApOgAwIBAgIBDjAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMDQ0M1oXDTIzMDYxMTEyMDQ0M1owXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDUyMSBiaXQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwgZswEAYHKoZI -zj0CAQYFK4EEACMDgYYABADF8xmbPu/a05BVtNnZflimozXZgYi+Md7hKREzL7qr -dvtRwbyvki3XNo7zzc1HF/FcYyLJ7U1j71G6QVSN7mRHBgAspFYE1LpjBlrObWcx -JTF74PtzYGKaMWCP+YN52u3tGaOdlvrDiJVi8i/GAuGjIG2tYQVJZQzqUgHHSWPu -M2HRBKOCARMwggEPMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRl -8cuEZmUGoBIWQeXSYzWq/7ou4jB4BgNVHSMEcTBvgBS6XflxthO1atHduja3qtLB -7o/Y0qFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gRUMgUm9vdCBDQYIJAPaidX4i76aJMB4G -A1UdEQQXMBWCE21vb24uc3Ryb25nc3dhbi5vcmcwPAYDVR0fBDUwMzAxoC+gLYYr -aHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2VjLmNybDAKBggq -hkjOPQQDAgOBiwAwgYcCQgDtARCWbIy+tdsD9EYw/oTxfrnsWP0fw1/3UKXjSAlT -tZfJfE743Y7Zl2vqmRIeohQBYY09reTOFnUfYx/jONsTUQJBSB7w+z/CcTCQGIV8 -ISaaeAskxcg/+h87ha+5ZOkHoJDeJTqaatHu3dVx8OepEiQS0TSB9FNxj9g/9bYN -Vjo6NkA= ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index a1a86a222..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICUTCCAbKgAwIBAgIJAPaidX4i76aJMAoGCCqGSM49BAMEMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0EwHhcNMTMwNjEzMDAwMDAwWhcNMjMwNjEzMDAwMDAwWjBI -MQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UE -AxMVc3Ryb25nU3dhbiBFQyBSb290IENBMIGbMBAGByqGSM49AgEGBSuBBAAjA4GG -AAQBFMdTb4zSs2wx2kTzLKiH/+km1KcwWu/Df1iMheq2I/HuTHAKn0381HxSWWKE -J/5mz91X4zsUbjA465X73YDMcJMBQ4oFkHx4NwiW0u3kI4ztTK8cSCVLX0k5xdvb -TIeiGDHcWmSpaAhgjq6ZhghncQ9vysKF9UgNwZZ42jbe5Ek6J5KjQjBAMA8GA1Ud -EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS6XflxthO1atHd -uja3qtLB7o/Y0jAKBggqhkjOPQQDBAOBjAAwgYgCQgGC5TVO0Yy05OIO9GwQ1X7E -J08tyxmzQnCPfXKEEUOD+DDnSCcK0aCrGAIZCTmLR7euOCZ8gkPurJbML5RAjJjd -YQJCAL9qmPe6hWCEEOiOgCsy50nr5Qwo+FfS05ZItrUGVUQZES9BtmpkhjZlAOrA -ihgk0RArH39otlUFPSbSE9bicCDy ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/pkcs8/carolKey.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/pkcs8/carolKey.pem deleted file mode 100644 index d043dfd6d..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/pkcs8/carolKey.pem +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN ENCRYPTED PRIVATE KEY----- -MIHeMEkGCSqGSIb3DQEFDTA8MBsGCSqGSIb3DQEFDDAOBAiROOtxlAFj6QICCAAw -HQYJYIZIAWUDBAECBBBD9qsqx1EbF8RiH8mOSf9iBIGQ3URjA/8q9stwEZNsEtS5 -/EzlxReZu+hSmH4+PlOXegP8bSpVtSC+wgTierfXNKDOV4Bs+OY3F/l0D0NYYiaj -u041/vF1NuO38Fu5rwMZJcCZhlLXVuQVBqyQ5I+52RxTjoEluIQ5MvJOcMap/mc+ -saMMOFLlCeiseIuAWOjcpFzoOWUgXRcABCXJItj+6RgK ------END ENCRYPTED PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509/carolCert.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509/carolCert.pem deleted file mode 100644 index 646f6e8e3..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509/carolCert.pem +++ /dev/null @@ -1,18 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIC8TCCAlKgAwIBAgIBEDAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMTEyMVoXDTIzMDYxMTEyMTEyMVowXzELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDI1NiBiaXQxHTAbBgNVBAMMFGNhcm9sQHN0cm9uZ3N3YW4ub3JnMFkwEwYHKoZI -zj0CAQYIKoZIzj0DAQcDQgAE3WHJOZfpI6KZX6zlKRtCvY0VwHW/K8SWjDCuoq+C -Vb7NnQ0Lpfb22Cihwjf0/ne78AcYGapZdt8/tdxlpQm+9qOCARQwggEQMAkGA1Ud -EwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBSpGHTyNt5Tfshldm2Oz0MlnHZ+ -aTB4BgNVHSMEcTBvgBS6XflxthO1atHduja3qtLB7o/Y0qFMpEowSDELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xHjAcBgNVBAMTFXN0cm9u -Z1N3YW4gRUMgUm9vdCBDQYIJAPaidX4i76aJMB8GA1UdEQQYMBaBFGNhcm9sQHN0 -cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25n -c3dhbi5vcmcvc3Ryb25nc3dhbl9lYy5jcmwwCgYIKoZIzj0EAwIDgYwAMIGIAkIA -7r9urYVPXwOUBU120HDb/0Z+ezMm8vFtGsrJPME9JdW7bdkb1IpWpSobn3Ua94Gm -q7PtKPYbOoF6m4aAIhouWkwCQgChGMvdnRhLQiItMGybWY5mLOYemM9U3CjNLRSE -gDIPWr67i05MwdofcT2hYPSFHAyeI7OfJikHrAfDcTok6kPA3A== ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index a1a86a222..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICUTCCAbKgAwIBAgIJAPaidX4i76aJMAoGCCqGSM49BAMEMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0EwHhcNMTMwNjEzMDAwMDAwWhcNMjMwNjEzMDAwMDAwWjBI -MQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UE -AxMVc3Ryb25nU3dhbiBFQyBSb290IENBMIGbMBAGByqGSM49AgEGBSuBBAAjA4GG -AAQBFMdTb4zSs2wx2kTzLKiH/+km1KcwWu/Df1iMheq2I/HuTHAKn0381HxSWWKE -J/5mz91X4zsUbjA465X73YDMcJMBQ4oFkHx4NwiW0u3kI4ztTK8cSCVLX0k5xdvb -TIeiGDHcWmSpaAhgjq6ZhghncQ9vysKF9UgNwZZ42jbe5Ek6J5KjQjBAMA8GA1Ud -EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS6XflxthO1atHd -uja3qtLB7o/Y0jAKBggqhkjOPQQDBAOBjAAwgYgCQgGC5TVO0Yy05OIO9GwQ1X7E -J08tyxmzQnCPfXKEEUOD+DDnSCcK0aCrGAIZCTmLR7euOCZ8gkPurJbML5RAjJjd -YQJCAL9qmPe6hWCEEOiOgCsy50nr5Qwo+FfS05ZItrUGVUQZES9BtmpkhjZlAOrA -ihgk0RArH39otlUFPSbSE9bicCDy ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/pkcs8/daveKey.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/pkcs8/daveKey.pem deleted file mode 100644 index c32137ef9..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/pkcs8/daveKey.pem +++ /dev/null @@ -1,8 +0,0 @@ ------BEGIN ENCRYPTED PRIVATE KEY----- -MIIBDjBJBgkqhkiG9w0BBQ0wPDAbBgkqhkiG9w0BBQwwDgQIfDUTNLH0pIECAggA -MB0GCWCGSAFlAwQBFgQQJkz6Ue4pqL1cy6jxNoXBMQSBwMn8dxyRJjcjbPvy6v7r -Zdn7Nb69xYhkH2n+8DY8vfutsh9g84HbzzBLhpl1MJZXq8xwxS1AQUYNJqoIrd9s -4j8IkGZX935I2FBABzN4JEdY2h1zX3VJxU0XgDLEPYYJUUY0PTQ+5P1ooYyDg73t -lAUw2eKPl9sgdX2f+5gTLVJZMFkWJsCFkCHFRdLaFdsaXcoB8TI0UWYSK1yJD+6K -XbCMqK/jV/jckXtwCMIG8/DSxnObFu2PEUGjzMSAVUvCWQ== ------END ENCRYPTED PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509/daveCert.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509/daveCert.pem deleted file mode 100644 index 35b3df49a..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509/daveCert.pem +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDDDCCAm2gAwIBAgIBDzAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMTAzMVoXDTIzMDYxMTEyMTAzMVowXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDM4NCBiaXQxHDAaBgNVBAMME2RhdmVAc3Ryb25nc3dhbi5vcmcwdjAQBgcqhkjO -PQIBBgUrgQQAIgNiAAQiPVu1BMrRbeXe2c7zSzBl1UeJfNeM0ocoAfYUe/8KzxU5 -7Gapbm2Gztkm/2V4Zb7PvK3LOKIrUnxNdE0nVvsdIZKSi/BZEm3BQu8lofvwQQxQ -rWnu3qzwqEfwb0iB2WyjggETMIIBDzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDAd -BgNVHQ4EFgQUDCdvv80iOq2pGsjrnNiQFP2RjnsweAYDVR0jBHEwb4AUul35cbYT -tWrR3bo2t6rSwe6P2NKhTKRKMEgxCzAJBgNVBAYTAkNIMRkwFwYDVQQKExBMaW51 -eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdTd2FuIEVDIFJvb3QgQ0GCCQD2 -onV+Iu+miTAeBgNVHREEFzAVgRNkYXZlQHN0cm9uZ3N3YW4ub3JnMDwGA1UdHwQ1 -MDMwMaAvoC2GK2h0dHA6Ly9jcmwuc3Ryb25nc3dhbi5vcmcvc3Ryb25nc3dhbl9l -Yy5jcmwwCgYIKoZIzj0EAwIDgYwAMIGIAkIBMxGGwujqlwf+JFNXW/sbxZmynwzq -duPikzCw0wIq+YhFYJVi2YWDz0Ikfn4WUvoiUIC/uSBAJAw/3E3SHO5I4Y8CQgF2 -d6Ct2ocQwMcz5O00i3BsuOjiHvL3VB3GGG8rfIXAqwUAy4jXQo0bMh2yD+5WwKmP -GnRyvRuhwRkbBIGt6l1mbA== ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index a1a86a222..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICUTCCAbKgAwIBAgIJAPaidX4i76aJMAoGCCqGSM49BAMEMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0EwHhcNMTMwNjEzMDAwMDAwWhcNMjMwNjEzMDAwMDAwWjBI -MQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UE -AxMVc3Ryb25nU3dhbiBFQyBSb290IENBMIGbMBAGByqGSM49AgEGBSuBBAAjA4GG -AAQBFMdTb4zSs2wx2kTzLKiH/+km1KcwWu/Df1iMheq2I/HuTHAKn0381HxSWWKE -J/5mz91X4zsUbjA465X73YDMcJMBQ4oFkHx4NwiW0u3kI4ztTK8cSCVLX0k5xdvb -TIeiGDHcWmSpaAhgjq6ZhghncQ9vysKF9UgNwZZ42jbe5Ek6J5KjQjBAMA8GA1Ud -EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS6XflxthO1atHd -uja3qtLB7o/Y0jAKBggqhkjOPQQDBAOBjAAwgYgCQgGC5TVO0Yy05OIO9GwQ1X7E -J08tyxmzQnCPfXKEEUOD+DDnSCcK0aCrGAIZCTmLR7euOCZ8gkPurJbML5RAjJjd -YQJCAL9qmPe6hWCEEOiOgCsy50nr5Qwo+FfS05ZItrUGVUQZES9BtmpkhjZlAOrA -ihgk0RArH39otlUFPSbSE9bicCDy ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/pkcs8/moonKey.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/pkcs8/moonKey.pem deleted file mode 100644 index 24f07b5d7..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/pkcs8/moonKey.pem +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN EC PRIVATE KEY----- -MIHcAgEBBEIAtiNgtSnZ9gKIXkKvb8f1J+ubRkBssvOaHYjv7RMvVOqw5kQGb11B -qXHVf2Qt25/1DccijDu27YQJQLVTY0k5elSgBwYFK4EEACOhgYkDgYYABADF8xmb -Pu/a05BVtNnZflimozXZgYi+Md7hKREzL7qrdvtRwbyvki3XNo7zzc1HF/FcYyLJ -7U1j71G6QVSN7mRHBgAspFYE1LpjBlrObWcxJTF74PtzYGKaMWCP+YN52u3tGaOd -lvrDiJVi8i/GAuGjIG2tYQVJZQzqUgHHSWPuM2HRBA== ------END EC PRIVATE KEY----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509/moonCert.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509/moonCert.pem deleted file mode 100644 index a4962286e..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509/moonCert.pem +++ /dev/null @@ -1,20 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDMTCCApOgAwIBAgIBDjAKBggqhkjOPQQDAjBIMQswCQYDVQQGEwJDSDEZMBcG -A1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UEAxMVc3Ryb25nU3dhbiBFQyBS -b290IENBMB4XDTE4MDYxMzEyMDQ0M1oXDTIzMDYxMTEyMDQ0M1owXjELMAkGA1UE -BhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3YW4xFjAUBgNVBAsTDUVDRFNB -IDUyMSBiaXQxHDAaBgNVBAMTE21vb24uc3Ryb25nc3dhbi5vcmcwgZswEAYHKoZI -zj0CAQYFK4EEACMDgYYABADF8xmbPu/a05BVtNnZflimozXZgYi+Md7hKREzL7qr -dvtRwbyvki3XNo7zzc1HF/FcYyLJ7U1j71G6QVSN7mRHBgAspFYE1LpjBlrObWcx -JTF74PtzYGKaMWCP+YN52u3tGaOdlvrDiJVi8i/GAuGjIG2tYQVJZQzqUgHHSWPu -M2HRBKOCARMwggEPMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgOoMB0GA1UdDgQWBBRl -8cuEZmUGoBIWQeXSYzWq/7ou4jB4BgNVHSMEcTBvgBS6XflxthO1atHduja3qtLB -7o/Y0qFMpEowSDELMAkGA1UEBhMCQ0gxGTAXBgNVBAoTEExpbnV4IHN0cm9uZ1N3 -YW4xHjAcBgNVBAMTFXN0cm9uZ1N3YW4gRUMgUm9vdCBDQYIJAPaidX4i76aJMB4G -A1UdEQQXMBWCE21vb24uc3Ryb25nc3dhbi5vcmcwPAYDVR0fBDUwMzAxoC+gLYYr -aHR0cDovL2NybC5zdHJvbmdzd2FuLm9yZy9zdHJvbmdzd2FuX2VjLmNybDAKBggq -hkjOPQQDAgOBiwAwgYcCQgDtARCWbIy+tdsD9EYw/oTxfrnsWP0fw1/3UKXjSAlT -tZfJfE743Y7Zl2vqmRIeohQBYY09reTOFnUfYx/jONsTUQJBSB7w+z/CcTCQGIV8 -ISaaeAskxcg/+h87ha+5ZOkHoJDeJTqaatHu3dVx8OepEiQS0TSB9FNxj9g/9bYN -Vjo6NkA= ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem b/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem deleted file mode 100644 index a1a86a222..000000000 --- a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/x509ca/strongswanCert.pem +++ /dev/null @@ -1,15 +0,0 @@ ------BEGIN CERTIFICATE----- -MIICUTCCAbKgAwIBAgIJAPaidX4i76aJMAoGCCqGSM49BAMEMEgxCzAJBgNVBAYT -AkNIMRkwFwYDVQQKExBMaW51eCBzdHJvbmdTd2FuMR4wHAYDVQQDExVzdHJvbmdT -d2FuIEVDIFJvb3QgQ0EwHhcNMTMwNjEzMDAwMDAwWhcNMjMwNjEzMDAwMDAwWjBI -MQswCQYDVQQGEwJDSDEZMBcGA1UEChMQTGludXggc3Ryb25nU3dhbjEeMBwGA1UE -AxMVc3Ryb25nU3dhbiBFQyBSb290IENBMIGbMBAGByqGSM49AgEGBSuBBAAjA4GG -AAQBFMdTb4zSs2wx2kTzLKiH/+km1KcwWu/Df1iMheq2I/HuTHAKn0381HxSWWKE -J/5mz91X4zsUbjA465X73YDMcJMBQ4oFkHx4NwiW0u3kI4ztTK8cSCVLX0k5xdvb -TIeiGDHcWmSpaAhgjq6ZhghncQ9vysKF9UgNwZZ42jbe5Ek6J5KjQjBAMA8GA1Ud -EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS6XflxthO1atHd -uja3qtLB7o/Y0jAKBggqhkjOPQQDBAOBjAAwgYgCQgGC5TVO0Yy05OIO9GwQ1X7E -J08tyxmzQnCPfXKEEUOD+DDnSCcK0aCrGAIZCTmLR7euOCZ8gkPurJbML5RAjJjd -YQJCAL9qmPe6hWCEEOiOgCsy50nr5Qwo+FfS05ZItrUGVUQZES9BtmpkhjZlAOrA -ihgk0RArH39otlUFPSbSE9bicCDy ------END CERTIFICATE----- diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/pkcs12/moonCert.p12 b/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/pkcs12/moonCert.p12 deleted file mode 100644 index 365da741f555c7c8a71e6691ae20e32d976d9bab..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3661 zcmV-T4zlquf(}Un0Ru3C4i5$iDuzgg_YDCD0ic2o00e>!{4jzI_%MP9uLcP!hDe6@ z4FLxRpn?dXFoFo20s#Opf(Vrc2`Yw2hW8Bt2LUh~1_~;MNQUL0TQ|)0%G7sUrdF!Ia)~77*N82 zXQC|utgJ`f7!Cvl>KP66?DOmO&+(%#LIuo;UyxnKv%K(ew3F*R{?@KW9I?lFIT@G< zoHl4Vt$rF`6Fv^ZSmAZc9!av&@~D`NrYi~ zxtv&^oOmWoFLOqGJhk3F`H z)~^*-ZX0o``yK^Ls?)LV|7ChQ7CQRNrXdWvSacYCR{xP~ANbvUNXF@b^%#`5#bgd2 z`ZjU4;b)&q>O@t(Wca8cM0Kf3a6G1(U1$al0$IH8{?81JqyzP!lN--voO^wnBo#p+ z^Vc&lR&)kRQp;&~==Et^i-?D}q1xTyUHxD|)^Ta7zb<4R^-=K2TMqfAx}uvGGzJsV zX+=fuo-4tSjdR|@2ZV*U}qCC?x}`?TXpM7sI?~_+@gT1*`zU6WGLc1*RtBypVsDf0HyG&QG&8;0dx( zzt2p8PALJ1f$VRRpc#?$6+9_^RLGb3U6p1Wy|qIMbDQew2-(h3u^*6~9P0(25R94@ zTSL9J^Rj|hT$0OIo?T1I={;eF>&MRVJ_3(ajS3vGHt^_U6}N+8djvsZTFeRZCB?kz za%fT*(e>k6()ZphY2aC#kCA*nYQK8`hS}fBqRVCDbR7V>qBLl#DKig+;RN`|g4j1z zLH!2ZOFTGu@0feAUik#I15=YkZ712)@_zvrT&87j^-$3Zi&qCSM8MLX;0(?3ce&WM zkDP?8y`RfB*~NPN{Hw5pY@Z@+VxeEl|5aUl3S%@22d?n_c*^d`a&ONz#Mg`$psE)P z?)^R|mq+JEO0g<|cISF7YnueLuuZbSRDYIRTl9lnG`2hX| z$Mau4Y($g{jX-UiiS=UX zMphF>hF-2P0W3D~=h%PZz=k=>u8!zcoSs*AY%YPzv`8(9ho*P34wcg*Ola@4>hVkqX317#8S7QA@3P%tb*Lp1K!L*_`8?*m9zQE^_eoQCPsuBQ^|GLjz zeq9dNO(j*|8{mGlDUymcm2c3_5ufZx=P*ZnUyG^>lGXZ$)*%jk1Q4m2u(TvAWZz{+ zQa|_d!|idOwAJ47O;K_$G#u=A#poLS9=}OGPN5;UZVG{&Ee8J<3)n2a`SsZN?E+q( zmF!W)XxG?&Vf`S)H1oZYJb2Ux7;;{1p=IyY+SkptKWZN<#oox+zU7=fbZFd=_?9G12Lq2G@{ZJ3a2dWU;ANo!b{KXjh+g5zW4q`-u>WJj%mtaSZK zA=bnlwE@((>>e4OtxZk~%P>hVI9vHSjJxw`Wo6H8;9ig{|C7+jl4dClht(NEyzY%r z)xk2;eWWB)9Ba_HD;bkctLTLxSTBPVtZx&XFh-ti1tj>L#%b^d>w3NNnG-^q*YLnq zS!W4!z53TPfY)lvA~U>-R`k z8AyekCSA>wMB|KTase}%pH2O&6u=*gFuJ)-_T^7AIXyf+VY-eC>;oI08hP9w?98N& zas z-cduJz+`n)GEp#g8a*cT z`Cg)v@nJzH_nl#OwRD>g$8ePIK5W{^Vgs?I%4{(~;66$(E_c1K!ZMDy2S%%Wb8AF` zm0R>OGk`_JfTUk1pac)W3tUZ6bh7RcvCN1Q0OBF|4&WGTf|jZ_tfquUsQ_FY_7E~` zKDz)e@GzKLUZe{^~B#FRov1A;emuv+DOU|&MIIX*5qsS^eCR<4{f2ZQQY z8jX5vZ62*FZE&LNQUOfv7Zr zgm!Y>PJiJhP3`NW>0@kEz%_cJez%MLNGYfiR{A^W)%JGeZz?|`I7^3zz*G07bIdQT zsVG1cXST2Xyz7jwPA!62LrFDNi@ie4|A5D*aYdlV!C+bykQm?nSWNz6aWcCD_N&;s zUy}`;FR2gqm&Yjbe0nark3B4;fY4a}6I-?>M^!^>x+7r=6;fVeMM(vpUU}&U)Q%SI zrB6<(w#XPevQ~AMG{)?6|D2{I5}iLK>^h}?kJ(sdQ#`mam0~#BXvCeP86^Fe^zrVX zQkyCwUdn3)Md!>Z8HX(*T_Kivh#^+|{r0WyrVWBuaIo+|cm8(v?MazJRxpNC0n4A9 z2+7*d0o2@`z^nb9hi9ktWo7rV`(604^E{r)=Eq1n2z_qK(l_excWEtQ zweaX0c^HlO1HUe^BCHVF_gCt@1o47DyE<~A32D%`@jCr&FZC>Xz1Pu9o^w22QQyk! zGK!k{X^7ucs6QyIKVA~1{Z4~=o{40oJ3#++xAsa8j6hSPJ1?e}D5swE5LS?!J~%Fu z#BMl0aEWWgfN&pK%f@Q?gS2zz?1soI%~|;e-h%%gzEC*FA@PCWRQv?T>^KQl(7m3O zG4i9eM9VqyhUn(XRq=XvM`kQH0Z(BQZfR^vB-^^tvv!y!5qLVcb}I>4Y{YJi5syqz z9fkf9-y(N|ZtYEIIYu%HPoZd4yjDEot=b?tU^gE3hr9I*A|E(lB%97zij9h0iGzpO z<7nn+jk+et`J9Py(XwTtSBfTQc1Zyflc>cgi$V15g*nrM zlj4TBHdcMO zHl36z8*njpt5v)14xnsehH5C7Y50ip{naHmLV<~kxly}5j@}txZ;2d(f1}@G* zB&k z>Iq(RN=Pp`dq*xpO-K{R#TvkQ1TV^tb7q9XM0dI zuif`6?wHiaEd7@)j)@|&qT--%DGk*fru`Gp)VmjG+aS;RDJ06B*`vDP$XQm9)z-k_ z9eIG%Oii{6y*ZUjmvHZIu#0#FH!0x3BvmmbFe3&DDuzgg z_YDCF6)_eB6lqThP?f8aXmx}XR&!!w{y=GIFfcJNAutIB1uG5%0vZJX1Qc`&n{B>C f_(2!{4jzI_%MP9uLcP!hDe6@ z4FLxRpn?dXFoFo20s#Opf(Vrc2`Yw2hW8Bt2LUh~1_~;MNQU_Jy}sJ9caQb?jI`x=bQHmzTE5-uP&)eIDR@_= zIy-lbI0vjdZq>{T2d2n7B4L9?ToaHq@B>-maCF$eh~sV3IwAWKF;{uy3z^kNOlg$- zk^wW*K6Cp&6fomCZ}#@S9;74Voc(H?SM$;bki%6ql<` z-CTgSEqD<9Hub{3OPnI)rqrCxmp1Is^+%EXu6E+&ylB2hbSi&d`8@kJz{qqLUX~3y z4s1?RR>?;CO9|28xqjUudn81$S$K^iGl}GEIX#D5#sQ#8`1l@sMNWqCqap*mH>P)6sO5@jMe0AsL#j|-_119EnSN$|b@7+-` zKtB(A3FH`H7*pD1^6t~SrWv2lgqx*J(58y1{_-cPb$ams8A-)z$rAu`3|m+-o^i&y z8-k0sZQ9X1c&u8W#|4k4@jdM7Y{xU_hEMr)VvL&+IiOpaLW(Lqd(4hRJl(v4%6o_~ zah9=M561E{M=RIc;W2%%oG zYh)e_=%hF@jtRgEa@SgNLggA*#NEanYi;L@@PQLGltJg^uEK|C;~%*~KcgYr>1rh= z_>*?}Lp}f{P!9b~*xB+stWpyqw^cTk#gbXzYV0_eHtc2Y5+^8Z5=t4z$FVoT<;d!u z%--_emFD=ew))DHJ@j2g*&9VdSQKLi{$T9L#2>QOLXw>DSR0g}teNOzjIG#w#?lo7cD&s3ff5(X7DhQ0JnT1) zIqUKBgl$toaP+Syt^!}}6EeG5Ore?|_7zEohlf+{DxN?ebS`RZ?ry2xXBcAJiMO(T z<#t)Mc?A#1Y~x&#*_d*d?!MN*1Z0k>K5O076p{c@`~1u8QtYr-Ks`1)ZrdUNJ`^EP zH7@V3$Sn`hsLTvd2Mb`xk-CsCs$VuBLdxyFm=S^ZMeECu$3dMEE0d{fHMuJM`c8cx zx(`(Q6gV@*qIo7%r`y#m@k4)N`%{sR@rRSRD=#B>Up!`t)x@keL2@IMMb z;&*q#r!tVBB6lDBHpzr;*tP%Nnu@6Oy`Yfer6)TP%NQUn=yiCSe@NTohD=N-?o}tR zD=mIqnjw(Dt1=?X?WJo8hc)}`bY9TtQuYypXsH2O8BoR}h%PBx{-mY-`z%LP42zq* zYjL(SUylbWa^HfQLefmm=U{MRRWXzvJjM!mNB|F!q*jK! z7!=!!TArQTG6Ng9bytsQPo2|fP_MOH#*9>$r)sL1|1|emU^n>|XHCTY-_;;oL(Np@xH?ro1Em7tWcg-`u%d0i)g}75eXVL)zta2rcOnhwn3KnVqJz=F2PYI z$wocJWh{#TO$`oHjlxT%-xr|gzku6rFmILWYk1Lv)Sa$jb^E7q69{|wC6c07OfZQ~ zkQ*#C0E_5_qRp)pGt-gb!(<(!5}3(TcSw)&n}yx&l3)MVE*!8E(uD0sFW|5@AokxE#+cpaAY$$tzYOC25f%AP9#_xSXQb+;B zwmsaPGq46XSZdQ(s$5i*5EFxVU@y`SEA6#8kJ86*{BrJfI;YO;eTX&3AwZ!;MymFe zUabl_PE^zE!D_7Y7KJ)~8orS= zJ08^culbp|wk9S$o#BW)$TiRaJ_!Nq$|E+N>9fk>hQ}p#w%>l(4p+cl^|9&V-rAQW zD$B4`*V50^voY=%liU?T1k#hk@abW8lo%+CWBAt$ZNXv-o+z6HQ4YRYsxUaVzM+I3 z>q!0{PD^JY^Yd;X*4x2lpO5fJaSTQz6l9%ZxcTtEr~ng#Qs5UdLthmQ+=<}>mZ@hW zJ`C)4EH9})yICe-mD$&0%~9zxX>myb{I~t2 z`Wob{L?2fFKc)^m4!dzU3dpkxLK}9-h7)X;&`$c7PdcUPX%~)770w=UgZeqmjIOUQN1##~zuH-dfifF3Y(LM%igqKz9bRH|((OXv6DTs(#j}PP_N= z%Re-TC)MzM=Hz(~w6w9Uvnn<_7RQWgKY$JVO2ELD)(A_A8DPtaND@VV9m^ym8@t3^ z3+rDh0ezU*I9?}ZLBr9isAhDoA0qB8yrMEy3lCt}FoFd^1_>&LNQUcsM4VbMl64w_ zFKhLtZQNlW^4Kx!*ivj`<@*$-d7>mZie+NT}=v8&P z_-{mhp_oH5mh5rLx^z^}lLnq7$=9|;4e4g~r<|P$u74H0_K8C$(Zeuf8R;!tPY-kQ6-He{$2)Y^AGy`%k)>wwQw? zW`b%lG<2)o&Vm}Y@hsuQI^^6R&JJcoLG&k|tTKh!2a06UzP^ zFVRuUWXpf$<_j19F=PIAewQP2msg3>S*l2vG3aU-z3=iYEKu(e9s)`%B-oj|w@kde z`J)BNjdrA)hUstgUZ^pl+q+>S52twEf-2Zz`K1dWB&KT+e4jq(me*=i=A0HMr0N82 zZMkBFhfPr7G*KdG0PP^%;pAcn5`(K#l%hgew$#d!QmcHTtD!~aP6sToQ{;0E4H(8m z(LKUHd9wujV^_VT{+4!&v}iTF+zbJjnC}_ztBp!`EP~#4%Su3W?kY<-% zLUqMH&qs;xq{TwiOqm{hP*e~-k3JB7i8mz9`Fz+?18TrCcclH3?(@P%cEy#^g=im(P!)3UsvP63XkJ=Rc8O~9 zgtiKqLGw^$Y`7ocda+h+rN$oh3L@O5?wF%^?ic*eZU>2Sx}HJZOLicB%j1JQOr*ku z$CgQv&O|xSUQYVJ?+=?pNnw^XX@PfcD|V6}scFtpLWjQ#(hm*S8ch8a|J-SiU7A_Yw1 z*%Lih78?wUZ*#V5c}QU|-jcE-S|Uejhe55T#$j)T)cHqdfCkwJ1+$Zp#lLbJ^YWM% zof2i<-|<3Vf``LhAO8broT92!z0+-5p<9pYv`V@8*x&^ zy5I;TjYtJ9Q>YaMc2Vxa;4jdTim}xrHOcmagq^xud%t)n3r@F>BfgxVepelFwixJ{ z)KRX?{!Pv6o)^d>1KjJUC#2caUU4;BbtQ_iZ6eHQg)Lr?BrdLG^nGS<8c!@K(l2a6 zy%UPepk!{Q^T3;l8@Qz{Y8hUw8b|DWeOe@W(8a%yG}#hm7s>z}r3o=5Fe3&DDuzgg z_YDCF6)_eB6gxPc*JlrgnDc&$khJ-eiPOmAz%Vf|AutIB1uG5%0vZJX1QY;}Y_ktf fTC)@Hh$p-Q;7T~RLz)B#m(K%kx?(9M0s;sC0ondAf&n5h4F(A+hDe6@4FLfG1potr0S^E$f&mHwf&l>lxAW9D7s}u4I0E9- zhJQuNk87E};rNnCJ+M_}tCtPoQa7T&x8R_GavF5lT&3hbCr`t9cRJGC(0s{d60U0ondAf&n5h4F(A+hDe6@4FLfG1potr0S^E$f&mHwf&l>l);!!z#e~gYwc-V> z(b7T_4;f;Y)(Ac&Pdy;5d*OfN{eZ#o_WXBBCT{|-f(1L1lA8g^+Efv=0`z8Y>ZD!N zS%^R-B2Cp~cJL{%5ZlXD0cp=y!2}~w|e~jp%Fj7OL s>(#_L2mjUQUrE;=?uY;O3Xu?9u~-%*H;}oLO#J<&$(~k20s{d60kd0!cK`qY diff --git a/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-dnssec/hosts/moon/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 672473596a41d846e63d7d0d4a88dbd7778480e5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 294 zcmV+>0ondAf&n5h4F(A+hDe6@4FLfG1potr0S^E$f&mHwf&l>lqanhL;hlX4d*f~G#qjp0*`HV@Dnb7YNJ+u6j<0s{d60cstBlT%dIFFg=lM;V?24WNwwMssR_JQvz1sN~ zIl_>;)JWJrA1w`tJk$lFcdjkbXyz^ssel?(p^ENMe(8v8Yy-c=ZHW+R1Zu`y>Of(4 zPvPTd`cq$HSvTcJ=>;dL%FvVqL`OVSBdNk(t@81E@m3B4!f6mcjmDwqaB?( zw+d&>u5cDYyWKN-8 zCLpcc%PcQHg9VF0_12qg{@yhUf$%~2Um~{#P<$;>I&)!8eHhs!+<@wqopLjq;@7N> z;Q^nnEjLng!P?Q(p=viKo?^8SB_un?4zmulFL1VEh@qK{WB1!>y@4ZS^VOFW9C0Qf ztsuINtAeqRPrkIAIi4F~O{{46*M=JsFk@2Q$m{`ezG^{>h^DpX88iV4Jxv-%u7f77 z)menRO=6yeV}j7Y2Du(KFg`8eccDOtSDaP6ykgrQinJ4zI~-B|qW< zm|Rz6_EovUgC!zxVPNfoQFZ7k%h zdHCl~VEC}vA*ymcI9J7X1|4~TWJFOppsl?a6;r50qZamMzeD0k>PWeFlAPn zl2fiVCi<%JibnW(%|W+l=|A@)AR0WRDFn5I86T@`rGA$g-s6Ul@))M92A zIx;{onqwa#en@}Mp^97{=yn}wSpahSlpZ-I{zIznl?9TTT~@`$kOP5%0005p0002Y z006`Q0|3kr5EMW&5COo$@BkeX00RUN0dogH0Wbp)05k*y!0-hy7sCX>01ylS5CH%X z05HRFbU*+wRMcDmGXnr~P!tD1%)mt-F~9%=00aOG05CiO001yR000mi05Ai<07L)) z1H}ZvG&2AI#0(D|06+mT`~!i30MGys00Rd^F${B53{1dJ0K@=53i zA3*>^0RI3G8~_vy08hX$&_GN;006*1Fb^>Y0RRwO%s>D!0}ucJ09OD6JU|3M!2|$A wKmY_&!wdvK6ac`$KnDN-3_ZXDK*I$A1VIb|Ffb7SGywn%1OsqD01N=bFmb=)-2eap diff --git a/testing/tests/swanctl/rw-newhope-bliss/hosts/carol/etc/swanctl/x509/carolCert.der b/testing/tests/swanctl/rw-newhope-bliss/hosts/carol/etc/swanctl/x509/carolCert.der deleted file mode 100644 index 8a520c0b4e5cedeefd6c775637615623bbea39b5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2175 zcmb7^dpy&NAI9xsNVHrx8k04Y%h&yqnM>~QdG<>rPHEQr%r$T`n`U?f6kxJ>v>+U=lT5cc>~#!nLxI zE4!OV96LRLEima_Fc1`!U9(dh0umPk2!_&t6b!N-3X=yrxEQJe$nRp4yj*e$H6fnt zofa04_M|3IB1tKR8i4wD6C#iJ$+UNO_4Y;+6B1I;4t9W=vW%fAU~Xh?Xl`t5WD=+> zV+8ypfdl`d4i3nEualOS_|f5Nhyqmq8K9s*3Zo{(+Wwf4{B5It0+kG8L%4v-PX~fP zKMAlnBpX5#b8cBV(|s_ihmUi4egLN%s-L=Xnv=hzw4-hYX^Y@W4IxYDsmMoC<(*`p z7NZt9N;Y}xqzx*83i6XEEbE?@>P8BSl*%O9SKicd3&;z_*!R_R>|^H%F}g+Mb2>u| z$0ji`tA3t|eSX-husF;qvBdka8oKT8RE~I=UaOP=?(b6O>5J882wsb zmY1dC!(}Xc9-F7f#zJ}r;!eS1pcHI<@k%(IdyYx^_%!AQO*7*C=vjqrN#9z~*9x1n+u0sH9Tk>Us$qndXwi6{svJNf zPTgJvCG}A3^63qouaPDoX&gbtxh)6VHX4w7oe*A?OUfSZgI!fK18nqOq;YNOeii$# zUk`t(&ghWmrkRJ;1@4K0x)!6*+}Uv<@jlVPEmTyuDf&`FWJ9!iUfR1&wCbSRtje_E zuCPyg(FV><$Y*)hQ4&4yh0+q*4*W}SX^>yUD;=s%d^x{iJWK7K@w=`?j_kSljBVi| zYFBXMFdwW%WithGbEo^1t77xTINjNn4AC2pP|>eXG@7V53%`L>7%C%chTH2dq)*(b z;RKNr?Pn371wh{EGIg%#MRExc>08F}ZZpNMH?1<9L>c$(x}xXtA2rb`)^$42&RnEA zZ@R`Y_?RVi^fgq`7!6v^Wd45G>B<(-%1W-gul%J#Ix6Eej&w@8O;^;nAqMj3osug( z!FUvb>_M)k0rA9_ALHb^sPn{&w*)a-utiixf-JCez$9!h%hOjD+!hb%{ zU(IlEDMs0S9-d+Gu)7AGtRiMTBkjg`!5;my9)7?rxECb+So-o8j=~xgbD}i(NZ+a5!9^7z2~Z|4)#Aej6c)=TYr39(O0p2A0jSyx1x+bO?;84D~2%2wsdp&)UvilwWp#H!$}O3i!g z`b^d-0Q(PFUu4%9SucD&l;9!=As~8HyoQpB75d?z+N_e)z}}UsMsFAM;Z}u);dC{Q z&4q{E?Uyn=if{wzC32F0=8VY!u?}MJg9ar>tGc}!qe1VJv|WDAl?Q7;h#vDet`yYDxYtFKO*)GB>_T9E2JtLXD& z#7q0&D^^l8<8X|}c7M#Yw>V95ng+iP-i*yDsp32?plfs1iMLOi^H=Bvnn88y{!hVo z8zIR@^507~swP}k*xO@Q0h_<$6+bd^oMI$n(ec>WSvWYA^ob->dvjXVHnrRFfbGK+*mIAi#sC|F$%n(E=9}=^HmqpL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/bliss/daveKey.der b/testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/bliss/daveKey.der deleted file mode 100644 index 0ec528ddf6695691e10aaffc4f5655c76bb5477e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=q1A+sA0A+4`7aVP>4wc6^X4Nn>rA7lWsY^ed z$TTHR{BI1g7G~}5J5WF1y~@ioCNqWCkVJ|pZ?g-a?PP>ycHUwG4=QcAX{`oGUH2yz zB1u?Mpb)kbx?_q}*g06j0v@Dw5Zh6GS*n!3X1z;2ph{8fTSQc&BYjxefJU|Tq|sXs zHM)ZH>GgNEkoI+_s5y?mhY?#COn6d>xvh6W_(qv3+P+4yDu7BCGe^jLv*b_Og2XnM z(c*+Xa$}Yb>3A)qGgSEEQK^-INh=?wooG}uZB+0@M87sQ(Z(2%#Sj6L-?3@&Bpw2+ zBgIBHaF$RL!D^5x8%wPQj0d$T6cMFgb9&?NFa<|=Qw)bF@ZORF&^?N$k! zls-yGx#4D7@Z*eZE@d*o15|4vL6cI@FHn!V`ssz*ObVA z0Nk0BSB@q3tIIPs zYjv6`@=#Vv*sveON>+X5b|qJ9%$JAN-G2%|y1=(-78VrqAe$*BEHz1WQ!0F%VCn=A zUzMPG78&em(hH1D!D{9;e4NGRHIfy!=AfeE)-y?PS{Z*=be*s`0}l(t4jnJljSsYD zTFJm665NPhh5^THtYXIY@-nOXi&{OH7|+!KIXk*<))!!42_q>4Qv-p)02~4c1CBrd z0)GG?2mllS00000f)C&Uz$72X0CA4s00#q*0N{VXAMgl2fC&Kq&jj!=p01g2p5D){7Km-5)Ao5S+fCnHBdgO2jl4o8vhn$jSPSKOY5<){1 z$)T5$s1(wXBB4S;^y=xY=lSF5z25hq_s`FDf3NGlzkl2}z=b6NT(O| z%9Vhxk5PaOR7w{Lf`GW?7%?zNOaySmNdXd2up0yl7d>zgw+lf21WCAjOl&kWlJ0UM zAX1$g%?t~o#o{yowVxswuJnsYpg6d=s2^rBW7QAX0ICRSoDpDRV1hF-1n_2F2x$Z0 z7X*&}A9nJ9>`yx>xWr!`4h{}DWnkx@5ftFZ0^)+K|H={bBP5m?O$WH(iXZylAA&%? zfT%c_3+9LfMY0jf5p~-O?wAIT0frZeU|cQP>imG=?n7J5ZB2^7AD8w~t)^}c-ovBu zX;1QOvvim(Qsp0yr3S^l3IxkwBCdxvKo9zS(N;t`cpfg7ZG(5vvfL)jJa37r3Rtqw zofD7L@wk}bIyt!h6H=bas&&pgH2LItp?Z z{bCZPmjE&Qco%7faLK-wfzhSwRPtpU`lGubl6qZu+W!VhAzd-WGwm~MJCGrbQcpT=9b=TG&qsJquzzk~v!5aXvP=iJ%^Rj8mu zH9)u{Ym*ug;zJJ(WO8d(vj(1rOv?94*YJ*9`+YF8J$zeV8fe9SH%}ri58|d>4EAn* zk-|iGN-na$Fs5qkunhk60N(`-AKA5dx%5-!zuInRBW<1t*rV6t-O!vzYD2L||NQx# zx1k>?Z&9#UII;S#0AZm1YY0*6=rOJ1H`gbIO9;>@I!o^#rHfjJUxjkQJJc7(3Mzh^ zp}KxQL^)!JLpR)=YHD3Zg)(ULUf~n|K$6Id68@2gjU<$O6K{Bql#6+kr)zv|)nhf3 zY>^+Q{LcHGa=njk%EYL4+rz7K)J9~Ac@ZpQ7*XxsEM!U5X(UfZ@%YJmxtPkVq5v|) zxApr&-N?eOO3xnIILvAEhszPEnP_5JL!w!O?PKey?hE^G?kJRzDLsEmR39tO>(KwC zBqA9uy}n{_`D?b9WwFwO zF_7854(2$*-(Nyg2jWu2Ndq|CKbJ&B6QTqtCM(R*IPTw0q}IClw|#m zkDjZ@K@h+W&j0MX)lXdwVhR`ohUEt3Ksq)gHa5y!U!NAu!2ahh=>Ls=fsD|Y80?Rm z|C+)d>p&4{ZA|q4vie{U(rZMFaAWI1lQi=}!14fwiQSJxpMu7bijct>E9b zm89kt`rk-tn0bu3r(PD-a04fVIaCz%v&osrmNPMt*4LH2o*b>J>lP8kk4^Fgn~cP$ z8>J$PuyA@Mk}$fNu3PW?ZUk*bV@AqIpAVZlnX#$xR)~O@*r{Gw#H7F6434YO9<;wF zYvjRf%ke-o@w8%pt7P+Xu^M}Yu5x?PpJH2d)$ei#cOK7v{6IYJP*HtZu5+&&6-Lf6 ziWbw3Fqif2s@iE0k`3LHM(#R2jmhXtdPy?AHH=%eRGCJ+K0;pr8B|Ej@Wjo&*Piob zO{3P=Xjp>2`^M7Db19KOJk~Ikc79Vxd4S-FzeTI0Ol-c5YBN|a)@7xs62?-cNEf{{ z2{!A5p!%Lj0<3O}ZfYu_azbuJTu?QW%!AH6;=Q_0=dOjogn|T1{<(A;t=Ihlf#Xm2 z*g#Gq7Ht&f&r-nBPQJ&(|YaivUxMS{yC)LTvojxegnEms!+W% zgdIxt6hwPJ9|Fw|*}eDiQj&LS>fTdINe`=O*pfQxq3O5+6Xqn#eHJ8yj_E5hsOIRD zKfG7o%yRY(w@c{p@fj8Lwp{4;feR(o3C+iQH7~7eD<*I_9!)dR7xwaJ!oaG7<<^BF zR43AY2+=1a7}O3;9zEPeVYCMMm{?_1v4uiMV#^ki>|n)LHq4RBmv(9w+OYhx8#hwR z{Z607;)kK%zF=a~(cjD+QyDRssMF9OSHj2lo!!+IFDctrPn`k7B_{5dnPIPJjYVL< zpX02PVS(n0#|ZB!W4ojnfy?eD|Fn7Q6rpr%u2Z-9&W*0=h(kfsC{xrPC)?DmfU~|g QC(=xTOXDBz8l*-48`(ypDF6Tf diff --git a/testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/x509ca/strongswan_blissCert.der b/testing/tests/swanctl/rw-newhope-bliss/hosts/dave/etc/swanctl/x509ca/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/bliss/moonKey.der b/testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/bliss/moonKey.der deleted file mode 100644 index c989f91e58a61c46f4b4c4fc23ce0cb32be59822..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=r1A+sA07lha3iG2uu-(6MhgbQowZoAUC$%MR zjyVpbA*t=mLBRsvC2kCpkmQ3K}{n~FKWu<&PNbV{db zyWwkg?9h0^RE21j1>n@C|A9h~%IpXhc_nTd&%|D9B4_6L6QyyfGuKkVQKT?d*c4MT zAIPS=etQ})FDCCq@ir^uH9?KL%0H_tc>ZYI{NEl<}Vv6KwvLxkB=f<}=A{gc2LS(d#DPv#$ zROMJTq84BymRq}Yr$IcS4dr$#eQ_N3#rw~{Wj)h-^GrQo<5o&soOv zI1nOEN0^92N(%_9*rvPdkpcyDFg5T?oJQVBSSC*qEvf*4oR|NU?iowf=o5bJyn%(2 zxD8?^Nn3(3uDHT5{}07+IN(U48`}<^>#L}f@hsNyL2E9kzwRu?^r@k9m`BGogsSujKUoMJwR%^z zq6S+j2jt}syr;?+BdwLy6?yOAs#y5 z5C{N}P$2Qg0DeFKl5iYi2LA#;;Q$CD@(%;yzypE700*9Ufx!R*Pve4k1n@W=amVBV zz(0a901?Ol5CQ-KKU|Ip00IExfPmwGQ3UV^C-5-+0EQr*4;!J#Ab^M*4hI|%2P5(M z_yRcG@xULDKj3fx00HWdp#LLI@}TWOoCqBDEyE3iQUVmdHGrQ>OiVz2t3f>Ih)g6z15`-Of&b5eAkcRL z41-W16h4>fVBz;S9q-Kb5^@4|TRI*y;JO{!35C{&>eL%I#vD1|dF=$X!7=go*S)1y z=rYTZ28`K{6Ei7OaZj>kmy9OapHlL*Q$h!?r3$;nPFi&fdhFX|gnbEzEgsTED{tK~G!7=P$(afts&7y)S zv}*J&xs%(vzs>~>`#@G@uG6g_-Pw$eAi3X)?Ou#O|NBH*pI>%NDRg0q^@Vb*X!Lg& zB3(N{;aPu3yhilOF1$Xu(e%YBj!zwcnU(f6Q62x}K3>l{jP0|U@M<{UwM>nVa>kG+ zw)59jN*vCyX`{qMqXJ0Vg4vY`j|xL_6(({C2Zwky$IgPboc=N%Qye8Rf7K6SwUOP`Ni710XKSh!pLS%Sys~lI%fIK34a5&}H4QV3JrWcp0yCI4^L4|J zYP8ruhqeO)*5oW#bc4}h58X^_WgKR^IAlxW?4`->6W8yjTrCz;ml;Ej{|$p zde0u63zx0jHvK@D>Bz;~;!gERg+9X#zPFOl@NzBBb#@nlHP5oT-!i~Z5@5c0qRM67 z4Xblf(x{1#Qg!W1$vgQI(`)dH8xJVi#cZ)~9k(DVs)gMLd=Vc=wpu{fD!w{&<85<8 z@s{DtmSa4!q4%BP;7(%=vD|gYBcxT6kuNWA_~a5swTv^Js7uxrA(plXt0?MM-luRdI3@n# z>c;AqrG-_Ij;xc<-K10klxzP6iLxfY9DpE8uSHNWC*q^^`GYMR9m>34KZUC*Nr!!)&;6))nq8AR)$T3B&O;ZkpboYZJ_Ij!Th)<;%!YUm zYxaQNxnD({-c}rI1gw!dCJC}M%lTQQyP~x&t!THs;T4315C1P+?u`m2L{=4URTc@2 z5sMhLu)TWaXQtWpYf2Ckz?TLIamu{BFn6;~jr$|>IoVW1$Dy5*Vy<4y_?P;{B6YKw zk9Ul;9$IbzSKaPy<^|^HtWG#L_FohFOX^v_OpH#%Fdvg?ePd6Ryr}(TZmvJ}cJ^;sjC~$8 zcdTnFHP4nnS(t0&GDOHa8n>-?f<` zy^gGC4xeCLHoajD2Ce;MQ71?3tSYKGZgDi^F?FSSlNw9zOWkpaHd#z_RnPqF*Zx6E kSkG*Q&w1DBuuLeTFV7H{J`^8-w7ZmUOjy4wKjTRL8{S~8-~a#s diff --git a/testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/x509ca/strongswan_blissCert.der b/testing/tests/swanctl/rw-newhope-bliss/hosts/moon/etc/swanctl/x509ca/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/bliss/carolKey.der b/testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/bliss/carolKey.der deleted file mode 100644 index b2831a8ed469a917aa161d3c2852d028f4e77e54..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1182 zcmV;P1Y!Fyf&`id3o8Zz1ObAeDg^=o1A+sA07tCvmAhSLzQ#RB-&;K_U@mt1lah<= z7A2(P89*4J3ClT%dIFFg=lM;V?24WNwwMssR_JQvz1sN~ zIl_>;)JWJrA1w`tJk$lFcdjkbXyz^ssel?(p^ENMe(8v8Yy-c=ZHW+R1Zu`y>Of(4 zPvPTd`cq$HSvTcJ=>;dL%FvVqL`OVSBdNk(t@81E@m3B4!f6mcjmDwqaB?( zw+d&>u5cDYyWKN-8 zCLpcc%PcQHg9VF0_12qg{@yhUf$%~2Um~{#P<$;>I&)!8eHhs!+<@wqopLjq;@7N> z;Q^nnEjLng!P?Q(p=viKo?^8SB_un?4zmulFL1VEh@qK{WB1!>y@4ZS^VOFW9C0Qf ztsuINtAeqRPrkIAIi4F~O{{46*M=JsFk@2Q$m{`ezG^{>h^DpX88iV4Jxv-%u7f77 z)menRO=6yeV}j7Y2Du(KFg`8eccDOtSDaP6ykgrQinJ4zI~-B|qW< zm|Rz6_EovUgC!zxVPNfoQFZ7k%h zdHCl~VEC}vA*ymcI9J7X1|4~TWJFOppsl?a6;r50qZamMzeD0k>PWeFlAPn zl2fiVCi<%JibnW(%|W+l=|A@)AR0WRDFn5I86T@`rGA$g-s6Ul@))M92A zIx;{onqwa#en@}Mp^97{=yn}wSpahSlpZ-I{zIznl?9TTT~@`$kOP5%0005p0002Y z006`Q0|3kr5EMW&5COo$@BkeX00RUN0dogH0Wbp)05k*y!0-hy7sCX>01ylS5CH%X z05HRFbU*+wRMcDmGXnr~P!tD1%)mt-F~9%=00aOG05CiO001yR000mi05Ai<07L)) z1H}ZvG&2AI#0(D|06+mT`~!i30MGys00Rd^F${B53{1dJ0K@=53i zA3*>^0RI3G8~_vy08hX$&_GN;006*1Fb^>Y0RRwO%s>D!0}ucJ09OD6JU|3M!2|$A wKmY_&!wdvK6ac`$KnDN-3_ZXDK*I$A1VIb|Ffb7SGywn%1OsqD01N=bFmb=)-2eap diff --git a/testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/x509/carolCert.der b/testing/tests/swanctl/rw-ntru-bliss/hosts/carol/etc/swanctl/x509/carolCert.der deleted file mode 100644 index 8a520c0b4e5cedeefd6c775637615623bbea39b5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2175 zcmb7^dpy&NAI9xsNVHrx8k04Y%h&yqnM>~QdG<>rPHEQr%r$T`n`U?f6kxJ>v>+U=lT5cc>~#!nLxI zE4!OV96LRLEima_Fc1`!U9(dh0umPk2!_&t6b!N-3X=yrxEQJe$nRp4yj*e$H6fnt zofa04_M|3IB1tKR8i4wD6C#iJ$+UNO_4Y;+6B1I;4t9W=vW%fAU~Xh?Xl`t5WD=+> zV+8ypfdl`d4i3nEualOS_|f5Nhyqmq8K9s*3Zo{(+Wwf4{B5It0+kG8L%4v-PX~fP zKMAlnBpX5#b8cBV(|s_ihmUi4egLN%s-L=Xnv=hzw4-hYX^Y@W4IxYDsmMoC<(*`p z7NZt9N;Y}xqzx*83i6XEEbE?@>P8BSl*%O9SKicd3&;z_*!R_R>|^H%F}g+Mb2>u| z$0ji`tA3t|eSX-husF;qvBdka8oKT8RE~I=UaOP=?(b6O>5J882wsb zmY1dC!(}Xc9-F7f#zJ}r;!eS1pcHI<@k%(IdyYx^_%!AQO*7*C=vjqrN#9z~*9x1n+u0sH9Tk>Us$qndXwi6{svJNf zPTgJvCG}A3^63qouaPDoX&gbtxh)6VHX4w7oe*A?OUfSZgI!fK18nqOq;YNOeii$# zUk`t(&ghWmrkRJ;1@4K0x)!6*+}Uv<@jlVPEmTyuDf&`FWJ9!iUfR1&wCbSRtje_E zuCPyg(FV><$Y*)hQ4&4yh0+q*4*W}SX^>yUD;=s%d^x{iJWK7K@w=`?j_kSljBVi| zYFBXMFdwW%WithGbEo^1t77xTINjNn4AC2pP|>eXG@7V53%`L>7%C%chTH2dq)*(b z;RKNr?Pn371wh{EGIg%#MRExc>08F}ZZpNMH?1<9L>c$(x}xXtA2rb`)^$42&RnEA zZ@R`Y_?RVi^fgq`7!6v^Wd45G>B<(-%1W-gul%J#Ix6Eej&w@8O;^;nAqMj3osug( z!FUvb>_M)k0rA9_ALHb^sPn{&w*)a-utiixf-JCez$9!h%hOjD+!hb%{ zU(IlEDMs0S9-d+Gu)7AGtRiMTBkjg`!5;my9)7?rxECb+So-o8j=~xgbD}i(NZ+a5!9^7z2~Z|4)#Aej6c)=TYr39(O0p2A0jSyx1x+bO?;84D~2%2wsdp&)UvilwWp#H!$}O3i!g z`b^d-0Q(PFUu4%9SucD&l;9!=As~8HyoQpB75d?z+N_e)z}}UsMsFAM;Z}u);dC{Q z&4q{E?Uyn=if{wzC32F0=8VY!u?}MJg9ar>tGc}!qe1VJv|WDAl?Q7;h#vDet`yYDxYtFKO*)GB>_T9E2JtLXD& z#7q0&D^^l8<8X|}c7M#Yw>V95ng+iP-i*yDsp32?plfs1iMLOi^H=Bvnn88y{!hVo z8zIR@^507~swP}k*xO@Q0h_<$6+bd^oMI$n(ec>WSvWYA^ob->dvjXVHnrRFfbGK+*mIAi#sC|F$%n(E=9}=^HmqpL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/bliss/daveKey.der b/testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/bliss/daveKey.der deleted file mode 100644 index 0ec528ddf6695691e10aaffc4f5655c76bb5477e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=q1A+sA0A+4`7aVP>4wc6^X4Nn>rA7lWsY^ed z$TTHR{BI1g7G~}5J5WF1y~@ioCNqWCkVJ|pZ?g-a?PP>ycHUwG4=QcAX{`oGUH2yz zB1u?Mpb)kbx?_q}*g06j0v@Dw5Zh6GS*n!3X1z;2ph{8fTSQc&BYjxefJU|Tq|sXs zHM)ZH>GgNEkoI+_s5y?mhY?#COn6d>xvh6W_(qv3+P+4yDu7BCGe^jLv*b_Og2XnM z(c*+Xa$}Yb>3A)qGgSEEQK^-INh=?wooG}uZB+0@M87sQ(Z(2%#Sj6L-?3@&Bpw2+ zBgIBHaF$RL!D^5x8%wPQj0d$T6cMFgb9&?NFa<|=Qw)bF@ZORF&^?N$k! zls-yGx#4D7@Z*eZE@d*o15|4vL6cI@FHn!V`ssz*ObVA z0Nk0BSB@q3tIIPs zYjv6`@=#Vv*sveON>+X5b|qJ9%$JAN-G2%|y1=(-78VrqAe$*BEHz1WQ!0F%VCn=A zUzMPG78&em(hH1D!D{9;e4NGRHIfy!=AfeE)-y?PS{Z*=be*s`0}l(t4jnJljSsYD zTFJm665NPhh5^THtYXIY@-nOXi&{OH7|+!KIXk*<))!!42_q>4Qv-p)02~4c1CBrd z0)GG?2mllS00000f)C&Uz$72X0CA4s00#q*0N{VXAMgl2fC&Kq&jj!=p01g2p5D){7Km-5)Ao5S+fCnHBdgO2jl4o8vhn$jSPSKOY5<){1 z$)T5$s1(wXBB4S;^y=xY=lSF5z25hq_s`FDf3NGlzkl2}z=b6NT(O| z%9Vhxk5PaOR7w{Lf`GW?7%?zNOaySmNdXd2up0yl7d>zgw+lf21WCAjOl&kWlJ0UM zAX1$g%?t~o#o{yowVxswuJnsYpg6d=s2^rBW7QAX0ICRSoDpDRV1hF-1n_2F2x$Z0 z7X*&}A9nJ9>`yx>xWr!`4h{}DWnkx@5ftFZ0^)+K|H={bBP5m?O$WH(iXZylAA&%? zfT%c_3+9LfMY0jf5p~-O?wAIT0frZeU|cQP>imG=?n7J5ZB2^7AD8w~t)^}c-ovBu zX;1QOvvim(Qsp0yr3S^l3IxkwBCdxvKo9zS(N;t`cpfg7ZG(5vvfL)jJa37r3Rtqw zofD7L@wk}bIyt!h6H=bas&&pgH2LItp?Z z{bCZPmjE&Qco%7faLK-wfzhSwRPtpU`lGubl6qZu+W!VhAzd-WGwm~MJCGrbQcpT=9b=TG&qsJquzzk~v!5aXvP=iJ%^Rj8mu zH9)u{Ym*ug;zJJ(WO8d(vj(1rOv?94*YJ*9`+YF8J$zeV8fe9SH%}ri58|d>4EAn* zk-|iGN-na$Fs5qkunhk60N(`-AKA5dx%5-!zuInRBW<1t*rV6t-O!vzYD2L||NQx# zx1k>?Z&9#UII;S#0AZm1YY0*6=rOJ1H`gbIO9;>@I!o^#rHfjJUxjkQJJc7(3Mzh^ zp}KxQL^)!JLpR)=YHD3Zg)(ULUf~n|K$6Id68@2gjU<$O6K{Bql#6+kr)zv|)nhf3 zY>^+Q{LcHGa=njk%EYL4+rz7K)J9~Ac@ZpQ7*XxsEM!U5X(UfZ@%YJmxtPkVq5v|) zxApr&-N?eOO3xnIILvAEhszPEnP_5JL!w!O?PKey?hE^G?kJRzDLsEmR39tO>(KwC zBqA9uy}n{_`D?b9WwFwO zF_7854(2$*-(Nyg2jWu2Ndq|CKbJ&B6QTqtCM(R*IPTw0q}IClw|#m zkDjZ@K@h+W&j0MX)lXdwVhR`ohUEt3Ksq)gHa5y!U!NAu!2ahh=>Ls=fsD|Y80?Rm z|C+)d>p&4{ZA|q4vie{U(rZMFaAWI1lQi=}!14fwiQSJxpMu7bijct>E9b zm89kt`rk-tn0bu3r(PD-a04fVIaCz%v&osrmNPMt*4LH2o*b>J>lP8kk4^Fgn~cP$ z8>J$PuyA@Mk}$fNu3PW?ZUk*bV@AqIpAVZlnX#$xR)~O@*r{Gw#H7F6434YO9<;wF zYvjRf%ke-o@w8%pt7P+Xu^M}Yu5x?PpJH2d)$ei#cOK7v{6IYJP*HtZu5+&&6-Lf6 ziWbw3Fqif2s@iE0k`3LHM(#R2jmhXtdPy?AHH=%eRGCJ+K0;pr8B|Ej@Wjo&*Piob zO{3P=Xjp>2`^M7Db19KOJk~Ikc79Vxd4S-FzeTI0Ol-c5YBN|a)@7xs62?-cNEf{{ z2{!A5p!%Lj0<3O}ZfYu_azbuJTu?QW%!AH6;=Q_0=dOjogn|T1{<(A;t=Ihlf#Xm2 z*g#Gq7Ht&f&r-nBPQJ&(|YaivUxMS{yC)LTvojxegnEms!+W% zgdIxt6hwPJ9|Fw|*}eDiQj&LS>fTdINe`=O*pfQxq3O5+6Xqn#eHJ8yj_E5hsOIRD zKfG7o%yRY(w@c{p@fj8Lwp{4;feR(o3C+iQH7~7eD<*I_9!)dR7xwaJ!oaG7<<^BF zR43AY2+=1a7}O3;9zEPeVYCMMm{?_1v4uiMV#^ki>|n)LHq4RBmv(9w+OYhx8#hwR z{Z607;)kK%zF=a~(cjD+QyDRssMF9OSHj2lo!!+IFDctrPn`k7B_{5dnPIPJjYVL< zpX02PVS(n0#|ZB!W4ojnfy?eD|Fn7Q6rpr%u2Z-9&W*0=h(kfsC{xrPC)?DmfU~|g QC(=xTOXDBz8l*-48`(ypDF6Tf diff --git a/testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/x509ca/strongswan_blissCert.der b/testing/tests/swanctl/rw-ntru-bliss/hosts/dave/etc/swanctl/x509ca/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/bliss/moonKey.der b/testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/bliss/moonKey.der deleted file mode 100644 index c989f91e58a61c46f4b4c4fc23ce0cb32be59822..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1310 zcmV+(1>yQIf(04|3o8Zz1ObAeDg^=r1A+sA07lha3iG2uu-(6MhgbQowZoAUC$%MR zjyVpbA*t=mLBRsvC2kCpkmQ3K}{n~FKWu<&PNbV{db zyWwkg?9h0^RE21j1>n@C|A9h~%IpXhc_nTd&%|D9B4_6L6QyyfGuKkVQKT?d*c4MT zAIPS=etQ})FDCCq@ir^uH9?KL%0H_tc>ZYI{NEl<}Vv6KwvLxkB=f<}=A{gc2LS(d#DPv#$ zROMJTq84BymRq}Yr$IcS4dr$#eQ_N3#rw~{Wj)h-^GrQo<5o&soOv zI1nOEN0^92N(%_9*rvPdkpcyDFg5T?oJQVBSSC*qEvf*4oR|NU?iowf=o5bJyn%(2 zxD8?^Nn3(3uDHT5{}07+IN(U48`}<^>#L}f@hsNyL2E9kzwRu?^r@k9m`BGogsSujKUoMJwR%^z zq6S+j2jt}syr;?+BdwLy6?yOAs#y5 z5C{N}P$2Qg0DeFKl5iYi2LA#;;Q$CD@(%;yzypE700*9Ufx!R*Pve4k1n@W=amVBV zz(0a901?Ol5CQ-KKU|Ip00IExfPmwGQ3UV^C-5-+0EQr*4;!J#Ab^M*4hI|%2P5(M z_yRcG@xULDKj3fx00HWdp#LLI@}TWOoCqBDEyE3iQUVmdHGrQ>OiVz2t3f>Ih)g6z15`-Of&b5eAkcRL z41-W16h4>fVBz;S9q-Kb5^@4|TRI*y;JO{!35C{&>eL%I#vD1|dF=$X!7=go*S)1y z=rYTZ28`K{6Ei7OaZj>kmy9OapHlL*Q$h!?r3$;nPFi&fdhFX|gnbEzEgsTED{tK~G!7=P$(afts&7y)S zv}*J&xs%(vzs>~>`#@G@uG6g_-Pw$eAi3X)?Ou#O|NBH*pI>%NDRg0q^@Vb*X!Lg& zB3(N{;aPu3yhilOF1$Xu(e%YBj!zwcnU(f6Q62x}K3>l{jP0|U@M<{UwM>nVa>kG+ zw)59jN*vCyX`{qMqXJ0Vg4vY`j|xL_6(({C2Zwky$IgPboc=N%Qye8Rf7K6SwUOP`Ni710XKSh!pLS%Sys~lI%fIK34a5&}H4QV3JrWcp0yCI4^L4|J zYP8ruhqeO)*5oW#bc4}h58X^_WgKR^IAlxW?4`->6W8yjTrCz;ml;Ej{|$p zde0u63zx0jHvK@D>Bz;~;!gERg+9X#zPFOl@NzBBb#@nlHP5oT-!i~Z5@5c0qRM67 z4Xblf(x{1#Qg!W1$vgQI(`)dH8xJVi#cZ)~9k(DVs)gMLd=Vc=wpu{fD!w{&<85<8 z@s{DtmSa4!q4%BP;7(%=vD|gYBcxT6kuNWA_~a5swTv^Js7uxrA(plXt0?MM-luRdI3@n# z>c;AqrG-_Ij;xc<-K10klxzP6iLxfY9DpE8uSHNWC*q^^`GYMR9m>34KZUC*Nr!!)&;6))nq8AR)$T3B&O;ZkpboYZJ_Ij!Th)<;%!YUm zYxaQNxnD({-c}rI1gw!dCJC}M%lTQQyP~x&t!THs;T4315C1P+?u`m2L{=4URTc@2 z5sMhLu)TWaXQtWpYf2Ckz?TLIamu{BFn6;~jr$|>IoVW1$Dy5*Vy<4y_?P;{B6YKw zk9Ul;9$IbzSKaPy<^|^HtWG#L_FohFOX^v_OpH#%Fdvg?ePd6Ryr}(TZmvJ}cJ^;sjC~$8 zcdTnFHP4nnS(t0&GDOHa8n>-?f<` zy^gGC4xeCLHoajD2Ce;MQ71?3tSYKGZgDi^F?FSSlNw9zOWkpaHd#z_RnPqF*Zx6E kSkG*Q&w1DBuuLeTFV7H{J`^8-w7ZmUOjy4wKjTRL8{S~8-~a#s diff --git a/testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/x509ca/strongswan_blissCert.der b/testing/tests/swanctl/rw-ntru-bliss/hosts/moon/etc/swanctl/x509ca/strongswan_blissCert.der deleted file mode 100644 index fdfd39f138368750d6d2dc478ce4823851ef2023..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2086 zcmb`Hc{~#iAIEoLbK7Pzx4DmOOLG@v5_8TZqM2)>pL5HP4(28*%A%P2$WcOSQ*x9m zmFQ7FJheQ|Us05frJpDN^?E)3K7V~*@6YFt@9X==_l-@5YGczO!&P7q5Cnokls1$d zC~G3DoVb*+I1mC%uQCz?1H}MXcbpU!CJv@T#1SAz7n}-Kc^4!R@I+QZY)m92DI`YI zD8>5E$|jNf;k><6`&-8{~iC| z>(as1SoCiv0fD~(2ntRIa{#>wnbd#}jSx!&H5Pds*;*O>H|eFtv7C#Ve_YdiVVDMD zPIu6DTue2-T~MB5E2%0r!uMJ91Wal$`Cn}Q3NtpBR66!N75=)jf2KarW#p6sW=aT; z`?ivqeV~E%r*OfzJQ1(;h(^`DE*9WG%?``|sJd9QL@xpWs(jHKtnc*50AxX|;xVz? zCaen%Vt1~2$@R4A>6r5x^ZeDdf@gJU@Q&5fAJ~v5o^g)`gBt!BR^j_`iQR;k59aP1 zRp9iv=|_nHA8p-g0CmDO%Lm2M3RGA`?tK(3$ju^ z-7s6%>vifv9zT!DngBY^TB>grz`2-0f8-Xw#BZq5s=0JV4#rUU{CFLhV^=4`IB0|{ zyuU|m%Cl0XM5b|+Inm7!y?iL^gi&mxK5+Y&*#v1HAo`1-ivc!?|KaMUTgSULiL2bS>heif3$Y4vS8lW_K@e<5-vLqW zu-7HpS1v16!&H_h-I(Gfj__tr9p3w^4N`-0s%I+pg_BVL#grpr)vp7`3IYX-5><>; z6-%-r(O>2^@al1o3D>RUfm^9Xo$bs8D#qY3<(X<6eMOsD@vPQLe$;K83n)T0_$C*e zB=l8W#4qOK^V>?=N_W)qj{tjXoS&Sbj6Y^bh9eP}*#Z&7NL*ni_5sj-6)rId zyR2T=(gwCN&s!t-$DYee5A)^{?@ULyoXVA9^NUvPT)s>Uz)nS^$t70u>bw83_BCv_xCF`G1a!&2qw{)~?bunU(zNrdiIU%IVI?a*A8}$Atvr?8qKx zWc8C0T3B2hskce1JVfuPqt}N*1$dyj3`f-m16Y@Tkp)Zn+$6K18e*sS>4`K3_fdfr zRMXMB)$F!%xP$*$o?ABQlTyi-mJG9wzw!80Q1Csydh6ha=QWK zm!ib6YP&28K|zo!p&UQA=tx6Iki~WT(&W|Y%(pK8wxO$6-E(V#Neh^({fH0SnP zt@<@@Dy0rcV(sDa9e@{h2A?>ntec#K`PvZ48o{`!Cq)P2_g2_nYUK^nwAvrI4`0*$ zX2TUUNw_Bw3g8-tQ_2iU(A>;Ri)QQFeQJ-cx<3z@PBJ7%`0D!@-_04li1AFFnwgV= zG|MwY!A;T=Mm&I#E0yk2WH!XB(K&=!9*UyeXL&e#NLZ~N{85d(z^=_xS0gz~Y&+Wt zlpNs804GQFK#zxDXx-l--IsUjBRZ!%lp4Uo^U69R?O||A|Ia+yRDt~*e>3Cyd<}rS z%=_zx_Am*MB)=9V4FGV-AmQ0_@ib-8b4rfg_MwIHPW?N}>-dgXE$epErR23-8PbXU zXxW|u{V_|2R*TcK=;cDZ&)x3s)1~ncd-Ifu14XsXikq@M><#f$4#Huym}lE3@F@yl zMAOhvJPCT}lipY0n*sWS`b9Q*G0X3n?B|swqRC^LFxUuA`f*aLrVyJKGA224E-7YK z;ZObJq*wgBKDzWnL0nMDP8Qg!uwda8I6=)8U0zZ z35_8oW=Bre@7=!TI9MjCC(czIRZ_?{I+;+JVHpX>(V*Gnu|<_ftzWc3uS&;@GocYB zh7Wh{XO?z2aX?nEp)e!)+k|)6`&xSQa0ypCQdL{Vg9{@8sDq;KX4!td{Ym-;BzR9b zC^~w$4!%w6zNg$_OK%Q`Oprs>M`*>yxB}G+$y?bV?N&NLS+mR<>_wFt)Y{^plZ5tV z7{~BBn+|J02Yhq_xG}-)QIj5ZC5>|Ws7$?p2{k6UCXKVWY3r&)6;Q#;t diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/carolPub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/carolPub.pem deleted file mode 100644 index 8fdc45a70..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/carolPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PUNxfK3+w4AuLUhn9F -y49rmb7h+JJJPbBVZauXDeFSN6LAt+Cguu0poZfiL4C3zZmiXaZ1sRcWk772rFeW -I/a7R97Go/iYG5m6zcQsDzYQ4vSVDZqECLw7epp+QMwFKC+h4mkTA17TRSCHneDu -FPt3Dy1KBw8apCRa60ggpP1Pp78dsc2NG1iXD1mUeynyBJiOD9Dq9Xqh+2254xQP -01G/zDZjvqudFGZQZ/caU0UWaDFme0IlG5iW2fFXtVwIWimnJq5i398+aMDFs9G6 -EcppyfMjOrzcjF/l9KMxOWW4YJ9YVf80YQ1dqYGoKGREsea4Ic17HFGn2zYXVLXS -EQIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 94fadce57..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/carol/etc/swanctl/pubkey/moonPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwF+sUXQdH+WwYzdPMz -pjuwhGGvHgsmBah1IQsPsddL9gZygerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IAB -r87L9JAva56EHIAiUMuG8WizVbIKIhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6x -vMJbwHLi0h7BUO9tBVLPy72YeGNBY6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL -0DgYP/n2maPEJGEivTFunkJD/mJ8DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhy -YK5wsATB1ANeAtlFfgH+wsuHjZwtTJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47 -nwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/davePub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/davePub.pem deleted file mode 100644 index 154ac5034..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/davePub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jzcTcWEzV+14gWt0dJC -Ew8ZYpfWCD4lTz0grXvhf+T9gMHx9vx3SiZvAq+CBTuTkpsBydpUEbQC9GZv6qRd -1FmIQCUk6pHZit+UH44w3tuc+YNB6QjT1PMMm31rULX14jGZQnaHYN4MASfGumnX -CwqdYF3jwx5iGOQAStGHHwDxmUFuR3IZAkP7Lwa2nSJZLivPxqIZDS9hL4/0NWQw -ltsaGXZqrBVj4Xffn/8tUbbjj7LNdN/WjxovA+XX48dyBq834zvrpjduojlgeCHY -IQlMJoF/jOihMFJDpOvVxDkH/9XnX0nXH+6H//YKkRBdsVgWJTeQuZNM/P2lyZ5W -QwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 94fadce57..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/dave/etc/swanctl/pubkey/moonPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwF+sUXQdH+WwYzdPMz -pjuwhGGvHgsmBah1IQsPsddL9gZygerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IAB -r87L9JAva56EHIAiUMuG8WizVbIKIhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6x -vMJbwHLi0h7BUO9tBVLPy72YeGNBY6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL -0DgYP/n2maPEJGEivTFunkJD/mJ8DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhy -YK5wsATB1ANeAtlFfgH+wsuHjZwtTJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47 -nwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/carolPub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/carolPub.pem deleted file mode 100644 index 8fdc45a70..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/carolPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PUNxfK3+w4AuLUhn9F -y49rmb7h+JJJPbBVZauXDeFSN6LAt+Cguu0poZfiL4C3zZmiXaZ1sRcWk772rFeW -I/a7R97Go/iYG5m6zcQsDzYQ4vSVDZqECLw7epp+QMwFKC+h4mkTA17TRSCHneDu -FPt3Dy1KBw8apCRa60ggpP1Pp78dsc2NG1iXD1mUeynyBJiOD9Dq9Xqh+2254xQP -01G/zDZjvqudFGZQZ/caU0UWaDFme0IlG5iW2fFXtVwIWimnJq5i398+aMDFs9G6 -EcppyfMjOrzcjF/l9KMxOWW4YJ9YVf80YQ1dqYGoKGREsea4Ic17HFGn2zYXVLXS -EQIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/davePub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/davePub.pem deleted file mode 100644 index 154ac5034..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/davePub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jzcTcWEzV+14gWt0dJC -Ew8ZYpfWCD4lTz0grXvhf+T9gMHx9vx3SiZvAq+CBTuTkpsBydpUEbQC9GZv6qRd -1FmIQCUk6pHZit+UH44w3tuc+YNB6QjT1PMMm31rULX14jGZQnaHYN4MASfGumnX -CwqdYF3jwx5iGOQAStGHHwDxmUFuR3IZAkP7Lwa2nSJZLivPxqIZDS9hL4/0NWQw -ltsaGXZqrBVj4Xffn/8tUbbjj7LNdN/WjxovA+XX48dyBq834zvrpjduojlgeCHY -IQlMJoF/jOihMFJDpOvVxDkH/9XnX0nXH+6H//YKkRBdsVgWJTeQuZNM/P2lyZ5W -QwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 94fadce57..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/moonPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwF+sUXQdH+WwYzdPMz -pjuwhGGvHgsmBah1IQsPsddL9gZygerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IAB -r87L9JAva56EHIAiUMuG8WizVbIKIhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6x -vMJbwHLi0h7BUO9tBVLPy72YeGNBY6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL -0DgYP/n2maPEJGEivTFunkJD/mJ8DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhy -YK5wsATB1ANeAtlFfgH+wsuHjZwtTJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47 -nwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/sunPub.pem b/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/sunPub.pem deleted file mode 100644 index 5254ed164..000000000 --- a/testing/tests/swanctl/rw-pubkey-anon/hosts/moon/etc/swanctl/pubkey/sunPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyIgBH1KWzMMmEYS1Gr1 -4IUBg120vdsLuNwQuzu22qIHnWIBSB2L0lkLOBY0AYd3wi9ENXnb0MOJTFfE5YJ1 -gpSZCnS3m9HqgTmmYeZ3mVxSC4TJWu2oVKvosxSo5fAVvjVVQ089HtjIsx2BR/0q -LQ9lZ2dUtUSn9kohjU5qpktOfJ9XuTQj9dBfa5bpQMJoLUBAGWPMR+sPaBRwb34U -ulvmoOyIZTKGEsH6czUY0+dm8iUKmkP7S3fEQjzv56Dk3zrJcFy7ij87uu9Wk/Xs -auHAq5jHREcMFJwEOj9ZE0Q6ufz9D2NBSWvLTr7QKFVhj5HfbyUcAGRqgf+sHrkl -IQIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/carolPub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/carolPub.pem deleted file mode 100644 index 8fdc45a70..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/carolPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PUNxfK3+w4AuLUhn9F -y49rmb7h+JJJPbBVZauXDeFSN6LAt+Cguu0poZfiL4C3zZmiXaZ1sRcWk772rFeW -I/a7R97Go/iYG5m6zcQsDzYQ4vSVDZqECLw7epp+QMwFKC+h4mkTA17TRSCHneDu -FPt3Dy1KBw8apCRa60ggpP1Pp78dsc2NG1iXD1mUeynyBJiOD9Dq9Xqh+2254xQP -01G/zDZjvqudFGZQZ/caU0UWaDFme0IlG5iW2fFXtVwIWimnJq5i398+aMDFs9G6 -EcppyfMjOrzcjF/l9KMxOWW4YJ9YVf80YQ1dqYGoKGREsea4Ic17HFGn2zYXVLXS -EQIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 94fadce57..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/carol/etc/swanctl/pubkey/moonPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwF+sUXQdH+WwYzdPMz -pjuwhGGvHgsmBah1IQsPsddL9gZygerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IAB -r87L9JAva56EHIAiUMuG8WizVbIKIhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6x -vMJbwHLi0h7BUO9tBVLPy72YeGNBY6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL -0DgYP/n2maPEJGEivTFunkJD/mJ8DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhy -YK5wsATB1ANeAtlFfgH+wsuHjZwtTJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47 -nwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/davePub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/davePub.pem deleted file mode 100644 index 154ac5034..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/davePub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jzcTcWEzV+14gWt0dJC -Ew8ZYpfWCD4lTz0grXvhf+T9gMHx9vx3SiZvAq+CBTuTkpsBydpUEbQC9GZv6qRd -1FmIQCUk6pHZit+UH44w3tuc+YNB6QjT1PMMm31rULX14jGZQnaHYN4MASfGumnX -CwqdYF3jwx5iGOQAStGHHwDxmUFuR3IZAkP7Lwa2nSJZLivPxqIZDS9hL4/0NWQw -ltsaGXZqrBVj4Xffn/8tUbbjj7LNdN/WjxovA+XX48dyBq834zvrpjduojlgeCHY -IQlMJoF/jOihMFJDpOvVxDkH/9XnX0nXH+6H//YKkRBdsVgWJTeQuZNM/P2lyZ5W -QwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 94fadce57..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/dave/etc/swanctl/pubkey/moonPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwF+sUXQdH+WwYzdPMz -pjuwhGGvHgsmBah1IQsPsddL9gZygerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IAB -r87L9JAva56EHIAiUMuG8WizVbIKIhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6x -vMJbwHLi0h7BUO9tBVLPy72YeGNBY6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL -0DgYP/n2maPEJGEivTFunkJD/mJ8DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhy -YK5wsATB1ANeAtlFfgH+wsuHjZwtTJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47 -nwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/carolPub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/carolPub.pem deleted file mode 100644 index 8fdc45a70..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/carolPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PUNxfK3+w4AuLUhn9F -y49rmb7h+JJJPbBVZauXDeFSN6LAt+Cguu0poZfiL4C3zZmiXaZ1sRcWk772rFeW -I/a7R97Go/iYG5m6zcQsDzYQ4vSVDZqECLw7epp+QMwFKC+h4mkTA17TRSCHneDu -FPt3Dy1KBw8apCRa60ggpP1Pp78dsc2NG1iXD1mUeynyBJiOD9Dq9Xqh+2254xQP -01G/zDZjvqudFGZQZ/caU0UWaDFme0IlG5iW2fFXtVwIWimnJq5i398+aMDFs9G6 -EcppyfMjOrzcjF/l9KMxOWW4YJ9YVf80YQ1dqYGoKGREsea4Ic17HFGn2zYXVLXS -EQIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/davePub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/davePub.pem deleted file mode 100644 index 154ac5034..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/davePub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jzcTcWEzV+14gWt0dJC -Ew8ZYpfWCD4lTz0grXvhf+T9gMHx9vx3SiZvAq+CBTuTkpsBydpUEbQC9GZv6qRd -1FmIQCUk6pHZit+UH44w3tuc+YNB6QjT1PMMm31rULX14jGZQnaHYN4MASfGumnX -CwqdYF3jwx5iGOQAStGHHwDxmUFuR3IZAkP7Lwa2nSJZLivPxqIZDS9hL4/0NWQw -ltsaGXZqrBVj4Xffn/8tUbbjj7LNdN/WjxovA+XX48dyBq834zvrpjduojlgeCHY -IQlMJoF/jOihMFJDpOvVxDkH/9XnX0nXH+6H//YKkRBdsVgWJTeQuZNM/P2lyZ5W -QwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/moonPub.pem b/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/moonPub.pem deleted file mode 100644 index 94fadce57..000000000 --- a/testing/tests/swanctl/rw-pubkey-keyid/hosts/moon/etc/swanctl/pubkey/moonPub.pem +++ /dev/null @@ -1,9 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwF+sUXQdH+WwYzdPMz -pjuwhGGvHgsmBah1IQsPsddL9gZygerzpTM1vvQ4kbRuvE3SZWLf9uKEbiQV9IAB -r87L9JAva56EHIAiUMuG8WizVbIKIhQlZc8S2mIwAW0Jc6EmnoJv9j6F/tVD9+6x -vMJbwHLi0h7BUO9tBVLPy72YeGNBY6Cob4CrOuFOJyACezJ7i9vZ+XzOfnXpu7qL -0DgYP/n2maPEJGEivTFunkJD/mJ8DecyLTQcchsCj2118BMuf2qjVn4UWPCBBuhy -YK5wsATB1ANeAtlFfgH+wsuHjZwtTJru05lGHBZ3F2hZ9PO68hVHbIZZj6SB8X47 -nwIDAQAB ------END PUBLIC KEY----- diff --git a/testing/tests/tkm/.gitignore b/testing/tests/tkm/.gitignore new file mode 100644 index 000000000..fd93a9fff --- /dev/null +++ b/testing/tests/tkm/.gitignore @@ -0,0 +1 @@ +*.der diff --git a/testing/tests/tkm/host2host-initiator/hosts/moon/etc/tkm/moonKey.der b/testing/tests/tkm/host2host-initiator/hosts/moon/etc/tkm/moonKey.der deleted file mode 100644 index d3748930a7da99c460214bae2eedf2d58d011de0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1191 zcmV;Y1X%kpf&`-i0RRGm0RaG{dhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/host2host-initiator/hosts/moon/etc/tkm/strongswanCert.der b/testing/tests/tkm/host2host-initiator/hosts/moon/etc/tkm/strongswanCert.der deleted file mode 100644 index a5a631f4b5f8b29a990ab4b075e44e0d961c6286..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 956 zcmXqLV%}lU#I#@mGZP~d6C;BGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7Xhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/host2host-responder/hosts/moon/etc/tkm/strongswanCert.der b/testing/tests/tkm/host2host-responder/hosts/moon/etc/tkm/strongswanCert.der deleted file mode 100644 index a5a631f4b5f8b29a990ab4b075e44e0d961c6286..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 956 zcmXqLV%}lU#I#@mGZP~d6C;BGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7Xhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/host2host-xfrmproxy/hosts/moon/etc/tkm/strongswanCert.der b/testing/tests/tkm/host2host-xfrmproxy/hosts/moon/etc/tkm/strongswanCert.der deleted file mode 100644 index a5a631f4b5f8b29a990ab4b075e44e0d961c6286..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 956 zcmXqLV%}lU#I#@mGZP~d6C;BGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7X{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7XK*DG(KtLH|%tz}FXcTa7eiXV}=Ai6|Wio~m!TNJG7}Muw@+AtIL;Fj2#6mpp z=b+@@I>~TcyNW+My6;w#_3Uclz^jQSrbG$x%~YPV?jx4%TB(~C{7768~|i$f&Z)?xg{Y20|5X50)hbm1|88i@)bXs;Ls?J*@1J7^5^OP4cIFSKp|RA zHTG8C)i(=Nn7?5Nvht&BF^sRwQO4PypveTgYqEvvnlCwrqeeS zDV6!1T3TJw)M8Qj|2$6I5qC_MWfjIIJDT?z(|?r z5u1ZsQy#?ZPLWln;?r#>u8R~`2{VF8_|G%rIXji+V5+-@s{c99QU_n$mr_u`Il({S znV)0fYM-;c1z||;vvVmZcmseK2%zNJ@>qp(n$#lBQ`qx67~<20B#Xo}EAU1)0)c@5 z*>`~M*g{w44VD&UenG^AR^(p89dj~yZ$xYC!TqhSBt~*$H6xbL9c*b2qr?hL;u4GX zBlB!xq{SchIF44Gif)HX};8IOzSinI)nj}}eRhcmA zP}Z8SpqoQcmnFGKX}zCa%g@V1cz45R0)c=gWb5u=vl0LZppu3!K(;76JHOZq-J<_1 z8958xm}v!8G2QbHQ$vCm_@xps##+dJn@=UGc-45z@bq>~GU<>11=@rdU0B!}c*6Y{ z_>1fLYhS{Z;vQf@H&f`ezme!H@AcIAoAtt;4wj!;&Tr6 z5jS`m-&am9s)+DwB^uSda=0FboDs5vphKS0OG}pbxqn&8c2Pz1MtYZHokD33k;{v* zQ=G_awc?_)K7MNiDcA5#S%93BAWF3UB@XXb5Kfi!m=S%pSPA}tb z-7@{S$PE-JLDh{dC%gkZljf4{h~JKh%l#4w$zXYO4@5p>90;)hHx9N$r;<7&!ao&6 F1JA}PMCbqj diff --git a/testing/tests/tkm/net2net-initiator/hosts/moon/etc/tkm/moonKey.der b/testing/tests/tkm/net2net-initiator/hosts/moon/etc/tkm/moonKey.der deleted file mode 100644 index d3748930a7da99c460214bae2eedf2d58d011de0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1191 zcmV;Y1X%kpf&`-i0RRGm0RaG{dhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/net2net-xfrmproxy/hosts/moon/etc/tkm/moonKey.der b/testing/tests/tkm/net2net-xfrmproxy/hosts/moon/etc/tkm/moonKey.der deleted file mode 100644 index d3748930a7da99c460214bae2eedf2d58d011de0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1191 zcmV;Y1X%kpf&`-i0RRGm0RaG{dhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/net2net-xfrmproxy/hosts/moon/etc/tkm/strongswanCert.der b/testing/tests/tkm/net2net-xfrmproxy/hosts/moon/etc/tkm/strongswanCert.der deleted file mode 100644 index a5a631f4b5f8b29a990ab4b075e44e0d961c6286..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 956 zcmXqLV%}lU#I#@mGZP~d6C;BGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7Xhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/xfrmproxy-expire/hosts/moon/etc/tkm/strongswanCert.der b/testing/tests/tkm/xfrmproxy-expire/hosts/moon/etc/tkm/strongswanCert.der deleted file mode 100644 index a5a631f4b5f8b29a990ab4b075e44e0d961c6286..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 956 zcmXqLV%}lU#I#@mGZP~d6C;BGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7Xhq;DHNNyXk+g2SP10pz-}d5!ZX^}-fB~=0%k+>hYo3H0fFe-KhVf{#Rk8{q z6eVTP653)g0c{C$p(dV!Z}vWg{?$YG?yB$B*P(tUHAFmNsr5=!aKU zg`u9IZmDf7DZD)e&O{2N17$cW|K+)DR~eg}ckLtl1_t#I7>1?ibCDD1;8$OgE21=@ z0v3oWRN97VV8AV>wXr&QEC7~75yrqLO1I0TV z^mG+CxWmlkKE8dnUOwPZAtS)K0)c@5*hXNw?8$c&NLUo7BP{6)H|m=~Aj!I3F5*>x zHKl7zidc?-c(_(_zq_N=1oCi@9arBXxFcFiBXjh*797I$HWD6_+VL~sd9=_gg>jt! zP?8_lMv`L+s0s2-jAB=ZV-~&uq%Z$&ayAm(qX`X1NR-w_;%S6QF#Q&a048(=0)c@5 z!m?gta=>c?q-s({FjVa=dn#m4bxd3gx75&|JggXf(ChC_`mCu-l7f29xzp;PuK-m> zWKDBevC35FKX7yera3r2!NAOQFZ|Lwe0w8?Lu$aT-+Z>ZL5p!zv9A=*OlMv3_(X|Q zwFoubGfzK}Cy;ASJtxfKV{<;>(A3{KCP)z7P| zFWi{5=Xc&KHp;JLZmi6myO05bk%yoj^aIhm0(Krd$a)yvr3)XN)UWvRWH1toJAEDZ4?<WeaP3qCjNe!i8&xoYjClnj9{Oy<~0Uu)pa zIqlTCe_|Y*k8t zNrNw+8fCkXXBpCzo&!&pII!KwF;kq^9!$Rifq;9R0iy4Uf+(aKSj_7R*y}`}qfqTE z2hbA4Qt3y^#)qk?`JhZ@Ggjtd=&vw0J%&9PEpRyQypSC{c)T7>zjVm_x)d9wYYO&n zp~Mbd@8|6}F2D%MkGG!_o<_^bR}B#j$deD&_@CU}q94bQ)C8aMPyT{%O_DUFVI+`H FH`OpGI1&H= diff --git a/testing/tests/tkm/xfrmproxy-rekey/hosts/moon/etc/tkm/strongswanCert.der b/testing/tests/tkm/xfrmproxy-rekey/hosts/moon/etc/tkm/strongswanCert.der deleted file mode 100644 index a5a631f4b5f8b29a990ab4b075e44e0d961c6286..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 956 zcmXqLV%}lU#I#@mGZP~d6C;BGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHen`b4?{@< zaS(?~SimPUue3s;xTGjQFFm+CG0#xiKoTUyEG&c&R0zt?FHvxIG>{YLH83%-G&C?Y zFfcTDv^20ZFo$xfWla;K60!#vSs9p{82K3tni#p5niv@w_J4{`dSx4y7qR(7 zmFKC?YZA||OfE0>ZPDHQ<8R&qVr3m&D^Z!e>5hr^J|7ip;*q&X7;J9nJMy%`F{u86ZU_r zKi%fNl%kd_PMW94}Puv*8AYCiO2emHylag=VxMO zWMEv}xXGY#y@3!gwq%7F8UM3z7_b2;CPqdBZjcy13kxtYuo=jLID9N(EF!VX?-sBH z8r41Dmb-cD(+3H!^nBkN;%VE(+*PTKbXwG3(qzs@zZJ zGO5X|urkr(i+z5@#=OMO{@h~8a)ncZEmz)8dA9F0uZpn zO<5(yvOZRAu^X3LC!@PVa?^LSM*f5(vbm~p5 zWc{Ll0keeWtb7-8Uz_hvj;%$Qzkq7qpBwv{HoZxiUT2jb_hH7X Date: Sun, 5 May 2019 18:07:43 +0200 Subject: [PATCH 11/20] testing: Updated build-certs script --- .../hosts/winnetou/etc/ca/index.txt.template | 10 +- testing/scripts/build-certs | 694 +++++++++--------- .../ikev2/critical-extension/evaltest.dat | 2 +- .../hosts/moon/etc/ipsec.conf | 4 +- .../hosts/sun/etc/ipsec.conf | 4 +- .../critical-extension/posttest.dat | 2 - .../critical-extension/pretest.dat | 2 - 7 files changed, 373 insertions(+), 345 deletions(-) diff --git a/testing/hosts/winnetou/etc/ca/index.txt.template b/testing/hosts/winnetou/etc/ca/index.txt.template index 8feccc851..01dd4b299 100644 --- a/testing/hosts/winnetou/etc/ca/index.txt.template +++ b/testing/hosts/winnetou/etc/ca/index.txt.template @@ -16,7 +16,9 @@ V EE_EXPIRATION 0F unknown /C=CH/O=strongSwan Project/OU=SHA-512/CN=dave@strong V EE_EXPIRATION 10 unknown /C=CH/O=strongSwan Project/OU=OCSP/CN=carol@strongswan.org V EE_EXPIRATION 11 unknown /C=CH/O=strongSwan Project/OU=OCSP Signing Authority/CN=ocsp.strongswan.org V EE_EXPIRATION 12 unknown /C=CH/O=strongSwan Project/OU=Virtual VPN Gateway/CN=mars.strongswan.org -V EE_EXPIRATION 13 unknown /C=CH/O=strongSwan Project/CN=winnetou.strongswan.org -V EE_EXPIRATION 14 unknown /C=CH/O=strongSwan Project/CN=aaa.strongswan.org -V IM_EXPIRATION 15 unknown /C=CH/O=strongSwan Project/CN=strongSwan Attribute Authority -V SH_EXPIRATION 16 unknown /C=CH/O=strongSwan Project/CN=strongSwan Legacy AA +V EE_EXPIRATION 13 unknown /C=CH/O=strongSwan Project/OU=Critical Extension/CN=moon.strongswan.org +V EE_EXPIRATION 14 unknown /C=CH/O=strongSwan Project/OU=Critical Extension/CN=sun.strongswan.org +V EE_EXPIRATION 15 unknown /C=CH/O=strongSwan Project/CN=winnetou.strongswan.org +V EE_EXPIRATION 16 unknown /C=CH/O=strongSwan Project/CN=aaa.strongswan.org +V IM_EXPIRATION 17 unknown /C=CH/O=strongSwan Project/CN=strongSwan Attribute Authority +V SH_EXPIRATION 18 unknown /C=CH/O=strongSwan Project/CN=strongSwan Legacy AA diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index f80efcb5f..2bf717df5 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -121,6 +121,7 @@ do done # Put a copy onto the alice FreeRADIUS server +mkdir -p ${DIR}/hosts/alice/etc/raddb/certs cp ${CA_CERT} ${DIR}/hosts/alice/etc/raddb/certs # Convert strongSwan Root CA certificate into DER format @@ -132,6 +133,8 @@ pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} \ # Put a CRL copy into the ikev2/crl-ldap scenario to be used as a stale crl TEST="${TEST_DIR}/ikev2/crl-ldap" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/crls +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/crls cp ${CA_LAST_CRL} ${TEST}/hosts/carol/${IPSEC_DIR}/crls/stale.crl cp ${CA_LAST_CRL} ${TEST}/hosts/moon/${IPSEC_DIR}/crls/stale.crl @@ -152,21 +155,6 @@ do 2> /dev/null done -# Put DER-encoded moon private key and Root CA certificate into tkm scenarios -for t in host2host-initiator host2host-responder host2host-xfrmproxy \ - net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey -do - TEST="${TEST_DIR}/tkm/${t}" - cp ${CA_DIR}/keys/moonKey.der ${CA_CERT_DER} ${TEST}/hosts/moon/${TKM_DIR} -done - -# Put DER_encoded sun private key and Root CA certificate into tkm scenarios -for t in multiple-clients -do - TEST="${TEST_DIR}/tkm/${t}" - cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} -done - # Put DER-encoded moon private key and Root CA certificate into tkm scenarios for t in host2host-initiator host2host-responder host2host-xfrmproxy \ net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey @@ -177,28 +165,28 @@ do done # Put DER_encoded sun private key and Root CA certificate into tkm scenarios -for t in multiple-clients -do - TEST="${TEST_DIR}/tkm/${t}" - mkdir -p ${TEST}/hosts/sun/${TKM_DIR} - cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} -done +TEST="${TEST_DIR}/tkm/multiple-clients" +mkdir -p ${TEST}/hosts/sun/${TKM_DIR} +cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} # Convert moon private key into unencrypted PKCS#8 format TEST="${TEST_DIR}/ikev2/rw-pkcs8" -HOST_KEY=${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem -TEST_KEY=${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -out ${TEST_KEY} # Convert carol private key into v1.5 DES encrypted PKCS#8 format -HOST_KEY=${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem -TEST_KEY=${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem +HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} # Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format -HOST_KEY=${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem -TEST_KEY=${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem +HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v2 aes128 \ -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} @@ -210,37 +198,39 @@ openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v2 aes128 \ TEST="${TEST_DIR}/swanctl/net2net-pubkey" TEST_PUB="${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey/moonPub.pem" HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} cp ${TEST_PUB} ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey -# Put a copy into the ikev2/net2net-dnssec scenario -TEST="${TEST_DIR}/ikev2/net2net-dnssec" -cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +# Put a copy into the following ikev2 scenarios +for t in net2net-dnssec net2net-pubkey rw-dnssec +do + TEST="${TEST_DIR}/ikev2/${t}" + mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs + cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +done # Put a copy into the ikev2/net2net-pubkey scenario TEST="${TEST_DIR}/ikev2/net2net-pubkey" -cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs -# Put a copy into the ikev2/rw-dnssec scenario -TEST="${TEST_DIR}/ikev2/rw-dnssec" -cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs - # Put a copy into the swanctl/rw-dnssec scenario TEST="${TEST_DIR}/swanctl/rw-dnssec" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -# Put a copy into the swanctl/rw-pubkey-anon scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey - -# Put a copy into the swanctl/rw-pubkey-keyid scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey +# Put a copy into the following swanctl scenarios +for t in rw-pubkey-anon rw-pubkey-keyid +do + TEST="${TEST_DIR}/swanctl/${t}" + for h in moon carol dave + do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/pubkey + cp ${TEST_PUB} ${TEST}/hosts/${h}/${SWANCTL_DIR}/pubkey + done +done # Extract the raw sun public key for the swanctl/net2net-pubkey scenario TEST="${TEST_DIR}/swanctl/net2net-pubkey" @@ -251,6 +241,7 @@ cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey # Put a copy into the ikev2/net2net-dnssec scenario TEST="${TEST_DIR}/ikev2/net2net-dnssec" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs # Put a copy into the ikev2/net2net-pubkey scenario @@ -266,6 +257,7 @@ cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey TEST="${TEST_DIR}/swanctl/rw-dnssec" TEST_PUB="${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey/carolPub.pem" HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} # Put a copy into the swanctl/rw-pubkey-anon scenario @@ -282,6 +274,7 @@ cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey TEST="${TEST_DIR}/swanctl/rw-dnssec" TEST_PUB="${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey/davePub.pem" HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} # Put a copy into the swanctl/rw-pubkey-anon scenario @@ -337,7 +330,8 @@ issue_cert 07 bob bob@strongswan.org Research TEST="${TEST_DIR}/ikev2/net2net-pkcs12" HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" HOST_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -MOON_PKCS12="${TEST}/hosts/moon/etc/ipsec.d/private/moonCert.p12" +MOON_PKCS12="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonCert.p12" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "moon" \ -certfile ${CA_CERT} -caname "strongSwan Root CA" \ -aes128 -passout "pass:kUqd8O7mzbjXNJKQ" > ${MOON_PKCS12} 2> /dev/null @@ -345,22 +339,21 @@ openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "moon" \ # Create PKCS#12 file for sun HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" HOST_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" -SUN_PKCS12="${TEST}/hosts/sun/etc/ipsec.d/private/sunCert.p12" +SUN_PKCS12="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunCert.p12" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "sun" \ -certfile ${CA_CERT} -caname "strongSwan Root CA" \ -aes128 -passout "pass:IxjQVCF3JGI+MoPi" > ${SUN_PKCS12} 2> /dev/null # Put a PKCS#12 copy into the botan/net2net-pkcs12 scenario -TEST="${TEST_DIR}/botan/net2net-pkcs12" -mkdir -p "${TEST}/hosts/moon/etc/swanctl/pkcs12" -cp ${MOON_PKCS12} "${TEST}/hosts/moon/etc/swanctl/pkcs12" -mkdir -p "${TEST}/hosts/sun/etc/swanctl/pkcs12" -cp ${SUN_PKCS12} "${TEST}/hosts/sun/etc/swanctl/pkcs12" - -# Put a PKCS#12 copy into the openssl-ikev2/net2net-pkcs12 scenario -TEST="${TEST_DIR}/openssl-ikev2/net2net-pkcs12" -cp ${MOON_PKCS12} "${TEST}/hosts/moon/etc/swanctl/pkcs12" -cp ${SUN_PKCS12} "${TEST}/hosts/sun/etc/swanctl/pkcs12" +for t in botan/net2net-pkcs12 openssl-ikev2/net2net-pkcs12 +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 + mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs12 + cp ${MOON_PKCS12} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 + cp ${SUN_PKCS12} ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs12 +done ################################################################################ # DNSSEC Zone Files # @@ -390,6 +383,7 @@ TEST="${TEST_DIR}/swanctl/crl-to-cache" TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" CN="carol@strongswan.org" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial 01 --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ @@ -399,6 +393,7 @@ pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rs TEST_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" CN="moon.strongswan.org" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial 03 --dn "C=CH, O=${PROJECT}, CN=${CN}" \ @@ -411,22 +406,18 @@ openssl rsa -in ${HOST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${HOST_KEY} \ 2> /dev/null # Put a copy into the ikev2/dynamic-initiator scenario -TEST="${TEST_DIR}/ikev2/dynamic-initiator" -cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem - -# Put a copy into the ikev1/dynamic-initiator scenario -TEST="${TEST_DIR}/ikev1/dynamic-initiator" -cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem - -# Put a copy into the ikev1/dynamic-responder scenario -TEST="${TEST_DIR}/ikev1/dynamic-responder" -cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem +for t in ikev2/dynamic-initiator ikev1/dynamic-initiator ikev1/dynamic-responder +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs + cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private + cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem +done # Put a copy into the swanctl/rw-cert scenario TEST="${TEST_DIR}/swanctl/rw-cert" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa cp ${HOST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa # Generate another carol certificate and revoke it @@ -435,6 +426,8 @@ TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" CN="carol@strongswan.org" SERIAL="08" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -447,6 +440,8 @@ cp ${CA_CRL} ${CA_LAST_CRL} # Put a copy into the ikev2/ocsp-revoked scenario TEST="${TEST_DIR}/ikev2/ocsp-revoked" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs @@ -455,6 +450,8 @@ TEST="${TEST_DIR}/ikev2/two-certs" TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-002.pem" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-002.pem" SERIAL="09" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -470,6 +467,7 @@ cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem TEST="${TEST_DIR}/ikev2/multi-level-ca-revoked" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" SERIAL="0A" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RESEARCH_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ @@ -488,57 +486,30 @@ pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --outform pem > ${RESEARCH_CERT} cp ${RESEARCH_CERT} ${CA_DIR}/certs/${SERIAL}.pem -# Put a certificate copy into the ikev1/multi-level-ca scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +# Put a certificate copy into the following scenarios +for t in ikev1/multi-level-ca ikev2/multi-level-ca ikev2/multi-level-ca-ldap \ + ikev2/multi-level-ca-pathlen ikev2/multi-level-ca-strict \ + ikev2/ocsp-multi-level ikev2/ocsp-strict-ifuri +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +done -# Put a certificate copy into the ikev1/multi-level-ca-cr-init scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" -cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts +for t in ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts +done -# Put a certificate copy into the ikev1/multi-level-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" -cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-ldap scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-cr-init scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" -cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" -cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-pathlen scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-pathlen" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-strict scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/ocsp-multi-level scenario -TEST="${TEST_DIR}/ikev2/ocsp-multi-level" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/ocsp-strict-ifuri scenario -TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the swanctl/multi-level-ca scenario -TEST="${TEST_DIR}/swanctl/multi-level-ca" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca - -# Put a certificate copy into the swanctl/ocsp-multi-level scenario -TEST="${TEST_DIR}/swanctl/ocsp-multi-level" -cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca + cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +done # Convert Research CA certificate into DER format openssl x509 -in ${RESEARCH_CERT} -outform der -out ${RESEARCH_CERT_DER} @@ -546,6 +517,7 @@ openssl x509 -in ${RESEARCH_CERT} -outform der -out ${RESEARCH_CERT_DER} # Generate Research CA with the same private key as above but invalid CDP TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --type rsa \ --crl "http://crl.strongswan.org/not-available.crl" \ --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ @@ -565,53 +537,28 @@ pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --outform pem > ${SALES_CERT} cp ${SALES_CERT} ${CA_DIR}/certs/${SERIAL}.pem -# Put a certificate copy into the ikev1/multi-level-ca scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca" -cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +# Put a certificate copy into the following scenarios +for t in ikev1/multi-level-ca ikev2/multi-level-ca ikev2/multi-level-ca-ldap \ + ikev2/multi-level-ca-strict ikev2/ocsp-multi-level \ + ikev2/ocsp-multi-level ikev2/ocsp-strict-ifuri +do + TEST="${TEST_DIR}/${t}" + cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +done -# Put a certificate copy into the ikev1/multi-level-ca-cr-init scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" -cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts +for t in ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts + cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts +done -# Put a certificate copy into the ikev1/multi-level-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" -cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca" -cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-ldap scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" -cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-cr-init scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" -cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" -cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/multi-level-ca-strict scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" -cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/ocsp-multi-level scenario -TEST="${TEST_DIR}/ikev2/ocsp-multi-level" -cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the ikev2/ocsp-struct.ifuri scenario -TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" -cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Put a certificate copy into the swanctl/multi-level-ca scenario -TEST="${TEST_DIR}/swanctl/multi-level-ca" -cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca - -# Put a certificate copy into the swanctl/ocsp-multi-level scenario -TEST="${TEST_DIR}/swanctl/ocsp-multi-level" -cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +done # Convert Sales CA certificate into DER format openssl x509 -in ${SALES_CERT} -outform der -out ${SALES_CERT_DER} @@ -623,6 +570,8 @@ TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert-sha224.pem" KEY_PWD="gOQHdrSWeFuiZtYPetWuyzHW" CN="moon.strongswan.org" SERIAL="0D" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -638,6 +587,8 @@ TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-sha384.pem" KEY_PWD="ITP/H4lSHqGpUGmCpgNDklbzTNV+swjA" CN="carol@strongswan.org" SERIAL="0E" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -653,6 +604,8 @@ TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert-sha512.pem" KEY_PWD="MeFnDN7VUbj+qU/bkgRIFvbCketIk2wrrs5Ii8297N2v" CN="dave@strongswan.org" SERIAL="0F" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -668,6 +621,8 @@ TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" CN="carol@strongswan.org" SERIAL="10" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -677,18 +632,19 @@ cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem # Put a copy into the ikev2/ocsp-timeouts-good scenario TEST="${TEST_DIR}/ikev2/ocsp-timeouts-good" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs # Put a copy into the swanctl/ocsp-signer-cert scenario -TEST="${TEST_DIR}/swanctl/ocsp-signer-cert" -cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 - -# Put a copy into the swanctl/ocsp-disabled scenario -TEST="${TEST_DIR}/swanctl/ocsp-disabled" -cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +for t in ocsp-signer-cert ocsp-disabled +do + cd "${TEST_DIR}/swanctl/${t}/hosts/carol/${SWANCTL_DIR}" + mkdir -p rsa x509 + cp ${TEST_KEY} rsa + cp ${TEST_CERT} x509 +done # Generate an OCSP Signing certificate for the strongSwan Root CA TEST_KEY="${CA_DIR}/ocspKey.pem" @@ -715,6 +671,8 @@ pki --self --type rsa --in ${TEST_KEY} --flag ocspSigning \ # Copy self-signed OCSP Signing certificate to ikev2/ocsp-local-cert scenario TEST="${TEST_DIR}/ikev2/ocsp-local-cert" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts @@ -753,11 +711,57 @@ do done done +# Generate moon certificate with an unsupported critical X.509 extension +TEST="${TEST_DIR}/ikev2/critical-extension" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="13" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Critical Extension, CN=${CN}" \ + --critical 1.3.6.1.4.1.36906.1 --flag serverAuth \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy in the openssl-ikev2/critical extension scenario +TEST="${TEST_DIR}/openssl-ikev2/critical-extension" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 + +# Generate sun certificate with an unsupported critical X.509 extension +TEST="${TEST_DIR}/ikev2/critical-extension" +TEST_KEY="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunKey.pem" +TEST_CERT="${TEST}/hosts/sun/${IPSEC_DIR}/certs/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="14" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Critical Extension, CN=${CN}" \ + --critical 1.3.6.1.4.1.36906.1 --flag serverAuth \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy in the openssl-ikev2/critical extension scenario +TEST="${TEST_DIR}/openssl-ikev2/critical-extension" +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 + # Generate winnetou server certificate HOST_KEY="${CA_DIR}/winnetouKey.pem" HOST_CERT="${CA_DIR}/winnetouCert.pem" CN="winnetou.strongswan.org" -SERIAL="13" +SERIAL="15" pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -770,7 +774,7 @@ TEST="${TEST_DIR}/tnc/tnccs-20-pdp-eap" TEST_KEY="${TEST}/hosts/alice/${SWANCTL_DIR}/rsa/aaaKey.pem" TEST_CERT="${TEST}/hosts/alice/${SWANCTL_DIR}/x509/aaaCert.pem" CN="aaa.strongswan.org" -SERIAL="14" +SERIAL="16" cd "${TEST}/hosts/alice/${SWANCTL_DIR}" mkdir -p rsa x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} @@ -801,7 +805,10 @@ TEST="${TEST_DIR}/ikev2/acert-cached" TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey.pem" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert.pem" CN="strongSwan Attribute Authority" -SERIAL="15" +SERIAL="17" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/acerts pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${IM_END}" \ @@ -810,30 +817,34 @@ pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem # Generate carol's attribute certificate for sales and finance -ACERT=${TEST}/hosts/moon/${IPSEC_DIR}/acerts/carol-sales-finance.pem +ACERT="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/carol-sales-finance.pem" pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ --in ${CA_DIR}/certs/01.pem --group sales --group finance \ --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} # Generate dave's expired attribute certificate for sales -ACERT=${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-sales-expired.pem +ACERT="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-sales-expired.pem" pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ --in ${CA_DIR}/certs/02.pem --group sales \ --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} # Generate dave's attribute certificate for marketing -ACERT_DM=${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-marketing.pem +ACERT_DM="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-marketing.pem" pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ --in ${CA_DIR}/certs/02.pem --group marketing \ --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_DM} # Put a copy into the ikev2/acert-fallback scenario TEST="${TEST_DIR}/ikev2/acert-fallback" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/acerts cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts # Generate carol's expired attribute certificate for finance ACERT=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-finance-expired.pem +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/acerts pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ --in ${CA_DIR}/certs/01.pem --group finance \ --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} @@ -846,6 +857,10 @@ pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ # Put a copy into the ikev2/acert-inline scenarion TEST="${TEST_DIR}/ikev2/acert-inline" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/acerts +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/acerts cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts cp ${ACERT_CS} ${TEST}/hosts/carol/${IPSEC_DIR}/acerts @@ -855,7 +870,7 @@ cp ${ACERT_DM} ${TEST}/hosts/dave/${IPSEC_DIR}/acerts CN="strongSwan Legacy AA" TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey-expired.pem" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert-expired.pem" -SERIAL="16" +SERIAL="18" pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${SH_END}" \ @@ -865,6 +880,7 @@ cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem # Genrate dave's attribute certificate for sales from expired AA ACERT=${TEST}/hosts/dave/${IPSEC_DIR}/acerts/dave-expired-aa.pem +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/acerts pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ --in ${CA_DIR}/certs/02.pem --group sales \ --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} @@ -890,6 +906,8 @@ TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" CN="carol@strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -901,74 +919,35 @@ cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem openssl rsa -in ${TEST_KEY} -outform der \ -out ${RESEARCH_DIR}/keys/${SERIAL}.der 2> /dev/null -# Put a copy in the ikev2/multilevel-ca-cr-init scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs +# Put a copy in the following scenarios +for t in ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-ldap ikev2/multi-level-ca-loop \ + ikev2/multi-level-ca-revoked ikev2/multi-level-ca-skipped \ + ikev2/multi-level-ca-strict ikev2/ocsp-multi-level \ + ikev1/multi-level-ca ikev1/multi-level-ca-cr-init \ + ikev1/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs + cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private + cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs +done -# Put a copy in the ikev2/multilevel-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-ldap scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-ldap scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-revoked scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-revoked" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-skipped scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-strict scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/ocsp-multilevel scenario -TEST="${TEST_DIR}/ikev2/ocsp-multi-level" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev1/multilevel-ca scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev1/multilevel-ca-cr-init scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the ikev1/multilevel-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the swanctl/multilevel-ca scenario -TEST="${TEST_DIR}/swanctl/multi-level-ca" -cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 - -# Put a copy in the swanctl/ocsp-multilevel scenario -TEST="${TEST_DIR}/swanctl/ocsp-multi-level" -cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa + mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa + cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +done # Generate a carol research certificate without a CDP TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ @@ -992,6 +971,7 @@ cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/sales_by_researchCert.pem" SERIAL="03" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ --in ${SALES_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ @@ -1020,6 +1000,8 @@ TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" CN="carol@strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${DUCK_KEY} --cacert ${DUCK_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1041,6 +1023,8 @@ TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" CN="dave@strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1052,59 +1036,33 @@ cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem openssl rsa -in ${TEST_KEY} -outform der \ -out ${SALES_DIR}/keys/${SERIAL}.der 2> /dev/null -# Put a copy in the ikev2/multilevel-ca-cr-init scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-init" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs +# Put a copy in the following scenarios +for t in ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-ldap ikev2/multi-level-ca-strict \ + ikev2/ocsp-multi-level ikev1/multi-level-ca \ + ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs + cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private + cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs +done -# Put a copy in the ikev2/multilevel-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-cr-resp" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-ldap scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-ldap" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/multilevel-ca-strict scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-strict" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the ikev2/ocsp-multilevel scenario -TEST="${TEST_DIR}/ikev2/ocsp-multi-level" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the ikev1/multilevel-ca scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the ikev1/multilevel-ca-cr-init scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-init" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the ikev1/multilevel-ca-cr-resp scenario -TEST="${TEST_DIR}/ikev1/multi-level-ca-cr-resp" -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs - -# Put a copy in the swanctl/multilevel-ca scenario -TEST="${TEST_DIR}/swanctl/multi-level-ca" -cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 - -# Put a copy in the swanctl/ocsp-multilevel scenario -TEST="${TEST_DIR}/swanctl/ocsp-multi-level" -cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa + mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 + cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa + cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +done # Generate a dave sales certificate with an inactive OCSP URI and no CDP TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ @@ -1128,6 +1086,7 @@ cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/research_by_salesCert.pem" SERIAL="03" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ @@ -1150,16 +1109,24 @@ pki --self --type ecdsa --in ${ECDSA_KEY} \ --outform pem > ${ECDSA_CERT} # Put a copy in the openssl-ikev2/ecdsa-certs scenario -TEST="${TEST_DIR}/openssl-ikev2/ecdsa-certs" -cp ${ECDSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -cp ${ECDSA_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca -cp ${ECDSA_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca +for t in ecdsa-certs ecdsa-pkcs8 +do + TEST="${TEST_DIR}/openssl-ikev2/${t}" + for h in moon carol dave + do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${ECDSA_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + done +done # Generate a moon ECDSA 521 bit certificate +TEST="${TEST_DIR}/openssl-ikev2/ecdsa-certs" MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa/moonKey.pem" MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" CN="moon.strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 pki --gen --type ecdsa --size 521 --outform pem > ${MOON_KEY} pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1172,6 +1139,8 @@ CAROL_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa/carolKey.pem" CAROL_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" CN="carol@strongswan.org" SERIAL="02" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 pki --gen --type ecdsa --size 256 --outform pem > ${CAROL_KEY} pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ --in ${CAROL_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1184,6 +1153,8 @@ DAVE_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa/daveKey.pem" DAVE_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" CN="dave@strongswan.org" SERIAL="03" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 pki --gen --type ecdsa --size 384 --outform pem > ${DAVE_KEY} pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ --in ${DAVE_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1191,30 +1162,33 @@ pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ --crl ${ECDSA_CDP} --outform pem > ${DAVE_CERT} cp ${DAVE_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem -# Put CA and EE certificate copies in the openssl-ikev2/rw-ecdsa-pkcs8 scenario +# Put CA and EE certificate copies in the openssl-ikev2/ecdsa-pkcs8 scenario TEST="${TEST_DIR}/openssl-ikev2/ecdsa-pkcs8" -cp ${ECDSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${ECDSA_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca cp ${CAROL_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -cp ${ECDSA_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca cp ${DAVE_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 # Convert moon private key into unencrypted PKCS#8 format -TEST_KEY=${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem +TEST_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 openssl pkcs8 -in ${MOON_KEY} -nocrypt -topk8 -out ${TEST_KEY} # Convert carol private key into v1.5 DES encrypted PKCS#8 format -TEST_KEY=${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8 openssl pkcs8 -in ${CAROL_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} # Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format -TEST_KEY=${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 openssl pkcs8 -in ${DAVE_KEY} -nocrypt -topk8 -v2 aes128 \ -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} -# Put CA and EE certificate copies in the openssl-ikev1/rw-ecdsa-certs scenario +# Put CA and EE certificate copies in the openssl-ikev1/ecdsa-certs scenario TEST="${TEST_DIR}/openssl-ikev1/ecdsa-certs" cd ${TEST}/hosts/moon/${SWANCTL_DIR} mkdir -p ecdsa x509 x509ca @@ -1359,6 +1333,8 @@ pki --self --type rsa --in ${SHA3_RSA_KEY} --digest sha3_256 \ # Put a copy in the swanctl/net2net-sha3-rsa-cert scenario TEST="${TEST_DIR}/swanctl/net2net-sha3-rsa-cert" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca cp ${SHA3_RSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca cp ${SHA3_RSA_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca @@ -1367,6 +1343,8 @@ SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" CN="sun.strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SUN_KEY} pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1379,6 +1357,8 @@ MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" CN="moon.strongswan.org" SERIAL="02" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${MOON_KEY} pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1401,17 +1381,18 @@ cp ${SHA3_RSA_CERT} x509ca # Put a copy in the swanctl/rw-eap-tls-sha3-rsa scenario TEST="${TEST_DIR}/swanctl/rw-eap-tls-sha3-rsa" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${SHA3_RSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -cp ${SHA3_RSA_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca -cp ${SHA3_RSA_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca # Generate a carol SHA3-RSA certificate TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" CN="carol@strongswan.org" SERIAL="03" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1424,6 +1405,8 @@ TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" CN="dave@strongswan.org" SERIAL="04" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1431,6 +1414,12 @@ pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem +for h in moon carol dave +do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${SHA3_RSA_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca +done + ################################################################################ # strongSwan Ed25519 Root CA # ################################################################################ @@ -1446,6 +1435,8 @@ pki --self --type ed25519 --in ${ED25519_KEY} \ # Put a copy in the swanctl/net2net-ed25519 scenario TEST="${TEST_DIR}/swanctl/net2net-ed25519" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca cp ${ED25519_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca cp ${ED25519_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca @@ -1454,6 +1445,8 @@ SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8/sunKey.pem" SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" CN="sun.strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 pki --gen --type ed25519 --outform pem > ${SUN_KEY} pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1467,6 +1460,8 @@ MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" CN="moon.strongswan.org" SERIAL="02" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 pki --gen --type ed25519 --outform pem > ${MOON_KEY} pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1490,11 +1485,13 @@ cp ${ED25519_CERT} x509ca # Put a copy in the ikev2/net2net-ed25519 scenario TEST="${TEST_DIR}/ikev2/net2net-ed25519" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR} cd ${TEST}/hosts/moon/${IPSEC_DIR} mkdir -p cacerts certs private cp ${MOON_KEY} private cp ${MOON_CERT} certs cp ${ED25519_CERT} cacerts +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR} cd ${TEST}/hosts/sun/${IPSEC_DIR} mkdir -p cacerts certs private cp ${SUN_KEY} private @@ -1503,17 +1500,24 @@ cp ${ED25519_CERT} cacerts # Put a copy in the swanctl/rw-ed25519-certpol scenario TEST="${TEST_DIR}/swanctl/rw-ed25519-certpol" -cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 -cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${ED25519_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -cp ${ED25519_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca -cp ${ED25519_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 + +for h in moon carol dave +do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${ED25519_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca +done # Generate a carol Ed25519 certificate TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" CN="carol@strongswan.org" SERIAL="03" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 pki --gen --type ed25519 --outform pem > ${TEST_KEY} pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1527,6 +1531,8 @@ TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" CN="dave@strongswan.org" SERIAL="04" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 pki --gen --type ed25519 --outform pem > ${TEST_KEY} pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1548,14 +1554,18 @@ pki --self --type rsa --in ${MONSTER_KEY} \ # Put a copy in the ikev2/after-2038-certs scenario TEST="${TEST_DIR}/ikev2/after-2038-certs" -cp ${MONSTER_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ -cp ${MONSTER_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts/ +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts +cp ${MONSTER_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +cp ${MONSTER_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts # Generate a moon Monster certificate TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" CN="moon.strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ --in ${TEST_KEY} --san ${CN} \ @@ -1569,6 +1579,8 @@ TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" CN="carol@strongswan.org" SERIAL="02" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ --in ${TEST_KEY} --san ${CN} \ @@ -1587,23 +1599,23 @@ pki --self --type bliss --in ${BLISS_KEY} --digest sha3_512 \ --not-before "${START}" --not-after "${CA_END}" --ca \ --dn "C=CH, O=${PROJECT}, CN=strongSwan BLISS Root CA" > ${BLISS_CERT} -# Put a copy in the ikev2/rw-newhope-bliss scenario -TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" -cp ${BLISS_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts/ -cp ${BLISS_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts/ -cp ${BLISS_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ +# Put a copy in the following scenarios +for t in rw-newhope-bliss rw-ntru-bliss +do + TEST="${TEST_DIR}/ikev2/${t}" + for h in moon carol dave + do + mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/cacerts + cp ${BLISS_CERT} ${TEST}/hosts/${h}/${IPSEC_DIR}/cacerts + done +done -# Put a copy in the ikev2/rw-ntru-bliss scenario -TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" -cp ${BLISS_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts/ -cp ${BLISS_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts/ -cp ${BLISS_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ - -# Put a copy in the swanctl/rw-ntru-bliss scenario TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" -cp ${BLISS_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca/ -cp ${BLISS_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca/ -cp ${BLISS_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca/ +for h in moon carol dave +do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${BLISS_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca +done # Generate a carol BLISS certificate with 128 bit security strength TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" @@ -1611,6 +1623,8 @@ TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.der" TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.der" CN="carol@strongswan.org" SERIAL="01" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs pki --gen --type bliss --size 1 > ${TEST_KEY} pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1620,13 +1634,17 @@ cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der # Put a copy in the ikev2/rw-ntru-bliss scenario TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private/ -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs/ +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs # Put a copy in the swanctl/rw-ntru-bliss scenario TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" -cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss/ -cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509/ +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 # Generate a dave BLISS certificate with 160 bit security strength TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" @@ -1634,6 +1652,8 @@ TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.der" TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.der" CN="dave@strongswan.org" SERIAL="02" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs pki --gen --type bliss --size 3 > ${TEST_KEY} pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1643,11 +1663,15 @@ cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der # Put a copy in the ikev2/rw-ntru-bliss scenario TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private/ cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs/ # Put a copy in the swanctl/rw-ntru-bliss scenario TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss/ cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509/ @@ -1657,6 +1681,8 @@ TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.der" TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.der" CN="moon.strongswan.org" SERIAL="03" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs pki --gen --type bliss --size 4 > ${TEST_KEY} pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ @@ -1666,11 +1692,15 @@ cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der # Put a copy in the ikev2/rw-ntru-bliss scenario TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private/ cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/certs/ # Put a copy in the swanctl/rw-ntru-bliss scenario TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss/ cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509/ diff --git a/testing/tests/ikev2/critical-extension/evaltest.dat b/testing/tests/ikev2/critical-extension/evaltest.dat index 05c2c2f4d..900cc06db 100644 --- a/testing/tests/ikev2/critical-extension/evaltest.dat +++ b/testing/tests/ikev2/critical-extension/evaltest.dat @@ -4,5 +4,5 @@ moon::cat /var/log/daemon.log::sending end entity cert::YES moon::cat /var/log/daemon.log::received AUTHENTICATION_FAILED notify error::YES sun:: cat /var/log/daemon.log::critical 'strongSwan' extension not supported::YES sun:: cat /var/log/daemon.log::building CRED_CERTIFICATE - ANY failed::YES -sun:: cat /var/log/daemon.log::loading certificate from 'sunCert.der' failed::YES +sun:: cat /var/log/daemon.log::loading certificate from 'sunCert.pem' failed::YES sun:: cat /var/log/daemon.log::building CRED_CERTIFICATE - X509 failed::YES diff --git a/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.conf index 3b065774f..3854859af 100644 --- a/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/critical-extension/hosts/moon/etc/ipsec.conf @@ -10,9 +10,9 @@ conn %default keyexchange=ikev2 mobike=no -conn net-net +conn net-net left=PH_IP_MOON - leftcert=moonCert.der + leftcert=moonCert.pem leftid=@moon.strongswan.org leftsubnet=10.1.0.0/16 leftfirewall=yes diff --git a/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.conf b/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.conf index 2b4406d75..13860bd3e 100644 --- a/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.conf +++ b/testing/tests/ikev2/critical-extension/hosts/sun/etc/ipsec.conf @@ -10,9 +10,9 @@ conn %default keyexchange=ikev2 mobike=no -conn net-net +conn net-net left=PH_IP_SUN - leftcert=sunCert.der + leftcert=sunCert.pem leftid=@sun.strongswan.org leftsubnet=10.2.0.0/16 leftfirewall=yes diff --git a/testing/tests/openssl-ikev2/critical-extension/posttest.dat b/testing/tests/openssl-ikev2/critical-extension/posttest.dat index 3a9b6e1b3..4ee2ed671 100644 --- a/testing/tests/openssl-ikev2/critical-extension/posttest.dat +++ b/testing/tests/openssl-ikev2/critical-extension/posttest.dat @@ -1,4 +1,2 @@ moon::systemctl stop strongswan sun::systemctl stop strongswan -moon::rm /etc/swanctl/x509/moonCert.der -sun::rm /etc/swanctl/x509/sunCert.der diff --git a/testing/tests/openssl-ikev2/critical-extension/pretest.dat b/testing/tests/openssl-ikev2/critical-extension/pretest.dat index 272e9294b..bcc06dbcc 100644 --- a/testing/tests/openssl-ikev2/critical-extension/pretest.dat +++ b/testing/tests/openssl-ikev2/critical-extension/pretest.dat @@ -1,5 +1,3 @@ -moon::rm /etc/swanctl/x509/moonCert.pem -sun::rm /etc/swanctl/x509/sunCert.pem moon::systemctl start strongswan sun::systemctl start strongswan moon::expect-connection gw-gw From df6441a13f5894c8152ebbbb2b680f2762cf3d07 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Mon, 6 May 2019 14:33:49 +0200 Subject: [PATCH 12/20] pki: Allow inclusion of [unsupported] critical X.509 extension --- src/libstrongswan/credentials/builder.c | 3 ++- src/libstrongswan/credentials/builder.h | 4 +++- src/libstrongswan/plugins/x509/x509_cert.c | 22 ++++++++++++++++++-- src/libstrongswan/plugins/x509/x509_crl.c | 24 +++++++++++++++++++--- src/pki/commands/issue.c | 13 ++++++++++-- src/pki/commands/self.c | 13 ++++++++++-- src/pki/commands/signcrl.c | 14 +++++++++++-- src/pki/man/pki---issue.1.in | 8 ++++++-- src/pki/man/pki---self.1.in | 6 +++++- src/pki/man/pki---signcrl.1.in | 6 +++++- 10 files changed, 96 insertions(+), 17 deletions(-) diff --git a/src/libstrongswan/credentials/builder.c b/src/libstrongswan/credentials/builder.c index 61dfbbcad..a663636ea 100644 --- a/src/libstrongswan/credentials/builder.c +++ b/src/libstrongswan/credentials/builder.c @@ -1,6 +1,6 @@ /* * Copyright (C) 2008 Martin Willi - * Copyright (C) 2016 Andreas Steffen + * Copyright (C) 2016-2019 Andreas Steffen * HSR Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it @@ -75,5 +75,6 @@ ENUM(builder_part_names, BUILD_FROM_FILE, BUILD_END, "BUILD_THRESHOLD", "BUILD_EDDSA_PUB", "BUILD_EDDSA_PRIV_ASN1_DER", + "BUILD_CRITICAL_EXTENSION", "BUILD_END", ); diff --git a/src/libstrongswan/credentials/builder.h b/src/libstrongswan/credentials/builder.h index b283bd166..b62364656 100644 --- a/src/libstrongswan/credentials/builder.h +++ b/src/libstrongswan/credentials/builder.h @@ -1,6 +1,6 @@ /* * Copyright (C) 2008 Martin Willi - * Copyright (C) 2016 Andreas Steffen + * Copyright (C) 2016-2019 Andreas Steffen * HSR Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it @@ -160,6 +160,8 @@ enum builder_part_t { BUILD_EDDSA_PUB, /** DER encoded ASN.1 EdDSA private key */ BUILD_EDDSA_PRIV_ASN1_DER, + /** OID of an [unsupported] critical extension */ + BUILD_CRITICAL_EXTENSION, /** end of variable argument builder list */ BUILD_END, }; diff --git a/src/libstrongswan/plugins/x509/x509_cert.c b/src/libstrongswan/plugins/x509/x509_cert.c index f3d4377d8..731170886 100644 --- a/src/libstrongswan/plugins/x509/x509_cert.c +++ b/src/libstrongswan/plugins/x509/x509_cert.c @@ -171,6 +171,11 @@ struct private_x509_cert_t { */ chunk_t authKeySerialNumber; + /** + * Optional OID of an [unsupported] critical extension + */ + chunk_t critical_extension_oid; + /** * Path Length Constraint */ @@ -1951,6 +1956,7 @@ METHOD(certificate_t, destroy, void, chunk_free(&this->authKeyIdentifier); chunk_free(&this->encoding); chunk_free(&this->encoding_hash); + chunk_free(&this->critical_extension_oid); if (!this->parsed) { /* only parsed certificates point these fields to "encoded" */ chunk_free(&this->signature); @@ -2203,6 +2209,7 @@ static bool generate(private_x509_cert_t *cert, certificate_t *sign_cert, chunk_t policyConstraints = chunk_empty, inhibitAnyPolicy = chunk_empty; chunk_t ikeIntermediate = chunk_empty, msSmartcardLogon = chunk_empty; chunk_t ipAddrBlocks = chunk_empty, sig_scheme = chunk_empty; + chunk_t criticalExtension = chunk_empty; identification_t *issuer, *subject; chunk_t key_info; hasher_t *hasher; @@ -2570,17 +2577,25 @@ static bool generate(private_x509_cert_t *cert, certificate_t *sign_cert, chunk_from_thing(cert->inhibit_any)))); } + if (cert->critical_extension_oid.len > 0) + { + criticalExtension = asn1_wrap(ASN1_SEQUENCE, "mmm", + asn1_simple_object(ASN1_OID, cert->critical_extension_oid), + asn1_simple_object(ASN1_BOOLEAN, chunk_from_chars(0xFF)), + asn1_simple_object(ASN1_OCTET_STRING, chunk_empty)); + } + if (basicConstraints.ptr || subjectAltNames.ptr || authKeyIdentifier.ptr || crlDistributionPoints.ptr || nameConstraints.ptr || ipAddrBlocks.ptr) { extensions = asn1_wrap(ASN1_CONTEXT_C_3, "m", - asn1_wrap(ASN1_SEQUENCE, "mmmmmmmmmmmmmm", + asn1_wrap(ASN1_SEQUENCE, "mmmmmmmmmmmmmmm", basicConstraints, keyUsage, subjectKeyIdentifier, authKeyIdentifier, subjectAltNames, extendedKeyUsage, crlDistributionPoints, authorityInfoAccess, nameConstraints, certPolicies, policyMappings, policyConstraints, inhibitAnyPolicy, - ipAddrBlocks)); + ipAddrBlocks, criticalExtension)); } cert->tbsCertificate = asn1_wrap(ASN1_SEQUENCE, "mmccmcmm", @@ -2864,6 +2879,9 @@ x509_cert_t *x509_cert_gen(certificate_type_t type, va_list args) case BUILD_DIGEST_ALG: digest_alg = va_arg(args, int); continue; + case BUILD_CRITICAL_EXTENSION: + cert->critical_extension_oid = chunk_clone(va_arg(args, chunk_t)); + continue; case BUILD_END: break; default: diff --git a/src/libstrongswan/plugins/x509/x509_crl.c b/src/libstrongswan/plugins/x509/x509_crl.c index 95cb11cf4..a315c629d 100644 --- a/src/libstrongswan/plugins/x509/x509_crl.c +++ b/src/libstrongswan/plugins/x509/x509_crl.c @@ -116,6 +116,11 @@ struct private_x509_crl_t { */ chunk_t authKeySerialNumber; + /** + * Optional OID of an [unsupported] critical extension + */ + chunk_t critical_extension_oid; + /** * Number of BaseCRL, if a delta CRL */ @@ -605,6 +610,7 @@ METHOD(certificate_t, destroy, void, DESTROY_IF(this->issuer); free(this->authKeyIdentifier.ptr); free(this->encoding.ptr); + free(this->critical_extension_oid.ptr); if (this->generated) { free(this->crlNumber.ptr); @@ -718,7 +724,7 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert, { chunk_t extensions = chunk_empty, certList = chunk_empty, serial; chunk_t crlDistributionPoints = chunk_empty, baseCrlNumber = chunk_empty; - chunk_t sig_scheme = chunk_empty; + chunk_t sig_scheme = chunk_empty, criticalExtension = chunk_empty; enumerator_t *enumerator; crl_reason_t reason; time_t date; @@ -784,8 +790,16 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert, asn1_integer("c", this->baseCrlNumber))); } + if (this->critical_extension_oid.len > 0) + { + criticalExtension = asn1_wrap(ASN1_SEQUENCE, "mmm", + asn1_simple_object(ASN1_OID, this->critical_extension_oid), + asn1_simple_object(ASN1_BOOLEAN, chunk_from_chars(0xFF)), + asn1_simple_object(ASN1_OCTET_STRING, chunk_empty)); + } + extensions = asn1_wrap(ASN1_CONTEXT_C_0, "m", - asn1_wrap(ASN1_SEQUENCE, "mmmm", + asn1_wrap(ASN1_SEQUENCE, "mmmmm", asn1_wrap(ASN1_SEQUENCE, "mm", asn1_build_known_oid(OID_AUTHORITY_KEY_ID), asn1_wrap(ASN1_OCTET_STRING, "m", @@ -796,7 +810,8 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert, asn1_build_known_oid(OID_CRL_NUMBER), asn1_wrap(ASN1_OCTET_STRING, "m", asn1_integer("c", this->crlNumber))), - crlDistributionPoints, baseCrlNumber)); + crlDistributionPoints, baseCrlNumber, + criticalExtension)); this->tbsCertList = asn1_wrap(ASN1_SEQUENCE, "cccmmmm", ASN1_INTEGER_1, @@ -887,6 +902,9 @@ x509_crl_t *x509_crl_gen(certificate_type_t type, va_list args) enumerator->destroy(enumerator); continue; } + case BUILD_CRITICAL_EXTENSION: + crl->critical_extension_oid = chunk_clone(va_arg(args, chunk_t)); + continue; case BUILD_END: break; default: diff --git a/src/pki/commands/issue.c b/src/pki/commands/issue.c index b117fa171..4f11e7aa5 100644 --- a/src/pki/commands/issue.c +++ b/src/pki/commands/issue.c @@ -1,6 +1,6 @@ /* * Copyright (C) 2009 Martin Willi - * Copyright (C) 2015-2017 Andreas Steffen + * Copyright (C) 2015-2019 Andreas Steffen * HSR Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it @@ -77,6 +77,7 @@ static int issue() int inhibit_mapping = X509_NO_CONSTRAINT, require_explicit = X509_NO_CONSTRAINT; chunk_t serial = chunk_empty; chunk_t encoding = chunk_empty; + chunk_t critical_extension_oid = chunk_empty; time_t not_before, not_after, lifetime = 1095 * 24 * 60 * 60; char *datenb = NULL, *datena = NULL, *dateform = NULL; x509_flag_t flags = 0; @@ -333,6 +334,10 @@ static int issue() case 'o': ocsp->insert_last(ocsp, arg); continue; + case 'X': + chunk_free(&critical_extension_oid); + critical_extension_oid = asn1_oid_from_string(arg); + continue; case EOF: break; default: @@ -558,6 +563,7 @@ static int issue() BUILD_POLICY_REQUIRE_EXPLICIT, require_explicit, BUILD_POLICY_INHIBIT_MAPPING, inhibit_mapping, BUILD_POLICY_INHIBIT_ANY, inhibit_any, + BUILD_CRITICAL_EXTENSION, critical_extension_oid, BUILD_SIGNATURE_SCHEME, scheme, BUILD_END); if (!cert) @@ -593,6 +599,7 @@ end: cdps->destroy_function(cdps, (void*)destroy_cdp); ocsp->destroy(ocsp); signature_params_destroy(scheme); + free(critical_extension_oid.ptr); free(encoding.ptr); free(serial.ptr); @@ -612,6 +619,7 @@ usage: mappings->destroy_function(mappings, (void*)destroy_policy_mapping); cdps->destroy_function(cdps, (void*)destroy_cdp); ocsp->destroy(ocsp); + free(critical_extension_oid.ptr); return command_usage(error); } @@ -632,7 +640,7 @@ static void __attribute__ ((constructor))reg() "[--policy-explicit len] [--policy-inhibit len] [--policy-any len]", "[--cert-policy oid [--cps-uri uri] [--user-notice text]]+", "[--digest md5|sha1|sha224|sha256|sha384|sha512|sha3_224|sha3_256|sha3_384|sha3_512]", - "[--rsa-padding pkcs1|pss]", + "[--rsa-padding pkcs1|pss] [--critical oid]", "[--outform der|pem]"}, { {"help", 'h', 0, "show usage information"}, @@ -666,6 +674,7 @@ static void __attribute__ ((constructor))reg() {"ocsp", 'o', 1, "OCSP AuthorityInfoAccess URI to include"}, {"digest", 'g', 1, "digest for signature creation, default: key-specific"}, {"rsa-padding", 'R', 1, "padding for RSA signatures, default: pkcs1"}, + {"critical", 'X', 1, "critical extension OID to include"}, {"outform", 'f', 1, "encoding of generated cert, default: der"}, } }); diff --git a/src/pki/commands/self.c b/src/pki/commands/self.c index a08ee9931..31018e805 100644 --- a/src/pki/commands/self.c +++ b/src/pki/commands/self.c @@ -1,6 +1,6 @@ /* * Copyright (C) 2009 Martin Willi - * Copyright (C) 2015-2017 Andreas Steffen + * Copyright (C) 2015-2019 Andreas Steffen * HSR Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it @@ -65,6 +65,7 @@ static int self() int require_explicit = X509_NO_CONSTRAINT; chunk_t serial = chunk_empty; chunk_t encoding = chunk_empty; + chunk_t critical_extension_oid = chunk_empty; time_t not_before, not_after, lifetime = 1095 * 24 * 60 * 60; char *datenb = NULL, *datena = NULL, *dateform = NULL; x509_flag_t flags = 0; @@ -289,6 +290,10 @@ static int self() case 'o': ocsp->insert_last(ocsp, arg); continue; + case 'X': + chunk_free(&critical_extension_oid); + critical_extension_oid = asn1_oid_from_string(arg); + continue; case EOF: break; default: @@ -399,6 +404,7 @@ static int self() BUILD_POLICY_REQUIRE_EXPLICIT, require_explicit, BUILD_POLICY_INHIBIT_MAPPING, inhibit_mapping, BUILD_POLICY_INHIBIT_ANY, inhibit_any, + BUILD_CRITICAL_EXTENSION, critical_extension_oid, BUILD_END); if (!cert) { @@ -430,6 +436,7 @@ end: mappings->destroy_function(mappings, (void*)destroy_policy_mapping); ocsp->destroy(ocsp); signature_params_destroy(scheme); + free(critical_extension_oid.ptr); free(encoding.ptr); free(serial.ptr); @@ -448,6 +455,7 @@ usage: policies->destroy_function(policies, (void*)destroy_cert_policy); mappings->destroy_function(mappings, (void*)destroy_policy_mapping); ocsp->destroy(ocsp); + free(critical_extension_oid.ptr); return command_usage(error); } @@ -468,7 +476,7 @@ static void __attribute__ ((constructor))reg() "[--policy-explicit len] [--policy-inhibit len] [--policy-any len]", "[--cert-policy oid [--cps-uri uri] [--user-notice text]]+", "[--digest md5|sha1|sha224|sha256|sha384|sha512|sha3_224|sha3_256|sha3_384|sha3_512]", - "[--rsa-padding pkcs1|pss]", + "[--rsa-padding pkcs1|pss] [--critical oid]", "[--outform der|pem]"}, { {"help", 'h', 0, "show usage information"}, @@ -498,6 +506,7 @@ static void __attribute__ ((constructor))reg() {"ocsp", 'o', 1, "OCSP AuthorityInfoAccess URI to include"}, {"digest", 'g', 1, "digest for signature creation, default: key-specific"}, {"rsa-padding", 'R', 1, "padding for RSA signatures, default: pkcs1"}, + {"critical", 'X', 1, "critical extension OID to include for test purposes"}, {"outform", 'f', 1, "encoding of generated cert, default: der"}, } }); diff --git a/src/pki/commands/signcrl.c b/src/pki/commands/signcrl.c index 8c234feb6..dfe1ce014 100644 --- a/src/pki/commands/signcrl.c +++ b/src/pki/commands/signcrl.c @@ -2,7 +2,7 @@ * Copyright (C) 2010 Martin Willi * Copyright (C) 2010 revosec AG * - * Copyright (C) 2017 Andreas Steffen + * Copyright (C) 2017-2019 Andreas Steffen * HSR Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it @@ -25,6 +25,7 @@ #include #include #include +#include /** @@ -133,6 +134,7 @@ static int sign_crl() enumerator_t *enumerator, *lastenum = NULL; x509_cdp_t *cdp; chunk_t crl_serial = chunk_empty, baseCrlNumber = chunk_empty; + chunk_t critical_extension_oid = chunk_empty; chunk_t encoding = chunk_empty; bool pss = lib->settings->get_bool(lib->settings, "%s.rsa_pss", FALSE, lib->ns); @@ -279,6 +281,10 @@ static int sign_crl() goto usage; } continue; + case 'X': + chunk_free(&critical_extension_oid); + critical_extension_oid = asn1_oid_from_string(arg); + continue; case EOF: break; default: @@ -414,6 +420,7 @@ static int sign_crl() BUILD_REVOKED_ENUMERATOR, enumerator, BUILD_REVOKED_ENUMERATOR, lastenum, BUILD_SIGNATURE_SCHEME, scheme, BUILD_CRL_DISTRIBUTION_POINTS, cdps, BUILD_BASE_CRL, baseCrlNumber, + BUILD_CRITICAL_EXTENSION, critical_extension_oid, BUILD_END); enumerator->destroy(enumerator); @@ -442,6 +449,7 @@ error: DESTROY_IF(lastenum); DESTROY_IF((certificate_t*)lastcrl); signature_params_destroy(scheme); + free(critical_extension_oid.ptr); free(encoding.ptr); free(baseCrlNumber.ptr); free(crl_serial.ptr); @@ -457,6 +465,7 @@ error: usage: list->destroy_function(list, (void*)revoked_destroy); cdps->destroy_function(cdps, (void*)x509_cdp_destroy); + free(critical_extension_oid.ptr); return command_usage(error); } @@ -474,7 +483,7 @@ static void __attribute__ ((constructor))reg() " superseded|cessation-of-operation|certificate-hold]", " [--date timestamp] --cert file|--serial hex]*", "[--digest md5|sha1|sha224|sha256|sha384|sha512|sha3_224|sha3_256|sha3_384|sha3_512]", - "[--rsa-padding pkcs1|pss]", + "[--rsa-padding pkcs1|pss] [--critical oid]", "[--outform der|pem]"}, { {"help", 'h', 0, "show usage information"}, @@ -494,6 +503,7 @@ static void __attribute__ ((constructor))reg() {"date", 'd', 1, "revocation date as unix timestamp, default: now"}, {"digest", 'g', 1, "digest for signature creation, default: key-specific"}, {"rsa-padding", 'R', 1, "padding for RSA signatures, default: pkcs1"}, + {"critical", 'X', 1, "critical extension OID to include for test purposes"}, {"outform", 'f', 1, "encoding of generated crl, default: der"}, } }); diff --git a/src/pki/man/pki---issue.1.in b/src/pki/man/pki---issue.1.in index 8aec65306..99dcaca70 100644 --- a/src/pki/man/pki---issue.1.in +++ b/src/pki/man/pki---issue.1.in @@ -1,4 +1,4 @@ -.TH "PKI \-\-ISSUE" 1 "2016-12-13" "@PACKAGE_VERSION@" "strongSwan" +.TH "PKI \-\-ISSUE" 1 "2019-05-06" "@PACKAGE_VERSION@" "strongSwan" . .SH "NAME" . @@ -24,9 +24,10 @@ pki \-\-issue \- Issue a certificate using a CA certificate and key .OP \-\-crl uri\ \fR[\fB\-\-crlissuer\ \fIissuer\fR] .OP \-\-ocsp uri .OP \-\-pathlen len -.OP \-\-nc-permitted name .OP \-\-addrblock block +.OP \-\-nc-permitted name .OP \-\-nc-excluded name +.OP \-\-critical oid .OP \-\-policy\-mapping mapping .OP \-\-policy\-explicit len .OP \-\-policy\-inhibit len @@ -181,6 +182,9 @@ or .B email: prefix to force a constraint type. .TP +.BI "\-X, \-\-critical " oid +Add a critical extension with the given OID. +.TP .BI "\-M, \-\-policy-mapping " issuer-oid:subject-oid Add policyMapping from issuer to subject OID. .TP diff --git a/src/pki/man/pki---self.1.in b/src/pki/man/pki---self.1.in index 5f7e42108..6e0460978 100644 --- a/src/pki/man/pki---self.1.in +++ b/src/pki/man/pki---self.1.in @@ -1,4 +1,4 @@ -.TH "PKI \-\-SELF" 1 "2016-12-13" "@PACKAGE_VERSION@" "strongSwan" +.TH "PKI \-\-SELF" 1 "2019-05-06" "@PACKAGE_VERSION@" "strongSwan" . .SH "NAME" . @@ -26,6 +26,7 @@ pki \-\-self \- Create a self-signed certificate .OP \-\-addrblock block .OP \-\-nc-permitted name .OP \-\-nc-excluded name +.OP \-\-critical oid .OP \-\-policy\-mapping mapping .OP \-\-policy\-explicit len .OP \-\-policy\-inhibit len @@ -160,6 +161,9 @@ or .B email: prefix to force a constraint type. .TP +.BI "\-X, \-\-critical " oid +Add a critical extension with the given OID. +.TP .BI "\-M, \-\-policy-mapping " issuer-oid:subject-oid Add policyMapping from issuer to subject OID. .TP diff --git a/src/pki/man/pki---signcrl.1.in b/src/pki/man/pki---signcrl.1.in index 0abd166a9..781de8bfa 100644 --- a/src/pki/man/pki---signcrl.1.in +++ b/src/pki/man/pki---signcrl.1.in @@ -1,4 +1,4 @@ -.TH "PKI \-\-SIGNCRL" 1 "2013-08-12" "@PACKAGE_VERSION@" "strongSwan" +.TH "PKI \-\-SIGNCRL" 1 "2019-05-06" "@PACKAGE_VERSION@" "strongSwan" . .SH "NAME" . @@ -18,6 +18,7 @@ pki \-\-signcrl \- Issue a Certificate Revocation List (CRL) using a CA certific .OP \-\-digest digest .OP \-\-rsa\-padding padding .OP \fR[\fB\-\-reason\ \fIreason\fR]\ \fR[\fB\-\-date\ \fIts\fR]\ \fB\-\-cert\ \fIfile\fB|\-\-serial\ \fIhex\fR +.OP \-\-critical oid .OP \-\-outform encoding .OP \-\-debug level .YS @@ -107,6 +108,9 @@ determined based on the type and size of the signature key. Padding to use for RSA signatures. Either \fIpkcs1\fR or \fIpss\fR, defaults to \fIpkcs1\fR. .TP +.BI "\-X, \-\-critical " oid +Add a critical extension with the given OID. +.TP .BI "\-f, \-\-outform " encoding Encoding of the created certificate file. Either \fIder\fR (ASN.1 DER) or \fIpem\fR (Base64 PEM), defaults to \fIder\fR. From a89ad28b8974f4980bda4c9b3726d393ff244867 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Mon, 6 May 2019 16:58:44 +0200 Subject: [PATCH 13/20] testing: Upgrade to Linux 5.1 kernel --- testing/config/kernel/config-5.1 | 2724 ++++++++++++++++++++++++++++++ testing/testing.conf | 4 +- 2 files changed, 2726 insertions(+), 2 deletions(-) create mode 100644 testing/config/kernel/config-5.1 diff --git a/testing/config/kernel/config-5.1 b/testing/config/kernel/config-5.1 new file mode 100644 index 000000000..cfad1303b --- /dev/null +++ b/testing/config/kernel/config-5.1 @@ -0,0 +1,2724 @@ +# +# Automatically generated file; DO NOT EDIT. +# Linux/x86 5.1.0 Kernel Configuration +# + +# +# Compiler: gcc (Ubuntu 7.4.0-1ubuntu1~18.04) 7.4.0 +# +CONFIG_CC_IS_GCC=y +CONFIG_GCC_VERSION=70400 +CONFIG_CLANG_VERSION=0 +CONFIG_CC_HAS_ASM_GOTO=y +CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y +CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y +CONFIG_IRQ_WORK=y +CONFIG_BUILDTIME_EXTABLE_SORT=y +CONFIG_THREAD_INFO_IN_TASK=y + +# +# General setup +# +CONFIG_BROKEN_ON_SMP=y +CONFIG_INIT_ENV_ARG_LIMIT=32 +# CONFIG_COMPILE_TEST is not set +CONFIG_LOCALVERSION="" +CONFIG_LOCALVERSION_AUTO=y +CONFIG_BUILD_SALT="" +CONFIG_HAVE_KERNEL_GZIP=y +CONFIG_HAVE_KERNEL_BZIP2=y +CONFIG_HAVE_KERNEL_LZMA=y +CONFIG_HAVE_KERNEL_XZ=y +CONFIG_HAVE_KERNEL_LZO=y +CONFIG_HAVE_KERNEL_LZ4=y +CONFIG_KERNEL_GZIP=y +# CONFIG_KERNEL_BZIP2 is not set +# CONFIG_KERNEL_LZMA is not set +# CONFIG_KERNEL_XZ is not set +# CONFIG_KERNEL_LZO is not set +# CONFIG_KERNEL_LZ4 is not set +CONFIG_DEFAULT_HOSTNAME="(none)" +CONFIG_SWAP=y +CONFIG_SYSVIPC=y +CONFIG_SYSVIPC_SYSCTL=y +CONFIG_POSIX_MQUEUE=y +CONFIG_POSIX_MQUEUE_SYSCTL=y +CONFIG_CROSS_MEMORY_ATTACH=y +CONFIG_USELIB=y +# CONFIG_AUDIT is not set +CONFIG_HAVE_ARCH_AUDITSYSCALL=y + +# +# IRQ subsystem +# +CONFIG_GENERIC_IRQ_PROBE=y +CONFIG_GENERIC_IRQ_SHOW=y +CONFIG_IRQ_DOMAIN=y +CONFIG_IRQ_DOMAIN_HIERARCHY=y +CONFIG_GENERIC_MSI_IRQ=y +CONFIG_GENERIC_MSI_IRQ_DOMAIN=y +CONFIG_GENERIC_IRQ_MATRIX_ALLOCATOR=y +CONFIG_GENERIC_IRQ_RESERVATION_MODE=y +CONFIG_IRQ_FORCED_THREADING=y +CONFIG_SPARSE_IRQ=y +CONFIG_CLOCKSOURCE_WATCHDOG=y +CONFIG_ARCH_CLOCKSOURCE_DATA=y +CONFIG_ARCH_CLOCKSOURCE_INIT=y +CONFIG_CLOCKSOURCE_VALIDATE_LAST_CYCLE=y +CONFIG_GENERIC_TIME_VSYSCALL=y +CONFIG_GENERIC_CLOCKEVENTS=y +CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y +CONFIG_GENERIC_CLOCKEVENTS_MIN_ADJUST=y +CONFIG_GENERIC_CMOS_UPDATE=y + +# +# Timers subsystem +# +CONFIG_TICK_ONESHOT=y +CONFIG_NO_HZ_COMMON=y +# CONFIG_HZ_PERIODIC is not set +CONFIG_NO_HZ_IDLE=y +CONFIG_NO_HZ=y +CONFIG_HIGH_RES_TIMERS=y +CONFIG_PREEMPT_NONE=y +# CONFIG_PREEMPT_VOLUNTARY is not set +# CONFIG_PREEMPT is not set + +# +# CPU/Task time and stats accounting +# +CONFIG_TICK_CPU_ACCOUNTING=y +# CONFIG_VIRT_CPU_ACCOUNTING_GEN is not set +# CONFIG_IRQ_TIME_ACCOUNTING is not set +CONFIG_BSD_PROCESS_ACCT=y +# CONFIG_BSD_PROCESS_ACCT_V3 is not set +# CONFIG_TASKSTATS is not set +# CONFIG_PSI is not set + +# +# RCU Subsystem +# +CONFIG_TINY_RCU=y +# CONFIG_RCU_EXPERT is not set +CONFIG_SRCU=y +CONFIG_TINY_SRCU=y +CONFIG_BUILD_BIN2C=y +CONFIG_IKCONFIG=y +CONFIG_IKCONFIG_PROC=y +CONFIG_LOG_BUF_SHIFT=14 +CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 +CONFIG_HAVE_UNSTABLE_SCHED_CLOCK=y +CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y +CONFIG_ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH=y +CONFIG_ARCH_SUPPORTS_INT128=y +CONFIG_CGROUPS=y +CONFIG_PAGE_COUNTER=y +CONFIG_MEMCG=y +CONFIG_MEMCG_SWAP=y +CONFIG_MEMCG_SWAP_ENABLED=y +CONFIG_MEMCG_KMEM=y +CONFIG_BLK_CGROUP=y +# CONFIG_DEBUG_BLK_CGROUP is not set +CONFIG_CGROUP_WRITEBACK=y +CONFIG_CGROUP_SCHED=y +CONFIG_FAIR_GROUP_SCHED=y +CONFIG_CFS_BANDWIDTH=y +# CONFIG_RT_GROUP_SCHED is not set +CONFIG_CGROUP_PIDS=y +# CONFIG_CGROUP_RDMA is not set +CONFIG_CGROUP_FREEZER=y +CONFIG_CGROUP_DEVICE=y +CONFIG_CGROUP_CPUACCT=y +CONFIG_CGROUP_PERF=y +# CONFIG_CGROUP_DEBUG is not set +CONFIG_SOCK_CGROUP_DATA=y +CONFIG_NAMESPACES=y +# CONFIG_UTS_NS is not set +# CONFIG_IPC_NS is not set +# CONFIG_USER_NS is not set +# CONFIG_PID_NS is not set +CONFIG_NET_NS=y +# CONFIG_CHECKPOINT_RESTORE is not set +# CONFIG_SCHED_AUTOGROUP is not set +# CONFIG_SYSFS_DEPRECATED is not set +# CONFIG_RELAY is not set +# CONFIG_BLK_DEV_INITRD is not set +# CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE is not set +CONFIG_CC_OPTIMIZE_FOR_SIZE=y +CONFIG_SYSCTL=y +CONFIG_ANON_INODES=y +CONFIG_SYSCTL_EXCEPTION_TRACE=y +CONFIG_HAVE_PCSPKR_PLATFORM=y +CONFIG_BPF=y +# CONFIG_EXPERT is not set +CONFIG_MULTIUSER=y +CONFIG_SGETMASK_SYSCALL=y +CONFIG_SYSFS_SYSCALL=y +CONFIG_FHANDLE=y +CONFIG_POSIX_TIMERS=y +CONFIG_PRINTK=y +CONFIG_PRINTK_NMI=y +CONFIG_BUG=y +CONFIG_ELF_CORE=y +CONFIG_PCSPKR_PLATFORM=y +CONFIG_BASE_FULL=y +CONFIG_FUTEX=y +CONFIG_FUTEX_PI=y +CONFIG_EPOLL=y +CONFIG_SIGNALFD=y +CONFIG_TIMERFD=y +CONFIG_EVENTFD=y +CONFIG_SHMEM=y +CONFIG_AIO=y +CONFIG_IO_URING=y +CONFIG_ADVISE_SYSCALLS=y +CONFIG_MEMBARRIER=y +CONFIG_KALLSYMS=y +# CONFIG_KALLSYMS_ALL is not set +CONFIG_KALLSYMS_BASE_RELATIVE=y +# CONFIG_BPF_SYSCALL is not set +# CONFIG_USERFAULTFD is not set +CONFIG_ARCH_HAS_MEMBARRIER_SYNC_CORE=y +CONFIG_RSEQ=y +# CONFIG_EMBEDDED is not set +CONFIG_HAVE_PERF_EVENTS=y + +# +# Kernel Performance Events And Counters +# +CONFIG_PERF_EVENTS=y +# CONFIG_DEBUG_PERF_USE_VMALLOC is not set +CONFIG_VM_EVENT_COUNTERS=y +CONFIG_COMPAT_BRK=y +CONFIG_SLAB=y +# CONFIG_SLUB is not set +CONFIG_SLAB_MERGE_DEFAULT=y +# CONFIG_SLAB_FREELIST_RANDOM is not set +# CONFIG_PROFILING is not set +CONFIG_64BIT=y +CONFIG_X86_64=y +CONFIG_X86=y +CONFIG_INSTRUCTION_DECODER=y +CONFIG_OUTPUT_FORMAT="elf64-x86-64" +CONFIG_ARCH_DEFCONFIG="arch/x86/configs/x86_64_defconfig" +CONFIG_LOCKDEP_SUPPORT=y +CONFIG_STACKTRACE_SUPPORT=y +CONFIG_MMU=y +CONFIG_ARCH_MMAP_RND_BITS_MIN=28 +CONFIG_ARCH_MMAP_RND_BITS_MAX=32 +CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MIN=8 +CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MAX=16 +CONFIG_GENERIC_ISA_DMA=y +CONFIG_GENERIC_BUG=y +CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y +CONFIG_GENERIC_HWEIGHT=y +CONFIG_ARCH_MAY_HAVE_PC_FDC=y +CONFIG_RWSEM_XCHGADD_ALGORITHM=y +CONFIG_GENERIC_CALIBRATE_DELAY=y +CONFIG_ARCH_HAS_CPU_RELAX=y +CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y +CONFIG_ARCH_HAS_FILTER_PGPROT=y +CONFIG_HAVE_SETUP_PER_CPU_AREA=y +CONFIG_NEED_PER_CPU_EMBED_FIRST_CHUNK=y +CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y +CONFIG_ARCH_HIBERNATION_POSSIBLE=y +CONFIG_ARCH_SUSPEND_POSSIBLE=y +CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y +CONFIG_ARCH_WANT_GENERAL_HUGETLB=y +CONFIG_ZONE_DMA32=y +CONFIG_AUDIT_ARCH=y +CONFIG_ARCH_SUPPORTS_OPTIMIZED_INLINING=y +CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y +CONFIG_ARCH_SUPPORTS_UPROBES=y +CONFIG_FIX_EARLYCON_MEM=y +CONFIG_PGTABLE_LEVELS=4 +CONFIG_CC_HAS_SANE_STACKPROTECTOR=y + +# +# Processor type and features +# +CONFIG_ZONE_DMA=y +# CONFIG_SMP is not set +CONFIG_X86_FEATURE_NAMES=y +CONFIG_X86_MPPARSE=y +# CONFIG_GOLDFISH is not set +CONFIG_RETPOLINE=y +# CONFIG_X86_CPU_RESCTRL is not set +CONFIG_X86_EXTENDED_PLATFORM=y +# CONFIG_X86_GOLDFISH is not set +# CONFIG_X86_INTEL_MID is not set +# CONFIG_X86_INTEL_LPSS is not set +# CONFIG_X86_AMD_PLATFORM_DEVICE is not set +CONFIG_IOSF_MBI=y +CONFIG_SCHED_OMIT_FRAME_POINTER=y +# CONFIG_HYPERVISOR_GUEST is not set +# CONFIG_MK8 is not set +# CONFIG_MPSC is not set +CONFIG_MCORE2=y +# CONFIG_MATOM is not set +# CONFIG_GENERIC_CPU is not set +CONFIG_X86_INTERNODE_CACHE_SHIFT=6 +CONFIG_X86_L1_CACHE_SHIFT=6 +CONFIG_X86_INTEL_USERCOPY=y +CONFIG_X86_USE_PPRO_CHECKSUM=y +CONFIG_X86_P6_NOP=y +CONFIG_X86_TSC=y +CONFIG_X86_CMPXCHG64=y +CONFIG_X86_CMOV=y +CONFIG_X86_MINIMUM_CPU_FAMILY=64 +CONFIG_X86_DEBUGCTLMSR=y +CONFIG_CPU_SUP_INTEL=y +CONFIG_CPU_SUP_AMD=y +CONFIG_CPU_SUP_HYGON=y +CONFIG_CPU_SUP_CENTAUR=y +CONFIG_HPET_TIMER=y +CONFIG_DMI=y +CONFIG_GART_IOMMU=y +# CONFIG_CALGARY_IOMMU is not set +CONFIG_NR_CPUS_RANGE_BEGIN=1 +CONFIG_NR_CPUS_RANGE_END=1 +CONFIG_NR_CPUS_DEFAULT=1 +CONFIG_NR_CPUS=1 +CONFIG_UP_LATE_INIT=y +CONFIG_X86_LOCAL_APIC=y +CONFIG_X86_IO_APIC=y +# CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS is not set +# CONFIG_X86_MCE is not set + +# +# Performance monitoring +# +CONFIG_PERF_EVENTS_INTEL_UNCORE=y +CONFIG_PERF_EVENTS_INTEL_RAPL=y +CONFIG_PERF_EVENTS_INTEL_CSTATE=y +# CONFIG_PERF_EVENTS_AMD_POWER is not set +CONFIG_X86_16BIT=y +CONFIG_X86_ESPFIX64=y +CONFIG_X86_VSYSCALL_EMULATION=y +# CONFIG_I8K is not set +CONFIG_MICROCODE=y +CONFIG_MICROCODE_INTEL=y +# CONFIG_MICROCODE_AMD is not set +CONFIG_MICROCODE_OLD_INTERFACE=y +# CONFIG_X86_MSR is not set +# CONFIG_X86_CPUID is not set +# CONFIG_X86_5LEVEL is not set +CONFIG_X86_DIRECT_GBPAGES=y +CONFIG_ARCH_HAS_MEM_ENCRYPT=y +# CONFIG_AMD_MEM_ENCRYPT is not set +CONFIG_ARCH_SPARSEMEM_ENABLE=y +CONFIG_ARCH_SPARSEMEM_DEFAULT=y +CONFIG_ARCH_SELECT_MEMORY_MODEL=y +CONFIG_ARCH_MEMORY_PROBE=y +CONFIG_ARCH_PROC_KCORE_TEXT=y +CONFIG_ILLEGAL_POINTER_VALUE=0xdead000000000000 +# CONFIG_X86_PMEM_LEGACY is not set +# CONFIG_X86_CHECK_BIOS_CORRUPTION is not set +CONFIG_X86_RESERVE_LOW=64 +CONFIG_MTRR=y +CONFIG_MTRR_SANITIZER=y +CONFIG_MTRR_SANITIZER_ENABLE_DEFAULT=0 +CONFIG_MTRR_SANITIZER_SPARE_REG_NR_DEFAULT=1 +CONFIG_X86_PAT=y +CONFIG_ARCH_USES_PG_UNCACHED=y +CONFIG_ARCH_RANDOM=y +CONFIG_X86_SMAP=y +CONFIG_X86_INTEL_UMIP=y +# CONFIG_X86_INTEL_MPX is not set +CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y +# CONFIG_EFI is not set +CONFIG_SECCOMP=y +# CONFIG_HZ_100 is not set +CONFIG_HZ_250=y +# CONFIG_HZ_300 is not set +# CONFIG_HZ_1000 is not set +CONFIG_HZ=250 +CONFIG_SCHED_HRTICK=y +# CONFIG_KEXEC is not set +# CONFIG_KEXEC_FILE is not set +# CONFIG_CRASH_DUMP is not set +CONFIG_PHYSICAL_START=0x1000000 +CONFIG_RELOCATABLE=y +# CONFIG_RANDOMIZE_BASE is not set +CONFIG_PHYSICAL_ALIGN=0x1000000 +CONFIG_LEGACY_VSYSCALL_EMULATE=y +# CONFIG_LEGACY_VSYSCALL_NONE is not set +# CONFIG_CMDLINE_BOOL is not set +CONFIG_MODIFY_LDT_SYSCALL=y +CONFIG_HAVE_LIVEPATCH=y +CONFIG_ARCH_HAS_ADD_PAGES=y +CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y +CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y +CONFIG_ARCH_ENABLE_SPLIT_PMD_PTLOCK=y + +# +# Power management and ACPI options +# +CONFIG_SUSPEND=y +CONFIG_SUSPEND_FREEZER=y +# CONFIG_HIBERNATION is not set +CONFIG_PM_SLEEP=y +# CONFIG_PM_AUTOSLEEP is not set +# CONFIG_PM_WAKELOCKS is not set +CONFIG_PM=y +# CONFIG_PM_DEBUG is not set +CONFIG_PM_CLK=y +# CONFIG_WQ_POWER_EFFICIENT_DEFAULT is not set +CONFIG_ARCH_SUPPORTS_ACPI=y +CONFIG_ACPI=y +CONFIG_ACPI_LEGACY_TABLES_LOOKUP=y +CONFIG_ARCH_MIGHT_HAVE_ACPI_PDC=y +CONFIG_ACPI_SYSTEM_POWER_STATES_SUPPORT=y +# CONFIG_ACPI_DEBUGGER is not set +CONFIG_ACPI_SPCR_TABLE=y +CONFIG_ACPI_LPIT=y +CONFIG_ACPI_SLEEP=y +# CONFIG_ACPI_PROCFS_POWER is not set +CONFIG_ACPI_REV_OVERRIDE_POSSIBLE=y +# CONFIG_ACPI_EC_DEBUGFS is not set +CONFIG_ACPI_AC=y +CONFIG_ACPI_BATTERY=y +CONFIG_ACPI_BUTTON=y +CONFIG_ACPI_FAN=y +# CONFIG_ACPI_TAD is not set +# CONFIG_ACPI_DOCK is not set +CONFIG_ACPI_CPU_FREQ_PSS=y +CONFIG_ACPI_PROCESSOR_CSTATE=y +CONFIG_ACPI_PROCESSOR_IDLE=y +CONFIG_ACPI_PROCESSOR=y +# CONFIG_ACPI_PROCESSOR_AGGREGATOR is not set +CONFIG_ACPI_THERMAL=y +CONFIG_ARCH_HAS_ACPI_TABLE_UPGRADE=y +# CONFIG_ACPI_DEBUG is not set +# CONFIG_ACPI_PCI_SLOT is not set +# CONFIG_ACPI_CONTAINER is not set +# CONFIG_ACPI_HOTPLUG_MEMORY is not set +CONFIG_ACPI_HOTPLUG_IOAPIC=y +# CONFIG_ACPI_SBS is not set +# CONFIG_ACPI_HED is not set +# CONFIG_ACPI_NFIT is not set +CONFIG_HAVE_ACPI_APEI=y +CONFIG_HAVE_ACPI_APEI_NMI=y +# CONFIG_ACPI_APEI is not set +# CONFIG_DPTF_POWER is not set +# CONFIG_PMIC_OPREGION is not set +# CONFIG_ACPI_CONFIGFS is not set +CONFIG_X86_PM_TIMER=y +# CONFIG_SFI is not set + +# +# CPU Frequency scaling +# +# CONFIG_CPU_FREQ is not set + +# +# CPU Idle +# +CONFIG_CPU_IDLE=y +CONFIG_CPU_IDLE_GOV_LADDER=y +CONFIG_CPU_IDLE_GOV_MENU=y +# CONFIG_CPU_IDLE_GOV_TEO is not set +# CONFIG_INTEL_IDLE is not set + +# +# Bus options (PCI etc.) +# +CONFIG_PCI_DIRECT=y +# CONFIG_PCI_MMCONFIG is not set +CONFIG_ISA_DMA_API=y +CONFIG_AMD_NB=y +# CONFIG_X86_SYSFB is not set + +# +# Binary Emulations +# +# CONFIG_IA32_EMULATION is not set +# CONFIG_X86_X32 is not set +CONFIG_X86_DEV_DMA_OPS=y +CONFIG_HAVE_GENERIC_GUP=y + +# +# Firmware Drivers +# +# CONFIG_EDD is not set +CONFIG_FIRMWARE_MEMMAP=y +CONFIG_DMIID=y +# CONFIG_DMI_SYSFS is not set +CONFIG_DMI_SCAN_MACHINE_NON_EFI_FALLBACK=y +# CONFIG_ISCSI_IBFT_FIND is not set +# CONFIG_FW_CFG_SYSFS is not set +# CONFIG_GOOGLE_FIRMWARE is not set + +# +# Tegra firmware driver +# +CONFIG_HAVE_KVM=y +CONFIG_VIRTUALIZATION=y +# CONFIG_KVM is not set +# CONFIG_VHOST_NET is not set +# CONFIG_VHOST_CROSS_ENDIAN_LEGACY is not set + +# +# General architecture-dependent options +# +CONFIG_CRASH_CORE=y +CONFIG_HAVE_OPROFILE=y +CONFIG_OPROFILE_NMI_TIMER=y +# CONFIG_JUMP_LABEL is not set +CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y +CONFIG_ARCH_USE_BUILTIN_BSWAP=y +CONFIG_HAVE_IOREMAP_PROT=y +CONFIG_HAVE_KPROBES=y +CONFIG_HAVE_KRETPROBES=y +CONFIG_HAVE_OPTPROBES=y +CONFIG_HAVE_KPROBES_ON_FTRACE=y +CONFIG_HAVE_FUNCTION_ERROR_INJECTION=y +CONFIG_HAVE_NMI=y +CONFIG_HAVE_ARCH_TRACEHOOK=y +CONFIG_HAVE_DMA_CONTIGUOUS=y +CONFIG_GENERIC_SMP_IDLE_THREAD=y +CONFIG_ARCH_HAS_FORTIFY_SOURCE=y +CONFIG_ARCH_HAS_SET_MEMORY=y +CONFIG_HAVE_ARCH_THREAD_STRUCT_WHITELIST=y +CONFIG_ARCH_WANTS_DYNAMIC_TASK_STRUCT=y +CONFIG_HAVE_REGS_AND_STACK_ACCESS_API=y +CONFIG_HAVE_RSEQ=y +CONFIG_HAVE_FUNCTION_ARG_ACCESS_API=y +CONFIG_HAVE_CLK=y +CONFIG_HAVE_HW_BREAKPOINT=y +CONFIG_HAVE_MIXED_BREAKPOINTS_REGS=y +CONFIG_HAVE_USER_RETURN_NOTIFIER=y +CONFIG_HAVE_PERF_EVENTS_NMI=y +CONFIG_HAVE_HARDLOCKUP_DETECTOR_PERF=y +CONFIG_HAVE_PERF_REGS=y +CONFIG_HAVE_PERF_USER_STACK_DUMP=y +CONFIG_HAVE_ARCH_JUMP_LABEL=y +CONFIG_HAVE_ARCH_JUMP_LABEL_RELATIVE=y +CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y +CONFIG_HAVE_CMPXCHG_LOCAL=y +CONFIG_HAVE_CMPXCHG_DOUBLE=y +CONFIG_HAVE_ARCH_SECCOMP_FILTER=y +CONFIG_SECCOMP_FILTER=y +CONFIG_HAVE_ARCH_STACKLEAK=y +CONFIG_HAVE_STACKPROTECTOR=y +CONFIG_CC_HAS_STACKPROTECTOR_NONE=y +CONFIG_STACKPROTECTOR=y +CONFIG_STACKPROTECTOR_STRONG=y +CONFIG_HAVE_ARCH_WITHIN_STACK_FRAMES=y +CONFIG_HAVE_CONTEXT_TRACKING=y +CONFIG_HAVE_VIRT_CPU_ACCOUNTING_GEN=y +CONFIG_HAVE_IRQ_TIME_ACCOUNTING=y +CONFIG_HAVE_MOVE_PMD=y +CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE=y +CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD=y +CONFIG_HAVE_ARCH_HUGE_VMAP=y +CONFIG_HAVE_ARCH_SOFT_DIRTY=y +CONFIG_HAVE_MOD_ARCH_SPECIFIC=y +CONFIG_MODULES_USE_ELF_RELA=y +CONFIG_HAVE_IRQ_EXIT_ON_IRQ_STACK=y +CONFIG_ARCH_HAS_ELF_RANDOMIZE=y +CONFIG_HAVE_ARCH_MMAP_RND_BITS=y +CONFIG_HAVE_EXIT_THREAD=y +CONFIG_ARCH_MMAP_RND_BITS=28 +CONFIG_HAVE_COPY_THREAD_TLS=y +CONFIG_HAVE_STACK_VALIDATION=y +CONFIG_HAVE_RELIABLE_STACKTRACE=y +CONFIG_HAVE_ARCH_VMAP_STACK=y +CONFIG_VMAP_STACK=y +CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y +CONFIG_STRICT_KERNEL_RWX=y +CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y +CONFIG_ARCH_HAS_REFCOUNT=y +# CONFIG_REFCOUNT_FULL is not set +CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y + +# +# GCOV-based kernel profiling +# +CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y +CONFIG_PLUGIN_HOSTCC="" +CONFIG_HAVE_GCC_PLUGINS=y +CONFIG_RT_MUTEXES=y +CONFIG_BASE_SMALL=0 +# CONFIG_MODULES is not set +CONFIG_MODULES_TREE_LOOKUP=y +CONFIG_BLOCK=y +# CONFIG_BLK_DEV_BSG is not set +# CONFIG_BLK_DEV_BSGLIB is not set +# CONFIG_BLK_DEV_INTEGRITY is not set +# CONFIG_BLK_DEV_ZONED is not set +# CONFIG_BLK_DEV_THROTTLING is not set +# CONFIG_BLK_CMDLINE_PARSER is not set +# CONFIG_BLK_WBT is not set +# CONFIG_BLK_CGROUP_IOLATENCY is not set +# CONFIG_BLK_SED_OPAL is not set + +# +# Partition Types +# +# CONFIG_PARTITION_ADVANCED is not set +CONFIG_MSDOS_PARTITION=y +CONFIG_EFI_PARTITION=y +CONFIG_BLK_MQ_PCI=y +CONFIG_BLK_MQ_VIRTIO=y +CONFIG_BLK_PM=y + +# +# IO Schedulers +# +CONFIG_MQ_IOSCHED_DEADLINE=y +CONFIG_MQ_IOSCHED_KYBER=y +# CONFIG_IOSCHED_BFQ is not set +CONFIG_ASN1=y +CONFIG_INLINE_SPIN_UNLOCK_IRQ=y +CONFIG_INLINE_READ_UNLOCK=y +CONFIG_INLINE_READ_UNLOCK_IRQ=y +CONFIG_INLINE_WRITE_UNLOCK=y +CONFIG_INLINE_WRITE_UNLOCK_IRQ=y +CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y +CONFIG_ARCH_USE_QUEUED_SPINLOCKS=y +CONFIG_ARCH_USE_QUEUED_RWLOCKS=y +CONFIG_ARCH_HAS_SYNC_CORE_BEFORE_USERMODE=y +CONFIG_ARCH_HAS_SYSCALL_WRAPPER=y +CONFIG_FREEZER=y + +# +# Executable file formats +# +CONFIG_BINFMT_ELF=y +CONFIG_ELFCORE=y +# CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS is not set +CONFIG_BINFMT_SCRIPT=y +# CONFIG_BINFMT_MISC is not set +CONFIG_COREDUMP=y + +# +# Memory Management options +# +CONFIG_SELECT_MEMORY_MODEL=y +CONFIG_SPARSEMEM_MANUAL=y +CONFIG_SPARSEMEM=y +CONFIG_HAVE_MEMORY_PRESENT=y +CONFIG_SPARSEMEM_EXTREME=y +CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y +CONFIG_SPARSEMEM_VMEMMAP=y +CONFIG_HAVE_MEMBLOCK_NODE_MAP=y +CONFIG_ARCH_DISCARD_MEMBLOCK=y +CONFIG_MEMORY_ISOLATION=y +CONFIG_HAVE_BOOTMEM_INFO_NODE=y +CONFIG_MEMORY_HOTPLUG=y +CONFIG_MEMORY_HOTPLUG_SPARSE=y +# CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE is not set +CONFIG_MEMORY_HOTREMOVE=y +CONFIG_SPLIT_PTLOCK_CPUS=4 +CONFIG_MEMORY_BALLOON=y +# CONFIG_COMPACTION is not set +CONFIG_MIGRATION=y +CONFIG_PHYS_ADDR_T_64BIT=y +CONFIG_BOUNCE=y +CONFIG_VIRT_TO_BUS=y +# CONFIG_KSM is not set +CONFIG_DEFAULT_MMAP_MIN_ADDR=4096 +# CONFIG_TRANSPARENT_HUGEPAGE is not set +CONFIG_ARCH_WANTS_THP_SWAP=y +CONFIG_NEED_PER_CPU_KM=y +# CONFIG_CLEANCACHE is not set +# CONFIG_FRONTSWAP is not set +# CONFIG_CMA is not set +# CONFIG_ZPOOL is not set +# CONFIG_ZBUD is not set +# CONFIG_ZSMALLOC is not set +CONFIG_GENERIC_EARLY_IOREMAP=y +# CONFIG_IDLE_PAGE_TRACKING is not set +CONFIG_ARCH_HAS_ZONE_DEVICE=y +# CONFIG_ZONE_DEVICE is not set +CONFIG_ARCH_USES_HIGH_VMA_FLAGS=y +CONFIG_ARCH_HAS_PKEYS=y +# CONFIG_PERCPU_STATS is not set +# CONFIG_GUP_BENCHMARK is not set +CONFIG_ARCH_HAS_PTE_SPECIAL=y +CONFIG_NET=y +CONFIG_NET_INGRESS=y +CONFIG_SKB_EXTENSIONS=y + +# +# Networking options +# +CONFIG_PACKET=y +# CONFIG_PACKET_DIAG is not set +CONFIG_UNIX=y +CONFIG_UNIX_SCM=y +# CONFIG_UNIX_DIAG is not set +CONFIG_TLS=y +# CONFIG_TLS_DEVICE is not set +CONFIG_XFRM=y +CONFIG_XFRM_ALGO=y +CONFIG_XFRM_USER=y +CONFIG_XFRM_INTERFACE=y +CONFIG_XFRM_SUB_POLICY=y +CONFIG_XFRM_MIGRATE=y +CONFIG_XFRM_STATISTICS=y +CONFIG_XFRM_IPCOMP=y +CONFIG_NET_KEY=y +CONFIG_NET_KEY_MIGRATE=y +CONFIG_INET=y +# CONFIG_IP_MULTICAST is not set +CONFIG_IP_ADVANCED_ROUTER=y +# CONFIG_IP_FIB_TRIE_STATS is not set +CONFIG_IP_MULTIPLE_TABLES=y +# CONFIG_IP_ROUTE_MULTIPATH is not set +# CONFIG_IP_ROUTE_VERBOSE is not set +CONFIG_IP_ROUTE_CLASSID=y +# CONFIG_IP_PNP is not set +# CONFIG_NET_IPIP is not set +CONFIG_NET_IPGRE_DEMUX=y +CONFIG_NET_IP_TUNNEL=y +CONFIG_NET_IPGRE=y +# CONFIG_SYN_COOKIES is not set +CONFIG_NET_IPVTI=y +CONFIG_NET_UDP_TUNNEL=y +# CONFIG_NET_FOU is not set +# CONFIG_NET_FOU_IP_TUNNELS is not set +CONFIG_INET_AH=y +CONFIG_INET_ESP=y +# CONFIG_INET_ESP_OFFLOAD is not set +CONFIG_INET_IPCOMP=y +CONFIG_INET_XFRM_TUNNEL=y +CONFIG_INET_TUNNEL=y +CONFIG_INET_XFRM_MODE_TRANSPORT=y +CONFIG_INET_XFRM_MODE_TUNNEL=y +CONFIG_INET_XFRM_MODE_BEET=y +CONFIG_INET_DIAG=y +CONFIG_INET_TCP_DIAG=y +# CONFIG_INET_UDP_DIAG is not set +# CONFIG_INET_RAW_DIAG is not set +# CONFIG_INET_DIAG_DESTROY is not set +# CONFIG_TCP_CONG_ADVANCED is not set +CONFIG_TCP_CONG_CUBIC=y +CONFIG_DEFAULT_TCP_CONG="cubic" +# CONFIG_TCP_MD5SIG is not set +CONFIG_IPV6=y +# CONFIG_IPV6_ROUTER_PREF is not set +CONFIG_IPV6_OPTIMISTIC_DAD=y +CONFIG_INET6_AH=y +CONFIG_INET6_ESP=y +# CONFIG_INET6_ESP_OFFLOAD is not set +CONFIG_INET6_IPCOMP=y +CONFIG_IPV6_MIP6=y +# CONFIG_IPV6_ILA is not set +CONFIG_INET6_XFRM_TUNNEL=y +CONFIG_INET6_TUNNEL=y +CONFIG_INET6_XFRM_MODE_TRANSPORT=y +CONFIG_INET6_XFRM_MODE_TUNNEL=y +CONFIG_INET6_XFRM_MODE_BEET=y +# CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION is not set +CONFIG_IPV6_VTI=y +# CONFIG_IPV6_SIT is not set +CONFIG_IPV6_TUNNEL=y +CONFIG_IPV6_GRE=y +CONFIG_IPV6_MULTIPLE_TABLES=y +CONFIG_IPV6_SUBTREES=y +# CONFIG_IPV6_MROUTE is not set +# CONFIG_IPV6_SEG6_LWTUNNEL is not set +# CONFIG_IPV6_SEG6_HMAC is not set +# CONFIG_NETWORK_SECMARK is not set +# CONFIG_NETWORK_PHY_TIMESTAMPING is not set +CONFIG_NETFILTER=y +CONFIG_NETFILTER_ADVANCED=y + +# +# Core Netfilter Configuration +# +CONFIG_NETFILTER_INGRESS=y +CONFIG_NETFILTER_NETLINK=y +CONFIG_NETFILTER_FAMILY_ARP=y +# CONFIG_NETFILTER_NETLINK_ACCT is not set +CONFIG_NETFILTER_NETLINK_QUEUE=y +CONFIG_NETFILTER_NETLINK_LOG=y +# CONFIG_NETFILTER_NETLINK_OSF is not set +CONFIG_NF_CONNTRACK=y +CONFIG_NF_LOG_COMMON=y +# CONFIG_NF_LOG_NETDEV is not set +CONFIG_NETFILTER_CONNCOUNT=y +CONFIG_NF_CONNTRACK_MARK=y +# CONFIG_NF_CONNTRACK_ZONES is not set +CONFIG_NF_CONNTRACK_PROCFS=y +CONFIG_NF_CONNTRACK_EVENTS=y +# CONFIG_NF_CONNTRACK_TIMEOUT is not set +# CONFIG_NF_CONNTRACK_TIMESTAMP is not set +# CONFIG_NF_CONNTRACK_LABELS is not set +# CONFIG_NF_CT_PROTO_DCCP is not set +# CONFIG_NF_CT_PROTO_SCTP is not set +CONFIG_NF_CT_PROTO_UDPLITE=y +# CONFIG_NF_CONNTRACK_AMANDA is not set +# CONFIG_NF_CONNTRACK_FTP is not set +# CONFIG_NF_CONNTRACK_H323 is not set +# CONFIG_NF_CONNTRACK_IRC is not set +# CONFIG_NF_CONNTRACK_NETBIOS_NS is not set +# CONFIG_NF_CONNTRACK_SNMP is not set +# CONFIG_NF_CONNTRACK_PPTP is not set +CONFIG_NF_CONNTRACK_SANE=y +# CONFIG_NF_CONNTRACK_SIP is not set +# CONFIG_NF_CONNTRACK_TFTP is not set +CONFIG_NF_CT_NETLINK=y +# CONFIG_NETFILTER_NETLINK_GLUE_CT is not set +CONFIG_NF_NAT=y +CONFIG_NF_NAT_NEEDED=y +CONFIG_NF_NAT_REDIRECT=y +CONFIG_NF_NAT_MASQUERADE=y +# CONFIG_NF_TABLES is not set +CONFIG_NETFILTER_XTABLES=y + +# +# Xtables combined modules +# +CONFIG_NETFILTER_XT_MARK=y +CONFIG_NETFILTER_XT_CONNMARK=y +CONFIG_NETFILTER_XT_SET=y + +# +# Xtables targets +# +# CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set +CONFIG_NETFILTER_XT_TARGET_CLASSIFY=y +CONFIG_NETFILTER_XT_TARGET_CONNMARK=y +CONFIG_NETFILTER_XT_TARGET_CT=y +CONFIG_NETFILTER_XT_TARGET_DSCP=y +CONFIG_NETFILTER_XT_TARGET_HL=y +# CONFIG_NETFILTER_XT_TARGET_HMARK is not set +# CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set +CONFIG_NETFILTER_XT_TARGET_LOG=y +CONFIG_NETFILTER_XT_TARGET_MARK=y +CONFIG_NETFILTER_XT_NAT=y +CONFIG_NETFILTER_XT_TARGET_NETMAP=y +CONFIG_NETFILTER_XT_TARGET_NFLOG=y +CONFIG_NETFILTER_XT_TARGET_NFQUEUE=y +CONFIG_NETFILTER_XT_TARGET_NOTRACK=y +# CONFIG_NETFILTER_XT_TARGET_RATEEST is not set +CONFIG_NETFILTER_XT_TARGET_REDIRECT=y +# CONFIG_NETFILTER_XT_TARGET_TEE is not set +# CONFIG_NETFILTER_XT_TARGET_TPROXY is not set +CONFIG_NETFILTER_XT_TARGET_TRACE=y +CONFIG_NETFILTER_XT_TARGET_TCPMSS=y +# CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set + +# +# Xtables matches +# +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y +# CONFIG_NETFILTER_XT_MATCH_BPF is not set +# CONFIG_NETFILTER_XT_MATCH_CGROUP is not set +CONFIG_NETFILTER_XT_MATCH_CLUSTER=y +CONFIG_NETFILTER_XT_MATCH_COMMENT=y +CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y +# CONFIG_NETFILTER_XT_MATCH_CONNLABEL is not set +CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=y +CONFIG_NETFILTER_XT_MATCH_CONNMARK=y +CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y +# CONFIG_NETFILTER_XT_MATCH_CPU is not set +CONFIG_NETFILTER_XT_MATCH_DCCP=y +CONFIG_NETFILTER_XT_MATCH_DEVGROUP=y +CONFIG_NETFILTER_XT_MATCH_DSCP=y +CONFIG_NETFILTER_XT_MATCH_ECN=y +CONFIG_NETFILTER_XT_MATCH_ESP=y +CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=y +CONFIG_NETFILTER_XT_MATCH_HELPER=y +CONFIG_NETFILTER_XT_MATCH_HL=y +# CONFIG_NETFILTER_XT_MATCH_IPCOMP is not set +# CONFIG_NETFILTER_XT_MATCH_IPRANGE is not set +CONFIG_NETFILTER_XT_MATCH_L2TP=y +CONFIG_NETFILTER_XT_MATCH_LENGTH=y +CONFIG_NETFILTER_XT_MATCH_LIMIT=y +CONFIG_NETFILTER_XT_MATCH_MAC=y +CONFIG_NETFILTER_XT_MATCH_MARK=y +CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y +# CONFIG_NETFILTER_XT_MATCH_NFACCT is not set +# CONFIG_NETFILTER_XT_MATCH_OSF is not set +# CONFIG_NETFILTER_XT_MATCH_OWNER is not set +CONFIG_NETFILTER_XT_MATCH_POLICY=y +CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y +CONFIG_NETFILTER_XT_MATCH_QUOTA=y +# CONFIG_NETFILTER_XT_MATCH_RATEEST is not set +CONFIG_NETFILTER_XT_MATCH_REALM=y +# CONFIG_NETFILTER_XT_MATCH_RECENT is not set +CONFIG_NETFILTER_XT_MATCH_SCTP=y +# CONFIG_NETFILTER_XT_MATCH_SOCKET is not set +CONFIG_NETFILTER_XT_MATCH_STATE=y +CONFIG_NETFILTER_XT_MATCH_STATISTIC=y +CONFIG_NETFILTER_XT_MATCH_STRING=y +CONFIG_NETFILTER_XT_MATCH_TCPMSS=y +# CONFIG_NETFILTER_XT_MATCH_TIME is not set +CONFIG_NETFILTER_XT_MATCH_U32=y +CONFIG_IP_SET=y +CONFIG_IP_SET_MAX=256 +CONFIG_IP_SET_BITMAP_IP=y +CONFIG_IP_SET_BITMAP_IPMAC=y +CONFIG_IP_SET_BITMAP_PORT=y +CONFIG_IP_SET_HASH_IP=y +# CONFIG_IP_SET_HASH_IPMARK is not set +CONFIG_IP_SET_HASH_IPPORT=y +CONFIG_IP_SET_HASH_IPPORTIP=y +CONFIG_IP_SET_HASH_IPPORTNET=y +# CONFIG_IP_SET_HASH_IPMAC is not set +# CONFIG_IP_SET_HASH_MAC is not set +# CONFIG_IP_SET_HASH_NETPORTNET is not set +CONFIG_IP_SET_HASH_NET=y +# CONFIG_IP_SET_HASH_NETNET is not set +CONFIG_IP_SET_HASH_NETPORT=y +# CONFIG_IP_SET_HASH_NETIFACE is not set +CONFIG_IP_SET_LIST_SET=y +# CONFIG_IP_VS is not set + +# +# IP: Netfilter Configuration +# +CONFIG_NF_DEFRAG_IPV4=y +# CONFIG_NF_SOCKET_IPV4 is not set +# CONFIG_NF_TPROXY_IPV4 is not set +# CONFIG_NF_DUP_IPV4 is not set +# CONFIG_NF_LOG_ARP is not set +CONFIG_NF_LOG_IPV4=y +CONFIG_NF_REJECT_IPV4=y +CONFIG_IP_NF_IPTABLES=y +CONFIG_IP_NF_MATCH_AH=y +CONFIG_IP_NF_MATCH_ECN=y +# CONFIG_IP_NF_MATCH_RPFILTER is not set +CONFIG_IP_NF_MATCH_TTL=y +CONFIG_IP_NF_FILTER=y +CONFIG_IP_NF_TARGET_REJECT=y +# CONFIG_IP_NF_TARGET_SYNPROXY is not set +CONFIG_IP_NF_NAT=y +CONFIG_IP_NF_TARGET_MASQUERADE=y +CONFIG_IP_NF_TARGET_NETMAP=y +CONFIG_IP_NF_TARGET_REDIRECT=y +CONFIG_IP_NF_MANGLE=y +CONFIG_IP_NF_TARGET_CLUSTERIP=y +CONFIG_IP_NF_TARGET_ECN=y +CONFIG_IP_NF_TARGET_TTL=y +CONFIG_IP_NF_RAW=y +CONFIG_IP_NF_ARPTABLES=y +CONFIG_IP_NF_ARPFILTER=y +CONFIG_IP_NF_ARP_MANGLE=y + +# +# IPv6: Netfilter Configuration +# +# CONFIG_NF_SOCKET_IPV6 is not set +# CONFIG_NF_TPROXY_IPV6 is not set +# CONFIG_NF_DUP_IPV6 is not set +CONFIG_NF_REJECT_IPV6=y +CONFIG_NF_LOG_IPV6=y +CONFIG_IP6_NF_IPTABLES=y +CONFIG_IP6_NF_MATCH_AH=y +CONFIG_IP6_NF_MATCH_EUI64=y +CONFIG_IP6_NF_MATCH_FRAG=y +CONFIG_IP6_NF_MATCH_OPTS=y +CONFIG_IP6_NF_MATCH_HL=y +CONFIG_IP6_NF_MATCH_IPV6HEADER=y +CONFIG_IP6_NF_MATCH_MH=y +# CONFIG_IP6_NF_MATCH_RPFILTER is not set +CONFIG_IP6_NF_MATCH_RT=y +# CONFIG_IP6_NF_MATCH_SRH is not set +CONFIG_IP6_NF_TARGET_HL=y +CONFIG_IP6_NF_FILTER=y +CONFIG_IP6_NF_TARGET_REJECT=y +# CONFIG_IP6_NF_TARGET_SYNPROXY is not set +CONFIG_IP6_NF_MANGLE=y +CONFIG_IP6_NF_RAW=y +CONFIG_IP6_NF_NAT=y +CONFIG_IP6_NF_TARGET_MASQUERADE=y +CONFIG_IP6_NF_TARGET_NPT=y +CONFIG_NF_DEFRAG_IPV6=y +# CONFIG_BPFILTER is not set +# CONFIG_IP_DCCP is not set +# CONFIG_IP_SCTP is not set +# CONFIG_RDS is not set +# CONFIG_TIPC is not set +# CONFIG_ATM is not set +CONFIG_L2TP=y +# CONFIG_L2TP_V3 is not set +# CONFIG_BRIDGE is not set +CONFIG_HAVE_NET_DSA=y +# CONFIG_NET_DSA is not set +# CONFIG_VLAN_8021Q is not set +# CONFIG_DECNET is not set +# CONFIG_LLC2 is not set +# CONFIG_ATALK is not set +# CONFIG_X25 is not set +# CONFIG_LAPB is not set +# CONFIG_PHONET is not set +# CONFIG_6LOWPAN is not set +# CONFIG_IEEE802154 is not set +# CONFIG_NET_SCHED is not set +# CONFIG_DCB is not set +CONFIG_DNS_RESOLVER=y +# CONFIG_BATMAN_ADV is not set +# CONFIG_OPENVSWITCH is not set +# CONFIG_VSOCKETS is not set +# CONFIG_NETLINK_DIAG is not set +# CONFIG_MPLS is not set +# CONFIG_NET_NSH is not set +# CONFIG_HSR is not set +# CONFIG_NET_SWITCHDEV is not set +# CONFIG_NET_L3_MASTER_DEV is not set +# CONFIG_NET_NCSI is not set +CONFIG_CGROUP_NET_PRIO=y +CONFIG_CGROUP_NET_CLASSID=y +CONFIG_NET_RX_BUSY_POLL=y +CONFIG_BQL=y + +# +# Network testing +# +# CONFIG_NET_PKTGEN is not set +# CONFIG_HAMRADIO is not set +# CONFIG_CAN is not set +# CONFIG_BT is not set +# CONFIG_AF_RXRPC is not set +# CONFIG_AF_KCM is not set +CONFIG_STREAM_PARSER=y +CONFIG_FIB_RULES=y +CONFIG_WIRELESS=y +# CONFIG_CFG80211 is not set + +# +# CFG80211 needs to be enabled for MAC80211 +# +CONFIG_MAC80211_STA_HASH_MAX_SIZE=0 +# CONFIG_WIMAX is not set +# CONFIG_RFKILL is not set +CONFIG_NET_9P=y +CONFIG_NET_9P_VIRTIO=y +# CONFIG_NET_9P_DEBUG is not set +# CONFIG_CAIF is not set +# CONFIG_CEPH_LIB is not set +# CONFIG_NFC is not set +# CONFIG_PSAMPLE is not set +# CONFIG_NET_IFE is not set +# CONFIG_LWTUNNEL is not set +CONFIG_DST_CACHE=y +CONFIG_GRO_CELLS=y +CONFIG_NET_SOCK_MSG=y +# CONFIG_NET_DEVLINK is not set +CONFIG_FAILOVER=y +CONFIG_HAVE_EBPF_JIT=y + +# +# Device Drivers +# +CONFIG_HAVE_EISA=y +# CONFIG_EISA is not set +CONFIG_HAVE_PCI=y +CONFIG_PCI=y +CONFIG_PCI_DOMAINS=y +# CONFIG_PCIEPORTBUS is not set +CONFIG_PCI_MSI=y +CONFIG_PCI_MSI_IRQ_DOMAIN=y +CONFIG_PCI_QUIRKS=y +# CONFIG_PCI_DEBUG is not set +# CONFIG_PCI_STUB is not set +CONFIG_PCI_LOCKLESS_CONFIG=y +# CONFIG_PCI_IOV is not set +# CONFIG_PCI_PRI is not set +# CONFIG_PCI_PASID is not set +CONFIG_PCI_LABEL=y +# CONFIG_HOTPLUG_PCI is not set + +# +# PCI controller drivers +# + +# +# Cadence PCIe controllers support +# +# CONFIG_VMD is not set + +# +# DesignWare PCI Core Support +# +# CONFIG_PCIE_DW_PLAT_HOST is not set +# CONFIG_PCI_MESON is not set + +# +# PCI Endpoint +# +# CONFIG_PCI_ENDPOINT is not set + +# +# PCI switch controller drivers +# +# CONFIG_PCI_SW_SWITCHTEC is not set +# CONFIG_PCCARD is not set +# CONFIG_RAPIDIO is not set + +# +# Generic Driver Options +# +CONFIG_UEVENT_HELPER=y +CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug" +CONFIG_DEVTMPFS=y +CONFIG_DEVTMPFS_MOUNT=y +CONFIG_STANDALONE=y +CONFIG_PREVENT_FIRMWARE_BUILD=y + +# +# Firmware loader +# +CONFIG_FW_LOADER=y +CONFIG_EXTRA_FIRMWARE="" +# CONFIG_FW_LOADER_USER_HELPER is not set +CONFIG_ALLOW_DEV_COREDUMP=y +# CONFIG_DEBUG_DRIVER is not set +# CONFIG_DEBUG_DEVRES is not set +# CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set +CONFIG_GENERIC_CPU_AUTOPROBE=y +CONFIG_GENERIC_CPU_VULNERABILITIES=y + +# +# Bus devices +# +# CONFIG_CONNECTOR is not set +# CONFIG_GNSS is not set +# CONFIG_MTD is not set +# CONFIG_OF is not set +CONFIG_ARCH_MIGHT_HAVE_PC_PARPORT=y +# CONFIG_PARPORT is not set +CONFIG_PNP=y +CONFIG_PNP_DEBUG_MESSAGES=y + +# +# Protocols +# +CONFIG_PNPACPI=y +CONFIG_BLK_DEV=y +# CONFIG_BLK_DEV_NULL_BLK is not set +# CONFIG_BLK_DEV_FD is not set +# CONFIG_BLK_DEV_PCIESSD_MTIP32XX is not set +# CONFIG_BLK_DEV_UMEM is not set +CONFIG_BLK_DEV_LOOP=y +CONFIG_BLK_DEV_LOOP_MIN_COUNT=8 +# CONFIG_BLK_DEV_CRYPTOLOOP is not set +# CONFIG_BLK_DEV_DRBD is not set +CONFIG_BLK_DEV_NBD=y +# CONFIG_BLK_DEV_SKD is not set +# CONFIG_BLK_DEV_SX8 is not set +# CONFIG_BLK_DEV_RAM is not set +# CONFIG_CDROM_PKTCDVD is not set +# CONFIG_ATA_OVER_ETH is not set +CONFIG_VIRTIO_BLK=y +# CONFIG_VIRTIO_BLK_SCSI is not set +# CONFIG_BLK_DEV_RBD is not set +# CONFIG_BLK_DEV_RSXX is not set + +# +# NVME Support +# +# CONFIG_BLK_DEV_NVME is not set +# CONFIG_NVME_FC is not set + +# +# Misc devices +# +# CONFIG_DUMMY_IRQ is not set +# CONFIG_IBM_ASM is not set +# CONFIG_PHANTOM is not set +# CONFIG_SGI_IOC4 is not set +# CONFIG_TIFM_CORE is not set +# CONFIG_ENCLOSURE_SERVICES is not set +# CONFIG_HP_ILO is not set +# CONFIG_SRAM is not set +# CONFIG_PCI_ENDPOINT_TEST is not set +# CONFIG_PVPANIC is not set +# CONFIG_C2PORT is not set + +# +# EEPROM support +# +# CONFIG_EEPROM_93CX6 is not set +# CONFIG_CB710_CORE is not set + +# +# Texas Instruments shared transport line discipline +# + +# +# Altera FPGA firmware download module (requires I2C) +# +# CONFIG_INTEL_MEI is not set +# CONFIG_INTEL_MEI_ME is not set +# CONFIG_INTEL_MEI_TXE is not set +# CONFIG_VMWARE_VMCI is not set + +# +# Intel MIC & related support +# + +# +# Intel MIC Bus Driver +# +# CONFIG_INTEL_MIC_BUS is not set + +# +# SCIF Bus Driver +# +# CONFIG_SCIF_BUS is not set + +# +# VOP Bus Driver +# +# CONFIG_VOP_BUS is not set + +# +# Intel MIC Host Driver +# + +# +# Intel MIC Card Driver +# + +# +# SCIF Driver +# + +# +# Intel MIC Coprocessor State Management (COSM) Drivers +# + +# +# VOP Driver +# +# CONFIG_GENWQE is not set +# CONFIG_ECHO is not set +# CONFIG_MISC_ALCOR_PCI is not set +# CONFIG_MISC_RTSX_PCI is not set +# CONFIG_HABANA_AI is not set +CONFIG_HAVE_IDE=y +# CONFIG_IDE is not set + +# +# SCSI device support +# +CONFIG_SCSI_MOD=y +# CONFIG_RAID_ATTRS is not set +# CONFIG_SCSI is not set +# CONFIG_ATA is not set +# CONFIG_MD is not set +# CONFIG_TARGET_CORE is not set +# CONFIG_FUSION is not set + +# +# IEEE 1394 (FireWire) support +# +# CONFIG_FIREWIRE is not set +# CONFIG_FIREWIRE_NOSY is not set +# CONFIG_MACINTOSH_DRIVERS is not set +CONFIG_NETDEVICES=y +CONFIG_NET_CORE=y +# CONFIG_BONDING is not set +CONFIG_DUMMY=y +# CONFIG_EQUALIZER is not set +# CONFIG_NET_TEAM is not set +# CONFIG_MACVLAN is not set +# CONFIG_IPVLAN is not set +# CONFIG_VXLAN is not set +# CONFIG_GENEVE is not set +# CONFIG_GTP is not set +CONFIG_MACSEC=y +# CONFIG_NETCONSOLE is not set +CONFIG_TUN=y +# CONFIG_TUN_VNET_CROSS_LE is not set +# CONFIG_VETH is not set +CONFIG_VIRTIO_NET=y +# CONFIG_NLMON is not set +# CONFIG_ARCNET is not set + +# +# CAIF transport drivers +# + +# +# Distributed Switch Architecture drivers +# +CONFIG_ETHERNET=y +CONFIG_NET_VENDOR_3COM=y +# CONFIG_VORTEX is not set +# CONFIG_TYPHOON is not set +CONFIG_NET_VENDOR_ADAPTEC=y +# CONFIG_ADAPTEC_STARFIRE is not set +CONFIG_NET_VENDOR_AGERE=y +# CONFIG_ET131X is not set +CONFIG_NET_VENDOR_ALACRITECH=y +# CONFIG_SLICOSS is not set +CONFIG_NET_VENDOR_ALTEON=y +# CONFIG_ACENIC is not set +# CONFIG_ALTERA_TSE is not set +CONFIG_NET_VENDOR_AMAZON=y +# CONFIG_ENA_ETHERNET is not set +CONFIG_NET_VENDOR_AMD=y +# CONFIG_AMD8111_ETH is not set +# CONFIG_PCNET32 is not set +# CONFIG_AMD_XGBE is not set +CONFIG_NET_VENDOR_AQUANTIA=y +# CONFIG_AQTION is not set +# CONFIG_NET_VENDOR_ARC is not set +CONFIG_NET_VENDOR_ATHEROS=y +# CONFIG_ATL2 is not set +# CONFIG_ATL1 is not set +# CONFIG_ATL1E is not set +# CONFIG_ATL1C is not set +# CONFIG_ALX is not set +# CONFIG_NET_VENDOR_AURORA is not set +CONFIG_NET_VENDOR_BROADCOM=y +# CONFIG_B44 is not set +# CONFIG_BCMGENET is not set +# CONFIG_BNX2 is not set +# CONFIG_CNIC is not set +# CONFIG_TIGON3 is not set +# CONFIG_BNX2X is not set +# CONFIG_SYSTEMPORT is not set +# CONFIG_BNXT is not set +CONFIG_NET_VENDOR_BROCADE=y +# CONFIG_BNA is not set +CONFIG_NET_VENDOR_CADENCE=y +# CONFIG_MACB is not set +CONFIG_NET_VENDOR_CAVIUM=y +# CONFIG_THUNDER_NIC_PF is not set +# CONFIG_THUNDER_NIC_VF is not set +# CONFIG_THUNDER_NIC_BGX is not set +# CONFIG_THUNDER_NIC_RGX is not set +CONFIG_CAVIUM_PTP=y +# CONFIG_LIQUIDIO is not set +# CONFIG_LIQUIDIO_VF is not set +CONFIG_NET_VENDOR_CHELSIO=y +# CONFIG_CHELSIO_T1 is not set +# CONFIG_CHELSIO_T3 is not set +# CONFIG_CHELSIO_T4 is not set +# CONFIG_CHELSIO_T4VF is not set +CONFIG_NET_VENDOR_CISCO=y +# CONFIG_ENIC is not set +CONFIG_NET_VENDOR_CORTINA=y +# CONFIG_CX_ECAT is not set +# CONFIG_DNET is not set +CONFIG_NET_VENDOR_DEC=y +# CONFIG_NET_TULIP is not set +CONFIG_NET_VENDOR_DLINK=y +# CONFIG_DL2K is not set +# CONFIG_SUNDANCE is not set +CONFIG_NET_VENDOR_EMULEX=y +# CONFIG_BE2NET is not set +CONFIG_NET_VENDOR_EZCHIP=y +CONFIG_NET_VENDOR_HP=y +# CONFIG_HP100 is not set +CONFIG_NET_VENDOR_HUAWEI=y +# CONFIG_HINIC is not set +CONFIG_NET_VENDOR_I825XX=y +CONFIG_NET_VENDOR_INTEL=y +# CONFIG_E100 is not set +# CONFIG_E1000 is not set +# CONFIG_E1000E is not set +# CONFIG_IGB is not set +# CONFIG_IGBVF is not set +# CONFIG_IXGB is not set +# CONFIG_IXGBE is not set +# CONFIG_IXGBEVF is not set +# CONFIG_I40E is not set +# CONFIG_I40EVF is not set +# CONFIG_ICE is not set +# CONFIG_FM10K is not set +# CONFIG_IGC is not set +# CONFIG_JME is not set +CONFIG_NET_VENDOR_MARVELL=y +# CONFIG_MVMDIO is not set +# CONFIG_SKGE is not set +# CONFIG_SKY2 is not set +CONFIG_NET_VENDOR_MELLANOX=y +# CONFIG_MLX4_EN is not set +# CONFIG_MLX5_CORE is not set +# CONFIG_MLXSW_CORE is not set +# CONFIG_MLXFW is not set +CONFIG_NET_VENDOR_MICREL=y +# CONFIG_KS8851_MLL is not set +# CONFIG_KSZ884X_PCI is not set +CONFIG_NET_VENDOR_MICROCHIP=y +# CONFIG_LAN743X is not set +CONFIG_NET_VENDOR_MICROSEMI=y +CONFIG_NET_VENDOR_MYRI=y +# CONFIG_MYRI10GE is not set +# CONFIG_FEALNX is not set +CONFIG_NET_VENDOR_NATSEMI=y +# CONFIG_NATSEMI is not set +# CONFIG_NS83820 is not set +CONFIG_NET_VENDOR_NETERION=y +# CONFIG_S2IO is not set +# CONFIG_VXGE is not set +CONFIG_NET_VENDOR_NETRONOME=y +# CONFIG_NFP is not set +CONFIG_NET_VENDOR_NI=y +# CONFIG_NI_XGE_MANAGEMENT_ENET is not set +CONFIG_NET_VENDOR_8390=y +# CONFIG_NE2K_PCI is not set +CONFIG_NET_VENDOR_NVIDIA=y +# CONFIG_FORCEDETH is not set +CONFIG_NET_VENDOR_OKI=y +# CONFIG_ETHOC is not set +CONFIG_NET_VENDOR_PACKET_ENGINES=y +# CONFIG_HAMACHI is not set +# CONFIG_YELLOWFIN is not set +CONFIG_NET_VENDOR_QLOGIC=y +# CONFIG_QLA3XXX is not set +# CONFIG_QLCNIC is not set +# CONFIG_QLGE is not set +# CONFIG_NETXEN_NIC is not set +# CONFIG_QED is not set +CONFIG_NET_VENDOR_QUALCOMM=y +# CONFIG_QCOM_EMAC is not set +# CONFIG_RMNET is not set +CONFIG_NET_VENDOR_RDC=y +# CONFIG_R6040 is not set +CONFIG_NET_VENDOR_REALTEK=y +# CONFIG_8139CP is not set +# CONFIG_8139TOO is not set +# CONFIG_R8169 is not set +CONFIG_NET_VENDOR_RENESAS=y +CONFIG_NET_VENDOR_ROCKER=y +CONFIG_NET_VENDOR_SAMSUNG=y +# CONFIG_SXGBE_ETH is not set +CONFIG_NET_VENDOR_SEEQ=y +CONFIG_NET_VENDOR_SOLARFLARE=y +# CONFIG_SFC is not set +# CONFIG_SFC_FALCON is not set +CONFIG_NET_VENDOR_SILAN=y +# CONFIG_SC92031 is not set +CONFIG_NET_VENDOR_SIS=y +# CONFIG_SIS900 is not set +# CONFIG_SIS190 is not set +CONFIG_NET_VENDOR_SMSC=y +# CONFIG_EPIC100 is not set +# CONFIG_SMSC911X is not set +# CONFIG_SMSC9420 is not set +CONFIG_NET_VENDOR_SOCIONEXT=y +CONFIG_NET_VENDOR_STMICRO=y +# CONFIG_STMMAC_ETH is not set +CONFIG_NET_VENDOR_SUN=y +# CONFIG_HAPPYMEAL is not set +# CONFIG_SUNGEM is not set +# CONFIG_CASSINI is not set +# CONFIG_NIU is not set +CONFIG_NET_VENDOR_SYNOPSYS=y +# CONFIG_DWC_XLGMAC is not set +CONFIG_NET_VENDOR_TEHUTI=y +# CONFIG_TEHUTI is not set +CONFIG_NET_VENDOR_TI=y +# CONFIG_TI_CPSW_PHY_SEL is not set +# CONFIG_TI_CPSW_ALE is not set +# CONFIG_TLAN is not set +CONFIG_NET_VENDOR_VIA=y +# CONFIG_VIA_RHINE is not set +# CONFIG_VIA_VELOCITY is not set +CONFIG_NET_VENDOR_WIZNET=y +# CONFIG_WIZNET_W5100 is not set +# CONFIG_WIZNET_W5300 is not set +# CONFIG_FDDI is not set +# CONFIG_HIPPI is not set +# CONFIG_NET_SB1000 is not set +# CONFIG_MDIO_DEVICE is not set +# CONFIG_PHYLIB is not set +# CONFIG_PPP is not set +# CONFIG_SLIP is not set + +# +# Host-side USB support is needed for USB Network Adapter support +# +CONFIG_WLAN=y +CONFIG_WLAN_VENDOR_ADMTEK=y +CONFIG_WLAN_VENDOR_ATH=y +# CONFIG_ATH_DEBUG is not set +# CONFIG_ATH5K_PCI is not set +CONFIG_WLAN_VENDOR_ATMEL=y +CONFIG_WLAN_VENDOR_BROADCOM=y +CONFIG_WLAN_VENDOR_CISCO=y +CONFIG_WLAN_VENDOR_INTEL=y +CONFIG_WLAN_VENDOR_INTERSIL=y +# CONFIG_HOSTAP is not set +# CONFIG_PRISM54 is not set +CONFIG_WLAN_VENDOR_MARVELL=y +CONFIG_WLAN_VENDOR_MEDIATEK=y +CONFIG_WLAN_VENDOR_RALINK=y +CONFIG_WLAN_VENDOR_REALTEK=y +CONFIG_WLAN_VENDOR_RSI=y +CONFIG_WLAN_VENDOR_ST=y +CONFIG_WLAN_VENDOR_TI=y +CONFIG_WLAN_VENDOR_ZYDAS=y +CONFIG_WLAN_VENDOR_QUANTENNA=y + +# +# Enable WiMAX (Networking options) to see the WiMAX drivers +# +# CONFIG_WAN is not set +# CONFIG_VMXNET3 is not set +# CONFIG_FUJITSU_ES is not set +CONFIG_NET_FAILOVER=y +# CONFIG_ISDN is not set +# CONFIG_NVM is not set + +# +# Input device support +# +CONFIG_INPUT=y +CONFIG_INPUT_FF_MEMLESS=y +# CONFIG_INPUT_POLLDEV is not set +# CONFIG_INPUT_SPARSEKMAP is not set +# CONFIG_INPUT_MATRIXKMAP is not set + +# +# Userland interfaces +# +CONFIG_INPUT_MOUSEDEV=y +CONFIG_INPUT_MOUSEDEV_PSAUX=y +CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024 +CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768 +# CONFIG_INPUT_JOYDEV is not set +CONFIG_INPUT_EVDEV=y +# CONFIG_INPUT_EVBUG is not set + +# +# Input Device Drivers +# +CONFIG_INPUT_KEYBOARD=y +CONFIG_KEYBOARD_ATKBD=y +# CONFIG_KEYBOARD_LKKBD is not set +# CONFIG_KEYBOARD_NEWTON is not set +# CONFIG_KEYBOARD_OPENCORES is not set +# CONFIG_KEYBOARD_SAMSUNG is not set +# CONFIG_KEYBOARD_STOWAWAY is not set +# CONFIG_KEYBOARD_SUNKBD is not set +# CONFIG_KEYBOARD_XTKBD is not set +CONFIG_INPUT_MOUSE=y +CONFIG_MOUSE_PS2=y +CONFIG_MOUSE_PS2_ALPS=y +CONFIG_MOUSE_PS2_BYD=y +CONFIG_MOUSE_PS2_LOGIPS2PP=y +CONFIG_MOUSE_PS2_SYNAPTICS=y +CONFIG_MOUSE_PS2_CYPRESS=y +CONFIG_MOUSE_PS2_LIFEBOOK=y +CONFIG_MOUSE_PS2_TRACKPOINT=y +# CONFIG_MOUSE_PS2_ELANTECH is not set +# CONFIG_MOUSE_PS2_SENTELIC is not set +# CONFIG_MOUSE_PS2_TOUCHKIT is not set +CONFIG_MOUSE_PS2_FOCALTECH=y +# CONFIG_MOUSE_SERIAL is not set +# CONFIG_MOUSE_APPLETOUCH is not set +# CONFIG_MOUSE_BCM5974 is not set +# CONFIG_MOUSE_VSXXXAA is not set +# CONFIG_MOUSE_SYNAPTICS_USB is not set +# CONFIG_INPUT_JOYSTICK is not set +# CONFIG_INPUT_TABLET is not set +# CONFIG_INPUT_TOUCHSCREEN is not set +# CONFIG_INPUT_MISC is not set +# CONFIG_RMI4_CORE is not set + +# +# Hardware I/O ports +# +CONFIG_SERIO=y +CONFIG_ARCH_MIGHT_HAVE_PC_SERIO=y +CONFIG_SERIO_I8042=y +CONFIG_SERIO_SERPORT=y +# CONFIG_SERIO_CT82C710 is not set +# CONFIG_SERIO_PCIPS2 is not set +CONFIG_SERIO_LIBPS2=y +# CONFIG_SERIO_RAW is not set +# CONFIG_SERIO_ALTERA_PS2 is not set +# CONFIG_SERIO_PS2MULT is not set +# CONFIG_SERIO_ARC_PS2 is not set +# CONFIG_SERIO_OLPC_APSP is not set +# CONFIG_USERIO is not set +# CONFIG_GAMEPORT is not set + +# +# Character devices +# +CONFIG_TTY=y +CONFIG_VT=y +CONFIG_CONSOLE_TRANSLATIONS=y +CONFIG_VT_CONSOLE=y +CONFIG_VT_CONSOLE_SLEEP=y +CONFIG_HW_CONSOLE=y +# CONFIG_VT_HW_CONSOLE_BINDING is not set +CONFIG_UNIX98_PTYS=y +CONFIG_LEGACY_PTYS=y +CONFIG_LEGACY_PTY_COUNT=256 +# CONFIG_SERIAL_NONSTANDARD is not set +# CONFIG_NOZOMI is not set +# CONFIG_N_GSM is not set +# CONFIG_TRACE_SINK is not set +CONFIG_LDISC_AUTOLOAD=y +CONFIG_DEVMEM=y +CONFIG_DEVKMEM=y + +# +# Serial drivers +# +# CONFIG_SERIAL_8250 is not set + +# +# Non-8250 serial port support +# +# CONFIG_SERIAL_UARTLITE is not set +# CONFIG_SERIAL_JSM is not set +# CONFIG_SERIAL_SCCNXP is not set +# CONFIG_SERIAL_ALTERA_JTAGUART is not set +# CONFIG_SERIAL_ALTERA_UART is not set +# CONFIG_SERIAL_ARC is not set +# CONFIG_SERIAL_RP2 is not set +# CONFIG_SERIAL_FSL_LPUART is not set +# CONFIG_SERIAL_DEV_BUS is not set +CONFIG_HVC_DRIVER=y +CONFIG_VIRTIO_CONSOLE=y +# CONFIG_IPMI_HANDLER is not set +# CONFIG_HW_RANDOM is not set +# CONFIG_NVRAM is not set +# CONFIG_APPLICOM is not set +# CONFIG_MWAVE is not set +# CONFIG_RAW_DRIVER is not set +# CONFIG_HPET is not set +# CONFIG_HANGCHECK_TIMER is not set +# CONFIG_TCG_TPM is not set +# CONFIG_TELCLOCK is not set +CONFIG_DEVPORT=y +# CONFIG_XILLYBUS is not set +# CONFIG_RANDOM_TRUST_CPU is not set + +# +# I2C support +# +# CONFIG_I2C is not set +# CONFIG_I3C is not set +# CONFIG_SPI is not set +# CONFIG_SPMI is not set +# CONFIG_HSI is not set +# CONFIG_PPS is not set + +# +# PTP clock support +# +# CONFIG_PTP_1588_CLOCK is not set + +# +# Enable PHYLIB and NETWORK_PHY_TIMESTAMPING to see the additional clocks. +# +# CONFIG_PINCTRL is not set +# CONFIG_GPIOLIB is not set +# CONFIG_W1 is not set +# CONFIG_POWER_AVS is not set +# CONFIG_POWER_RESET is not set +CONFIG_POWER_SUPPLY=y +# CONFIG_POWER_SUPPLY_DEBUG is not set +# CONFIG_PDA_POWER is not set +# CONFIG_TEST_POWER is not set +# CONFIG_BATTERY_DS2780 is not set +# CONFIG_BATTERY_DS2781 is not set +# CONFIG_BATTERY_BQ27XXX is not set +# CONFIG_CHARGER_MAX8903 is not set +CONFIG_HWMON=y +# CONFIG_HWMON_DEBUG_CHIP is not set + +# +# Native drivers +# +# CONFIG_SENSORS_ABITUGURU is not set +# CONFIG_SENSORS_ABITUGURU3 is not set +# CONFIG_SENSORS_K8TEMP is not set +# CONFIG_SENSORS_K10TEMP is not set +# CONFIG_SENSORS_FAM15H_POWER is not set +# CONFIG_SENSORS_APPLESMC is not set +# CONFIG_SENSORS_ASPEED is not set +# CONFIG_SENSORS_DELL_SMM is not set +# CONFIG_SENSORS_I5K_AMB is not set +# CONFIG_SENSORS_F71805F is not set +# CONFIG_SENSORS_F71882FG is not set +# CONFIG_SENSORS_I5500 is not set +# CONFIG_SENSORS_CORETEMP is not set +# CONFIG_SENSORS_IT87 is not set +# CONFIG_SENSORS_MAX197 is not set +# CONFIG_SENSORS_PC87360 is not set +# CONFIG_SENSORS_PC87427 is not set +# CONFIG_SENSORS_NTC_THERMISTOR is not set +# CONFIG_SENSORS_NCT6683 is not set +# CONFIG_SENSORS_NCT6775 is not set +# CONFIG_SENSORS_NPCM7XX is not set +# CONFIG_SENSORS_SIS5595 is not set +# CONFIG_SENSORS_SMSC47M1 is not set +# CONFIG_SENSORS_SMSC47B397 is not set +# CONFIG_SENSORS_VIA_CPUTEMP is not set +# CONFIG_SENSORS_VIA686A is not set +# CONFIG_SENSORS_VT1211 is not set +# CONFIG_SENSORS_VT8231 is not set +# CONFIG_SENSORS_W83627HF is not set +# CONFIG_SENSORS_W83627EHF is not set + +# +# ACPI drivers +# +# CONFIG_SENSORS_ACPI_POWER is not set +# CONFIG_SENSORS_ATK0110 is not set +CONFIG_THERMAL=y +# CONFIG_THERMAL_STATISTICS is not set +CONFIG_THERMAL_EMERGENCY_POWEROFF_DELAY_MS=0 +CONFIG_THERMAL_HWMON=y +# CONFIG_THERMAL_WRITABLE_TRIPS is not set +CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y +# CONFIG_THERMAL_DEFAULT_GOV_FAIR_SHARE is not set +# CONFIG_THERMAL_DEFAULT_GOV_USER_SPACE is not set +# CONFIG_THERMAL_DEFAULT_GOV_POWER_ALLOCATOR is not set +# CONFIG_THERMAL_GOV_FAIR_SHARE is not set +CONFIG_THERMAL_GOV_STEP_WISE=y +# CONFIG_THERMAL_GOV_BANG_BANG is not set +# CONFIG_THERMAL_GOV_USER_SPACE is not set +# CONFIG_THERMAL_GOV_POWER_ALLOCATOR is not set +# CONFIG_THERMAL_EMULATION is not set + +# +# Intel thermal drivers +# +# CONFIG_INTEL_POWERCLAMP is not set +# CONFIG_INTEL_SOC_DTS_THERMAL is not set + +# +# ACPI INT340X thermal drivers +# +# CONFIG_INT340X_THERMAL is not set +# CONFIG_INTEL_PCH_THERMAL is not set +# CONFIG_WATCHDOG is not set +CONFIG_SSB_POSSIBLE=y +# CONFIG_SSB is not set +CONFIG_BCMA_POSSIBLE=y +# CONFIG_BCMA is not set + +# +# Multifunction device drivers +# +# CONFIG_MFD_CROS_EC is not set +# CONFIG_MFD_MADERA is not set +# CONFIG_HTC_PASIC3 is not set +# CONFIG_MFD_INTEL_QUARK_I2C_GPIO is not set +# CONFIG_LPC_ICH is not set +# CONFIG_LPC_SCH is not set +# CONFIG_MFD_INTEL_LPSS_ACPI is not set +# CONFIG_MFD_INTEL_LPSS_PCI is not set +# CONFIG_MFD_JANZ_CMODIO is not set +# CONFIG_MFD_KEMPLD is not set +# CONFIG_MFD_MT6397 is not set +# CONFIG_MFD_RDC321X is not set +# CONFIG_MFD_SM501 is not set +# CONFIG_ABX500_CORE is not set +# CONFIG_MFD_SYSCON is not set +# CONFIG_MFD_TI_AM335X_TSCADC is not set +# CONFIG_MFD_TQMX86 is not set +# CONFIG_MFD_VX855 is not set +# CONFIG_REGULATOR is not set +CONFIG_RC_CORE=y +CONFIG_RC_MAP=y +# CONFIG_LIRC is not set +CONFIG_RC_DECODERS=y +CONFIG_IR_NEC_DECODER=y +CONFIG_IR_RC5_DECODER=y +CONFIG_IR_RC6_DECODER=y +CONFIG_IR_JVC_DECODER=y +CONFIG_IR_SONY_DECODER=y +CONFIG_IR_SANYO_DECODER=y +CONFIG_IR_SHARP_DECODER=y +CONFIG_IR_MCE_KBD_DECODER=y +CONFIG_IR_XMP_DECODER=y +# CONFIG_IR_IMON_DECODER is not set +# CONFIG_IR_RCMM_DECODER is not set +# CONFIG_RC_DEVICES is not set +# CONFIG_MEDIA_SUPPORT is not set + +# +# Graphics support +# +# CONFIG_AGP is not set +CONFIG_VGA_ARB=y +CONFIG_VGA_ARB_MAX_GPUS=16 +# CONFIG_VGA_SWITCHEROO is not set +# CONFIG_DRM is not set +# CONFIG_DRM_DP_CEC is not set + +# +# ARM devices +# + +# +# ACP (Audio CoProcessor) Configuration +# + +# +# AMD Library routines +# + +# +# Frame buffer Devices +# +# CONFIG_FB is not set +# CONFIG_BACKLIGHT_LCD_SUPPORT is not set + +# +# Console display driver support +# +CONFIG_VGA_CONSOLE=y +# CONFIG_VGACON_SOFT_SCROLLBACK is not set +CONFIG_DUMMY_CONSOLE=y +CONFIG_DUMMY_CONSOLE_COLUMNS=80 +CONFIG_DUMMY_CONSOLE_ROWS=25 +CONFIG_SOUND=y +# CONFIG_SND is not set + +# +# HID support +# +CONFIG_HID=y +# CONFIG_HID_BATTERY_STRENGTH is not set +# CONFIG_HIDRAW is not set +# CONFIG_UHID is not set +CONFIG_HID_GENERIC=y + +# +# Special HID drivers +# +CONFIG_HID_A4TECH=y +# CONFIG_HID_ACRUX is not set +CONFIG_HID_APPLE=y +# CONFIG_HID_AUREAL is not set +CONFIG_HID_BELKIN=y +CONFIG_HID_CHERRY=y +CONFIG_HID_CHICONY=y +# CONFIG_HID_COUGAR is not set +# CONFIG_HID_CMEDIA is not set +CONFIG_HID_CYPRESS=y +# CONFIG_HID_DRAGONRISE is not set +# CONFIG_HID_EMS_FF is not set +# CONFIG_HID_ELECOM is not set +CONFIG_HID_EZKEY=y +# CONFIG_HID_GEMBIRD is not set +# CONFIG_HID_GFRM is not set +# CONFIG_HID_KEYTOUCH is not set +# CONFIG_HID_KYE is not set +# CONFIG_HID_WALTOP is not set +# CONFIG_HID_VIEWSONIC is not set +# CONFIG_HID_GYRATION is not set +# CONFIG_HID_ICADE is not set +CONFIG_HID_ITE=y +# CONFIG_HID_JABRA is not set +# CONFIG_HID_TWINHAN is not set +CONFIG_HID_KENSINGTON=y +# CONFIG_HID_LCPOWER is not set +# CONFIG_HID_LENOVO is not set +CONFIG_HID_LOGITECH=y +# CONFIG_HID_LOGITECH_HIDPP is not set +# CONFIG_LOGITECH_FF is not set +# CONFIG_LOGIRUMBLEPAD2_FF is not set +# CONFIG_LOGIG940_FF is not set +# CONFIG_LOGIWHEELS_FF is not set +# CONFIG_HID_MAGICMOUSE is not set +# CONFIG_HID_MALTRON is not set +# CONFIG_HID_MAYFLASH is not set +CONFIG_HID_REDRAGON=y +CONFIG_HID_MICROSOFT=y +CONFIG_HID_MONTEREY=y +# CONFIG_HID_MULTITOUCH is not set +# CONFIG_HID_NTI is not set +# CONFIG_HID_ORTEK is not set +# CONFIG_HID_PANTHERLORD is not set +# CONFIG_HID_PETALYNX is not set +# CONFIG_HID_PICOLCD is not set +CONFIG_HID_PLANTRONICS=y +# CONFIG_HID_PRIMAX is not set +# CONFIG_HID_SAITEK is not set +# CONFIG_HID_SAMSUNG is not set +# CONFIG_HID_SPEEDLINK is not set +# CONFIG_HID_STEAM is not set +# CONFIG_HID_STEELSERIES is not set +# CONFIG_HID_SUNPLUS is not set +# CONFIG_HID_RMI is not set +# CONFIG_HID_GREENASIA is not set +# CONFIG_HID_SMARTJOYPLUS is not set +# CONFIG_HID_TIVO is not set +# CONFIG_HID_TOPSEED is not set +# CONFIG_HID_THRUSTMASTER is not set +# CONFIG_HID_UDRAW_PS3 is not set +# CONFIG_HID_XINMO is not set +# CONFIG_HID_ZEROPLUS is not set +# CONFIG_HID_ZYDACRON is not set +# CONFIG_HID_SENSOR_HUB is not set +# CONFIG_HID_ALPS is not set + +# +# Intel ISH HID support +# +# CONFIG_INTEL_ISH_HID is not set +CONFIG_USB_OHCI_LITTLE_ENDIAN=y +CONFIG_USB_SUPPORT=y +CONFIG_USB_ARCH_HAS_HCD=y +# CONFIG_USB is not set +CONFIG_USB_PCI=y + +# +# USB port drivers +# + +# +# USB Physical Layer drivers +# +# CONFIG_NOP_USB_XCEIV is not set +# CONFIG_USB_GADGET is not set +# CONFIG_TYPEC is not set +# CONFIG_USB_ROLE_SWITCH is not set +# CONFIG_USB_ULPI_BUS is not set +# CONFIG_UWB is not set +# CONFIG_MMC is not set +# CONFIG_MEMSTICK is not set +# CONFIG_NEW_LEDS is not set +# CONFIG_ACCESSIBILITY is not set +# CONFIG_INFINIBAND is not set +CONFIG_EDAC_ATOMIC_SCRUB=y +CONFIG_EDAC_SUPPORT=y +CONFIG_RTC_LIB=y +CONFIG_RTC_MC146818_LIB=y +# CONFIG_RTC_CLASS is not set +# CONFIG_DMADEVICES is not set + +# +# DMABUF options +# +# CONFIG_SYNC_FILE is not set +# CONFIG_AUXDISPLAY is not set +# CONFIG_UIO is not set +# CONFIG_VIRT_DRIVERS is not set +CONFIG_VIRTIO=y +CONFIG_VIRTIO_MENU=y +CONFIG_VIRTIO_PCI=y +CONFIG_VIRTIO_PCI_LEGACY=y +CONFIG_VIRTIO_BALLOON=y +# CONFIG_VIRTIO_INPUT is not set +CONFIG_VIRTIO_MMIO=y +# CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES is not set + +# +# Microsoft Hyper-V guest support +# +# CONFIG_STAGING is not set +CONFIG_X86_PLATFORM_DEVICES=y +# CONFIG_ACER_WIRELESS is not set +# CONFIG_ACERHDF is not set +# CONFIG_DCDBAS is not set +# CONFIG_DELL_SMBIOS is not set +# CONFIG_DELL_SMO8800 is not set +# CONFIG_DELL_RBU is not set +# CONFIG_FUJITSU_TABLET is not set +# CONFIG_GPD_POCKET_FAN is not set +# CONFIG_HP_ACCEL is not set +# CONFIG_HP_WIRELESS is not set +# CONFIG_SENSORS_HDAPS is not set +# CONFIG_INTEL_MENLOW is not set +# CONFIG_ASUS_WIRELESS is not set +# CONFIG_ACPI_WMI is not set +# CONFIG_TOPSTAR_LAPTOP is not set +# CONFIG_TOSHIBA_BT_RFKILL is not set +# CONFIG_TOSHIBA_HAPS is not set +# CONFIG_INTEL_HID_EVENT is not set +# CONFIG_INTEL_VBTN is not set +# CONFIG_INTEL_IPS is not set +# CONFIG_INTEL_PMC_CORE is not set +# CONFIG_IBM_RTL is not set +# CONFIG_INTEL_RST is not set +# CONFIG_INTEL_SMARTCONNECT is not set +# CONFIG_INTEL_PMC_IPC is not set +# CONFIG_SURFACE_PRO3_BUTTON is not set +# CONFIG_INTEL_PUNIT_IPC is not set +# CONFIG_INTEL_ATOMISP2_PM is not set +CONFIG_PMC_ATOM=y +# CONFIG_CHROME_PLATFORMS is not set +# CONFIG_MELLANOX_PLATFORM is not set +CONFIG_CLKDEV_LOOKUP=y +CONFIG_HAVE_CLK_PREPARE=y +CONFIG_COMMON_CLK=y + +# +# Common Clock Framework +# +# CONFIG_HWSPINLOCK is not set + +# +# Clock Source drivers +# +CONFIG_CLKEVT_I8253=y +CONFIG_I8253_LOCK=y +CONFIG_CLKBLD_I8253=y +# CONFIG_MAILBOX is not set +CONFIG_IOMMU_SUPPORT=y + +# +# Generic IOMMU Pagetable Support +# +# CONFIG_AMD_IOMMU is not set +# CONFIG_INTEL_IOMMU is not set +# CONFIG_IRQ_REMAP is not set + +# +# Remoteproc drivers +# +# CONFIG_REMOTEPROC is not set + +# +# Rpmsg drivers +# +# CONFIG_RPMSG_VIRTIO is not set +# CONFIG_SOUNDWIRE is not set + +# +# SOC (System On Chip) specific Drivers +# + +# +# Amlogic SoC drivers +# + +# +# Broadcom SoC drivers +# + +# +# NXP/Freescale QorIQ SoC drivers +# + +# +# i.MX SoC drivers +# + +# +# Qualcomm SoC drivers +# +# CONFIG_SOC_TI is not set + +# +# Xilinx SoC drivers +# +# CONFIG_XILINX_VCU is not set +# CONFIG_PM_DEVFREQ is not set +# CONFIG_EXTCON is not set +# CONFIG_MEMORY is not set +# CONFIG_IIO is not set +# CONFIG_NTB is not set +# CONFIG_VME_BUS is not set +# CONFIG_PWM is not set + +# +# IRQ chip support +# +CONFIG_ARM_GIC_MAX_NR=1 +# CONFIG_IPACK_BUS is not set +# CONFIG_RESET_CONTROLLER is not set +# CONFIG_FMC is not set + +# +# PHY Subsystem +# +# CONFIG_GENERIC_PHY is not set +# CONFIG_BCM_KONA_USB2_PHY is not set +# CONFIG_PHY_PXA_28NM_HSIC is not set +# CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_POWERCAP is not set +# CONFIG_MCB is not set + +# +# Performance monitor support +# +# CONFIG_RAS is not set +# CONFIG_THUNDERBOLT is not set + +# +# Android +# +# CONFIG_ANDROID is not set +# CONFIG_LIBNVDIMM is not set +# CONFIG_DAX is not set +# CONFIG_NVMEM is not set + +# +# HW tracing support +# +# CONFIG_STM is not set +# CONFIG_INTEL_TH is not set +# CONFIG_FPGA is not set +# CONFIG_UNISYS_VISORBUS is not set +# CONFIG_SIOX is not set +# CONFIG_SLIMBUS is not set +# CONFIG_INTERCONNECT is not set + +# +# File systems +# +CONFIG_DCACHE_WORD_ACCESS=y +CONFIG_VALIDATE_FS_PARSER=y +CONFIG_FS_IOMAP=y +CONFIG_EXT2_FS=y +# CONFIG_EXT2_FS_XATTR is not set +CONFIG_EXT3_FS=y +# CONFIG_EXT3_FS_POSIX_ACL is not set +# CONFIG_EXT3_FS_SECURITY is not set +CONFIG_EXT4_FS=y +# CONFIG_EXT4_FS_POSIX_ACL is not set +# CONFIG_EXT4_FS_SECURITY is not set +# CONFIG_EXT4_DEBUG is not set +CONFIG_JBD2=y +# CONFIG_JBD2_DEBUG is not set +CONFIG_FS_MBCACHE=y +CONFIG_REISERFS_FS=y +# CONFIG_REISERFS_CHECK is not set +# CONFIG_REISERFS_PROC_INFO is not set +# CONFIG_REISERFS_FS_XATTR is not set +# CONFIG_JFS_FS is not set +# CONFIG_XFS_FS is not set +# CONFIG_GFS2_FS is not set +# CONFIG_BTRFS_FS is not set +# CONFIG_NILFS2_FS is not set +# CONFIG_F2FS_FS is not set +# CONFIG_FS_DAX is not set +CONFIG_FS_POSIX_ACL=y +CONFIG_EXPORTFS=y +# CONFIG_EXPORTFS_BLOCK_OPS is not set +CONFIG_FILE_LOCKING=y +CONFIG_MANDATORY_FILE_LOCKING=y +# CONFIG_FS_ENCRYPTION is not set +CONFIG_FSNOTIFY=y +CONFIG_DNOTIFY=y +CONFIG_INOTIFY_USER=y +# CONFIG_FANOTIFY is not set +CONFIG_QUOTA=y +# CONFIG_QUOTA_NETLINK_INTERFACE is not set +CONFIG_PRINT_QUOTA_WARNING=y +# CONFIG_QUOTA_DEBUG is not set +# CONFIG_QFMT_V1 is not set +# CONFIG_QFMT_V2 is not set +CONFIG_QUOTACTL=y +CONFIG_AUTOFS4_FS=y +CONFIG_AUTOFS_FS=y +# CONFIG_FUSE_FS is not set +# CONFIG_OVERLAY_FS is not set + +# +# Caches +# +# CONFIG_FSCACHE is not set + +# +# CD-ROM/DVD Filesystems +# +CONFIG_ISO9660_FS=y +CONFIG_JOLIET=y +# CONFIG_ZISOFS is not set +# CONFIG_UDF_FS is not set + +# +# DOS/FAT/NT Filesystems +# +# CONFIG_MSDOS_FS is not set +# CONFIG_VFAT_FS is not set +# CONFIG_NTFS_FS is not set + +# +# Pseudo filesystems +# +CONFIG_PROC_FS=y +CONFIG_PROC_KCORE=y +CONFIG_PROC_SYSCTL=y +CONFIG_PROC_PAGE_MONITOR=y +# CONFIG_PROC_CHILDREN is not set +CONFIG_KERNFS=y +CONFIG_SYSFS=y +CONFIG_TMPFS=y +# CONFIG_TMPFS_POSIX_ACL is not set +# CONFIG_TMPFS_XATTR is not set +# CONFIG_HUGETLBFS is not set +CONFIG_MEMFD_CREATE=y +# CONFIG_CONFIGFS_FS is not set +CONFIG_MISC_FILESYSTEMS=y +# CONFIG_ORANGEFS_FS is not set +# CONFIG_ADFS_FS is not set +# CONFIG_AFFS_FS is not set +# CONFIG_ECRYPT_FS is not set +# CONFIG_HFS_FS is not set +# CONFIG_HFSPLUS_FS is not set +# CONFIG_BEFS_FS is not set +# CONFIG_BFS_FS is not set +# CONFIG_EFS_FS is not set +# CONFIG_CRAMFS is not set +# CONFIG_SQUASHFS is not set +# CONFIG_VXFS_FS is not set +# CONFIG_MINIX_FS is not set +# CONFIG_OMFS_FS is not set +# CONFIG_HPFS_FS is not set +# CONFIG_QNX4FS_FS is not set +# CONFIG_QNX6FS_FS is not set +# CONFIG_ROMFS_FS is not set +# CONFIG_PSTORE is not set +# CONFIG_SYSV_FS is not set +# CONFIG_UFS_FS is not set +CONFIG_NETWORK_FILESYSTEMS=y +# CONFIG_NFS_FS is not set +# CONFIG_NFSD is not set +# CONFIG_CEPH_FS is not set +# CONFIG_CIFS is not set +# CONFIG_CODA_FS is not set +# CONFIG_AFS_FS is not set +CONFIG_9P_FS=y +CONFIG_9P_FS_POSIX_ACL=y +# CONFIG_9P_FS_SECURITY is not set +CONFIG_NLS=y +CONFIG_NLS_DEFAULT="iso8859-1" +# CONFIG_NLS_CODEPAGE_437 is not set +# CONFIG_NLS_CODEPAGE_737 is not set +# CONFIG_NLS_CODEPAGE_775 is not set +# CONFIG_NLS_CODEPAGE_850 is not set +# CONFIG_NLS_CODEPAGE_852 is not set +# CONFIG_NLS_CODEPAGE_855 is not set +# CONFIG_NLS_CODEPAGE_857 is not set +# CONFIG_NLS_CODEPAGE_860 is not set +# CONFIG_NLS_CODEPAGE_861 is not set +# CONFIG_NLS_CODEPAGE_862 is not set +# CONFIG_NLS_CODEPAGE_863 is not set +# CONFIG_NLS_CODEPAGE_864 is not set +# CONFIG_NLS_CODEPAGE_865 is not set +# CONFIG_NLS_CODEPAGE_866 is not set +# CONFIG_NLS_CODEPAGE_869 is not set +# CONFIG_NLS_CODEPAGE_936 is not set +# CONFIG_NLS_CODEPAGE_950 is not set +# CONFIG_NLS_CODEPAGE_932 is not set +# CONFIG_NLS_CODEPAGE_949 is not set +# CONFIG_NLS_CODEPAGE_874 is not set +# CONFIG_NLS_ISO8859_8 is not set +# CONFIG_NLS_CODEPAGE_1250 is not set +# CONFIG_NLS_CODEPAGE_1251 is not set +# CONFIG_NLS_ASCII is not set +# CONFIG_NLS_ISO8859_1 is not set +# CONFIG_NLS_ISO8859_2 is not set +# CONFIG_NLS_ISO8859_3 is not set +# CONFIG_NLS_ISO8859_4 is not set +# CONFIG_NLS_ISO8859_5 is not set +# CONFIG_NLS_ISO8859_6 is not set +# CONFIG_NLS_ISO8859_7 is not set +# CONFIG_NLS_ISO8859_9 is not set +# CONFIG_NLS_ISO8859_13 is not set +# CONFIG_NLS_ISO8859_14 is not set +# CONFIG_NLS_ISO8859_15 is not set +# CONFIG_NLS_KOI8_R is not set +# CONFIG_NLS_KOI8_U is not set +# CONFIG_NLS_MAC_ROMAN is not set +# CONFIG_NLS_MAC_CELTIC is not set +# CONFIG_NLS_MAC_CENTEURO is not set +# CONFIG_NLS_MAC_CROATIAN is not set +# CONFIG_NLS_MAC_CYRILLIC is not set +# CONFIG_NLS_MAC_GAELIC is not set +# CONFIG_NLS_MAC_GREEK is not set +# CONFIG_NLS_MAC_ICELAND is not set +# CONFIG_NLS_MAC_INUIT is not set +# CONFIG_NLS_MAC_ROMANIAN is not set +# CONFIG_NLS_MAC_TURKISH is not set +# CONFIG_NLS_UTF8 is not set + +# +# Security options +# +CONFIG_KEYS=y +# CONFIG_PERSISTENT_KEYRINGS is not set +# CONFIG_BIG_KEYS is not set +# CONFIG_ENCRYPTED_KEYS is not set +# CONFIG_KEY_DH_OPERATIONS is not set +# CONFIG_SECURITY_DMESG_RESTRICT is not set +# CONFIG_SECURITY is not set +# CONFIG_SECURITYFS is not set +CONFIG_PAGE_TABLE_ISOLATION=y +CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y +# CONFIG_HARDENED_USERCOPY is not set +# CONFIG_FORTIFY_SOURCE is not set +# CONFIG_STATIC_USERMODEHELPER is not set +CONFIG_DEFAULT_SECURITY_DAC=y +CONFIG_LSM="yama,loadpin,safesetid,integrity" +CONFIG_CRYPTO=y + +# +# Crypto core or helper +# +CONFIG_CRYPTO_ALGAPI=y +CONFIG_CRYPTO_ALGAPI2=y +CONFIG_CRYPTO_AEAD=y +CONFIG_CRYPTO_AEAD2=y +CONFIG_CRYPTO_BLKCIPHER=y +CONFIG_CRYPTO_BLKCIPHER2=y +CONFIG_CRYPTO_HASH=y +CONFIG_CRYPTO_HASH2=y +CONFIG_CRYPTO_RNG=y +CONFIG_CRYPTO_RNG2=y +CONFIG_CRYPTO_RNG_DEFAULT=y +CONFIG_CRYPTO_AKCIPHER2=y +CONFIG_CRYPTO_AKCIPHER=y +CONFIG_CRYPTO_KPP2=y +CONFIG_CRYPTO_KPP=y +CONFIG_CRYPTO_ACOMP2=y +CONFIG_CRYPTO_RSA=y +CONFIG_CRYPTO_DH=y +CONFIG_CRYPTO_ECDH=y +CONFIG_CRYPTO_MANAGER=y +CONFIG_CRYPTO_MANAGER2=y +CONFIG_CRYPTO_USER=y +CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y +CONFIG_CRYPTO_GF128MUL=y +CONFIG_CRYPTO_NULL=y +CONFIG_CRYPTO_NULL2=y +CONFIG_CRYPTO_WORKQUEUE=y +CONFIG_CRYPTO_CRYPTD=y +CONFIG_CRYPTO_AUTHENC=y +CONFIG_CRYPTO_SIMD=y +CONFIG_CRYPTO_GLUE_HELPER_X86=y + +# +# Authenticated Encryption with Associated Data +# +CONFIG_CRYPTO_CCM=y +CONFIG_CRYPTO_GCM=y +CONFIG_CRYPTO_CHACHA20POLY1305=y +# CONFIG_CRYPTO_AEGIS128 is not set +# CONFIG_CRYPTO_AEGIS128L is not set +# CONFIG_CRYPTO_AEGIS256 is not set +# CONFIG_CRYPTO_AEGIS128_AESNI_SSE2 is not set +# CONFIG_CRYPTO_AEGIS128L_AESNI_SSE2 is not set +# CONFIG_CRYPTO_AEGIS256_AESNI_SSE2 is not set +# CONFIG_CRYPTO_MORUS640 is not set +# CONFIG_CRYPTO_MORUS640_SSE2 is not set +# CONFIG_CRYPTO_MORUS1280 is not set +# CONFIG_CRYPTO_MORUS1280_SSE2 is not set +# CONFIG_CRYPTO_MORUS1280_AVX2 is not set +CONFIG_CRYPTO_SEQIV=y +CONFIG_CRYPTO_ECHAINIV=y + +# +# Block modes +# +CONFIG_CRYPTO_CBC=y +# CONFIG_CRYPTO_CFB is not set +CONFIG_CRYPTO_CTR=y +# CONFIG_CRYPTO_CTS is not set +CONFIG_CRYPTO_ECB=y +CONFIG_CRYPTO_LRW=y +CONFIG_CRYPTO_OFB=y +CONFIG_CRYPTO_PCBC=y +CONFIG_CRYPTO_XTS=y +# CONFIG_CRYPTO_KEYWRAP is not set +CONFIG_CRYPTO_NHPOLY1305=y +CONFIG_CRYPTO_NHPOLY1305_SSE2=y +CONFIG_CRYPTO_NHPOLY1305_AVX2=y +CONFIG_CRYPTO_ADIANTUM=y + +# +# Hash modes +# +CONFIG_CRYPTO_CMAC=y +CONFIG_CRYPTO_HMAC=y +CONFIG_CRYPTO_XCBC=y +# CONFIG_CRYPTO_VMAC is not set + +# +# Digest +# +CONFIG_CRYPTO_CRC32C=y +# CONFIG_CRYPTO_CRC32C_INTEL is not set +# CONFIG_CRYPTO_CRC32 is not set +# CONFIG_CRYPTO_CRC32_PCLMUL is not set +# CONFIG_CRYPTO_CRCT10DIF is not set +CONFIG_CRYPTO_GHASH=y +CONFIG_CRYPTO_POLY1305=y +CONFIG_CRYPTO_POLY1305_X86_64=y +CONFIG_CRYPTO_MD4=y +CONFIG_CRYPTO_MD5=y +CONFIG_CRYPTO_MICHAEL_MIC=y +CONFIG_CRYPTO_RMD128=y +CONFIG_CRYPTO_RMD160=y +CONFIG_CRYPTO_RMD256=y +CONFIG_CRYPTO_RMD320=y +CONFIG_CRYPTO_SHA1=y +# CONFIG_CRYPTO_SHA1_SSSE3 is not set +CONFIG_CRYPTO_SHA256_SSSE3=y +CONFIG_CRYPTO_SHA512_SSSE3=y +CONFIG_CRYPTO_SHA256=y +CONFIG_CRYPTO_SHA512=y +CONFIG_CRYPTO_SHA3=y +CONFIG_CRYPTO_SM3=y +# CONFIG_CRYPTO_STREEBOG is not set +CONFIG_CRYPTO_TGR192=y +CONFIG_CRYPTO_WP512=y +# CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL is not set + +# +# Ciphers +# +CONFIG_CRYPTO_AES=y +# CONFIG_CRYPTO_AES_TI is not set +CONFIG_CRYPTO_AES_X86_64=y +CONFIG_CRYPTO_AES_NI_INTEL=y +CONFIG_CRYPTO_ANUBIS=y +CONFIG_CRYPTO_ARC4=y +CONFIG_CRYPTO_BLOWFISH=y +CONFIG_CRYPTO_BLOWFISH_COMMON=y +CONFIG_CRYPTO_BLOWFISH_X86_64=y +CONFIG_CRYPTO_CAMELLIA=y +CONFIG_CRYPTO_CAMELLIA_X86_64=y +CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64=y +CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64=y +CONFIG_CRYPTO_CAST_COMMON=y +CONFIG_CRYPTO_CAST5=y +CONFIG_CRYPTO_CAST5_AVX_X86_64=y +CONFIG_CRYPTO_CAST6=y +CONFIG_CRYPTO_CAST6_AVX_X86_64=y +CONFIG_CRYPTO_DES=y +# CONFIG_CRYPTO_DES3_EDE_X86_64 is not set +CONFIG_CRYPTO_FCRYPT=y +CONFIG_CRYPTO_KHAZAD=y +CONFIG_CRYPTO_SALSA20=y +CONFIG_CRYPTO_CHACHA20=y +CONFIG_CRYPTO_CHACHA20_X86_64=y +CONFIG_CRYPTO_SEED=y +CONFIG_CRYPTO_SERPENT=y +CONFIG_CRYPTO_SERPENT_SSE2_X86_64=y +CONFIG_CRYPTO_SERPENT_AVX_X86_64=y +CONFIG_CRYPTO_SERPENT_AVX2_X86_64=y +CONFIG_CRYPTO_SM4=y +CONFIG_CRYPTO_TEA=y +CONFIG_CRYPTO_TWOFISH=y +CONFIG_CRYPTO_TWOFISH_COMMON=y +CONFIG_CRYPTO_TWOFISH_X86_64=y +CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=y +CONFIG_CRYPTO_TWOFISH_AVX_X86_64=y + +# +# Compression +# +CONFIG_CRYPTO_DEFLATE=y +CONFIG_CRYPTO_LZO=y +CONFIG_CRYPTO_842=y +CONFIG_CRYPTO_LZ4=y +CONFIG_CRYPTO_LZ4HC=y +# CONFIG_CRYPTO_ZSTD is not set + +# +# Random Number Generation +# +# CONFIG_CRYPTO_ANSI_CPRNG is not set +CONFIG_CRYPTO_DRBG_MENU=y +CONFIG_CRYPTO_DRBG_HMAC=y +CONFIG_CRYPTO_DRBG_HASH=y +CONFIG_CRYPTO_DRBG_CTR=y +CONFIG_CRYPTO_DRBG=y +CONFIG_CRYPTO_JITTERENTROPY=y +CONFIG_CRYPTO_USER_API=y +CONFIG_CRYPTO_USER_API_HASH=y +CONFIG_CRYPTO_USER_API_SKCIPHER=y +# CONFIG_CRYPTO_USER_API_RNG is not set +CONFIG_CRYPTO_USER_API_AEAD=y +CONFIG_CRYPTO_STATS=y +CONFIG_CRYPTO_HASH_INFO=y +# CONFIG_CRYPTO_HW is not set +CONFIG_ASYMMETRIC_KEY_TYPE=y +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y +CONFIG_X509_CERTIFICATE_PARSER=y +# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS7_MESSAGE_PARSER=y + +# +# Certificates for signature checking +# +CONFIG_SYSTEM_TRUSTED_KEYRING=y +CONFIG_SYSTEM_TRUSTED_KEYS="" +# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +# CONFIG_SECONDARY_TRUSTED_KEYRING is not set +# CONFIG_SYSTEM_BLACKLIST_KEYRING is not set + +# +# Library routines +# +CONFIG_BITREVERSE=y +CONFIG_RATIONAL=y +CONFIG_GENERIC_STRNCPY_FROM_USER=y +CONFIG_GENERIC_STRNLEN_USER=y +CONFIG_GENERIC_NET_UTILS=y +CONFIG_GENERIC_FIND_FIRST_BIT=y +CONFIG_GENERIC_PCI_IOMAP=y +CONFIG_GENERIC_IOMAP=y +CONFIG_ARCH_USE_CMPXCHG_LOCKREF=y +CONFIG_ARCH_HAS_FAST_MULTIPLIER=y +CONFIG_CRC_CCITT=y +CONFIG_CRC16=y +# CONFIG_CRC_T10DIF is not set +CONFIG_CRC_ITU_T=y +CONFIG_CRC32=y +# CONFIG_CRC32_SELFTEST is not set +CONFIG_CRC32_SLICEBY8=y +# CONFIG_CRC32_SLICEBY4 is not set +# CONFIG_CRC32_SARWATE is not set +# CONFIG_CRC32_BIT is not set +# CONFIG_CRC64 is not set +# CONFIG_CRC4 is not set +CONFIG_CRC7=y +CONFIG_LIBCRC32C=y +# CONFIG_CRC8 is not set +# CONFIG_RANDOM32_SELFTEST is not set +CONFIG_842_COMPRESS=y +CONFIG_842_DECOMPRESS=y +CONFIG_ZLIB_INFLATE=y +CONFIG_ZLIB_DEFLATE=y +CONFIG_LZO_COMPRESS=y +CONFIG_LZO_DECOMPRESS=y +CONFIG_LZ4_COMPRESS=y +CONFIG_LZ4HC_COMPRESS=y +CONFIG_LZ4_DECOMPRESS=y +# CONFIG_XZ_DEC is not set +CONFIG_TEXTSEARCH=y +CONFIG_TEXTSEARCH_KMP=y +CONFIG_TEXTSEARCH_BM=y +CONFIG_TEXTSEARCH_FSM=y +CONFIG_ASSOCIATIVE_ARRAY=y +CONFIG_HAS_IOMEM=y +CONFIG_HAS_IOPORT_MAP=y +CONFIG_HAS_DMA=y +CONFIG_NEED_SG_DMA_LENGTH=y +CONFIG_NEED_DMA_MAP_STATE=y +CONFIG_ARCH_DMA_ADDR_T_64BIT=y +CONFIG_SWIOTLB=y +# CONFIG_DMA_API_DEBUG is not set +CONFIG_SGL_ALLOC=y +CONFIG_IOMMU_HELPER=y +CONFIG_DQL=y +CONFIG_NLATTR=y +CONFIG_CLZ_TAB=y +# CONFIG_CORDIC is not set +# CONFIG_DDR is not set +# CONFIG_IRQ_POLL is not set +CONFIG_MPILIB=y +CONFIG_OID_REGISTRY=y +CONFIG_ARCH_HAS_PMEM_API=y +CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y +CONFIG_SBITMAP=y +# CONFIG_STRING_SELFTEST is not set + +# +# Kernel hacking +# + +# +# printk and dmesg options +# +# CONFIG_PRINTK_TIME is not set +# CONFIG_PRINTK_CALLER is not set +CONFIG_CONSOLE_LOGLEVEL_DEFAULT=7 +CONFIG_CONSOLE_LOGLEVEL_QUIET=4 +CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4 +# CONFIG_BOOT_PRINTK_DELAY is not set + +# +# Compile-time checks and compiler options +# +CONFIG_DEBUG_INFO=y +# CONFIG_DEBUG_INFO_REDUCED is not set +# CONFIG_DEBUG_INFO_SPLIT is not set +# CONFIG_DEBUG_INFO_DWARF4 is not set +# CONFIG_GDB_SCRIPTS is not set +CONFIG_ENABLE_MUST_CHECK=y +CONFIG_FRAME_WARN=1024 +# CONFIG_STRIP_ASM_SYMS is not set +# CONFIG_READABLE_ASM is not set +# CONFIG_UNUSED_SYMBOLS is not set +# CONFIG_DEBUG_FS is not set +# CONFIG_HEADERS_CHECK is not set +# CONFIG_DEBUG_SECTION_MISMATCH is not set +CONFIG_SECTION_MISMATCH_WARN_ONLY=y +CONFIG_STACK_VALIDATION=y +# CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set +# CONFIG_MAGIC_SYSRQ is not set +CONFIG_DEBUG_KERNEL=y + +# +# Memory Debugging +# +# CONFIG_PAGE_EXTENSION is not set +# CONFIG_DEBUG_PAGEALLOC is not set +# CONFIG_PAGE_OWNER is not set +# CONFIG_PAGE_POISONING is not set +CONFIG_DEBUG_RODATA_TEST=y +# CONFIG_DEBUG_OBJECTS is not set +# CONFIG_DEBUG_SLAB is not set +CONFIG_HAVE_DEBUG_KMEMLEAK=y +# CONFIG_DEBUG_KMEMLEAK is not set +# CONFIG_DEBUG_STACK_USAGE is not set +# CONFIG_DEBUG_VM is not set +CONFIG_ARCH_HAS_DEBUG_VIRTUAL=y +# CONFIG_DEBUG_VIRTUAL is not set +CONFIG_DEBUG_MEMORY_INIT=y +CONFIG_HAVE_DEBUG_STACKOVERFLOW=y +# CONFIG_DEBUG_STACKOVERFLOW is not set +CONFIG_HAVE_ARCH_KASAN=y +CONFIG_CC_HAS_KASAN_GENERIC=y +# CONFIG_KASAN is not set +CONFIG_KASAN_STACK=1 +CONFIG_ARCH_HAS_KCOV=y +CONFIG_CC_HAS_SANCOV_TRACE_PC=y +# CONFIG_KCOV is not set +# CONFIG_DEBUG_SHIRQ is not set + +# +# Debug Lockups and Hangs +# +# CONFIG_SOFTLOCKUP_DETECTOR is not set +CONFIG_HARDLOCKUP_CHECK_TIMESTAMP=y +# CONFIG_HARDLOCKUP_DETECTOR is not set +CONFIG_DETECT_HUNG_TASK=y +CONFIG_DEFAULT_HUNG_TASK_TIMEOUT=120 +# CONFIG_BOOTPARAM_HUNG_TASK_PANIC is not set +CONFIG_BOOTPARAM_HUNG_TASK_PANIC_VALUE=0 +# CONFIG_WQ_WATCHDOG is not set +# CONFIG_PANIC_ON_OOPS is not set +CONFIG_PANIC_ON_OOPS_VALUE=0 +CONFIG_PANIC_TIMEOUT=0 +# CONFIG_SCHED_DEBUG is not set +# CONFIG_SCHEDSTATS is not set +# CONFIG_SCHED_STACK_END_CHECK is not set +# CONFIG_DEBUG_TIMEKEEPING is not set + +# +# Lock Debugging (spinlocks, mutexes, etc...) +# +CONFIG_LOCK_DEBUGGING_SUPPORT=y +# CONFIG_PROVE_LOCKING is not set +# CONFIG_LOCK_STAT is not set +# CONFIG_DEBUG_RT_MUTEXES is not set +# CONFIG_DEBUG_SPINLOCK is not set +# CONFIG_DEBUG_MUTEXES is not set +# CONFIG_DEBUG_WW_MUTEX_SLOWPATH is not set +# CONFIG_DEBUG_LOCK_ALLOC is not set +# CONFIG_DEBUG_ATOMIC_SLEEP is not set +# CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set +# CONFIG_LOCK_TORTURE_TEST is not set +# CONFIG_WW_MUTEX_SELFTEST is not set +# CONFIG_STACKTRACE is not set +# CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set +# CONFIG_DEBUG_KOBJECT is not set +CONFIG_DEBUG_BUGVERBOSE=y +# CONFIG_DEBUG_LIST is not set +# CONFIG_DEBUG_PI_LIST is not set +# CONFIG_DEBUG_SG is not set +# CONFIG_DEBUG_NOTIFIERS is not set +# CONFIG_DEBUG_CREDENTIALS is not set + +# +# RCU Debugging +# +# CONFIG_RCU_PERF_TEST is not set +# CONFIG_RCU_TORTURE_TEST is not set +# CONFIG_RCU_TRACE is not set +# CONFIG_RCU_EQS_DEBUG is not set +# CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set +# CONFIG_DEBUG_BLOCK_EXT_DEVT is not set +# CONFIG_NOTIFIER_ERROR_INJECTION is not set +# CONFIG_FAULT_INJECTION is not set +# CONFIG_LATENCYTOP is not set +CONFIG_USER_STACKTRACE_SUPPORT=y +CONFIG_HAVE_FUNCTION_TRACER=y +CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y +CONFIG_HAVE_DYNAMIC_FTRACE=y +CONFIG_HAVE_DYNAMIC_FTRACE_WITH_REGS=y +CONFIG_HAVE_FTRACE_MCOUNT_RECORD=y +CONFIG_HAVE_SYSCALL_TRACEPOINTS=y +CONFIG_HAVE_FENTRY=y +CONFIG_HAVE_C_RECORDMCOUNT=y +CONFIG_TRACING_SUPPORT=y +CONFIG_FTRACE=y +# CONFIG_FUNCTION_TRACER is not set +# CONFIG_PREEMPTIRQ_EVENTS is not set +# CONFIG_IRQSOFF_TRACER is not set +# CONFIG_SCHED_TRACER is not set +# CONFIG_HWLAT_TRACER is not set +# CONFIG_ENABLE_DEFAULT_TRACERS is not set +# CONFIG_FTRACE_SYSCALLS is not set +# CONFIG_TRACER_SNAPSHOT is not set +CONFIG_BRANCH_PROFILE_NONE=y +# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set +# CONFIG_PROFILE_ALL_BRANCHES is not set +# CONFIG_STACK_TRACER is not set +# CONFIG_BLK_DEV_IO_TRACE is not set +# CONFIG_UPROBE_EVENTS is not set +# CONFIG_MMIOTRACE is not set +# CONFIG_HIST_TRIGGERS is not set +# CONFIG_TRACEPOINT_BENCHMARK is not set +# CONFIG_PROVIDE_OHCI1394_DMA_INIT is not set +CONFIG_RUNTIME_TESTING_MENU=y +# CONFIG_TEST_LIST_SORT is not set +# CONFIG_TEST_SORT is not set +# CONFIG_BACKTRACE_SELF_TEST is not set +# CONFIG_RBTREE_TEST is not set +# CONFIG_INTERVAL_TREE_TEST is not set +# CONFIG_ATOMIC64_SELFTEST is not set +# CONFIG_TEST_HEXDUMP is not set +# CONFIG_TEST_STRING_HELPERS is not set +# CONFIG_TEST_KSTRTOX is not set +# CONFIG_TEST_PRINTF is not set +# CONFIG_TEST_BITMAP is not set +# CONFIG_TEST_BITFIELD is not set +# CONFIG_TEST_UUID is not set +# CONFIG_TEST_XARRAY is not set +# CONFIG_TEST_OVERFLOW is not set +# CONFIG_TEST_RHASHTABLE is not set +# CONFIG_TEST_HASH is not set +# CONFIG_TEST_IDA is not set +# CONFIG_FIND_BIT_BENCHMARK is not set +# CONFIG_TEST_FIRMWARE is not set +# CONFIG_TEST_SYSCTL is not set +# CONFIG_TEST_UDELAY is not set +# CONFIG_TEST_MEMCAT_P is not set +# CONFIG_TEST_STACKINIT is not set +# CONFIG_MEMTEST is not set +# CONFIG_BUG_ON_DATA_CORRUPTION is not set +# CONFIG_SAMPLES is not set +CONFIG_HAVE_ARCH_KGDB=y +# CONFIG_KGDB is not set +CONFIG_ARCH_HAS_UBSAN_SANITIZE_ALL=y +# CONFIG_UBSAN is not set +CONFIG_UBSAN_ALIGNMENT=y +CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=y +# CONFIG_STRICT_DEVMEM is not set +CONFIG_TRACE_IRQFLAGS_SUPPORT=y +CONFIG_X86_VERBOSE_BOOTUP=y +CONFIG_EARLY_PRINTK=y +# CONFIG_EARLY_PRINTK_DBGP is not set +# CONFIG_EARLY_PRINTK_USB_XDBC is not set +# CONFIG_X86_PTDUMP is not set +# CONFIG_DEBUG_WX is not set +CONFIG_DOUBLEFAULT=y +# CONFIG_DEBUG_TLBFLUSH is not set +# CONFIG_IOMMU_DEBUG is not set +CONFIG_HAVE_MMIOTRACE_SUPPORT=y +CONFIG_IO_DELAY_TYPE_0X80=0 +CONFIG_IO_DELAY_TYPE_0XED=1 +CONFIG_IO_DELAY_TYPE_UDELAY=2 +CONFIG_IO_DELAY_TYPE_NONE=3 +CONFIG_IO_DELAY_0X80=y +# CONFIG_IO_DELAY_0XED is not set +# CONFIG_IO_DELAY_UDELAY is not set +# CONFIG_IO_DELAY_NONE is not set +CONFIG_DEFAULT_IO_DELAY_TYPE=0 +# CONFIG_CPA_DEBUG is not set +# CONFIG_OPTIMIZE_INLINING is not set +# CONFIG_DEBUG_ENTRY is not set +# CONFIG_DEBUG_NMI_SELFTEST is not set +CONFIG_X86_DEBUG_FPU=y +# CONFIG_PUNIT_ATOM_DEBUG is not set +CONFIG_UNWINDER_ORC=y +# CONFIG_UNWINDER_FRAME_POINTER is not set diff --git a/testing/testing.conf b/testing/testing.conf index fea909fe6..6c9f1b4f0 100644 --- a/testing/testing.conf +++ b/testing/testing.conf @@ -24,10 +24,10 @@ fi : ${TESTDIR=/srv/strongswan-testing} # Kernel configuration -: ${KERNELVERSION=5.0.5} +: ${KERNELVERSION=5.1} : ${KERNEL=linux-$KERNELVERSION} : ${KERNELTARBALL=$KERNEL.tar.xz} -: ${KERNELCONFIG=$DIR/../config/kernel/config-5.0} +: ${KERNELCONFIG=$DIR/../config/kernel/config-5.1} : ${KERNELPATCH=ha-5.0-abicompat.patch.bz2} # strongSwan version used in tests From da8e33f3ca26a8252c3e32879a45eb9e4e503097 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 18 Apr 2019 15:10:10 +0200 Subject: [PATCH 14/20] testing: Add wrapper script to build certificates in root image This does not modify the root image but uses the strongSwan version installed there (avoids build dependencies on version installed on the host to use pki to generate all the keys and certificates). --- testing/scripts/build-certs | 1891 +--------------------------- testing/scripts/build-certs-chroot | 1876 +++++++++++++++++++++++++++ 2 files changed, 1904 insertions(+), 1863 deletions(-) create mode 100755 testing/scripts/build-certs-chroot diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index 2bf717df5..d473cdcec 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -1,1876 +1,41 @@ #!/bin/bash -echo "Building certificates" - -# Disable leak detective when using pki as it produces warnings in tzset -export LEAK_DETECTIVE_DISABLE=1 - -# Determine testing directory DIR="$(dirname `readlink -f $0`)/.." +. $DIR/testing.conf +. $DIR/scripts/function.sh -# Define some global variables -PROJECT="strongSwan Project" -CA_DIR="${DIR}/hosts/winnetou/etc/ca" -CA_KEY="${CA_DIR}/strongswanKey.pem" -CA_CERT="${CA_DIR}/strongswanCert.pem" -CA_CERT_DER="${CA_DIR}/strongswanCert.der" -CA_CRL="${CA_DIR}/strongswan.crl" -CA_LAST_CRL="${CA_DIR}/strongswan_last.crl" -CA_CDP="http://crl.strongswan.org/strongswan.crl" -CA_BASE_CDP="http://crl.strongswan.org/strongswan_base.crl" -CA_OCSP="http://ocsp.strongswan.org:8880" -# -START=`date -d "-2 day" "+%d.%m.%y %T"` -SH_END=`date -d "-1 day" "+%d.%m.%y %T"` # 1 day -CA_END=`date -d "+3651 day" "+%d.%m.%y %T"` # 10 years -IM_END=`date -d "+3286 day" "+%d.%m.%y %T"` # 9 years -EE_END=`date -d "+2920 day" "+%d.%m.%y %T"` # 8 years -SH_EXP=`date -d "-1 day" "+%y%m%d%H%M%SZ"` # 1 day -IM_EXP=`date -d "+3286 day" "+%y%m%d%H%M%SZ"` # 9 years -EE_EXP=`date -d "+2920 day" "+%y%m%d%H%M%SZ"` # 8 years -NOW=`date "+%y%m%d%H%M%SZ"` -# -RESEARCH_DIR="${CA_DIR}/research" -RESEARCH_KEY="${RESEARCH_DIR}/researchKey.pem" -RESEARCH_CERT="${RESEARCH_DIR}/researchCert.pem" -RESEARCH_CERT_DER="${RESEARCH_DIR}/researchCert.der" -RESEARCH_CDP="http://crl.strongswan.org/research.crl" -# -SALES_DIR="${CA_DIR}/sales" -SALES_KEY="${SALES_DIR}/salesKey.pem" -SALES_CERT="${SALES_DIR}/salesCert.pem" -SALES_CERT_DER="${SALES_DIR}/salesCert.der" -SALES_CDP="http://crl.strongswan.org/sales.crl" -# -DUCK_DIR="${CA_DIR}/duck" -DUCK_KEY="${DUCK_DIR}/duckKey.pem" -DUCK_CERT="${DUCK_DIR}/duckCert.pem" -# -ECDSA_DIR="${CA_DIR}/ecdsa" -ECDSA_KEY="${ECDSA_DIR}/strongswanKey.pem" -ECDSA_CERT="${ECDSA_DIR}/strongswanCert.pem" -ECDSA_CDP="http://crl.strongswan.org/strongswan_ecdsa.crl" -# -RFC3779_DIR="${CA_DIR}/rfc3779" -RFC3779_KEY="${RFC3779_DIR}/strongswanKey.pem" -RFC3779_CERT="${RFC3779_DIR}/strongswanCert.pem" -RFC3779_CDP="http://crl.strongswan.org/strongswan_rfc3779.crl" -# -SHA3_RSA_DIR="${CA_DIR}/sha3-rsa" -SHA3_RSA_KEY="${SHA3_RSA_DIR}/strongswanKey.pem" -SHA3_RSA_CERT="${SHA3_RSA_DIR}/strongswanCert.pem" -SHA3_RSA_CDP="http://crl.strongswan.org/strongswan_sha3_rsa.crl" -# -ED25519_DIR="${CA_DIR}/ed25519" -ED25519_KEY="${ED25519_DIR}/strongswanKey.pem" -ED25519_CERT="${ED25519_DIR}/strongswanCert.pem" -ED25519_CDP="http://crl.strongswan.org/strongswan_ed25519.crl" -# -MONSTER_DIR="${CA_DIR}/monster" -MONSTER_KEY="${MONSTER_DIR}/strongswanKey.pem" -MONSTER_CERT="${MONSTER_DIR}/strongswanCert.pem" -MONSTER_CDP="http://crl.strongswan.org/strongswan_monster.crl" -MONSTER_CA_RSA_SIZE="8192" -MONSTER_EE_RSA_SIZE="4096" -# -BLISS_DIR="${CA_DIR}/bliss" -BLISS_KEY="${BLISS_DIR}/strongswan_blissKey.der" -BLISS_CERT="${BLISS_DIR}/strongswan_blissCert.der" -BLISS_CDP="http://crl.strongswan.org/strongswan_bliss.crl" -# -RSA_SIZE="3072" -IPSEC_DIR="etc/ipsec.d" -SWANCTL_DIR="etc/swanctl" -TKM_DIR="etc/tkm" -HOSTS="carol dave moon sun alice venus bob" -TEST_DIR="${DIR}/tests" +[ `id -u` -eq 0 ] || die "You must be root to run $0" +[ -f "$BASEIMG" ] || die "Base image $BASEIMG not found" +[ -f "$ROOTIMG" ] || die "Root image $ROOTIMG not found" +running_any $STRONGSWANHOSTS && die "Please stop test environment before running $0" -# Create directories -mkdir -p ${CA_DIR}/certs -mkdir -p ${CA_DIR}/keys -mkdir -p ${RESEARCH_DIR}/certs -mkdir -p ${RESEARCH_DIR}/keys -mkdir -p ${SALES_DIR}/certs -mkdir -p ${SALES_DIR}/keys -mkdir -p ${DUCK_DIR}/certs -mkdir -p ${ECDSA_DIR}/certs -mkdir -p ${RFC3779_DIR}/certs -mkdir -p ${SHA3_RSA_DIR}/certs -mkdir -p ${ED25519_DIR}/certs -mkdir -p ${MONSTER_DIR}/certs -mkdir -p ${BLISS_DIR}/certs +SRCUID=${SUDO_UID:-$(id -u)} +SRCGID=${SUDO_GID:-$(id -g)} -################################################################################ -# strongSwan Root CA # -################################################################################ +check_commands partprobe qemu-img qemu-nbd bindfs -# Generate strongSwan Root CA -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${CA_KEY} -pki --self --type rsa --in ${CA_KEY} --not-before "${START}" --not-after "${CA_END}" \ - --ca --pathlen 1 --dn "C=CH, O=${PROJECT}, CN=strongSwan Root CA" \ - --outform pem > ${CA_CERT} +load_qemu_nbd -# Distribute strongSwan Root CA certificate -for h in ${HOSTS} -do - HOST_DIR="${DIR}/hosts/${h}" - mkdir -p ${HOST_DIR}/${IPSEC_DIR}/cacerts - mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/x509ca - cp ${CA_CERT} ${HOST_DIR}/${IPSEC_DIR}/cacerts - cp ${CA_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509ca -done +mkdir -p $LOOPDIR +mkdir -p $IMGDIR -# Put a copy onto the alice FreeRADIUS server -mkdir -p ${DIR}/hosts/alice/etc/raddb/certs -cp ${CA_CERT} ${DIR}/hosts/alice/etc/raddb/certs +log_action "Connecting root image to NBD device $NBDEV" +execute "qemu-nbd -c $NBDEV $ROOTIMG" +do_on_exit qemu-nbd -d $NBDEV +partprobe $NBDEV -# Convert strongSwan Root CA certificate into DER format -openssl x509 -in ${CA_CERT} -outform der -out ${CA_CERT_DER} +log_action "Mounting $NBDPARTITION to $LOOPDIR" +execute "mount $NBDPARTITION $LOOPDIR" +do_on_exit umount $LOOPDIR -# Gernerate a stale CRL -pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} \ - --this-update "${START}" --lifetime 1 > ${CA_LAST_CRL} +log_action "Mounting proc filesystem to $LOOPDIR/proc" +execute "mount -t proc none $LOOPDIR/proc" +do_on_exit umount $LOOPDIR/proc -# Put a CRL copy into the ikev2/crl-ldap scenario to be used as a stale crl -TEST="${TEST_DIR}/ikev2/crl-ldap" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/crls -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/crls -cp ${CA_LAST_CRL} ${TEST}/hosts/carol/${IPSEC_DIR}/crls/stale.crl -cp ${CA_LAST_CRL} ${TEST}/hosts/moon/${IPSEC_DIR}/crls/stale.crl +mkdir -p $LOOPDIR/root/testing +log_action "Mounting ${DIR} as /root/testing" +execute "bindfs -u $SRCUID -g $SRCGID --create-for-user=$SRCUID --create-for-group=$SRCGID ${DIR} $LOOPDIR/root/testing" +do_on_exit umount $LOOPDIR/root/testing -# Generate host keys -for h in ${HOSTS} -do - HOST_DIR="${DIR}/hosts/${h}" - HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${h}Key.pem" - mkdir -p ${HOST_DIR}/${IPSEC_DIR}/private - pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} - - # Put a copy into swanctl directory tree - mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/rsa - cp ${HOST_KEY} ${HOST_DIR}/${SWANCTL_DIR}/rsa - - # Convert host key into DER format - openssl rsa -in ${HOST_KEY} -outform der -out ${CA_DIR}/keys/${h}Key.der \ - 2> /dev/null -done - -# Put DER-encoded moon private key and Root CA certificate into tkm scenarios -for t in host2host-initiator host2host-responder host2host-xfrmproxy \ - net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey -do - TEST="${TEST_DIR}/tkm/${t}" - mkdir -p ${TEST}/hosts/moon/${TKM_DIR} - cp ${CA_DIR}/keys/moonKey.der ${CA_CERT_DER} ${TEST}/hosts/moon/${TKM_DIR} -done - -# Put DER_encoded sun private key and Root CA certificate into tkm scenarios -TEST="${TEST_DIR}/tkm/multiple-clients" -mkdir -p ${TEST}/hosts/sun/${TKM_DIR} -cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} - -# Convert moon private key into unencrypted PKCS#8 format -TEST="${TEST_DIR}/ikev2/rw-pkcs8" -HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -out ${TEST_KEY} - -# Convert carol private key into v1.5 DES encrypted PKCS#8 format -HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ - -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} - -# Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format -HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" -TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private -openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v2 aes128 \ - -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} - -################################################################################ -# Public Key Extraction # -################################################################################ - -# Extract the raw moon public key for the swanctl/net2net-pubkey scenario -TEST="${TEST_DIR}/swanctl/net2net-pubkey" -TEST_PUB="${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey/moonPub.pem" -HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey -pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} -cp ${TEST_PUB} ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey - -# Put a copy into the following ikev2 scenarios -for t in net2net-dnssec net2net-pubkey rw-dnssec -do - TEST="${TEST_DIR}/ikev2/${t}" - mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs - cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs -done - -# Put a copy into the ikev2/net2net-pubkey scenario -TEST="${TEST_DIR}/ikev2/net2net-pubkey" -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs -cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs - -# Put a copy into the swanctl/rw-dnssec scenario -TEST="${TEST_DIR}/swanctl/rw-dnssec" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -# Put a copy into the following swanctl scenarios -for t in rw-pubkey-anon rw-pubkey-keyid -do - TEST="${TEST_DIR}/swanctl/${t}" - for h in moon carol dave - do - mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/pubkey - cp ${TEST_PUB} ${TEST}/hosts/${h}/${SWANCTL_DIR}/pubkey - done -done - -# Extract the raw sun public key for the swanctl/net2net-pubkey scenario -TEST="${TEST_DIR}/swanctl/net2net-pubkey" -TEST_PUB="${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey/sunPub.pem" -HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" -pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -# Put a copy into the ikev2/net2net-dnssec scenario -TEST="${TEST_DIR}/ikev2/net2net-dnssec" -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs -cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs - -# Put a copy into the ikev2/net2net-pubkey scenario -TEST="${TEST_DIR}/ikev2/net2net-pubkey" -cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs -cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs - -# Put a copy into the swanctl/rw-pubkey-anon scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -# Extract the raw carol public key for the swanctl/rw-dnssec scenario -TEST="${TEST_DIR}/swanctl/rw-dnssec" -TEST_PUB="${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey/carolPub.pem" -HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey -pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} - -# Put a copy into the swanctl/rw-pubkey-anon scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" -cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -# Put a copy into the swanctl/rw-pubkey-keyid scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" -cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -# Extract the raw dave public key for the swanctl/rw-dnssec scenario -TEST="${TEST_DIR}/swanctl/rw-dnssec" -TEST_PUB="${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey/davePub.pem" -HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey -pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} - -# Put a copy into the swanctl/rw-pubkey-anon scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" -cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -# Put a copy into the swanctl/rw-pubkey-keyid scenario -TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" -cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey -cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey - -################################################################################ -# Host Certificate Generation # -################################################################################ - -# function issue_cert: serial host cn [ou] -issue_cert() -{ - # does optional OU argument exist? - if [ -z "${4}" ] - then - OU="" - else - OU=" OU=${4}," - fi - - HOST_DIR="${DIR}/hosts/${2}" - HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${2}Key.pem" - HOST_CERT="${HOST_DIR}/${IPSEC_DIR}/certs/${2}Cert.pem" - mkdir -p ${HOST_DIR}/${IPSEC_DIR}/certs - pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${3} \ - --serial ${1} --dn "C=CH, O=${PROJECT},${OU} CN=${3}" \ - --outform pem > ${HOST_CERT} - cp ${HOST_CERT} ${CA_DIR}/certs/${1}.pem - - # Put a certificate copy into swanctl directory tree - mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/x509 - cp ${HOST_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509 -} - -# Generate host certificates -issue_cert 01 carol carol@strongswan.org Research -issue_cert 02 dave dave@strongswan.org Accounting -issue_cert 03 moon moon.strongswan.org -issue_cert 04 sun sun.strongswan.org -issue_cert 05 alice alice@strongswan.org Sales -issue_cert 06 venus venus.strongswan.org -issue_cert 07 bob bob@strongswan.org Research - -# Create PKCS#12 file for moon -TEST="${TEST_DIR}/ikev2/net2net-pkcs12" -HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" -HOST_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -MOON_PKCS12="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonCert.p12" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "moon" \ - -certfile ${CA_CERT} -caname "strongSwan Root CA" \ - -aes128 -passout "pass:kUqd8O7mzbjXNJKQ" > ${MOON_PKCS12} 2> /dev/null - -# Create PKCS#12 file for sun -HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" -HOST_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" -SUN_PKCS12="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunCert.p12" -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private -openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "sun" \ - -certfile ${CA_CERT} -caname "strongSwan Root CA" \ - -aes128 -passout "pass:IxjQVCF3JGI+MoPi" > ${SUN_PKCS12} 2> /dev/null - -# Put a PKCS#12 copy into the botan/net2net-pkcs12 scenario -for t in botan/net2net-pkcs12 openssl-ikev2/net2net-pkcs12 -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 - mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs12 - cp ${MOON_PKCS12} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 - cp ${SUN_PKCS12} ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs12 -done - -################################################################################ -# DNSSEC Zone Files # -################################################################################ - -# Store moon and sun certificates in strongswan.org zone -ZONE_FILE="${CA_DIR}/db.strongswan.org.certs-and-keys" -echo "; Automatically generated for inclusion in zone file" > ${ZONE_FILE} -for h in moon sun -do - HOST_CERT=${DIR}/hosts/${h}/${SWANCTL_DIR}/x509/${h}Cert.pem - cert=$(grep --invert-match ^----- ${HOST_CERT}| sed -e 's/^/\t\t\t\t/') - echo -e "${h}\tIN\tCERT\t( 1 0 0\n${cert}\n\t\t\t\t)" >> ${ZONE_FILE} -done - -# Store public keys in strongswan.org zone -echo ";" >> ${ZONE_FILE} -for h in moon sun carol dave -do - HOST_CERT=${DIR}/hosts/${h}/${SWANCTL_DIR}/x509/${h}Cert.pem - pubkey=$(pki --pub --type x509 --in ${HOST_CERT} --outform dnskey | sed 's/\(.\{0,64\}\)/\t\t\t\t\1\n/g') - echo -e "${h}\tIN\tIPSECKEY\t( 10 3 2 ${h}.strongswan.org.\n${pubkey}\n\t\t\t\t)" >> ${ZONE_FILE} -done - -# Generate a carol certificate for the swanctl/crl-to-cache scenario with base CDP -TEST="${TEST_DIR}/swanctl/crl-to-cache" -TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" -HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" -CN="carol@strongswan.org" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ - --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial 01 --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ - --outform pem > ${TEST_CERT} - -# Generate a moon certificate for the swanctl/crl-to-cache scenario with base CDP -TEST_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" -CN="moon.strongswan.org" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ - --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial 03 --dn "C=CH, O=${PROJECT}, CN=${CN}" \ - --outform pem > ${TEST_CERT} - -# Encrypt carolKey.pem -HOST_KEY="${DIR}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -KEY_PWD="nH5ZQEWtku0RJEZ6" -openssl rsa -in ${HOST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${HOST_KEY} \ - 2> /dev/null - -# Put a copy into the ikev2/dynamic-initiator scenario -for t in ikev2/dynamic-initiator ikev1/dynamic-initiator ikev1/dynamic-responder -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private - mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs - cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private - cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem -done - -# Put a copy into the swanctl/rw-cert scenario -TEST="${TEST_DIR}/swanctl/rw-cert" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -cp ${HOST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa - -# Generate another carol certificate and revoke it -TEST="${TEST_DIR}/ikev2/crl-revoked" -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="08" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem -pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} --reason "key-compromise" \ - --serial ${SERIAL} > ${CA_CRL} -cp ${CA_CRL} ${CA_LAST_CRL} - -# Put a copy into the ikev2/ocsp-revoked scenario -TEST="${TEST_DIR}/ikev2/ocsp-revoked" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Generate another carol certificate with SN=002 -TEST="${TEST_DIR}/ikev2/two-certs" -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-002.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-002.pem" -SERIAL="09" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, SN=002, CN=${CN}" \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -################################################################################ -# Research CA Certificate Generation # -################################################################################ - -# Generate a Research CA certificate signed by the Root CA and revoke it -TEST="${TEST_DIR}/ikev2/multi-level-ca-revoked" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" -SERIAL="0A" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RESEARCH_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem -pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} --reason "ca-compromise" \ - --serial ${SERIAL} --lastcrl ${CA_LAST_CRL} > ${CA_CRL} -rm ${CA_LAST_CRL} - -# Generate Research CA with the same private key as above signed by Root CA -SERIAL="0B" -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ - --outform pem > ${RESEARCH_CERT} -cp ${RESEARCH_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a certificate copy into the following scenarios -for t in ikev1/multi-level-ca ikev2/multi-level-ca ikev2/multi-level-ca-ldap \ - ikev2/multi-level-ca-pathlen ikev2/multi-level-ca-strict \ - ikev2/ocsp-multi-level ikev2/ocsp-strict-ifuri -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -done - -for t in ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp \ - ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts - cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts -done - -for t in multi-level-ca ocsp-multi-level -do - TEST="${TEST_DIR}/swanctl/${t}" - mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca - cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -done - -# Convert Research CA certificate into DER format -openssl x509 -in ${RESEARCH_CERT} -outform der -out ${RESEARCH_CERT_DER} - -# Generate Research CA with the same private key as above but invalid CDP -TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --type rsa \ - --crl "http://crl.strongswan.org/not-available.crl" \ - --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ - --outform pem > ${TEST_CERT} - -################################################################################ -# Sales CA Certificate Generation # -################################################################################ - -# Generate Sales CA signed by Root CA -SERIAL="0C" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SALES_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${SALES_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ - --outform pem > ${SALES_CERT} -cp ${SALES_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a certificate copy into the following scenarios -for t in ikev1/multi-level-ca ikev2/multi-level-ca ikev2/multi-level-ca-ldap \ - ikev2/multi-level-ca-strict ikev2/ocsp-multi-level \ - ikev2/ocsp-multi-level ikev2/ocsp-strict-ifuri -do - TEST="${TEST_DIR}/${t}" - cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -done - -for t in ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp \ - ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts - cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts -done - -for t in multi-level-ca ocsp-multi-level -do - TEST="${TEST_DIR}/swanctl/${t}" - cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -done - -# Convert Sales CA certificate into DER format -openssl x509 -in ${SALES_CERT} -outform der -out ${SALES_CERT_DER} - -# Generate an AES-128 encrypted moon key and a SHA-224 hashed certificate -TEST="${TEST_DIR}/ikev2/strong-keys-certs" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey-aes128.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert-sha224.pem" -KEY_PWD="gOQHdrSWeFuiZtYPetWuyzHW" -CN="moon.strongswan.org" -SERIAL="0D" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-224, CN=${CN}" \ - --digest sha224 --outform pem > ${TEST_CERT} -openssl rsa -in ${TEST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ - 2> /dev/null -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Generate an AES-192 encrypted carol key and a SHA-384 hashed certificate -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-aes192.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-sha384.pem" -KEY_PWD="ITP/H4lSHqGpUGmCpgNDklbzTNV+swjA" -CN="carol@strongswan.org" -SERIAL="0E" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-384, CN=${CN}" \ - --digest sha384 --outform pem > ${TEST_CERT} -openssl rsa -in ${TEST_KEY} -aes192 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ - 2> /dev/null -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Generate an AES-256 encrypted dave key and a SHA-512 hashed certificate -TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey-aes256.pem" -TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert-sha512.pem" -KEY_PWD="MeFnDN7VUbj+qU/bkgRIFvbCketIk2wrrs5Ii8297N2v" -CN="dave@strongswan.org" -SERIAL="0F" -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-512, CN=${CN}" \ - --digest sha512 --outform pem > ${TEST_CERT} -openssl rsa -in ${TEST_KEY} -aes256 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ - 2> /dev/null -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Generate another carol certificate with an OCSP URI -TEST="${TEST_DIR}/ikev2/ocsp-signer-cert" -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="10" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=OCSP, CN=${CN}" \ - --ocsp ${CA_OCSP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a copy into the ikev2/ocsp-timeouts-good scenario -TEST="${TEST_DIR}/ikev2/ocsp-timeouts-good" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy into the swanctl/ocsp-signer-cert scenario -for t in ocsp-signer-cert ocsp-disabled -do - cd "${TEST_DIR}/swanctl/${t}/hosts/carol/${SWANCTL_DIR}" - mkdir -p rsa x509 - cp ${TEST_KEY} rsa - cp ${TEST_CERT} x509 -done - -# Generate an OCSP Signing certificate for the strongSwan Root CA -TEST_KEY="${CA_DIR}/ocspKey.pem" -TEST_CERT="${CA_DIR}/ocspCert.pem" -CN="ocsp.strongswan.org" -OU="OCSP Signing Authority" -SERIAL="11" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ - --flag ocspSigning --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Generate a self-signed OCSP Signing certificate -TEST_KEY="${CA_DIR}/ocspKey-self.pem" -TEST_CERT="${CA_DIR}/ocspCert-self.pem" -OU="OCSP Self-Signed Authority" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --self --type rsa --in ${TEST_KEY} --flag ocspSigning \ - --not-before "${START}" --not-after "${CA_END}" --san ${CN} \ - --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ - --outform pem > ${TEST_CERT} - -# Copy self-signed OCSP Signing certificate to ikev2/ocsp-local-cert scenario -TEST="${TEST_DIR}/ikev2/ocsp-local-cert" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts -cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts - -# Generate mars virtual server certificate -TEST="${TEST_DIR}/ha/both-active" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/marsKey.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/marsCert.pem" -CN="mars.strongswan.org" -OU="Virtual VPN Gateway" -SERIAL="12" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ - --flag serverAuth --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a copy into the mirrored gateway -mkdir -p ${TEST}/hosts/alice/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/alice/${IPSEC_DIR}/certs -cp ${TEST_KEY} ${TEST}/hosts/alice/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/alice/${IPSEC_DIR}/certs - -# Put a copy into the ha/active-passive and ikev2-redirect-active scenarios -for t in "ha/active-passive" "ikev2/redirect-active" -do - TEST="${TEST_DIR}/${t}" - for h in alice moon - do - mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/private - mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/certs - cp ${TEST_KEY} ${TEST}/hosts/${h}/${IPSEC_DIR}/private - cp ${TEST_CERT} ${TEST}/hosts/${h}/${IPSEC_DIR}/certs - done -done - -# Generate moon certificate with an unsupported critical X.509 extension -TEST="${TEST_DIR}/ikev2/critical-extension" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" -CN="moon.strongswan.org" -SERIAL="13" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Critical Extension, CN=${CN}" \ - --critical 1.3.6.1.4.1.36906.1 --flag serverAuth \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a copy in the openssl-ikev2/critical extension scenario -TEST="${TEST_DIR}/openssl-ikev2/critical-extension" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 - -# Generate sun certificate with an unsupported critical X.509 extension -TEST="${TEST_DIR}/ikev2/critical-extension" -TEST_KEY="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunKey.pem" -TEST_CERT="${TEST}/hosts/sun/${IPSEC_DIR}/certs/sunCert.pem" -CN="sun.strongswan.org" -SERIAL="14" -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Critical Extension, CN=${CN}" \ - --critical 1.3.6.1.4.1.36906.1 --flag serverAuth \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a copy in the openssl-ikev2/critical extension scenario -TEST="${TEST_DIR}/openssl-ikev2/critical-extension" -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 - -# Generate winnetou server certificate -HOST_KEY="${CA_DIR}/winnetouKey.pem" -HOST_CERT="${CA_DIR}/winnetouCert.pem" -CN="winnetou.strongswan.org" -SERIAL="15" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ - --flag serverAuth --outform pem > ${HOST_CERT} -cp ${HOST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Generate AAA server certificate -TEST="${TEST_DIR}/tnc/tnccs-20-pdp-eap" -TEST_KEY="${TEST}/hosts/alice/${SWANCTL_DIR}/rsa/aaaKey.pem" -TEST_CERT="${TEST}/hosts/alice/${SWANCTL_DIR}/x509/aaaCert.pem" -CN="aaa.strongswan.org" -SERIAL="16" -cd "${TEST}/hosts/alice/${SWANCTL_DIR}" -mkdir -p rsa x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ ---in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ - --flag serverAuth --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Put a copy into various tnc scenarios -for t in tnccs-20-pdp-pt-tls tnccs-20-ev-pt-tls tnccs-20-hcd-eap -do - cd "${TEST_DIR}/tnc/${t}/hosts/alice/${SWANCTL_DIR}" - mkdir -p rsa x509 - cp ${TEST_KEY} rsa - cp ${TEST_CERT} x509 -done - -# Put a copy into the alice FreeRADIUS server -cp ${TEST_KEY} ${TEST_CERT} ${DIR}/hosts/alice/etc/raddb/certs - -################################################################################ -# strongSwan Attribute Authority # -################################################################################ - -# Generate Attritbute Authority certificate -TEST="${TEST_DIR}/ikev2/acert-cached" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert.pem" -CN="strongSwan Attribute Authority" -SERIAL="17" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/acerts -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${IM_END}" \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Generate carol's attribute certificate for sales and finance -ACERT="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/carol-sales-finance.pem" -pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ - --in ${CA_DIR}/certs/01.pem --group sales --group finance \ - --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} - -# Generate dave's expired attribute certificate for sales -ACERT="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-sales-expired.pem" -pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ - --in ${CA_DIR}/certs/02.pem --group sales \ - --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} - -# Generate dave's attribute certificate for marketing -ACERT_DM="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-marketing.pem" -pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ - --in ${CA_DIR}/certs/02.pem --group marketing \ - --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_DM} - -# Put a copy into the ikev2/acert-fallback scenario -TEST="${TEST_DIR}/ikev2/acert-fallback" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/acerts -cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts - -# Generate carol's expired attribute certificate for finance -ACERT=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-finance-expired.pem -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/acerts -pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ - --in ${CA_DIR}/certs/01.pem --group finance \ - --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} - -# Generate carol's valid attribute certificate for sales -ACERT_CS=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-sales.pem -pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ - --in ${CA_DIR}/certs/01.pem --group sales \ - --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_CS} - -# Put a copy into the ikev2/acert-inline scenarion -TEST="${TEST_DIR}/ikev2/acert-inline" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/acerts -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/acerts -cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts -cp ${ACERT_CS} ${TEST}/hosts/carol/${IPSEC_DIR}/acerts -cp ${ACERT_DM} ${TEST}/hosts/dave/${IPSEC_DIR}/acerts - -# Generate a short-lived Attritbute Authority certificate -CN="strongSwan Legacy AA" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey-expired.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert-expired.pem" -SERIAL="18" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${SH_END}" \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem - -# Genrate dave's attribute certificate for sales from expired AA -ACERT=${TEST}/hosts/dave/${IPSEC_DIR}/acerts/dave-expired-aa.pem -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/acerts -pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ - --in ${CA_DIR}/certs/02.pem --group sales \ - --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} - -################################################################################ -# strongSwan Root CA index for OCSP server # -################################################################################ - -# generate index.txt file for Root OCSP server -cp ${CA_DIR}/index.txt.template ${CA_DIR}/index.txt -sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${CA_DIR}/index.txt -sed -i -e "s/IM_EXPIRATION/${IM_EXP}/g" ${CA_DIR}/index.txt -sed -i -e "s/SH_EXPIRATION/${SH_EXP}/g" ${CA_DIR}/index.txt -sed -i -e "s/REVOCATION/${NOW}/g" ${CA_DIR}/index.txt - -################################################################################ -# Research CA # -################################################################################ - -# Generate a carol research certificate -TEST="${TEST_DIR}/ikev2/multi-level-ca" -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ - --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem - -# Save a copy of the private key in DER format -openssl rsa -in ${TEST_KEY} -outform der \ - -out ${RESEARCH_DIR}/keys/${SERIAL}.der 2> /dev/null - -# Put a copy in the following scenarios -for t in ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp \ - ikev2/multi-level-ca-ldap ikev2/multi-level-ca-loop \ - ikev2/multi-level-ca-revoked ikev2/multi-level-ca-skipped \ - ikev2/multi-level-ca-strict ikev2/ocsp-multi-level \ - ikev1/multi-level-ca ikev1/multi-level-ca-cr-init \ - ikev1/multi-level-ca-cr-resp -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private - mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs - cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private - cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs -done - -for t in multi-level-ca ocsp-multi-level -do - TEST="${TEST_DIR}/swanctl/${t}" - mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa - mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 - cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa - cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -done - -# Generate a carol research certificate without a CDP -TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ - --outform pem > ${TEST_CERT} -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private - -# Generate an OCSP Signing certificate for the Research CA -TEST_KEY="${RESEARCH_DIR}/ocspKey.pem" -TEST_CERT="${RESEARCH_DIR}/ocspCert.pem" -OU="Research OCSP Signing Authority" -CN="ocsp.research.strongswan.org" -SERIAL="02" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ - --crl ${RESEARCH_CDP} --flag ocspSigning --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem - -# Generate a Sales CA certificate signed by the Research CA -TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/sales_by_researchCert.pem" -SERIAL="03" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ - --in ${SALES_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ - --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem - -################################################################################ -# Duck Research CA # -################################################################################ - -# Generate a Duck Research CA certificate signed by the Research CA -SERIAL="04" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${DUCK_KEY} -pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ - --in ${DUCK_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Duck Research CA" \ - --crl ${RESEARCH_CDP} --outform pem > ${DUCK_CERT} -cp ${DUCK_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem - -# Put a certificate copy in the ikev2/multilevel-ca-pathlen scenario -TEST="${TEST_DIR}/ikev2/multi-level-ca-pathlen" -cp ${DUCK_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts - -# Generate a carol certificate signed by the Duck Research CA -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${DUCK_KEY} --cacert ${DUCK_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Duck Research, CN=${CN}" \ - --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${DUCK_DIR}/certs/${SERIAL}.pem - -# Generate index.txt file for Research OCSP server -cp ${RESEARCH_DIR}/index.txt.template ${RESEARCH_DIR}/index.txt -sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${RESEARCH_DIR}/index.txt - -################################################################################ -# Sales CA # -################################################################################ - -# Generate a dave sales certificate -TEST="${TEST_DIR}/ikev2/multi-level-ca" -TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" -TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" -CN="dave@strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ - --crl ${SALES_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem - -# Save a copy of the private key in DER format -openssl rsa -in ${TEST_KEY} -outform der \ - -out ${SALES_DIR}/keys/${SERIAL}.der 2> /dev/null - -# Put a copy in the following scenarios -for t in ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp \ - ikev2/multi-level-ca-ldap ikev2/multi-level-ca-strict \ - ikev2/ocsp-multi-level ikev1/multi-level-ca \ - ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp -do - TEST="${TEST_DIR}/${t}" - mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private - mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs - cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private - cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs -done - -for t in multi-level-ca ocsp-multi-level -do - TEST="${TEST_DIR}/swanctl/${t}" - mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa - mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 - cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa - cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -done - -# Generate a dave sales certificate with an inactive OCSP URI and no CDP -TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" -TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private -pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ - --ocsp "http://ocsp2.strongswan.org:8882" --outform pem > ${TEST_CERT} -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private - -# Generate an OCSP Signing certificate for the Sales CA -TEST_KEY="${SALES_DIR}/ocspKey.pem" -TEST_CERT="${SALES_DIR}/ocspCert.pem" -OU="Sales OCSP Signing Authority" -CN="ocsp.sales.strongswan.org" -SERIAL="02" -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ - --crl ${SALES_CDP} --flag ocspSigning --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem - -# Generate a Research CA certificate signed by the Sales CA -TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/research_by_salesCert.pem" -SERIAL="03" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ - --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ - --crl ${SALES_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem - -# generate index.txt file for Sales OCSP server -cp ${SALES_DIR}/index.txt.template ${SALES_DIR}/index.txt -sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${SALES_DIR}/index.txt - -################################################################################ -# strongSwan EC Root CA # -################################################################################ - -# Generate strongSwan EC Root CA -pki --gen --type ecdsa --size 521 --outform pem > ${ECDSA_KEY} -pki --self --type ecdsa --in ${ECDSA_KEY} \ - --not-before "${START}" --not-after "${CA_END}" --ca \ - --dn "C=CH, O=${PROJECT}, CN=strongSwan EC Root CA" \ - --outform pem > ${ECDSA_CERT} - -# Put a copy in the openssl-ikev2/ecdsa-certs scenario -for t in ecdsa-certs ecdsa-pkcs8 -do - TEST="${TEST_DIR}/openssl-ikev2/${t}" - for h in moon carol dave - do - mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca - cp ${ECDSA_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca - done -done - -# Generate a moon ECDSA 521 bit certificate -TEST="${TEST_DIR}/openssl-ikev2/ecdsa-certs" -MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa/moonKey.pem" -MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -CN="moon.strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -pki --gen --type ecdsa --size 521 --outform pem > ${MOON_KEY} -pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ - --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 512 bit, CN=${CN}" \ - --crl ${ECDSA_CDP} --outform pem > ${MOON_CERT} -cp ${MOON_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem - -# Generate a carol ECDSA 256 bit certificate -CAROL_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa/carolKey.pem" -CAROL_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="02" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -pki --gen --type ecdsa --size 256 --outform pem > ${CAROL_KEY} -pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ - --in ${CAROL_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 256 bit, CN=${CN}" \ - --crl ${ECDSA_CDP} --outform pem > ${CAROL_CERT} -cp ${CAROL_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem - -# Generate a dave ECDSA 384 bit certificate -DAVE_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa/daveKey.pem" -DAVE_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" -CN="dave@strongswan.org" -SERIAL="03" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -pki --gen --type ecdsa --size 384 --outform pem > ${DAVE_KEY} -pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ - --in ${DAVE_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 384 bit, CN=${CN}" \ - --crl ${ECDSA_CDP} --outform pem > ${DAVE_CERT} -cp ${DAVE_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem - -# Put CA and EE certificate copies in the openssl-ikev2/ecdsa-pkcs8 scenario -TEST="${TEST_DIR}/openssl-ikev2/ecdsa-pkcs8" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${CAROL_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -cp ${DAVE_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 - -# Convert moon private key into unencrypted PKCS#8 format -TEST_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 -openssl pkcs8 -in ${MOON_KEY} -nocrypt -topk8 -out ${TEST_KEY} - -# Convert carol private key into v1.5 DES encrypted PKCS#8 format -TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8 -openssl pkcs8 -in ${CAROL_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ - -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} - -# Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format -TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 -openssl pkcs8 -in ${DAVE_KEY} -nocrypt -topk8 -v2 aes128 \ - -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} - -# Put CA and EE certificate copies in the openssl-ikev1/ecdsa-certs scenario -TEST="${TEST_DIR}/openssl-ikev1/ecdsa-certs" -cd ${TEST}/hosts/moon/${SWANCTL_DIR} -mkdir -p ecdsa x509 x509ca -cp ${MOON_KEY} ecdsa -cp ${MOON_CERT} x509 -cp ${ECDSA_CERT} x509ca -cd ${TEST}/hosts/carol/${SWANCTL_DIR} -mkdir -p ecdsa x509 x509ca -cp ${CAROL_KEY} ecdsa -cp ${CAROL_CERT} x509 -cp ${ECDSA_CERT} x509ca -cd ${TEST}/hosts/dave/${SWANCTL_DIR} -mkdir -p ecdsa x509 x509ca -cp ${DAVE_KEY} ecdsa -cp ${DAVE_CERT} x509 -cp ${ECDSA_CERT} x509ca - -################################################################################ -# strongSwan RFC3779 Root CA # -################################################################################ - -# Generate strongSwan RFC3779 Root CA -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RFC3779_KEY} -pki --self --type rsa --in ${RFC3779_KEY} \ - --not-before "${START}" --not-after "${CA_END}" --ca \ - --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=strongSwan RFC3779 Root CA" \ - --addrblock "10.1.0.0-10.2.255.255" \ - --addrblock "10.3.0.1-10.3.3.232" \ - --addrblock "192.168.0.0/24" \ - --addrblock "fec0::-fec2:ffff:ffff:ffff:ffff:ffff:ffff:ffff" \ - --outform pem > ${RFC3779_CERT} - -# Put a copy in the ikev2/net2net-rfc3779 scenario -TEST="${TEST_DIR}/ikev2/net2net-rfc3779" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/cacerts -cp ${RFC3779_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -cp ${RFC3779_CERT} ${TEST}/hosts/sun/${IPSEC_DIR}/cacerts - -# Put a copy in the ipv6/rw-rfc3779-ikev2 scenario -TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca -cp ${RFC3779_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca -cp ${RFC3779_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca - -# Generate a moon RFC3779 certificate -TEST="${TEST_DIR}/ikev2/net2net-rfc3779" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" -CN="moon.strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ - --addrblock "10.1.0.0/16" --addrblock "192.168.0.1/32" \ - --addrblock "fec0::1/128" --addrblock "fec1::/16" \ - --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem - -# Put a copy in the ipv6 scenarios -for t in net2net-rfc3779-ikev2 rw-rfc3779-ikev2 -do - cd "${TEST_DIR}/ipv6/${t}/hosts/moon/${SWANCTL_DIR}" - mkdir -p rsa x509 x509ca - cp ${TEST_KEY} rsa - cp ${TEST_CERT} x509 - cp ${RFC3779_CERT} x509ca -done - -# Generate a sun RFC3779 certificate -TEST="${TEST_DIR}/ikev2/net2net-rfc3779" -TEST_KEY="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunKey.pem" -TEST_CERT="${TEST}/hosts/sun/${IPSEC_DIR}/certs/sunCert.pem" -CN="sun.strongswan.org" -SERIAL="02" -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ - --addrblock "10.2.0.0/16" --addrblock "192.168.0.2/32" \ - --addrblock "fec0::2/128" --addrblock "fec2::/16" \ - --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem - -# Put a copy in the ipv6/net2net-rfc3779-ikev2 scenario -cd "${TEST_DIR}/ipv6/net2net-rfc3779-ikev2/hosts/sun/${SWANCTL_DIR}" -mkdir -p rsa x509 x509ca -cp ${TEST_KEY} rsa -cp ${TEST_CERT} x509 -cp ${RFC3779_CERT} x509ca - -# Generate a carol RFC3779 certificate -TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" -TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="03" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ - --addrblock "10.3.0.1/32" --addrblock "192.168.0.100/32" \ - --addrblock "fec0::10/128" \ - --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem - -# Generate a carol RFC3779 certificate -TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" -TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" -TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" -CN="dave@strongswan.org" -SERIAL="04" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ - --addrblock "10.3.0.2/32" --addrblock "192.168.0.200/32" \ - --addrblock "fec0::20/128" \ - --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem - -################################################################################ -# strongSwan SHA3-RSA Root CA # -################################################################################ - -# Generate strongSwan SHA3-RSA Root CA -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SHA3_RSA_KEY} -pki --self --type rsa --in ${SHA3_RSA_KEY} --digest sha3_256 \ - --not-before "${START}" --not-after "${CA_END}" --ca \ - --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=strongSwan Root CA" \ - --outform pem > ${SHA3_RSA_CERT} - -# Put a copy in the swanctl/net2net-sha3-rsa-cert scenario -TEST="${TEST_DIR}/swanctl/net2net-sha3-rsa-cert" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca -cp ${SHA3_RSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -cp ${SHA3_RSA_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca - -# Generate a sun SHA3-RSA certificate -SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" -SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" -CN="sun.strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SUN_KEY} -pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ - --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ - --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${SUN_CERT} -cp ${SUN_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem - -# Generate a moon SHA3-RSA certificate -MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" -MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -CN="moon.strongswan.org" -SERIAL="02" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${MOON_KEY} -pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ - --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ - --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${MOON_CERT} -cp ${MOON_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem - -# Put a copy in the botan/net2net-sha3-rsa-cert scenario -TEST="${TEST_DIR}/botan/net2net-sha3-rsa-cert" -cd ${TEST}/hosts/moon/${SWANCTL_DIR} -mkdir -p rsa x509 x509ca -cp ${MOON_KEY} rsa -cp ${MOON_CERT} x509 -cp ${SHA3_RSA_CERT} x509ca -cd ${TEST}/hosts/sun/${SWANCTL_DIR} -mkdir -p rsa x509 x509ca -cp ${SUN_KEY} rsa -cp ${SUN_CERT} x509 -cp ${SHA3_RSA_CERT} x509ca - -# Put a copy in the swanctl/rw-eap-tls-sha3-rsa scenario -TEST="${TEST_DIR}/swanctl/rw-eap-tls-sha3-rsa" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 - -# Generate a carol SHA3-RSA certificate -TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="03" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ - --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem - -# Generate a dave SHA3-RSA certificate -TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" -TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" -CN="dave@strongswan.org" -SERIAL="04" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ - --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem - -for h in moon carol dave -do - mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca - cp ${SHA3_RSA_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca -done - -################################################################################ -# strongSwan Ed25519 Root CA # -################################################################################ - -# Generate strongSwan Ed25519 Root CA -pki --gen --type ed25519 --outform pem > ${ED25519_KEY} -pki --self --type ed25519 --in ${ED25519_KEY} \ - --not-before "${START}" --not-after "${CA_END}" --ca \ - --dn "C=CH, O=${PROJECT}, CN=strongSwan Ed25519 Root CA" \ - --cert-policy "1.3.6.1.4.1.36906.1.1.1" \ - --cert-policy "1.3.6.1.4.1.36906.1.1.2" \ - --outform pem > ${ED25519_CERT} - -# Put a copy in the swanctl/net2net-ed25519 scenario -TEST="${TEST_DIR}/swanctl/net2net-ed25519" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca -cp ${ED25519_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca -cp ${ED25519_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca - -# Generate a sun Ed25519 certificate -SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8/sunKey.pem" -SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" -CN="sun.strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8 -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 -pki --gen --type ed25519 --outform pem > ${SUN_KEY} -pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ - --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ - --cert-policy "1.3.6.1.4.1.36906.1.1.2" --flag "serverAuth" \ - --crl ${ED25519_CDP} --outform pem > ${SUN_CERT} -cp ${SUN_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem - -# Generate a moon Ed25519 certificate -MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" -MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -CN="moon.strongswan.org" -SERIAL="02" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -pki --gen --type ed25519 --outform pem > ${MOON_KEY} -pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ - --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ - --cert-policy "1.3.6.1.4.1.36906.1.1.1" --flag "serverAuth" \ - --crl ${ED25519_CDP} --outform pem > ${MOON_CERT} -cp ${MOON_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem - -# Put a copy in the botan/net2net-ed25519 scenario -TEST="${TEST_DIR}/botan/net2net-ed25519" -cd ${TEST}/hosts/moon/${SWANCTL_DIR} -mkdir -p pkcs8 x509 x509ca -cp ${MOON_KEY} pkcs8 -cp ${MOON_CERT} x509 -cp ${ED25519_CERT} x509ca -cd ${TEST}/hosts/sun/${SWANCTL_DIR} -mkdir -p pkcs8 x509 x509ca -cp ${SUN_KEY} pkcs8 -cp ${SUN_CERT} x509 -cp ${ED25519_CERT} x509ca - -# Put a copy in the ikev2/net2net-ed25519 scenario -TEST="${TEST_DIR}/ikev2/net2net-ed25519" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR} -cd ${TEST}/hosts/moon/${IPSEC_DIR} -mkdir -p cacerts certs private -cp ${MOON_KEY} private -cp ${MOON_CERT} certs -cp ${ED25519_CERT} cacerts -mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR} -cd ${TEST}/hosts/sun/${IPSEC_DIR} -mkdir -p cacerts certs private -cp ${SUN_KEY} private -cp ${SUN_CERT} certs -cp ${ED25519_CERT} cacerts - -# Put a copy in the swanctl/rw-ed25519-certpol scenario -TEST="${TEST_DIR}/swanctl/rw-ed25519-certpol" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 -cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 - -for h in moon carol dave -do - mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca - cp ${ED25519_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca -done - -# Generate a carol Ed25519 certificate -TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="03" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8 -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -pki --gen --type ed25519 --outform pem > ${TEST_KEY} -pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ - --cert-policy "1.3.6.1.4.1.36906.1.1.1" --flag "clientAuth" \ - --crl ${ED25519_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem - -# Generate a dave Ed25519 certificate -TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" -TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" -CN="dave@strongswan.org" -SERIAL="04" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -pki --gen --type ed25519 --outform pem > ${TEST_KEY} -pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ - --cert-policy "1.3.6.1.4.1.36906.1.1.2" --flag "clientAuth" \ - --crl ${ED25519_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem - -################################################################################ -# strongSwan Monster Root CA # -################################################################################ - -# Generate strongSwan Monster Root CA -pki --gen --type rsa --size ${MONSTER_CA_RSA_SIZE} --outform pem > ${MONSTER_KEY} -pki --self --type rsa --in ${MONSTER_KEY} \ - --not-before "01.05.09 15:00:00" --not-after "01.05.59 15:00:00" --ca \ - --dn "C=CH, O=${PROJECT}, CN=strongSwan Monster CA" \ - --outform pem > ${MONSTER_CERT} - -# Put a copy in the ikev2/after-2038-certs scenario -TEST="${TEST_DIR}/ikev2/after-2038-certs" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts -cp ${MONSTER_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts -cp ${MONSTER_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts - -# Generate a moon Monster certificate -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" -CN="moon.strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ - --in ${TEST_KEY} --san ${CN} \ - --not-before "01.05.09 15:00:00" --not-after "01.05.39 15:00:00" - \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Monster, CN=${CN}" \ - --crl ${MONSTER_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${MONSTER_DIR}/certs/${SERIAL}.pem - -# Generate a carol Monster certificate -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" -CN="carol@strongswan.org" -SERIAL="02" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} -pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ - --in ${TEST_KEY} --san ${CN} \ - --not-before "01.05.09 15:00:00" --not-after "01.05.39 15:00:00" - \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Monster, CN=${CN}" \ - --crl ${MONSTER_CDP} --outform pem > ${TEST_CERT} -cp ${TEST_CERT} ${MONSTER_DIR}/certs/${SERIAL}.pem - -################################################################################ -# Bliss CA # -################################################################################ - -# Generate BLISS Root CA with 192 bit security strength -pki --gen --type bliss --size 4 > ${BLISS_KEY} -pki --self --type bliss --in ${BLISS_KEY} --digest sha3_512 \ - --not-before "${START}" --not-after "${CA_END}" --ca \ - --dn "C=CH, O=${PROJECT}, CN=strongSwan BLISS Root CA" > ${BLISS_CERT} - -# Put a copy in the following scenarios -for t in rw-newhope-bliss rw-ntru-bliss -do - TEST="${TEST_DIR}/ikev2/${t}" - for h in moon carol dave - do - mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/cacerts - cp ${BLISS_CERT} ${TEST}/hosts/${h}/${IPSEC_DIR}/cacerts - done -done - -TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" -for h in moon carol dave -do - mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca - cp ${BLISS_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca -done - -# Generate a carol BLISS certificate with 128 bit security strength -TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" -TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.der" -TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.der" -CN="carol@strongswan.org" -SERIAL="01" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -pki --gen --type bliss --size 1 > ${TEST_KEY} -pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS I, CN=${CN}" \ - --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} -cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der - -# Put a copy in the ikev2/rw-ntru-bliss scenario -TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs -cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private -cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs - -# Put a copy in the swanctl/rw-ntru-bliss scenario -TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss -mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss -cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 - -# Generate a dave BLISS certificate with 160 bit security strength -TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" -TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.der" -TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.der" -CN="dave@strongswan.org" -SERIAL="02" -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs -pki --gen --type bliss --size 3 > ${TEST_KEY} -pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS III, CN=${CN}" \ - --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} -cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der - -# Put a copy in the ikev2/rw-ntru-bliss scenario -TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs -cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private/ -cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs/ - -# Put a copy in the swanctl/rw-ntru-bliss scenario -TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss -mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss/ -cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509/ - -# Generate a moon BLISS certificate with 192 bit security strength -TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" -TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.der" -TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.der" -CN="moon.strongswan.org" -SERIAL="03" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -pki --gen --type bliss --size 4 > ${TEST_KEY} -pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ - --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ - --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS IV, CN=${CN}" \ - --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} -cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der - -# Put a copy in the ikev2/rw-ntru-bliss scenario -TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private -mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs -cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private/ -cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/certs/ - -# Put a copy in the swanctl/rw-ntru-bliss scenario -TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss/ -cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509/ - -################################################################################ -# SQL Data # -################################################################################ - -CA_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CA_KEY}` -CA_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${CA_KEY}` -CA_CERT_HEX=`cat ${CA_CERT_DER} | hexdump -v -e '/1 "%02x"'` -CA_CERT_PEM_HEX=`cat ${CA_CERT} | hexdump -v -e '/1 "%02x"'` -# -MOON_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" -MOON_KEY="${CA_DIR}/keys/moonKey.der" -MOON_KEY_PEM="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" -MOON_KEY_PEM_HEX=`cat ${MOON_KEY_PEM} | hexdump -v -e '/1 "%02x"'` -MOON_KEY_HEX=`cat ${MOON_KEY} | hexdump -v -e '/1 "%02x"'` -MOON_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${MOON_KEY}` -MOON_PUB_HEX=`pki --pub --type rsa --in ${MOON_KEY} | hexdump -v -e '/1 "%02x"'` -MOON_CERT_HEX=`openssl x509 -in ${MOON_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -MOON_CERT_PEM_HEX=`cat ${MOON_CERT} | hexdump -v -e '/1 "%02x"'` -# -SUN_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" -SUN_KEY="${CA_DIR}/keys/sunKey.der" -SUN_KEY_PEM="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" -SUN_KEY_PEM_HEX=`cat ${SUN_KEY_PEM} | hexdump -v -e '/1 "%02x"'` -SUN_KEY_HEX=`cat ${SUN_KEY} | hexdump -v -e '/1 "%02x"'` -SUN_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${SUN_KEY}` -SUN_CERT_HEX=`openssl x509 -in ${SUN_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -SUN_CERT_PEM_HEX=`cat ${SUN_CERT} | hexdump -v -e '/1 "%02x"'` -# -CAROL_CERT="${DIR}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" -CAROL_KEY="${CA_DIR}/keys/carolKey.der" -CAROL_KEY_HEX=`cat ${CAROL_KEY} | hexdump -v -e '/1 "%02x"'` -CAROL_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CAROL_KEY}` -CAROL_PUB_HEX=`pki --pub --type rsa --in ${CAROL_KEY} | hexdump -v -e '/1 "%02x"'` -CAROL_CERT_HEX=`openssl x509 -in ${CAROL_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -# -DAVE_CERT="${DIR}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" -DAVE_KEY="${CA_DIR}/keys/daveKey.der" -DAVE_KEY_HEX=`cat ${DAVE_KEY} | hexdump -v -e '/1 "%02x"'` -DAVE_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${DAVE_KEY}` -DAVE_PUB_HEX=`pki --pub --type rsa --in ${DAVE_KEY} | hexdump -v -e '/1 "%02x"'` -DAVE_CERT_HEX=`openssl x509 -in ${DAVE_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -# -ALICE_CERT="${DIR}/hosts/alice/${SWANCTL_DIR}/x509/aliceCert.pem" -ALICE_KEY="${CA_DIR}/keys/aliceKey.der" -ALICE_KEY_HEX=`cat ${ALICE_KEY} | hexdump -v -e '/1 "%02x"'` -ALICE_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${ALICE_KEY}` -ALICE_CERT_HEX=`openssl x509 -in ${ALICE_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -# -VENUS_CERT="${DIR}/hosts/venus/${SWANCTL_DIR}/x509/venusCert.pem" -VENUS_KEY="${CA_DIR}/keys/venusKey.der" -VENUS_KEY_HEX=`cat ${VENUS_KEY} | hexdump -v -e '/1 "%02x"'` -VENUS_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${VENUS_KEY}` -VENUS_CERT_HEX=`openssl x509 -in ${VENUS_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -# -RESEARCH_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${RESEARCH_KEY}` -RESEARCH_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${RESEARCH_KEY}` -RESEARCH_CERT_HEX=`cat ${RESEARCH_CERT_DER} | hexdump -v -e '/1 "%02x"'` -# -CAROL_R_CERT="${RESEARCH_DIR}/certs/01.pem" -CAROL_R_KEY="${RESEARCH_DIR}/keys/01.der" -CAROL_R_KEY_HEX=`cat ${CAROL_R_KEY} | hexdump -v -e '/1 "%02x"'` -CAROL_R_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CAROL_R_KEY}` -CAROL_R_CERT_HEX=`openssl x509 -in ${CAROL_R_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -# -SALES_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${SALES_KEY}` -SALES_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${SALES_KEY}` -SALES_CERT_HEX=`cat ${SALES_CERT_DER} | hexdump -v -e '/1 "%02x"'` -# -DAVE_S_CERT="${SALES_DIR}/certs/01.pem" -DAVE_S_KEY="${SALES_DIR}/keys/01.der" -DAVE_S_KEY_HEX=`cat ${DAVE_S_KEY} | hexdump -v -e '/1 "%02x"'` -DAVE_S_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${DAVE_S_KEY}` -DAVE_S_CERT_HEX=`openssl x509 -in ${DAVE_S_CERT} -outform der | hexdump -v -e '/1 "%02x"'` -# -for t in ip-pool-db ip-pool-db-expired ip-pool-db-restart ip-split-pools-db \ - ip-split-pools-db-restart multi-level-ca rw-cert rw-psk-rsa-split \ - rw-psk-ipv4 rw-psk-ipv6 rw-rsa rw-rsa-keyid -do - for h in carol dave moon - do - TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" - sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ - -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ - -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ - -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ - -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ - -e "s/MOON_PUB_HEX/${MOON_PUB_HEX}/g" \ - -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ - -e "s/CAROL_KEY_HEX/${CAROL_KEY_HEX}/g" \ - -e "s/CAROL_SPK_HEX/${CAROL_SPK_HEX}/g" \ - -e "s/CAROL_PUB_HEX/${CAROL_PUB_HEX}/g" \ - -e "s/CAROL_CERT_HEX/${CAROL_CERT_HEX}/g" \ - -e "s/DAVE_KEY_HEX/${DAVE_KEY_HEX}/g" \ - -e "s/DAVE_SPK_HEX/${DAVE_SPK_HEX}/g" \ - -e "s/DAVE_PUB_HEX/${DAVE_PUB_HEX}/g" \ - -e "s/DAVE_CERT_HEX/${DAVE_CERT_HEX}/g" \ - -e "s/RESEARCH_SPK_HEX/${RESEARCH_SPK_HEX}/g" \ - -e "s/RESEARCH_SPKI_HEX/${RESEARCH_SPKI_HEX}/g" \ - -e "s/RESEARCH_CERT_HEX/${RESEARCH_CERT_HEX}/g" \ - -e "s/CAROL_R_KEY_HEX/${CAROL_R_KEY_HEX}/g" \ - -e "s/CAROL_R_SPK_HEX/${CAROL_R_SPK_HEX}/g" \ - -e "s/CAROL_R_CERT_HEX/${CAROL_R_CERT_HEX}/g" \ - -e "s/SALES_SPK_HEX/${SALES_SPK_HEX}/g" \ - -e "s/SALES_SPKI_HEX/${SALES_SPKI_HEX}/g" \ - -e "s/SALES_CERT_HEX/${SALES_CERT_HEX}/g" \ - -e "s/DAVE_S_KEY_HEX/${DAVE_S_KEY_HEX}/g" \ - -e "s/DAVE_S_SPK_HEX/${DAVE_S_SPK_HEX}/g" \ - -e "s/DAVE_S_CERT_HEX/${DAVE_S_CERT_HEX}/g" \ - ${TEST_DATA}.in > ${TEST_DATA} - done -done -# -for t in rw-eap-aka-rsa -do - for h in carol moon - do - TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" - sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ - -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ - -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ - -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ - -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ - -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ - ${TEST_DATA}.in > ${TEST_DATA} - done -done -# -for t in net2net-cert net2net-psk net2net-route-pem net2net-start-pem -do - for h in moon sun - do - TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" - sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ - -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ - -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ - -e "s/CA_CERT_PEM_HEX/${CA_CERT_PEM_HEX}/g" \ - -e "s/MOON_KEY_PEM_HEX/${MOON_KEY_PEM_HEX}/g" \ - -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ - -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ - -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ - -e "s/MOON_CERT_PEM_HEX/${MOON_CERT_PEM_HEX}/g" \ - -e "s/SUN_KEY_PEM_HEX/${SUN_KEY_PEM_HEX}/g" \ - -e "s/SUN_KEY_HEX/${SUN_KEY_HEX}/g" \ - -e "s/SUN_SPK_HEX/${SUN_SPK_HEX}/g" \ - -e "s/SUN_CERT_HEX/${SUN_CERT_HEX}/g" \ - -e "s/SUN_CERT_PEM_HEX/${SUN_CERT_PEM_HEX}/g" \ - ${TEST_DATA}.in > ${TEST_DATA} - done -done -# -for t in shunt-policies-nat-rw -do - for h in alice venus sun - do - TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" - sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ - -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ - -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ - -e "s/ALICE_KEY_HEX/${ALICE_KEY_HEX}/g" \ - -e "s/ALICE_SPK_HEX/${ALICE_SPK_HEX}/g" \ - -e "s/ALICE_CERT_HEX/${ALICE_CERT_HEX}/g" \ - -e "s/VENUS_KEY_HEX/${VENUS_KEY_HEX}/g" \ - -e "s/VENUS_SPK_HEX/${VENUS_SPK_HEX}/g" \ - -e "s/VENUS_CERT_HEX/${VENUS_CERT_HEX}/g" \ - -e "s/SUN_KEY_HEX/${SUN_KEY_HEX}/g" \ - -e "s/SUN_SPK_HEX/${SUN_SPK_HEX}/g" \ - -e "s/SUN_CERT_HEX/${SUN_CERT_HEX}/g" \ - ${TEST_DATA}.in > ${TEST_DATA} - done -done +log_action "Building certificates" +execute_chroot "/root/testing/scripts/build-certs-chroot" diff --git a/testing/scripts/build-certs-chroot b/testing/scripts/build-certs-chroot new file mode 100755 index 000000000..2bf717df5 --- /dev/null +++ b/testing/scripts/build-certs-chroot @@ -0,0 +1,1876 @@ +#!/bin/bash + +echo "Building certificates" + +# Disable leak detective when using pki as it produces warnings in tzset +export LEAK_DETECTIVE_DISABLE=1 + +# Determine testing directory +DIR="$(dirname `readlink -f $0`)/.." + +# Define some global variables +PROJECT="strongSwan Project" +CA_DIR="${DIR}/hosts/winnetou/etc/ca" +CA_KEY="${CA_DIR}/strongswanKey.pem" +CA_CERT="${CA_DIR}/strongswanCert.pem" +CA_CERT_DER="${CA_DIR}/strongswanCert.der" +CA_CRL="${CA_DIR}/strongswan.crl" +CA_LAST_CRL="${CA_DIR}/strongswan_last.crl" +CA_CDP="http://crl.strongswan.org/strongswan.crl" +CA_BASE_CDP="http://crl.strongswan.org/strongswan_base.crl" +CA_OCSP="http://ocsp.strongswan.org:8880" +# +START=`date -d "-2 day" "+%d.%m.%y %T"` +SH_END=`date -d "-1 day" "+%d.%m.%y %T"` # 1 day +CA_END=`date -d "+3651 day" "+%d.%m.%y %T"` # 10 years +IM_END=`date -d "+3286 day" "+%d.%m.%y %T"` # 9 years +EE_END=`date -d "+2920 day" "+%d.%m.%y %T"` # 8 years +SH_EXP=`date -d "-1 day" "+%y%m%d%H%M%SZ"` # 1 day +IM_EXP=`date -d "+3286 day" "+%y%m%d%H%M%SZ"` # 9 years +EE_EXP=`date -d "+2920 day" "+%y%m%d%H%M%SZ"` # 8 years +NOW=`date "+%y%m%d%H%M%SZ"` +# +RESEARCH_DIR="${CA_DIR}/research" +RESEARCH_KEY="${RESEARCH_DIR}/researchKey.pem" +RESEARCH_CERT="${RESEARCH_DIR}/researchCert.pem" +RESEARCH_CERT_DER="${RESEARCH_DIR}/researchCert.der" +RESEARCH_CDP="http://crl.strongswan.org/research.crl" +# +SALES_DIR="${CA_DIR}/sales" +SALES_KEY="${SALES_DIR}/salesKey.pem" +SALES_CERT="${SALES_DIR}/salesCert.pem" +SALES_CERT_DER="${SALES_DIR}/salesCert.der" +SALES_CDP="http://crl.strongswan.org/sales.crl" +# +DUCK_DIR="${CA_DIR}/duck" +DUCK_KEY="${DUCK_DIR}/duckKey.pem" +DUCK_CERT="${DUCK_DIR}/duckCert.pem" +# +ECDSA_DIR="${CA_DIR}/ecdsa" +ECDSA_KEY="${ECDSA_DIR}/strongswanKey.pem" +ECDSA_CERT="${ECDSA_DIR}/strongswanCert.pem" +ECDSA_CDP="http://crl.strongswan.org/strongswan_ecdsa.crl" +# +RFC3779_DIR="${CA_DIR}/rfc3779" +RFC3779_KEY="${RFC3779_DIR}/strongswanKey.pem" +RFC3779_CERT="${RFC3779_DIR}/strongswanCert.pem" +RFC3779_CDP="http://crl.strongswan.org/strongswan_rfc3779.crl" +# +SHA3_RSA_DIR="${CA_DIR}/sha3-rsa" +SHA3_RSA_KEY="${SHA3_RSA_DIR}/strongswanKey.pem" +SHA3_RSA_CERT="${SHA3_RSA_DIR}/strongswanCert.pem" +SHA3_RSA_CDP="http://crl.strongswan.org/strongswan_sha3_rsa.crl" +# +ED25519_DIR="${CA_DIR}/ed25519" +ED25519_KEY="${ED25519_DIR}/strongswanKey.pem" +ED25519_CERT="${ED25519_DIR}/strongswanCert.pem" +ED25519_CDP="http://crl.strongswan.org/strongswan_ed25519.crl" +# +MONSTER_DIR="${CA_DIR}/monster" +MONSTER_KEY="${MONSTER_DIR}/strongswanKey.pem" +MONSTER_CERT="${MONSTER_DIR}/strongswanCert.pem" +MONSTER_CDP="http://crl.strongswan.org/strongswan_monster.crl" +MONSTER_CA_RSA_SIZE="8192" +MONSTER_EE_RSA_SIZE="4096" +# +BLISS_DIR="${CA_DIR}/bliss" +BLISS_KEY="${BLISS_DIR}/strongswan_blissKey.der" +BLISS_CERT="${BLISS_DIR}/strongswan_blissCert.der" +BLISS_CDP="http://crl.strongswan.org/strongswan_bliss.crl" +# +RSA_SIZE="3072" +IPSEC_DIR="etc/ipsec.d" +SWANCTL_DIR="etc/swanctl" +TKM_DIR="etc/tkm" +HOSTS="carol dave moon sun alice venus bob" +TEST_DIR="${DIR}/tests" + +# Create directories +mkdir -p ${CA_DIR}/certs +mkdir -p ${CA_DIR}/keys +mkdir -p ${RESEARCH_DIR}/certs +mkdir -p ${RESEARCH_DIR}/keys +mkdir -p ${SALES_DIR}/certs +mkdir -p ${SALES_DIR}/keys +mkdir -p ${DUCK_DIR}/certs +mkdir -p ${ECDSA_DIR}/certs +mkdir -p ${RFC3779_DIR}/certs +mkdir -p ${SHA3_RSA_DIR}/certs +mkdir -p ${ED25519_DIR}/certs +mkdir -p ${MONSTER_DIR}/certs +mkdir -p ${BLISS_DIR}/certs + +################################################################################ +# strongSwan Root CA # +################################################################################ + +# Generate strongSwan Root CA +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${CA_KEY} +pki --self --type rsa --in ${CA_KEY} --not-before "${START}" --not-after "${CA_END}" \ + --ca --pathlen 1 --dn "C=CH, O=${PROJECT}, CN=strongSwan Root CA" \ + --outform pem > ${CA_CERT} + +# Distribute strongSwan Root CA certificate +for h in ${HOSTS} +do + HOST_DIR="${DIR}/hosts/${h}" + mkdir -p ${HOST_DIR}/${IPSEC_DIR}/cacerts + mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/x509ca + cp ${CA_CERT} ${HOST_DIR}/${IPSEC_DIR}/cacerts + cp ${CA_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509ca +done + +# Put a copy onto the alice FreeRADIUS server +mkdir -p ${DIR}/hosts/alice/etc/raddb/certs +cp ${CA_CERT} ${DIR}/hosts/alice/etc/raddb/certs + +# Convert strongSwan Root CA certificate into DER format +openssl x509 -in ${CA_CERT} -outform der -out ${CA_CERT_DER} + +# Gernerate a stale CRL +pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} \ + --this-update "${START}" --lifetime 1 > ${CA_LAST_CRL} + +# Put a CRL copy into the ikev2/crl-ldap scenario to be used as a stale crl +TEST="${TEST_DIR}/ikev2/crl-ldap" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/crls +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/crls +cp ${CA_LAST_CRL} ${TEST}/hosts/carol/${IPSEC_DIR}/crls/stale.crl +cp ${CA_LAST_CRL} ${TEST}/hosts/moon/${IPSEC_DIR}/crls/stale.crl + +# Generate host keys +for h in ${HOSTS} +do + HOST_DIR="${DIR}/hosts/${h}" + HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${h}Key.pem" + mkdir -p ${HOST_DIR}/${IPSEC_DIR}/private + pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} + + # Put a copy into swanctl directory tree + mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/rsa + cp ${HOST_KEY} ${HOST_DIR}/${SWANCTL_DIR}/rsa + + # Convert host key into DER format + openssl rsa -in ${HOST_KEY} -outform der -out ${CA_DIR}/keys/${h}Key.der \ + 2> /dev/null +done + +# Put DER-encoded moon private key and Root CA certificate into tkm scenarios +for t in host2host-initiator host2host-responder host2host-xfrmproxy \ + net2net-initiator net2net-xfrmproxy xfrmproxy-expire xfrmproxy-rekey +do + TEST="${TEST_DIR}/tkm/${t}" + mkdir -p ${TEST}/hosts/moon/${TKM_DIR} + cp ${CA_DIR}/keys/moonKey.der ${CA_CERT_DER} ${TEST}/hosts/moon/${TKM_DIR} +done + +# Put DER_encoded sun private key and Root CA certificate into tkm scenarios +TEST="${TEST_DIR}/tkm/multiple-clients" +mkdir -p ${TEST}/hosts/sun/${TKM_DIR} +cp ${CA_DIR}/keys/sunKey.der ${CA_CERT_DER} ${TEST}/hosts/sun/${TKM_DIR} + +# Convert moon private key into unencrypted PKCS#8 format +TEST="${TEST_DIR}/ikev2/rw-pkcs8" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -out ${TEST_KEY} + +# Convert carol private key into v1.5 DES encrypted PKCS#8 format +HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ + -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} + +# Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format +HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +openssl pkcs8 -in ${HOST_KEY} -nocrypt -topk8 -v2 aes128 \ + -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} + +################################################################################ +# Public Key Extraction # +################################################################################ + +# Extract the raw moon public key for the swanctl/net2net-pubkey scenario +TEST="${TEST_DIR}/swanctl/net2net-pubkey" +TEST_PUB="${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey/moonPub.pem" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} +cp ${TEST_PUB} ${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey + +# Put a copy into the following ikev2 scenarios +for t in net2net-dnssec net2net-pubkey rw-dnssec +do + TEST="${TEST_DIR}/ikev2/${t}" + mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs + cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +done + +# Put a copy into the ikev2/net2net-pubkey scenario +TEST="${TEST_DIR}/ikev2/net2net-pubkey" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs +cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/rw-dnssec scenario +TEST="${TEST_DIR}/swanctl/rw-dnssec" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the following swanctl scenarios +for t in rw-pubkey-anon rw-pubkey-keyid +do + TEST="${TEST_DIR}/swanctl/${t}" + for h in moon carol dave + do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/pubkey + cp ${TEST_PUB} ${TEST}/hosts/${h}/${SWANCTL_DIR}/pubkey + done +done + +# Extract the raw sun public key for the swanctl/net2net-pubkey scenario +TEST="${TEST_DIR}/swanctl/net2net-pubkey" +TEST_PUB="${TEST}/hosts/sun/${SWANCTL_DIR}/pubkey/sunPub.pem" +HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the ikev2/net2net-dnssec scenario +TEST="${TEST_DIR}/ikev2/net2net-dnssec" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs +cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs + +# Put a copy into the ikev2/net2net-pubkey scenario +TEST="${TEST_DIR}/ikev2/net2net-pubkey" +cp ${TEST_PUB} ${TEST}/hosts/moon/${IPSEC_DIR}/certs +cp ${TEST_PUB} ${TEST}/hosts/sun/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Extract the raw carol public key for the swanctl/rw-dnssec scenario +TEST="${TEST_DIR}/swanctl/rw-dnssec" +TEST_PUB="${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey/carolPub.pem" +HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the swanctl/rw-pubkey-keyid scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" +cp ${TEST_PUB} ${TEST}/hosts/carol/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Extract the raw dave public key for the swanctl/rw-dnssec scenario +TEST="${TEST_DIR}/swanctl/rw-dnssec" +TEST_PUB="${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey/davePub.pem" +HOST_KEY="${DIR}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey +pki --pub --type rsa --in ${HOST_KEY} --outform pem > ${TEST_PUB} + +# Put a copy into the swanctl/rw-pubkey-anon scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-anon" +cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +# Put a copy into the swanctl/rw-pubkey-keyid scenario +TEST="${TEST_DIR}/swanctl/rw-pubkey-keyid" +cp ${TEST_PUB} ${TEST}/hosts/dave/${SWANCTL_DIR}/pubkey +cp ${TEST_PUB} ${TEST}/hosts/moon/${SWANCTL_DIR}/pubkey + +################################################################################ +# Host Certificate Generation # +################################################################################ + +# function issue_cert: serial host cn [ou] +issue_cert() +{ + # does optional OU argument exist? + if [ -z "${4}" ] + then + OU="" + else + OU=" OU=${4}," + fi + + HOST_DIR="${DIR}/hosts/${2}" + HOST_KEY="${HOST_DIR}/${IPSEC_DIR}/private/${2}Key.pem" + HOST_CERT="${HOST_DIR}/${IPSEC_DIR}/certs/${2}Cert.pem" + mkdir -p ${HOST_DIR}/${IPSEC_DIR}/certs + pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${3} \ + --serial ${1} --dn "C=CH, O=${PROJECT},${OU} CN=${3}" \ + --outform pem > ${HOST_CERT} + cp ${HOST_CERT} ${CA_DIR}/certs/${1}.pem + + # Put a certificate copy into swanctl directory tree + mkdir -p ${HOST_DIR}/${SWANCTL_DIR}/x509 + cp ${HOST_CERT} ${HOST_DIR}/${SWANCTL_DIR}/x509 +} + +# Generate host certificates +issue_cert 01 carol carol@strongswan.org Research +issue_cert 02 dave dave@strongswan.org Accounting +issue_cert 03 moon moon.strongswan.org +issue_cert 04 sun sun.strongswan.org +issue_cert 05 alice alice@strongswan.org Sales +issue_cert 06 venus venus.strongswan.org +issue_cert 07 bob bob@strongswan.org Research + +# Create PKCS#12 file for moon +TEST="${TEST_DIR}/ikev2/net2net-pkcs12" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +HOST_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +MOON_PKCS12="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonCert.p12" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "moon" \ + -certfile ${CA_CERT} -caname "strongSwan Root CA" \ + -aes128 -passout "pass:kUqd8O7mzbjXNJKQ" > ${MOON_PKCS12} 2> /dev/null + +# Create PKCS#12 file for sun +HOST_KEY="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +HOST_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +SUN_PKCS12="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunCert.p12" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private +openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "sun" \ + -certfile ${CA_CERT} -caname "strongSwan Root CA" \ + -aes128 -passout "pass:IxjQVCF3JGI+MoPi" > ${SUN_PKCS12} 2> /dev/null + +# Put a PKCS#12 copy into the botan/net2net-pkcs12 scenario +for t in botan/net2net-pkcs12 openssl-ikev2/net2net-pkcs12 +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 + mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs12 + cp ${MOON_PKCS12} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 + cp ${SUN_PKCS12} ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs12 +done + +################################################################################ +# DNSSEC Zone Files # +################################################################################ + +# Store moon and sun certificates in strongswan.org zone +ZONE_FILE="${CA_DIR}/db.strongswan.org.certs-and-keys" +echo "; Automatically generated for inclusion in zone file" > ${ZONE_FILE} +for h in moon sun +do + HOST_CERT=${DIR}/hosts/${h}/${SWANCTL_DIR}/x509/${h}Cert.pem + cert=$(grep --invert-match ^----- ${HOST_CERT}| sed -e 's/^/\t\t\t\t/') + echo -e "${h}\tIN\tCERT\t( 1 0 0\n${cert}\n\t\t\t\t)" >> ${ZONE_FILE} +done + +# Store public keys in strongswan.org zone +echo ";" >> ${ZONE_FILE} +for h in moon sun carol dave +do + HOST_CERT=${DIR}/hosts/${h}/${SWANCTL_DIR}/x509/${h}Cert.pem + pubkey=$(pki --pub --type x509 --in ${HOST_CERT} --outform dnskey | sed 's/\(.\{0,64\}\)/\t\t\t\t\1\n/g') + echo -e "${h}\tIN\tIPSECKEY\t( 10 3 2 ${h}.strongswan.org.\n${pubkey}\n\t\t\t\t)" >> ${ZONE_FILE} +done + +# Generate a carol certificate for the swanctl/crl-to-cache scenario with base CDP +TEST="${TEST_DIR}/swanctl/crl-to-cache" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +HOST_KEY="${DIR}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +CN="carol@strongswan.org" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial 01 --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} + +# Generate a moon certificate for the swanctl/crl-to-cache scenario with base CDP +TEST_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +HOST_KEY="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +CN="moon.strongswan.org" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_BASE_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial 03 --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --outform pem > ${TEST_CERT} + +# Encrypt carolKey.pem +HOST_KEY="${DIR}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +KEY_PWD="nH5ZQEWtku0RJEZ6" +openssl rsa -in ${HOST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${HOST_KEY} \ + 2> /dev/null + +# Put a copy into the ikev2/dynamic-initiator scenario +for t in ikev2/dynamic-initiator ikev1/dynamic-initiator ikev1/dynamic-responder +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs + cp ${HOST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private + cp ${CA_DIR}/certs/01.pem ${TEST}/hosts/dave/${IPSEC_DIR}/certs/carolCert.pem +done + +# Put a copy into the swanctl/rw-cert scenario +TEST="${TEST_DIR}/swanctl/rw-cert" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +cp ${HOST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa + +# Generate another carol certificate and revoke it +TEST="${TEST_DIR}/ikev2/crl-revoked" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="08" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem +pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} --reason "key-compromise" \ + --serial ${SERIAL} > ${CA_CRL} +cp ${CA_CRL} ${CA_LAST_CRL} + +# Put a copy into the ikev2/ocsp-revoked scenario +TEST="${TEST_DIR}/ikev2/ocsp-revoked" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Generate another carol certificate with SN=002 +TEST="${TEST_DIR}/ikev2/two-certs" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-002.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-002.pem" +SERIAL="09" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, SN=002, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +################################################################################ +# Research CA Certificate Generation # +################################################################################ + +# Generate a Research CA certificate signed by the Root CA and revoke it +TEST="${TEST_DIR}/ikev2/multi-level-ca-revoked" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" +SERIAL="0A" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/ +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RESEARCH_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem +pki --signcrl --cakey ${CA_KEY} --cacert ${CA_CERT} --reason "ca-compromise" \ + --serial ${SERIAL} --lastcrl ${CA_LAST_CRL} > ${CA_CRL} +rm ${CA_LAST_CRL} + +# Generate Research CA with the same private key as above signed by Root CA +SERIAL="0B" +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --outform pem > ${RESEARCH_CERT} +cp ${RESEARCH_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a certificate copy into the following scenarios +for t in ikev1/multi-level-ca ikev2/multi-level-ca ikev2/multi-level-ca-ldap \ + ikev2/multi-level-ca-pathlen ikev2/multi-level-ca-strict \ + ikev2/ocsp-multi-level ikev2/ocsp-strict-ifuri +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +done + +for t in ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + cp ${RESEARCH_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts +done + +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca + cp ${RESEARCH_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +done + +# Convert Research CA certificate into DER format +openssl x509 -in ${RESEARCH_CERT} -outform der -out ${RESEARCH_CERT_DER} + +# Generate Research CA with the same private key as above but invalid CDP +TEST="${TEST_DIR}/ikev2/multi-level-ca-skipped" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/researchCert.pem" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --type rsa \ + --crl "http://crl.strongswan.org/not-available.crl" \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --outform pem > ${TEST_CERT} + +################################################################################ +# Sales CA Certificate Generation # +################################################################################ + +# Generate Sales CA signed by Root CA +SERIAL="0C" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SALES_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${SALES_KEY} --not-before "${START}" --not-after "${IM_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ + --outform pem > ${SALES_CERT} +cp ${SALES_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a certificate copy into the following scenarios +for t in ikev1/multi-level-ca ikev2/multi-level-ca ikev2/multi-level-ca-ldap \ + ikev2/multi-level-ca-strict ikev2/ocsp-multi-level \ + ikev2/ocsp-multi-level ikev2/ocsp-strict-ifuri +do + TEST="${TEST_DIR}/${t}" + cp ${SALES_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +done + +for t in ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts + cp ${SALES_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/cacerts +done + +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + cp ${SALES_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +done + +# Convert Sales CA certificate into DER format +openssl x509 -in ${SALES_CERT} -outform der -out ${SALES_CERT_DER} + +# Generate an AES-128 encrypted moon key and a SHA-224 hashed certificate +TEST="${TEST_DIR}/ikev2/strong-keys-certs" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey-aes128.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert-sha224.pem" +KEY_PWD="gOQHdrSWeFuiZtYPetWuyzHW" +CN="moon.strongswan.org" +SERIAL="0D" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-224, CN=${CN}" \ + --digest sha224 --outform pem > ${TEST_CERT} +openssl rsa -in ${TEST_KEY} -aes128 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ + 2> /dev/null +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate an AES-192 encrypted carol key and a SHA-384 hashed certificate +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey-aes192.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert-sha384.pem" +KEY_PWD="ITP/H4lSHqGpUGmCpgNDklbzTNV+swjA" +CN="carol@strongswan.org" +SERIAL="0E" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-384, CN=${CN}" \ + --digest sha384 --outform pem > ${TEST_CERT} +openssl rsa -in ${TEST_KEY} -aes192 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ + 2> /dev/null +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate an AES-256 encrypted dave key and a SHA-512 hashed certificate +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey-aes256.pem" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert-sha512.pem" +KEY_PWD="MeFnDN7VUbj+qU/bkgRIFvbCketIk2wrrs5Ii8297N2v" +CN="dave@strongswan.org" +SERIAL="0F" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-512, CN=${CN}" \ + --digest sha512 --outform pem > ${TEST_CERT} +openssl rsa -in ${TEST_KEY} -aes256 --passout pass:${KEY_PWD} -out ${TEST_KEY} \ + 2> /dev/null +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate another carol certificate with an OCSP URI +TEST="${TEST_DIR}/ikev2/ocsp-signer-cert" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="10" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=OCSP, CN=${CN}" \ + --ocsp ${CA_OCSP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy into the ikev2/ocsp-timeouts-good scenario +TEST="${TEST_DIR}/ikev2/ocsp-timeouts-good" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy into the swanctl/ocsp-signer-cert scenario +for t in ocsp-signer-cert ocsp-disabled +do + cd "${TEST_DIR}/swanctl/${t}/hosts/carol/${SWANCTL_DIR}" + mkdir -p rsa x509 + cp ${TEST_KEY} rsa + cp ${TEST_CERT} x509 +done + +# Generate an OCSP Signing certificate for the strongSwan Root CA +TEST_KEY="${CA_DIR}/ocspKey.pem" +TEST_CERT="${CA_DIR}/ocspCert.pem" +CN="ocsp.strongswan.org" +OU="OCSP Signing Authority" +SERIAL="11" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --flag ocspSigning --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate a self-signed OCSP Signing certificate +TEST_KEY="${CA_DIR}/ocspKey-self.pem" +TEST_CERT="${CA_DIR}/ocspCert-self.pem" +OU="OCSP Self-Signed Authority" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --self --type rsa --in ${TEST_KEY} --flag ocspSigning \ + --not-before "${START}" --not-after "${CA_END}" --san ${CN} \ + --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --outform pem > ${TEST_CERT} + +# Copy self-signed OCSP Signing certificate to ikev2/ocsp-local-cert scenario +TEST="${TEST_DIR}/ikev2/ocsp-local-cert" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/ocspcerts +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/ocspcerts + +# Generate mars virtual server certificate +TEST="${TEST_DIR}/ha/both-active" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/marsKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/marsCert.pem" +CN="mars.strongswan.org" +OU="Virtual VPN Gateway" +SERIAL="12" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --flag serverAuth --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy into the mirrored gateway +mkdir -p ${TEST}/hosts/alice/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/alice/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/alice/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/alice/${IPSEC_DIR}/certs + +# Put a copy into the ha/active-passive and ikev2-redirect-active scenarios +for t in "ha/active-passive" "ikev2/redirect-active" +do + TEST="${TEST_DIR}/${t}" + for h in alice moon + do + mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/certs + cp ${TEST_KEY} ${TEST}/hosts/${h}/${IPSEC_DIR}/private + cp ${TEST_CERT} ${TEST}/hosts/${h}/${IPSEC_DIR}/certs + done +done + +# Generate moon certificate with an unsupported critical X.509 extension +TEST="${TEST_DIR}/ikev2/critical-extension" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="13" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Critical Extension, CN=${CN}" \ + --critical 1.3.6.1.4.1.36906.1 --flag serverAuth \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy in the openssl-ikev2/critical extension scenario +TEST="${TEST_DIR}/openssl-ikev2/critical-extension" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 + +# Generate sun certificate with an unsupported critical X.509 extension +TEST="${TEST_DIR}/ikev2/critical-extension" +TEST_KEY="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunKey.pem" +TEST_CERT="${TEST}/hosts/sun/${IPSEC_DIR}/certs/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="14" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Critical Extension, CN=${CN}" \ + --critical 1.3.6.1.4.1.36906.1 --flag serverAuth \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy in the openssl-ikev2/critical extension scenario +TEST="${TEST_DIR}/openssl-ikev2/critical-extension" +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa +cp ${TEST_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 + +# Generate winnetou server certificate +HOST_KEY="${CA_DIR}/winnetouKey.pem" +HOST_CERT="${CA_DIR}/winnetouCert.pem" +CN="winnetou.strongswan.org" +SERIAL="15" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${HOST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${HOST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --flag serverAuth --outform pem > ${HOST_CERT} +cp ${HOST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate AAA server certificate +TEST="${TEST_DIR}/tnc/tnccs-20-pdp-eap" +TEST_KEY="${TEST}/hosts/alice/${SWANCTL_DIR}/rsa/aaaKey.pem" +TEST_CERT="${TEST}/hosts/alice/${SWANCTL_DIR}/x509/aaaCert.pem" +CN="aaa.strongswan.org" +SERIAL="16" +cd "${TEST}/hosts/alice/${SWANCTL_DIR}" +mkdir -p rsa x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ +--in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --flag serverAuth --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Put a copy into various tnc scenarios +for t in tnccs-20-pdp-pt-tls tnccs-20-ev-pt-tls tnccs-20-hcd-eap +do + cd "${TEST_DIR}/tnc/${t}/hosts/alice/${SWANCTL_DIR}" + mkdir -p rsa x509 + cp ${TEST_KEY} rsa + cp ${TEST_CERT} x509 +done + +# Put a copy into the alice FreeRADIUS server +cp ${TEST_KEY} ${TEST_CERT} ${DIR}/hosts/alice/etc/raddb/certs + +################################################################################ +# strongSwan Attribute Authority # +################################################################################ + +# Generate Attritbute Authority certificate +TEST="${TEST_DIR}/ikev2/acert-cached" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert.pem" +CN="strongSwan Attribute Authority" +SERIAL="17" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/acerts +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${IM_END}" \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Generate carol's attribute certificate for sales and finance +ACERT="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/carol-sales-finance.pem" +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/01.pem --group sales --group finance \ + --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} + +# Generate dave's expired attribute certificate for sales +ACERT="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-sales-expired.pem" +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/02.pem --group sales \ + --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} + +# Generate dave's attribute certificate for marketing +ACERT_DM="${TEST}/hosts/moon/${IPSEC_DIR}/acerts/dave-marketing.pem" +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/02.pem --group marketing \ + --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_DM} + +# Put a copy into the ikev2/acert-fallback scenario +TEST="${TEST_DIR}/ikev2/acert-fallback" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/acerts +cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts + +# Generate carol's expired attribute certificate for finance +ACERT=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-finance-expired.pem +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/acerts +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/01.pem --group finance \ + --not-before "${START}" --not-after "${SH_END}" --outform pem > ${ACERT} + +# Generate carol's valid attribute certificate for sales +ACERT_CS=${TEST}/hosts/carol/${IPSEC_DIR}/acerts/carol-sales.pem +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/01.pem --group sales \ + --not-before "${SH_END}" --not-after "${EE_END}" --outform pem > ${ACERT_CS} + +# Put a copy into the ikev2/acert-inline scenarion +TEST="${TEST_DIR}/ikev2/acert-inline" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/acerts +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/acerts +cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/aacerts +cp ${ACERT_CS} ${TEST}/hosts/carol/${IPSEC_DIR}/acerts +cp ${ACERT_DM} ${TEST}/hosts/dave/${IPSEC_DIR}/acerts + +# Generate a short-lived Attritbute Authority certificate +CN="strongSwan Legacy AA" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/aaKey-expired.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/aacerts/aaCert-expired.pem" +SERIAL="18" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${SH_END}" \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem + +# Genrate dave's attribute certificate for sales from expired AA +ACERT=${TEST}/hosts/dave/${IPSEC_DIR}/acerts/dave-expired-aa.pem +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/acerts +pki --acert --issuerkey ${TEST_KEY} --issuercert ${TEST_CERT} \ + --in ${CA_DIR}/certs/02.pem --group sales \ + --not-before "${START}" --not-after "${EE_END}" --outform pem > ${ACERT} + +################################################################################ +# strongSwan Root CA index for OCSP server # +################################################################################ + +# generate index.txt file for Root OCSP server +cp ${CA_DIR}/index.txt.template ${CA_DIR}/index.txt +sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${CA_DIR}/index.txt +sed -i -e "s/IM_EXPIRATION/${IM_EXP}/g" ${CA_DIR}/index.txt +sed -i -e "s/SH_EXPIRATION/${SH_EXP}/g" ${CA_DIR}/index.txt +sed -i -e "s/REVOCATION/${NOW}/g" ${CA_DIR}/index.txt + +################################################################################ +# Research CA # +################################################################################ + +# Generate a carol research certificate +TEST="${TEST_DIR}/ikev2/multi-level-ca" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +# Save a copy of the private key in DER format +openssl rsa -in ${TEST_KEY} -outform der \ + -out ${RESEARCH_DIR}/keys/${SERIAL}.der 2> /dev/null + +# Put a copy in the following scenarios +for t in ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-ldap ikev2/multi-level-ca-loop \ + ikev2/multi-level-ca-revoked ikev2/multi-level-ca-skipped \ + ikev2/multi-level-ca-strict ikev2/ocsp-multi-level \ + ikev1/multi-level-ca ikev1/multi-level-ca-cr-init \ + ikev1/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs + cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private + cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs +done + +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa + mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa + cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +done + +# Generate a carol research certificate without a CDP +TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private + +# Generate an OCSP Signing certificate for the Research CA +TEST_KEY="${RESEARCH_DIR}/ocspKey.pem" +TEST_CERT="${RESEARCH_DIR}/ocspCert.pem" +OU="Research OCSP Signing Authority" +CN="ocsp.research.strongswan.org" +SERIAL="02" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --crl ${RESEARCH_CDP} --flag ocspSigning --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +# Generate a Sales CA certificate signed by the Research CA +TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/sales_by_researchCert.pem" +SERIAL="03" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${SALES_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=Sales CA" \ + --crl ${RESEARCH_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +################################################################################ +# Duck Research CA # +################################################################################ + +# Generate a Duck Research CA certificate signed by the Research CA +SERIAL="04" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${DUCK_KEY} +pki --issue --cakey ${RESEARCH_KEY} --cacert ${RESEARCH_CERT} --type rsa \ + --in ${DUCK_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Duck Research CA" \ + --crl ${RESEARCH_CDP} --outform pem > ${DUCK_CERT} +cp ${DUCK_CERT} ${RESEARCH_DIR}/certs/${SERIAL}.pem + +# Put a certificate copy in the ikev2/multilevel-ca-pathlen scenario +TEST="${TEST_DIR}/ikev2/multi-level-ca-pathlen" +cp ${DUCK_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts + +# Generate a carol certificate signed by the Duck Research CA +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${DUCK_KEY} --cacert ${DUCK_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Duck Research, CN=${CN}" \ + --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${DUCK_DIR}/certs/${SERIAL}.pem + +# Generate index.txt file for Research OCSP server +cp ${RESEARCH_DIR}/index.txt.template ${RESEARCH_DIR}/index.txt +sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${RESEARCH_DIR}/index.txt + +################################################################################ +# Sales CA # +################################################################################ + +# Generate a dave sales certificate +TEST="${TEST_DIR}/ikev2/multi-level-ca" +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ + --crl ${SALES_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem + +# Save a copy of the private key in DER format +openssl rsa -in ${TEST_KEY} -outform der \ + -out ${SALES_DIR}/keys/${SERIAL}.der 2> /dev/null + +# Put a copy in the following scenarios +for t in ikev2/multi-level-ca-cr-init ikev2/multi-level-ca-cr-resp \ + ikev2/multi-level-ca-ldap ikev2/multi-level-ca-strict \ + ikev2/ocsp-multi-level ikev1/multi-level-ca \ + ikev1/multi-level-ca-cr-init ikev1/multi-level-ca-cr-resp +do + TEST="${TEST_DIR}/${t}" + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private + mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs + cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private + cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs +done + +for t in multi-level-ca ocsp-multi-level +do + TEST="${TEST_DIR}/swanctl/${t}" + mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa + mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 + cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa + cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +done + +# Generate a dave sales certificate with an inactive OCSP URI and no CDP +TEST="${TEST_DIR}/ikev2/ocsp-strict-ifuri" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.pem" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Sales, CN=${CN}" \ + --ocsp "http://ocsp2.strongswan.org:8882" --outform pem > ${TEST_CERT} +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private + +# Generate an OCSP Signing certificate for the Sales CA +TEST_KEY="${SALES_DIR}/ocspKey.pem" +TEST_CERT="${SALES_DIR}/ocspCert.pem" +OU="Sales OCSP Signing Authority" +CN="ocsp.sales.strongswan.org" +SERIAL="02" +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=${OU}, CN=${CN}" \ + --crl ${SALES_CDP} --flag ocspSigning --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem + +# Generate a Research CA certificate signed by the Sales CA +TEST="${TEST_DIR}/ikev2/multi-level-ca-loop" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/cacerts/research_by_salesCert.pem" +SERIAL="03" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +pki --issue --cakey ${SALES_KEY} --cacert ${SALES_CERT} --type rsa \ + --in ${RESEARCH_KEY} --not-before "${START}" --not-after "${EE_END}" --ca \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Research, CN=Research CA" \ + --crl ${SALES_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SALES_DIR}/certs/${SERIAL}.pem + +# generate index.txt file for Sales OCSP server +cp ${SALES_DIR}/index.txt.template ${SALES_DIR}/index.txt +sed -i -e "s/EE_EXPIRATION/${EE_EXP}/g" ${SALES_DIR}/index.txt + +################################################################################ +# strongSwan EC Root CA # +################################################################################ + +# Generate strongSwan EC Root CA +pki --gen --type ecdsa --size 521 --outform pem > ${ECDSA_KEY} +pki --self --type ecdsa --in ${ECDSA_KEY} \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan EC Root CA" \ + --outform pem > ${ECDSA_CERT} + +# Put a copy in the openssl-ikev2/ecdsa-certs scenario +for t in ecdsa-certs ecdsa-pkcs8 +do + TEST="${TEST_DIR}/openssl-ikev2/${t}" + for h in moon carol dave + do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${ECDSA_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + done +done + +# Generate a moon ECDSA 521 bit certificate +TEST="${TEST_DIR}/openssl-ikev2/ecdsa-certs" +MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa/moonKey.pem" +MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +pki --gen --type ecdsa --size 521 --outform pem > ${MOON_KEY} +pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ + --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 512 bit, CN=${CN}" \ + --crl ${ECDSA_CDP} --outform pem > ${MOON_CERT} +cp ${MOON_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem + +# Generate a carol ECDSA 256 bit certificate +CAROL_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa/carolKey.pem" +CAROL_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/ecdsa +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +pki --gen --type ecdsa --size 256 --outform pem > ${CAROL_KEY} +pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ + --in ${CAROL_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 256 bit, CN=${CN}" \ + --crl ${ECDSA_CDP} --outform pem > ${CAROL_CERT} +cp ${CAROL_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem + +# Generate a dave ECDSA 384 bit certificate +DAVE_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa/daveKey.pem" +DAVE_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="03" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/ecdsa +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +pki --gen --type ecdsa --size 384 --outform pem > ${DAVE_KEY} +pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ + --in ${DAVE_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=ECDSA 384 bit, CN=${CN}" \ + --crl ${ECDSA_CDP} --outform pem > ${DAVE_CERT} +cp ${DAVE_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem + +# Put CA and EE certificate copies in the openssl-ikev2/ecdsa-pkcs8 scenario +TEST="${TEST_DIR}/openssl-ikev2/ecdsa-pkcs8" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${CAROL_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +cp ${DAVE_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 + +# Convert moon private key into unencrypted PKCS#8 format +TEST_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +openssl pkcs8 -in ${MOON_KEY} -nocrypt -topk8 -out ${TEST_KEY} + +# Convert carol private key into v1.5 DES encrypted PKCS#8 format +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8 +openssl pkcs8 -in ${CAROL_KEY} -nocrypt -topk8 -v1 PBE-MD5-DES \ + -passout "pass:nH5ZQEWtku0RJEZ6" -out ${TEST_KEY} + +# Convert dave private key into v2.0 AES-128 encrypted PKCS#8 format +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 +openssl pkcs8 -in ${DAVE_KEY} -nocrypt -topk8 -v2 aes128 \ + -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} + +# Put CA and EE certificate copies in the openssl-ikev1/ecdsa-certs scenario +TEST="${TEST_DIR}/openssl-ikev1/ecdsa-certs" +cd ${TEST}/hosts/moon/${SWANCTL_DIR} +mkdir -p ecdsa x509 x509ca +cp ${MOON_KEY} ecdsa +cp ${MOON_CERT} x509 +cp ${ECDSA_CERT} x509ca +cd ${TEST}/hosts/carol/${SWANCTL_DIR} +mkdir -p ecdsa x509 x509ca +cp ${CAROL_KEY} ecdsa +cp ${CAROL_CERT} x509 +cp ${ECDSA_CERT} x509ca +cd ${TEST}/hosts/dave/${SWANCTL_DIR} +mkdir -p ecdsa x509 x509ca +cp ${DAVE_KEY} ecdsa +cp ${DAVE_CERT} x509 +cp ${ECDSA_CERT} x509ca + +################################################################################ +# strongSwan RFC3779 Root CA # +################################################################################ + +# Generate strongSwan RFC3779 Root CA +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${RFC3779_KEY} +pki --self --type rsa --in ${RFC3779_KEY} \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=strongSwan RFC3779 Root CA" \ + --addrblock "10.1.0.0-10.2.255.255" \ + --addrblock "10.3.0.1-10.3.3.232" \ + --addrblock "192.168.0.0/24" \ + --addrblock "fec0::-fec2:ffff:ffff:ffff:ffff:ffff:ffff:ffff" \ + --outform pem > ${RFC3779_CERT} + +# Put a copy in the ikev2/net2net-rfc3779 scenario +TEST="${TEST_DIR}/ikev2/net2net-rfc3779" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/cacerts +cp ${RFC3779_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +cp ${RFC3779_CERT} ${TEST}/hosts/sun/${IPSEC_DIR}/cacerts + +# Put a copy in the ipv6/rw-rfc3779-ikev2 scenario +TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca +cp ${RFC3779_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509ca +cp ${RFC3779_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509ca + +# Generate a moon RFC3779 certificate +TEST="${TEST_DIR}/ikev2/net2net-rfc3779" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.1.0.0/16" --addrblock "192.168.0.1/32" \ + --addrblock "fec0::1/128" --addrblock "fec1::/16" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +# Put a copy in the ipv6 scenarios +for t in net2net-rfc3779-ikev2 rw-rfc3779-ikev2 +do + cd "${TEST_DIR}/ipv6/${t}/hosts/moon/${SWANCTL_DIR}" + mkdir -p rsa x509 x509ca + cp ${TEST_KEY} rsa + cp ${TEST_CERT} x509 + cp ${RFC3779_CERT} x509ca +done + +# Generate a sun RFC3779 certificate +TEST="${TEST_DIR}/ikev2/net2net-rfc3779" +TEST_KEY="${TEST}/hosts/sun/${IPSEC_DIR}/private/sunKey.pem" +TEST_CERT="${TEST}/hosts/sun/${IPSEC_DIR}/certs/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.2.0.0/16" --addrblock "192.168.0.2/32" \ + --addrblock "fec0::2/128" --addrblock "fec2::/16" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +# Put a copy in the ipv6/net2net-rfc3779-ikev2 scenario +cd "${TEST_DIR}/ipv6/net2net-rfc3779-ikev2/hosts/sun/${SWANCTL_DIR}" +mkdir -p rsa x509 x509ca +cp ${TEST_KEY} rsa +cp ${TEST_CERT} x509 +cp ${RFC3779_CERT} x509ca + +# Generate a carol RFC3779 certificate +TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="03" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.3.0.1/32" --addrblock "192.168.0.100/32" \ + --addrblock "fec0::10/128" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +# Generate a carol RFC3779 certificate +TEST="${TEST_DIR}/ipv6/rw-rfc3779-ikev2" +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="04" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${RFC3779_KEY} --cacert ${RFC3779_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=RFC3779, CN=${CN}" \ + --addrblock "10.3.0.2/32" --addrblock "192.168.0.200/32" \ + --addrblock "fec0::20/128" \ + --crl ${RFC3779_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem + +################################################################################ +# strongSwan SHA3-RSA Root CA # +################################################################################ + +# Generate strongSwan SHA3-RSA Root CA +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SHA3_RSA_KEY} +pki --self --type rsa --in ${SHA3_RSA_KEY} --digest sha3_256 \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=strongSwan Root CA" \ + --outform pem > ${SHA3_RSA_CERT} + +# Put a copy in the swanctl/net2net-sha3-rsa-cert scenario +TEST="${TEST_DIR}/swanctl/net2net-sha3-rsa-cert" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca +cp ${SHA3_RSA_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${SHA3_RSA_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca + +# Generate a sun SHA3-RSA certificate +SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SUN_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${SUN_CERT} +cp ${SUN_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +# Generate a moon SHA3-RSA certificate +MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${MOON_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${MOON_CERT} +cp ${MOON_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +# Put a copy in the botan/net2net-sha3-rsa-cert scenario +TEST="${TEST_DIR}/botan/net2net-sha3-rsa-cert" +cd ${TEST}/hosts/moon/${SWANCTL_DIR} +mkdir -p rsa x509 x509ca +cp ${MOON_KEY} rsa +cp ${MOON_CERT} x509 +cp ${SHA3_RSA_CERT} x509ca +cd ${TEST}/hosts/sun/${SWANCTL_DIR} +mkdir -p rsa x509 x509ca +cp ${SUN_KEY} rsa +cp ${SUN_CERT} x509 +cp ${SHA3_RSA_CERT} x509ca + +# Put a copy in the swanctl/rw-eap-tls-sha3-rsa scenario +TEST="${TEST_DIR}/swanctl/rw-eap-tls-sha3-rsa" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 + +# Generate a carol SHA3-RSA certificate +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/rsa/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="03" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +# Generate a dave SHA3-RSA certificate +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/rsa/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="04" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ + --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem + +for h in moon carol dave +do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${SHA3_RSA_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca +done + +################################################################################ +# strongSwan Ed25519 Root CA # +################################################################################ + +# Generate strongSwan Ed25519 Root CA +pki --gen --type ed25519 --outform pem > ${ED25519_KEY} +pki --self --type ed25519 --in ${ED25519_KEY} \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan Ed25519 Root CA" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.1" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.2" \ + --outform pem > ${ED25519_CERT} + +# Put a copy in the swanctl/net2net-ed25519 scenario +TEST="${TEST_DIR}/swanctl/net2net-ed25519" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca +cp ${ED25519_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509ca +cp ${ED25519_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509ca + +# Generate a sun Ed25519 certificate +SUN_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8/sunKey.pem" +SUN_CERT="${TEST}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +CN="sun.strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 +pki --gen --type ed25519 --outform pem > ${SUN_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.2" --flag "serverAuth" \ + --crl ${ED25519_CDP} --outform pem > ${SUN_CERT} +cp ${SUN_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +# Generate a moon Ed25519 certificate +MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8/moonKey.pem" +MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +pki --gen --type ed25519 --outform pem > ${MOON_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.1" --flag "serverAuth" \ + --crl ${ED25519_CDP} --outform pem > ${MOON_CERT} +cp ${MOON_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +# Put a copy in the botan/net2net-ed25519 scenario +TEST="${TEST_DIR}/botan/net2net-ed25519" +cd ${TEST}/hosts/moon/${SWANCTL_DIR} +mkdir -p pkcs8 x509 x509ca +cp ${MOON_KEY} pkcs8 +cp ${MOON_CERT} x509 +cp ${ED25519_CERT} x509ca +cd ${TEST}/hosts/sun/${SWANCTL_DIR} +mkdir -p pkcs8 x509 x509ca +cp ${SUN_KEY} pkcs8 +cp ${SUN_CERT} x509 +cp ${ED25519_CERT} x509ca + +# Put a copy in the ikev2/net2net-ed25519 scenario +TEST="${TEST_DIR}/ikev2/net2net-ed25519" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR} +cd ${TEST}/hosts/moon/${IPSEC_DIR} +mkdir -p cacerts certs private +cp ${MOON_KEY} private +cp ${MOON_CERT} certs +cp ${ED25519_CERT} cacerts +mkdir -p ${TEST}/hosts/sun/${IPSEC_DIR} +cd ${TEST}/hosts/sun/${IPSEC_DIR} +mkdir -p cacerts certs private +cp ${SUN_KEY} private +cp ${SUN_CERT} certs +cp ${ED25519_CERT} cacerts + +# Put a copy in the swanctl/rw-ed25519-certpol scenario +TEST="${TEST_DIR}/swanctl/rw-ed25519-certpol" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${MOON_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs8 +cp ${MOON_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 + +for h in moon carol dave +do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${ED25519_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca +done + +# Generate a carol Ed25519 certificate +TEST_KEY="${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="03" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +pki --gen --type ed25519 --outform pem > ${TEST_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.1" --flag "clientAuth" \ + --crl ${ED25519_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +# Generate a dave Ed25519 certificate +TEST_KEY="${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8/daveKey.pem" +TEST_CERT="${TEST}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +CN="dave@strongswan.org" +SERIAL="04" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +pki --gen --type ed25519 --outform pem > ${TEST_KEY} +pki --issue --cakey ${ED25519_KEY} --cacert ${ED25519_CERT} --type ed25519 \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Ed25519, CN=${CN}" \ + --cert-policy "1.3.6.1.4.1.36906.1.1.2" --flag "clientAuth" \ + --crl ${ED25519_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${ED25519_DIR}/certs/${SERIAL}.pem + +################################################################################ +# strongSwan Monster Root CA # +################################################################################ + +# Generate strongSwan Monster Root CA +pki --gen --type rsa --size ${MONSTER_CA_RSA_SIZE} --outform pem > ${MONSTER_KEY} +pki --self --type rsa --in ${MONSTER_KEY} \ + --not-before "01.05.09 15:00:00" --not-after "01.05.59 15:00:00" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan Monster CA" \ + --outform pem > ${MONSTER_CERT} + +# Put a copy in the ikev2/after-2038-certs scenario +TEST="${TEST_DIR}/ikev2/after-2038-certs" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts +cp ${MONSTER_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/cacerts +cp ${MONSTER_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/cacerts + +# Generate a moon Monster certificate +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.pem" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.pem" +CN="moon.strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ + --in ${TEST_KEY} --san ${CN} \ + --not-before "01.05.09 15:00:00" --not-after "01.05.39 15:00:00" - \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Monster, CN=${CN}" \ + --crl ${MONSTER_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${MONSTER_DIR}/certs/${SERIAL}.pem + +# Generate a carol Monster certificate +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.pem" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.pem" +CN="carol@strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type rsa --size ${MONSTER_EE_RSA_SIZE} --outform pem > ${TEST_KEY} +pki --issue --cakey ${MONSTER_KEY} --cacert ${MONSTER_CERT} --type rsa \ + --in ${TEST_KEY} --san ${CN} \ + --not-before "01.05.09 15:00:00" --not-after "01.05.39 15:00:00" - \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=Monster, CN=${CN}" \ + --crl ${MONSTER_CDP} --outform pem > ${TEST_CERT} +cp ${TEST_CERT} ${MONSTER_DIR}/certs/${SERIAL}.pem + +################################################################################ +# Bliss CA # +################################################################################ + +# Generate BLISS Root CA with 192 bit security strength +pki --gen --type bliss --size 4 > ${BLISS_KEY} +pki --self --type bliss --in ${BLISS_KEY} --digest sha3_512 \ + --not-before "${START}" --not-after "${CA_END}" --ca \ + --dn "C=CH, O=${PROJECT}, CN=strongSwan BLISS Root CA" > ${BLISS_CERT} + +# Put a copy in the following scenarios +for t in rw-newhope-bliss rw-ntru-bliss +do + TEST="${TEST_DIR}/ikev2/${t}" + for h in moon carol dave + do + mkdir -p ${TEST}/hosts/${h}/${IPSEC_DIR}/cacerts + cp ${BLISS_CERT} ${TEST}/hosts/${h}/${IPSEC_DIR}/cacerts + done +done + +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +for h in moon carol dave +do + mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca + cp ${BLISS_CERT} ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca +done + +# Generate a carol BLISS certificate with 128 bit security strength +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +TEST_KEY="${TEST}/hosts/carol/${IPSEC_DIR}/private/carolKey.der" +TEST_CERT="${TEST}/hosts/carol/${IPSEC_DIR}/certs/carolCert.der" +CN="carol@strongswan.org" +SERIAL="01" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +pki --gen --type bliss --size 1 > ${TEST_KEY} +pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS I, CN=${CN}" \ + --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} +cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/carol/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/carol/${IPSEC_DIR}/private +cp ${TEST_CERT} ${TEST}/hosts/carol/${IPSEC_DIR}/certs + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss +mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/carol/${SWANCTL_DIR}/bliss +cp ${TEST_CERT} ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 + +# Generate a dave BLISS certificate with 160 bit security strength +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +TEST_KEY="${TEST}/hosts/dave/${IPSEC_DIR}/private/daveKey.der" +TEST_CERT="${TEST}/hosts/dave/${IPSEC_DIR}/certs/daveCert.der" +CN="dave@strongswan.org" +SERIAL="02" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs +pki --gen --type bliss --size 3 > ${TEST_KEY} +pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS III, CN=${CN}" \ + --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} +cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/dave/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/dave/${IPSEC_DIR}/private/ +cp ${TEST_CERT} ${TEST}/hosts/dave/${IPSEC_DIR}/certs/ + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss +mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/dave/${SWANCTL_DIR}/bliss/ +cp ${TEST_CERT} ${TEST}/hosts/dave/${SWANCTL_DIR}/x509/ + +# Generate a moon BLISS certificate with 192 bit security strength +TEST="${TEST_DIR}/ikev2/rw-newhope-bliss" +TEST_KEY="${TEST}/hosts/moon/${IPSEC_DIR}/private/moonKey.der" +TEST_CERT="${TEST}/hosts/moon/${IPSEC_DIR}/certs/moonCert.der" +CN="moon.strongswan.org" +SERIAL="03" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +pki --gen --type bliss --size 4 > ${TEST_KEY} +pki --issue --cakey ${BLISS_KEY} --cacert ${BLISS_CERT} --type bliss \ + --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ + --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=BLISS IV, CN=${CN}" \ + --crl ${BLISS_CDP} --digest sha3_512 > ${TEST_CERT} +cp ${TEST_CERT} ${BLISS_DIR}/certs/${SERIAL}.der + +# Put a copy in the ikev2/rw-ntru-bliss scenario +TEST="${TEST_DIR}/ikev2/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/private +mkdir -p ${TEST}/hosts/moon/${IPSEC_DIR}/certs +cp ${TEST_KEY} ${TEST}/hosts/moon/${IPSEC_DIR}/private/ +cp ${TEST_CERT} ${TEST}/hosts/moon/${IPSEC_DIR}/certs/ + +# Put a copy in the swanctl/rw-ntru-bliss scenario +TEST="${TEST_DIR}/swanctl/rw-ntru-bliss" +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss +mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 +cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/bliss/ +cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509/ + +################################################################################ +# SQL Data # +################################################################################ + +CA_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CA_KEY}` +CA_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${CA_KEY}` +CA_CERT_HEX=`cat ${CA_CERT_DER} | hexdump -v -e '/1 "%02x"'` +CA_CERT_PEM_HEX=`cat ${CA_CERT} | hexdump -v -e '/1 "%02x"'` +# +MOON_CERT="${DIR}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" +MOON_KEY="${CA_DIR}/keys/moonKey.der" +MOON_KEY_PEM="${DIR}/hosts/moon/${SWANCTL_DIR}/rsa/moonKey.pem" +MOON_KEY_PEM_HEX=`cat ${MOON_KEY_PEM} | hexdump -v -e '/1 "%02x"'` +MOON_KEY_HEX=`cat ${MOON_KEY} | hexdump -v -e '/1 "%02x"'` +MOON_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${MOON_KEY}` +MOON_PUB_HEX=`pki --pub --type rsa --in ${MOON_KEY} | hexdump -v -e '/1 "%02x"'` +MOON_CERT_HEX=`openssl x509 -in ${MOON_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +MOON_CERT_PEM_HEX=`cat ${MOON_CERT} | hexdump -v -e '/1 "%02x"'` +# +SUN_CERT="${DIR}/hosts/sun/${SWANCTL_DIR}/x509/sunCert.pem" +SUN_KEY="${CA_DIR}/keys/sunKey.der" +SUN_KEY_PEM="${DIR}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" +SUN_KEY_PEM_HEX=`cat ${SUN_KEY_PEM} | hexdump -v -e '/1 "%02x"'` +SUN_KEY_HEX=`cat ${SUN_KEY} | hexdump -v -e '/1 "%02x"'` +SUN_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${SUN_KEY}` +SUN_CERT_HEX=`openssl x509 -in ${SUN_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +SUN_CERT_PEM_HEX=`cat ${SUN_CERT} | hexdump -v -e '/1 "%02x"'` +# +CAROL_CERT="${DIR}/hosts/carol/${SWANCTL_DIR}/x509/carolCert.pem" +CAROL_KEY="${CA_DIR}/keys/carolKey.der" +CAROL_KEY_HEX=`cat ${CAROL_KEY} | hexdump -v -e '/1 "%02x"'` +CAROL_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CAROL_KEY}` +CAROL_PUB_HEX=`pki --pub --type rsa --in ${CAROL_KEY} | hexdump -v -e '/1 "%02x"'` +CAROL_CERT_HEX=`openssl x509 -in ${CAROL_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +DAVE_CERT="${DIR}/hosts/dave/${SWANCTL_DIR}/x509/daveCert.pem" +DAVE_KEY="${CA_DIR}/keys/daveKey.der" +DAVE_KEY_HEX=`cat ${DAVE_KEY} | hexdump -v -e '/1 "%02x"'` +DAVE_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${DAVE_KEY}` +DAVE_PUB_HEX=`pki --pub --type rsa --in ${DAVE_KEY} | hexdump -v -e '/1 "%02x"'` +DAVE_CERT_HEX=`openssl x509 -in ${DAVE_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +ALICE_CERT="${DIR}/hosts/alice/${SWANCTL_DIR}/x509/aliceCert.pem" +ALICE_KEY="${CA_DIR}/keys/aliceKey.der" +ALICE_KEY_HEX=`cat ${ALICE_KEY} | hexdump -v -e '/1 "%02x"'` +ALICE_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${ALICE_KEY}` +ALICE_CERT_HEX=`openssl x509 -in ${ALICE_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +VENUS_CERT="${DIR}/hosts/venus/${SWANCTL_DIR}/x509/venusCert.pem" +VENUS_KEY="${CA_DIR}/keys/venusKey.der" +VENUS_KEY_HEX=`cat ${VENUS_KEY} | hexdump -v -e '/1 "%02x"'` +VENUS_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${VENUS_KEY}` +VENUS_CERT_HEX=`openssl x509 -in ${VENUS_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +RESEARCH_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${RESEARCH_KEY}` +RESEARCH_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${RESEARCH_KEY}` +RESEARCH_CERT_HEX=`cat ${RESEARCH_CERT_DER} | hexdump -v -e '/1 "%02x"'` +# +CAROL_R_CERT="${RESEARCH_DIR}/certs/01.pem" +CAROL_R_KEY="${RESEARCH_DIR}/keys/01.der" +CAROL_R_KEY_HEX=`cat ${CAROL_R_KEY} | hexdump -v -e '/1 "%02x"'` +CAROL_R_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${CAROL_R_KEY}` +CAROL_R_CERT_HEX=`openssl x509 -in ${CAROL_R_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +SALES_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${SALES_KEY}` +SALES_SPKI_HEX=`pki --keyid --type rsa --format hex --id spki --in ${SALES_KEY}` +SALES_CERT_HEX=`cat ${SALES_CERT_DER} | hexdump -v -e '/1 "%02x"'` +# +DAVE_S_CERT="${SALES_DIR}/certs/01.pem" +DAVE_S_KEY="${SALES_DIR}/keys/01.der" +DAVE_S_KEY_HEX=`cat ${DAVE_S_KEY} | hexdump -v -e '/1 "%02x"'` +DAVE_S_SPK_HEX=`pki --keyid --type rsa --format hex --id spk --in ${DAVE_S_KEY}` +DAVE_S_CERT_HEX=`openssl x509 -in ${DAVE_S_CERT} -outform der | hexdump -v -e '/1 "%02x"'` +# +for t in ip-pool-db ip-pool-db-expired ip-pool-db-restart ip-split-pools-db \ + ip-split-pools-db-restart multi-level-ca rw-cert rw-psk-rsa-split \ + rw-psk-ipv4 rw-psk-ipv6 rw-rsa rw-rsa-keyid +do + for h in carol dave moon + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ + -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ + -e "s/MOON_PUB_HEX/${MOON_PUB_HEX}/g" \ + -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ + -e "s/CAROL_KEY_HEX/${CAROL_KEY_HEX}/g" \ + -e "s/CAROL_SPK_HEX/${CAROL_SPK_HEX}/g" \ + -e "s/CAROL_PUB_HEX/${CAROL_PUB_HEX}/g" \ + -e "s/CAROL_CERT_HEX/${CAROL_CERT_HEX}/g" \ + -e "s/DAVE_KEY_HEX/${DAVE_KEY_HEX}/g" \ + -e "s/DAVE_SPK_HEX/${DAVE_SPK_HEX}/g" \ + -e "s/DAVE_PUB_HEX/${DAVE_PUB_HEX}/g" \ + -e "s/DAVE_CERT_HEX/${DAVE_CERT_HEX}/g" \ + -e "s/RESEARCH_SPK_HEX/${RESEARCH_SPK_HEX}/g" \ + -e "s/RESEARCH_SPKI_HEX/${RESEARCH_SPKI_HEX}/g" \ + -e "s/RESEARCH_CERT_HEX/${RESEARCH_CERT_HEX}/g" \ + -e "s/CAROL_R_KEY_HEX/${CAROL_R_KEY_HEX}/g" \ + -e "s/CAROL_R_SPK_HEX/${CAROL_R_SPK_HEX}/g" \ + -e "s/CAROL_R_CERT_HEX/${CAROL_R_CERT_HEX}/g" \ + -e "s/SALES_SPK_HEX/${SALES_SPK_HEX}/g" \ + -e "s/SALES_SPKI_HEX/${SALES_SPKI_HEX}/g" \ + -e "s/SALES_CERT_HEX/${SALES_CERT_HEX}/g" \ + -e "s/DAVE_S_KEY_HEX/${DAVE_S_KEY_HEX}/g" \ + -e "s/DAVE_S_SPK_HEX/${DAVE_S_SPK_HEX}/g" \ + -e "s/DAVE_S_CERT_HEX/${DAVE_S_CERT_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done +# +for t in rw-eap-aka-rsa +do + for h in carol moon + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ + -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ + -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done +# +for t in net2net-cert net2net-psk net2net-route-pem net2net-start-pem +do + for h in moon sun + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/CA_CERT_PEM_HEX/${CA_CERT_PEM_HEX}/g" \ + -e "s/MOON_KEY_PEM_HEX/${MOON_KEY_PEM_HEX}/g" \ + -e "s/MOON_KEY_HEX/${MOON_KEY_HEX}/g" \ + -e "s/MOON_SPK_HEX/${MOON_SPK_HEX}/g" \ + -e "s/MOON_CERT_HEX/${MOON_CERT_HEX}/g" \ + -e "s/MOON_CERT_PEM_HEX/${MOON_CERT_PEM_HEX}/g" \ + -e "s/SUN_KEY_PEM_HEX/${SUN_KEY_PEM_HEX}/g" \ + -e "s/SUN_KEY_HEX/${SUN_KEY_HEX}/g" \ + -e "s/SUN_SPK_HEX/${SUN_SPK_HEX}/g" \ + -e "s/SUN_CERT_HEX/${SUN_CERT_HEX}/g" \ + -e "s/SUN_CERT_PEM_HEX/${SUN_CERT_PEM_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done +# +for t in shunt-policies-nat-rw +do + for h in alice venus sun + do + TEST_DATA="${TEST_DIR}/sql/${t}/hosts/${h}/${IPSEC_DIR}/data.sql" + sed -e "s/CA_SPK_HEX/${CA_SPK_HEX}/g" \ + -e "s/CA_SPKI_HEX/${CA_SPKI_HEX}/g" \ + -e "s/CA_CERT_HEX/${CA_CERT_HEX}/g" \ + -e "s/ALICE_KEY_HEX/${ALICE_KEY_HEX}/g" \ + -e "s/ALICE_SPK_HEX/${ALICE_SPK_HEX}/g" \ + -e "s/ALICE_CERT_HEX/${ALICE_CERT_HEX}/g" \ + -e "s/VENUS_KEY_HEX/${VENUS_KEY_HEX}/g" \ + -e "s/VENUS_SPK_HEX/${VENUS_SPK_HEX}/g" \ + -e "s/VENUS_CERT_HEX/${VENUS_CERT_HEX}/g" \ + -e "s/SUN_KEY_HEX/${SUN_KEY_HEX}/g" \ + -e "s/SUN_SPK_HEX/${SUN_SPK_HEX}/g" \ + -e "s/SUN_CERT_HEX/${SUN_CERT_HEX}/g" \ + ${TEST_DATA}.in > ${TEST_DATA} + done +done From 21280da9f53cec8e12f16ad2db9162e7cd592736 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 May 2019 16:06:28 +0200 Subject: [PATCH 15/20] testing: Fix ikev2/net2net-rsa scenario --- testing/scripts/build-certs-chroot | 16 +++++++++++++ testing/tests/ikev2/net2net-rsa/.gitignore | 1 + .../net2net-rsa/hosts/moon/etc/ipsec.conf | 24 ------------------- .../net2net-rsa/hosts/moon/etc/ipsec.conf.in | 24 +++++++++++++++++++ .../net2net-rsa/hosts/sun/etc/ipsec.conf | 22 ----------------- .../net2net-rsa/hosts/sun/etc/ipsec.conf.in | 22 +++++++++++++++++ 6 files changed, 63 insertions(+), 46 deletions(-) create mode 100644 testing/tests/ikev2/net2net-rsa/.gitignore delete mode 100644 testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf create mode 100644 testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf.in delete mode 100644 testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf create mode 100644 testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf.in diff --git a/testing/scripts/build-certs-chroot b/testing/scripts/build-certs-chroot index 2bf717df5..6293503be 100755 --- a/testing/scripts/build-certs-chroot +++ b/testing/scripts/build-certs-chroot @@ -1874,3 +1874,19 @@ do ${TEST_DATA}.in > ${TEST_DATA} done done + +################################################################################ +# Raw RSA keys # +################################################################################ + +MOON_PUB_DNS=`pki --pub --type rsa --outform dnskey --in ${MOON_KEY}` +# +SUN_PUB_DNS=`pki --pub --type rsa --outform dnskey --in ${SUN_KEY}` +# +for h in moon sun +do + TEST_DATA="${TEST_DIR}/ikev2/net2net-rsa/hosts/${h}/etc/ipsec.conf" + sed -e "s|MOON_PUB_DNS|${MOON_PUB_DNS}|g" \ + -e "s|SUN_PUB_DNS|${SUN_PUB_DNS}|g" \ + ${TEST_DATA}.in > ${TEST_DATA} +done diff --git a/testing/tests/ikev2/net2net-rsa/.gitignore b/testing/tests/ikev2/net2net-rsa/.gitignore new file mode 100644 index 000000000..dad9a7da5 --- /dev/null +++ b/testing/tests/ikev2/net2net-rsa/.gitignore @@ -0,0 +1 @@ +ipsec.conf diff --git a/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf deleted file mode 100644 index c0ee06240..000000000 --- a/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf +++ /dev/null @@ -1,24 +0,0 @@ -# /etc/ipsec.conf - strongSwan IPsec configuration file - -config setup - -conn %default - ikelifetime=60m - keylife=20m - rekeymargin=3m - keyingtries=1 - keyexchange=ikev2 - -conn net-net - left=PH_IP_MOON - leftsubnet=10.1.0.0/16 - leftid=@moon.strongswan.org - leftsigkey=dns:0sAQN+mkeECF5Bm7XnDkkkfmgny/TZndTkN1XzFZWB7nJroM3cTk3zMtdSPX8hY9GQxVGWSsmUBq7mGA5Qx39JpRNpyzxW7wRcMbwqDquG1PRfblLzV1ixdXOGSLUNaXonqDI/h5fCkqTuZtLbE4q3Pf4PmQAwzWVWaTZQ1gXXqUqKlN6218Hm2vbvNRE/CBHuFMmaCz11jckvaPvcqBLZzRTx9b/Mi+qD6xT7k9RpYHmtaGCJ95ed1bY6SZkapgHWu88/3M6bxCzD0KOA3oFbwlkHkFyaGWFB2+fc7L6BfYq0wr/d84tQdOxEn3BwLTrVKo7+6AxDrMi0I+blD2nd9cxj - leftauth=pubkey - leftfirewall=yes - right=PH_IP_SUN - rightsubnet=10.2.0.0/16 - rightid=@sun.strongswan.org - rightsigkey=dns:0sAQOiSuR9e/WMZFOxK3IdaFBOT2DGoObFDJURejqLcjMpmY2yVbA9Lpc+AEGKxqjb37WG6sVo3fBCDBOAhgmMw9s0b6DTSeXaIQloqW1M8IC+xe1fT+F0BsW1ttaEN0WTF5H+J+a4/arYg4HyiA+sjoqHagnCVPM15Rm5mkmg913XmSCgtkenD4WUq+NfPLuOcggqTjHAAoGD0doswRa3sebyqHQNAb32PXW9ecKi9ExcPrdr5hR5uNXRMYGumBtoxcE6xEvCM/sPRK1hbyynixc5nfMQ5Ymb4mdCUotUGaCyKDa4pF58sYgP6xpd/HXMXGdRP+KxqA4sfes46gp8UuJT - rightauth=pubkey - auto=add diff --git a/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf.in b/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf.in new file mode 100644 index 000000000..59e393070 --- /dev/null +++ b/testing/tests/ikev2/net2net-rsa/hosts/moon/etc/ipsec.conf.in @@ -0,0 +1,24 @@ +# /etc/ipsec.conf - strongSwan IPsec configuration file + +config setup + +conn %default + ikelifetime=60m + keylife=20m + rekeymargin=3m + keyingtries=1 + keyexchange=ikev2 + +conn net-net + left=PH_IP_MOON + leftsubnet=10.1.0.0/16 + leftid=@moon.strongswan.org + leftsigkey="dns:0sMOON_PUB_DNS" + leftauth=pubkey + leftfirewall=yes + right=PH_IP_SUN + rightsubnet=10.2.0.0/16 + rightid=@sun.strongswan.org + rightsigkey="dns:0sSUN_PUB_DNS" + rightauth=pubkey + auto=add diff --git a/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf b/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf deleted file mode 100644 index b089e9f48..000000000 --- a/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf +++ /dev/null @@ -1,22 +0,0 @@ -# /etc/ipsec.conf - strongSwan IPsec configuration file - -config setup - -conn %default - ikelifetime=60m - keylife=20m - rekeymargin=3m - keyingtries=1 - keyexchange=ikev2 - -conn net-net - left=PH_IP_SUN - leftsubnet=10.2.0.0/16 - leftid=@sun.strongswan.org - leftsigkey=dns:0sAQOiSuR9e/WMZFOxK3IdaFBOT2DGoObFDJURejqLcjMpmY2yVbA9Lpc+AEGKxqjb37WG6sVo3fBCDBOAhgmMw9s0b6DTSeXaIQloqW1M8IC+xe1fT+F0BsW1ttaEN0WTF5H+J+a4/arYg4HyiA+sjoqHagnCVPM15Rm5mkmg913XmSCgtkenD4WUq+NfPLuOcggqTjHAAoGD0doswRa3sebyqHQNAb32PXW9ecKi9ExcPrdr5hR5uNXRMYGumBtoxcE6xEvCM/sPRK1hbyynixc5nfMQ5Ymb4mdCUotUGaCyKDa4pF58sYgP6xpd/HXMXGdRP+KxqA4sfes46gp8UuJT - leftfirewall=yes - right=PH_IP_MOON - rightsubnet=10.1.0.0/16 - rightid=@moon.strongswan.org - rightsigkey=dns:0sAQN+mkeECF5Bm7XnDkkkfmgny/TZndTkN1XzFZWB7nJroM3cTk3zMtdSPX8hY9GQxVGWSsmUBq7mGA5Qx39JpRNpyzxW7wRcMbwqDquG1PRfblLzV1ixdXOGSLUNaXonqDI/h5fCkqTuZtLbE4q3Pf4PmQAwzWVWaTZQ1gXXqUqKlN6218Hm2vbvNRE/CBHuFMmaCz11jckvaPvcqBLZzRTx9b/Mi+qD6xT7k9RpYHmtaGCJ95ed1bY6SZkapgHWu88/3M6bxCzD0KOA3oFbwlkHkFyaGWFB2+fc7L6BfYq0wr/d84tQdOxEn3BwLTrVKo7+6AxDrMi0I+blD2nd9cxj - auto=add diff --git a/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf.in b/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf.in new file mode 100644 index 000000000..f2076c04e --- /dev/null +++ b/testing/tests/ikev2/net2net-rsa/hosts/sun/etc/ipsec.conf.in @@ -0,0 +1,22 @@ +# /etc/ipsec.conf - strongSwan IPsec configuration file + +config setup + +conn %default + ikelifetime=60m + keylife=20m + rekeymargin=3m + keyingtries=1 + keyexchange=ikev2 + +conn net-net + left=PH_IP_SUN + leftsubnet=10.2.0.0/16 + leftid=@sun.strongswan.org + leftsigkey="dns:0sSUN_PUB_DNS" + leftfirewall=yes + right=PH_IP_MOON + rightsubnet=10.1.0.0/16 + rightid=@moon.strongswan.org + rightsigkey="dns:0sMOON_PUB_DNS" + auto=add From 532060c0fa18f89e3969c7258e4827f95d5fdab0 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 May 2019 18:34:49 +0200 Subject: [PATCH 16/20] pki: Plugins to load may be defined via PKI_PLUGINS env variable --- src/pki/pki.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/src/pki/pki.c b/src/pki/pki.c index d03e96f9b..bb6b278d4 100644 --- a/src/pki/pki.c +++ b/src/pki/pki.c @@ -427,6 +427,8 @@ static void remove_callback() */ int main(int argc, char *argv[]) { + char *plugins; + atexit(library_deinit); if (!library_init(NULL, "pki")) { @@ -438,8 +440,12 @@ int main(int argc, char *argv[]) fprintf(stderr, "integrity check of pki failed\n"); exit(SS_RC_DAEMON_INTEGRITY); } - if (!lib->plugins->load(lib->plugins, - lib->settings->get_str(lib->settings, "pki.load", PLUGINS))) + plugins = getenv("PKI_PLUGINS"); + if (!plugins) + { + plugins = lib->settings->get_str(lib->settings, "pki.load", PLUGINS); + } + if (!lib->plugins->load(lib->plugins, plugins)) { exit(SS_RC_INITIALIZATION_FAILED); } From ac66ca25f983c4a3acbc50e57e947f626dbb507d Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 May 2019 19:07:51 +0200 Subject: [PATCH 17/20] testing: Use custom plugin configuration to build SHA-3 CA --- testing/scripts/build-certs-chroot | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/testing/scripts/build-certs-chroot b/testing/scripts/build-certs-chroot index 6293503be..36cb61779 100755 --- a/testing/scripts/build-certs-chroot +++ b/testing/scripts/build-certs-chroot @@ -1324,8 +1324,14 @@ cp ${TEST_CERT} ${RFC3779_DIR}/certs/${SERIAL}.pem # strongSwan SHA3-RSA Root CA # ################################################################################ +# Use specific plugin configuration to issue certificates with SHA-3 signatures +# as not all crypto plugins support them. To avoid entropy issues use the +# default plugins to generate the keys. +SHA3_PKI_PLUGINS="gmp pem pkcs1 random sha1 sha3 x509" + # Generate strongSwan SHA3-RSA Root CA pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SHA3_RSA_KEY} +PKI_PLUGINS="${SHA3_PKI_PLUGINS}" \ pki --self --type rsa --in ${SHA3_RSA_KEY} --digest sha3_256 \ --not-before "${START}" --not-after "${CA_END}" --ca \ --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=strongSwan Root CA" \ @@ -1346,6 +1352,7 @@ SERIAL="01" mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${SUN_KEY} +PKI_PLUGINS="${SHA3_PKI_PLUGINS}" \ pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${SUN_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ @@ -1360,6 +1367,7 @@ SERIAL="02" mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${MOON_KEY} +PKI_PLUGINS="${SHA3_PKI_PLUGINS}" \ pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${MOON_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ @@ -1394,6 +1402,7 @@ SERIAL="03" mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/rsa mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +PKI_PLUGINS="${SHA3_PKI_PLUGINS}" \ pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ @@ -1408,6 +1417,7 @@ SERIAL="04" mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/rsa mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 pki --gen --type rsa --size ${RSA_SIZE} --outform pem > ${TEST_KEY} +PKI_PLUGINS="${SHA3_PKI_PLUGINS}" \ pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --in ${TEST_KEY} --not-before "${START}" --not-after "${EE_END}" --san ${CN} \ --serial ${SERIAL} --dn "C=CH, O=${PROJECT}, OU=SHA-3, CN=${CN}" \ From 287149cbf952b610fce0012696903a899ff1f20e Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 May 2019 19:20:04 +0200 Subject: [PATCH 18/20] testing: Automatically build guest images after generating certificates This (re-)generates the CRLs on winnetou. --- testing/scripts/build-certs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/testing/scripts/build-certs b/testing/scripts/build-certs index d473cdcec..464b69c32 100755 --- a/testing/scripts/build-certs +++ b/testing/scripts/build-certs @@ -39,3 +39,10 @@ do_on_exit umount $LOOPDIR/root/testing log_action "Building certificates" execute_chroot "/root/testing/scripts/build-certs-chroot" + +# rebuild the guest images to generate the CRLs on winnetou +if [ -z "$2" ]; then + # cleanup before mounting guest images + on_exit + $DIR/scripts/build-guestimages +fi From d3f678c08f52549fe0eece1c3cf37838c7901834 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 May 2019 19:21:21 +0200 Subject: [PATCH 19/20] testing: Build certificates before guests after building strongSwan If the script is run on a clean working copy, building the guests will fail if the certificates don't exist. --- testing/scripts/build-strongswan | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/testing/scripts/build-strongswan b/testing/scripts/build-strongswan index 2214a57d1..d872e7285 100755 --- a/testing/scripts/build-strongswan +++ b/testing/scripts/build-strongswan @@ -88,9 +88,15 @@ cp $RECPDIR/$RECIPE $SHAREDDIR/build-strongswan log_action "Installing from recipe $RECIPE" execute_chroot "make SRCDIR=/root/strongswan BUILDDIR=/root/shared/build-strongswan -f /root/shared/build-strongswan/$RECIPE" -# requild the guest images if we modified the root image +# rebuild the guest images after we modified the root image if [ -z "$2" ]; then # cleanup before mounting guest images on_exit - $DIR/build-guestimages + # building the guest images without certificates fails on winnetou + if [ ! -f "$DIR/../hosts/winnetou/etc/ca/strongswanCert.pem" ]; then + # this also re-builds the guest images + $DIR/build-certs + else + $DIR/build-guestimages + fi fi From 27f6d37544613e8d813eae908fc192d6423758b6 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Wed, 8 May 2019 14:36:27 +0200 Subject: [PATCH 20/20] testing: Return an error if any command in the certificate build script fails --- testing/scripts/build-certs-chroot | 2 ++ 1 file changed, 2 insertions(+) diff --git a/testing/scripts/build-certs-chroot b/testing/scripts/build-certs-chroot index 36cb61779..ed8de79ad 100755 --- a/testing/scripts/build-certs-chroot +++ b/testing/scripts/build-certs-chroot @@ -1,5 +1,7 @@ #!/bin/bash +set -o errexit + echo "Building certificates" # Disable leak detective when using pki as it produces warnings in tzset