denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

do not send certificate requests in EAP-ONLY scenarios

Browse Source
This commit is contained in:
Andreas Steffen
2010-10-14 21:10:03 +02:00
parent 260d056170
commit 8d01a80819
6 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/rw-eap-tnc-block/evaltest.dat
+1 -1
View File
@@ -6,7 +6,7 @@ dave::cat /var/log/daemon.log::TNCCS-Recommendation.*none::YES
dave::cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.0/16::NO
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::EAP method EAP_TTLS failed for peer [email protected]::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_VENUS: icmp_seq=1::NO
testing/tests/ikev2/rw-eap-tnc-block/hosts/carol/etc/ipsec.conf
+1
View File
@@ -18,5 +18,6 @@ conn home
leftfirewall=yes
right=PH_IP_MOON
[email protected]
rightsendcert=never
rightsubnet=10.1.0.0/16
auto=add
testing/tests/ikev2/rw-eap-tnc-block/hosts/dave/etc/ipsec.conf
+1
View File
@@ -18,5 +18,6 @@ conn home
leftfirewall=yes
right=PH_IP_MOON
[email protected]
rightsendcert=never
rightsubnet=10.1.0.0/16
auto=add
testing/tests/ikev2/rw-eap-tnc/evaltest.dat
+1 -1
View File
@@ -7,7 +7,7 @@ dave::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established ::
dave::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
dave::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
moon::cat /var/log/daemon.log::added group membership 'allow'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::cat /var/log/daemon.log::added group membership 'isolate'::YES
moon::cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
moon::ipsec statusall::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
testing/tests/ikev2/rw-eap-tnc/hosts/carol/etc/ipsec.conf
+1
View File
@@ -18,5 +18,6 @@ conn home
leftfirewall=yes
right=PH_IP_MOON
[email protected]
rightsendcert=never
rightsubnet=10.1.0.0/16
auto=add
testing/tests/ikev2/rw-eap-tnc/hosts/dave/etc/ipsec.conf
+1
View File
@@ -18,5 +18,6 @@ conn home
leftfirewall=yes
right=PH_IP_MOON
[email protected]
rightsendcert=never
rightsubnet=10.1.0.0/16
auto=add