testing: Script building fresh certificates

testing/tests/ikev2/acert-inline/evaltest.dat

@@ -3,9 +3,9 @@ dave:: ipsec status 2> /dev/null::home.*ESTABLISHED.*[email protected].*moon.s
 moon:: ipsec status 2> /dev/null::rw\[1]: ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
 moon:: ipsec status 2> /dev/null::rw\[2]: ESTABLISHED.*moon.strongswan.org.*[email protected]::NO
 moon::cat /var/log/daemon.log::constraint check failed: group membership to 'sales' required::YES
-carol::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=Linux strongSwan, CN=strongSwan AA\"::YES
-dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=Linux strongSwan, CN=strongSwan AA\"::YES
-dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=Linux strongSwan, CN=expired AA\"::YES
+carol::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=strongSwan Project, CN=strongSwan Attribute Authority\"::YES
+dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=strongSwan Project, CN=strongSwan Attribute Authority\"::YES
+dave::cat /var/log/daemon.log::sending attribute certificate issued by \"C=CH, O=strongSwan Project, CN=strongSwan Legacy AA\"::YES
 dave::cat /var/log/daemon.log::received AUTHENTICATION_FAILED notify error::YES
 carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES
 dave:: ping -c 1 -W 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::NO

testing/tests/ikev2/acert-inline/posttest.dat

@@ -7,7 +7,7 @@ dave::iptables-restore < /etc/iptables.flush
 carol::rm /etc/ipsec.d/acerts/carol-sales.pem
 dave::rm /etc/ipsec.d/acerts/dave-expired-aa.pem
 dave::rm /etc/ipsec.d/acerts/dave-marketing.pem
-moon::rm /etc/ipsec.d/private/aa-expired.pem
-moon::rm /etc/ipsec.d/private/aa.pem
-moon::rm /etc/ipsec.d/aacerts/aa-expired.pem
-moon::rm /etc/ipsec.d/aacerts/aa.pem
+moon::rm /etc/ipsec.d/private/aaKey-expired.pem
+moon::rm /etc/ipsec.d/private/aaKey.pem
+moon::rm /etc/ipsec.d/aacerts/aaCert-expired.pem
+moon::rm /etc/ipsec.d/aacerts/aaCert.pem

testing/tests/ikev2/acert-inline/reissue.txt

@@ -1,23 +0,0 @@
-# Carols sales acert
-pki --acert \
-	--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
-	--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem --in \
-	../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \
-	--group sales -l 87600 -f pem \
-	> hosts/carol/etc/ipsec.d/acerts/carol-sales.pem
-
-# Daves marketing acert
-pki --acert \
-	--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
-	--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
-	--in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \
-	--group marketing -l 87600 -f pem
-	> hosts/dave/etc/ipsec.d/acerts/dave-marketing.pem
-
-# Daves sales acert from expired AA
-pki --acert \
-	--issuercert hosts/moon/etc/ipsec.d/aacerts/aa-expired.pem \
-	--issuerkey hosts/moon/etc/ipsec.d/private/aa-expired.pem \
-	--in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \
-	--group sales -l 87600 -f pem \
-	> hosts/dave/etc/ipsec.d/acerts/dave-expired-aa.pem