denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Script building fresh certificates

Browse Source
This commit is contained in:
Andreas Steffen
2019-05-08 14:56:48 +02:00
committed by Tobias Brunner
parent 3ee352a691
commit 8db01c6a3f
164 changed files with 2064 additions and 690 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/rw-eap-tls-radius/evaltest.dat
+3 -3
View File
@@ -1,7 +1,7 @@
carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with RSA.* successful::YES
carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with RSA.* successful::YES
carol::cat /var/log/daemon.log::server requested EAP_TLS authentication::YES
carol::cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, CN=moon.strongswan.org' with EAP successful::YES
moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, [email protected]' with EAP successful::YES
carol::cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, CN=moon.strongswan.org' with EAP successful::YES
moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=strongSwan Project, OU=Research, [email protected]' with EAP successful::YES
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED::YES
carol::ipsec status 2> /dev/null::home.*ESTABLISHED::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES
testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/ipsec.conf
+2 -2
View File
@@ -13,8 +13,8 @@ conn home
leftauth=eap
leftfirewall=yes
right=PH_IP_MOON
rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org"
rightid="C=CH, O=strongSwan Project, CN=moon.strongswan.org"
rightsubnet=10.1.0.0/16
rightauth=pubkey
aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org"
aaa_identity="C=CH, O=strongSwan Project, CN=aaa.strongswan.org"
auto=add
testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/ipsec.conf
+1 -1
View File
@@ -15,7 +15,7 @@ conn rw-eap
leftcert=moonCert.pem
leftauth=pubkey
leftfirewall=yes
rightid="C=CH, O=Linux strongSwan, OU=Research, [email protected]"
rightid="C=CH, O=strongSwan Project, OU=Research, [email protected]"
rightauth=eap-radius
rightsendcert=never
right=%any