testing: Script building fresh certificates

This commit is contained in:
Andreas Steffen
2019-05-08 14:56:48 +02:00
committed by Tobias Brunner
parent 3ee352a691
commit 8db01c6a3f
164 changed files with 2064 additions and 690 deletions
@@ -1,7 +1,7 @@
This scenario is derived from <a href="../rw-cert"><b>ikev2/rw-cert</b></a>.
The gateway <b>moon</b> uses a 2048 bit RSA private key protected by <b>AES-128</b>
The gateway <b>moon</b> uses a 3072 bit RSA private key protected by <b>AES-128</b>
encryption whereas the roadwarriors <b>carol</b> and <b>dave</b> have an
<b>AES-192</b> and <b>AES-256</b> envelope, respectively.
<b>AES-192</b> and <b>AES-256</b> envelope, respectively.
The X.509 certificate of the gateway <b>moon</b> uses a <b>SHA-224</b> hash in
its signature whereas the certificates of the roadwarriors <b>carol</b>
and <b>dave</b> use <b>SHA-384</b> and <b>SHA-512</b>, respectively.