denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

upgraded gcrypt-ikev1 scenarios to 5.0.0

Browse Source
This commit is contained in:
Andreas Steffen
2012-05-06 09:25:31 +02:00
parent 04d7b1725d
commit 949d08dfca
32 changed files with 45 additions and 351 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/gcrypt-ikev1/alg-serpent/evaltest.dat
+9 -7
View File
@@ -1,11 +1,13 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ipsec statusall::IKE proposal: SERPENT_CBC_256/HMAC_SHA2_512/MODP_4096::YES
moon::ipsec statusall::IKE proposal: SERPENT_CBC_256/HMAC_SHA2_512/MODP_4096::YES
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*[email protected].*moon.strongswan.org::YES
moon:: ipsec status 2> /dev/null::rw.*ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
carol::ipsec statusall 2> /dev/null::IKE proposal: SERPENT_CBC_256/HMAC_SHA2_512_256::YES
moon:: ipsec statusall 2> /dev/null::IKE proposal: SERPENT_CBC_256/HMAC_SHA2_512_256::YES
carol::ping -c 1 -s 120 -p deadbeef PH_IP_ALICE::128 bytes from PH_IP_ALICE: icmp_seq=1::YES
carol::ipsec statusall::ESP proposal: SERPENT_CBC_256/HMAC_SHA2_512::YES
moon::ipsec statusall::ESP proposal: SERPENT_CBC_256/HMAC_SHA2_512::YES
carol::ipsec statusall 2> /dev/null::SERPENT_CBC_256/HMAC_SHA2_512_256,::YES
moon:: ipsec statusall 2> /dev/null::SERPENT_CBC_256/HMAC_SHA2_512_256,::YES
carol::ip xfrm state::enc cbc(serpent)::YES
moon::ip xfrm state::enc cbc(serpent)::YES
moon:: ip xfrm state::enc cbc(serpent)::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP.*length 216::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP.*length 216::YES
testing/tests/gcrypt-ikev1/alg-serpent/hosts/carol/etc/ipsec.conf
+3 -6
View File
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -12,8 +9,8 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
ike=serpent256-sha2_512-modp4096!
esp=serpent256-sha2_512!
ike=serpent256-sha512-modp4096!
esp=serpent256-sha512!
conn home
left=PH_IP_CAROL
testing/tests/gcrypt-ikev1/alg-serpent/hosts/carol/etc/strongswan.conf
+3 -4
View File
@@ -1,11 +1,10 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = pem pkcs1 x509 gcrypt hmac curl kernel-netlink
charon {
load = curl pem pkcs1 gcrypt x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
send_vendor_id = yes
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
testing/tests/gcrypt-ikev1/alg-serpent/hosts/moon/etc/ipsec.conf
+3 -6
View File
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -12,8 +9,8 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
ike=serpent256-sha2_512-modp4096!
esp=serpent256-sha2_512!
ike=serpent256-sha512-modp4096!
esp=serpent256-sha512!
conn rw
left=PH_IP_MOON
testing/tests/gcrypt-ikev1/alg-serpent/hosts/moon/etc/strongswan.conf
+3 -4
View File
@@ -1,11 +1,10 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = pem pkcs1 x509 gcrypt hmac curl kernel-netlink
charon {
load = curl pem pkcs1 gcrypt x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
send_vendor_id = yes
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}