denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

upgraded gcrypt-ikev1 scenarios to 5.0.0

Browse Source
This commit is contained in:
Andreas Steffen
2012-05-06 09:25:31 +02:00
parent 04d7b1725d
commit 949d08dfca
32 changed files with 45 additions and 351 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/gcrypt-ikev1/alg-twofish/description.txt
+1 -1
View File
@@ -1,4 +1,4 @@
Roadwarrior <b>carol</b> proposes to gateway <b>moon</b> the strong cipher suite
<b>TWOFISH_CBC_256 / HMAC_SHA2_512 / MODP_4096</b> for the IKE protocol and
<b>TWOFISH_CBC_256 / HMAC_SHA2_512_256</b> for ESP packets. A ping from <b>carol</b> to
<b>TWOFISH_CBC_256 / HMAC_SHA2_512_256 </b> for ESP packets. A ping from <b>carol</b> to
<b>alice</b> successfully checks the established tunnel.
testing/tests/gcrypt-ikev1/alg-twofish/evaltest.dat
+9 -7
View File
@@ -1,11 +1,13 @@
carol::ipsec status::home.*STATE_QUICK_I2.*IPsec SA established::YES
moon::ipsec status::rw.*STATE_QUICK_R2.*IPsec SA established::YES
carol::ipsec statusall::IKE proposal: TWOFISH_CBC_256/HMAC_SHA2_512/MODP_4096::YES
moon::ipsec statusall::IKE proposal: TWOFISH_CBC_256/HMAC_SHA2_512/MODP_4096::YES
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*[email protected].*moon.strongswan.org::YES
moon:: ipsec status 2> /dev/null::rw.*ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
carol::ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES
moon:: ipsec status 2> /dev/null::rw.*INSTALLED, TUNNEL::YES
carol::ipsec statusall 2> /dev/null::IKE proposal: TWOFISH_CBC_256/HMAC_SHA2_512_256::YES
moon:: ipsec statusall 2> /dev/null::IKE proposal: TWOFISH_CBC_256/HMAC_SHA2_512_256::YES
carol::ping -c 1 -s 120 -p deadbeef PH_IP_ALICE::128 bytes from PH_IP_ALICE: icmp_seq=1::YES
carol::ipsec statusall::ESP proposal: TWOFISH_CBC_256/HMAC_SHA2_512::YES
moon::ipsec statusall::ESP proposal: TWOFISH_CBC_256/HMAC_SHA2_512::YES
carol::ipsec statusall 2> /dev/null::TWOFISH_CBC_256/HMAC_SHA2_512_256,::YES
moon:: ipsec statusall 2> /dev/null::TWOFISH_CBC_256/HMAC_SHA2_512_256,::YES
carol::ip xfrm state::enc cbc(twofish)::YES
moon::ip xfrm state::enc cbc(twofish)::YES
moon:: ip xfrm state::enc cbc(twofish)::YES
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP.*length 216::YES
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP.*length 216::YES
testing/tests/gcrypt-ikev1/alg-twofish/hosts/carol/etc/ipsec.conf
+3 -6
View File
@@ -1,10 +1,7 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
@@ -12,8 +9,8 @@ conn %default
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
ike=twofish256-sha2_512-modp4096!
esp=twofish256-sha2_512!
ike=twofish256-sha512-modp4096!
esp=twofish256-sha512!
conn home
left=PH_IP_CAROL
testing/tests/gcrypt-ikev1/alg-twofish/hosts/carol/etc/strongswan.conf
+3 -4
View File
@@ -1,11 +1,10 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = pem pkcs1 x509 gcrypt hmac curl kernel-netlink
charon {
load = curl pem pkcs1 gcrypt x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
send_vendor_id = yes
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
testing/tests/gcrypt-ikev1/alg-twofish/hosts/moon/etc/ipsec.conf
+4 -7
View File
@@ -1,19 +1,16 @@
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
plutostart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
ike=twofish256-sha2_512-modp4096!
esp=twofish256-sha2_512!
ike=twofish256-sha512-modp4096!
esp=twofish256-sha512!
conn rw
left=PH_IP_MOON
testing/tests/gcrypt-ikev1/alg-twofish/hosts/moon/etc/strongswan.conf
+3 -4
View File
@@ -1,11 +1,10 @@
# /etc/strongswan.conf - strongSwan configuration file
pluto {
load = pem pkcs1 x509 gcrypt hmac curl kernel-netlink
charon {
load = curl pem pkcs1 gcrypt x509 revocation hmac xcbc stroke kernel-netlink socket-default updown
send_vendor_id = yes
}
# pluto uses optimized DH exponent sizes (RFC 3526)
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
testing/tests/gcrypt-ikev1/alg-twofish/pretest.dat
+1 -1
View File
@@ -1,5 +1,5 @@
moon::echo 1 > /proc/sys/net/ipv4/ip_forward
carol::ipsec start
moon::ipsec start
carol::sleep 2
carol::sleep 2
carol::ipsec up home