denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

the after-2038-certs scenario tests the year 2038 ASN.1 to time_t conversion workaround on 32 bit platforms

Browse Source
This commit is contained in:
Andreas Steffen
2009-03-28 15:08:47 +00:00
parent 0ad1a8daea
commit ab6923f28c
44 changed files with 1260 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev1/after-2038-certs/description.txt
+13
View File
@@ -0,0 +1,13 @@
The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
The authentication is based on <b>X.509 certificates</b> that are valid until
the year 2039 and are issued by a certification authority with a root ca
certificate valid until the year 2059. On 32-bit platforms, dates after
Jan 19 03:14:07 UTC 2038 cannot by represented by the time_t data type.
Thus if a time wrap-around occurs during ASN.1 to time_t conversions,
dates contained in the certificates are set to the maximum value,
i.e. to Jan 19 03:14:07 UTC 2038.
Upon the successful establishment of the IPsec tunnels, <b>leftfirewall=yes</b>
automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
In order to test both tunnel and firewall, <b>carol</b> ping the client <b>alice</b>
behind the gateway <b>moon</b>.