- applied andreas's patch

- logger output improvements
  - testin gupdates
  - and a lot more
This commit is contained in:
Martin Willi
2006-05-18 06:02:28 +00:00
parent 1e93135408
commit b5e1560659
151 changed files with 348 additions and 203 deletions
+1
View File
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
+1
View File
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
+1
View File
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
+1
View File
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
+4 -3
View File
@@ -6,13 +6,14 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
left=192.168.0.1
left=PH_IP_MOON
leftnexthop=%direct
leftcert=moonCert.pem
[email protected]
@@ -20,13 +21,13 @@ conn %default
conn net-net
leftsubnet=10.1.0.0/16
right=192.168.0.2
right=PH_IP_SUN
rightsubnet=10.2.0.0/16
[email protected]
auto=add
conn host-host
right=192.168.0.2
right=PH_IP_SUN
[email protected]
auto=add
+1
View File
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
+1
View File
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
+2 -2
View File
@@ -21,7 +21,7 @@ UMLTESTDIR=~/strongswan-testing
# Bzipped kernel sources
# (file extension .tar.bz2 required)
KERNEL=$UMLTESTDIR/linux-2.6.16.9.tar.bz2
KERNEL=$UMLTESTDIR/linux-2.6.16.16.tar.bz2
# Extract kernel version
KERNELVERSION=`basename $KERNEL .tar.bz2 | sed -e 's/linux-//'`
@@ -34,7 +34,7 @@ KERNELCONFIG=$UMLTESTDIR/.config-2.6.16
UMLPATCH=
# Bzipped source of strongSwan
STRONGSWAN=$UMLTESTDIR/strongswan-2.7.0.tar.bz2
STRONGSWAN=$UMLTESTDIR/strongswan-4.0.1.tar.bz2
# strongSwan compile options (use "yes" or "no")
USE_LIBCURL="yes"
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,7 +6,8 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
keylife=20m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=yes
cachecrls=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
cachecrls=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=0
strictcrlpolicy=no
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=0
strictcrlpolicy=no
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -15,7 +16,7 @@ conn %default
keyingtries=1
conn carol
left=192.168.0.1
left=PH_IP_MOON
leftnexthop=%direct
leftcert=selfCert.der
leftsendcert=never
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -7,6 +7,7 @@ config setup
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug="control crypt"
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
+1 -1
View File
@@ -1,5 +1,5 @@
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b>
is set up using the IKEv2 key exchange protocol. The authentication is based on
locally importerd <b>X.509 certificates</b>.
locally imported <b>X.509 certificates</b>.
In order to test the established tunnel, client <b>alice</b> behind gateway <b>moon</b>
pings client <b>bob</b> located behind gateway <b>sun</b>.
@@ -6,10 +6,10 @@ config setup
plutostart=no
conn net-net
left=192.168.0.1
left=PH_IP_MOON
leftcert=moonCert.pem
leftsubnet=10.1.0.0/16
right=192.168.0.2
right=PH_IP_SUN
rightcert=sunCert.pem
rightsubnet=10.2.0.0/16
keyexchange=ikev2
@@ -6,10 +6,10 @@ config setup
plutostart=no
conn net-net
left=192.168.0.2
left=PH_IP_SUN
leftcert=sunCert.pem
leftsubnet=10.2.0.0/16
right=192.168.0.1
right=PH_IP_MOON
rightcert=moonCert.pem
rightsubnet=10.1.0.0/16
keyexchange=ikev2
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -5,6 +5,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -5,6 +5,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
nocrsend=yes
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -4,6 +4,7 @@ version 2.0 # conforms to second version of ipsec.conf specification
config setup
plutodebug=control
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=yes
charonstart=no
ca strongswan
cacert=strongswanCert.pem
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m
@@ -6,6 +6,7 @@ config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
charonstart=no
conn %default
ikelifetime=60m

Some files were not shown because too many files have changed in this diff Show More