denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Speed up OCSP scenarios

Browse Source 
Don't make clients wait for the TCP connections to timeout by dropping
packets.  By rejecting them the OCSP requests fail immediately.
This commit is contained in:
Tobias Brunner
2015-11-09 15:18:35 +01:00
parent 0ee4a333a8
commit bb66b4d56b
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat
+1 -1
View File
@@ -1,4 +1,4 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
moon::ipsec start moon::ipsec start
carol::ipsec start carol::ipsec start
carol::expect-connection home carol::expect-connection home
testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat
+2 -2
View File
@@ -1,5 +1,5 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
moon::ipsec start moon::ipsec start
carol::ipsec start carol::ipsec start
carol::expect-connection home carol::expect-connection home
testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat
+1 -1
View File
@@ -1,4 +1,4 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
moon::ipsec start moon::ipsec start
carol::ipsec start carol::ipsec start
carol::expect-connection home carol::expect-connection home