denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Fix race in tnc/tnccs-20-pdp-pt-tls scenario

Browse Source 
aacf84d837 ("testing: Add expect-connection calls for all tests and
hosts") removed the expect-connection call for the non-existing aaa
connection.  However, because the credentials were loaded asynchronously
via start-script the clients might have been connecting when the secrets
were not yet loaded.  As `swanctl --load-creds` is a synchronous call
this change avoids that issue without having to add a sleep or failing
expect-connection call.
This commit is contained in:
Tobias Brunner
2016-06-17 18:43:36 +02:00
parent 941ac92b95
commit c423d0e8a1
2 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/strongswan.conf
-3
View File
@@ -3,9 +3,6 @@
charon { charon {
load = random nonce pem pkcs1 x509 openssl revocation constraints curl vici socket-default kernel-netlink tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite load = random nonce pem pkcs1 x509 openssl revocation constraints curl vici socket-default kernel-netlink tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite
start-scripts {
creds = /usr/local/sbin/swanctl --load-creds
}
syslog { syslog {
auth { auth {
default = 0 default = 0
testing/tests/tnc/tnccs-20-pdp-pt-tls/pretest.dat
+1
View File
@@ -15,6 +15,7 @@ alice::rm /etc/swanctl/x509/aliceCert.pem
alice::rm /etc/swanctl/rsa/aliceKey.pem alice::rm /etc/swanctl/rsa/aliceKey.pem
alice::service apache2 start alice::service apache2 start
alice::service charon start alice::service charon start
alice::swanctl --load-creds
winnetou::ip route add 10.1.0.0/16 via 192.168.0.1 winnetou::ip route add 10.1.0.0/16 via 192.168.0.1
dave::ip route add 10.1.0.0/16 via 192.168.0.1 dave::ip route add 10.1.0.0/16 via 192.168.0.1
dave::cat /etc/pts/options dave::cat /etc/pts/options