testing: Add ikev2/reauth-mbb-revoked scenario

This commit is contained in:
Tobias Brunner
2016-03-10 11:07:15 +01:00
parent d163aa5eaf
commit dc57c1b817
9 changed files with 105 additions and 0 deletions
@@ -0,0 +1,10 @@
winnetou::cp /var/www/strongswan.crl /var/www/strongswan.crl.bak
winnetou::cp /var/www/strongswan_moon_revoked.crl /var/www/strongswan.crl
carol::ipsec purgecrls
moon:: ipsec status 2> /dev/null::rw\[1]: ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
carol::ipsec status 2> /dev/null::home\[1]: ESTABLISHED.*[email protected].*moon.strongswan.org::YES
carol::sleep 6
carol::cat /var/log/daemon.log::certificate was revoked.*key compromise::YES
carol::cat /var/log/daemon.log::peer certificate verification failed, deleting SA::YES
moon:: ipsec status 2> /dev/null::rw\[2]: ESTABLISHED.*moon.strongswan.org.*[email protected]::NO
carol::ipsec status 2> /dev/null::home\[2]: ESTABLISHED.*[email protected].*moon.strongswan.org::NO