From 2099a52618adec40a66f677362a2b4c13743c1db Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 18 Oct 2022 17:44:30 +0200 Subject: [PATCH 01/24] testing: Migrated ikev2 scenarios to new default plugins --- .../ikev2/acert-cached/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/acert-cached/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2/acert-cached/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/acert-fallback/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/acert-fallback/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/acert-inline/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/acert-inline/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2/acert-inline/hosts/moon/etc/strongswan.conf | 2 +- .../after-2038-certs/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/compress-nat/hosts/alice/etc/strongswan.conf | 2 +- .../ikev2/compress-nat/hosts/bob/etc/strongswan.conf | 2 +- .../ikev2/compress-nat/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2/compress/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2/compress/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/config-payload/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/config-payload/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/config-payload/hosts/moon/etc/strongswan.conf | 4 ++-- .../critical-extension/hosts/moon/etc/strongswan.conf | 2 +- .../critical-extension/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf | 4 ++-- .../crl-from-cache/hosts/carol/etc/swanctl/swanctl.conf | 2 ++ .../ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf | 4 ++-- .../crl-from-cache/hosts/moon/etc/swanctl/swanctl.conf | 4 +++- .../tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/crl-ldap/hosts/carol/etc/swanctl/swanctl.conf | 4 +++- .../tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/crl-ldap/hosts/moon/etc/swanctl/swanctl.conf | 2 ++ .../ikev2/crl-revoked/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/crl-revoked/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf | 4 ++-- .../dhcp-static-client-id/hosts/carol/etc/strongswan.conf | 4 ++-- .../dhcp-static-client-id/hosts/dave/etc/strongswan.conf | 4 ++-- .../dhcp-static-client-id/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/double-nat-net/hosts/alice/etc/strongswan.conf | 2 +- .../ikev2/double-nat-net/hosts/bob/etc/strongswan.conf | 2 +- .../ikev2/double-nat/hosts/alice/etc/strongswan.conf | 2 +- .../tests/ikev2/double-nat/hosts/bob/etc/strongswan.conf | 2 +- .../tests/ikev2/dpd-clear/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2/dpd-clear/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/dpd-restart/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/dpd-restart/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev2/dpd-trap/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/dpd-trap/hosts/carol/etc/swanctl/swanctl.conf | 3 ++- .../tests/ikev2/dpd-trap/hosts/moon/etc/strongswan.conf | 2 +- .../dynamic-initiator/hosts/carol/etc/strongswan.conf | 4 ++-- .../dynamic-initiator/hosts/dave/etc/strongswan.conf | 4 ++-- .../dynamic-initiator/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/force-udp-encap/hosts/alice/etc/strongswan.conf | 2 +- .../ikev2/force-udp-encap/hosts/sun/etc/strongswan.conf | 2 +- .../tests/ikev2/forecast/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2/forecast/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev2/forecast/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/host2host-ah/hosts/moon/etc/strongswan.conf | 4 ++-- .../host2host-ah/hosts/moon/etc/swanctl/swanctl.conf | 2 +- .../ikev2/host2host-ah/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/host2host-ah/hosts/sun/etc/swanctl/swanctl.conf | 2 +- .../ikev2/host2host-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/host2host-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../hosts/alice/etc/strongswan.conf | 2 +- .../hosts/sun/etc/strongswan.conf | 2 +- .../hosts/venus/etc/strongswan.conf | 2 +- .../hosts/alice/etc/strongswan.conf | 4 ++-- .../host2host-transport-nat/hosts/sun/etc/strongswan.conf | 4 ++-- .../hosts/venus/etc/strongswan.conf | 4 ++-- .../host2host-transport/hosts/moon/etc/strongswan.conf | 4 ++-- .../host2host-transport/hosts/sun/etc/strongswan.conf | 4 ++-- .../inactivity-timeout/hosts/carol/etc/strongswan.conf | 2 +- .../inactivity-timeout/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf | 4 ++-- .../ip-split-pools-db/hosts/carol/etc/strongswan.conf | 4 ++-- .../ip-split-pools-db/hosts/dave/etc/strongswan.conf | 4 ++-- .../ip-split-pools-db/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf | 4 ++-- .../ip-two-pools-mixed/hosts/alice/etc/strongswan.conf | 4 ++-- .../ip-two-pools-mixed/hosts/carol/etc/strongswan.conf | 4 ++-- .../ip-two-pools-mixed/hosts/moon/etc/strongswan.conf | 4 ++-- .../ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf | 4 ++-- .../ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf | 4 ++-- .../ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf | 4 ++-- .../ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/lookip/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf | 4 ++-- .../mobike-nat-mappings/hosts/alice/etc/strongswan.conf | 4 ++-- .../mobike-nat-mappings/hosts/sun/etc/strongswan.conf | 4 ++-- .../mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf | 4 ++-- .../mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf | 4 ++-- .../mobike-virtual-ip/hosts/alice/etc/strongswan.conf | 4 ++-- .../ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev2/mobike/hosts/alice/etc/strongswan.conf | 4 ++-- testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf | 4 ++-- .../hosts/carol/etc/strongswan.conf | 2 +- .../hosts/dave/etc/strongswan.conf | 2 +- .../hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/nat-rw-mark/hosts/alice/etc/strongswan.conf | 2 +- .../tests/ikev2/nat-rw-mark/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2/nat-rw-mark/hosts/venus/etc/strongswan.conf | 2 +- .../ikev2/nat-rw-psk/hosts/alice/etc/strongswan.conf | 2 +- .../tests/ikev2/nat-rw-psk/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2/nat-rw-psk/hosts/venus/etc/strongswan.conf | 2 +- .../tests/ikev2/nat-rw/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/ikev2/nat-rw/hosts/sun/etc/strongswan.conf | 2 +- .../tests/ikev2/nat-rw/hosts/venus/etc/strongswan.conf | 2 +- .../ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-cert-sha2/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-childless/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-childless/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-esn/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-gw/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-multicast/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-multicast/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/ikev2/net2net-pkcs12/description.txt | 4 +++- .../ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-psk-dscp/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/net2net-psk-dscp/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-psk/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-pubkey/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/net2net-pubkey/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-route/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-route/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-same-nets/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/net2net-same-nets/hosts/sun/etc/strongswan.conf | 2 +- .../net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-start/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/net2net-start/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev2/ocsp-disabled/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/ocsp-disabled/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/ocsp-local-cert/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/ocsp-local-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf | 4 ++-- .../ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../ocsp-signer-cert/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/ocsp-signer-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ocsp-timeouts-good/hosts/carol/etc/strongswan.conf | 2 +- .../ocsp-timeouts-good/hosts/moon/etc/strongswan.conf | 2 +- .../ocsp-timeouts-unknown/hosts/carol/etc/strongswan.conf | 2 +- .../ocsp-timeouts-unknown/hosts/moon/etc/strongswan.conf | 2 +- .../ocsp-untrusted-cert/hosts/carol/etc/strongswan.conf | 2 +- .../ocsp-untrusted-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/protoport-dual/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/protoport-dual/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/protoport-range/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/protoport-range/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/protoport-trap/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/protoport-trap/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/reauth-early/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/reauth-early/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/reauth-late/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/reauth-late/hosts/moon/etc/strongswan.conf | 2 +- .../reauth-mbb-revoked/hosts/carol/etc/strongswan.conf | 4 ++-- .../reauth-mbb-revoked/hosts/moon/etc/strongswan.conf | 4 ++-- .../reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf | 4 ++-- .../reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/redirect-active/hosts/alice/etc/strongswan.conf | 2 +- .../ikev2/redirect-active/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/redirect-active/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2/redirect-active/hosts/moon/etc/strongswan.conf | 2 +- .../rw-cert-multi-ke/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-dnssec/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2/rw-dnssec/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev2/rw-dnssec/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf | 4 ++-- .../hosts/carol/etc/strongswan.conf | 4 ++-- .../hosts/dave/etc/strongswan.conf | 4 ++-- .../hosts/moon/etc/strongswan.conf | 4 ++-- .../hosts/carol/etc/strongswan.conf | 4 ++-- .../hosts/dave/etc/strongswan.conf | 4 ++-- .../hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-md5-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-peap-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-peap-radius/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-peap-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-radius/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-sim-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-ttls-only/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-ed25519-certpol/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-ed25519-certpol/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-ed25519-certpol/hosts/moon/etc/strongswan.conf | 8 +++++--- .../ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-initiator-only/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-initiator-only/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-initiator-only/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-mark-in-out/hosts/alice/etc/strongswan.conf | 2 +- .../ikev2/rw-mark-in-out/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2/rw-mark-in-out/hosts/venus/etc/strongswan.conf | 2 +- .../tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-fqdn/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-fqdn/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-fqdn/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-ipv4/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-ipv4/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-ipv4/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-no-idr/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-no-idr/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-no-idr/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-ppk/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-psk-ppk/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/rw-psk-ppk/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-psk-rsa-mixed/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-rsa-mixed/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-rsa-mixed/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-psk-rsa-split/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-pubkey-anon/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/rw-pubkey-anon/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-pubkey-keyid/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/rw-pubkey-keyid/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-radius-accounting/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-radius-accounting/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf | 4 ++-- .../shunt-manual-prio/hosts/carol/etc/strongswan.conf | 4 ++-- .../shunt-manual-prio/hosts/dave/etc/strongswan.conf | 4 ++-- .../shunt-manual-prio/hosts/moon/etc/strongswan.conf | 4 ++-- .../shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf | 2 +- .../shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf | 2 +- .../shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf | 2 +- .../start-action-start/hosts/moon/etc/strongswan.conf | 2 +- .../start-action-start/hosts/sun/etc/strongswan.conf | 2 +- .../strong-keys-certs/hosts/carol/etc/strongswan.conf | 4 ++-- .../strong-keys-certs/hosts/dave/etc/strongswan.conf | 4 ++-- .../strong-keys-certs/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev2/two-certs/hosts/carol/etc/swanctl/swanctl.conf | 4 ++++ .../tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev2/two-certs/hosts/moon/etc/swanctl/swanctl.conf | 3 +++ .../tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf | 4 ++-- 359 files changed, 630 insertions(+), 610 deletions(-) diff --git a/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf index 2177dee8d..3e621eda2 100755 --- a/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 x509 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf index 2177dee8d..3e621eda2 100755 --- a/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 x509 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf index 9a25e806c..38c046b3f 100755 --- a/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 acert revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 x509 acert revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf index 0a9156e49..d4b29a368 100644 --- a/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp curve25519 x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf index d8f66f0d2..5f62c0bba 100644 --- a/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp curve25519 x509 acert curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 acert revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf index 2177dee8d..3e621eda2 100755 --- a/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 x509 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf index 2177dee8d..3e621eda2 100755 --- a/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 x509 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf index 9a25e806c..38c046b3f 100755 --- a/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 acert revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 x509 acert revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf index 08f99ac1b..5292ed071 100644 --- a/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf index 08f99ac1b..5292ed071 100644 --- a/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/compress-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/compress-nat/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/compress-nat/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/compress-nat/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/compress-nat/hosts/bob/etc/strongswan.conf b/testing/tests/ikev2/compress-nat/hosts/bob/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/compress-nat/hosts/bob/etc/strongswan.conf +++ b/testing/tests/ikev2/compress-nat/hosts/bob/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/compress-nat/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/compress-nat/hosts/carol/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/compress-nat/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/compress-nat/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/compress/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/compress/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/compress/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/compress/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/compress/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/compress/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/compress/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/compress/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/critical-extension/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/critical-extension/hosts/moon/etc/strongswan.conf index 0f4f834f6..ab0abdacf 100644 --- a/testing/tests/ikev2/critical-extension/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/critical-extension/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce pem pkcs1 x509 revocation openssl curl vici kernel-netlink socket-default updown multiple_authentication = no diff --git a/testing/tests/ikev2/critical-extension/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/critical-extension/hosts/sun/etc/strongswan.conf index 201ca6d87..ab2a15ff8 100644 --- a/testing/tests/ikev2/critical-extension/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/critical-extension/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce pem pkcs1 x509 revocation openssl curl vici kernel-netlink socket-default updown multiple_authentication = no } \ No newline at end of file diff --git a/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf index f9e82b331..799d083d6 100644 --- a/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/swanctl/swanctl.conf index e84508d19..172dc3c0a 100755 --- a/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/swanctl/swanctl.conf @@ -16,8 +16,10 @@ connections { children { home { remote_ts = 10.1.0.0/16 + esp_proposals = aes128gcm128-modp3072 } } version = 2 + proposals = aes128-sha256-modp3072 } } diff --git a/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf index e16a0d69d..c667f5394 100644 --- a/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici cache_crls = yes } diff --git a/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/swanctl/swanctl.conf index 47dd36684..749890be8 100755 --- a/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/swanctl/swanctl.conf @@ -14,8 +14,10 @@ connections { children { net { local_ts = 10.1.0.0/16 - } + esp_proposals = aes128gcm128-modp3072 + } } version = 2 + proposals = aes128-sha256-modp3072 } } diff --git a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf index 4232352ca..9366fc0b9 100644 --- a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 ldap revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 ldap revocation kernel-netlink socket-default vici cache_crls = yes } diff --git a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/swanctl/swanctl.conf index af0c5687b..23e310fc9 100755 --- a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/swanctl/swanctl.conf @@ -24,8 +24,10 @@ connections { children { home { remote_ts = 10.1.0.0/16 - } + esp_proposals = aes128gcm128-modp3072 + } } version = 2 + proposals = aes128-sha256-modp3072 } } diff --git a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf index 4232352ca..9366fc0b9 100644 --- a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 ldap revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 ldap revocation kernel-netlink socket-default vici cache_crls = yes } diff --git a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/swanctl/swanctl.conf index 04c261188..acc25d406 100755 --- a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/swanctl/swanctl.conf @@ -22,8 +22,10 @@ connections { children { net { local_ts = 10.1.0.0/16 + esp_proposals = aes128gcm128-modp3072 } } version = 2 + proposals = aes128-sha256-modp3072 } } diff --git a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf index f9e82b331..799d083d6 100644 --- a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf index f9e82b331..799d083d6 100644 --- a/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf index e16a0d69d..c667f5394 100644 --- a/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici cache_crls = yes } diff --git a/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf index e16a0d69d..c667f5394 100644 --- a/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default vici cache_crls = yes } diff --git a/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf index c37b42f7c..69f5f7a19 100755 --- a/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf index c37b42f7c..69f5f7a19 100755 --- a/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf index 597a6c0a4..8fdb4af9d 100755 --- a/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown attr farp dhcp + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown attr farp dhcp plugins { dhcp { diff --git a/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf index c37b42f7c..69f5f7a19 100755 --- a/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf index c37b42f7c..69f5f7a19 100755 --- a/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf index 1356f03b7..83866002d 100755 --- a/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown attr farp dhcp + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown attr farp dhcp plugins { dhcp { diff --git a/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf index c37b42f7c..69f5f7a19 100755 --- a/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf index c37b42f7c..69f5f7a19 100755 --- a/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf index 1356f03b7..83866002d 100755 --- a/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown attr farp dhcp + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown attr farp dhcp plugins { dhcp { diff --git a/testing/tests/ikev2/double-nat-net/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/double-nat-net/hosts/alice/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/double-nat-net/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/double-nat-net/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/double-nat-net/hosts/bob/etc/strongswan.conf b/testing/tests/ikev2/double-nat-net/hosts/bob/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/double-nat-net/hosts/bob/etc/strongswan.conf +++ b/testing/tests/ikev2/double-nat-net/hosts/bob/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/double-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/double-nat/hosts/alice/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/double-nat/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/double-nat/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/double-nat/hosts/bob/etc/strongswan.conf b/testing/tests/ikev2/double-nat/hosts/bob/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/double-nat/hosts/bob/etc/strongswan.conf +++ b/testing/tests/ikev2/double-nat/hosts/bob/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/dpd-clear/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dpd-clear/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/dpd-clear/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dpd-clear/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/dpd-clear/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dpd-clear/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/dpd-clear/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dpd-clear/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/dpd-restart/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dpd-restart/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/dpd-restart/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dpd-restart/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/dpd-restart/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dpd-restart/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/dpd-restart/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dpd-restart/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/dpd-trap/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dpd-trap/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/dpd-trap/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dpd-trap/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/dpd-trap/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2/dpd-trap/hosts/carol/etc/swanctl/swanctl.conf index a202bac82..ac94d13da 100755 --- a/testing/tests/ikev2/dpd-trap/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/dpd-trap/hosts/carol/etc/swanctl/swanctl.conf @@ -16,12 +16,13 @@ connections { children { home { remote_ts = 10.1.0.0/16 - esp_proposals =aes128gcm16-x25519 + esp_proposals = aes128gcm16-x25519 dpd_action = trap } } version = 2 mobike = no + proposals = aes128-sha256-x25519 dpd_delay = 10 } } diff --git a/testing/tests/ikev2/dpd-trap/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dpd-trap/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/dpd-trap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dpd-trap/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf index 0b7dc3c6e..43df76716 100755 --- a/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici resolve + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici resolve } diff --git a/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf index 0b7dc3c6e..43df76716 100755 --- a/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici resolve + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici resolve } diff --git a/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf index 9e8fcdf5f..ec7173d04 100755 --- a/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici attr farp + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici attr farp dns1 = PH_IP_WINNETOU dns2 = PH_IP_VENUS } diff --git a/testing/tests/ikev2/force-udp-encap/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/force-udp-encap/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/force-udp-encap/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/force-udp-encap/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/force-udp-encap/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/force-udp-encap/hosts/sun/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/force-udp-encap/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/force-udp-encap/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/forecast/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/forecast/hosts/carol/etc/strongswan.conf index fe3c927c8..807c7a54d 100644 --- a/testing/tests/ikev2/forecast/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/forecast/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2/forecast/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/forecast/hosts/dave/etc/strongswan.conf index 4b121a66c..807c7a54d 100644 --- a/testing/tests/ikev2/forecast/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/forecast/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2/forecast/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/forecast/hosts/moon/etc/strongswan.conf index 9bfe1666a..58230aaae 100644 --- a/testing/tests/ikev2/forecast/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/forecast/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown attr forecast + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown attr forecast syslog { daemon { diff --git a/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf index a571b8a4b..fe624ca0d 100755 --- a/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation xcbc gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation xcbc kdf curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-ah/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2/host2host-ah/hosts/moon/etc/swanctl/swanctl.conf index 66816ede0..7e6483cec 100755 --- a/testing/tests/ikev2/host2host-ah/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/host2host-ah/hosts/moon/etc/swanctl/swanctl.conf @@ -19,7 +19,7 @@ connections { rekey_time = 5400 rekey_bytes = 500000000 rekey_packets = 1000000 - ah_proposals = aesxcbc + ah_proposals = aesxcbc-modp3072 mode = transport } diff --git a/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf index a571b8a4b..fe624ca0d 100755 --- a/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation xcbc gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation xcbc kdf curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-ah/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/ikev2/host2host-ah/hosts/sun/etc/swanctl/swanctl.conf index fcfdf1acf..fb7168164 100755 --- a/testing/tests/ikev2/host2host-ah/hosts/sun/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/host2host-ah/hosts/sun/etc/swanctl/swanctl.conf @@ -19,7 +19,7 @@ connections { rekey_time = 5400 rekey_bytes = 500000000 rekey_packets = 1000000 - ah_proposals = aesxcbc + ah_proposals = aesxcbc-modp3072 mode = transport } } diff --git a/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-transport-connmark/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-connmark/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/host2host-transport-connmark/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport-connmark/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/host2host-transport-connmark/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-connmark/hosts/sun/etc/strongswan.conf index 4649cfc94..19dd066ad 100644 --- a/testing/tests/ikev2/host2host-transport-connmark/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport-connmark/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default connmark + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default connmark } diff --git a/testing/tests/ikev2/host2host-transport-connmark/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-connmark/hosts/venus/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/host2host-transport-connmark/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport-connmark/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/inactivity-timeout/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/inactivity-timeout/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/inactivity-timeout/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/inactivity-timeout/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/inactivity-timeout/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/inactivity-timeout/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2/inactivity-timeout/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/inactivity-timeout/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf index e79a761a5..8df41f29d 100755 --- a/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf index e79a761a5..8df41f29d 100755 --- a/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf index bfdf615c3..d565d55ad 100755 --- a/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown sqlite attr-sql vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown sqlite attr-sql vici plugins { attr-sql { diff --git a/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf index 626574a32..f34a55baf 100755 --- a/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf index 626574a32..f34a55baf 100755 --- a/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf index d4fbfa067..7424453a6 100755 --- a/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default sqlite attr-sql vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default sqlite attr-sql vici plugins { attr-sql { diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf index 0b7dc3c6e..43df76716 100755 --- a/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici resolve + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici resolve } diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf index 0b7dc3c6e..43df76716 100755 --- a/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici resolve + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici resolve } diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf index 0b7dc3c6e..43df76716 100755 --- a/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici resolve + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici resolve } diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf index 3c19789ee..b0367540c 100755 --- a/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl sqlite attr-sql kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl sqlite attr-sql kernel-netlink socket-default updown vici plugins { attr-sql { diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf index 0b7dc3c6e..43df76716 100755 --- a/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici resolve + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici resolve } diff --git a/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf index 3c19789ee..b0367540c 100755 --- a/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl sqlite attr-sql kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl sqlite attr-sql kernel-netlink socket-default updown vici plugins { attr-sql { diff --git a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf index 626574a32..f34a55baf 100755 --- a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf index e7b7c12b4..9a9b4ba7c 100755 --- a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default vici sqlite attr-sql + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default vici sqlite attr-sql plugins { attr-sql { diff --git a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf index 626574a32..f34a55baf 100755 --- a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf index 626574a32..f34a55baf 100755 --- a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf index ce41199d1..289fa06ab 100644 --- a/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl vici kernel-netlink socket-default updown lookip + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default updown lookip } diff --git a/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf index c37b42f7c..69f5f7a19 100644 --- a/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf index c37b42f7c..69f5f7a19 100644 --- a/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf index ac00d9ca9..59c9e6467 100644 --- a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici prefer_best_path = yes syslog { diff --git a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf index c0c701476..a8cd44c9a 100644 --- a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici syslog { daemon { diff --git a/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf index c37b42f7c..69f5f7a19 100644 --- a/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf index c37b42f7c..69f5f7a19 100644 --- a/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf index c37b42f7c..69f5f7a19 100644 --- a/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf index c37b42f7c..69f5f7a19 100644 --- a/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/carol/etc/strongswan.conf index 4b27878a3..f5881b584 100644 --- a/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default fips-prf eap-sim eap-sim-file eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation xcbc vici kernel-netlink socket-default fips-prf eap-sim eap-sim-file eap-identity updown } diff --git a/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/dave/etc/strongswan.conf index 4b27878a3..f5881b584 100644 --- a/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default fips-prf eap-sim eap-sim-file eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation xcbc vici kernel-netlink socket-default fips-prf eap-sim eap-sim-file eap-identity updown } diff --git a/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/moon/etc/strongswan.conf index 627e590f3..73114d370 100644 --- a/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/mult-auth-rsa-eap-sim-id/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default fips-prf eap-radius eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation xcbc vici kernel-netlink socket-default fips-prf eap-radius eap-identity updown plugins { eap-radius { diff --git a/testing/tests/ikev2/nat-rw-mark/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/nat-rw-mark/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/nat-rw-mark/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw-mark/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/nat-rw-mark/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/nat-rw-mark/hosts/sun/etc/strongswan.conf index 5874eb1da..c0bfbfc34 100644 --- a/testing/tests/ikev2/nat-rw-mark/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw-mark/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/nat-rw-mark/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/nat-rw-mark/hosts/venus/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/nat-rw-mark/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw-mark/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/nat-rw-psk/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/nat-rw-psk/hosts/alice/etc/strongswan.conf index 4d2844bdd..e61dbce48 100644 --- a/testing/tests/ikev2/nat-rw-psk/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw-psk/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2/nat-rw-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/nat-rw-psk/hosts/sun/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/nat-rw-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw-psk/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/nat-rw-psk/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/nat-rw-psk/hosts/venus/etc/strongswan.conf index 4d2844bdd..e61dbce48 100644 --- a/testing/tests/ikev2/nat-rw-psk/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw-psk/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2/nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/nat-rw/hosts/alice/etc/strongswan.conf index 4d2844bdd..e61dbce48 100644 --- a/testing/tests/ikev2/nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2/nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/nat-rw/hosts/sun/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/nat-rw/hosts/venus/etc/strongswan.conf index 4d2844bdd..e61dbce48 100644 --- a/testing/tests/ikev2/nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-rw/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf index 0de0f0539..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf index 0de0f0539..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf index 56bc9bdf2..d0eb2288d 100644 --- a/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp dnskey pem pkcs1 pubkey unbound dnscert x509 curl kernel-netlink socket-default vici updown + load = random nonce openssl dnskey pem pkcs1 pubkey unbound dnscert curl kernel-netlink socket-default vici updown plugins { dnscert { diff --git a/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf index 56bc9bdf2..d0eb2288d 100644 --- a/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp dnskey pem pkcs1 pubkey unbound dnscert x509 curl kernel-netlink socket-default vici updown + load = random nonce openssl dnskey pem pkcs1 pubkey unbound dnscert curl kernel-netlink socket-default vici updown plugins { dnscert { diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf index 5b4bbb556..f98ba17b4 100755 --- a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp dnskey pem pkcs1 pubkey unbound ipseckey curl kernel-netlink socket-default vici updown + load = random nonce openssl dnskey pem pkcs1 pubkey unbound ipseckey curl kernel-netlink socket-default vici updown plugins { ipseckey { diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf index 5b4bbb556..f98ba17b4 100755 --- a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp dnskey pem pkcs1 pubkey unbound ipseckey curl kernel-netlink socket-default vici updown + load = random nonce openssl dnskey pem pkcs1 pubkey unbound ipseckey curl kernel-netlink socket-default vici updown plugins { ipseckey { diff --git a/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf index ce63cd518..7bec6840b 100644 --- a/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf index 5afeca97c..777eefd89 100644 --- a/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici multiple_authentication = no syslog { daemon { diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf index 24aa52cfb..59b67b828 100755 --- a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem sha1 pkcs1 pkcs8 curve25519 x509 revocation constraints + load = random pem pkcs1 pkcs8 revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pkcs8 x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 pkcs8 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf index 24aa52cfb..59b67b828 100755 --- a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem sha1 pkcs1 pkcs8 curve25519 x509 revocation constraints + load = random pem pkcs1 pkcs8 revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pkcs8 x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 pkcs8 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf index dc54cc726..b3cfb07a5 100644 --- a/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf kernel-netlink socket-default forecast vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default forecast vici multiple_authentication = no diff --git a/testing/tests/ikev2/net2net-multicast/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-multicast/hosts/sun/etc/strongswan.conf index 0167363c3..15f724eca 100644 --- a/testing/tests/ikev2/net2net-multicast/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-multicast/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf kernel-netlink socket-default forecast vici + load = random nonce openssl pem pkcs1 curl revocation kernel-netlink socket-default forecast vici multiple_authentication = no diff --git a/testing/tests/ikev2/net2net-pkcs12/description.txt b/testing/tests/ikev2/net2net-pkcs12/description.txt index b00bf17cc..55ce51562 100755 --- a/testing/tests/ikev2/net2net-pkcs12/description.txt +++ b/testing/tests/ikev2/net2net-pkcs12/description.txt @@ -1,5 +1,7 @@ A connection between the subnets behind the gateways moon and sun is set up. -The authentication is based on X.509 certificates. +The authentication is based on an RSA private key, a matching X.509 end entity +certificate and the issuing X.509 root CA certificate, all stored in a PKCS12 +container.

Upon the successful establishment of the IPsec tunnel, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf index 6db54266f..9cd431b48 100755 --- a/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random aes sha1 sha2 hmac kdf pem pkcs1 pkcs7 pkcs8 pkcs12 gmp x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf index 6db54266f..9cd431b48 100755 --- a/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random aes sha1 sha2 hmac kdf pem pkcs1 pkcs7 pkcs8 pkcs12 gmp x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-psk-dscp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk-dscp/hosts/moon/etc/strongswan.conf index ffd5cb215..224bd8f3f 100644 --- a/testing/tests/ikev2/net2net-psk-dscp/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-psk-dscp/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf curl vici kernel-netlink socket-default updown + load = random nonce openssl curl vici kernel-netlink socket-default updown syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/net2net-psk-dscp/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk-dscp/hosts/sun/etc/strongswan.conf index b17a0bced..98bd45cf9 100644 --- a/testing/tests/ikev2/net2net-psk-dscp/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-psk-dscp/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf curl vici kernel-netlink socket-default updown + load = random nonce openssl curl vici kernel-netlink socket-default updown multiple_authentication = no syslog { daemon { diff --git a/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/strongswan.conf index 29e75f7b8..856d1eacc 100644 --- a/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-pubkey/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default vici updown + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default vici updown } diff --git a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/strongswan.conf index 29e75f7b8..856d1eacc 100644 --- a/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-pubkey/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default vici updown + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default vici updown } diff --git a/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf index c0dd0dd0d..8ed394818 100644 --- a/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici # remove rekeyed inbound SA a bit quicker for the test scenario delete_rekeyed_delay = 2 syslog { diff --git a/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100644 --- a/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf index 9a1064260..0f249edfd 100755 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation addrblock curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation addrblock curl kernel-netlink socket-default updown vici syslog { daemon { cfg = 2 diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf index 9a1064260..0f249edfd 100755 --- a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation addrblock curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation addrblock curl kernel-netlink socket-default updown vici syslog { daemon { cfg = 2 diff --git a/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf index 91df8e021..05b62a1b7 100755 --- a/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-same-nets/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-same-nets/hosts/moon/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/net2net-same-nets/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-same-nets/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/net2net-same-nets/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-same-nets/hosts/sun/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/net2net-same-nets/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-same-nets/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf index f9d911d22..1d4221c46 100755 --- a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey + load = random pem pkcs1 openssl revocation constraints pubkey } charon-systemd { - load = random nonce sha1 sha2 sha3 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf index f9d911d22..1d4221c46 100755 --- a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey + load = random pem pkcs1 openssl revocation constraints pubkey } charon-systemd { - load = random nonce sha1 sha2 sha3 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/ocsp-disabled/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-disabled/hosts/carol/etc/strongswan.conf index 82fd8f3c0..f7ae10b58 100644 --- a/testing/tests/ikev2/ocsp-disabled/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-disabled/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 revocation curl vici kernel-netlink socket-default plugins { revocation { diff --git a/testing/tests/ikev2/ocsp-disabled/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-disabled/hosts/moon/etc/strongswan.conf index 1b4121dcc..f7ae10b58 100644 --- a/testing/tests/ikev2/ocsp-disabled/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-disabled/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 revocation curl vici kernel-netlink socket-default plugins { revocation { diff --git a/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/strongswan.conf index d4a7a8060..ff824c8ab 100644 --- a/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-local-cert/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 revocation curl vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/strongswan.conf index 6da01ed6f..ff824c8ab 100644 --- a/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-local-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 revocation curl vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf index f9e82b331..3b9a9b379 100644 --- a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf index f9e82b331..3b9a9b379 100644 --- a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf index f9e82b331..3b9a9b379 100644 --- a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf index f9e82b331..3b9a9b379 100644 --- a/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf index 0a9156e49..3b9a9b379 100644 --- a/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp curve25519 x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf index 0a9156e49..3b9a9b379 100644 --- a/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp curve25519 x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 x509 curl revocation kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/strongswan.conf index d4a7a8060..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-signer-cert/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-signer-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-signer-cert/hosts/moon/etc/strongswan.conf index 6da01ed6f..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-signer-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-signer-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/strongswan.conf index d4a7a8060..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-timeouts-good/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-timeouts-good/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-timeouts-good/hosts/moon/etc/strongswan.conf index 6da01ed6f..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-timeouts-good/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-timeouts-good/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/carol/etc/strongswan.conf index d4a7a8060..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/moon/etc/strongswan.conf index 6da01ed6f..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-timeouts-unknown/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-untrusted-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-untrusted-cert/hosts/carol/etc/strongswan.conf index d4a7a8060..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-untrusted-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-untrusted-cert/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-untrusted-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-untrusted-cert/hosts/moon/etc/strongswan.conf index 6da01ed6f..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-untrusted-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-untrusted-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/protoport-dual/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/protoport-dual/hosts/carol/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/protoport-dual/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/protoport-dual/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/protoport-dual/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/protoport-dual/hosts/moon/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/protoport-dual/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/protoport-dual/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/protoport-range/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/protoport-range/hosts/carol/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/protoport-range/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/protoport-range/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/protoport-range/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/protoport-range/hosts/moon/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/protoport-range/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/protoport-range/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/protoport-trap/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/protoport-trap/hosts/carol/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/protoport-trap/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/protoport-trap/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/protoport-trap/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/protoport-trap/hosts/moon/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/protoport-trap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/protoport-trap/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/reauth-early/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-early/hosts/carol/etc/strongswan.conf index 16f694218..cbeeb90e6 100644 --- a/testing/tests/ikev2/reauth-early/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-early/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown md5 eap-tls + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown eap-tls } diff --git a/testing/tests/ikev2/reauth-early/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-early/hosts/moon/etc/strongswan.conf index 16f694218..cbeeb90e6 100644 --- a/testing/tests/ikev2/reauth-early/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-early/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown md5 eap-tls + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown eap-tls } diff --git a/testing/tests/ikev2/reauth-late/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-late/hosts/carol/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/reauth-late/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-late/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/reauth-late/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-late/hosts/moon/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/reauth-late/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-late/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf index cc60b7f39..1c42fbb6d 100644 --- a/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici make_before_break = yes } diff --git a/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf index 056dd52bc..592135a35 100644 --- a/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf index cc60b7f39..1c42fbb6d 100644 --- a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici make_before_break = yes } diff --git a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf index 056dd52bc..592135a35 100644 --- a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf index cc60b7f39..1c42fbb6d 100644 --- a/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici make_before_break = yes } diff --git a/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf index 056dd52bc..592135a35 100644 --- a/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/redirect-active/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/redirect-active/hosts/alice/etc/strongswan.conf index 722157ae4..e70d8b8a0 100644 --- a/testing/tests/ikev2/redirect-active/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/redirect-active/hosts/alice/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/redirect-active/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/redirect-active/hosts/carol/etc/strongswan.conf index 6d613aaed..c0bfbfc34 100644 --- a/testing/tests/ikev2/redirect-active/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/redirect-active/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/redirect-active/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/redirect-active/hosts/dave/etc/strongswan.conf index a169c6507..b87c8feab 100644 --- a/testing/tests/ikev2/redirect-active/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/redirect-active/hosts/dave/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/redirect-active/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/redirect-active/hosts/moon/etc/strongswan.conf index a169c6507..b87c8feab 100644 --- a/testing/tests/ikev2/redirect-active/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/redirect-active/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf index 83612c913..d6e3525d2 100755 --- a/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce openssl pem pkcs1 x509 revocation constraints curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf index 83612c913..d6e3525d2 100755 --- a/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce openssl pem pkcs1 x509 revocation constraints curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf index 83612c913..d6e3525d2 100755 --- a/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce openssl pem pkcs1 x509 revocation constraints curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf index 056dd52bc..592135a35 100755 --- a/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf index 056dd52bc..592135a35 100755 --- a/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf index 056dd52bc..592135a35 100755 --- a/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf index f5b3e5b1f..3bb0881f0 100755 --- a/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 mgf1 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici syslog { daemon { diff --git a/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf index f5b3e5b1f..3bb0881f0 100755 --- a/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 mgf1 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici syslog { daemon { diff --git a/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf index 0926f1f32..7aed328ef 100755 --- a/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 mgf1 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici rsa_pss = yes diff --git a/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf index 0ebac0756..a5f330619 100755 --- a/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf index 0ebac0756..a5f330619 100755 --- a/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf index 5e8955e4e..bbfa3dcde 100755 --- a/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce test-vectors aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl test-vectors pem pkcs1 curl revocation cmac xcbc vici kernel-netlink socket-default updown integrity_test = yes diff --git a/testing/tests/ikev2/rw-dnssec/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-dnssec/hosts/carol/etc/strongswan.conf index f91628bf4..1b5d13b7a 100644 --- a/testing/tests/ikev2/rw-dnssec/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-dnssec/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp dnskey pubkey unbound ipseckey hmac kdf vici kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 dnskey pubkey unbound ipseckey vici kernel-netlink socket-default updown resolve plugins { ipseckey { diff --git a/testing/tests/ikev2/rw-dnssec/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-dnssec/hosts/dave/etc/strongswan.conf index f91628bf4..1b5d13b7a 100644 --- a/testing/tests/ikev2/rw-dnssec/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-dnssec/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp dnskey pubkey unbound ipseckey hmac kdf vici kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 dnskey pubkey unbound ipseckey vici kernel-netlink socket-default updown resolve plugins { ipseckey { diff --git a/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/strongswan.conf index 6e406c49f..c1ec403ac 100644 --- a/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 dnskey pubkey unbound ipseckey curve25519 gmp hmac kdf vici kernel-netlink socket-default updown attr + load = random nonce openssl pem pkcs1 dnskey pubkey unbound ipseckey vici kernel-netlink socket-default updown attr dns1 = PH_IP_WINNETOU dns2 = PH_IP_VENUS diff --git a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf index 252452989..d5de6fc94 100644 --- a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-aka eap-aka-3gpp2 updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-aka eap-aka-3gpp2 updown } diff --git a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf index 252452989..d5de6fc94 100644 --- a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-aka eap-aka-3gpp2 updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-aka eap-aka-3gpp2 updown } diff --git a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf index b9479a89d..99d707498 100644 --- a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-aka eap-aka-3gpp2 updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-aka eap-aka-3gpp2 updown } diff --git a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf index b9479a89d..99d707498 100644 --- a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-aka eap-aka-3gpp2 updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-aka eap-aka-3gpp2 updown } diff --git a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf index 4c7416923..ef688b5bc 100644 --- a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default sqlite fips-prf eap-aka eap-simaka-sql updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default sqlite fips-prf eap-aka eap-simaka-sql updown plugins { eap-simaka-sql { diff --git a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf index 4c7416923..ef688b5bc 100644 --- a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default sqlite fips-prf eap-aka eap-simaka-sql updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default sqlite fips-prf eap-aka eap-simaka-sql updown plugins { eap-simaka-sql { diff --git a/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf index 60dc2b8ca..94afaec35 100644 --- a/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf index 5dfdbe888..695710402 100644 --- a/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 mgf1 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown } diff --git a/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf index c71d9367c..5cb6510fa 100644 --- a/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-md5 eap-tls eap-dynamic updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-md5 eap-tls eap-dynamic updown plugins { eap-dynamic { diff --git a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf index d45398e95..49744e6a0 100644 --- a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown } diff --git a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf index 531a28d53..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 eap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf index f699ea6fc..984223f5a 100644 --- a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf index 0b755fa82..717ce62d5 100644 --- a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf index f699ea6fc..984223f5a 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf index 0fc83347e..94afaec35 100644 --- a/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf index df26935f9..e93de3b66 100644 --- a/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf index 0fc83347e..94afaec35 100644 --- a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf index 0fc83347e..94afaec35 100644 --- a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf index 85af9b369..9493ed75c 100644 --- a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes des md4 sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-mschapv2 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-mschapv2 updown } diff --git a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf index 85af9b369..9493ed75c 100644 --- a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes des md4 sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-mschapv2 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-mschapv2 updown } diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf index fe2fb2b48..808f6e692 100644 --- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf index 6d47fe37c..edaab9798 100644 --- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf index 8977f863e..cd4e34585 100644 --- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf index f06f29317..95e7f68ec 100644 --- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes des md4 md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf index 464d756ef..d2c4f8def 100644 --- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes des md4 md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf index bffec3d01..cea42c44f 100644 --- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes des md4 md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf index 60cb1bf0f..49744e6a0 100644 --- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown } diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf index 60cb1bf0f..49744e6a0 100644 --- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-peap updown } diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf index df26935f9..e93de3b66 100644 --- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf index 409df511e..244761383 100644 --- a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf index f699ea6fc..984223f5a 100644 --- a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf index e16af435e..e6f68dc96 100644 --- a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf index e16af435e..e6f68dc96 100644 --- a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf index df26935f9..e93de3b66 100644 --- a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf index e16af435e..e6f68dc96 100644 --- a/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf index e16af435e..e6f68dc96 100644 --- a/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf index df26935f9..e93de3b66 100644 --- a/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf index e16af435e..e6f68dc96 100644 --- a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf index e16af435e..e6f68dc96 100644 --- a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-sim eap-sim-file updown + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf index f34ba857b..80282acc1 100644 --- a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf index f9a4c423a..21cdc28b8 100644 --- a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf index 871b9e4d3..15a9a2352 100644 --- a/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf index f6a7f570e..09f23a45a 100644 --- a/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf index fcf57a034..a20e0a116 100644 --- a/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf index 9d35010ec..371c8fb14 100644 --- a/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-tls updown multiple_authentication = no syslog { diff --git a/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf index f54e96055..e93de3b66 100644 --- a/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf index 13fbd23ae..88d4c082d 100755 --- a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey + load = random pem pkcs1 openssl revocation constraints pubkey } charon-systemd { - load = random nonce md5 sha1 sha2 sha3 aes hmac gcm kdf pem pkcs1 x509 revocation constraints pubkey curve25519 mgf1 gmp curl eap-tls kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl eap-tls kernel-netlink socket-default updown vici } libtls { diff --git a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf index c1ec3a5a3..9756191a0 100755 --- a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey + load = random pem pkcs1 openssl revocation constraints pubkey } charon-systemd { - load = random nonce md5 sha1 sha2 sha3 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 mgf1 gmp curl eap-tls kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl eap-tls kernel-netlink socket-default updown vici } libtls { diff --git a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf index 1364cade7..e9b033f4b 100755 --- a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem pkcs1 sha1 sha3 gmp x509 revocation constraints pubkey + load = random pem pkcs1 openssl revocation constraints pubkey } charon-systemd { - load = random nonce md5 sha1 sha2 sha3 aes hmac gcm kdf pem pkcs1 x509 revocation constraints pubkey curve25519 mgf1 gmp curl eap-tls kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl eap-tls kernel-netlink socket-default updown vici } libtls { diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf index df950bc04..d41cf7d68 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf index 118f0c182..5d7c3967f 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf index d4a0d50cc..c9a7e6e78 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 mgf1 gmp x509 curl revocation hmac kdf gcm vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf index f21e179f4..15652a812 100644 --- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown } diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf index f21e179f4..15652a812 100644 --- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown } diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf index df26935f9..e93de3b66 100644 --- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf index 89fa6fc88..992dad8f7 100755 --- a/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 pkcs8 curve25519 x509 revocation constraints pubkey openssl random + load = pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 pkcs8 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf index 89fa6fc88..992dad8f7 100755 --- a/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 pkcs8 curve25519 x509 revocation constraints pubkey openssl random + load = pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 pkcs8 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf index 28262eb48..df294067a 100755 --- a/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf @@ -1,13 +1,15 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 pkcs8 curve25519 x509 revocation constraints pubkey openssl random + load = pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 pkcs8 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl curl kernel-netlink socket-default updown vici + syslog { daemon { - default = 1 } + default = 1 + } } } diff --git a/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf index 27e2e4dff..addd55839 100755 --- a/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici hash_and_url = yes } diff --git a/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf index 27e2e4dff..addd55839 100755 --- a/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici hash_and_url = yes } diff --git a/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf index 27e2e4dff..addd55839 100755 --- a/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici hash_and_url = yes } diff --git a/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf index c26fde875..9187d8426 100755 --- a/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici initiator_only = yes } diff --git a/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-mark-in-out/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/rw-mark-in-out/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/rw-mark-in-out/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-mark-in-out/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-mark-in-out/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/rw-mark-in-out/hosts/sun/etc/strongswan.conf index 5874eb1da..c0bfbfc34 100644 --- a/testing/tests/ikev2/rw-mark-in-out/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-mark-in-out/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/rw-mark-in-out/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/rw-mark-in-out/hosts/venus/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev2/rw-mark-in-out/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-mark-in-out/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf index 52a3559e4..9cd431b48 100755 --- a/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random des sha1 pem pkcs1 pkcs8 gmp x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf index bd5c946ae..9cd431b48 100755 --- a/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random aes sha1 pem pkcs1 pkcs8 gmp x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf index 03c154637..9cd431b48 100755 --- a/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random sha1 pem pkcs1 gmp x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pkcs8 gmp x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-fqdn/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-fqdn/hosts/carol/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-fqdn/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-fqdn/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-fqdn/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-fqdn/hosts/dave/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-fqdn/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-fqdn/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-fqdn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-fqdn/hosts/moon/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-fqdn/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-fqdn/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-ipv4/hosts/carol/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-ipv4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-ipv4/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-ipv4/hosts/dave/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-ipv4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-ipv4/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-ipv4/hosts/moon/etc/strongswan.conf index 51b68f51d..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-ipv4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-ipv4/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 md5 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-no-idr/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-no-idr/hosts/carol/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-no-idr/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-no-idr/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-no-idr/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-no-idr/hosts/dave/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-no-idr/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-no-idr/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-no-idr/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-no-idr/hosts/moon/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-no-idr/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-no-idr/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-ppk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-ppk/hosts/carol/etc/strongswan.conf index 51bee005f..9398d20ce 100755 --- a/testing/tests/ikev2/rw-psk-ppk/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-ppk/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici syslog { daemon { ike = 4 diff --git a/testing/tests/ikev2/rw-psk-ppk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-ppk/hosts/dave/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-ppk/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-ppk/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-ppk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-ppk/hosts/moon/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-ppk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-ppk/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/carol/etc/strongswan.conf index d7288afe7..4dbefd47f 100755 --- a/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/dave/etc/strongswan.conf index acd95cecc..db5f75e5d 100755 --- a/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/strongswan.conf index acd95cecc..db5f75e5d 100755 --- a/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf index acd95cecc..db5f75e5d 100755 --- a/testing/tests/ikev2/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf index acd95cecc..db5f75e5d 100755 --- a/testing/tests/ikev2/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf index acd95cecc..db5f75e5d 100755 --- a/testing/tests/ikev2/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random openssl + load = random openssl } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-pubkey-anon/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-anon/hosts/carol/etc/strongswan.conf index 331d5bc94..7726868c7 100755 --- a/testing/tests/ikev2/rw-pubkey-anon/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pubkey-anon/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pubkey-anon/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-anon/hosts/dave/etc/strongswan.conf index 331d5bc94..7726868c7 100755 --- a/testing/tests/ikev2/rw-pubkey-anon/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pubkey-anon/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf index 6b99d98a9..2bc647762 100755 --- a/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pubkey-keyid/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-keyid/hosts/carol/etc/strongswan.conf index 331d5bc94..7726868c7 100755 --- a/testing/tests/ikev2/rw-pubkey-keyid/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pubkey-keyid/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pubkey-keyid/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-keyid/hosts/dave/etc/strongswan.conf index 331d5bc94..7726868c7 100755 --- a/testing/tests/ikev2/rw-pubkey-keyid/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pubkey-keyid/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf index 6b99d98a9..2bc647762 100755 --- a/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici + load = random nonce openssl openssl pem pkcs1 pubkey kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf index 69eb7e19c..30536f744 100644 --- a/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-md5 updown } diff --git a/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf index dba8aebd1..2f77c207e 100644 --- a/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default eap-identity eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf index 08f99ac1b..5292ed071 100755 --- a/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf index 08f99ac1b..5292ed071 100755 --- a/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf index 08f99ac1b..5292ed071 100755 --- a/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf index ae69397f2..592135a35 100755 --- a/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 mgf1 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf index ae69397f2..592135a35 100755 --- a/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 mgf1 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf index 57166ffe7..422e177a0 100755 --- a/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 mgf1 aes hmac kdf pem pkcs1 x509 revocation constraints whitelist pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints whitelist pubkey curl kernel-netlink socket-default updown vici plugins { whitelist { diff --git a/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf index 6fe54ce07..7ce4becd7 100644 --- a/testing/tests/ikev2/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev2/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf index 6fe54ce07..7ce4becd7 100644 --- a/testing/tests/ikev2/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2/start-action-start/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/start-action-start/hosts/moon/etc/strongswan.conf index b4864e158..4d9c606af 100644 --- a/testing/tests/ikev2/start-action-start/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/start-action-start/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev2/start-action-start/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/start-action-start/hosts/sun/etc/strongswan.conf index b21f14de5..b4eb07610 100644 --- a/testing/tests/ikev2/start-action-start/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/start-action-start/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici # disable DoS protection as the initator will create a lot of IKE_SAs in this scenario dos_protection = no diff --git a/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf index 08f99ac1b..5292ed071 100755 --- a/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf index 0ebac0756..a5f330619 100755 --- a/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf index 08f99ac1b..5292ed071 100755 --- a/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf index ce63cd518..7bec6840b 100644 --- a/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf index ce63cd518..7bec6840b 100644 --- a/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf index ce63cd518..7bec6840b 100644 --- a/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf index ce63cd518..7bec6840b 100644 --- a/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici syslog { daemon { knl = 2 diff --git a/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf index f9e82b331..733d0b3c2 100644 --- a/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce pem pkcs1 curl revocation openssl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/two-certs/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2/two-certs/hosts/carol/etc/swanctl/swanctl.conf index eccc27bd0..5e3fbb03a 100755 --- a/testing/tests/ikev2/two-certs/hosts/carol/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/two-certs/hosts/carol/etc/swanctl/swanctl.conf @@ -17,9 +17,11 @@ connections { children { alice { remote_ts = 10.1.0.10/32 + esp_proposals = aes128gcm16-modp3072 } } version = 2 + proposals = aes128-sha256-modp3072 } venus { @@ -39,8 +41,10 @@ connections { children { venus { remote_ts = 10.1.0.20/32 + esp_proposals = aes128gcm16-modp3072 } } version = 2 + proposals = aes128-sha256-modp3072 } } diff --git a/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf index f9e82b331..733d0b3c2 100644 --- a/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf kernel-netlink socket-default vici + load = random nonce pem pkcs1 curl revocation openssl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/two-certs/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2/two-certs/hosts/moon/etc/swanctl/swanctl.conf index 6b3d3d7d0..c32e66136 100755 --- a/testing/tests/ikev2/two-certs/hosts/moon/etc/swanctl/swanctl.conf +++ b/testing/tests/ikev2/two-certs/hosts/moon/etc/swanctl/swanctl.conf @@ -15,11 +15,14 @@ connections { children { alice { local_ts = 10.1.0.10/32 + esp_proposals = aes128gcm16-modp3072 } venus { local_ts = 10.1.0.20/32 + esp_proposals = aes128gcm16-modp3072 } } version = 2 + proposals = aes128-sha256-modp3072 } } diff --git a/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf index 44b873b00..8f7cb5852 100755 --- a/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf index 44b873b00..8f7cb5852 100755 --- a/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default vici } diff --git a/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf index 056dd52bc..592135a35 100755 --- a/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf pem pkcs1 x509 revocation constraints pubkey curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici } From f766a7ed495bbd522fac68258a1fee980650ead7 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 18 Oct 2022 19:41:49 +0200 Subject: [PATCH 02/24] testing: Migrated ikev2-algs scenarios to new default plugins --- .../ikev2-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-aes-ccm/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-aes-ccm/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-aes-ctr/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-aes-ctr/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-aes-gcm/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-aes-gcm/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-aes-xcbc/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-aes-xcbc/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-blowfish/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-blowfish/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-blowfish/hosts/moon/etc/strongswan.conf | 2 +- .../alg-chacha20poly1305/hosts/carol/etc/strongswan.conf | 2 +- .../alg-chacha20poly1305/hosts/moon/etc/strongswan.conf | 2 +- .../alg-modp-subgroup/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-sha256/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-sha256/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-sha384/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-sha384/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-sha512/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-algs/alg-sha512/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-md5-128/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-md5-128/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-null/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-null/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-sha1-160/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-sha1-160/hosts/moon/etc/strongswan.conf | 2 +- .../esp-alg-sha256-96/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-algs/esp-alg-sha256-96/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/ocsp-rfc4806-both/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/ocsp-rfc4806-both/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/ocsp-rfc4806-local/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/ocsp-rfc4806-local/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2/ocsp-rfc4806-signer/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2/ocsp-rfc4806-signer/hosts/moon/etc/strongswan.conf | 2 +- 40 files changed, 40 insertions(+), 40 deletions(-) diff --git a/testing/tests/ikev2-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf index 6208c1d22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des md5 sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf index 6208c1d22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des md5 sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-ccm/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-ccm/hosts/carol/etc/strongswan.conf index 30491eebb..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-ccm/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-ccm/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc ccm gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-ccm/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-ccm/hosts/moon/etc/strongswan.conf index 30491eebb..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-ccm/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-ccm/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc ccm gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-ctr/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-ctr/hosts/carol/etc/strongswan.conf index a633929a2..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-ctr/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-ctr/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc ctr gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-ctr/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-ctr/hosts/moon/etc/strongswan.conf index a633929a2..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-ctr/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-ctr/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc ctr gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-gcm/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-gcm/hosts/carol/etc/strongswan.conf index 2d694d78d..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-gcm/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-gcm/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc gcm gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-gcm/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-gcm/hosts/moon/etc/strongswan.conf index 2d694d78d..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-gcm/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-gcm/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc gcm gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/carol/etc/strongswan.conf index 09f801335..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/moon/etc/strongswan.conf index 09f801335..259811d4d 100644 --- a/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-aes-xcbc/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 xcbc gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 xcbc kdf curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-blowfish/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-blowfish/hosts/carol/etc/strongswan.conf index 41bf7dea8..50b5890bd 100644 --- a/testing/tests/ikev2-algs/alg-blowfish/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-blowfish/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce blowfish sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl blowfish pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-blowfish/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-blowfish/hosts/dave/etc/strongswan.conf index 41bf7dea8..50b5890bd 100644 --- a/testing/tests/ikev2-algs/alg-blowfish/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-blowfish/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce blowfish sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl blowfish pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-blowfish/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-blowfish/hosts/moon/etc/strongswan.conf index 41bf7dea8..50b5890bd 100644 --- a/testing/tests/ikev2-algs/alg-blowfish/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-blowfish/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce blowfish sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl blowfish pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/carol/etc/strongswan.conf index 9548d0e0b..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce sha1 sha2 pem pkcs1 curve25519 chapoly gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/moon/etc/strongswan.conf index 9548d0e0b..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-chacha20poly1305/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce sha1 sha2 pem pkcs1 curve25519 chapoly gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf index 157792a6e..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf index 157792a6e..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf index 157792a6e..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-sha256/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-sha256/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-sha256/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-sha256/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-sha256/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-sha256/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-sha256/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-sha256/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-sha384/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-sha384/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-sha384/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-sha384/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-sha384/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-sha384/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-sha384/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-sha384/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-sha512/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-sha512/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-sha512/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-sha512/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/alg-sha512/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-sha512/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/alg-sha512/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-sha512/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf index 80d22f24f..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gcm gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf index 80d22f24f..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gcm gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/carol/etc/strongswan.conf index 6208c1d22..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des md5 sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/moon/etc/strongswan.conf index 6208c1d22..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-md5-128/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des md5 sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-null/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-null/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-null/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-null/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-null/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-null/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-null/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-null/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/carol/etc/strongswan.conf index b4515fdf5..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/moon/etc/strongswan.conf index b4515fdf5..373d144b1 100644 --- a/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-sha1-160/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/carol/etc/strongswan.conf index b1fde51dd..148d17d1f 100644 --- a/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default send_vendor_id = yes } diff --git a/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/moon/etc/strongswan.conf index b1fde51dd..148d17d1f 100644 --- a/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/esp-alg-sha256-96/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default send_vendor_id = yes } diff --git a/testing/tests/ikev2/ocsp-rfc4806-both/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-rfc4806-both/hosts/carol/etc/strongswan.conf index d4a7a8060..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-rfc4806-both/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-rfc4806-both/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-rfc4806-both/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-rfc4806-both/hosts/moon/etc/strongswan.conf index 6da01ed6f..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-rfc4806-both/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-rfc4806-both/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-rfc4806-local/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-rfc4806-local/hosts/carol/etc/strongswan.conf index d4a7a8060..ff824c8ab 100644 --- a/testing/tests/ikev2/ocsp-rfc4806-local/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-rfc4806-local/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 revocation curl vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-rfc4806-local/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-rfc4806-local/hosts/moon/etc/strongswan.conf index 6da01ed6f..ff824c8ab 100644 --- a/testing/tests/ikev2/ocsp-rfc4806-local/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-rfc4806-local/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 revocation curl vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/carol/etc/strongswan.conf index d4a7a8060..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/moon/etc/strongswan.conf index 6da01ed6f..3d2c1297c 100644 --- a/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2/ocsp-rfc4806-signer/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 x509 curl revocation vici kernel-netlink socket-default } From 4df94b56c039262fc791f03cd71c0abe9eee1525 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 18 Oct 2022 19:15:08 +0200 Subject: [PATCH 03/24] testing: Distributed openssl-ikev2 scenarios --- testing/scripts/build-certs-chroot | 30 +++++----------- .../alg-camellia/description.txt | 0 .../alg-camellia/evaltest.dat | 0 .../hosts/carol/etc/strongswan.conf | 0 .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/moon/etc/strongswan.conf | 0 .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../alg-camellia/posttest.dat | 0 .../alg-camellia/pretest.dat | 0 .../alg-camellia/test.conf | 0 .../alg-ecp-brainpool-high/description.txt | 0 .../alg-ecp-brainpool-high/evaltest.dat | 0 .../hosts/carol/etc/strongswan.conf | 0 .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/dave}/etc/strongswan.conf | 0 .../hosts/dave/etc/swanctl/swanctl.conf | 0 .../hosts/moon}/etc/strongswan.conf | 0 .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../alg-ecp-brainpool-high/posttest.dat | 0 .../alg-ecp-brainpool-high/pretest.dat | 0 .../alg-ecp-brainpool-high/test.conf | 0 .../alg-ecp-brainpool-low/description.txt | 0 .../alg-ecp-brainpool-low/evaltest.dat | 0 .../hosts/carol}/etc/strongswan.conf | 0 .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/dave}/etc/strongswan.conf | 0 .../hosts/dave/etc/swanctl/swanctl.conf | 0 .../hosts/moon/etc/strongswan.conf | 0 .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../alg-ecp-brainpool-low/posttest.dat | 0 .../alg-ecp-brainpool-low/pretest.dat | 0 .../alg-ecp-brainpool-low/test.conf | 0 .../alg-ecp-high/description.txt | 0 .../alg-ecp-high/evaltest.dat | 0 .../hosts/carol/etc/strongswan.conf | 0 .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/dave}/etc/strongswan.conf | 0 .../hosts/dave/etc/swanctl/swanctl.conf | 0 .../hosts/moon}/etc/strongswan.conf | 0 .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../alg-ecp-high/posttest.dat | 0 .../alg-ecp-high/pretest.dat | 0 .../alg-ecp-high/test.conf | 0 .../alg-ecp-low/description.txt | 0 .../alg-ecp-low/evaltest.dat | 0 .../hosts/carol}/etc/strongswan.conf | 0 .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/dave}/etc/strongswan.conf | 0 .../hosts/dave/etc/swanctl/swanctl.conf | 0 .../hosts/moon}/etc/strongswan.conf | 1 - .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../alg-ecp-low/posttest.dat | 0 .../alg-ecp-low/pretest.dat | 0 .../alg-ecp-low/test.conf | 0 .../ecdsa-certs/description.txt | 0 .../ecdsa-certs/evaltest.dat | 0 .../hosts/carol/etc/strongswan.conf | 5 +++ .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/dave/etc/strongswan.conf | 5 +++ .../hosts/dave/etc/swanctl/swanctl.conf | 0 .../hosts/moon/etc/strongswan.conf | 5 +++ .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../ecdsa-certs/posttest.dat | 0 .../ecdsa-certs/pretest.dat | 0 .../ecdsa-certs/test.conf | 0 .../ecdsa-pkcs8/description.txt | 0 .../ecdsa-pkcs8/evaltest.dat | 0 .../hosts/carol/etc/strongswan.conf | 0 .../hosts/carol/etc/swanctl/swanctl.conf | 0 .../hosts/dave/etc/strongswan.conf | 0 .../hosts/dave/etc/swanctl/swanctl.conf | 0 .../hosts/moon/etc/strongswan.conf | 0 .../hosts/moon/etc/swanctl/swanctl.conf | 0 .../ecdsa-pkcs8/posttest.dat | 0 .../ecdsa-pkcs8/pretest.dat | 0 .../ecdsa-pkcs8/test.conf | 0 testing/tests/openssl-ikev2/.gitignore | 2 -- .../hosts/dave/etc/strongswan.conf | 5 --- .../hosts/dave/etc/strongswan.conf | 5 --- .../hosts/dave/etc/strongswan.conf | 5 --- .../hosts/dave/etc/strongswan.conf | 5 --- .../critical-extension/description.txt | 5 --- .../critical-extension/evaltest.dat | 4 --- .../hosts/moon/etc/strongswan.conf | 12 ------- .../hosts/moon/etc/swanctl/swanctl.conf | 26 -------------- .../hosts/sun/etc/swanctl/swanctl.conf | 26 -------------- .../critical-extension/posttest.dat | 2 -- .../critical-extension/pretest.dat | 5 --- .../critical-extension/test.conf | 25 ------------- .../net2net-pkcs12/description.txt | 8 ----- .../openssl-ikev2/net2net-pkcs12/evaltest.dat | 5 --- .../hosts/moon/etc/strongswan.conf | 9 ----- .../hosts/moon/etc/swanctl/swanctl.conf | 36 ------------------- .../hosts/sun/etc/strongswan.conf | 9 ----- .../hosts/sun/etc/swanctl/swanctl.conf | 36 ------------------- .../openssl-ikev2/net2net-pkcs12/posttest.dat | 6 ---- .../openssl-ikev2/net2net-pkcs12/pretest.dat | 9 ----- .../openssl-ikev2/net2net-pkcs12/test.conf | 25 ------------- .../net2net-sha3-rsa-cert/description.txt | 8 ----- .../net2net-sha3-rsa-cert/evaltest.dat | 5 --- .../hosts/moon/etc/strongswan.conf | 9 ----- .../hosts/moon/etc/swanctl/swanctl.conf | 33 ----------------- .../hosts/sun/etc/strongswan.conf | 9 ----- .../hosts/sun/etc/swanctl/swanctl.conf | 33 ----------------- .../net2net-sha3-rsa-cert/posttest.dat | 5 --- .../net2net-sha3-rsa-cert/pretest.dat | 7 ---- .../net2net-sha3-rsa-cert/test.conf | 25 ------------- .../openssl-ikev2/rw-cert/description.txt | 13 ------- .../tests/openssl-ikev2/rw-cert/evaltest.dat | 10 ------ .../rw-cert/hosts/carol/etc/strongswan.conf | 10 ------ .../hosts/carol/etc/swanctl/swanctl.conf | 27 -------------- .../rw-cert/hosts/dave/etc/strongswan.conf | 11 ------ .../hosts/dave/etc/swanctl/swanctl.conf | 27 -------------- .../rw-cert/hosts/moon/etc/strongswan.conf | 10 ------ .../hosts/moon/etc/swanctl/swanctl.conf | 25 ------------- .../tests/openssl-ikev2/rw-cert/posttest.dat | 8 ----- .../tests/openssl-ikev2/rw-cert/pretest.dat | 11 ------ testing/tests/openssl-ikev2/rw-cert/test.conf | 25 ------------- 118 files changed, 23 insertions(+), 604 deletions(-) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/evaltest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/hosts/carol/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/hosts/moon/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-camellia/test.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/evaltest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/hosts/carol/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/alg-ecp-brainpool-high/hosts/moon => ikev2-algs/alg-ecp-brainpool-high/hosts/dave}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/alg-ecp-brainpool-low/hosts/carol => ikev2-algs/alg-ecp-brainpool-high/hosts/moon}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-high/test.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/evaltest.dat (100%) rename testing/tests/{openssl-ikev2/alg-ecp-brainpool-low/hosts/moon => ikev2-algs/alg-ecp-brainpool-low/hosts/carol}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/alg-ecp-high/hosts/carol => ikev2-algs/alg-ecp-brainpool-low/hosts/dave}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/alg-ecp-high => ikev2-algs/alg-ecp-brainpool-low}/hosts/moon/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-brainpool-low/test.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/evaltest.dat (100%) rename testing/tests/{openssl-ikev2/alg-ecp-low => ikev2-algs/alg-ecp-high}/hosts/carol/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/alg-ecp-low/hosts/moon => ikev2-algs/alg-ecp-high/hosts/dave}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/ecdsa-certs/hosts/carol => ikev2-algs/alg-ecp-high/hosts/moon}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-high/test.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/evaltest.dat (100%) rename testing/tests/{openssl-ikev2/ecdsa-certs/hosts/dave => ikev2-algs/alg-ecp-low/hosts/carol}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/ecdsa-certs/hosts/moon => ikev2-algs/alg-ecp-low/hosts/dave}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2/critical-extension/hosts/sun => ikev2-algs/alg-ecp-low/hosts/moon}/etc/strongswan.conf (84%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2-algs}/alg-ecp-low/test.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/evaltest.dat (100%) create mode 100644 testing/tests/ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf (100%) create mode 100644 testing/tests/ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf (100%) create mode 100644 testing/tests/ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-certs/test.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/description.txt (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/evaltest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/hosts/carol/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/hosts/dave/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/hosts/moon/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/posttest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/pretest.dat (100%) rename testing/tests/{openssl-ikev2 => ikev2}/ecdsa-pkcs8/test.conf (100%) delete mode 100644 testing/tests/openssl-ikev2/.gitignore delete mode 100644 testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf delete mode 100644 testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf delete mode 100644 testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/strongswan.conf delete mode 100644 testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/strongswan.conf delete mode 100644 testing/tests/openssl-ikev2/critical-extension/description.txt delete mode 100644 testing/tests/openssl-ikev2/critical-extension/evaltest.dat delete mode 100644 testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/swanctl/swanctl.conf delete mode 100755 testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/swanctl.conf delete mode 100644 testing/tests/openssl-ikev2/critical-extension/posttest.dat delete mode 100644 testing/tests/openssl-ikev2/critical-extension/pretest.dat delete mode 100644 testing/tests/openssl-ikev2/critical-extension/test.conf delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/description.txt delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/evaltest.dat delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/swanctl.conf delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/swanctl/swanctl.conf delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/posttest.dat delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/pretest.dat delete mode 100644 testing/tests/openssl-ikev2/net2net-pkcs12/test.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/description.txt delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/evaltest.dat delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/swanctl.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/swanctl.conf delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/posttest.dat delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/pretest.dat delete mode 100755 testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/test.conf delete mode 100644 testing/tests/openssl-ikev2/rw-cert/description.txt delete mode 100644 testing/tests/openssl-ikev2/rw-cert/evaltest.dat delete mode 100644 testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/swanctl/swanctl.conf delete mode 100644 testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/swanctl/swanctl.conf delete mode 100644 testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/strongswan.conf delete mode 100755 testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/swanctl/swanctl.conf delete mode 100644 testing/tests/openssl-ikev2/rw-cert/posttest.dat delete mode 100644 testing/tests/openssl-ikev2/rw-cert/pretest.dat delete mode 100644 testing/tests/openssl-ikev2/rw-cert/test.conf diff --git a/testing/scripts/build-certs-chroot b/testing/scripts/build-certs-chroot index b53af85ee..9d5dd8569 100755 --- a/testing/scripts/build-certs-chroot +++ b/testing/scripts/build-certs-chroot @@ -356,7 +356,7 @@ openssl pkcs12 -export -inkey ${HOST_KEY} -in ${HOST_CERT} -name "sun" \ -certpbe aes-128-cbc -macalg sha256 -passout "pass:IxjQVCF3JGI+MoPi" > ${SUN_PKCS12} # Put a PKCS#12 copy into the botan/net2net-pkcs12 scenario -for t in botan/net2net-pkcs12 openssl-ikev2/net2net-pkcs12 +for t in botan/net2net-pkcs12 do TEST="${TEST_DIR}/${t}" mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/pkcs12 @@ -762,13 +762,6 @@ pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --outform pem > ${TEST_CERT} cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem -# Put a copy in the openssl-ikev2/critical extension scenario -TEST="${TEST_DIR}/openssl-ikev2/critical-extension" -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/moon/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 - # Generate sun certificate with an unsupported critical X.509 extension TEST="${TEST_DIR}/ikev2/critical-extension" TEST_KEY="${TEST}/hosts/sun/${SWANCTL_DIR}/rsa/sunKey.pem" @@ -785,13 +778,6 @@ pki --issue --cakey ${CA_KEY} --cacert ${CA_CERT} --crl ${CA_CDP} --type rsa \ --outform pem > ${TEST_CERT} cp ${TEST_CERT} ${CA_DIR}/certs/${SERIAL}.pem -# Put a copy in the openssl-ikev2/critical extension scenario -TEST="${TEST_DIR}/openssl-ikev2/critical-extension" -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa -mkdir -p ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 -cp ${TEST_KEY} ${TEST}/hosts/sun/${SWANCTL_DIR}/rsa -cp ${TEST_CERT} ${TEST}/hosts/sun/${SWANCTL_DIR}/x509 - # Generate winnetou server certificate HOST_KEY="${CA_DIR}/winnetouKey.pem" HOST_CERT="${CA_DIR}/winnetouCert.pem" @@ -1153,10 +1139,10 @@ pki --self --type ecdsa --in ${ECDSA_KEY} \ --dn "C=CH, O=${PROJECT}, CN=strongSwan EC Root CA" \ --outform pem > ${ECDSA_CERT} -# Put a copy in the openssl-ikev2/ecdsa-certs scenario +# Put a copy in the ikev2/ecdsa-certs scenario for t in ecdsa-certs ecdsa-pkcs8 do - TEST="${TEST_DIR}/openssl-ikev2/${t}" + TEST="${TEST_DIR}/ikev2/${t}" for h in moon carol dave do mkdir -p ${TEST}/hosts/${h}/${SWANCTL_DIR}/x509ca @@ -1165,7 +1151,7 @@ do done # Generate a moon ECDSA 521 bit certificate -TEST="${TEST_DIR}/openssl-ikev2/ecdsa-certs" +TEST="${TEST_DIR}/ikev2/ecdsa-certs" MOON_KEY="${TEST}/hosts/moon/${SWANCTL_DIR}/ecdsa/moonKey.pem" MOON_CERT="${TEST}/hosts/moon/${SWANCTL_DIR}/x509/moonCert.pem" CN="moon.strongswan.org" @@ -1207,8 +1193,8 @@ pki --issue --cakey ${ECDSA_KEY} --cacert ${ECDSA_CERT} --type ecdsa \ --crl ${ECDSA_CDP} --outform pem > ${DAVE_CERT} cp ${DAVE_CERT} ${ECDSA_DIR}/certs/${SERIAL}.pem -# Put CA and EE certificate copies in the openssl-ikev2/ecdsa-pkcs8 scenario -TEST="${TEST_DIR}/openssl-ikev2/ecdsa-pkcs8" +# Put CA and EE certificate copies in the ikev2/ecdsa-pkcs8 scenario +TEST="${TEST_DIR}/ikev2/ecdsa-pkcs8" mkdir -p ${TEST}/hosts/moon/${SWANCTL_DIR}/x509 mkdir -p ${TEST}/hosts/carol/${SWANCTL_DIR}/x509 mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/x509 @@ -1419,8 +1405,8 @@ pki --issue --cakey ${SHA3_RSA_KEY} --cacert ${SHA3_RSA_CERT} --type rsa \ --crl ${SHA3_RSA_CDP} --digest sha3_256 --outform pem > ${MOON_CERT} cp ${MOON_CERT} ${SHA3_RSA_DIR}/certs/${SERIAL}.pem -# Put a copy in the botan openssl-ikev2 and wolfssl net2net-sha3-rsa-cert scenarios -for d in botan openssl-ikev2 wolfssl +# Put a copy in the botan and wolfssl net2net-sha3-rsa-cert scenarios +for d in botan wolfssl do TEST="${TEST_DIR}/${d}/net2net-sha3-rsa-cert" cd ${TEST}/hosts/moon/${SWANCTL_DIR} diff --git a/testing/tests/openssl-ikev2/alg-camellia/description.txt b/testing/tests/ikev2-algs/alg-camellia/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/description.txt rename to testing/tests/ikev2-algs/alg-camellia/description.txt diff --git a/testing/tests/openssl-ikev2/alg-camellia/evaltest.dat b/testing/tests/ikev2-algs/alg-camellia/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/evaltest.dat rename to testing/tests/ikev2-algs/alg-camellia/evaltest.dat diff --git a/testing/tests/openssl-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-camellia/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-camellia/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-camellia/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-camellia/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-camellia/posttest.dat b/testing/tests/ikev2-algs/alg-camellia/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/posttest.dat rename to testing/tests/ikev2-algs/alg-camellia/posttest.dat diff --git a/testing/tests/openssl-ikev2/alg-camellia/pretest.dat b/testing/tests/ikev2-algs/alg-camellia/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/pretest.dat rename to testing/tests/ikev2-algs/alg-camellia/pretest.dat diff --git a/testing/tests/openssl-ikev2/alg-camellia/test.conf b/testing/tests/ikev2-algs/alg-camellia/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-camellia/test.conf rename to testing/tests/ikev2-algs/alg-camellia/test.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/description.txt b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/description.txt rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/description.txt diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/evaltest.dat b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/evaltest.dat rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/evaltest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/posttest.dat b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/posttest.dat rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/posttest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/pretest.dat b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/pretest.dat rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/pretest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/test.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-high/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-high/test.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-high/test.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/description.txt b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/description.txt rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/description.txt diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/evaltest.dat b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/evaltest.dat rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/evaltest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/posttest.dat b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/posttest.dat rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/posttest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/pretest.dat b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/pretest.dat rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/pretest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/test.conf b/testing/tests/ikev2-algs/alg-ecp-brainpool-low/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-brainpool-low/test.conf rename to testing/tests/ikev2-algs/alg-ecp-brainpool-low/test.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/description.txt b/testing/tests/ikev2-algs/alg-ecp-high/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/description.txt rename to testing/tests/ikev2-algs/alg-ecp-high/description.txt diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/evaltest.dat b/testing/tests/ikev2-algs/alg-ecp-high/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/evaltest.dat rename to testing/tests/ikev2-algs/alg-ecp-high/evaltest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-high/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-high/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-high/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-high/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-high/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-high/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/posttest.dat b/testing/tests/ikev2-algs/alg-ecp-high/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/posttest.dat rename to testing/tests/ikev2-algs/alg-ecp-high/posttest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/pretest.dat b/testing/tests/ikev2-algs/alg-ecp-high/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/pretest.dat rename to testing/tests/ikev2-algs/alg-ecp-high/pretest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/test.conf b/testing/tests/ikev2-algs/alg-ecp-high/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-high/test.conf rename to testing/tests/ikev2-algs/alg-ecp-high/test.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/description.txt b/testing/tests/ikev2-algs/alg-ecp-low/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/description.txt rename to testing/tests/ikev2-algs/alg-ecp-low/description.txt diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/evaltest.dat b/testing/tests/ikev2-algs/alg-ecp-low/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/evaltest.dat rename to testing/tests/ikev2-algs/alg-ecp-low/evaltest.dat diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-low/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-low/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-low/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-low/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-algs/alg-ecp-low/hosts/moon/etc/strongswan.conf similarity index 84% rename from testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/strongswan.conf rename to testing/tests/ikev2-algs/alg-ecp-low/hosts/moon/etc/strongswan.conf index 77d858547..a322670f4 100644 --- a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-algs/alg-ecp-low/hosts/moon/etc/strongswan.conf @@ -2,5 +2,4 @@ charon { load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown - multiple_authentication = no } diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2-algs/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2-algs/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/posttest.dat b/testing/tests/ikev2-algs/alg-ecp-low/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/posttest.dat rename to testing/tests/ikev2-algs/alg-ecp-low/posttest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/pretest.dat b/testing/tests/ikev2-algs/alg-ecp-low/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/pretest.dat rename to testing/tests/ikev2-algs/alg-ecp-low/pretest.dat diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/test.conf b/testing/tests/ikev2-algs/alg-ecp-low/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/alg-ecp-low/test.conf rename to testing/tests/ikev2-algs/alg-ecp-low/test.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/description.txt b/testing/tests/ikev2/ecdsa-certs/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/description.txt rename to testing/tests/ikev2/ecdsa-certs/description.txt diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat b/testing/tests/ikev2/ecdsa-certs/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat rename to testing/tests/ikev2/ecdsa-certs/evaltest.dat diff --git a/testing/tests/ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf new file mode 100644 index 000000000..a322670f4 --- /dev/null +++ b/testing/tests/ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf @@ -0,0 +1,5 @@ +# /etc/strongswan.conf - strongSwan configuration file + +charon { + load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown +} diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf new file mode 100644 index 000000000..a322670f4 --- /dev/null +++ b/testing/tests/ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf @@ -0,0 +1,5 @@ +# /etc/strongswan.conf - strongSwan configuration file + +charon { + load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown +} diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev2/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev2/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf new file mode 100644 index 000000000..a322670f4 --- /dev/null +++ b/testing/tests/ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf @@ -0,0 +1,5 @@ +# /etc/strongswan.conf - strongSwan configuration file + +charon { + load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown +} diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/posttest.dat b/testing/tests/ikev2/ecdsa-certs/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/posttest.dat rename to testing/tests/ikev2/ecdsa-certs/posttest.dat diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/pretest.dat b/testing/tests/ikev2/ecdsa-certs/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/pretest.dat rename to testing/tests/ikev2/ecdsa-certs/pretest.dat diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/test.conf b/testing/tests/ikev2/ecdsa-certs/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-certs/test.conf rename to testing/tests/ikev2/ecdsa-certs/test.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/description.txt b/testing/tests/ikev2/ecdsa-pkcs8/description.txt similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/description.txt rename to testing/tests/ikev2/ecdsa-pkcs8/description.txt diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/evaltest.dat b/testing/tests/ikev2/ecdsa-pkcs8/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/evaltest.dat rename to testing/tests/ikev2/ecdsa-pkcs8/evaltest.dat diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ecdsa-pkcs8/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev2/ecdsa-pkcs8/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev2/ecdsa-pkcs8/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ecdsa-pkcs8/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/strongswan.conf rename to testing/tests/ikev2/ecdsa-pkcs8/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev2/ecdsa-pkcs8/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ecdsa-pkcs8/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev2/ecdsa-pkcs8/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev2/ecdsa-pkcs8/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/posttest.dat b/testing/tests/ikev2/ecdsa-pkcs8/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/posttest.dat rename to testing/tests/ikev2/ecdsa-pkcs8/posttest.dat diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/pretest.dat b/testing/tests/ikev2/ecdsa-pkcs8/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/pretest.dat rename to testing/tests/ikev2/ecdsa-pkcs8/pretest.dat diff --git a/testing/tests/openssl-ikev2/ecdsa-pkcs8/test.conf b/testing/tests/ikev2/ecdsa-pkcs8/test.conf similarity index 100% rename from testing/tests/openssl-ikev2/ecdsa-pkcs8/test.conf rename to testing/tests/ikev2/ecdsa-pkcs8/test.conf diff --git a/testing/tests/openssl-ikev2/.gitignore b/testing/tests/openssl-ikev2/.gitignore deleted file mode 100644 index c67f9a278..000000000 --- a/testing/tests/openssl-ikev2/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -*.pem -*.p12 diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf deleted file mode 100644 index 59c81a0f9..000000000 --- a/testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,5 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce aes sha1 sha2 gmp pem pkcs1 hmac kdf x509 openssl curl revocation vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf deleted file mode 100644 index f08553bf5..000000000 --- a/testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,5 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce aes des sha1 sha2 gmp pem pkcs1 hmac kdf x509 openssl curl revocation vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/strongswan.conf deleted file mode 100644 index 59c81a0f9..000000000 --- a/testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,5 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce aes sha1 sha2 gmp pem pkcs1 hmac kdf x509 openssl curl revocation vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/strongswan.conf deleted file mode 100644 index f08553bf5..000000000 --- a/testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,5 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce aes des sha1 sha2 gmp pem pkcs1 hmac kdf x509 openssl curl revocation vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev2/critical-extension/description.txt b/testing/tests/openssl-ikev2/critical-extension/description.txt deleted file mode 100644 index 4f472b83b..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/description.txt +++ /dev/null @@ -1,5 +0,0 @@ -A connection between the subnets behind the gateways moon and sun is set up. -The authentication is based on X.509 certificates which contain a critical but -unsupported 'strongSwan' extension. Whereas moon ignores unsupported critical -extensions by setting libstrongswan.x509.enforce_critical = no in strongswan.conf, -sun discards such certificates and aborts the connection setup. diff --git a/testing/tests/openssl-ikev2/critical-extension/evaltest.dat b/testing/tests/openssl-ikev2/critical-extension/evaltest.dat deleted file mode 100644 index e91ba2b82..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/evaltest.dat +++ /dev/null @@ -1,4 +0,0 @@ -moon::cat /var/log/daemon.log::sending end entity cert::YES -moon::cat /var/log/daemon.log::received AUTHENTICATION_FAILED notify error::YES -sun:: cat /var/log/daemon.log::found unsupported critical X.509 extension::YES -sun:: cat /var/log/daemon.log::building CRED_CERTIFICATE - X509 failed::YES diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/strongswan.conf b/testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/strongswan.conf deleted file mode 100644 index f2104c5f8..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/strongswan.conf +++ /dev/null @@ -1,12 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce pem pkcs1 openssl revocation curl vici kernel-netlink socket-default updown - multiple_authentication = no -} - -libstrongswan { - x509 { - enforce_critical = no - } -} diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/swanctl/swanctl.conf deleted file mode 100755 index 0b0aa32a5..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,26 +0,0 @@ -connections { - - gw-gw { - local_addrs = 192.168.0.1 - remote_addrs = 192.168.0.2 - - local { - auth = pubkey - id = moon.strongswan.org - } - remote { - auth = pubkey - id = sun.strongswan.org - } - children { - net-net { - local_ts = 10.1.0.0/16 - remote_ts = 10.2.0.0/16 - esp_proposals = aes128gcm128-ecp256 - } - } - version = 2 - mobike = no - proposals = aes128-sha256-ecp256 - } -} diff --git a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/swanctl.conf deleted file mode 100755 index bb068bdbe..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,26 +0,0 @@ -connections { - - gw-gw { - local_addrs = 192.168.0.2 - remote_addrs = 192.168.0.1 - - local { - auth = pubkey - id = sun.strongswan.org - } - remote { - auth = pubkey - id = moon.strongswan.org - } - children { - net-net { - local_ts = 10.2.0.0/16 - remote_ts = 10.1.0.0/16 - esp_proposals = aes128gcm128-ecp256 - } - } - version = 2 - mobike = no - proposals = aes128-sha256-ecp256 - } -} diff --git a/testing/tests/openssl-ikev2/critical-extension/posttest.dat b/testing/tests/openssl-ikev2/critical-extension/posttest.dat deleted file mode 100644 index 4ee2ed671..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/posttest.dat +++ /dev/null @@ -1,2 +0,0 @@ -moon::systemctl stop strongswan -sun::systemctl stop strongswan diff --git a/testing/tests/openssl-ikev2/critical-extension/pretest.dat b/testing/tests/openssl-ikev2/critical-extension/pretest.dat deleted file mode 100644 index bcc06dbcc..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/pretest.dat +++ /dev/null @@ -1,5 +0,0 @@ -moon::systemctl start strongswan -sun::systemctl start strongswan -moon::expect-connection gw-gw -sun::expect-connection gw-gw -moon::swanctl --initiate --child net-net 2> /dev/null diff --git a/testing/tests/openssl-ikev2/critical-extension/test.conf b/testing/tests/openssl-ikev2/critical-extension/test.conf deleted file mode 100644 index d3016a886..000000000 --- a/testing/tests/openssl-ikev2/critical-extension/test.conf +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash -# -# This configuration file provides information on the -# guest instances used for this test - -# All guest instances that are required for this test -# -VIRTHOSTS="alice moon winnetou sun bob" - -# Corresponding block diagram -# -DIAGRAM="a-m-w-s-b.png" - -# Guest instances on which tcpdump is to be started -# -TCPDUMPHOSTS="" - -# Guest instances on which IPsec is started -# Used for IPsec logging purposes -# -IPSECHOSTS="moon sun" - -# charon controlled by swanctl -# -SWANCTL=1 diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/description.txt b/testing/tests/openssl-ikev2/net2net-pkcs12/description.txt deleted file mode 100644 index 1d40e30f0..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/description.txt +++ /dev/null @@ -1,8 +0,0 @@ -A connection between the subnets behind the gateways moon and sun is set up. -The authentication is based on X.509 certificates and an RSA private key stored in -PKCS12 format. -

-Upon the successful establishment of the IPsec tunnels, leftfirewall=yes -automatically inserts iptables-based firewall rules that let pass the tunneled traffic. -In order to test both tunnel and firewall, client alice behind gateway moon -pings client bob located behind gateway sun. diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/evaltest.dat b/testing/tests/openssl-ikev2/net2net-pkcs12/evaltest.dat deleted file mode 100644 index bfc7e76f1..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/evaltest.dat +++ /dev/null @@ -1,5 +0,0 @@ -alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES -moon::swanctl --list-sas --raw 2> /dev/null::gw-gw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=500 local-id=moon.strongswan.org remote-host=192.168.0.2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.2.0.0/16]::YES -sun:: swanctl --list-sas --raw 2> /dev/null::gw-gw.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=500 local-id=sun.strongswan.org remote-host=192.168.0.1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.2.0.0/16] remote-ts=\[10.1.0.0/16]::YES -sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES -sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf b/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf deleted file mode 100644 index 9232c58ad..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf +++ /dev/null @@ -1,9 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -swanctl { - load = pem openssl -} - -charon-systemd { - load = pem nonce openssl curl vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/swanctl.conf deleted file mode 100755 index b11cf0f3e..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,36 +0,0 @@ -connections { - - gw-gw { - local_addrs = 192.168.0.1 - remote_addrs = 192.168.0.2 - - local { - auth = pubkey - id = moon.strongswan.org - } - remote { - auth = pubkey - id = sun.strongswan.org - } - children { - net-net { - local_ts = 10.1.0.0/16 - remote_ts = 10.2.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - esp_proposals = aes128gcm128-modp3072 - } - } - version = 2 - mobike = no - proposals = aes128-sha256-modp3072 - } -} - -secrets { - - pkcs12-moon { - file = moonCert.p12 - secret = "kUqd8O7mzbjXNJKQ" - } -} diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf b/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf deleted file mode 100644 index 9232c58ad..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf +++ /dev/null @@ -1,9 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -swanctl { - load = pem openssl -} - -charon-systemd { - load = pem nonce openssl curl vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/swanctl/swanctl.conf deleted file mode 100755 index 28c0e87a4..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,36 +0,0 @@ -connections { - - gw-gw { - local_addrs = 192.168.0.2 - remote_addrs = 192.168.0.1 - - local { - auth = pubkey - id = sun.strongswan.org - } - remote { - auth = pubkey - id = moon.strongswan.org - } - children { - net-net { - local_ts = 10.2.0.0/16 - remote_ts = 10.1.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - esp_proposals = aes128gcm128-modp3072 - } - } - version = 2 - mobike = no - proposals = aes128-sha256-modp3072 - } -} - -secrets { - - pkcs12-sun { - file = sunCert.p12 - secret = "IxjQVCF3JGI+MoPi" - } -} diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/posttest.dat b/testing/tests/openssl-ikev2/net2net-pkcs12/posttest.dat deleted file mode 100644 index 61d173e74..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/posttest.dat +++ /dev/null @@ -1,6 +0,0 @@ -moon::systemctl stop strongswan -sun::systemctl stop strongswan -moon::iptables-restore < /etc/iptables.flush -sun::iptables-restore < /etc/iptables.flush -moon::rm /etc/swanctl/pkcs12/moonCert.p12 -sun::rm /etc/swanctl/pkcs12/sunCert.p12 diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/pretest.dat b/testing/tests/openssl-ikev2/net2net-pkcs12/pretest.dat deleted file mode 100644 index a65c397a6..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/pretest.dat +++ /dev/null @@ -1,9 +0,0 @@ -moon::cd /etc/swanctl; rm rsa/moonKey.pem x509/moonCert.pem x509ca/strongswanCert.pem -sun::cd /etc/swanctl; rm rsa/sunKey.pem x509/sunCert.pem x509ca/strongswanCert.pem -moon::iptables-restore < /etc/iptables.rules -sun::iptables-restore < /etc/iptables.rules -moon::systemctl start strongswan -sun::systemctl start strongswan -moon::expect-connection gw-gw -sun::expect-connection gw-gw -moon::swanctl --initiate --child net-net 2> /dev/null diff --git a/testing/tests/openssl-ikev2/net2net-pkcs12/test.conf b/testing/tests/openssl-ikev2/net2net-pkcs12/test.conf deleted file mode 100644 index 87abc763b..000000000 --- a/testing/tests/openssl-ikev2/net2net-pkcs12/test.conf +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash -# -# This configuration file provides information on the -# guest instances used for this test - -# All guest instances that are required for this test -# -VIRTHOSTS="alice moon winnetou sun bob" - -# Corresponding block diagram -# -DIAGRAM="a-m-w-s-b.png" - -# Guest instances on which tcpdump is to be started -# -TCPDUMPHOSTS="sun" - -# Guest instances on which IPsec is started -# Used for IPsec logging purposes -# -IPSECHOSTS="moon sun" - -# charon controlled by swanctl -# -SWANCTL=1 diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/description.txt b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/description.txt deleted file mode 100755 index 2db82a941..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/description.txt +++ /dev/null @@ -1,8 +0,0 @@ -A connection between the subnets behind the gateways moon and sun is set up. -The authentication is based on X.509 certificates with signatures consisting of -RSA-encrypted SHA-3 hashes. -

-Upon the successful establishment of the IPsec tunnel, the updown script automatically -inserts iptables-based firewall rules that let pass the tunneled traffic. -In order to test both tunnel and firewall, client alice behind gateway moon -pings client bob located behind gateway sun. diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/evaltest.dat b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/evaltest.dat deleted file mode 100755 index 4c56d5299..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/evaltest.dat +++ /dev/null @@ -1,5 +0,0 @@ -moon::swanctl --list-sas --raw 2> /dev/null::gw-gw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=500 local-id=moon.strongswan.org remote-host=192.168.0.2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.2.0.0/16]::YES -sun:: swanctl --list-sas --raw 2> /dev/null::gw-gw.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=500 local-id=sun.strongswan.org remote-host=192.168.0.1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.2.0.0/16] remote-ts=\[10.1.0.0/16]::YES -alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES -sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES -sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf deleted file mode 100755 index 50d8bcce9..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf +++ /dev/null @@ -1,9 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -swanctl { - load = pem x509 revocation constraints pubkey openssl random -} - -charon-systemd { - load = random nonce pem x509 revocation constraints pubkey openssl curl kernel-netlink socket-default updown vici -} diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/swanctl.conf deleted file mode 100755 index bcc2742f7..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,33 +0,0 @@ -connections { - - gw-gw { - local_addrs = 192.168.0.1 - remote_addrs = 192.168.0.2 - - local { - auth = pubkey - certs = moonCert.pem - id = moon.strongswan.org - } - remote { - auth = pubkey - id = sun.strongswan.org - } - children { - net-net { - local_ts = 10.1.0.0/16 - remote_ts = 10.2.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - rekey_time = 5400 - rekey_bytes = 500000000 - rekey_packets = 1000000 - esp_proposals = aes128gcm128-x25519 - } - } - version = 2 - mobike = no - reauth_time = 10800 - proposals = aes128-sha256-x25519 - } -} diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf deleted file mode 100755 index 50d8bcce9..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf +++ /dev/null @@ -1,9 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -swanctl { - load = pem x509 revocation constraints pubkey openssl random -} - -charon-systemd { - load = random nonce pem x509 revocation constraints pubkey openssl curl kernel-netlink socket-default updown vici -} diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/swanctl.conf deleted file mode 100755 index 12cee0fc6..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,33 +0,0 @@ -connections { - - gw-gw { - local_addrs = 192.168.0.2 - remote_addrs = 192.168.0.1 - - local { - auth = pubkey - certs = sunCert.pem - id = sun.strongswan.org - } - remote { - auth = pubkey - id = moon.strongswan.org - } - children { - net-net { - local_ts = 10.2.0.0/16 - remote_ts = 10.1.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - rekey_time = 5400 - rekey_bytes = 500000000 - rekey_packets = 1000000 - esp_proposals = aes128gcm128-x25519 - } - } - version = 2 - mobike = no - reauth_time = 10800 - proposals = aes128-sha256-x25519 - } -} diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/posttest.dat b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/posttest.dat deleted file mode 100755 index cc6a5bff7..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/posttest.dat +++ /dev/null @@ -1,5 +0,0 @@ -moon::swanctl --terminate --ike gw-gw 2> /dev/null -moon::systemctl stop strongswan -sun::systemctl stop strongswan -moon::iptables-restore < /etc/iptables.flush -sun::iptables-restore < /etc/iptables.flush diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/pretest.dat b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/pretest.dat deleted file mode 100755 index 2d3c8c1e2..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/pretest.dat +++ /dev/null @@ -1,7 +0,0 @@ -moon::iptables-restore < /etc/iptables.rules -sun::iptables-restore < /etc/iptables.rules -moon::systemctl start strongswan -sun::systemctl start strongswan -moon::expect-connection gw-gw -sun::expect-connection gw-gw -moon::swanctl --initiate --child net-net 2> /dev/null diff --git a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/test.conf b/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/test.conf deleted file mode 100755 index 07a3b247a..000000000 --- a/testing/tests/openssl-ikev2/net2net-sha3-rsa-cert/test.conf +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash -# -# This configuration file provides information on the -# guest instances used for this test - -# All guest instances that are required for this test -# -VIRTHOSTS="alice moon winnetou sun bob" - -# Corresponding block diagram -# -DIAGRAM="a-m-w-s-b.png" - -# Guest instances on which tcpdump is to be started -# -TCPDUMPHOSTS="sun" - -# Guest instances on which IPsec is started -# Used for IPsec logging purposes -# -IPSECHOSTS="moon sun" - -# charon controlled by swanctl -# -SWANCTL=1 diff --git a/testing/tests/openssl-ikev2/rw-cert/description.txt b/testing/tests/openssl-ikev2/rw-cert/description.txt deleted file mode 100644 index ca738a1d4..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/description.txt +++ /dev/null @@ -1,13 +0,0 @@ -The roadwarrior carol and the gateway moon use the openssl -plugin based on the OpenSSL library for all cryptographical and X.509 certificate -functions whereas roadwarrior dave uses the default strongSwan cryptographical -plugins aes des sha1 sha2 hmac gmp and x509. -

-The roadwarriors carol and dave set up a connection each -to gateway moon. The authentication is based on X.509 certificates. -

-Upon the successful establishment of the IPsec tunnels, the updown script -automatically inserts iptables-based firewall rules that let pass the tunneled traffic. -In order to test both tunnel and firewall, both carol and dave ping -the client alice behind the gateway moon. - diff --git a/testing/tests/openssl-ikev2/rw-cert/evaltest.dat b/testing/tests/openssl-ikev2/rw-cert/evaltest.dat deleted file mode 100644 index 572a138a6..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/evaltest.dat +++ /dev/null @@ -1,10 +0,0 @@ -carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=3DES_CBC integ-alg=HMAC_SHA1_96 prf-alg=PRF_HMAC_SHA1 dh-group=MODP_2048.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=3DES_CBC.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=3DES_CBC integ-alg=HMAC_SHA1_96 prf-alg=PRF_HMAC_SHA1 dh-group=MODP_2048.*child-sas.*net.*reqid=1 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=3DES_CBC.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net.*reqid=2 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES -moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES -moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES -moon::tcpdump::IP moon.strongswan.org > dave.strongswan.org: ESP::YES diff --git a/testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/strongswan.conf deleted file mode 100644 index 996be95f5..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/strongswan.conf +++ /dev/null @@ -1,10 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = test-vectors pem pkcs1 openssl curl revocation nonce xcbc cmac ctr ccm vici kernel-netlink socket-default updown - - integrity_test = yes - crypto_test { - on_add = yes - } -} diff --git a/testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/swanctl/swanctl.conf deleted file mode 100755 index e8504addb..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,27 +0,0 @@ -connections { - - home { - local_addrs = 192.168.0.100 - remote_addrs = 192.168.0.1 - - local { - auth = pubkey - certs = carolCert.pem - id = carol@strongswan.org - } - remote { - auth = pubkey - id = moon.strongswan.org - } - children { - home { - remote_ts = 10.1.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - esp_proposals = 3des-sha1-modp2048 - } - } - version = 2 - proposals = 3des-sha1-modp2048 - } -} diff --git a/testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/strongswan.conf deleted file mode 100644 index f78a0fb91..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,11 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = test-vectors aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc cmac ctr ccm gcm vici kernel-netlink socket-default updown - - integrity_test = yes - crypto_test { - required = yes - on_add = yes - } -} diff --git a/testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/swanctl/swanctl.conf deleted file mode 100755 index 27c6f12ba..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,27 +0,0 @@ -connections { - - home { - local_addrs = 192.168.0.200 - remote_addrs = 192.168.0.1 - - local { - auth = pubkey - certs = daveCert.pem - id = dave@strongswan.org - } - remote { - auth = pubkey - id = moon.strongswan.org - } - children { - home { - remote_ts = 10.1.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - esp_proposals = aes128gcm128-modp3072 - } - } - version = 2 - proposals = aes128-sha256-modp3072 - } -} diff --git a/testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/strongswan.conf deleted file mode 100644 index 996be95f5..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/strongswan.conf +++ /dev/null @@ -1,10 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = test-vectors pem pkcs1 openssl curl revocation nonce xcbc cmac ctr ccm vici kernel-netlink socket-default updown - - integrity_test = yes - crypto_test { - on_add = yes - } -} diff --git a/testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/swanctl/swanctl.conf deleted file mode 100755 index aa8d6167a..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/swanctl/swanctl.conf +++ /dev/null @@ -1,25 +0,0 @@ -connections { - - rw { - local_addrs = 192.168.0.1 - - local { - auth = pubkey - certs = moonCert.pem - id = moon.strongswan.org - } - remote { - auth = pubkey - } - children { - net { - local_ts = 10.1.0.0/16 - - updown = /usr/local/libexec/ipsec/_updown iptables - esp_proposals = aes128gcm128-modp3072,3des-sha1-modp2048 - } - } - version = 2 - proposals = aes128-sha256-modp3072,3des-sha1-modp2048 - } -} diff --git a/testing/tests/openssl-ikev2/rw-cert/posttest.dat b/testing/tests/openssl-ikev2/rw-cert/posttest.dat deleted file mode 100644 index eb2100856..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/posttest.dat +++ /dev/null @@ -1,8 +0,0 @@ -carol::swanctl --terminate --ike home -dave::swanctl --terminate --ike home -carol::systemctl stop strongswan -dave::systemctl stop strongswan -moon::systemctl stop strongswan -moon::iptables-restore < /etc/iptables.flush -carol::iptables-restore < /etc/iptables.flush -dave::iptables-restore < /etc/iptables.flush diff --git a/testing/tests/openssl-ikev2/rw-cert/pretest.dat b/testing/tests/openssl-ikev2/rw-cert/pretest.dat deleted file mode 100644 index 6a1f10c7b..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/pretest.dat +++ /dev/null @@ -1,11 +0,0 @@ -mmoon::iptables-restore < /etc/iptables.rules -carol::iptables-restore < /etc/iptables.rules -dave::iptables-restore < /etc/iptables.rules -moon::systemctl start strongswan -carol::systemctl start strongswan -dave::systemctl start strongswan -moon::expect-connection rw -carol::expect-connection home -carol::swanctl --initiate --child home 2> /dev/null -dave::expect-connection home -dave::swanctl --initiate --child home 2> /dev/null diff --git a/testing/tests/openssl-ikev2/rw-cert/test.conf b/testing/tests/openssl-ikev2/rw-cert/test.conf deleted file mode 100644 index 1227b9d1c..000000000 --- a/testing/tests/openssl-ikev2/rw-cert/test.conf +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash -# -# This configuration file provides information on the -# guest instances used for this test - -# All guest instances that are required for this test -# -VIRTHOSTS="alice moon carol winnetou dave" - -# Corresponding block diagram -# -DIAGRAM="a-m-c-w-d.png" - -# Guest instances on which tcpdump is to be started -# -TCPDUMPHOSTS="moon" - -# Guest instances on which IPsec is started -# Used for IPsec logging purposes -# -IPSECHOSTS="moon carol dave" - -# charon controlled by swanctl -# -SWANCTL=1 From 8060541f534be9a673a8102ca94a50d89db20365 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 18 Oct 2022 21:11:38 +0200 Subject: [PATCH 04/24] testing: Migrated ikev1 scenarios to new default plugins --- testing/tests/ikev1/compress/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/ikev1/compress/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1/config-payload-push/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/config-payload-push/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/config-payload-push/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/config-payload/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/double-nat-net/hosts/alice/etc/strongswan.conf | 2 +- .../tests/ikev1/double-nat-net/hosts/bob/etc/strongswan.conf | 2 +- .../tests/ikev1/double-nat/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/ikev1/double-nat/hosts/bob/etc/strongswan.conf | 2 +- testing/tests/ikev1/dpd-clear/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/ikev1/dpd-clear/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1/dpd-restart/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1/dpd-restart/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev1/host2host-transport/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/host2host-transport/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/nat-rw/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/ikev1/nat-rw/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/ikev1/nat-rw/hosts/venus/etc/strongswan.conf | 2 +- .../tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf | 4 ++-- .../ikev1/protoport-dual/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1/protoport-dual/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ikev1/rw-cert-unity/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-cert-unity/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/rw-psk-aggressive/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1/rw-psk-aggressive/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1/rw-psk-aggressive/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-psk-fqdn/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-psk-fqdn/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-psk-fqdn/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1/rw-psk-ip-ranges/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1/rw-psk-ip-ranges/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1/rw-psk-ip-ranges/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-psk-ipv4/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-psk-ipv4/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev1/rw-psk-ipv4/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf | 4 ++-- .../xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf | 4 ++-- .../xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf | 4 ++-- .../xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf | 4 ++-- .../xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf | 4 ++-- .../ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf | 4 ++-- 99 files changed, 169 insertions(+), 169 deletions(-) diff --git a/testing/tests/ikev1/compress/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/compress/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1/compress/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/compress/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1/compress/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/compress/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1/compress/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/compress/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/double-nat-net/hosts/alice/etc/strongswan.conf b/testing/tests/ikev1/double-nat-net/hosts/alice/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev1/double-nat-net/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev1/double-nat-net/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/double-nat-net/hosts/bob/etc/strongswan.conf b/testing/tests/ikev1/double-nat-net/hosts/bob/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev1/double-nat-net/hosts/bob/etc/strongswan.conf +++ b/testing/tests/ikev1/double-nat-net/hosts/bob/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/double-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev1/double-nat/hosts/alice/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev1/double-nat/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev1/double-nat/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/double-nat/hosts/bob/etc/strongswan.conf b/testing/tests/ikev1/double-nat/hosts/bob/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev1/double-nat/hosts/bob/etc/strongswan.conf +++ b/testing/tests/ikev1/double-nat/hosts/bob/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/dpd-clear/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/dpd-clear/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1/dpd-clear/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/dpd-clear/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1/dpd-clear/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/dpd-clear/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1/dpd-clear/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/dpd-clear/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1/dpd-restart/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/dpd-restart/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1/dpd-restart/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/dpd-restart/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1/dpd-restart/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/dpd-restart/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1/dpd-restart/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/dpd-restart/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf index 0de0f0539..5ac39a337 100755 --- a/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf index 0de0f0539..5ac39a337 100755 --- a/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf index e79a761a5..8df41f29d 100755 --- a/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf index e79a761a5..8df41f29d 100755 --- a/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default resolve updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default resolve updown vici } diff --git a/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf index bfdf615c3..d565d55ad 100755 --- a/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown sqlite attr-sql vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown sqlite attr-sql vici plugins { attr-sql { diff --git a/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/ikev1/nat-rw/hosts/alice/etc/strongswan.conf index 4d2844bdd..e61dbce48 100644 --- a/testing/tests/ikev1/nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev1/nat-rw/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev1/nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/nat-rw/hosts/sun/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/ikev1/nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/ikev1/nat-rw/hosts/venus/etc/strongswan.conf index 4d2844bdd..e61dbce48 100644 --- a/testing/tests/ikev1/nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev1/nat-rw/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf index 0de0f0539..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf index 0de0f0539..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/protoport-dual/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/protoport-dual/hosts/carol/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev1/protoport-dual/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/protoport-dual/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/protoport-dual/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/protoport-dual/hosts/moon/etc/strongswan.conf index b4864e158..d2715e406 100644 --- a/testing/tests/ikev1/protoport-dual/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/protoport-dual/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-cert-unity/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-unity/hosts/carol/etc/strongswan.conf index ab0bf8a16..dc3cca987 100644 --- a/testing/tests/ikev1/rw-cert-unity/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert-unity/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default unity + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default unity cisco_unity = yes } diff --git a/testing/tests/ikev1/rw-cert-unity/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-unity/hosts/moon/etc/strongswan.conf index aa8b25b6a..e47e4f7ae 100644 --- a/testing/tests/ikev1/rw-cert-unity/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert-unity/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default attr unity + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default attr unity cisco_unity = yes plugins { diff --git a/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf index 0ebac0756..684b00c67 100755 --- a/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf index 0ebac0756..684b00c67 100755 --- a/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf index 5e8955e4e..04e988511 100755 --- a/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random drbg nonce test-vectors aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm vici kernel-netlink socket-default updown + load = random drbg nonce openssl test-vectors pem pkcs1 curl revocation xcbc vici kernel-netlink socket-default updown integrity_test = yes diff --git a/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf index c26fde875..9187d8426 100755 --- a/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici initiator_only = yes } diff --git a/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf index f80ef130f..46772c787 100755 --- a/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pkcs1 pem x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pkcs1 pem revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf index 584e7f6f3..46772c787 100755 --- a/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce des sha1 sha2 hmac kdf pkcs1 pem x509 revocation gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pkcs1 pem revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf index b024fb402..46772c787 100755 --- a/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes des sha1 sha2 hmac kdf pkcs1 pem x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pkcs1 pem revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-aggressive/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-aggressive/hosts/carol/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-aggressive/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-aggressive/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-aggressive/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-aggressive/hosts/dave/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-aggressive/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-aggressive/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-aggressive/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-aggressive/hosts/moon/etc/strongswan.conf index 56ce62f72..ff03899ad 100755 --- a/testing/tests/ikev1/rw-psk-aggressive/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-aggressive/hosts/moon/etc/strongswan.conf @@ -5,7 +5,7 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici i_dont_care_about_security_and_use_aggressive_mode_psk = yes } diff --git a/testing/tests/ikev1/rw-psk-fqdn/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-fqdn/hosts/carol/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-fqdn/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-fqdn/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-fqdn/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-fqdn/hosts/dave/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-fqdn/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-fqdn/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-fqdn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-fqdn/hosts/moon/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-fqdn/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-fqdn/hosts/moon/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-ip-ranges/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-ip-ranges/hosts/carol/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-ip-ranges/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-ip-ranges/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-ip-ranges/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-ip-ranges/hosts/dave/etc/strongswan.conf index 74b062519..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-ip-ranges/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-ip-ranges/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf gmp kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-ip-ranges/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-ip-ranges/hosts/moon/etc/strongswan.conf index ec3ed11da..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-ip-ranges/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-ip-ranges/hosts/moon/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-ipv4/hosts/carol/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-ipv4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-ipv4/hosts/carol/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-ipv4/hosts/dave/etc/strongswan.conf index d7288afe7..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-ipv4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-ipv4/hosts/dave/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/rw-psk-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-psk-ipv4/hosts/moon/etc/strongswan.conf index 51b68f51d..9c9d0bce1 100755 --- a/testing/tests/ikev1/rw-psk-ipv4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/rw-psk-ipv4/hosts/moon/etc/strongswan.conf @@ -5,5 +5,5 @@ swanctl { } charon-systemd { - load = random nonce aes sha1 sha2 md5 hmac kdf curve25519 kernel-netlink socket-default updown vici + load = random nonce openssl kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf index 9e62329e3..79dff9e48 100755 --- a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl eap-md5 eap-radius xauth-eap kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl eap-md5 eap-radius xauth-eap kernel-netlink socket-default updown vici plugins { eap-radius { diff --git a/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf index b4a80bc69..74079b9b7 100755 --- a/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes md5 sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl eap-radius kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl eap-radius kernel-netlink socket-default updown vici plugins { eap-radius { diff --git a/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } diff --git a/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf index 60f5ccbc3..f8a3472e3 100755 --- a/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown vici } From c9883d612b252f463858d5d79cf3009eaa085970 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 18 Oct 2022 21:24:40 +0200 Subject: [PATCH 05/24] testing: Migrated ikev1-algs scenarios to new default plugins --- .../ikev1-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/alg-blowfish/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/alg-blowfish/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-algs/alg-blowfish/hosts/moon/etc/strongswan.conf | 2 +- .../alg-modp-subgroup/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1-algs/alg-sha256/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-algs/alg-sha256/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1-algs/alg-sha384/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-algs/alg-sha384/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1-algs/alg-sha512/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-algs/alg-sha512/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-ccm/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-ccm/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-ctr/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-ctr/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-gcm/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-gcm/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-xcbc/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-aes-xcbc/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-null/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-algs/esp-alg-null/hosts/moon/etc/strongswan.conf | 2 +- 26 files changed, 26 insertions(+), 26 deletions(-) diff --git a/testing/tests/ikev1-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf index 6208c1d22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-3des-md5/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des md5 sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf index 6208c1d22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-3des-md5/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce des md5 sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-blowfish/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-blowfish/hosts/carol/etc/strongswan.conf index 41bf7dea8..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-blowfish/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-blowfish/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce blowfish sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-blowfish/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-blowfish/hosts/dave/etc/strongswan.conf index 41bf7dea8..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-blowfish/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-blowfish/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce blowfish sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-blowfish/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-blowfish/hosts/moon/etc/strongswan.conf index 41bf7dea8..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-blowfish/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-blowfish/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce blowfish sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf index 157792a6e..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf index 157792a6e..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf index 157792a6e..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-modp-subgroup/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-sha256/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-sha256/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-sha256/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-sha256/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-sha256/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-sha256/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-sha256/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-sha256/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-sha384/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-sha384/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-sha384/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-sha384/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-sha384/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-sha384/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-sha384/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-sha384/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-sha512/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-sha512/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-sha512/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-sha512/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/alg-sha512/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-sha512/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/alg-sha512/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/alg-sha512/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-ccm/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-ctr/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-gcm/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-gmac/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-aes-xcbc/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-null/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-null/hosts/carol/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-null/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-null/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } diff --git a/testing/tests/ikev1-algs/esp-alg-null/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/esp-alg-null/hosts/moon/etc/strongswan.conf index 14d1cee22..373d144b1 100644 --- a/testing/tests/ikev1-algs/esp-alg-null/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-algs/esp-alg-null/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default } From e7166c342b6f2691bf4c9c2ade55162b3fdce204 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 18 Oct 2022 21:40:36 +0200 Subject: [PATCH 06/24] testing: Distributed openssl-ikev1 scenarios --- testing/scripts/build-certs-chroot | 4 ++-- .../alg-camellia/description.txt | 0 .../{openssl-ikev1 => ikev1-algs}/alg-camellia/evaltest.dat | 0 .../alg-camellia/hosts/carol/etc/strongswan.conf | 0 .../alg-camellia/hosts/carol/etc/swanctl/swanctl.conf | 0 .../alg-camellia/hosts/moon/etc/strongswan.conf | 0 .../alg-camellia/hosts/moon/etc/swanctl/swanctl.conf | 0 .../{openssl-ikev1 => ikev1-algs}/alg-camellia/posttest.dat | 0 .../{openssl-ikev1 => ikev1-algs}/alg-camellia/pretest.dat | 0 .../{openssl-ikev1 => ikev1-algs}/alg-camellia/test.conf | 0 .../alg-ecp-high/description.txt | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-high/evaltest.dat | 0 .../alg-ecp-high/hosts/carol/etc/strongswan.conf | 0 .../alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf | 0 .../alg-ecp-high/hosts/dave}/etc/strongswan.conf | 0 .../alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf | 0 .../alg-ecp-high/hosts/moon}/etc/strongswan.conf | 0 .../alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-high/posttest.dat | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-high/pretest.dat | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-high/test.conf | 0 .../alg-ecp-low/description.txt | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-low/evaltest.dat | 0 .../alg-ecp-low/hosts/carol}/etc/strongswan.conf | 0 .../alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf | 0 .../alg-ecp-low/hosts/dave}/etc/strongswan.conf | 0 .../alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf | 0 .../alg-ecp-low/hosts/moon}/etc/strongswan.conf | 0 .../alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-low/posttest.dat | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-low/pretest.dat | 0 .../{openssl-ikev1 => ikev1-algs}/alg-ecp-low/test.conf | 0 .../{openssl-ikev1 => ikev1}/ecdsa-certs/description.txt | 0 .../tests/{openssl-ikev1 => ikev1}/ecdsa-certs/evaltest.dat | 0 .../{openssl-ikev1 => ikev1}/ecdsa-certs/hosts/.gitignore | 0 .../ecdsa-certs/hosts/carol}/etc/strongswan.conf | 0 .../ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf | 0 .../tests/ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf | 5 +++++ .../ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf | 0 .../tests/ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf | 5 +++++ .../ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf | 0 .../tests/{openssl-ikev1 => ikev1}/ecdsa-certs/posttest.dat | 0 .../tests/{openssl-ikev1 => ikev1}/ecdsa-certs/pretest.dat | 0 testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/test.conf | 0 .../alg-ecp-high/hosts/dave/etc/strongswan.conf | 5 ----- .../openssl-ikev1/alg-ecp-low/hosts/dave/etc/strongswan.conf | 5 ----- 46 files changed, 12 insertions(+), 12 deletions(-) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/description.txt (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/evaltest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/hosts/carol/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/hosts/moon/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/posttest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/pretest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-camellia/test.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/description.txt (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/evaltest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/hosts/carol/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1/alg-ecp-high/hosts/moon => ikev1-algs/alg-ecp-high/hosts/dave}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1/alg-ecp-low/hosts/carol => ikev1-algs/alg-ecp-high/hosts/moon}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/posttest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/pretest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-high/test.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/description.txt (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/evaltest.dat (100%) rename testing/tests/{openssl-ikev1/alg-ecp-low/hosts/moon => ikev1-algs/alg-ecp-low/hosts/carol}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1/ecdsa-certs/hosts/carol => ikev1-algs/alg-ecp-low/hosts/dave}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1/ecdsa-certs/hosts/dave => ikev1-algs/alg-ecp-low/hosts/moon}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/posttest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/pretest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1-algs}/alg-ecp-low/test.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/description.txt (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/evaltest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/hosts/.gitignore (100%) rename testing/tests/{openssl-ikev1/ecdsa-certs/hosts/moon => ikev1/ecdsa-certs/hosts/carol}/etc/strongswan.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf (100%) create mode 100644 testing/tests/ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf (100%) create mode 100644 testing/tests/ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/posttest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/pretest.dat (100%) rename testing/tests/{openssl-ikev1 => ikev1}/ecdsa-certs/test.conf (100%) delete mode 100644 testing/tests/openssl-ikev1/alg-ecp-high/hosts/dave/etc/strongswan.conf delete mode 100644 testing/tests/openssl-ikev1/alg-ecp-low/hosts/dave/etc/strongswan.conf diff --git a/testing/scripts/build-certs-chroot b/testing/scripts/build-certs-chroot index 9d5dd8569..161139f04 100755 --- a/testing/scripts/build-certs-chroot +++ b/testing/scripts/build-certs-chroot @@ -1219,8 +1219,8 @@ mkdir -p ${TEST}/hosts/dave/${SWANCTL_DIR}/pkcs8 openssl pkcs8 -in ${DAVE_KEY} -nocrypt -topk8 -v2 aes128 \ -passout "pass:OJlNZBx+80dLh4wC6fw5LmBd" -out ${TEST_KEY} -# Put CA and EE certificate copies in the openssl-ikev1/ecdsa-certs scenario -TEST="${TEST_DIR}/openssl-ikev1/ecdsa-certs" +# Put CA and EE certificate copies in the ikev1/ecdsa-certs scenario +TEST="${TEST_DIR}/ikev1/ecdsa-certs" cd ${TEST}/hosts/moon/${SWANCTL_DIR} mkdir -p ecdsa x509 x509ca cp ${MOON_KEY} ecdsa diff --git a/testing/tests/openssl-ikev1/alg-camellia/description.txt b/testing/tests/ikev1-algs/alg-camellia/description.txt similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/description.txt rename to testing/tests/ikev1-algs/alg-camellia/description.txt diff --git a/testing/tests/openssl-ikev1/alg-camellia/evaltest.dat b/testing/tests/ikev1-algs/alg-camellia/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/evaltest.dat rename to testing/tests/ikev1-algs/alg-camellia/evaltest.dat diff --git a/testing/tests/openssl-ikev1/alg-camellia/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-camellia/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-camellia/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-camellia/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/alg-camellia/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-camellia/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-camellia/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-camellia/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/alg-camellia/posttest.dat b/testing/tests/ikev1-algs/alg-camellia/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/posttest.dat rename to testing/tests/ikev1-algs/alg-camellia/posttest.dat diff --git a/testing/tests/openssl-ikev1/alg-camellia/pretest.dat b/testing/tests/ikev1-algs/alg-camellia/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/pretest.dat rename to testing/tests/ikev1-algs/alg-camellia/pretest.dat diff --git a/testing/tests/openssl-ikev1/alg-camellia/test.conf b/testing/tests/ikev1-algs/alg-camellia/test.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-camellia/test.conf rename to testing/tests/ikev1-algs/alg-camellia/test.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/description.txt b/testing/tests/ikev1-algs/alg-ecp-high/description.txt similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/description.txt rename to testing/tests/ikev1-algs/alg-ecp-high/description.txt diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/evaltest.dat b/testing/tests/ikev1-algs/alg-ecp-high/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/evaltest.dat rename to testing/tests/ikev1-algs/alg-ecp-high/evaltest.dat diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-ecp-high/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-ecp-high/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-ecp-high/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-ecp-high/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-ecp-high/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-ecp-high/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-ecp-high/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-ecp-high/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-ecp-high/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/posttest.dat b/testing/tests/ikev1-algs/alg-ecp-high/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/posttest.dat rename to testing/tests/ikev1-algs/alg-ecp-high/posttest.dat diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/pretest.dat b/testing/tests/ikev1-algs/alg-ecp-high/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/pretest.dat rename to testing/tests/ikev1-algs/alg-ecp-high/pretest.dat diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/test.conf b/testing/tests/ikev1-algs/alg-ecp-high/test.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-high/test.conf rename to testing/tests/ikev1-algs/alg-ecp-high/test.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/description.txt b/testing/tests/ikev1-algs/alg-ecp-low/description.txt similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/description.txt rename to testing/tests/ikev1-algs/alg-ecp-low/description.txt diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/evaltest.dat b/testing/tests/ikev1-algs/alg-ecp-low/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/evaltest.dat rename to testing/tests/ikev1-algs/alg-ecp-low/evaltest.dat diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-ecp-low/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-ecp-low/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-ecp-low/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-ecp-low/hosts/dave/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-ecp-low/hosts/dave/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-ecp-low/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-algs/alg-ecp-low/hosts/moon/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf rename to testing/tests/ikev1-algs/alg-ecp-low/hosts/moon/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev1-algs/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev1-algs/alg-ecp-low/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/posttest.dat b/testing/tests/ikev1-algs/alg-ecp-low/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/posttest.dat rename to testing/tests/ikev1-algs/alg-ecp-low/posttest.dat diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/pretest.dat b/testing/tests/ikev1-algs/alg-ecp-low/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/pretest.dat rename to testing/tests/ikev1-algs/alg-ecp-low/pretest.dat diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/test.conf b/testing/tests/ikev1-algs/alg-ecp-low/test.conf similarity index 100% rename from testing/tests/openssl-ikev1/alg-ecp-low/test.conf rename to testing/tests/ikev1-algs/alg-ecp-low/test.conf diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/description.txt b/testing/tests/ikev1/ecdsa-certs/description.txt similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/description.txt rename to testing/tests/ikev1/ecdsa-certs/description.txt diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/evaltest.dat b/testing/tests/ikev1/ecdsa-certs/evaltest.dat similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/evaltest.dat rename to testing/tests/ikev1/ecdsa-certs/evaltest.dat diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/.gitignore b/testing/tests/ikev1/ecdsa-certs/hosts/.gitignore similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/.gitignore rename to testing/tests/ikev1/ecdsa-certs/hosts/.gitignore diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/ecdsa-certs/hosts/carol/etc/strongswan.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf rename to testing/tests/ikev1/ecdsa-certs/hosts/carol/etc/strongswan.conf diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf b/testing/tests/ikev1/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf rename to testing/tests/ikev1/ecdsa-certs/hosts/carol/etc/swanctl/swanctl.conf diff --git a/testing/tests/ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf new file mode 100644 index 000000000..a322670f4 --- /dev/null +++ b/testing/tests/ikev1/ecdsa-certs/hosts/dave/etc/strongswan.conf @@ -0,0 +1,5 @@ +# /etc/strongswan.conf - strongSwan configuration file + +charon { + load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown +} diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf b/testing/tests/ikev1/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf rename to testing/tests/ikev1/ecdsa-certs/hosts/dave/etc/swanctl/swanctl.conf diff --git a/testing/tests/ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf new file mode 100644 index 000000000..a322670f4 --- /dev/null +++ b/testing/tests/ikev1/ecdsa-certs/hosts/moon/etc/strongswan.conf @@ -0,0 +1,5 @@ +# /etc/strongswan.conf - strongSwan configuration file + +charon { + load = random nonce pem pkcs1 openssl curl revocation vici kernel-netlink socket-default updown +} diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf b/testing/tests/ikev1/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf rename to testing/tests/ikev1/ecdsa-certs/hosts/moon/etc/swanctl/swanctl.conf diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/posttest.dat b/testing/tests/ikev1/ecdsa-certs/posttest.dat similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/posttest.dat rename to testing/tests/ikev1/ecdsa-certs/posttest.dat diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/pretest.dat b/testing/tests/ikev1/ecdsa-certs/pretest.dat similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/pretest.dat rename to testing/tests/ikev1/ecdsa-certs/pretest.dat diff --git a/testing/tests/openssl-ikev1/ecdsa-certs/test.conf b/testing/tests/ikev1/ecdsa-certs/test.conf similarity index 100% rename from testing/tests/openssl-ikev1/ecdsa-certs/test.conf rename to testing/tests/ikev1/ecdsa-certs/test.conf diff --git a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev1/alg-ecp-high/hosts/dave/etc/strongswan.conf deleted file mode 100644 index 59c81a0f9..000000000 --- a/testing/tests/openssl-ikev1/alg-ecp-high/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,5 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce aes sha1 sha2 gmp pem pkcs1 hmac kdf x509 openssl curl revocation vici kernel-netlink socket-default updown -} diff --git a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev1/alg-ecp-low/hosts/dave/etc/strongswan.conf deleted file mode 100644 index f08553bf5..000000000 --- a/testing/tests/openssl-ikev1/alg-ecp-low/hosts/dave/etc/strongswan.conf +++ /dev/null @@ -1,5 +0,0 @@ -# /etc/strongswan.conf - strongSwan configuration file - -charon { - load = random nonce aes des sha1 sha2 gmp pem pkcs1 hmac kdf x509 openssl curl revocation vici kernel-netlink socket-default updown -} From 38bacea63b6a3ccc9cc3c1fb5164a979155640e2 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 19 Oct 2022 07:20:18 +0200 Subject: [PATCH 07/24] testing: Migrated ipv6 scenarios to new default plugins --- .../tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf | 4 ++-- .../ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf | 4 ++-- .../ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf | 4 ++-- .../ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf | 4 ++-- .../ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf | 4 ++-- .../ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf | 4 ++-- .../ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf | 4 ++-- .../ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf | 4 ++-- .../ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf | 4 ++-- .../ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf | 4 ++-- 45 files changed, 90 insertions(+), 90 deletions(-) diff --git a/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf index 5e49994cd..581a7a412 100644 --- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf index 7b86d4e22..6d5221eee 100644 --- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 install_routes = no } diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf index 7b86d4e22..6d5221eee 100644 --- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 install_routes = no } diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf index 7b86d4e22..6d5221eee 100644 --- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 install_routes = no } diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf index 7b86d4e22..6d5221eee 100644 --- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown fragment_size = 1400 install_routes = no } diff --git a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf index 2b65ea3a5..3fe53f042 100644 --- a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation addrblock hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation addrblock vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf index 2b65ea3a5..3fe53f042 100644 --- a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation addrblock hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation addrblock vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf index 38803cf3f..c746f3c65 100644 --- a/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 curve25519 hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf index 38803cf3f..c746f3c65 100644 --- a/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 curve25519 hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf index 38803cf3f..c746f3c65 100644 --- a/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 curve25519 hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf index 38803cf3f..c746f3c65 100644 --- a/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 curve25519 hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf index 38803cf3f..c746f3c65 100644 --- a/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 curve25519 hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf index 38803cf3f..c746f3c65 100644 --- a/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 curve25519 hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf index 2b65ea3a5..3fe53f042 100644 --- a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation addrblock hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation addrblock vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf index 2b65ea3a5..3fe53f042 100644 --- a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation addrblock hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation addrblock vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf index 2b65ea3a5..3fe53f042 100644 --- a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation addrblock hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation addrblock vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } From 2dbcb1533881d67f7e3fef124af283d973bf8bab Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 19 Oct 2022 07:25:26 +0200 Subject: [PATCH 08/24] testing: Migrated ipv6-stroke scenarios to new default plugins --- .../ipv6-stroke/host2host-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/host2host-ikev1/hosts/sun/etc/strongswan.conf | 2 +- .../ipv6-stroke/host2host-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/host2host-ikev2/hosts/sun/etc/strongswan.conf | 2 +- .../ipv6-stroke/net2net-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/net2net-ikev1/hosts/sun/etc/strongswan.conf | 2 +- .../ipv6-stroke/net2net-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/net2net-ikev2/hosts/sun/etc/strongswan.conf | 2 +- .../net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf | 2 +- .../net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf | 2 +- .../net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf | 2 +- .../net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf | 2 +- .../tests/ipv6-stroke/rw-ikev1/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ipv6-stroke/rw-ikev1/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ipv6-stroke/rw-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ipv6-stroke/rw-ikev2/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ipv6-stroke/rw-ikev2/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ipv6-stroke/rw-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf | 2 +- .../rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf | 2 +- .../rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf | 2 +- .../rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf | 2 +- .../rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/rw-psk-ikev1/hosts/carol/etc/strongswan.conf | 2 +- .../ipv6-stroke/rw-psk-ikev1/hosts/dave/etc/strongswan.conf | 2 +- .../ipv6-stroke/rw-psk-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/rw-psk-ikev2/hosts/carol/etc/strongswan.conf | 2 +- .../ipv6-stroke/rw-psk-ikev2/hosts/dave/etc/strongswan.conf | 2 +- .../ipv6-stroke/rw-psk-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/transport-ikev1/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/transport-ikev1/hosts/sun/etc/strongswan.conf | 2 +- .../ipv6-stroke/transport-ikev2/hosts/moon/etc/strongswan.conf | 2 +- .../ipv6-stroke/transport-ikev2/hosts/sun/etc/strongswan.conf | 2 +- 38 files changed, 38 insertions(+), 38 deletions(-) diff --git a/testing/tests/ipv6-stroke/host2host-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/host2host-ikev1/hosts/moon/etc/strongswan.conf index fe49cfed7..aedc1b608 100644 --- a/testing/tests/ipv6-stroke/host2host-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/host2host-ikev1/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/host2host-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/host2host-ikev1/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/host2host-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/host2host-ikev1/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/host2host-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/host2host-ikev2/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/host2host-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/host2host-ikev2/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/host2host-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/host2host-ikev2/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/host2host-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/host2host-ikev2/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/net2net-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ikev1/hosts/moon/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ikev1/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ikev1/hosts/sun/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ikev1/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ikev2/hosts/moon/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ikev2/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ikev2/hosts/sun/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ikev2/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf index d0818444a..c3529732c 100644 --- a/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf index 36ac0a8c0..8ec30e713 100644 --- a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown install_routes = no fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf index 807242058..26475f82d 100644 --- a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown install_routes=no fragment_size = 1400 } diff --git a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf index 9344409e7..5c7fe0b6a 100644 --- a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown install_routes = no } diff --git a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf index 2d92231a4..88b98958f 100644 --- a/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown install_routes=no } diff --git a/testing/tests/ipv6-stroke/rw-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ikev1/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/rw-ikev1/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ikev1/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ikev1/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/rw-ikev1/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ikev1/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ikev1/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/rw-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ikev1/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ikev2/hosts/carol/etc/strongswan.conf index eecd6ed87..d7904e392 100644 --- a/testing/tests/ipv6-stroke/rw-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ikev2/hosts/carol/etc/strongswan.conf @@ -2,5 +2,5 @@ charon { hash_and_url = yes - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ikev2/hosts/dave/etc/strongswan.conf index f262342b1..d7904e392 100644 --- a/testing/tests/ipv6-stroke/rw-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ikev2/hosts/dave/etc/strongswan.conf @@ -2,5 +2,5 @@ charon { hash_and_url = yes - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ikev2/hosts/moon/etc/strongswan.conf index f262342b1..d7904e392 100644 --- a/testing/tests/ipv6-stroke/rw-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ikev2/hosts/moon/etc/strongswan.conf @@ -2,5 +2,5 @@ charon { hash_and_url = yes - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf index e16d32ba9..aedc1b608 100644 --- a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf index eecd6ed87..d7904e392 100644 --- a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf @@ -2,5 +2,5 @@ charon { hash_and_url = yes - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf index f262342b1..d7904e392 100644 --- a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf @@ -2,5 +2,5 @@ charon { hash_and_url = yes - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf index f262342b1..d7904e392 100644 --- a/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf @@ -2,5 +2,5 @@ charon { hash_and_url = yes - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/carol/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/dave/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-psk-ikev1/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/carol/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/dave/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/rw-psk-ikev2/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/transport-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/transport-ikev1/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/transport-ikev1/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/transport-ikev1/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/transport-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/transport-ikev1/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/transport-ikev1/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/transport-ikev1/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/transport-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6-stroke/transport-ikev2/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/transport-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/transport-ikev2/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ipv6-stroke/transport-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6-stroke/transport-ikev2/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ipv6-stroke/transport-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6-stroke/transport-ikev2/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } From 950d4fe7a06cf7353e802ccfc62d282678417fc0 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 19 Oct 2022 08:01:27 +0200 Subject: [PATCH 09/24] testing: Migrated ikev2-stroke scenarios to new default plugins --- .../config-payload-swapped/hosts/carol/etc/strongswan.conf | 2 +- .../config-payload-swapped/hosts/dave/etc/strongswan.conf | 2 +- .../config-payload-swapped/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/config-payload/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/config-payload/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/config-payload/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/host2host-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/host2host-cert/hosts/sun/etc/strongswan.conf | 2 +- .../host2host-swapped/hosts/moon/etc/strongswan.conf | 2 +- .../host2host-swapped/hosts/sun/etc/strongswan.conf | 2 +- .../host2host-transport/hosts/moon/etc/strongswan.conf | 2 +- .../host2host-transport/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-pool-wish/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-pool-wish/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-pool-wish/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/ip-pool/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/ip-pool/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/ip-pool/hosts/moon/etc/strongswan.conf | 2 +- .../ip-two-pools-db/hosts/alice/etc/strongswan.conf | 2 +- .../ip-two-pools-db/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-two-pools-db/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-two-pools-db/hosts/moon/etc/strongswan.conf | 2 +- .../ip-two-pools-db/hosts/venus/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-two-pools/hosts/alice/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-two-pools/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/ip-two-pools/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/nat-rw-psk/hosts/alice/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/nat-rw-psk/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/nat-rw-psk/hosts/venus/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/nat-rw/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/ikev2-stroke/nat-rw/hosts/sun/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/nat-rw/hosts/venus/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-cert/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-pgp-v3/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-pgp-v3/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-pgp-v4/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-pgp-v4/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-psk/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-psk/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-route/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-route/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-rsa/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-rsa/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-start/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/net2net-start/hosts/sun/etc/strongswan.conf | 2 +- .../ikev2-stroke/protoport-dual/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/protoport-dual/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/rw-cert/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev2-stroke/rw-cert/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-md5-id-prompt/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-md5-id-prompt/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-md5-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-md5-radius/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-peap-md5/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf | 2 +- .../rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-peap-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-peap-radius/hosts/dave/etc/strongswan.conf | 2 +- .../rw-eap-peap-radius/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf | 2 +- .../rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-sim-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-sim-radius/hosts/dave/etc/strongswan.conf | 2 +- .../rw-eap-sim-radius/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-tls-only/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-eap-tls-only/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-tls-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-tls-radius/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-ttls-only/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-ttls-only/hosts/dave/etc/strongswan.conf | 2 +- .../rw-eap-ttls-only/hosts/moon/etc/strongswan.conf | 2 +- .../rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf | 2 +- .../rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf | 2 +- .../rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf | 2 +- .../virtual-ip-override/hosts/carol/etc/strongswan.conf | 2 +- .../virtual-ip-override/hosts/dave/etc/strongswan.conf | 2 +- .../virtual-ip-override/hosts/moon/etc/strongswan.conf | 2 +- .../ikev2-stroke/virtual-ip/hosts/carol/etc/strongswan.conf | 2 +- .../ikev2-stroke/virtual-ip/hosts/dave/etc/strongswan.conf | 2 +- .../ikev2-stroke/virtual-ip/hosts/moon/etc/strongswan.conf | 2 +- 109 files changed, 109 insertions(+), 109 deletions(-) diff --git a/testing/tests/ikev2-stroke/config-payload-swapped/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/config-payload-swapped/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/config-payload-swapped/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/config-payload-swapped/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/config-payload-swapped/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/config-payload-swapped/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/config-payload-swapped/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/config-payload-swapped/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/config-payload-swapped/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/config-payload-swapped/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/config-payload-swapped/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/config-payload-swapped/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/config-payload/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/config-payload/hosts/carol/etc/strongswan.conf index c928ee3cc..ee423228e 100644 --- a/testing/tests/ikev2-stroke/config-payload/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/config-payload/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/config-payload/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/config-payload/hosts/dave/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev2-stroke/config-payload/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/config-payload/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/config-payload/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/config-payload/hosts/moon/etc/strongswan.conf index 95aa9cedf..4ce911048 100644 --- a/testing/tests/ikev2-stroke/config-payload/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/config-payload/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown attr + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown attr dns1 = PH_IP_WINNETOU dns2 = PH_IP_VENUS diff --git a/testing/tests/ikev2-stroke/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/host2host-cert/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/host2host-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/host2host-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/host2host-cert/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/host2host-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/host2host-cert/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/host2host-swapped/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/host2host-swapped/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/host2host-swapped/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/host2host-swapped/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/host2host-swapped/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/host2host-swapped/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/host2host-swapped/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/host2host-swapped/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/host2host-transport/hosts/moon/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev2-stroke/host2host-transport/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/host2host-transport/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/host2host-transport/hosts/sun/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev2-stroke/host2host-transport/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/host2host-transport/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf index c928ee3cc..ee423228e 100644 --- a/testing/tests/ikev2-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev2-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf index fccc73482..3289896c4 100644 --- a/testing/tests/ikev2-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default sqlite attr-sql updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default sqlite attr-sql updown plugins { attr-sql { diff --git a/testing/tests/ikev2-stroke/ip-pool-wish/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool-wish/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-pool-wish/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool-wish/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-pool-wish/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool-wish/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-pool-wish/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool-wish/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-pool-wish/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool-wish/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-pool-wish/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool-wish/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-pool/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-pool/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-pool/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-pool/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-pool/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-pool/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-pool/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-pool/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/alice/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/carol/etc/strongswan.conf index 45f18757c..ee423228e 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/dave/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/moon/etc/strongswan.conf index 72428075a..241fdbb22 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke sqlite attr-sql kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke sqlite attr-sql kernel-netlink socket-default updown plugins { attr-sql { diff --git a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/venus/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools-db/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev2-stroke/ip-two-pools/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools/hosts/alice/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-two-pools/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools/hosts/carol/etc/strongswan.conf index f278dd298..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/ip-two-pools/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/ip-two-pools/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/ip-two-pools/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/ip-two-pools/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/nat-rw-psk/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2-stroke/nat-rw-psk/hosts/alice/etc/strongswan.conf index 8b5cd5afb..f687f4a4d 100644 --- a/testing/tests/ikev2-stroke/nat-rw-psk/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/nat-rw-psk/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/nat-rw-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/nat-rw-psk/hosts/sun/etc/strongswan.conf index 8b5cd5afb..f687f4a4d 100644 --- a/testing/tests/ikev2-stroke/nat-rw-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/nat-rw-psk/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/nat-rw-psk/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2-stroke/nat-rw-psk/hosts/venus/etc/strongswan.conf index 8b5cd5afb..f687f4a4d 100644 --- a/testing/tests/ikev2-stroke/nat-rw-psk/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/nat-rw-psk/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2-stroke/nat-rw/hosts/alice/etc/strongswan.conf index 9f29cf001..7a4fee842 100644 --- a/testing/tests/ikev2-stroke/nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/nat-rw/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2-stroke/nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/nat-rw/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2-stroke/nat-rw/hosts/venus/etc/strongswan.conf index 9f29cf001..7a4fee842 100644 --- a/testing/tests/ikev2-stroke/nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/nat-rw/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev2-stroke/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-cert/hosts/moon/etc/strongswan.conf index 6bdf53f86..c1fb1e7d4 100644 --- a/testing/tests/ikev2-stroke/net2net-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-cert/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no signature_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-cert/hosts/sun/etc/strongswan.conf index 6bdf53f86..c1fb1e7d4 100644 --- a/testing/tests/ikev2-stroke/net2net-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-cert/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no signature_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/moon/etc/strongswan.conf index b6ce00cb4..ae6393d60 100644 --- a/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 hmac kdf pem pkcs1 pgp curve25519 gmp stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 pgp stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/sun/etc/strongswan.conf index b6ce00cb4..ae6393d60 100644 --- a/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-pgp-v3/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 hmac kdf pem pkcs1 pgp curve25519 gmp stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 pgp stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/moon/etc/strongswan.conf index fb5fa5465..ae6393d60 100644 --- a/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pgp curve25519 gmp stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 pgp stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/sun/etc/strongswan.conf index fb5fa5465..ae6393d60 100644 --- a/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-pgp-v4/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pgp curve25519 gmp stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 pgp stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-psk/hosts/moon/etc/strongswan.conf index c8610f8fc..407e0ed93 100644 --- a/testing/tests/ikev2-stroke/net2net-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-psk/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-psk/hosts/sun/etc/strongswan.conf index c8610f8fc..407e0ed93 100644 --- a/testing/tests/ikev2-stroke/net2net-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-psk/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-route/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-route/hosts/moon/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev2-stroke/net2net-route/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-route/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-route/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-route/hosts/sun/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev2-stroke/net2net-route/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-route/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-rsa/hosts/moon/etc/strongswan.conf index cef5d2f76..381c903da 100644 --- a/testing/tests/ikev2-stroke/net2net-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-rsa/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp dnskey pem pkcs1 pubkey curl kernel-netlink socket-default stroke updown + load = random nonce openssl dnskey pem pkcs1 pubkey curl kernel-netlink socket-default stroke updown } diff --git a/testing/tests/ikev2-stroke/net2net-rsa/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-rsa/hosts/sun/etc/strongswan.conf index cef5d2f76..381c903da 100644 --- a/testing/tests/ikev2-stroke/net2net-rsa/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-rsa/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 gmp dnskey pem pkcs1 pubkey curl kernel-netlink socket-default stroke updown + load = random nonce openssl dnskey pem pkcs1 pubkey curl kernel-netlink socket-default stroke updown } diff --git a/testing/tests/ikev2-stroke/net2net-start/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-start/hosts/moon/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev2-stroke/net2net-start/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-start/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/net2net-start/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2-stroke/net2net-start/hosts/sun/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev2-stroke/net2net-start/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/net2net-start/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev2-stroke/protoport-dual/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/protoport-dual/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/protoport-dual/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/protoport-dual/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/protoport-dual/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/protoport-dual/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/protoport-dual/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/protoport-dual/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-cert/hosts/carol/etc/strongswan.conf index 1b1db762b..f429890d2 100644 --- a/testing/tests/ikev2-stroke/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random drbg nonce aes des sha1 sha2 sha3 md5 chapoly mgf1 curve25519 pem pkcs1 pkcs8 gmp x509 curl revocation hmac kdf xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation xcbc cmac stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-cert/hosts/dave/etc/strongswan.conf index 1b1db762b..f429890d2 100644 --- a/testing/tests/ikev2-stroke/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random drbg nonce aes des sha1 sha2 sha3 md5 chapoly mgf1 curve25519 pem pkcs1 pkcs8 gmp x509 curl revocation hmac kdf xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation xcbc cmac stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-cert/hosts/moon/etc/strongswan.conf index e22c062f5..3ff3d8090 100644 --- a/testing/tests/ikev2-stroke/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random drbg nonce test-vectors aes des sha1 sha2 sha3 md5 chapoly mgf1 curve25519 pem pkcs1 pkcs8 gmp x509 curl revocation hmac kdf xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown + load = random drbg nonce openssl test-vectors pem pkcs1 curl revocation xcbc cmac stroke kernel-netlink socket-default updown integrity_test = yes crypto_test { diff --git a/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf index 18be0298e..fbd27d62f 100644 --- a/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf index 18be0298e..fbd27d62f 100644 --- a/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf index 9a1623319..5f9768a50 100644 --- a/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 updown integrity_test = yes } diff --git a/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf index 9a1623319..5f9768a50 100644 --- a/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-aka eap-aka-3gpp2 updown integrity_test = yes } diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/carol/etc/strongswan.conf index 21f31368c..b927584e2 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-md5 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-md5 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/moon/etc/strongswan.conf index 21f31368c..b927584e2 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-id-prompt/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-md5 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-md5 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf index 21f31368c..b927584e2 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-md5 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-md5 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf index 4d3e8fa02..df596158f 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius eap-identity updown plugins { eap-radius { diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf index bc8e0f3e7..cec38fcad 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf index 4be6f242d..3f1132b72 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf index bc8e0f3e7..cec38fcad 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf index bc8e0f3e7..cec38fcad 100644 --- a/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-md5 updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-md5 updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf index aaf230172..fec6b9451 100644 --- a/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes des sha1 sha2 md4 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-mschapv2 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-mschapv2 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf index aaf230172..fec6b9451 100644 --- a/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes des sha1 sha2 md4 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-mschapv2 eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-mschapv2 eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf index 3be8bea3d..80752c70c 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf index 3be8bea3d..80752c70c 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf index 1b48b8fd4..afdab845c 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no plugins { diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf index 09779ebd6..a1febd0be 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes des sha1 sha2 md4 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown multiple_authentication=no } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf index 09779ebd6..a1febd0be 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes des sha1 sha2 md4 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown multiple_authentication=no } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf index 627e5906a..28f61c9fe 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes des sha1 sha2 md4 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-mschapv2 eap-peap updown multiple_authentication=no plugins { eap-peap { diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf index c54b57ecf..80752c70c 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf index c54b57ecf..80752c70c 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-peap updown multiple_authentication=no } diff --git a/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf index 457e68ce5..250ccf115 100644 --- a/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius updown multiple_authentication=no plugins { diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf index 28d86f421..848ccf6d6 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file eap-identity updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf index 4d3e8fa02..df596158f 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius eap-identity updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius eap-identity updown plugins { eap-radius { diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf index b95433e59..3e2f8f35d 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown + load = random nonce openssl stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf index b95433e59..3e2f8f35d 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown + load = random nonce openssl stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf index 483eba853..bc3b4b911 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 curve25519 hmac kdf stroke kernel-netlink socket-default eap-radius updown + load = random nonce openssl stroke kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf index 3458728b1..39e8ac49e 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf index 3458728b1..39e8ac49e 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown } diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf index 4be6f242d..3f1132b72 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius updown plugins { eap-radius { diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf index f6cb71c5e..f47614549 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown integrity_test = yes } diff --git a/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf index 71cb16aee..bd850dd7f 100644 --- a/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default fips-prf eap-sim eap-sim-file updown integrity_test = yes } diff --git a/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/carol/etc/strongswan.conf index 27c9fb647..5aa6de7c1 100644 --- a/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf gcm stroke kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/moon/etc/strongswan.conf index 4aacbbfc3..e6bf25f06 100644 --- a/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-tls-only/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf gcm stroke kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf index d824f2728..f855231e7 100644 --- a/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-tls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-tls updown multiple_authentication=no syslog { daemon { diff --git a/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf index d3c3ebf6a..250ccf115 100644 --- a/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius updown multiple_authentication=no plugins { diff --git a/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf index 5a16c6f17..20b4dd3e0 100644 --- a/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { daemon { diff --git a/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf index 5a16c6f17..20b4dd3e0 100644 --- a/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { daemon { diff --git a/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf index 952e002d7..d69ebe330 100644 --- a/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 mgf1 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { diff --git a/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf index ca40a20c1..20b4dd3e0 100644 --- a/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { daemon { diff --git a/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf index ca40a20c1..20b4dd3e0 100644 --- a/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes md5 sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf mgf1 stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-identity eap-md5 eap-ttls updown multiple_authentication=no syslog { daemon { diff --git a/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf index 457e68ce5..250ccf115 100644 --- a/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default eap-radius updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default eap-radius updown multiple_authentication=no plugins { diff --git a/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/virtual-ip-override/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/virtual-ip-override/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/virtual-ip-override/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/virtual-ip-override/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/virtual-ip-override/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/virtual-ip-override/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/virtual-ip-override/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/virtual-ip-override/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/virtual-ip-override/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/virtual-ip-override/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/virtual-ip-override/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/virtual-ip-override/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/virtual-ip/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-stroke/virtual-ip/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/virtual-ip/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/virtual-ip/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/virtual-ip/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-stroke/virtual-ip/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/virtual-ip/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/virtual-ip/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev2-stroke/virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-stroke/virtual-ip/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev2-stroke/virtual-ip/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev2-stroke/virtual-ip/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } From 6ae40ac5817c474d1e6be05a92ab920079bc8685 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 19 Oct 2022 09:02:37 +0200 Subject: [PATCH 10/24] testing: Migrated ikev1-stroke to new default plugins --- .../config-payload-push/hosts/carol/etc/strongswan.conf | 2 +- .../config-payload-push/hosts/dave/etc/strongswan.conf | 2 +- .../config-payload-push/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/config-payload/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-stroke/config-payload/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-stroke/config-payload/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/host2host-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/host2host-cert/hosts/sun/etc/strongswan.conf | 2 +- .../host2host-transport/hosts/moon/etc/strongswan.conf | 2 +- .../host2host-transport/hosts/sun/etc/strongswan.conf | 2 +- .../ikev1-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/ip-pool/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/ip-pool/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/ip-pool/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/nat-rw/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/ikev1-stroke/nat-rw/hosts/sun/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/nat-rw/hosts/venus/etc/strongswan.conf | 2 +- .../ikev1-stroke/net2net-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/net2net-cert/hosts/sun/etc/strongswan.conf | 2 +- .../ikev1-stroke/net2net-psk/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/net2net-psk/hosts/sun/etc/strongswan.conf | 2 +- .../ikev1-stroke/protoport-dual/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-stroke/protoport-dual/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/rw-cert/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/rw-cert/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/virtual-ip/hosts/carol/etc/strongswan.conf | 2 +- .../ikev1-stroke/virtual-ip/hosts/dave/etc/strongswan.conf | 2 +- .../ikev1-stroke/virtual-ip/hosts/moon/etc/strongswan.conf | 2 +- .../xauth-id-psk-config/hosts/carol/etc/strongswan.conf | 2 +- .../xauth-id-psk-config/hosts/dave/etc/strongswan.conf | 2 +- .../xauth-id-psk-config/hosts/moon/etc/strongswan.conf | 2 +- .../xauth-id-rsa-config/hosts/carol/etc/strongswan.conf | 2 +- .../xauth-id-rsa-config/hosts/dave/etc/strongswan.conf | 2 +- .../xauth-id-rsa-config/hosts/moon/etc/strongswan.conf | 2 +- .../xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf | 2 +- .../xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf | 2 +- .../xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/xauth-psk/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/xauth-psk/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/xauth-psk/hosts/moon/etc/strongswan.conf | 2 +- .../ikev1-stroke/xauth-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/xauth-rsa/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ikev1-stroke/xauth-rsa/hosts/moon/etc/strongswan.conf | 2 +- 52 files changed, 52 insertions(+), 52 deletions(-) diff --git a/testing/tests/ikev1-stroke/config-payload-push/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/config-payload-push/hosts/carol/etc/strongswan.conf index c928ee3cc..ee423228e 100644 --- a/testing/tests/ikev1-stroke/config-payload-push/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/config-payload-push/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev1-stroke/config-payload-push/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/config-payload-push/hosts/dave/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev1-stroke/config-payload-push/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/config-payload-push/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev1-stroke/config-payload-push/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/config-payload-push/hosts/moon/etc/strongswan.conf index 95aa9cedf..4ce911048 100644 --- a/testing/tests/ikev1-stroke/config-payload-push/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/config-payload-push/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown attr + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown attr dns1 = PH_IP_WINNETOU dns2 = PH_IP_VENUS diff --git a/testing/tests/ikev1-stroke/config-payload/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/config-payload/hosts/carol/etc/strongswan.conf index c928ee3cc..ee423228e 100644 --- a/testing/tests/ikev1-stroke/config-payload/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/config-payload/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev1-stroke/config-payload/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/config-payload/hosts/dave/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev1-stroke/config-payload/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/config-payload/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev1-stroke/config-payload/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/config-payload/hosts/moon/etc/strongswan.conf index 95aa9cedf..4ce911048 100644 --- a/testing/tests/ikev1-stroke/config-payload/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/config-payload/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown attr + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown attr dns1 = PH_IP_WINNETOU dns2 = PH_IP_VENUS diff --git a/testing/tests/ikev1-stroke/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/host2host-cert/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/host2host-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/host2host-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1-stroke/host2host-cert/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/host2host-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/host2host-cert/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/host2host-transport/hosts/moon/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev1-stroke/host2host-transport/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/host2host-transport/hosts/moon/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev1-stroke/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1-stroke/host2host-transport/hosts/sun/etc/strongswan.conf index d4518be66..0bc4a651e 100644 --- a/testing/tests/ikev1-stroke/host2host-transport/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/host2host-transport/hosts/sun/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/ikev1-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf index c928ee3cc..ee423228e 100644 --- a/testing/tests/ikev1-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/ip-pool-db/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev1-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf index 34f577ae3..ee423228e 100644 --- a/testing/tests/ikev1-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/ip-pool-db/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown resolve + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown resolve } diff --git a/testing/tests/ikev1-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf index fccc73482..3289896c4 100644 --- a/testing/tests/ikev1-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/ip-pool-db/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default sqlite attr-sql updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default sqlite attr-sql updown plugins { attr-sql { diff --git a/testing/tests/ikev1-stroke/ip-pool/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/ip-pool/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/ip-pool/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/ip-pool/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/ip-pool/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/ip-pool/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/ip-pool/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/ip-pool/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/ip-pool/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/ip-pool/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/ip-pool/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/ip-pool/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/ikev1-stroke/nat-rw/hosts/alice/etc/strongswan.conf index 9f29cf001..7a4fee842 100644 --- a/testing/tests/ikev1-stroke/nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/nat-rw/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev1-stroke/nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1-stroke/nat-rw/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/ikev1-stroke/nat-rw/hosts/venus/etc/strongswan.conf index 9f29cf001..7a4fee842 100644 --- a/testing/tests/ikev1-stroke/nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/nat-rw/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/ikev1-stroke/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/net2net-cert/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/net2net-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/net2net-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1-stroke/net2net-cert/hosts/sun/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/net2net-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/net2net-cert/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/net2net-psk/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/net2net-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/net2net-psk/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1-stroke/net2net-psk/hosts/sun/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/net2net-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/net2net-psk/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/protoport-dual/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/protoport-dual/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/protoport-dual/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/protoport-dual/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/protoport-dual/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/protoport-dual/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/protoport-dual/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/protoport-dual/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-cert/hosts/carol/etc/strongswan.conf index b041a52f9..7391c7992 100644 --- a/testing/tests/ikev1-stroke/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm stroke kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation xcbc stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-cert/hosts/dave/etc/strongswan.conf index b041a52f9..7391c7992 100644 --- a/testing/tests/ikev1-stroke/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random drbg nonce aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm stroke kernel-netlink socket-default updown + load = random drbg nonce openssl pem pkcs1 curl revocation xcbc stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-cert/hosts/moon/etc/strongswan.conf index 1fddb3732..11e2d0ec6 100644 --- a/testing/tests/ikev1-stroke/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random drbg nonce test-vectors aes des md5 sha1 sha2 sha3 chapoly pem pkcs1 pkcs8 curve25519 gmp mgf1 x509 curl revocation hmac kdf xcbc ctr ccm gcm stroke kernel-netlink socket-default updown + load = random drbg nonce openssl test-vectors pem pkcs1 curl revocation xcbc stroke kernel-netlink socket-default updown integrity_test = yes diff --git a/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-psk-fqdn/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf index 3086cdddd..fb0281946 100644 --- a/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/rw-psk-ipv4/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 curve25519 hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/virtual-ip/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/virtual-ip/hosts/carol/etc/strongswan.conf index a3bd009c0..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/virtual-ip/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/virtual-ip/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/virtual-ip/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/virtual-ip/hosts/dave/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/virtual-ip/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/virtual-ip/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/virtual-ip/hosts/moon/etc/strongswan.conf index 18016f3a8..0c383dc8a 100644 --- a/testing/tests/ikev1-stroke/virtual-ip/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/virtual-ip/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default updown } diff --git a/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/carol/etc/strongswan.conf index b7dd82ab7..06914557e 100644 --- a/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 xauth-generic resolve kernel-netlink socket-default stroke updown + load = random nonce openssl xauth-generic resolve kernel-netlink socket-default stroke updown } diff --git a/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/dave/etc/strongswan.conf index b7dd82ab7..06914557e 100644 --- a/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 xauth-generic resolve kernel-netlink socket-default stroke updown + load = random nonce openssl xauth-generic resolve kernel-netlink socket-default stroke updown } diff --git a/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/moon/etc/strongswan.conf index 92be5d288..8d37846ff 100644 --- a/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-psk-config/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 xauth-generic attr kernel-netlink socket-default stroke updown + load = random nonce openssl xauth-generic attr kernel-netlink socket-default stroke updown dns1 = 192.168.0.150 dns2 = 10.1.0.20 diff --git a/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf index ed3781a13..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf index f78fdb194..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf index f78fdb194..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf index ed3781a13..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf index f78fdb194..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf index f78fdb194..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-psk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-psk/hosts/carol/etc/strongswan.conf index 689a8a3d7..2acaaf9f3 100644 --- a/testing/tests/ikev1-stroke/xauth-psk/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-psk/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-psk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-psk/hosts/dave/etc/strongswan.conf index 689a8a3d7..2acaaf9f3 100644 --- a/testing/tests/ikev1-stroke/xauth-psk/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-psk/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-psk/hosts/moon/etc/strongswan.conf index 689a8a3d7..2acaaf9f3 100644 --- a/testing/tests/ikev1-stroke/xauth-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-psk/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf curve25519 xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-rsa/hosts/carol/etc/strongswan.conf index ed3781a13..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-rsa/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-rsa/hosts/dave/etc/strongswan.conf index f78fdb194..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-rsa/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-rsa/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } diff --git a/testing/tests/ikev1-stroke/xauth-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-stroke/xauth-rsa/hosts/moon/etc/strongswan.conf index f78fdb194..590fb5336 100644 --- a/testing/tests/ikev1-stroke/xauth-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ikev1-stroke/xauth-rsa/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl xauth-generic kernel-netlink socket-default updown stroke + load = random nonce openssl pem pkcs1 revocation curl xauth-generic kernel-netlink socket-default updown stroke } From fdc9e69523704fbc928964bae8136a1cc8c66948 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 19 Oct 2022 09:11:54 +0200 Subject: [PATCH 11/24] testing: Migrated ike scenarios to new default plugins --- testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf | 4 ++-- testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/ike/rw-cert/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/ike/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/ike/rw-cert/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ike/rw_v1-net_v2/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/ike/rw_v1-net_v2/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/ike/rw_v1-net_v2/hosts/sun/etc/strongswan.conf | 2 +- 12 files changed, 18 insertions(+), 18 deletions(-) diff --git a/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf index 6081084f7..2c9a2b276 100755 --- a/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = pem pkcs1 x509 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici + load = pem pkcs1 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici fragment_size = 1400 } diff --git a/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf index 6081084f7..2c9a2b276 100755 --- a/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = pem pkcs1 x509 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici + load = pem pkcs1 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici fragment_size = 1400 } diff --git a/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf index 6081084f7..2c9a2b276 100755 --- a/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = pem pkcs1 x509 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici + load = pem pkcs1 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici fragment_size = 1400 } diff --git a/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf b/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf index 6081084f7..2c9a2b276 100755 --- a/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = pem pkcs1 x509 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici + load = pem pkcs1 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici fragment_size = 1400 } diff --git a/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf b/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf index 6081084f7..2c9a2b276 100755 --- a/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = pem pkcs1 x509 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici + load = pem pkcs1 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici fragment_size = 1400 } diff --git a/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf b/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf index 6081084f7..2c9a2b276 100755 --- a/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = pem pkcs1 x509 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici + load = pem pkcs1 revocation constraints pubkey openssl random nonce curl kernel-netlink socket-default updown vici fragment_size = 1400 } diff --git a/testing/tests/ike/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ike/rw-cert/hosts/carol/etc/strongswan.conf index cfe093b1e..6543e442c 100644 --- a/testing/tests/ike/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ike/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default } diff --git a/testing/tests/ike/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ike/rw-cert/hosts/dave/etc/strongswan.conf index 5949581c7..6543e442c 100644 --- a/testing/tests/ike/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ike/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default } diff --git a/testing/tests/ike/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ike/rw-cert/hosts/moon/etc/strongswan.conf index 5949581c7..6543e442c 100644 --- a/testing/tests/ike/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ike/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default } diff --git a/testing/tests/ike/rw_v1-net_v2/hosts/carol/etc/strongswan.conf b/testing/tests/ike/rw_v1-net_v2/hosts/carol/etc/strongswan.conf index c07b2734a..6543e442c 100644 --- a/testing/tests/ike/rw_v1-net_v2/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ike/rw_v1-net_v2/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp hmac kdf x509 curl revocation stroke kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default } diff --git a/testing/tests/ike/rw_v1-net_v2/hosts/moon/etc/strongswan.conf b/testing/tests/ike/rw_v1-net_v2/hosts/moon/etc/strongswan.conf index ef8a2d6d6..6543e442c 100644 --- a/testing/tests/ike/rw_v1-net_v2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ike/rw_v1-net_v2/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp hmac kdf x509 curl revocation stroke kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default } diff --git a/testing/tests/ike/rw_v1-net_v2/hosts/sun/etc/strongswan.conf b/testing/tests/ike/rw_v1-net_v2/hosts/sun/etc/strongswan.conf index ef8a2d6d6..6543e442c 100644 --- a/testing/tests/ike/rw_v1-net_v2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ike/rw_v1-net_v2/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp hmac kdf x509 curl revocation stroke kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-netlink socket-default } From 17e0f20f57528669c06ac766f5b4ae2954d9ce33 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 19 Oct 2022 10:57:22 +0200 Subject: [PATCH 12/24] testing: Migrated af-alg scenarios --- .../af-alg/alg-camellia/hosts/carol/etc/strongswan.conf | 4 ++-- .../af-alg/alg-camellia/hosts/moon/etc/strongswan.conf | 4 ++-- testing/tests/af-alg/rw-cert/description.txt | 4 ++-- .../tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf | 8 ++------ .../tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf | 8 ++------ .../tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf | 5 +++-- 6 files changed, 13 insertions(+), 20 deletions(-) diff --git a/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf b/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf index 03dbcd3bb..46092a0c5 100644 --- a/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf +++ b/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce kdf pem pkcs1 af-alg gmp x509 revocation kernel-netlink curl socket-default updown vici + load = random nonce pem pkcs1 af-alg openssl revocation kernel-netlink curl socket-default updown vici } diff --git a/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf b/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf index 03dbcd3bb..46092a0c5 100644 --- a/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf +++ b/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce kdf pem pkcs1 af-alg gmp x509 revocation kernel-netlink curl socket-default updown vici + load = random nonce pem pkcs1 af-alg openssl revocation kernel-netlink curl socket-default updown vici } diff --git a/testing/tests/af-alg/rw-cert/description.txt b/testing/tests/af-alg/rw-cert/description.txt index 13f20d1e2..042800278 100644 --- a/testing/tests/af-alg/rw-cert/description.txt +++ b/testing/tests/af-alg/rw-cert/description.txt @@ -1,7 +1,7 @@ The roadwarrior carol and the gateway moon use the Crypto API of the Linux kernel via the af_alg userland interface for all symmetric -encryption and hash functions whereas roadwarrior dave uses the default -strongSwan cryptographical plugins aes des sha1 sha2 md5 gmp. +encryption and hash functions whereas roadwarrior dave uses openssl +as the default strongSwan cryptographical plugin.

The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on X.509 certificates. diff --git a/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf index 168b441d5..932bc0774 100644 --- a/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,13 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce kdf test-vectors pem pkcs1 af-alg gmp x509 revocation curl ctr ccm gcm kernel-netlink socket-default updown vici - integrity_test = yes - crypto_test { - on_add = yes - } + load = random nonce test-vectors pem pkcs1 af-alg ccn gcm openssl revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf index cfba9829c..be5956e50 100644 --- a/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,13 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce kdf test-vectors aes des sha1 sha2 md5 pem pkcs1 gmp x509 revocation curl hmac kdf xcbc ctr ccm gcm kernel-netlink socket-default updown vici - integrity_test = yes - crypto_test { - on_add = yes - } + load = random nonce openssl test-vectors pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf index 168b441d5..c8656ced2 100644 --- a/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,11 +1,12 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce kdf test-vectors pem pkcs1 af-alg gmp x509 revocation curl ctr ccm gcm kernel-netlink socket-default updown vici + load = random nonce test-vectors pem pkcs1 af-alg ccm gcm openssl revocation curl kernel-netlink socket-default updown vici + integrity_test = yes crypto_test { on_add = yes From b9e5764b7578c3cc0e761af07d1e5e49530e97d5 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 04:15:28 +0200 Subject: [PATCH 13/24] testing: Migrated botan scenarios --- testing/tests/botan/net2net-ed25519/description.txt | 4 ++-- .../botan/net2net-ed25519/hosts/sun/etc/strongswan.conf | 4 ++-- testing/tests/botan/rw-cert/description.txt | 6 +++--- testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/botan/rw-modp3072/description.txt | 6 +++--- .../tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf | 4 ++-- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/testing/tests/botan/net2net-ed25519/description.txt b/testing/tests/botan/net2net-ed25519/description.txt index 8c67989f4..eeb874e63 100755 --- a/testing/tests/botan/net2net-ed25519/description.txt +++ b/testing/tests/botan/net2net-ed25519/description.txt @@ -1,8 +1,8 @@ A connection between the subnets behind the gateways moon and sun is set up. The authentication is based on X.509 certificates containing Ed25519 keys. moon uses the botan plugin based on the Botan library for all -cryptographical functions whereas sun uses the default strongSwan -cryptographical plugins. +cryptographical functions whereas sun uses openssl +as the default strongSwan cryptographical plugin.

Upon the successful establishment of the IPsec tunnel, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf index 13c6cf84e..f0c7480ca 100755 --- a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf +++ b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem sha1 pkcs1 pkcs8 curve25519 x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pkcs8 x509 revocation constraints curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/botan/rw-cert/description.txt b/testing/tests/botan/rw-cert/description.txt index 2d9d550fc..9eb7cacb1 100755 --- a/testing/tests/botan/rw-cert/description.txt +++ b/testing/tests/botan/rw-cert/description.txt @@ -1,8 +1,8 @@ The roadwarrior carol and the gateway moon use the botan plugin based on the Botan library for all cryptographical functions whereas -roadwarrior dave uses the default strongSwan cryptographical -plugins. The authentication is based on X.509 certificates and the key exchange -on x25519. +roadwarrior dave uses openssl as the default strongSwan +cryptographical plugin. The authentication is based on X.509 certificates +and the key exchange on x25519.

Upon the successful establishment of the IPsec tunnels, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf index ad87328e3..d8d81a1be 100755 --- a/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf @@ -5,7 +5,7 @@ swanctl { } charon-systemd { - load = random nonce sha1 sha2 aes curve25519 hmac kdf mgf1 pem pkcs1 x509 revocation constraints pubkey gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici rsa_pss = yes } diff --git a/testing/tests/botan/rw-modp3072/description.txt b/testing/tests/botan/rw-modp3072/description.txt index 3c1c0dc84..c73a528d1 100755 --- a/testing/tests/botan/rw-modp3072/description.txt +++ b/testing/tests/botan/rw-modp3072/description.txt @@ -1,8 +1,8 @@ The roadwarrior carol and the gateway moon use the botan plugin based on the Botan library for all cryptographical functions whereas -roadwarrior dave uses the default strongSwan cryptographical -plugins. The authentication is based on X.509 certificates and the key exchange -on modp3072. +roadwarrior dave uses topenssl as the default strongSwan +cryptographical plugin. The authentication is based on X.509 certificates +and the key exchange on modp3072.

Upon the successful establishment of the IPsec tunnels, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf b/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf index f9df83ca4..033ea6b29 100755 --- a/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf +++ b/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf mgf1 pem pkcs1 x509 revocation constraints pubkey gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici rsa_pss = yes } From dc69cf2f65e94cd01cae2af2b11a70064f9244c6 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 04:54:56 +0200 Subject: [PATCH 14/24] testing: Migrated gcrypt-ikev2 scenarios --- testing/tests/gcrypt-ikev2/rw-cert/description.txt | 5 ++--- .../gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/testing/tests/gcrypt-ikev2/rw-cert/description.txt b/testing/tests/gcrypt-ikev2/rw-cert/description.txt index 0502a6be2..c445473ab 100644 --- a/testing/tests/gcrypt-ikev2/rw-cert/description.txt +++ b/testing/tests/gcrypt-ikev2/rw-cert/description.txt @@ -1,7 +1,7 @@ The roadwarrior carol and the gateway moon use the gcrypt plugin based on the GNU Libgcrypt library for all cryptographical functions -whereas roadwarrior dave uses the default strongSwan cryptographical -plugins aes des sha1 sha2 md5 gmp. +whereas roadwarrior dave uses openssl as the default strongSwan +cryptographical plugin.

The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on X.509 certificates. @@ -9,4 +9,3 @@ Upon the successful establishment of the IPsec tunnels, the updown direct in swanctl.conf automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon. - diff --git a/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf index 22cc4d8a5..472001fb9 100644 --- a/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf @@ -5,7 +5,7 @@ swanctl { } charon-systemd { - load = test-vectors aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc ctr ccm vici stroke kernel-netlink socket-default updown + load = test-vectors pem pkcs1 random nonce openssl curl revocation xcbc vici stroke kernel-netlink socket-default updown integrity_test = yes crypto_test { required = yes From 0cf08b45dde61b96b43e1ab616152b04a8cdd46f Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 09:39:46 +0200 Subject: [PATCH 15/24] testing: Migrated ha scenarios to new default plugins --- testing/tests/ha/active-passive/evaltest.dat | 8 ++++---- .../ha/active-passive/hosts/alice/etc/strongswan.conf | 2 +- .../ha/active-passive/hosts/carol/etc/strongswan.conf | 2 +- .../ha/active-passive/hosts/dave/etc/strongswan.conf | 2 +- .../ha/active-passive/hosts/moon/etc/strongswan.conf | 2 +- .../tests/ha/both-active/hosts/alice/etc/strongswan.conf | 2 +- .../tests/ha/both-active/hosts/carol/etc/strongswan.conf | 2 +- .../tests/ha/both-active/hosts/dave/etc/strongswan.conf | 2 +- .../tests/ha/both-active/hosts/moon/etc/strongswan.conf | 2 +- 9 files changed, 12 insertions(+), 12 deletions(-) diff --git a/testing/tests/ha/active-passive/evaltest.dat b/testing/tests/ha/active-passive/evaltest.dat index dddd337df..aa3576793 100644 --- a/testing/tests/ha/active-passive/evaltest.dat +++ b/testing/tests/ha/active-passive/evaltest.dat @@ -1,11 +1,11 @@ alice::cat /var/log/daemon.log::HA segment 1 was not handled, taking::YES moon:: cat /var/log/daemon.log::remote node takes segment 1::YES -alice::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.10 local-port=500 local-id=10.1.0.10 remote-host=10.1.0.1 remote-port=500 remote-id=10.1.0.1.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]] remote-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]]::YES -alice::swanctl --list-sas --ike-id 2 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.10 local-port=500 local-id=10.1.0.10 remote-host=10.1.0.1 remote-port=500 remote-id=10.1.0.1.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]] remote-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]]::YES +alice::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.10 local-port=500 local-id=10.1.0.10 remote-host=10.1.0.1 remote-port=500 remote-id=10.1.0.1.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]] remote-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]]::YES +alice::swanctl --list-sas --ike-id 2 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.10 local-port=500 local-id=10.1.0.10 remote-host=10.1.0.1 remote-port=500 remote-id=10.1.0.1.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]] remote-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]]::YES alice::swanctl --list-sas --ike-id 3 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.5 local-port=4500 local-id=mars.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=2 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES alice::swanctl --list-sas --ike-id 4 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.5 local-port=4500 local-id=mars.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=3 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.1 local-port=500 local-id=10.1.0.1 remote-host=10.1.0.10 remote-port=500 remote-id=10.1.0.10.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]] remote-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]]::YES -moon::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.1 local-port=500 local-id=10.1.0.1 remote-host=10.1.0.10 remote-port=500 remote-id=10.1.0.10.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]] remote-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]]::YES +moon::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.1 local-port=500 local-id=10.1.0.1 remote-host=10.1.0.10 remote-port=500 remote-id=10.1.0.10.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]] remote-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]]::YES +moon::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::ha.*version=2 state=ESTABLISHED local-host=10.1.0.1 local-port=500 local-id=10.1.0.1 remote-host=10.1.0.10 remote-port=500 remote-id=10.1.0.10.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*ha.*reqid=1 state=INSTALLED mode=TRANSPORT.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.1/32\[icmp] 10.1.0.1/32\[udp/4510]] remote-ts=\[10.1.0.10/32\[icmp] 10.1.0.10/32\[udp/4510]]::YES moon ::swanctl --list-sas --ike-id 3 --raw 2> /dev/null::rw.*version=2 state=PASSIVE local-host=192.168.0.5 local-port=4500 local-id=mars.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=2 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon ::swanctl --list-sas --ike-id 4 --raw 2> /dev/null::rw.*version=2 state=PASSIVE local-host=192.168.0.5 local-port=4500 local-id=mars.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*net.*reqid=3 state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.5 remote-port=4500 remote-id=mars.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=CURVE_25519.*child-sas.*home.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES diff --git a/testing/tests/ha/active-passive/hosts/alice/etc/strongswan.conf b/testing/tests/ha/active-passive/hosts/alice/etc/strongswan.conf index c782b9b73..c73579fba 100644 --- a/testing/tests/ha/active-passive/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ha/active-passive/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default ha + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default ha plugins { ha { diff --git a/testing/tests/ha/active-passive/hosts/carol/etc/strongswan.conf b/testing/tests/ha/active-passive/hosts/carol/etc/strongswan.conf index 53e812a91..d2715e406 100644 --- a/testing/tests/ha/active-passive/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ha/active-passive/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ha/active-passive/hosts/dave/etc/strongswan.conf b/testing/tests/ha/active-passive/hosts/dave/etc/strongswan.conf index aabcbea5c..e785a90cd 100644 --- a/testing/tests/ha/active-passive/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ha/active-passive/hosts/dave/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ha/active-passive/hosts/moon/etc/strongswan.conf b/testing/tests/ha/active-passive/hosts/moon/etc/strongswan.conf index 1ebac6ebe..a5ef8dfa9 100644 --- a/testing/tests/ha/active-passive/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ha/active-passive/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default ha + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default ha plugins { ha { diff --git a/testing/tests/ha/both-active/hosts/alice/etc/strongswan.conf b/testing/tests/ha/both-active/hosts/alice/etc/strongswan.conf index 18d72f890..8c9799daf 100644 --- a/testing/tests/ha/both-active/hosts/alice/etc/strongswan.conf +++ b/testing/tests/ha/both-active/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default ha + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default ha plugins { ha { diff --git a/testing/tests/ha/both-active/hosts/carol/etc/strongswan.conf b/testing/tests/ha/both-active/hosts/carol/etc/strongswan.conf index 53e812a91..d2715e406 100644 --- a/testing/tests/ha/both-active/hosts/carol/etc/strongswan.conf +++ b/testing/tests/ha/both-active/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ha/both-active/hosts/dave/etc/strongswan.conf b/testing/tests/ha/both-active/hosts/dave/etc/strongswan.conf index aabcbea5c..e785a90cd 100644 --- a/testing/tests/ha/both-active/hosts/dave/etc/strongswan.conf +++ b/testing/tests/ha/both-active/hosts/dave/etc/strongswan.conf @@ -1,6 +1,6 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/ha/both-active/hosts/moon/etc/strongswan.conf b/testing/tests/ha/both-active/hosts/moon/etc/strongswan.conf index e90135a84..ae6302335 100644 --- a/testing/tests/ha/both-active/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ha/both-active/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default ha + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default ha plugins { ha { From bd93dfb09b9e7bb72cd8d99a655358fca3eb9f0f Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 10:17:32 +0200 Subject: [PATCH 16/24] testing: Migrated libipsec scenarios to new default plugins --- .../host2host-cert-raw/hosts/moon/etc/strongswan.conf | 4 ++-- .../libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf | 4 ++-- .../libipsec/host2host-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../libipsec/host2host-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../libipsec/net2net-3des/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf | 4 ++-- .../hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf | 4 ++-- .../hosts/sun/etc/swanctl/swanctl.conf | 1 - .../libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf | 4 ++-- .../libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-cert-raw/hosts/sun/etc/swanctl/swanctl.conf | 1 - .../libipsec/net2net-cert/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf | 4 ++-- .../libipsec/net2net-null/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf | 4 ++-- .../libipsec/net2net-trap/hosts/moon/etc/strongswan.conf | 4 ++-- .../tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf | 4 ++-- 20 files changed, 36 insertions(+), 38 deletions(-) diff --git a/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf index ac1b85564..9ff1eb85b 100644 --- a/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no diff --git a/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf index ac1b85564..9ff1eb85b 100644 --- a/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no diff --git a/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf index 38bcce263..9adf2aa99 100644 --- a/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no diff --git a/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf index 38bcce263..9adf2aa99 100644 --- a/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no diff --git a/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf index 141a52e18..c98c6731e 100644 --- a/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce des sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf index 141a52e18..c98c6731e 100644 --- a/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce des sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf index 6870d32fe..5304b76e4 100644 --- a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce pem pkcs1 x509 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf index 6870d32fe..5304b76e4 100644 --- a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce pem pkcs1 x509 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 openssl curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf index e2c90b0bf..734f05b5f 100644 --- a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no plugins { kernel-libipsec { diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf index fa2a2a49c..734f05b5f 100644 --- a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici ker_nel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no plugins { kernel-libipsec { diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/swanctl/swanctl.conf index 6d3bb7226..4e5ad5a07 100755 --- a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/swanctl/swanctl.conf +++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/swanctl/swanctl.conf @@ -19,7 +19,6 @@ connections { remote_ts = fec1::0/16 updown = /etc/updown - updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-x25519 } } diff --git a/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf index e2c90b0bf..734f05b5f 100644 --- a/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no plugins { kernel-libipsec { diff --git a/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf index fa2a2a49c..734f05b5f 100644 --- a/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici ker_nel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no plugins { kernel-libipsec { diff --git a/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/swanctl/swanctl.conf b/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/swanctl/swanctl.conf index 36229552b..892678746 100755 --- a/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/swanctl/swanctl.conf +++ b/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/swanctl/swanctl.conf @@ -19,7 +19,6 @@ connections { remote_ts = 10.1.0.0/16 updown = /etc/updown - updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm128-x25519 } } diff --git a/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf index 8ce7c2a78..c98c6731e 100644 --- a/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf index 8ce7c2a78..c98c6731e 100644 --- a/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf index 9e2091f31..23cdf9acb 100644 --- a/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf index 9e2091f31..23cdf9acb 100644 --- a/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 revocation openssl curl vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf index 8ce7c2a78..c98c6731e 100644 --- a/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } diff --git a/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf index 8ce7c2a78..c98c6731e 100644 --- a/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf +++ b/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf @@ -1,10 +1,10 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 gcm pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-libipsec kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-libipsec kernel-netlink socket-default updown multiple_authentication = no } From 93b6162d741b2a2e12d246b4704448ccf42cb038 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 10:21:27 +0200 Subject: [PATCH 17/24] testing: Migrated p2pnat scenarios to new default plugins --- .../p2pnat/behind-same-nat/hosts/alice/etc/strongswan.conf | 2 +- .../p2pnat/behind-same-nat/hosts/carol/etc/strongswan.conf | 2 +- .../p2pnat/behind-same-nat/hosts/venus/etc/strongswan.conf | 2 +- testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/p2pnat/medsrv-psk/hosts/bob/etc/strongswan.conf | 2 +- testing/tests/p2pnat/medsrv-psk/hosts/carol/etc/strongswan.conf | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/testing/tests/p2pnat/behind-same-nat/hosts/alice/etc/strongswan.conf b/testing/tests/p2pnat/behind-same-nat/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/p2pnat/behind-same-nat/hosts/alice/etc/strongswan.conf +++ b/testing/tests/p2pnat/behind-same-nat/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/p2pnat/behind-same-nat/hosts/carol/etc/strongswan.conf b/testing/tests/p2pnat/behind-same-nat/hosts/carol/etc/strongswan.conf index 88656755e..4c8838cc0 100644 --- a/testing/tests/p2pnat/behind-same-nat/hosts/carol/etc/strongswan.conf +++ b/testing/tests/p2pnat/behind-same-nat/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/p2pnat/behind-same-nat/hosts/venus/etc/strongswan.conf b/testing/tests/p2pnat/behind-same-nat/hosts/venus/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/p2pnat/behind-same-nat/hosts/venus/etc/strongswan.conf +++ b/testing/tests/p2pnat/behind-same-nat/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/strongswan.conf b/testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/strongswan.conf +++ b/testing/tests/p2pnat/medsrv-psk/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/p2pnat/medsrv-psk/hosts/bob/etc/strongswan.conf b/testing/tests/p2pnat/medsrv-psk/hosts/bob/etc/strongswan.conf index a677a8acb..4c8838cc0 100644 --- a/testing/tests/p2pnat/medsrv-psk/hosts/bob/etc/strongswan.conf +++ b/testing/tests/p2pnat/medsrv-psk/hosts/bob/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/p2pnat/medsrv-psk/hosts/carol/etc/strongswan.conf b/testing/tests/p2pnat/medsrv-psk/hosts/carol/etc/strongswan.conf index 88656755e..4c8838cc0 100644 --- a/testing/tests/p2pnat/medsrv-psk/hosts/carol/etc/strongswan.conf +++ b/testing/tests/p2pnat/medsrv-psk/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } From 8fc6340c05e84d2a546c2e4a9752b7e422398a33 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 16:29:34 +0200 Subject: [PATCH 18/24] testing: Migrated pfkey scenarios to new default plugins --- .../tests/pfkey/alg-aes-xcbc/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/pfkey/alg-aes-xcbc/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/pfkey/alg-sha384/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/pfkey/alg-sha384/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/pfkey/alg-sha512/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/pfkey/alg-sha512/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/pfkey/compress/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/pfkey/compress/hosts/moon/etc/strongswan.conf | 2 +- .../tests/pfkey/esp-alg-null/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/pfkey/esp-alg-null/hosts/moon/etc/strongswan.conf | 2 +- .../pfkey/host2host-transport/hosts/moon/etc/strongswan.conf | 2 +- .../pfkey/host2host-transport/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/pfkey/nat-rw/hosts/alice/etc/strongswan.conf | 2 +- testing/tests/pfkey/nat-rw/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/pfkey/nat-rw/hosts/venus/etc/strongswan.conf | 2 +- .../tests/pfkey/net2net-rekey/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/pfkey/net2net-rekey/hosts/sun/etc/strongswan.conf | 2 +- .../tests/pfkey/net2net-route/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/pfkey/net2net-route/hosts/sun/etc/strongswan.conf | 2 +- .../tests/pfkey/protoport-dual/hosts/carol/etc/strongswan.conf | 2 +- .../tests/pfkey/protoport-dual/hosts/moon/etc/strongswan.conf | 2 +- .../tests/pfkey/protoport-route/hosts/carol/etc/strongswan.conf | 2 +- .../tests/pfkey/protoport-route/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/pfkey/rw-cert/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/pfkey/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/pfkey/rw-cert/hosts/moon/etc/strongswan.conf | 2 +- .../pfkey/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf | 2 +- .../pfkey/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf | 2 +- .../pfkey/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf | 2 +- 29 files changed, 29 insertions(+), 29 deletions(-) diff --git a/testing/tests/pfkey/alg-aes-xcbc/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/alg-aes-xcbc/hosts/carol/etc/strongswan.conf index a061cabeb..c83efd0b6 100644 --- a/testing/tests/pfkey/alg-aes-xcbc/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/alg-aes-xcbc/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 kdf pem pkcs1 gmp x509 curl revocation xcbc stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation xcbc kdf stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/alg-aes-xcbc/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/alg-aes-xcbc/hosts/moon/etc/strongswan.conf index 3c6523252..c83efd0b6 100644 --- a/testing/tests/pfkey/alg-aes-xcbc/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/alg-aes-xcbc/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 kdf pem pkcs1 gmp x509 curl revocation xcbc stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation xcbc kdf stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/alg-sha384/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/alg-sha384/hosts/carol/etc/strongswan.conf index d9588fc23..a54db57a2 100644 --- a/testing/tests/pfkey/alg-sha384/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/alg-sha384/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/alg-sha384/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/alg-sha384/hosts/moon/etc/strongswan.conf index 7ca0ed23f..a54db57a2 100644 --- a/testing/tests/pfkey/alg-sha384/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/alg-sha384/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/alg-sha512/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/alg-sha512/hosts/carol/etc/strongswan.conf index d9588fc23..a54db57a2 100644 --- a/testing/tests/pfkey/alg-sha512/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/alg-sha512/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/alg-sha512/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/alg-sha512/hosts/moon/etc/strongswan.conf index 7ca0ed23f..a54db57a2 100644 --- a/testing/tests/pfkey/alg-sha512/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/alg-sha512/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/compress/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/compress/hosts/carol/etc/strongswan.conf index fc06a367f..a54db57a2 100644 --- a/testing/tests/pfkey/compress/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/compress/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/compress/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/compress/hosts/moon/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/compress/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/compress/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/esp-alg-null/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/esp-alg-null/hosts/carol/etc/strongswan.conf index fc06a367f..a54db57a2 100644 --- a/testing/tests/pfkey/esp-alg-null/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/esp-alg-null/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/esp-alg-null/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/esp-alg-null/hosts/moon/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/esp-alg-null/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/esp-alg-null/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/host2host-transport/hosts/moon/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/host2host-transport/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/host2host-transport/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/pfkey/host2host-transport/hosts/sun/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/host2host-transport/hosts/sun/etc/strongswan.conf +++ b/testing/tests/pfkey/host2host-transport/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/pfkey/nat-rw/hosts/alice/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/pfkey/nat-rw/hosts/alice/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/pfkey/nat-rw/hosts/sun/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/pfkey/nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/pfkey/nat-rw/hosts/venus/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/pfkey/nat-rw/hosts/venus/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/net2net-rekey/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/net2net-rekey/hosts/moon/etc/strongswan.conf index 66c772cba..1cfb0af35 100644 --- a/testing/tests/pfkey/net2net-rekey/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/net2net-rekey/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown # remove rekeyed inbound SA a bit quicker for the test scenario delete_rekeyed_delay = 2 syslog { diff --git a/testing/tests/pfkey/net2net-rekey/hosts/sun/etc/strongswan.conf b/testing/tests/pfkey/net2net-rekey/hosts/sun/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/net2net-rekey/hosts/sun/etc/strongswan.conf +++ b/testing/tests/pfkey/net2net-rekey/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/net2net-route/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/net2net-route/hosts/moon/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/net2net-route/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/net2net-route/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/net2net-route/hosts/sun/etc/strongswan.conf b/testing/tests/pfkey/net2net-route/hosts/sun/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/net2net-route/hosts/sun/etc/strongswan.conf +++ b/testing/tests/pfkey/net2net-route/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/protoport-dual/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/protoport-dual/hosts/carol/etc/strongswan.conf index fc06a367f..a54db57a2 100644 --- a/testing/tests/pfkey/protoport-dual/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/protoport-dual/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/protoport-dual/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/protoport-dual/hosts/moon/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/protoport-dual/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/protoport-dual/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/protoport-route/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/protoport-route/hosts/carol/etc/strongswan.conf index fc06a367f..a54db57a2 100644 --- a/testing/tests/pfkey/protoport-route/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/protoport-route/hosts/carol/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/protoport-route/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/protoport-route/hosts/moon/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/protoport-route/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/protoport-route/hosts/moon/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/pfkey/rw-cert/hosts/carol/etc/strongswan.conf index 7aadf2e30..e88661e13 100644 --- a/testing/tests/pfkey/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/pfkey/rw-cert/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce test-vectors aes des sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf xcbc stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl test-vectors pem pkcs1 curl revocation xcbc stroke kernel-pfkey kernel-netlink socket-default updown integrity_test = yes crypto_test { diff --git a/testing/tests/pfkey/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/pfkey/rw-cert/hosts/dave/etc/strongswan.conf index 7aadf2e30..e88661e13 100644 --- a/testing/tests/pfkey/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/pfkey/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce test-vectors aes des sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf xcbc stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl test-vectors pem pkcs1 curl revocation xcbc stroke kernel-pfkey kernel-netlink socket-default updown integrity_test = yes crypto_test { diff --git a/testing/tests/pfkey/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/pfkey/rw-cert/hosts/moon/etc/strongswan.conf index 7aadf2e30..e88661e13 100644 --- a/testing/tests/pfkey/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/pfkey/rw-cert/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce test-vectors aes des sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf xcbc stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl test-vectors pem pkcs1 curl revocation xcbc stroke kernel-pfkey kernel-netlink socket-default updown integrity_test = yes crypto_test { diff --git a/testing/tests/pfkey/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/pfkey/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf index 0a227441d..2c0e2992c 100644 --- a/testing/tests/pfkey/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/pfkey/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown keep_alive = 5 } diff --git a/testing/tests/pfkey/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/pfkey/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf index c94235b07..a54db57a2 100644 --- a/testing/tests/pfkey/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/pfkey/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf @@ -1,5 +1,5 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown } diff --git a/testing/tests/pfkey/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/pfkey/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf index 0a227441d..2c0e2992c 100644 --- a/testing/tests/pfkey/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/pfkey/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf stroke kernel-pfkey kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation stroke kernel-pfkey kernel-netlink socket-default updown keep_alive = 5 } From b891da52b46c90e832417c9b52d3e0268c3420c9 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 16:51:31 +0200 Subject: [PATCH 19/24] testing: Migrated route-based scenarios to new default plugins --- .../route-based/net2net-gre/hosts/moon/etc/strongswan.conf | 4 ++-- .../route-based/net2net-gre/hosts/sun/etc/strongswan.conf | 4 ++-- .../route-based/net2net-vti/hosts/moon/etc/strongswan.conf | 4 ++-- .../route-based/net2net-vti/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf | 4 ++-- .../net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf | 4 ++-- .../net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf | 4 ++-- .../route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf | 4 ++-- .../route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf | 4 ++-- .../rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf | 4 ++-- .../route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf | 4 ++-- .../route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf | 4 ++-- .../route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf | 4 ++-- .../rw-shared-xfrmi/hosts/carol/etc/strongswan.conf | 4 ++-- .../rw-shared-xfrmi/hosts/dave/etc/strongswan.conf | 4 ++-- .../rw-shared-xfrmi/hosts/moon/etc/strongswan.conf | 4 ++-- 19 files changed, 38 insertions(+), 38 deletions(-) diff --git a/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf index 55b903f0d..ecfacd2dd 100644 --- a/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } charon { diff --git a/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf index 55b903f0d..ecfacd2dd 100644 --- a/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } charon { diff --git a/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf index 55b903f0d..ecfacd2dd 100644 --- a/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } charon { diff --git a/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf index 55b903f0d..ecfacd2dd 100644 --- a/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } charon { diff --git a/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf index ce2806009..17d28dd46 100644 --- a/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default start-scripts { updown = /usr/bin/python3 /etc/updown.py } diff --git a/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf +++ b/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } diff --git a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf index 55b903f0d..ecfacd2dd 100644 --- a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } charon { diff --git a/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf index 55b903f0d..ecfacd2dd 100644 --- a/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } charon { diff --git a/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf b/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf b/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf index 2177dee8d..5ac39a337 100755 --- a/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 x509 revocation curve25519 gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf index e02353f79..5292ed071 100644 --- a/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf +++ b/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown } From 89acb24bd7d6f2c9f6f47fd48c27ee837645515d Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Thu, 20 Oct 2022 22:13:14 +0200 Subject: [PATCH 20/24] testing: Migrated sql scenarios to new default plugins --- testing/tests/sql/ip-pool-db-expired/evaltest.dat | 8 ++++---- .../ip-pool-db-expired/hosts/carol/etc/strongswan.conf | 2 +- .../sql/ip-pool-db-expired/hosts/dave/etc/strongswan.conf | 2 +- .../sql/ip-pool-db-expired/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/ip-pool-db-restart/evaltest.dat | 8 ++++---- .../ip-pool-db-restart/hosts/carol/etc/strongswan.conf | 2 +- .../sql/ip-pool-db-restart/hosts/dave/etc/strongswan.conf | 2 +- .../sql/ip-pool-db-restart/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/ip-pool-db/evaltest.dat | 8 ++++---- .../tests/sql/ip-pool-db/hosts/carol/etc/strongswan.conf | 2 +- .../tests/sql/ip-pool-db/hosts/dave/etc/strongswan.conf | 2 +- .../tests/sql/ip-pool-db/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/ip-split-pools-db-restart/evaltest.dat | 8 ++++---- .../hosts/carol/etc/strongswan.conf | 2 +- .../hosts/dave/etc/strongswan.conf | 2 +- .../hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/ip-split-pools-db/evaltest.dat | 8 ++++---- .../sql/ip-split-pools-db/hosts/carol/etc/strongswan.conf | 2 +- .../sql/ip-split-pools-db/hosts/dave/etc/strongswan.conf | 2 +- .../sql/ip-split-pools-db/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/multi-level-ca/evaltest.dat | 8 ++++---- .../sql/multi-level-ca/hosts/carol/etc/strongswan.conf | 2 +- .../sql/multi-level-ca/hosts/dave/etc/strongswan.conf | 2 +- .../sql/multi-level-ca/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/net2net-cert/evaltest.dat | 4 ++-- .../tests/sql/net2net-cert/hosts/moon/etc/strongswan.conf | 2 +- .../tests/sql/net2net-cert/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/sql/net2net-psk/evaltest.dat | 4 ++-- .../tests/sql/net2net-psk/hosts/moon/etc/strongswan.conf | 2 +- .../tests/sql/net2net-psk/hosts/sun/etc/strongswan.conf | 2 +- .../sql/net2net-route-pem/hosts/moon/etc/strongswan.conf | 2 +- .../sql/net2net-route-pem/hosts/sun/etc/strongswan.conf | 2 +- .../sql/net2net-start-pem/hosts/moon/etc/strongswan.conf | 2 +- .../sql/net2net-start-pem/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/sql/rw-cert/evaltest.dat | 8 ++++---- testing/tests/sql/rw-cert/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/sql/rw-cert/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/sql/rw-cert/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/rw-eap-aka-rsa/evaltest.dat | 4 ++-- .../sql/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf | 2 +- .../sql/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/rw-psk-ipv4/evaltest.dat | 8 ++++---- .../tests/sql/rw-psk-ipv4/hosts/carol/etc/strongswan.conf | 2 +- .../tests/sql/rw-psk-ipv4/hosts/dave/etc/strongswan.conf | 2 +- .../tests/sql/rw-psk-ipv4/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/rw-psk-ipv6/evaltest.dat | 8 ++++---- .../tests/sql/rw-psk-ipv6/hosts/carol/etc/strongswan.conf | 2 +- .../tests/sql/rw-psk-ipv6/hosts/dave/etc/strongswan.conf | 2 +- .../tests/sql/rw-psk-ipv6/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/rw-psk-rsa-split/evaltest.dat | 8 ++++---- .../sql/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf | 2 +- .../sql/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf | 2 +- .../sql/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/rw-rsa-keyid/evaltest.dat | 8 ++++---- .../sql/rw-rsa-keyid/hosts/carol/etc/strongswan.conf | 2 +- .../tests/sql/rw-rsa-keyid/hosts/dave/etc/strongswan.conf | 2 +- .../tests/sql/rw-rsa-keyid/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/rw-rsa/evaltest.dat | 8 ++++---- testing/tests/sql/rw-rsa/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/sql/rw-rsa/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/sql/rw-rsa/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/sql/shunt-policies-nat-rw/evaltest.dat | 8 ++++---- .../shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf | 2 +- .../shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf | 2 +- .../shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf | 2 +- 65 files changed, 107 insertions(+), 107 deletions(-) diff --git a/testing/tests/sql/ip-pool-db-expired/evaltest.dat b/testing/tests/sql/ip-pool-db-expired/evaltest.dat index 6f4cfa162..e8d1bd3a0 100644 --- a/testing/tests/sql/ip-pool-db-expired/evaltest.dat +++ b/testing/tests/sql/ip-pool-db-expired/evaltest.dat @@ -2,17 +2,17 @@ carol::cat /var/log/daemon.log::installing new virtual IP PH_IP_CAROL1::YES carol::ip addr list dev eth0::PH_IP_CAROL1::YES carol::ip route list table 220::10.1.0.0/16.*src PH_IP_CAROL1::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES dave:: cat /var/log/daemon.log::installing new virtual IP PH_IP_DAVE1::YES dave:: ip addr list dev eth0::PH_IP_DAVE1::YES dave:: ip route list table 220::10.1.0.0/16.*src PH_IP_DAVE1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.2] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.2] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[10.1.0.0/16]::YES moon:: cat /var/log/daemon.log::peer requested virtual IP %any::YES moon:: cat /var/log/daemon.log::acquired new lease for address.*in pool.*bigpool::YES moon:: cat /var/log/daemon.log::assigning virtual IP::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.2] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.2/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.2] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.2/32]::YES moon:: ipsec pool --status 2> /dev/null::bigpool.*10.3.0.1.*10.3.0.6.*60m.*2::YES moon:: ipsec pool --leases --filter pool=bigpool,addr=10.3.0.1,id=carol@strongswan.org 2> /dev/null::online::YES moon:: ipsec pool --leases --filter pool=bigpool,addr=10.3.0.2,id=dave@strongswan.org 2> /dev/null::online::YES diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/strongswan.conf b/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/strongswan.conf b/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/strongswan.conf b/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/strongswan.conf index 71afa84cb..8ce713a0f 100644 --- a/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql attr-sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql attr-sql plugins { sql { diff --git a/testing/tests/sql/ip-pool-db-restart/evaltest.dat b/testing/tests/sql/ip-pool-db-restart/evaltest.dat index f73cfc0cf..064da79cb 100644 --- a/testing/tests/sql/ip-pool-db-restart/evaltest.dat +++ b/testing/tests/sql/ip-pool-db-restart/evaltest.dat @@ -2,17 +2,17 @@ carol::cat /var/log/daemon.log::installing new virtual IP PH_IP_CAROL1::YES carol::ip addr list dev eth0::PH_IP_CAROL1::YES carol::ip route list table 220::10.1.0.0/16.*src PH_IP_CAROL1::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES dave:: cat /var/log/daemon.log::installing new virtual IP PH_IP_DAVE1::YES dave:: ip addr list dev eth0::PH_IP_DAVE1::YES dave:: ip route list table 220::10.1.0.0/16.*src PH_IP_DAVE1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.2] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.2] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[10.1.0.0/16]::YES moon:: cat /var/log/daemon.log::peer requested virtual IP %any::YES moon:: cat /var/log/daemon.log::acquired existing lease for address.*in pool.*bigpool::YES moon:: cat /var/log/daemon.log::assigning virtual IP::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.2] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.2/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.2] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.2/32]::YES moon:: ipsec pool --status 2> /dev/null::bigpool.*10.3.0.1.*10.3.0.6.*static.*2::YES moon:: ipsec pool --leases --filter pool=bigpool,addr=10.3.0.1,id=carol@strongswan.org 2> /dev/null::online::YES moon:: ipsec pool --leases --filter pool=bigpool,addr=10.3.0.2,id=dave@strongswan.org 2> /dev/null::online::YES diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/strongswan.conf b/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/strongswan.conf b/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/strongswan.conf b/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/strongswan.conf index 71afa84cb..8ce713a0f 100644 --- a/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql attr-sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql attr-sql plugins { sql { diff --git a/testing/tests/sql/ip-pool-db/evaltest.dat b/testing/tests/sql/ip-pool-db/evaltest.dat index e56122057..cb8664a46 100644 --- a/testing/tests/sql/ip-pool-db/evaltest.dat +++ b/testing/tests/sql/ip-pool-db/evaltest.dat @@ -6,7 +6,7 @@ carol::cat /var/log/daemon.log::handling APPLICATION_VERSION attribute failed::Y carol::ip addr list dev eth0::PH_IP_CAROL1::YES carol::ip route list table 220::10.1.0.0/16.*src PH_IP_CAROL1::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES dave:: cat /var/log/daemon.log::installing new virtual IP PH_IP_DAVE1::YES dave:: cat /var/log/daemon.log::installing new virtual IP PH_IP_DAVE1::YES dave:: cat /var/log/daemon.log::installing DNS server PH_IP_WINNETOU::YES @@ -16,12 +16,12 @@ dave:: cat /var/log/daemon.log::handling APPLICATION_VERSION attribute failed::Y dave:: ip addr list dev eth0::PH_IP_DAVE1::YES dave:: ip route list table 220::10.1.0.0/16.*src PH_IP_DAVE1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.2] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.2] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[10.1.0.0/16]::YES moon:: cat /var/log/daemon.log::peer requested virtual IP %any::YES moon:: cat /var/log/daemon.log::acquired new lease for address.*in pool.*bigpool::YES moon:: cat /var/log/daemon.log::assigning virtual IP::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.2] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.2/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.2] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.2/32]::YES moon:: ipsec pool --status 2> /dev/null::dns servers: PH_IP_WINNETOU PH_IP_VENUS::YES moon:: ipsec pool --status 2> /dev/null::nbns servers: PH_IP_VENUS::YES moon:: ipsec pool --status 2> /dev/null::bigpool.*10.3.0.1.*10.3.0.6.*static.*2::YES diff --git a/testing/tests/sql/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/sql/ip-pool-db/hosts/carol/etc/strongswan.conf index 9a54d6c46..cc189863f 100644 --- a/testing/tests/sql/ip-pool-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql resolve + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql resolve } diff --git a/testing/tests/sql/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/sql/ip-pool-db/hosts/dave/etc/strongswan.conf index 9a54d6c46..cc189863f 100644 --- a/testing/tests/sql/ip-pool-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql resolve + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql resolve } diff --git a/testing/tests/sql/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/sql/ip-pool-db/hosts/moon/etc/strongswan.conf index 71afa84cb..8ce713a0f 100644 --- a/testing/tests/sql/ip-pool-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/ip-pool-db/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql attr-sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql attr-sql plugins { sql { diff --git a/testing/tests/sql/ip-split-pools-db-restart/evaltest.dat b/testing/tests/sql/ip-split-pools-db-restart/evaltest.dat index 07596f4af..08b7398d4 100644 --- a/testing/tests/sql/ip-split-pools-db-restart/evaltest.dat +++ b/testing/tests/sql/ip-split-pools-db-restart/evaltest.dat @@ -1,7 +1,7 @@ dave::cat /var/log/daemon.log::installing new virtual IP 10.3.1.1::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.1.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.1.1/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.1.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.1.1/32] remote-ts=\[10.1.0.0/16]::YES carol::cat /var/log/daemon.log::installing new virtual IP 10.3.0.1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES moon:: cat /var/log/daemon.log::acquired existing lease for address 10.3.1.1 in pool.*pool1::YES moon:: cat /var/log/daemon.log::assigning virtual IP 10.3.1.1 to peer::YES moon:: cat /var/log/daemon.log::acquired existing lease for address 10.3.0.1 in pool.*pool0::YES @@ -10,5 +10,5 @@ moon:: ipsec pool --status 2> /dev/null::pool0.*10.3.0.1.*10.3.0.2.*static.*2 .* moon:: ipsec pool --status 2> /dev/null::pool1.*10.3.1.1.*10.3.1.2.*static.*2 .*1 .*1 ::YES moon:: ipsec pool --leases --filter pool=pool0,addr=10.3.0.1,id=carol@strongswan.org 2> /dev/null::online::YES moon:: ipsec pool --leases --filter pool=pool1,addr=10.3.1.1,id=dave@strongswan.org 2> /dev/null::online::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.1.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.1.1/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.1.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.1.1/32]::YES diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/strongswan.conf b/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/strongswan.conf b/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/strongswan.conf b/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/strongswan.conf index 71afa84cb..8ce713a0f 100644 --- a/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql attr-sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql attr-sql plugins { sql { diff --git a/testing/tests/sql/ip-split-pools-db/evaltest.dat b/testing/tests/sql/ip-split-pools-db/evaltest.dat index 3be897f05..783858bff 100644 --- a/testing/tests/sql/ip-split-pools-db/evaltest.dat +++ b/testing/tests/sql/ip-split-pools-db/evaltest.dat @@ -1,8 +1,8 @@ carol::cat /var/log/daemon.log::installing new virtual IP 10.3.0.1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[10.1.0.0/16]::YES dave:: cat /var/log/daemon.log::installing new virtual IP 10.3.1.1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.1.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.1.1/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.1.1] child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.1.1/32] remote-ts=\[10.1.0.0/16]::YES moon:: cat /var/log/daemon.log::acquired new lease for address 10.3.0.1 in pool.*pool0::YES moon:: cat /var/log/daemon.log::assigning virtual IP 10.3.0.1 to peer::YES moon:: cat /var/log/daemon.log::no available address found in pool.*pool0::YES @@ -12,5 +12,5 @@ moon:: ipsec pool --status 2> /dev/null::pool0.*10.3.0.1.*10.3.0.1.*static.*1 .* moon:: ipsec pool --status 2> /dev/null::pool1.*10.3.1.1.*10.3.1.1.*static.*1 .*1 .*1 ::YES moon:: ipsec pool --leases --filter pool=pool0,addr=10.3.0.1,id=carol@strongswan.org 2> /dev/null::online::YES moon:: ipsec pool --leases --filter pool=pool1,addr=10.3.1.1,id=dave@strongswan.org 2> /dev/null::online::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.1.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.1.1/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.0.1/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.1.1] child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.3.1.1/32]::YES diff --git a/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/strongswan.conf b/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/ip-split-pools-db/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/strongswan.conf b/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/ip-split-pools-db/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/strongswan.conf b/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/strongswan.conf index 71afa84cb..8ce713a0f 100644 --- a/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/ip-split-pools-db/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql attr-sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql attr-sql plugins { sql { diff --git a/testing/tests/sql/multi-level-ca/evaltest.dat b/testing/tests/sql/multi-level-ca/evaltest.dat index 6f94eda2b..3252866cd 100644 --- a/testing/tests/sql/multi-level-ca/evaltest.dat +++ b/testing/tests/sql/multi-level-ca/evaltest.dat @@ -1,17 +1,17 @@ carol::cat /var/log/daemon.log::sending issuer cert.*CN=Research CA::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=[192.168.0.100/32 remote-ts=\[10.1.0.0/16]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=[192.168.0.100/32 remote-ts=\[10.1.0.0/16]::YES dave:: cat /var/log/daemon.log::sending issuer cert.*CN=Sales CA::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES moon:: cat /var/log/daemon.log::fetching crl from.*http.*research.crl::YES moon:: cat /var/log/daemon.log::crl correctly signed by.*Research CA::YES moon:: cat /var/log/daemon.log::fetching crl from.*http.*sales.crl::YES moon:: cat /var/log/daemon.log::crl correctly signed by.*Sales CA::YES moon:: cat /var/log/daemon.log::fetching crl from.*http.*strongswan.crl::YES moon:: cat /var/log/daemon.log::crl correctly signed by.*strongSwan Root CA::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/multi-level-ca/hosts/carol/etc/strongswan.conf b/testing/tests/sql/multi-level-ca/hosts/carol/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/multi-level-ca/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/multi-level-ca/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/multi-level-ca/hosts/dave/etc/strongswan.conf b/testing/tests/sql/multi-level-ca/hosts/dave/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/multi-level-ca/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/multi-level-ca/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/multi-level-ca/hosts/moon/etc/strongswan.conf b/testing/tests/sql/multi-level-ca/hosts/moon/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/multi-level-ca/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/multi-level-ca/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-cert/evaltest.dat b/testing/tests/sql/net2net-cert/evaltest.dat index 14a344091..e96e5abbc 100644 --- a/testing/tests/sql/net2net-cert/evaltest.dat +++ b/testing/tests/sql/net2net-cert/evaltest.dat @@ -1,5 +1,5 @@ -moon::swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=500 local-id=moon.strongswan.org remote-host=192.168.0.2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.2.0.0/16]::YES -sun:: swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=500 local-id=sun.strongswan.org remote-host=192.168.0.1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.2.0.0/16] remote-ts=\[10.1.0.0/16]::YES +moon::swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=500 local-id=moon.strongswan.org remote-host=192.168.0.2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.2.0.0/16]::YES +sun:: swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=500 local-id=sun.strongswan.org remote-host=192.168.0.1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.2.0.0/16] remote-ts=\[10.1.0.0/16]::YES alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/sql/net2net-cert/hosts/moon/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/net2net-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/net2net-cert/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/sql/net2net-cert/hosts/sun/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/net2net-cert/hosts/sun/etc/strongswan.conf +++ b/testing/tests/sql/net2net-cert/hosts/sun/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-psk/evaltest.dat b/testing/tests/sql/net2net-psk/evaltest.dat index 14a344091..e96e5abbc 100644 --- a/testing/tests/sql/net2net-psk/evaltest.dat +++ b/testing/tests/sql/net2net-psk/evaltest.dat @@ -1,5 +1,5 @@ -moon::swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=500 local-id=moon.strongswan.org remote-host=192.168.0.2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.2.0.0/16]::YES -sun:: swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=500 local-id=sun.strongswan.org remote-host=192.168.0.1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.2.0.0/16] remote-ts=\[10.1.0.0/16]::YES +moon::swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=500 local-id=moon.strongswan.org remote-host=192.168.0.2 remote-port=500 remote-id=sun.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[10.2.0.0/16]::YES +sun:: swanctl --list-sas --raw 2> /dev/null::net-net.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=500 local-id=sun.strongswan.org remote-host=192.168.0.1 remote-port=500 remote-id=moon.strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*net-net.*state=INSTALLED mode=TUNNEL.*ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.2.0.0/16] remote-ts=\[10.1.0.0/16]::YES alice::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES sun::tcpdump::IP moon.strongswan.org > sun.strongswan.org: ESP::YES sun::tcpdump::IP sun.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/sql/net2net-psk/hosts/moon/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/net2net-psk/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/net2net-psk/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/sql/net2net-psk/hosts/sun/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/net2net-psk/hosts/sun/etc/strongswan.conf +++ b/testing/tests/sql/net2net-psk/hosts/sun/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-route-pem/hosts/moon/etc/strongswan.conf b/testing/tests/sql/net2net-route-pem/hosts/moon/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/net2net-route-pem/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/net2net-route-pem/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-route-pem/hosts/sun/etc/strongswan.conf b/testing/tests/sql/net2net-route-pem/hosts/sun/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/net2net-route-pem/hosts/sun/etc/strongswan.conf +++ b/testing/tests/sql/net2net-route-pem/hosts/sun/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-start-pem/hosts/moon/etc/strongswan.conf b/testing/tests/sql/net2net-start-pem/hosts/moon/etc/strongswan.conf index 7cbf292e1..d079a5bc9 100644 --- a/testing/tests/sql/net2net-start-pem/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/net2net-start-pem/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce kdf openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/net2net-start-pem/hosts/sun/etc/strongswan.conf b/testing/tests/sql/net2net-start-pem/hosts/sun/etc/strongswan.conf index 7cbf292e1..d079a5bc9 100644 --- a/testing/tests/sql/net2net-start-pem/hosts/sun/etc/strongswan.conf +++ b/testing/tests/sql/net2net-start-pem/hosts/sun/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce kdf openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-cert/evaltest.dat b/testing/tests/sql/rw-cert/evaltest.dat index ac3466cd9..7bcfba8b1 100644 --- a/testing/tests/sql/rw-cert/evaltest.dat +++ b/testing/tests/sql/rw-cert/evaltest.dat @@ -1,9 +1,9 @@ carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-cert/hosts/carol/etc/strongswan.conf index 603d96e31..08affc0fe 100644 --- a/testing/tests/sql/rw-cert/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-cert/hosts/carol/etc/strongswan.conf @@ -6,7 +6,7 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = test-vectors random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = test-vectors random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql integrity_test = yes crypto_test { diff --git a/testing/tests/sql/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/sql/rw-cert/hosts/dave/etc/strongswan.conf index 603d96e31..08affc0fe 100644 --- a/testing/tests/sql/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/rw-cert/hosts/dave/etc/strongswan.conf @@ -6,7 +6,7 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = test-vectors random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = test-vectors random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql integrity_test = yes crypto_test { diff --git a/testing/tests/sql/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-cert/hosts/moon/etc/strongswan.conf index 625b40d07..275e1feb2 100644 --- a/testing/tests/sql/rw-cert/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-cert/hosts/moon/etc/strongswan.conf @@ -6,7 +6,7 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = test-vectors random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = test-vectors random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql integrity_test = yes } diff --git a/testing/tests/sql/rw-eap-aka-rsa/evaltest.dat b/testing/tests/sql/rw-eap-aka-rsa/evaltest.dat index 4c80a772f..4d6af8882 100644 --- a/testing/tests/sql/rw-eap-aka-rsa/evaltest.dat +++ b/testing/tests/sql/rw-eap-aka-rsa/evaltest.dat @@ -2,7 +2,7 @@ carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with RSA carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::authentication of 'carol@strongswan.org' with EAP successful::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --raw 2> /dev/null::rw-eap-aka.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw-eap-aka.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --raw 2> /dev/null::rw-eap-aka.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw-eap-aka.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf index 3b31b2dd1..86564c7c9 100644 --- a/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql eap-aka eap-aka-3gpp2 + load = random nonce openssl fips-prf pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql eap-aka eap-aka-3gpp2 } diff --git a/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf index bb4f6b03d..813f31ac3 100644 --- a/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 fips-prf pem pkcs1 gmp x509 revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql eap-aka eap-aka-3gpp2 + load = random nonce openssl fips-prf pem pkcs1 revocation vici kernel-netlink socket-default updown sqlite sql eap-aka eap-aka-3gpp2 } diff --git a/testing/tests/sql/rw-psk-ipv4/evaltest.dat b/testing/tests/sql/rw-psk-ipv4/evaltest.dat index cef67a808..4307bcb93 100644 --- a/testing/tests/sql/rw-psk-ipv4/evaltest.dat +++ b/testing/tests/sql/rw-psk-ipv4/evaltest.dat @@ -1,9 +1,9 @@ carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=192.168.0.100 remote-host=192.168.0.1 remote-port=4500 remote-id=192.168.0.1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=192.168.0.200 remote-host=192.168.0.1 remote-port=4500 remote-id=192.168.0.1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=192.168.0.1 remote-host=192.168.0.200 remote-port=4500 remote-id=192.168.0.200.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=192.168.0.1 remote-host=192.168.0.100 remote-port=4500 remote-id=192.168.0.100.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=192.168.0.100 remote-host=192.168.0.1 remote-port=4500 remote-id=192.168.0.1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=192.168.0.200 remote-host=192.168.0.1 remote-port=4500 remote-id=192.168.0.1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=192.168.0.1 remote-host=192.168.0.200 remote-port=4500 remote-id=192.168.0.200.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=192.168.0.1 remote-host=192.168.0.100 remote-port=4500 remote-id=192.168.0.100.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-ipv6/evaltest.dat b/testing/tests/sql/rw-psk-ipv6/evaltest.dat index 4dca2e181..57341f4f5 100644 --- a/testing/tests/sql/rw-psk-ipv6/evaltest.dat +++ b/testing/tests/sql/rw-psk-ipv6/evaltest.dat @@ -1,9 +1,9 @@ carol::ping6 -c 1 ip6-alice.strongswan.org::64 bytes from ip6-alice.strongswan.org.*: icmp_seq=1::YES dave:: ping6 -c 1 ip6-alice.strongswan.org::64 bytes from ip6-alice.strongswan.org.*: icmp_seq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=fec0:\:10 local-port=4500 local-id=fec0:\:10 remote-host=fec0:\:1 remote-port=4500 remote-id=fec0:\:1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec0:\:10/128] remote-ts=\[fec1:\:/16]::YES -dave::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=fec0:\:20 local-port=4500 local-id=fec0:\:20 remote-host=fec0:\:1 remote-port=4500 remote-id=fec0:\:1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec0:\:20/128] remote-ts=\[fec1:\:/16]::YES -moon::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=fec0:\:1 local-port=4500 local-id=fec0:\:1 remote-host=fec0:\:10 remote-port=4500 remote-id=fec0:\:10.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec1:\:/16] remote-ts=\[fec0:\:10/128]::YES -moon::swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=fec0:\:1 local-port=4500 local-id=fec0:\:1 remote-host=fec0:\:20 remote-port=4500 remote-id=fec0:\:20.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec1:\:/16] remote-ts=\[fec0:\:20/128]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=fec0:\:10 local-port=4500 local-id=fec0:\:10 remote-host=fec0:\:1 remote-port=4500 remote-id=fec0:\:1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec0:\:10/128] remote-ts=\[fec1:\:/16]::YES +dave::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=fec0:\:20 local-port=4500 local-id=fec0:\:20 remote-host=fec0:\:1 remote-port=4500 remote-id=fec0:\:1 initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec0:\:20/128] remote-ts=\[fec1:\:/16]::YES +moon::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=fec0:\:1 local-port=4500 local-id=fec0:\:1 remote-host=fec0:\:10 remote-port=4500 remote-id=fec0:\:10.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec1:\:/16] remote-ts=\[fec0:\:10/128]::YES +moon::swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=fec0:\:1 local-port=4500 local-id=fec0:\:1 remote-host=fec0:\:20 remote-port=4500 remote-id=fec0:\:20.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[fec1:\:/16] remote-ts=\[fec0:\:20/128]::YES moon::tcpdump::IP6 ip6-carol.strongswan.org > ip6-moon.strongswan.org: ESP::YES moon::tcpdump::IP6 ip6-moon.strongswan.org > ip6-carol.strongswan.org: ESP::YES moon::tcpdump::IP6 ip6-dave.strongswan.org > ip6-moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/strongswan.conf b/testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/strongswan.conf index c7b73af79..69f0869a2 100644 --- a/testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-rsa-split/evaltest.dat b/testing/tests/sql/rw-psk-rsa-split/evaltest.dat index 496dc1974..fffd11fb4 100644 --- a/testing/tests/sql/rw-psk-rsa-split/evaltest.dat +++ b/testing/tests/sql/rw-psk-rsa-split/evaltest.dat @@ -3,10 +3,10 @@ moon:: cat /var/log/daemon.log::authentication of 'dave@strongswan.org' with pre moon:: cat /var/log/daemon.log::authentication of 'moon.strongswan.org' (myself) with RSA.* successful::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf b/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf index 7cbf292e1..7d8a14f45 100644 --- a/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-rsa-keyid/evaltest.dat b/testing/tests/sql/rw-rsa-keyid/evaltest.dat index 53634c61b..ef4b86b9d 100644 --- a/testing/tests/sql/rw-rsa-keyid/evaltest.dat +++ b/testing/tests/sql/rw-rsa-keyid/evaltest.dat @@ -1,9 +1,9 @@ carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.200 remote-port=4500 remote-id=..:..:.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.100 remote-port=4500 remote-id=..:..:.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=..:..:.* remote-host=192.168.0.1 remote-port=4500 remote-id=..:..:.* initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.200 remote-port=4500 remote-id=..:..:.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=..:..:.* remote-host=192.168.0.100 remote-port=4500 remote-id=..:..:.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/strongswan.conf index 253ea7f8b..11ec915ce 100644 --- a/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 pubkey gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 pubkey vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/strongswan.conf b/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/strongswan.conf index 253ea7f8b..11ec915ce 100644 --- a/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 pubkey gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 pubkey vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/strongswan.conf index 253ea7f8b..11ec915ce 100644 --- a/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 pubkey gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 pubkey vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-rsa/evaltest.dat b/testing/tests/sql/rw-rsa/evaltest.dat index ea670fa62..813d5f22a 100644 --- a/testing/tests/sql/rw-rsa/evaltest.dat +++ b/testing/tests/sql/rw-rsa/evaltest.dat @@ -1,9 +1,9 @@ carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES -carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES -dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES -moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES -moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES +carol::swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.100 local-port=4500 local-id=carol@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.100/32] remote-ts=\[10.1.0.0/16]::YES +dave:: swanctl --list-sas --raw 2> /dev/null::home.*version=2 state=ESTABLISHED local-host=192.168.0.200 local-port=4500 local-id=dave@strongswan.org remote-host=192.168.0.1 remote-port=4500 remote-id=moon.strongswan.org initiator=yes.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*child-sas.*home.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[192.168.0.200/32] remote-ts=\[10.1.0.0/16]::YES +moon:: swanctl --list-sas --ike-id 2 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.200 remote-port=4500 remote-id=dave@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.200/32]::YES +moon:: swanctl --list-sas --ike-id 1 --raw 2> /dev/null::rw.*version=2 state=ESTABLISHED local-host=192.168.0.1 local-port=4500 local-id=moon.strongswan.org remote-host=192.168.0.100 remote-port=4500 remote-id=carol@strongswan.org.*encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*rw.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.1.0.0/16] remote-ts=\[192.168.0.100/32]::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES moon::tcpdump::IP dave.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/sql/rw-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/sql/rw-rsa/hosts/carol/etc/strongswan.conf index 253ea7f8b..11ec915ce 100644 --- a/testing/tests/sql/rw-rsa/hosts/carol/etc/strongswan.conf +++ b/testing/tests/sql/rw-rsa/hosts/carol/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 pubkey gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 pubkey vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/sql/rw-rsa/hosts/dave/etc/strongswan.conf index 253ea7f8b..11ec915ce 100644 --- a/testing/tests/sql/rw-rsa/hosts/dave/etc/strongswan.conf +++ b/testing/tests/sql/rw-rsa/hosts/dave/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 pubkey gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 pubkey vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/rw-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/sql/rw-rsa/hosts/moon/etc/strongswan.conf index 253ea7f8b..11ec915ce 100644 --- a/testing/tests/sql/rw-rsa/hosts/moon/etc/strongswan.conf +++ b/testing/tests/sql/rw-rsa/hosts/moon/etc/strongswan.conf @@ -6,5 +6,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 pubkey gmp hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 pubkey vici kernel-netlink socket-default updown sqlite sql } diff --git a/testing/tests/sql/shunt-policies-nat-rw/evaltest.dat b/testing/tests/sql/shunt-policies-nat-rw/evaltest.dat index a4d0d0013..00913c360 100644 --- a/testing/tests/sql/shunt-policies-nat-rw/evaltest.dat +++ b/testing/tests/sql/shunt-policies-nat-rw/evaltest.dat @@ -4,10 +4,10 @@ venus::ping -c 1 PH_IP_BOB::64 bytes from PH_IP_BOB: icmp_.eq=1::YES venus::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_.eq=1::YES alice::swanctl --list-pols --raw 2> /dev/null::local-net.*mode=PASS local-ts=\[10.1.0.0/16] remote-ts=\[10.1.0.0/16]::YES venus::swanctl --list-pols --raw 2> /dev/null::local-net.*mode=PASS local-ts=\[10.1.0.0/16] remote-ts=\[10.1.0.0/16]::YES -alice::swanctl --list-sas --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=10.1.0.10 local-port=4500 local-id=alice@strongswan.org remote-host=192.168.0.2 remote-port=4500 remote-id=sun.strongswan.org initiator=yes.*nat-local=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.1] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[0.0.0.0/0]::YES -venus::swanctl --list-sas --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=10.1.0.20 local-port=4500 local-id=venus.strongswan.org remote-host=192.168.0.2 remote-port=4500 remote-id=sun.strongswan.org initiator=yes.*nat-local=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*local-vips=\[10.3.0.2] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[0.0.0.0/0]::YES -sun::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=4500 local-id=sun.strongswan.org remote-host=192.168.0.1.*remote-id=alice@strongswan.org.*nat-remote=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.1] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[0.0.0.0/0] remote-ts=\[10.3.0.1/32]::YES -sun::swanctl --list-sas --ike-id 2 --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=4500 local-id=sun.strongswan.org remote-host=192.168.0.1.*remote-id=venus.strongswan.org.*nat-remote=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=MODP_3072.*remote-vips=\[10.3.0.2] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[0.0.0.0/0] remote-ts=\[10.3.0.2/32]::YES +alice::swanctl --list-sas --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=10.1.0.10 local-port=4500 local-id=alice@strongswan.org remote-host=192.168.0.2 remote-port=4500 remote-id=sun.strongswan.org initiator=yes.*nat-local=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.1] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.1/32] remote-ts=\[0.0.0.0/0]::YES +venus::swanctl --list-sas --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=10.1.0.20 local-port=4500 local-id=venus.strongswan.org remote-host=192.168.0.2 remote-port=4500 remote-id=sun.strongswan.org initiator=yes.*nat-local=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*local-vips=\[10.3.0.2] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[10.3.0.2/32] remote-ts=\[0.0.0.0/0]::YES +sun::swanctl --list-sas --ike-id 1 --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=4500 local-id=sun.strongswan.org remote-host=192.168.0.1.*remote-id=alice@strongswan.org.*nat-remote=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.1] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[0.0.0.0/0] remote-ts=\[10.3.0.1/32]::YES +sun::swanctl --list-sas --ike-id 2 --raw 2> /dev/null::nat-t.*version=2 state=ESTABLISHED local-host=192.168.0.2 local-port=4500 local-id=sun.strongswan.org remote-host=192.168.0.1.*remote-id=venus.strongswan.org.*nat-remote=yes nat-any=yes encr-alg=AES_CBC encr-keysize=128 integ-alg=HMAC_SHA2_256_128 prf-alg=PRF_HMAC_SHA2_256 dh-group=ECP_256.*remote-vips=\[10.3.0.2] child-sas.*nat-t.*state=INSTALLED mode=TUNNEL protocol=ESP.*encr-alg=AES_GCM_16 encr-keysize=128.*local-ts=\[0.0.0.0/0] remote-ts=\[10.3.0.2/32]::YES moon::tcpdump::IP moon.strongswan.org.* > sun.strongswan.org.\(4500\|ipsec-nat-t\): UDP-encap: ESP::YES moon::tcpdump::IP sun.strongswan.org.\(4500\|ipsec-nat-t\) > moon.strongswan.org.*: UDP-encap: ESP::YES alice::tcpdump::IP alice.strongswan.org > venus.strongswan.org: ICMP::YES diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf b/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf index 55f9d6e4d..704287a35 100644 --- a/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf +++ b/testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf @@ -6,7 +6,7 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql keep_alive = 5 } diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf b/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf index 3c6ad13ce..893e27085 100644 --- a/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf +++ b/testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf @@ -9,5 +9,5 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql attr-sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql attr-sql } diff --git a/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf b/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf index 55f9d6e4d..704287a35 100644 --- a/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf +++ b/testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf @@ -6,7 +6,7 @@ charon { database = sqlite:///etc/db.d/ipsec.db } } - load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac kdf vici kernel-netlink socket-default updown sqlite sql + load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown sqlite sql keep_alive = 5 } From 11bb0a73b8d657183e88cce769967f61c0d7f2b9 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 21 Oct 2022 20:07:14 +0200 Subject: [PATCH 21/24] testing: Migrated tkm scenarios to new default plugins --- .../tkm/host2host-initiator/hosts/sun/etc/strongswan.conf | 4 ++-- .../tkm/host2host-responder/hosts/sun/etc/strongswan.conf | 4 ++-- .../tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf | 4 ++-- .../tkm/multiple-clients/hosts/carol/etc/strongswan.conf | 4 ++-- .../tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf | 4 ++-- .../tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf | 4 ++-- .../tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf | 4 ++-- 9 files changed, 18 insertions(+), 18 deletions(-) diff --git a/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf b/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf b/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } diff --git a/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf index f72df1077..674134484 100644 --- a/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 gmp x509 revocation random + load = pem pkcs1 openssl revocation random } charon-systemd { - load = aes sha1 sha2 pem pkcs1 gmp random nonce x509 curl revocation hmac kdf xcbc vici kernel-netlink socket-default updown + load = pem pkcs1 random nonce openssl curl revocation xcbc vici kernel-netlink socket-default updown } From 2e4c06251264129d82c27c1407afc67375bb10d7 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 21 Oct 2022 20:19:11 +0200 Subject: [PATCH 22/24] testing: Migrated tnc scenarios to new default plugins --- testing/tests/tnc/tnccs-11/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-11/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-11/hosts/moon/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-block/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-block/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-block/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-client-retry/hosts/carol/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-client-retry/hosts/dave/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-client-retry/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-ev-pt-tls/hosts/carol/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-ev-pt-tls/hosts/dave/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-fail-init/hosts/carol/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-fail-init/hosts/dave/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-fail-init/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-fail-resp/hosts/carol/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-fail-resp/hosts/moon/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-hcd-eap/hosts/carol/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-hcd-eap/hosts/dave/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-hcd-eap/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-mutual-eap-fail/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-mutual-eap-fail/hosts/sun/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-mutual-eap/hosts/moon/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-mutual-eap/hosts/sun/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-mutual-pt-tls/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-mutual-pt-tls/hosts/sun/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-os/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-os/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-os/hosts/moon/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-pdp-eap/hosts/carol/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-pdp-eap/hosts/dave/etc/strongswan.conf | 2 +- .../tests/tnc/tnccs-20-pdp-eap/hosts/moon/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-pdp-pt-tls/hosts/carol/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-pdp-pt-tls/hosts/dave/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-pts-no-ecc/hosts/carol/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-pts-no-ecc/hosts/dave/etc/strongswan.conf | 2 +- .../tnc/tnccs-20-pts-no-ecc/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-tls/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-tls/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-20/hosts/moon/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-dynamic/hosts/carol/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-dynamic/hosts/dave/etc/strongswan.conf | 2 +- testing/tests/tnc/tnccs-dynamic/hosts/moon/etc/strongswan.conf | 2 +- 49 files changed, 49 insertions(+), 49 deletions(-) diff --git a/testing/tests/tnc/tnccs-11/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-11/hosts/carol/etc/strongswan.conf index 3be831325..55fc9b326 100644 --- a/testing/tests/tnc/tnccs-11/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-11/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown multiple_authentication=no diff --git a/testing/tests/tnc/tnccs-11/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-11/hosts/dave/etc/strongswan.conf index de403ed94..902987f3d 100644 --- a/testing/tests/tnc/tnccs-11/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-11/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 mgf1 gmp hmac kdf pem pkcs1 x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown multiple_authentication=no diff --git a/testing/tests/tnc/tnccs-11/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-11/hosts/moon/etc/strongswan.conf index cd5b03cf1..397cd8e4a 100644 --- a/testing/tests/tnc/tnccs-11/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-11/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-11 tnc-imv updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-11 tnc-imv updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-block/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-block/hosts/carol/etc/strongswan.conf index 205db50ce..dab63d12a 100644 --- a/testing/tests/tnc/tnccs-20-block/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-block/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-block/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-block/hosts/dave/etc/strongswan.conf index 0f99b0c24..df0912c36 100644 --- a/testing/tests/tnc/tnccs-20-block/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-block/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication=no diff --git a/testing/tests/tnc/tnccs-20-block/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-block/hosts/moon/etc/strongswan.conf index 605eef49e..69b6e8542 100644 --- a/testing/tests/tnc/tnccs-20-block/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-block/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-20 tnc-imv updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-20 tnc-imv updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-client-retry/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-client-retry/hosts/carol/etc/strongswan.conf index abe1c7afe..121eff827 100644 --- a/testing/tests/tnc/tnccs-20-client-retry/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-client-retry/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-client-retry/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-client-retry/hosts/dave/etc/strongswan.conf index 018f0b460..addd6794c 100644 --- a/testing/tests/tnc/tnccs-20-client-retry/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-client-retry/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-client-retry/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-client-retry/hosts/moon/etc/strongswan.conf index 9f2c31c2e..22628567e 100644 --- a/testing/tests/tnc/tnccs-20-client-retry/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-client-retry/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-20 tnc-imv updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-20 tnc-imv updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/strongswan.conf index 51ae13e3d..69b25bd1f 100644 --- a/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce pem pkcs1 x509 openssl revocation constraints curl vici socket-default kernel-netlink tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite + load = random nonce openssl pem pkcs1 openssl revocation constraints curl vici socket-default kernel-netlink tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/carol/etc/strongswan.conf index 389a68a57..6808fc349 100644 --- a/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/carol/etc/strongswan.conf @@ -15,7 +15,7 @@ libimcv { } pt-tls-client { - load = revocation constraints pem openssl curl sqlite nonce tnc-tnccs tnc-imc tnccs-20 + load = revocation constraints pem openssl curl sqlite nonce openssl tnc-tnccs tnc-imc tnccs-20 } sw-collector { diff --git a/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/dave/etc/strongswan.conf index d91c3837f..ba5b5ca3d 100644 --- a/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-ev-pt-tls/hosts/dave/etc/strongswan.conf @@ -18,5 +18,5 @@ libtls { } pt-tls-client { - load = revocation constraints pem openssl curl nonce tnc-tnccs tnc-imc tnccs-20 + load = revocation constraints pem openssl curl nonce openssl tnc-tnccs tnc-imc tnccs-20 } diff --git a/testing/tests/tnc/tnccs-20-fail-init/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-fail-init/hosts/carol/etc/strongswan.conf index 4f8e9cca7..d65418658 100644 --- a/testing/tests/tnc/tnccs-20-fail-init/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-fail-init/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-fail-init/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-fail-init/hosts/dave/etc/strongswan.conf index bebe0c197..be1df5eaf 100644 --- a/testing/tests/tnc/tnccs-20-fail-init/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-fail-init/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-fail-init/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-fail-init/hosts/moon/etc/strongswan.conf index 22644cbd5..3a7c5b59f 100644 --- a/testing/tests/tnc/tnccs-20-fail-init/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-fail-init/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-fail-resp/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-fail-resp/hosts/carol/etc/strongswan.conf index 5777dfcd0..9f1f02f4c 100644 --- a/testing/tests/tnc/tnccs-20-fail-resp/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-fail-resp/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-fail-resp/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-fail-resp/hosts/moon/etc/strongswan.conf index 968e7d8f8..18d1da286 100644 --- a/testing/tests/tnc/tnccs-20-fail-resp/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-fail-resp/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/strongswan.conf index 73f3d5893..9cbe6ef8b 100644 --- a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici socket-default kernel-netlink eap-identity eap-ttls eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite + load = random nonce openssl pem pkcs1 revocation curl vici socket-default kernel-netlink eap-identity eap-ttls eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/carol/etc/strongswan.conf index 1d3b641b2..c7881f0a5 100644 --- a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/dave/etc/strongswan.conf index 1e59a6f44..e7a74355a 100644 --- a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/moon/etc/strongswan.conf index 812837070..6e598278c 100644 --- a/testing/tests/tnc/tnccs-20-hcd-eap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-hcd-eap/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-radius updown multiple_authentication=no plugins { diff --git a/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/moon/etc/strongswan.conf index a773b17be..2c8d75f55 100644 --- a/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/sun/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/sun/etc/strongswan.conf index 7e049dc02..edf9916e0 100644 --- a/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-mutual-eap-fail/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown multiple_authentication = no syslog { diff --git a/testing/tests/tnc/tnccs-20-mutual-eap/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-mutual-eap/hosts/moon/etc/strongswan.conf index a773b17be..2c8d75f55 100644 --- a/testing/tests/tnc/tnccs-20-mutual-eap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-mutual-eap/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-mutual-eap/hosts/sun/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-mutual-eap/hosts/sun/etc/strongswan.conf index 879a3cdac..914d51c7c 100644 --- a/testing/tests/tnc/tnccs-20-mutual-eap/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-mutual-eap/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown multiple_authentication = no syslog { diff --git a/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/moon/etc/strongswan.conf index f0291d5d5..279cd5be3 100644 --- a/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file pt-tls-client { - load = random nonce x509 openssl pem pkcs1 revocation curl tnc-tnccs tnc-imc tnc-imv tnccs-20 + load = random nonce openssl pem pkcs1 revocation curl tnc-tnccs tnc-imc tnc-imv tnccs-20 } libtls { diff --git a/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/sun/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/sun/etc/strongswan.conf index d7e33f52e..81ca684f7 100644 --- a/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/sun/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-mutual-pt-tls/hosts/sun/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default tnc-pdp tnc-tnccs tnc-imc tnc-imv tnccs-20 + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default tnc-pdp tnc-tnccs tnc-imc tnc-imv tnccs-20 syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-os/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-os/hosts/carol/etc/strongswan.conf index 6761ccf5c..2cef9d0df 100644 --- a/testing/tests/tnc/tnccs-20-os/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-os/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-os/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-os/hosts/dave/etc/strongswan.conf index 492be9f44..92207ce89 100644 --- a/testing/tests/tnc/tnccs-20-os/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-os/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-os/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-os/hosts/moon/etc/strongswan.conf index b4e9f45e8..52935ef86 100644 --- a/testing/tests/tnc/tnccs-20-os/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-os/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf index 2785da216..f936def8a 100644 --- a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici socket-default kernel-netlink eap-identity eap-ttls eap-md5 eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite + load = random nonce openssl pem pkcs1 revocation curl vici socket-default kernel-netlink eap-identity eap-ttls eap-md5 eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/carol/etc/strongswan.conf index 122b3861a..232f4e874 100644 --- a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/dave/etc/strongswan.conf index d2013e17d..29ed55d9c 100644 --- a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/moon/etc/strongswan.conf index 4a25e7885..c56990cb1 100644 --- a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-radius updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-radius updown multiple_authentication=no diff --git a/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/strongswan.conf index df8750c5a..0de1352a4 100644 --- a/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/alice/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce pem pkcs1 x509 openssl revocation constraints curl vici socket-default kernel-netlink tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite + load = random nonce openssl pem pkcs1 openssl revocation constraints curl vici socket-default kernel-netlink tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite syslog { daemon { diff --git a/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/carol/etc/strongswan.conf index c9bc663ff..b135dfbff 100644 --- a/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/carol/etc/strongswan.conf @@ -15,5 +15,5 @@ libimcv { } pt-tls-client { - load = revocation constraints pem openssl curl nonce tnc-tnccs tnc-imc tnccs-20 + load = revocation constraints pem openssl curl nonce openssl tnc-tnccs tnc-imc tnccs-20 } diff --git a/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/dave/etc/strongswan.conf index 408c35091..78888fcb3 100644 --- a/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pdp-pt-tls/hosts/dave/etc/strongswan.conf @@ -24,5 +24,5 @@ libtls { } pt-tls-client { - load = revocation constraints pem openssl curl nonce tnc-tnccs tnc-imc tnccs-20 + load = revocation constraints pem openssl curl nonce openssl tnc-tnccs tnc-imc tnccs-20 } diff --git a/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/carol/etc/strongswan.conf index ef3d78158..e09adbb40 100644 --- a/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 mgf1 gmp hmac gcm curve25519 kdf pem pkcs1 x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/dave/etc/strongswan.conf index 808adf1ab..2eecd3c27 100644 --- a/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 mgf1 gmp hmac kdf pem pkcs1 x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/moon/etc/strongswan.conf index 37ebb9cfc..0648eb613 100644 --- a/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-pts-no-ecc/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 mgf1 gmp hmac gcm curve25519 kdf pem pkcs1 x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-tls/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-tls/hosts/carol/etc/strongswan.conf index 67c5dbe2b..fa29bf8a7 100644 --- a/testing/tests/tnc/tnccs-20-tls/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-tls/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp curve25519 hmac gcm kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-tls/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-tls/hosts/dave/etc/strongswan.conf index 2b7575fb2..da54aabb9 100644 --- a/testing/tests/tnc/tnccs-20-tls/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-tls/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/strongswan.conf index 7c672295d..2b9b70d4f 100644 --- a/testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp curve25519 hmac gcm kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnccs-20 tnc-imv updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnccs-20 tnc-imv updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-20/hosts/carol/etc/strongswan.conf index d29c0f312..ba9ab5746 100644 --- a/testing/tests/tnc/tnccs-20/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-tnccs tnc-imc tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-20/hosts/dave/etc/strongswan.conf index efc45791a..3377109f7 100644 --- a/testing/tests/tnc/tnccs-20/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-20/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-20/hosts/moon/etc/strongswan.conf index 9de5ae294..c7ba09c23 100644 --- a/testing/tests/tnc/tnccs-20/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-20/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown multiple_authentication = no diff --git a/testing/tests/tnc/tnccs-dynamic/hosts/carol/etc/strongswan.conf b/testing/tests/tnc/tnccs-dynamic/hosts/carol/etc/strongswan.conf index 6bb47fc37..30ba4255e 100644 --- a/testing/tests/tnc/tnccs-dynamic/hosts/carol/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-dynamic/hosts/carol/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-11 updown multiple_authentication=no integrity_test = yes diff --git a/testing/tests/tnc/tnccs-dynamic/hosts/dave/etc/strongswan.conf b/testing/tests/tnc/tnccs-dynamic/hosts/dave/etc/strongswan.conf index 5fd2f730d..f618be634 100644 --- a/testing/tests/tnc/tnccs-dynamic/hosts/dave/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-dynamic/hosts/dave/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-md5 eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown multiple_authentication=no integrity_test = yes diff --git a/testing/tests/tnc/tnccs-dynamic/hosts/moon/etc/strongswan.conf b/testing/tests/tnc/tnccs-dynamic/hosts/moon/etc/strongswan.conf index ee0e25cca..b96b979da 100644 --- a/testing/tests/tnc/tnccs-dynamic/hosts/moon/etc/strongswan.conf +++ b/testing/tests/tnc/tnccs-dynamic/hosts/moon/etc/strongswan.conf @@ -1,7 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon-systemd { - load = random nonce aes sha1 sha2 md5 pem pkcs1 mgf1 gmp hmac gcm curve25519 kdf x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-dynamic tnccs-11 tnccs-20 tnc-imv updown + load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-tnccs tnccs-dynamic tnccs-11 tnccs-20 tnc-imv updown multiple_authentication=no integrity_test = yes From 558529afe266b2872e22976040afa3e6e931fbc6 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 21 Oct 2022 20:38:16 +0200 Subject: [PATCH 23/24] testing: Migrated wolfssl scenarios --- testing/tests/wolfssl/net2net-ed25519/description.txt | 4 ++-- .../wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf | 4 ++-- testing/tests/wolfssl/rw-cert/description.txt | 6 +++--- .../tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf | 4 ++-- testing/tests/wolfssl/rw-modp3072/description.txt | 6 +++--- .../wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf | 4 ++-- 6 files changed, 14 insertions(+), 14 deletions(-) diff --git a/testing/tests/wolfssl/net2net-ed25519/description.txt b/testing/tests/wolfssl/net2net-ed25519/description.txt index f50109769..58dbc6b33 100755 --- a/testing/tests/wolfssl/net2net-ed25519/description.txt +++ b/testing/tests/wolfssl/net2net-ed25519/description.txt @@ -1,8 +1,8 @@ A connection between the subnets behind the gateways moon and sun is set up. The authentication is based on X.509 certificates containing Ed25519 keys. moon uses the wolfssl plugin based on the wolfCrypt library for all -cryptographical functions whereas sun uses the default strongSwan -cryptographical plugins. +cryptographical functions whereas sun uses topenssl as the default +strongSwan cryptographical plugin.

Upon the successful establishment of the IPsec tunnel, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf b/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf index 24aa52cfb..f0c7480ca 100755 --- a/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf +++ b/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf @@ -1,9 +1,9 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = random pem sha1 pkcs1 pkcs8 curve25519 x509 revocation constraints + load = random pem pkcs1 openssl revocation constraints } charon-systemd { - load = random nonce aes sha1 sha2 hmac kdf pem pkcs1 pkcs8 x509 revocation curve25519 curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici } diff --git a/testing/tests/wolfssl/rw-cert/description.txt b/testing/tests/wolfssl/rw-cert/description.txt index 9006bcb51..3fffa7b6a 100755 --- a/testing/tests/wolfssl/rw-cert/description.txt +++ b/testing/tests/wolfssl/rw-cert/description.txt @@ -1,8 +1,8 @@ The roadwarrior carol and the gateway moon use the wolfssl plugin based on the wolfSSL library for all cryptographical functions whereas -roadwarrior dave uses the default strongSwan cryptographical -plugins. The authentication is based on X.509 certificates and the key exchange -on x25519. +roadwarrior dave uses openssl as the default strongSwan +cryptographical plugin. The authentication is based on X.509 certificates +and the key exchange on x25519.

Upon the successful establishment of the IPsec tunnels, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf index ba275349d..924fc90dc 100755 --- a/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf +++ b/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pkcs1 pem openssl x509 revocation constraints + load = pkcs1 pem openssl revocation constraints } charon-systemd { - load = random nonce sha1 sha2 sha3 aes curve25519 hmac kdf mgf1 pem pkcs1 x509 revocation constraints gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints curl kernel-netlink socket-default updown vici rsa_pss = yes } diff --git a/testing/tests/wolfssl/rw-modp3072/description.txt b/testing/tests/wolfssl/rw-modp3072/description.txt index a847d2652..de6d2ff69 100755 --- a/testing/tests/wolfssl/rw-modp3072/description.txt +++ b/testing/tests/wolfssl/rw-modp3072/description.txt @@ -1,8 +1,8 @@ The roadwarrior carol and the gateway moon use the wolfssl plugin based on the wolfCrypt library for all cryptographical functions whereas -roadwarrior dave uses the default strongSwan cryptographical -plugins. The authentication is based on X.509 certificates and the key exchange -on modp3072. +roadwarrior dave uses openssl as the default strongSwan +cryptographical plugin. The authentication is based on X.509 certificates +and the key exchange on modp3072.

Upon the successful establishment of the IPsec tunnels, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. diff --git a/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf b/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf index f9df83ca4..033ea6b29 100755 --- a/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf +++ b/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf @@ -1,11 +1,11 @@ # /etc/strongswan.conf - strongSwan configuration file swanctl { - load = pem pkcs1 x509 revocation constraints pubkey openssl random + load = pem pkcs1 revocation constraints pubkey openssl random } charon-systemd { - load = random nonce sha1 sha2 aes hmac kdf mgf1 pem pkcs1 x509 revocation constraints pubkey gmp curl kernel-netlink socket-default updown vici + load = random nonce openssl pem pkcs1 revocation constraints pubkey curl kernel-netlink socket-default updown vici rsa_pss = yes } From 6735c3d7caa70ed7b4d4c8ce7121915a7c48f3ff Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sat, 22 Oct 2022 11:29:33 +0200 Subject: [PATCH 24/24] Define new default plugins --- configure.ac | 32 +++++++++++++---------- scripts/test.sh | 6 +++++ testing/scripts/recipes/013_strongswan.mk | 13 ++++++--- 3 files changed, 34 insertions(+), 17 deletions(-) diff --git a/configure.ac b/configure.ac index 81906acfc..b91c3954e 100644 --- a/configure.ac +++ b/configure.ac @@ -132,7 +132,7 @@ AC_SUBST(ipsec_script_upper, [`echo -n "$ipsec_script" | tr a-z A-Z`]) m4_include(m4/macros/enable-disable.m4) # crypto plugins -ARG_DISBL_SET([aes], [disable AES software implementation plugin.]) +ARG_ENABL_SET([aes], [enable AES software implementation plugin.]) ARG_ENABL_SET([af-alg], [enable AF_ALG crypto interface to Linux Crypto API.]) ARG_ENABL_SET([blowfish], [enable Blowfish software implementation plugin.]) ARG_ENABL_SET([botan], [enables the Botan crypto plugin.]) @@ -140,29 +140,29 @@ ARG_ENABL_SET([ccm], [enables the CCM AEAD wrapper crypto plugin.]) ARG_ENABL_SET([chapoly], [enables the ChaCha20/Poly1305 AEAD plugin.]) ARG_DISBL_SET([cmac], [disable CMAC crypto implementation plugin.]) ARG_ENABL_SET([ctr], [enables the Counter Mode wrapper crypto plugin.]) -ARG_DISBL_SET([des], [disable DES/3DES software implementation plugin.]) +ARG_ENABL_SET([des], [enable DES/3DES software implementation plugin.]) ARG_DISBL_SET([drbg], [disable the NIST Deterministic Random Bit Generator plugin.]) -ARG_DISBL_SET([fips-prf], [disable FIPS PRF software implementation plugin.]) -ARG_DISBL_SET([gcm], [disable the GCM AEAD wrapper crypto plugin.]) +ARG_ENABL_SET([fips-prf], [enable FIPS PRF software implementation plugin.]) +ARG_ENABL_SET([gcm], [enable the GCM AEAD wrapper crypto plugin.]) ARG_ENABL_SET([gcrypt], [enables the libgcrypt plugin.]) -ARG_DISBL_SET([gmp], [disable GNU MP (libgmp) based crypto implementation plugin.]) -ARG_DISBL_SET([curve25519], [disable Curve25519 Diffie-Hellman plugin.]) -ARG_DISBL_SET([hmac], [disable HMAC crypto implementation plugin.]) +ARG_ENABL_SET([gmp], [enable GNU MP (libgmp) based crypto implementation plugin.]) +ARG_ENABL_SET([curve25519], [enable Curve25519 Diffie-Hellman plugin.]) +ARG_ENABL_SET([hmac], [enable HMAC crypto implementation plugin.]) ARG_DISBL_SET([kdf], [disable KDF (prf+) implementation plugin.]) ARG_ENABL_SET([md4], [enable MD4 software implementation plugin.]) -ARG_DISBL_SET([md5], [disable MD5 software implementation plugin.]) +ARG_ENABL_SET([md5], [enable MD5 software implementation plugin.]) ARG_ENABL_SET([mgf1], [enable the MGF1 software implementation plugin.]) ARG_ENABL_SET([ml], [enable Module-Lattice-based crypto (ML-KEM) plugin.]) ARG_DISBL_SET([nonce], [disable nonce generation plugin.]) -ARG_ENABL_SET([openssl], [enables the OpenSSL crypto plugin.]) +ARG_DISBL_SET([openssl], [disable the OpenSSL crypto plugin.]) ARG_ENABL_SET([wolfssl], [enables the wolfSSL crypto plugin.]) ARG_ENABL_SET([padlock], [enables VIA Padlock crypto plugin.]) ARG_DISBL_SET([random], [disable RNG implementation on top of /dev/(u)random.]) -ARG_DISBL_SET([rc2], [disable RC2 software implementation plugin.]) +ARG_ENABL_SET([rc2], [enable RC2 software implementation plugin.]) ARG_ENABL_SET([rdrand], [enable Intel RDRAND random generator plugin.]) ARG_ENABL_SET([aesni], [enable Intel AES-NI crypto plugin.]) -ARG_DISBL_SET([sha1], [disable SHA1 software implementation plugin.]) -ARG_DISBL_SET([sha2], [disable SHA256/SHA384/SHA512 software implementation plugin.]) +ARG_ENABL_SET([sha1], [enable SHA1 software implementation plugin.]) +ARG_ENABL_SET([sha2], [enable SHA256/SHA384/SHA512 software implementation plugin.]) ARG_ENABL_SET([sha3], [enable SHA3_224/SHA3_256/SHA3_384/SHA3_512 software implementation plugin.]) ARG_DISBL_SET([xcbc], [disable xcbc crypto implementation plugin.]) # encoding/decoding plugins @@ -172,7 +172,7 @@ ARG_DISBL_SET([pgp], [disable PGP key decoding plugin.]) ARG_DISBL_SET([pkcs1], [disable PKCS1 key decoding plugin.]) ARG_DISBL_SET([pkcs7], [disable PKCS7 container support plugin.]) ARG_DISBL_SET([pkcs8], [disable PKCS8 private key decoding plugin.]) -ARG_DISBL_SET([pkcs12], [disable PKCS12 container support plugin.]) +ARG_ENABL_SET([pkcs12], [enable PKCS12 container support plugin.]) ARG_DISBL_SET([pubkey], [disable RAW public key support plugin.]) ARG_DISBL_SET([sshkey], [disable SSH key decoding plugin.]) ARG_DISBL_SET([x509], [disable X509 certificate implementation plugin.]) @@ -235,7 +235,7 @@ ARG_DISBL_SET([socket-default], [disable default socket implementation for charo ARG_ENABL_SET([socket-dynamic], [enable dynamic socket implementation for charon]) ARG_ENABL_SET([socket-win], [enable Winsock2 based socket implementation for charon]) # configuration/control plugins -ARG_DISBL_SET([stroke], [disable charons stroke configuration backend.]) +ARG_ENABL_SET([stroke], [enable the stroke configuration backend.]) ARG_ENABL_SET([smp], [enable SMP configuration and control interface. Requires libxml.]) ARG_ENABL_SET([sql], [enable SQL database configuration backend.]) ARG_ENABL_SET([uci], [enable OpenWRT UCI configuration plugin.]) @@ -468,6 +468,10 @@ if test x$fips_prf = xtrue; then fi fi +if test x$pkcs12 = xtrue; then + rc2=true; +fi + if test x$swanctl = xtrue; then vici=true fi diff --git a/scripts/test.sh b/scripts/test.sh index 9125fb0c2..eac736205 100755 --- a/scripts/test.sh +++ b/scripts/test.sh @@ -214,6 +214,9 @@ case "$TEST" in default) # should be the default, but lets make sure CONFIG="--with-printf-hooks=glibc" + if system_uses_openssl3; then + prepare_system_openssl $1 + fi ;; openssl*) CONFIG="--disable-defaults --enable-pki --enable-openssl --enable-pem --enable-drbg" @@ -253,6 +256,9 @@ wolfssl) ;; printf-builtin) CONFIG="--with-printf-hooks=builtin" + if system_uses_openssl3; then + prepare_system_openssl $1 + fi ;; all|alpine|codeql|coverage|sonarcloud|no-dbg) if [ "$TEST" = "sonarcloud" ]; then diff --git a/testing/scripts/recipes/013_strongswan.mk b/testing/scripts/recipes/013_strongswan.mk index bae143e37..acc4ded81 100644 --- a/testing/scripts/recipes/013_strongswan.mk +++ b/testing/scripts/recipes/013_strongswan.mk @@ -64,7 +64,6 @@ CONFIG_OPTS = \ --enable-attr-sql \ --enable-mediation \ --enable-botan \ - --enable-openssl \ --enable-blowfish \ --enable-kernel-pfkey \ --enable-integrity-test \ @@ -82,14 +81,14 @@ CONFIG_OPTS = \ --enable-ctr \ --enable-ccm \ --enable-gcm \ - --enable-cmac \ + --enable-hmac \ --enable-chapoly \ --enable-ha \ --enable-af-alg \ --enable-whitelist \ --enable-xauth-generic \ --enable-xauth-eap \ - --enable-pkcs8 \ + --enable-pkcs12 \ --enable-unity \ --enable-unbound \ --enable-ipseckey \ @@ -98,9 +97,17 @@ CONFIG_OPTS = \ --enable-cmd \ --enable-libipsec \ --enable-kernel-libipsec \ + --enable-stroke \ --enable-tkm \ --enable-lookip \ + --enable-des \ + --enable-aes \ + --enable-md5 \ + --enable-sha1 \ + --enable-sha2 \ --enable-sha3 \ + --enable-gmp \ + --enable-curve25519 \ --enable-systemd \ --enable-counters \ --enable-save-keys \