testing: Negotiate TLS 1.3 for part of the EAP-TLS scenarios

2023-03-02 09:02:38 +01:00
parent d605584a7a
commit edd3c797b0
42 changed files with 114 additions and 42 deletions
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon-systemd {
-  load = random nonce aes sha1 sha2 md5 mgf1 gmp hmac kdf pem pkcs1 x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite
+  load = random nonce aes sha1 sha2 md5 mgf1 gmp hmac gcm curve25519 kdf pem pkcs1 x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite

  multiple_authentication = no

@@ -23,7 +23,8 @@ charon-systemd {
 }

 libtls {
-  suites = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
+  version_max = 1.3
+  suites = TLS_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
 }

 libimcv {