denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20,067 Commits 1 Branch 0 Tags
main
Commit Graph
11 Commits
Author SHA1 Message Date
Tobias Brunner 3b58c67202 charon-tkm: Pass ia and ea ids according to configured proposal mappings 2026-07-31 16:10:36 +02:00
Tobias Brunner 5b0d506215 testing: Remove unused revocation and constraints plugins for swanctl 
swanctl doesn't do any (online) certificate validation, it just parses
and or decrypts them and passes them on to the daemon.
 2026-02-06 11:21:34 +01:00
Tobias Brunner 7e310e3425 testing: Make timing for TKM rekey scenarios a bit more stable 
In particular for the first one randomization could trigger an additional
rekeying, which let the "Adding ESA ..." check fail.  But even without
randomization (could be seen in the second scenario that already uses
`rand_time=0`) 4 seconds can apparently be too low some time.
 2024-11-25 11:44:04 +01:00
Andreas Steffen 11bb0a73b8 testing: Migrated tkm scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Stefan BerghoferandTobias Brunner 7975a0cfa4 charon-tkm: Adapt to interface changes to support multiple key exchanges 
Also includes ESA flags.

Co-authored-by: Tobias Brunner <[email protected]>
 2024-09-19 14:39:13 +02:00
Tobias Brunner 3a52fc83f8 testing: Load kdf plugin in all scenarios that require it 
Once we use plugin-provided prf+() these won't work otherwise.
 2022-04-14 19:02:48 +02:00
Tobias Brunner 16fcdb460a charon-tkm: Don't use starter/stroke with charon-tkm anymore 
For the tests, the unused init script that was used before switching to
charon-systemd is repurposed to manage the daemon.
 2021-01-11 15:28:01 +01:00
Adrian-Ken Rueegsegger d6cf4a165b testing: Add CA ID mappings to TKM tests 
Extend the build-certs-chroot script is to fill in the public key
fingerprint of the CA certificate in the appropriate strongswan.con
files.
 2021-01-08 17:22:36 +01:00
Andreas Steffen cfeae14b06 testing: Deleting dynamic test keys and certificates 2019-05-08 14:56:48 +02:00
Tobias Brunner 772957778c charon-tkm: Call esa_reset() when the inbound SA is deleted 
After a rekeying the outbound SA and policy is deleted immediately, however,
the inbound SA is not removed until a few seconds later, so delayed packets
can still be processed.

This adds a flag to get_esa_id() that specifies the location of the
given SPI.
 2017-08-07 10:46:00 +02:00
Reto Buerki 65566c37ca testing: Add tkm xfrmproxy-expire test 
This test asserts that the handling of XFRM expire messages from the
kernel are handled correctly by the xfrm-proxy and the Esa Event Service
(EES) in charon-tkm.
 2015-02-20 13:34:54 +01:00