Tobias Brunner
5a09734c2c
The change in c423d0e8a1 ("testing: Fix race in tnc/tnccs-20-pdp-pt-tls
scenario") is not really ideal as now the vici plugin might not yet be
ready when `swanctl --load-creds` is called. Perhaps starting charon
before Apache causes enough delay.
Once we switch to charon-systemd this isn't a problem anymore as starting the
unit will block until everything is up and ready. Also, the individual
swanctl calls will be redundant as the default service unit calls --load-all.
But start scripts do run before charon-systemd signals that the daemon is
ready, so using these would work too then.
26 lines
1.2 KiB
Plaintext
26 lines
1.2 KiB
Plaintext
alice::iptables-restore < /etc/iptables.rules
|
|
carol::iptables-restore < /etc/iptables.rules
|
|
dave::iptables-restore < /etc/iptables.rules
|
|
alice::cat /etc/tnc_config
|
|
carol::cat /etc/tnc_config
|
|
carol::echo 0 > /proc/sys/net/ipv4/ip_forward
|
|
dave::echo aabbccddeeff11223344556677889900 > /var/lib/dbus/machine-id
|
|
dave::cat /etc/tnc_config
|
|
alice::sed -i "s/NOW/`date +%s`/g" /etc/pts/data1.sql
|
|
alice::sed -i "s:DEBIAN_VERSION:\`cat /etc/debian_version\`:" /etc/pts/data1.sql
|
|
alice::cd /usr/local/share/strongswan/templates/database/imv; cat tables.sql data.sql /etc/pts/data1.sql | sqlite3 /etc/db.d/config.db
|
|
alice::chgrp -R www-data /etc/db.d/config.db; chmod -R g+w /etc/db.d/config.db
|
|
alice::/var/www/tnc/manage.py setpassword strongSwan strongSwan
|
|
alice::rm /etc/swanctl/x509/aliceCert.pem
|
|
alice::rm /etc/swanctl/rsa/aliceKey.pem
|
|
alice::service charon start
|
|
alice::service apache2 start
|
|
alice::swanctl --load-creds
|
|
winnetou::ip route add 10.1.0.0/16 via 192.168.0.1
|
|
dave::ip route add 10.1.0.0/16 via 192.168.0.1
|
|
dave::cat /etc/pts/options
|
|
dave::ipsec pt-tls-client --optionsfrom /etc/pts/options
|
|
carol::ip route add 10.1.0.0/16 via 192.168.0.1
|
|
carol::cat /etc/pts/options
|
|
carol::ipsec pt-tls-client --optionsfrom /etc/pts/options
|