Tobias Brunner
7e310e3425
In particular for the first one randomization could trigger an additional rekeying, which let the "Adding ESA ..." check fail. But even without randomization (could be seen in the second scenario that already uses `rand_time=0`) 4 seconds can apparently be too low some time.
15 lines
722 B
Plaintext
15 lines
722 B
Plaintext
sun::systemctl start strongswan
|
|
moon::rm /etc/swanctl/rsa/*
|
|
moon::tkm_cfgtool -c /etc/tkm/tkm.conf -i /etc/swanctl/swanctl.conf -t /etc/tkm/tkm.bin -s /usr/local/share/tkm/tkmconfig.xsd
|
|
moon::cat /etc/swanctl/swanctl.conf
|
|
# disable randomization to avoid issues with our low rekey time
|
|
moon::sed -i '/rekey_time=./arand_time=0' /etc/swanctl/swanctl.conf
|
|
moon::tkm_keymanager -c /etc/tkm/tkm.bin -k /etc/tkm/moonKey.der -r /etc/tkm/strongswanCert.der:1 >/tmp/tkm.log 2>&1 &
|
|
moon::expect-file /tmp/tkm.rpc.ike
|
|
moon::service charon-tkm start
|
|
moon::expect-file /tmp/tkm.rpc.ees
|
|
moon::xfrm_proxy >/tmp/xfrm_proxy.log 2>&1 &
|
|
moon::expect-connection conn1
|
|
sun::expect-connection host-host
|
|
moon::ping -c 3 -W 1 -i 0.2 192.168.0.2
|