chore(test): подтвердить ECDSA IPsec и итоговую очистку стенда

This commit is contained in:
Denozordec committed 2026-10-11 03:31:34 +07:00
1 parent 63ee8a4549
commit 3b908a9e4e
7 files changed
+316 -11

No files matched your search

@@ -0,0 +1,235 @@
{
"date": "2026-10-11",
"block": "12.5.131",
"runtime": {
"backend": "ux-crl127",
"frontend": "ux-ike124"
},
"native": {
"date": "2026-10-11",
"block": "12.5.131",
"name": "mm-ipsec131-1791663939546",
"linux": [
{
"index": 0,
"vip": "198.18.131.249",
"initiated": true,
"ping3of3": true
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true,
"/ip/pool": true,
"/interface/bridge": true,
"/ipv6/address": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true,
"/ip/pool": true,
"/interface/bridge": true,
"/ipv6/address": true
}
],
"clientImage": "sha256:c9d01c801de88b2349f685c1cb631e67a8b1c697439a00148d4045c23a584054",
"native": [
{
".id": "*1",
"id": "CN=mm-ipsec131-1791663939546-client",
"state": "established",
"dynamic-address": "198.18.131.249",
"remote-address": "161.104.46.222",
"uptime": "2s"
}
],
"catalog": {
"name": "mm-ipsec131-1791663939546",
"online": true,
"activeAddress": "198.18.131.249",
"activeSince": "2s"
},
"summary": {
"clientsTotal": 1,
"clientsOnline": 1
},
"clientKey": {
"type": "ec",
"curve": "prime256v1"
},
"applicationExport": {
"status": 200,
"archiveReceived": true,
"persisted": false
},
"dockerCleanup": true,
"credentialFilesRemoved": true
},
"finalInventory": {
"checks": [
{
"serverId": 1,
"collections": {
"/system/logging/action": {
"owned": 0
},
"/system/logging": {
"owned": 0
},
"/ip/ipsec/identity": {
"owned": 0
},
"/ip/ipsec/peer": {
"owned": 0
},
"/ip/ipsec/policy": {
"owned": 0
},
"/ip/ipsec/policy/group": {
"owned": 0
},
"/ip/ipsec/mode-config": {
"owned": 0
},
"/ip/ipsec/proposal": {
"owned": 0
},
"/ip/ipsec/profile": {
"owned": 0
},
"/certificate": {
"owned": 0
},
"/file": {
"owned": 0
},
"/ip/address": {
"owned": 0
},
"/ip/route": {
"owned": 0
},
"/ip/firewall/nat": {
"owned": 0
},
"/ip/pool": {
"owned": 0
},
"/interface/bridge": {
"owned": 0
},
"/ipv6/address": {
"owned": 0
},
"/certificate/crl": {
"owned": 0
}
},
"crlSettingsRestored": true,
"established": 0
},
{
"serverId": 2,
"collections": {
"/system/logging/action": {
"owned": 0
},
"/system/logging": {
"owned": 0
},
"/ip/ipsec/identity": {
"owned": 0
},
"/ip/ipsec/peer": {
"owned": 0
},
"/ip/ipsec/policy": {
"owned": 0
},
"/ip/ipsec/policy/group": {
"owned": 0
},
"/ip/ipsec/mode-config": {
"owned": 0
},
"/ip/ipsec/proposal": {
"owned": 0
},
"/ip/ipsec/profile": {
"owned": 0
},
"/certificate": {
"owned": 0
},
"/file": {
"owned": 0
},
"/ip/address": {
"owned": 0
},
"/ip/route": {
"owned": 0
},
"/ip/firewall/nat": {
"owned": 0
},
"/ip/pool": {
"owned": 0
},
"/interface/bridge": {
"owned": 0
},
"/ipv6/address": {
"owned": 0
},
"/certificate/crl": {
"owned": 0
}
},
"crlSettingsRestored": true,
"established": 0
}
],
"privateDirectories": []
},
"dockerAcceptanceContainersAndNetworks": 0,
"application": {
"backendHealthy": true,
"postgresHealthy": true,
"frontendRunning": true,
"frontendHttpUiVerified124": true
},
"bounds": [
"Own all-ECDSA P-256 chain, one Linux strongSwan client, one WAN/NAT",
"Public EC key type/curve confirmed; IKE/Ping3of3/API catalog and certificate export200 observed",
"Encrypted export archive/passphrase only in memory/private fixture, not persisted to evidence",
"Final18 collections per CHR checked for own120–131 residues; default/public/metadata/195 route and flash directory preserved",
"No max throughput/rekey scale/other OS/custom/intermediate PKI/full CRL distribution acceptance",
"Diagnostic GET buffer query still has mixed historical messages; POST print query needs separate validation"
]
}