denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use DNs in tnc/tnccs-20-tls scenario

Browse Source
This commit is contained in:
Andreas Steffen committed 2013-03-03 10:47:17 +01:00
1 parent c9418d4fd3
commit 81419b9748
4 files changed
+3 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

testing/tests/tnc/tnccs-20-tls/evaltest.dat
+2 -2
View File
@@ -7,9 +7,9 @@ dave:: cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::
dave:: cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES dave:: cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
dave:: cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES dave:: cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.16/28::YES
moon:: cat /var/log/daemon.log::added group membership 'allow'::YES moon:: cat /var/log/daemon.log::added group membership 'allow'::YES
moon:: cat /var/log/daemon.log::authentication of 'carol@strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org' with EAP successful::YES
moon:: cat /var/log/daemon.log::added group membership 'isolate'::YES moon:: cat /var/log/daemon.log::added group membership 'isolate'::YES
moon:: cat /var/log/daemon.log::authentication of 'dave@strongswan.org' with EAP successful::YES moon:: cat /var/log/daemon.log::authentication of 'C=CH, O=Linux strongSwan, OU=Accounting, CN=dave@strongswan.org' with EAP successful::YES
moon:: ipsec statusall 2> /dev/null::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES moon:: ipsec statusall 2> /dev/null::rw-allow.*10.1.0.0/28 === 192.168.0.100/32::YES
moon:: ipsec statusall 2> /dev/null::rw-isolate.*10.1.0.16/28 === 192.168.0.200/32::YES moon:: ipsec statusall 2> /dev/null::rw-isolate.*10.1.0.16/28 === 192.168.0.200/32::YES
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES
testing/tests/tnc/tnccs-20-tls/hosts/carol/etc/ipsec.conf
-1
View File
@@ -13,7 +13,6 @@ conn %default
conn home conn home
left=PH_IP_CAROL left=PH_IP_CAROL
leftcert=carolCert.pem leftcert=carolCert.pem
leftid=carol@strongswan.org
leftauth=eap leftauth=eap
leftfirewall=yes leftfirewall=yes
right=PH_IP_MOON right=PH_IP_MOON
testing/tests/tnc/tnccs-20-tls/hosts/dave/etc/ipsec.conf
-1
View File
@@ -13,7 +13,6 @@ conn %default
conn home conn home
left=PH_IP_DAVE left=PH_IP_DAVE
leftcert=daveCert.pem leftcert=daveCert.pem
leftid=dave@strongswan.org
leftauth=eap leftauth=eap
leftfirewall=yes leftfirewall=yes
right=PH_IP_MOON right=PH_IP_MOON
testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/ipsec.conf
+1 -1
View File
@@ -29,6 +29,6 @@ conn rw-eap
leftauth=eap-ttls leftauth=eap-ttls
leftfirewall=yes leftfirewall=yes
rightauth=eap-ttls rightauth=eap-ttls
rightid=*@strongswan.org rightid="C=CH, O=Linux strongSwan, OU=*, CN=*"
rightsendcert=never rightsendcert=never
right=%any right=%any