medsrv/medcli: Remove prototypical medsrv web application and plugins

This was from a student project that has never been developed further.
And similar to the manager web application it lacks all sorts of modern
standards.  So just remove it and the two plugins it relied on.

The test scenario is renamed to avoid confusion (neither of the two
p2pnat scenarios uses medsrv/medcli).
This commit is contained in:
Tobias Brunner committed 2026-07-24 14:45:27 +02:00
1 parent 96b0011d30
commit ac690f1a5e
62 files changed
+19 -3568

No files matched your search

@@ -0,0 +1,24 @@
*filter
# default policy is DROP
-P INPUT DROP
-P OUTPUT DROP
-P FORWARD DROP
# allow IKE
-A INPUT -i eth0 -p udp --dport 500 -j ACCEPT
-A OUTPUT -o eth0 -p udp --sport 500 -j ACCEPT
# allow MobIKE
-A INPUT -i eth0 -p udp --dport 4500 -j ACCEPT
-A OUTPUT -o eth0 -p udp --sport 4500 -j ACCEPT
# allow ssh
-A INPUT -p tcp --dport 22 -j ACCEPT
-A OUTPUT -p tcp --sport 22 -j ACCEPT
# allow crl fetch from winnetou
-A INPUT -i eth0 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT
-A OUTPUT -o eth0 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT
COMMIT
@@ -0,0 +1,5 @@
# /etc/strongswan.conf - strongSwan configuration file
charon {
load = random nonce openssl pem pkcs1 curl revocation vici kernel-netlink socket-default updown
}
@@ -0,0 +1,57 @@
connections {
medsrv {
remote_addrs = 192.168.0.100
local {
auth = psk
id = av9oEPMz@medsrv.org
}
remote {
auth = pubkey
id = carol@strongswan.org
}
children {
medserv {
start_action = start
}
}
version = 2
mobike = no
mediation = yes
proposals = aes128-sha256-x25519
}
peer {
local {
auth = pubkey
certs = bobCert.pem
id = bob@strongswan.org
}
remote {
auth = pubkey
id = alice@strongswan.org
}
children {
peer {
remote_ts = 10.1.0.10
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128gcm128-x25519
}
}
version = 2
mobike = no
mediated_by = medsrv
mediation_peer = 6cu1UTVw@medsrv.org
proposals = aes128-sha256-x25519
}
}
secrets {
ike-medsrv {
id = av9oEPMz@medsrv.org
secret = 0sZVm3FLOiweS1ywUDpR/L9FvpwNYp9svt
}
}