denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Speed up OCSP scenarios

Browse Source 
Don't make clients wait for the TCP connections to timeout by dropping
packets.  By rejecting them the OCSP requests fail immediately.
This commit is contained in:
Tobias Brunner committed 2015-11-09 15:18:35 +01:00
1 parent 0ee4a333a8
commit bb66b4d56b
3 files changed
+4 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat
+1 -1
View File
@@ -1,4 +1,4 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
moon::ipsec start
carol::ipsec start
carol::expect-connection home
testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat
+2 -2
View File
@@ -1,5 +1,5 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
moon::ipsec start
carol::ipsec start
carol::expect-connection home
testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat
+1 -1
View File
@@ -1,4 +1,4 @@
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
moon::ipsec start
carol::ipsec start
carol::expect-connection home