Tobias Brunner
1454bd7bcf
testing: Make per-CPU SAs scenarios more predictable by pinning IRQs to vCPUs
...
This ensures that packets on sun are processed on a particular CPU and
not randomly on one, which causes expected SAs not to get created or
other weird things.
2025-12-03 11:42:54 +01:00
Tobias Brunner
4c54550352
testing: Use alternative approach for retransmits in ikev1/dpd-restart scenario
...
With a long delay, the retransmit might not get sent before further tests
are evaluated on faster machines, while more retransmits should still allow
the scenario to succeed on slower ones.
2025-07-11 14:15:40 +02:00
Tobias Brunner
f88d824114
Fixed some typos, courtesy of codespell
2025-07-08 10:54:49 +02:00
Andreas Steffen
bd65a21ce0
Version bump to 6.0.2rc1
2025-07-07 18:25:37 +02:00
Tobias Brunner
9a6aa2530e
testing: Make sure ML-KEM scenarios use our ml plugin
...
We now support OpenSSL's implementation in the openssl plugin. This
makes sure our plugin is used on at least one of the hosts if we ever
switch to an OpenSSL version that supports ML-KEM.
In the ikev2/rw-mlkem scenario the logic is reversed. There the ml plugin
is preferred on moon to test the responder side (and carol for the
initiator) and dave will switch to OpenSSL if it ever provides ML-KEM.
2025-06-20 10:37:24 +02:00
Tobias Brunner
dc4fef146a
testing: Add ikev2/net2net-iptfs scenario
2025-05-28 16:37:47 +02:00
Tobias Brunner
b7d3349000
testing: Add ikev2/per-cpu-sas-encap-transport scenario
...
Tests transport mode and UDP encapsulation with random source ports.
Interestingly, the responder always uses the same SA to respond (maybe
due to the cache on the policy).
2025-05-28 16:35:27 +02:00
Tobias Brunner
3b2f8cf282
testing: Add ikev2/per-cpu-sas-encap scenario
...
Basically the same as the one without UDP encapsulation, but here the
outbound SAs use random source ports.
2025-05-28 16:35:27 +02:00
Tobias Brunner
bf34484d24
testing: Add per-CPU SA test scenario
2025-05-28 16:35:27 +02:00
Tobias Brunner
8cb5918b0c
testing: Add ikev2/net2net-route-narrow scenario
2025-05-28 16:01:00 +02:00
Tobias Brunner
4249d721ec
testing: Add rw-eap-id-switch scenario
2025-04-14 12:18:24 +02:00
Tobias Brunner
d7eb3ed92e
testing: Make ocsp.cgi in ikev2-multi-ca/ocsp-signers scenario executable
2025-04-07 14:54:48 +02:00
Andreas Steffen
5a74d796a8
testing: Adapted ha/active-passive tests
2025-03-10 19:18:40 +01:00
Jean-François Hren
fd6ac87fc3
testing: Add ha/active-passive-multi-ke scenario
2025-02-28 16:02:41 +01:00
Andreas Steffen
24a9c32a43
testing: Include ML-KEM crypto tests rw-cert scenario
2024-12-06 14:39:20 +01:00
Tobias Brunner
17bc5166d4
Fixed some typos, courtesy of codespell
2024-11-25 12:06:54 +01:00
Tobias Brunner
7e310e3425
testing: Make timing for TKM rekey scenarios a bit more stable
...
In particular for the first one randomization could trigger an additional
rekeying, which let the "Adding ESA ..." check fail. But even without
randomization (could be seen in the second scenario that already uses
`rand_time=0`) 4 seconds can apparently be too low some time.
2024-11-25 11:44:04 +01:00
Andreas Steffen
2c18e87b25
testing: Added ML-KEM test cases
2024-11-23 16:53:02 +01:00
Andreas Steffen
def312d200
testing: Fixed typos
2024-11-23 15:06:37 +01:00
Andreas Steffen
558529afe2
testing: Migrated wolfssl scenarios
2024-11-22 14:14:53 +01:00
Andreas Steffen
2e4c062512
testing: Migrated tnc scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
11bb0a73b8
testing: Migrated tkm scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
89acb24bd7
testing: Migrated sql scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
b891da52b4
testing: Migrated route-based scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
8fc6340c05
testing: Migrated pfkey scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
93b6162d74
testing: Migrated p2pnat scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
bd93dfb09b
testing: Migrated libipsec scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
0cf08b45dd
testing: Migrated ha scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
dc69cf2f65
testing: Migrated gcrypt-ikev2 scenarios
2024-11-22 14:14:53 +01:00
Andreas Steffen
b9e5764b75
testing: Migrated botan scenarios
2024-11-22 14:14:53 +01:00
Andreas Steffen
17e0f20f57
testing: Migrated af-alg scenarios
2024-11-22 14:14:53 +01:00
Andreas Steffen
fdc9e69523
testing: Migrated ike scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
6ae40ac581
testing: Migrated ikev1-stroke to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
950d4fe7a0
testing: Migrated ikev2-stroke scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
2dbcb15338
testing: Migrated ipv6-stroke scenarios to new default plugins
2024-11-22 14:14:53 +01:00
Andreas Steffen
38bacea63b
testing: Migrated ipv6 scenarios to new default plugins
2024-11-22 14:14:52 +01:00
Andreas Steffen
e7166c342b
testing: Distributed openssl-ikev1 scenarios
2024-11-22 14:14:52 +01:00
Andreas Steffen
c9883d612b
testing: Migrated ikev1-algs scenarios to new default plugins
2024-11-22 14:14:52 +01:00
Andreas Steffen
8060541f53
testing: Migrated ikev1 scenarios to new default plugins
2024-11-22 14:14:52 +01:00
Andreas Steffen
4df94b56c0
testing: Distributed openssl-ikev2 scenarios
2024-11-22 14:14:52 +01:00
Andreas Steffen
f766a7ed49
testing: Migrated ikev2-algs scenarios to new default plugins
2024-11-22 14:14:52 +01:00
Andreas Steffen
2099a52618
testing: Migrated ikev2 scenarios to new default plugins
2024-11-22 14:14:52 +01:00
Andreas Steffen
1265d78cac
ntru: Remove legacy NTRU key exchange method
2024-11-22 14:05:36 +01:00
Andreas Steffen
8e3a373e18
newhope: Remove legacy Newhope key exchange method
2024-11-22 14:05:36 +01:00
Andreas Steffen
4833f29b15
bliss: Remove legacy BLISS signatures
2024-11-22 14:05:36 +01:00
Tobias Brunner
d14bb3881b
botan: Add support for ML-KEM
2024-11-22 14:03:17 +01:00
Tobias Brunner
1bb6f1dd73
wolfssl: Add support for ML-KEM
2024-11-22 14:03:17 +01:00
Tobias Brunner
2b1885b892
testing: Add TKM scenarios with multiple key exchanges
2024-09-19 14:39:13 +02:00
Stefan Berghofer and Tobias Brunner
7975a0cfa4
charon-tkm: Adapt to interface changes to support multiple key exchanges
...
Also includes ESA flags.
Co-authored-by: Tobias Brunner <tobias@strongswan.org >
2024-09-19 14:39:13 +02:00
Tobias Brunner
f3c7e5227c
testing: Add ikev2/rw-cert-multi-ke scenario
2024-08-07 16:20:19 +02:00
Tobias Brunner