Commit Graph
228 Commits
Author SHA1 Message Date
Andreas Steffen 4ccfc879b5 Updated URL to swidGenerator in recipe 2014-07-09 15:08:18 +02:00
Andreas Steffen cda2a1e4dc Updated strongTNC configuration 2014-06-11 18:12:34 +02:00
Tobias Brunner acdcb91e07 testing: Cache packages downloaded with pip for strongTNC
This way no network connections is required to rebuild the root/guest images.
2014-06-02 17:45:42 +02:00
Andreas Steffen 2382d45b1c Test SWID REST API ins tnc/tnccs-20-pdp scenarios 2014-05-31 21:25:46 +02:00
Andreas Steffen 8c40609f96 Use python-based swidGenerator to generated SWID tags 2014-04-15 09:21:06 +02:00
Martin Willi c602ee65dc testing: build strongSwan with acert plugin 2014-03-31 11:14:59 +02:00
Andreas Steffen a334ac80ae Added ikev2/lookip scenario 2014-02-17 12:04:21 +01:00
Martin Willi 0c5dfb741f testing: Fetch the FreeRADIUS tarball from the "old" directory
Fixes #483.
2014-01-31 17:51:45 +01:00
Andreas Steffen fde42c15fd Starting with 3.1.7 kernel.org replaced bz2 with xz format 2014-01-15 02:14:08 +01:00
Reto Buerki ea4f71c2c3 testing: Fix status output in build-baseimage script 2013-12-04 10:42:03 +01:00
Reto Buerki 8416ebb628 charon-tkm: Update integration tests 2013-12-04 10:41:54 +01:00
Andreas Steffen 146ad86be5 Prototype implementation of IKE key exchange via NTRU encryption 2013-11-27 20:21:40 +01:00
Andreas Steffen 252c04d3f9 Adapted recipe and patches to freeradius-2.2.1 2013-10-22 10:09:24 +02:00
Tobias Brunner 99a89ea7f4 testing: Enable dnscert plugin 2013-10-11 15:45:42 +02:00
Andreas Steffen b38d9d5a54 Implemented SWID prototype IMC/IMV pair 2013-08-15 23:34:23 +02:00
Andreas Steffen 2ea32e7964 Enable libipsec and charon-cmd in strongSwan recipe 2013-07-01 12:32:45 +02:00
Tobias Brunner e74bca9e19 testing: Don't run tests when building tkm
The problem with XML/Ada described in 9c2aba27 actually occurs when
running the tests here.

Really fixes #336.
2013-05-07 10:19:37 +02:00
Tobias Brunner 9c2aba2735 testing: Don't run tests when building tkm-rpc
There are issues with some versions of the XML/Ada library on i386,
blocking the build of the testing environment when these tests are run.
TKM tests won't work in such a case but at least make-testing does not
block with this patch.

Fixes #336.
2013-05-06 18:17:58 +02:00
Andreas Steffen b97dd59ba8 install FIPS-aware OpenSSL Debian packages 2013-04-19 18:36:38 +02:00
Andreas Steffen 70312e6596 build openssl-fips in KVM root-image 2013-04-19 18:34:35 +02:00
Andreas Steffen ef934caba8 build soup plugin in KVM test environment 2013-04-15 20:23:41 +02:00
Andreas Steffen 8dade2d146 fixed configure options 2013-04-04 21:09:07 +02:00
Andreas Steffen 2a4915e87a cleaned up XML code in tnccs-11 plugin 2013-04-04 17:12:07 +02:00
Andreas Steffen fec7c824b8 fix start of wpa_supplicant 2013-03-31 19:48:07 +02:00
Martin Willi c59f3dcb68 Use new strongSwan HA kernel patchset keeping iptables ABI
Allows us to install stock debian iptables without the need for patching and
compiling our own.
2013-03-26 10:31:29 +01:00
Martin Willi b5f3c1f785 Define SSHCONF from strongswan testing directory, not TESTDIR
This fixes the use of SSHCONF in the ssh wrapper script before ./do-tests
had a chance to create the required symlinks.
2013-03-26 10:31:29 +01:00
Martin Willi 0ba8842348 Lazy unmount guest filesystem after building image, as it still might be busy 2013-03-26 10:31:29 +01:00
Reto Buerki f7fea72e46 Recipes: Disable Anet unit tests
Some Anet unit tests may fail because of the network configuration on
the testing host. These failures do not indicate a problem in Anet but
are a result of unpredictable events.
2013-03-25 16:49:30 +01:00
Andreas Steffen 7e20062fdf Added hostapd package to base image 2013-03-22 23:53:39 +01:00
Reto Buerki 3db17b0ccc Fixed TKM build 2013-03-22 10:35:48 +01:00
Andreas Steffen 2c80ab3def Build TNC-enabled wpa_supplicant 2013-03-22 10:33:39 +01:00
Reto Buerki f10f7fe261 Provide script to build Ada XFRM proxy 2013-03-19 15:23:50 +01:00
Reto Buerki 0e1d008d71 Add /usr/local/lib/ipsec to linker cache 2013-03-19 15:23:50 +01:00
Reto Buerki b491ee4ecd Provide recipes to build tkm and required libraries 2013-03-19 15:23:50 +01:00
Reto Buerki 3fc766d61e Add GNAT compiler and Ada libs to base image 2013-03-19 15:23:50 +01:00
Tobias Brunner d62f043f01 testing: Add screen package to base image
Makes working in a single SSH session easier.
2013-03-05 17:40:13 +01:00
Andreas Steffen 37c589f0e0 Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org, and root zones 2013-02-19 12:25:01 +01:00
Andreas Steffen 3fbc328d14 Build unbound and ipseckey plugins on KVM image 2013-02-19 12:25:01 +01:00
Reto Buerki 2c4954ad24 Switch to 'mapped' access mode for hostfs
Passthrough mode only works as expected when running as root. On
Debian/Ubuntu systems qemu runs as user 'libvirt-qemu' and group 'kvm'
so all shared files must be chowned to grant access from guests.

Symlinks created on the host are still problematic because the Plan 9
filesystem has no direct notion of symbolic links, see [1].

[1] - http://ericvh.github.com/9p-rfc/rfc9p2000.u.html
2013-01-17 16:55:04 +01:00
Reto Buerki 677795c3e7 Make guest ACPI shutdown work 2013-01-17 16:55:03 +01:00
Andreas Steffen 7deb8bd905 Added less package to Debian base image 2013-01-17 16:54:59 +01:00
Reto Buerki aafc0a1799 Make test scripts callable from any path 2013-01-17 16:54:58 +01:00
Reto Buerki 0593b6c975 Export compile directory to guests
Use 9p over virtio to share files on the host with the guest domains.
The files are accessible in the guests /hostfs directory.
2013-01-17 16:54:58 +01:00
Reto Buerki 48ea1d8b0b Create all images in $BUILDDIR/images 2013-01-17 16:54:58 +01:00
Reto Buerki 482d3ec9ff Also restore 'default' host configuration 2013-01-17 16:54:58 +01:00
Reto Buerki 23382d2e00 Directly use STRONGSWANHOSTS in build-guestimages
Drop support for building guests specified on the command line; creating
all images unconditionally is very fast now thanks to qcow2.
2013-01-17 16:54:57 +01:00
Tobias Brunner 16cd6f63e2 Don't refer to recipes and images via $TESTDIR
This way no symlink to the testing directory is required in $TESTDIR.
2013-01-17 16:54:57 +01:00
Reto Buerki 63178a8830 Add ethtool to debootstrap package includes 2013-01-17 16:54:56 +01:00
Tobias Brunner ac8c96e51b Patch iptables for use with HA kernel patch (XFRM hooks) 2013-01-17 16:54:56 +01:00
Reto Buerki cbe031d755 Make root image a clone of the base image 2013-01-17 16:54:56 +01:00