denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,209 Commits 1 Branch 0 Tags
36cf74f5d92cc0d1da0bfeebb32a759bc149e9ae
Commit Graph
1962 Commits
Author SHA1 Message Date
Tobias Brunner 96c7692661 wolfssl: Implement prf+ via wolfSSL's HKDF implementation 2022-04-14 19:02:56 +02:00
Tobias Brunner cb8f924051 botan: Implement prf+ via Botan's HKDF implementation 2022-04-14 19:02:56 +02:00
Tobias Brunner 3a52fc83f8 testing: Load kdf plugin in all scenarios that require it 
Once we use plugin-provided prf+() these won't work otherwise.
 2022-04-14 19:02:48 +02:00
Tobias Brunner 6910347d1a testing: Add DSCP scenario that uses simple labels 
Instead of creating two IKE_SAs with different identities, this scenario
uses simple labels to select the correct child config.
 2022-04-14 18:42:01 +02:00
Tobias Brunner 994d9d37d4 testing: Copy comments to test log 2022-04-14 18:42:01 +02:00
Tobias Brunner c8045f86a3 testing: Increase memory on winnetou even more 2022-03-01 10:10:37 +01:00
Tobias Brunner e69438450f Use wolfSSL 5.2.0 for tests 2022-02-22 09:35:01 +01:00
Tobias Brunner b47e9919f5 testing: Print the actual start time of a command for do-tests -t 
Because the command line, together with the results, is printed after
executing it, there could have been weird delays between commands.
 2022-02-09 18:58:08 +01:00
Tobias Brunner 1bb05006d3 Use Botan 2.19.1 for tests 2022-01-24 17:30:33 +01:00
Andreas Steffen 57d6e96943 Version bump to 5.9.5 2022-01-24 12:01:10 +01:00
Andreas Steffen 1321fdb8aa Version bump to 5.9.5rc1 2022-01-16 07:48:12 +01:00
Andreas Steffen 85d626e9ae testing: Modified ikev2/net2net-rfc3779 scenario 2022-01-10 21:14:11 +01:00
Tobias Brunner cd0c9919d9 Use wolfSSL 5.1.1 for tests 
Add --tags when fetching commits so we get tags that are not in any
branches, which is currently the case with this tag.
 2022-01-04 15:47:16 +01:00
Andreas Steffen 36c64589d8 Version bump to 5.9.5dr4 2021-12-31 14:46:31 +01:00
Andreas Steffen 903c68e069 sw-collector: Iterate through history logs 
The logrotate function causes the apt history to be split into
several parts at arbitrary points in time. If history.log only
is parsed then some package installation changes stored in
zipped backup history files might get lost.

Thus sw-collector now searches all backup history files until
a date older than the current event stored in the collector.db
database is found, so that no entries get overlooked.
 2021-12-31 14:33:22 +01:00
Andreas Steffen dadcd9060e Version bump to 5.9.5dr3 2021-12-11 16:39:34 +01:00
Andreas Steffen 54d7e39d40 wolfssl: Support of AES-CFB encryption 2021-12-06 12:53:11 +01:00
Tobias Brunner e9ba195910 github: Run charon-tkm tests 
Use a Debian-based Docker container to run the unit tests for charon-tkm,
once without and once with TKM running.  The container can also be used
locally to run the tests (see comments in the Dockerfile).
 2021-11-29 15:30:43 +01:00
Tobias Brunner 43927e60a7 Revert "testing: Don't run tests when building tkm" 
This reverts commit e74bca9e19.
 2021-11-29 15:06:57 +01:00
Tobias Brunner 6b9c8a674f Revert "testing: Don't run tests when building tkm-rpc" 
Let's try that again on current systems.

This reverts commit 9c2aba2735.
 2021-11-29 15:06:57 +01:00
Tobias Brunner deb288ddc1 testing: Increase memory of winnetou 
Looks like named requires a lot more memory than previously so that
Apache seems to struggle serving the test results sometimes.
 2021-11-19 15:27:58 +01:00
Andreas Steffen 4124b1d376 Version bump to 5.9.5dr2 2021-11-18 22:06:09 +01:00
Tobias Brunner d1278ed926 Use wolfSSL 5.0.0 for tests 2021-11-02 09:41:25 +01:00
Tobias Brunner e19eb070fa Use Botan 2.18.2 for tests 2021-10-29 09:07:38 +02:00
Andreas Steffen bcbf1862d7 Version bump to 5.9.5dr1 2021-10-26 08:04:19 +02:00
Andreas Steffen f0935a63ed testing: Optimized plugin use in pkcs8 scenarios 2021-10-23 11:44:15 +02:00
Andreas Steffen 9c7288d6f1 testing: Minimum required plugins for net2net-pkcs12 scenarios 2021-10-22 11:39:20 +02:00
Tobias Brunner 8c48de739d testing: Use AES and SHA-256 to protect PKCS#12 files 
The -aes128 option is used when encrypting private keys read from a
PKCS#12 file, not when generating such a file.
 2021-10-18 14:27:14 +02:00
Andreas Steffen 66fa7c959a Version bump to 5.9.4 2021-10-18 11:45:53 +02:00
Andreas Steffen 8cc89b505e testing: Correctly remove pkcs8 key after test case 2021-10-18 11:45:31 +02:00
Andreas Steffen 1ecb0b8133 Version bump to 5.9.4rc1 2021-10-12 08:54:03 +02:00
Andreas Steffen 740038e401 Version bump to 5.9.4dr3 2021-10-04 15:47:05 +02:00
Tobias Brunner 3edf3856d4 testing: Use Debian bullseye as base image 2021-10-01 15:05:44 +02:00
Tobias Brunner bc51815839 testing: Determine Debian version in TNC scenarios automatically again 
Was statically set to 10 since f3d96b7bc9 ("Version bump to 5.9.1dr1").
 2021-10-01 15:05:44 +02:00
Tobias Brunner 1ec01f10a2 testing: Replace arp with ip neigh 
The net-tools package, which provides arp and other older utilities like
ifconfig, is not installed anymore on Debian bullseye.
 2021-10-01 15:05:44 +02:00
Tobias Brunner ccac9c3047 testing: Allow DNS via TCP in net2net-dnscert scenario 
New versions of Bind limit the maximum UDP message size to 1232 bytes,
which is the same that newer versions of libunbound propose as maximum via
EDNS in requests, so increasing the limit on the server wouldn't help.

Instead we allow DNS via TCP so the client can switch after receiving the
truncated UDP response.
 2021-10-01 15:05:44 +02:00
Tobias Brunner 5b9c46b988 testing: Remove support for Debian jessie and FreeRADIUS 2 2021-10-01 15:05:44 +02:00
Tobias Brunner dff5a0cab8 testing: Support build with Debian bullseye base image 2021-10-01 15:05:44 +02:00
Andreas Steffen 1b21a00fa7 Version bump to 5.9.4dr2 2021-09-21 14:18:16 +02:00
Tobias Brunner 6467f0416f testing: Fix updown script in route-based/net2net-xfrmi-ike scenario 
With the update to Python 3 the encoding of the values in vici messages
changed to bytestrings (the keys are properly decoded).  And getting the
first CHILD_SA also needs a change.

The logger is now also initialized after daemonizing to avoid that opened
sockets are closed etc.
 2021-09-21 12:50:12 +02:00
Andreas Steffen 3e2841572b testing: Switch to Python 3 
Both swidGenerator and strongTNC were migrated to Python 3.
This allows to migrate all testing scripts to Python 3, too.
 2021-09-21 09:47:43 +02:00
Tobias Brunner 23e46ea5ab ikev2: Only request reauth during IKE_AUTH if active reauth is not possible 
If we can initiate the reauthentication ourselves, there is no reason to
explicitly request the peer to do so (at basically the same time).
 2021-08-24 14:31:55 +02:00
Andreas Steffen 0eb1d6c0e6 Version bump to 5.9.4dr1 2021-08-22 10:55:37 +02:00
Tobias Brunner e6a904de69 testing: Fix build of tkm and tkm-rpc 2021-08-17 19:20:45 +02:00
Tobias Brunner 4ae9b482f2 Ignore android-* tags when using git describe 2021-07-14 10:31:52 +02:00
Tobias Brunner 2f9114bce1 Use wolfSSL 4.8.0 for tests 2021-07-13 10:19:56 +02:00
Andreas Steffen 4817d5ed0d Version bump to 5.9.3 2021-07-06 14:00:39 +02:00
Tobias Brunner 2cd5314de7 testing: Use specific versions of swidGenerator and strongTNC 
This way we get updated versions automatically (referencing "master"
required manually deleting the downloaded archives and the unpacked
directories).  It also allows switching versions when working in different
branches (note that REV can also be set to a commit ID, e.g. to test
changes before tagging them later and merging the branch).
 2021-06-30 16:17:39 +02:00
Tobias Brunner f6aafb3005 Fixed some typos, courtesy of codespell 
Main change is the conversion from the British cancelling/-ed to the
American canceling/-ed.
 2021-06-25 11:32:29 +02:00
Andreas Steffen 30fab57124 Version bump to 5.9.3rc1 2021-06-24 09:18:54 +02:00