Martin Willi
2b0f34a2ef
testing: Don't check for exact IKEv1 fragment size
...
Similar to 7a9c0d51
2015-03-10 10:21:16 +01:00
Tobias Brunner
8b2af616ac
testing: Update modified updown scripts to the latest template
...
This avoids confusion and makes identifying the changes needed for each
scenario easier.
2015-03-06 16:51:50 +01:00
Martin Willi
050556bf59
testing: Be a little more flexible in testing for established CHILD_SA modes
...
As we now print the reqid parameter in the CHILD_SA details, adapt the grep
to still match the CHILD_SA mode and protocol.
2015-02-20 13:34:58 +01:00
Andreas Steffen
9b01a061ec
Increased check size du to INITIAL_CONTACT notify
2014-11-29 14:57:41 +01:00
Tobias Brunner
144b40e07c
testing: Update ikev1/net2net-fragmentation scenario
2014-10-10 09:32:42 +02:00
Tobias Brunner
2c7ad260f9
testing: Update carols certificate in several test cases
2014-10-03 12:44:13 +02:00
Martin Willi
44b6a34d43
configure: Load fetcher plugins after crypto base plugins
...
Some fetcher plugins (such as curl) might build upon OpenSSL to implement
HTTPS fetching. As we set (and can't unset) threading callbacks in our
openssl plugin, we must ensure that OpenSSL functions don't get called after
openssl plugin unloading.
We achieve that by loading curl and all other fetcher plugins after the base
crypto plugins, including openssl.
2014-09-24 17:34:54 +02:00
Tobias Brunner
7a61bf9032
testing: Run 'conntrack -F' before all test scenarios
...
This prevents failures due to remaining conntrack entries.
2014-04-02 11:55:05 +02:00
Andreas Steffen
c683b389ba
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
Andreas Steffen
f2a3a01134
strongswan.conf is not needed on RADIUS server alice
2014-03-15 14:07:33 +01:00
Tobias Brunner
96e8715e32
testing: Use installed SQL schema instead of local copy
2014-02-12 14:08:34 +01:00
Andreas Steffen
f0ffb9f9af
Fixed description of ikev1/rw-ntru-psk scenario
2014-02-12 13:21:46 +01:00
Andreas Steffen
83caf0827c
Added ikev1/net2net-ntru-cert and ikev1/rw-ntru-psk scenarios
2014-02-12 13:16:34 +01:00
Martin Willi
fa7815538f
testing: Add an IKEv1 host2host AH transport mode test case
2013-10-11 10:15:22 +02:00
Martin Willi
ef4560121d
testing: Add an IKEv1 net2net AH test case
2013-10-11 10:15:22 +02:00
Andreas Steffen
97346f2a7e
Added ikev1/config-payload-push scenario
2013-09-07 08:23:58 +02:00
Martin Willi
2cfe88aacb
testing: enforce xauth-eap in ikev1/xauth-rsa-eap-md5-radius
...
As eap-radius now provides its own XAuth backend and eap-radius is loaded before
xauth-eap, we have to enforce the exact XAuth backend to use.
2013-07-29 10:35:59 +02:00
Martin Willi
9d75f04eee
testing: add a testcase for plain XAuth RADIUS authentication
2013-07-29 09:00:49 +02:00
Andreas Steffen
654c88bca8
Added charon.initiator_only option which causes charon to ignore IKE initiation requests by peers
2013-04-14 19:57:49 +02:00
Andreas Steffen
5374fe3a09
added ikev1/net2net-fragmentation scenario
2013-02-12 23:01:48 +01:00
Tobias Brunner
b1169a880a
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
Tobias Brunner
7699a928f7
Renamed $UMLHOSTS to $VIRTHOSTS
2013-01-17 16:56:02 +01:00
Reto Buerki
530f7b8421
No need to enable ip_forward in pretest files
...
It is enabled by default now.
2013-01-17 16:55:03 +01:00
Andreas Steffen
ac09da8e50
added ikev1/nat-virtual-ip scenario
2013-01-17 16:55:00 +01:00
Andreas Steffen
ca0128588f
converted all ikev1 iptables scenarios
2013-01-17 16:55:00 +01:00
Reto Buerki
533177003c
Adapt test configurations
...
Adapt test configurations to the new Debian-based system.
2013-01-17 15:22:07 +01:00
Andreas Steffen
04bb739578
do not enable integrity and crypto tests in ikev1/rw-cert-unity scenario
2012-09-21 21:26:52 +02:00
Martin Willi
995a9c8a0a
Add a simple test case for the unity plugin, featuring both includes and excludes
2012-09-18 17:20:47 +02:00
Andreas Steffen
979027ae04
ikev1 hybrid authentication does not need client certificates
2012-09-12 12:42:24 +02:00
Andreas Steffen
d401bcfe97
adapted ip-pool evaltests
2012-09-10 15:41:27 +02:00
Andreas Steffen
1e5634c9b3
remove virtual IP for moon's inner interface
2012-06-29 23:20:32 +02:00
Andreas Steffen
1c959e4479
added ikev1/virtual-ip scenario
2012-06-28 14:52:07 +02:00
Andreas Steffen
5a86589d0c
corrected description of ikev1/ip-pool-db scenario
2012-06-28 14:44:10 +02:00
Andreas Steffen
5c0d1bccb0
corrected description of ikev1/ip-pool scenario
2012-06-28 14:42:34 +02:00
Andreas Steffen
788e512d58
added ikev1/ip-pool scenario
2012-06-28 14:37:04 +02:00
Andreas Steffen
f39a2f275e
merged xauth-id-rsa and xauth-rsa-config scenarios
2012-06-28 14:23:47 +02:00
Andreas Steffen
8cad9ed42c
charon automatically removes virtual interfaces
2012-06-28 09:30:24 +02:00
Andreas Steffen
bc60bb8bf4
added ikev1/xauth-id-rsa-hybrid scenario
2012-06-18 22:51:50 +02:00
Andreas Steffen
771a66c6a0
added ikev1/xauth-id-rsa-aggressive scenario
2012-06-18 22:30:26 +02:00
Andreas Steffen
8b8f5c6141
rsasig is not recognized as authentication method
2012-06-18 22:03:36 +02:00
Andreas Steffen
49d18a8e06
enable potentially unsafe aggressive mode
2012-06-18 21:34:48 +02:00
Andreas Steffen
7a892288fb
change ikev1/xauth scenarios to modern notation
2012-06-18 21:22:01 +02:00
Andreas Steffen
daa857029f
removed plutostart parameter
2012-06-13 21:19:05 +02:00
Andreas Steffen
47f8ae7cfd
added ikev1/dynamic scenarios using allow-any
2012-06-08 22:54:12 +02:00
Andreas Steffen
b253008544
upgraded ikev1/compress to 5.0.0
2012-05-24 17:36:27 +02:00
Andreas Steffen
fa50a89c95
added ikev1/xauth-rsa-eap-md5-radius scenario
2012-05-24 09:26:00 +02:00
Andreas Steffen
148b643880
upgraded ikev1 scenarios to 5.0.0
2012-05-23 14:45:15 +02:00
Andreas Steffen
448fc5091f
updated strong certificates
2011-10-17 18:04:12 +02:00
Tobias Brunner
92032fd4d6
Fixed sleep command in two test cases.
2011-07-21 16:34:37 +02:00
Andreas Steffen
b24ffda989
fixed sleep command in ikev1/esp-ah-tunnel scenario
2011-06-03 07:05:43 +02:00
Martin Willi