Tobias Brunner
3a4372c1eb
testing: Disable predictable network interface names assigned by systemd/udev
2018-10-30 15:06:33 +01:00
Tobias Brunner
3fbeeef908
testing: Remove unused custom OIDs from openssl.cnf files
...
ClientAuthentication is known in OpenSSL 1.1 and the redefinition, therefore,
causes an error. These two OIDs are not used anyway in these config
files.
2018-10-30 15:03:34 +01:00
Andreas Steffen
e660f4579b
testing: Fixed evaluation in swanctl/rw-cert-pss scenario
2018-10-27 08:47:57 +02:00
Andreas Steffen
f5565683b9
Version bump to 5.7.2dr1
2018-10-26 18:47:48 +02:00
Andreas Steffen
534ab34df6
testing: Added botan/net2net-ed25519 scenario
2018-10-26 18:46:59 +02:00
Andreas Steffen
04ef28b4df
Version bump to 5.7.1
2018-10-01 17:46:17 +02:00
Andreas Steffen
2a327d438c
Version bump to 5.7.0
2018-09-24 11:10:12 +02:00
Andreas Steffen
1dd382b888
Version bump to 5.7.0rc2
2018-09-18 16:03:23 +02:00
Andreas Steffen
11b4a87050
Version bump to 5.7.0rc1
2018-09-16 09:30:18 +02:00
Andreas Steffen
9a4b47ef96
testing: Extended Botan scenarios
2018-09-16 09:30:18 +02:00
Andreas Steffen
72a6831e7c
testing: Added botan/rw-cert scenario
2018-09-12 16:25:00 +02:00
Tobias Brunner
a5c682e87d
testing: Enable Botan and the plugin
...
ldconfig is required, otherwise the library won't be found by
strongSwan in the same session.
Should later be changed to 2.8.0 or a newer stable release.
2018-09-12 16:25:00 +02:00
Tobias Brunner
d1c5e6816d
testing: Add some PPK scenarios
2018-09-10 18:04:23 +02:00
Andreas Steffen
a019c95b72
Version bump to 5.7.0dr8
2018-08-02 07:30:05 +02:00
Andreas Steffen
041efa6ed3
Version bump to 5.7.0dr6
2018-07-21 09:30:53 +02:00
Andreas Steffen
9a7a962348
Version bump to 5.7.0dr5
2018-07-19 14:57:18 +02:00
Tobias Brunner
75214fabd8
testing: Optionally build/install strongSwan only on a specific guest
...
This may be used to test different strongSwan versions against each
other.
2018-07-11 18:38:09 +02:00
Tobias Brunner
47ec761674
testing: Fix checks after changing fragmentation log messages
2018-07-09 17:15:07 +02:00
Tobias Brunner
df411bfa30
testing: The dhcp plugin uses the DHCP client port again by default
...
This reverts parts of commit becf027cd9707b70725a
2018-07-05 18:14:54 +02:00
Tobias Brunner
1ecac75f37
testing: Fix IKE proposal in swanctl/net2net-gw scenario
...
Also simplify config by using references.
2018-06-28 18:46:42 +02:00
Tobias Brunner
2ad1df9571
Replace 'inacceptable' with the more common 'unacceptable'
2018-06-28 18:46:42 +02:00
Tobias Brunner
80c9ae4521
testing: Add wrapper for systemctl to collect leaks from charon-systemd
...
Similar to the wrapper around `service` added with 71d59af58a
2018-06-28 16:45:54 +02:00
Andreas Steffen
5b91e8c03c
Version bump to 5.7.0dr4
2018-06-22 11:21:02 +02:00
Andreas Steffen
424de401b4
testing: Added swanctl/rw-ed25519-certpol scenario
2018-06-22 10:39:40 +02:00
Andreas Steffen
711e0bdbe4
Version bumpt to 5.7.0dr3
2018-06-14 17:07:59 +02:00
Tobias Brunner
5cfd7311d0
testing: Print command output if test fails
...
This is quite helpful to debug why a pattern didn't match.
As it could produce quite a lot of output if something is not found in a
log file, the complete output is only printed in verbose mode, otherwise,
`head` is used to print the first 10 lines of output.
We only get stdout from SSH, so the stderr redirection is only really
for errors ssh itself produces.
2018-06-14 09:29:26 +02:00
Andreas Steffen
60719e39bf
testing: Fixed evaltest of tnc/tnccs-20-pdp-pt-tls scenario
2018-06-13 17:57:10 +02:00
Andreas Steffen
78584d7efc
Version bump to 5.7.0dr2
2018-06-13 17:07:58 +02:00
Andreas Steffen
295493f46f
testing: Renewed ECDSA certificates
2018-06-13 17:07:25 +02:00
Andreas Steffen
ce4b8f65d6
testing: Removed TCG SWID IMC/IMV scenarios
2018-06-12 21:47:39 +02:00
Andreas Steffen
a31f9b7691
libimcv: Removed TCG SWID IMC/IMV support
2018-06-12 21:47:39 +02:00
Andreas Steffen
3a8a9c7029
Version bump to 5.7.0dr1
2018-05-30 23:02:57 +02:00
Andreas Steffen
b2ab0995c1
Version bump to 5.6.3
2018-05-28 15:38:58 +02:00
Andreas Steffen
88205674e5
Version bump to 5.6.3rc1
2018-05-23 22:36:39 +02:00
Tobias Brunner
89bd016ef4
Fixed some typos, courtesy of codespell
2018-05-23 16:33:02 +02:00
Andreas Steffen
26b45beda9
Version bump to 5.6.3dr2
2018-05-22 21:58:32 +02:00
Tobias Brunner
9746c308ff
testing: Add ikev2/multi-level-ca-skipped scenario
2018-05-22 09:50:47 +02:00
Tobias Brunner
7b660944b6
dhcp: Only send client identifier if identity_lease is enabled
...
The client identifier serves as unique identifier just like a unique MAC
address would, so even with identity_leases disabled some DHCP servers
might assign unique leases per identity.
2018-05-18 18:04:01 +02:00
Tobias Brunner
becf027cd9
dhcp: Bind server port when a specific server address is specified
...
DHCP servers will respond to port 67 if giaddr is non-zero, which we set
if we are not broadcasting. While such messages are received fine via
RAW socket the kernel will respond with an ICMP port unreachable if no
socket is bound to that port. Instead of opening a dummy socket on port
67 just to avoid the ICMPs we can also just operate with a single
socket, bind it to port 67 and send our requests from that port.
Since SO_REUSEADDR behaves on Linux like SO_REUSEPORT does on other
systems we can bind that port even if a DHCP server is running on the
same host as the daemon (this might have to be adapted to make this work
on other systems, but due to the raw socket the plugin is not that portable
anyway).
2018-05-18 18:04:01 +02:00
Andreas Steffen
69ee158e2a
Version bump to 5.6.3dr1
2018-04-19 16:34:06 +02:00
Andreas Steffen
51d5b35f51
testing: Fixed ikev2/alg-chacha20poly1305 scenario
2018-04-19 16:33:04 +02:00
Matt Selsky
c8f45e4573
testing: Fix typo in sysctl.conf file
...
Closes strongswan/strongswan#97 .
2018-04-03 09:55:05 +02:00
Tobias Brunner
dc2dfedda9
testing: Use HA patch compatible with 4.15.6+
2018-03-08 10:07:33 +01:00
Tobias Brunner
39e860ea34
testing: Use a HA patch that's actually compatible with 4.15 kernels
2018-03-07 17:16:54 +01:00
Tobias Brunner
0f785f6be8
testing: Revert typo fix in FreeRADIUS patch
...
Fixes: 2db6d5b8b3Fixes #2582 .
2018-03-07 16:39:37 +01:00
Andreas Steffen
68c00bc839
Version bump to 5.6.2
2018-02-19 12:59:37 +01:00
Andreas Steffen
0bb4d2179d
Version bump to 5.6.2rc1
2018-02-16 13:37:00 +01:00
Andreas Steffen
22157b8163
testing: Enable counters and save-keys plugins
2018-02-16 13:36:44 +01:00
Tobias Brunner
2db6d5b8b3
Fixed some typos, courtesy of codespell
2018-02-13 12:19:54 +01:00
Tobias Brunner
ad14f2084e
testing: Add ikev2/mobike-virtual-ip-nat scenario
...
This tests moving from a public IP behind a NAT and back (with proper
changes of the UDP encapsulation).
2018-02-09 11:21:02 +01:00
Tobias Brunner