denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
19,211 Commits 1 Branch 0 Tags
4de6bb3febde640c155db05a6ececdbd21a48e63
Commit Graph
2100 Commits
Author SHA1 Message Date
Andreas Steffen 4de6bb3feb Version bump to 6.0.0rc2 2024-11-26 08:21:20 +01:00
Tobias Brunner 17bc5166d4 Fixed some typos, courtesy of codespell 2024-11-25 12:06:54 +01:00
Tobias Brunner 7e310e3425 testing: Make timing for TKM rekey scenarios a bit more stable 
In particular for the first one randomization could trigger an additional
rekeying, which let the "Adding ESA ..." check fail.  But even without
randomization (could be seen in the second scenario that already uses
`rand_time=0`) 4 seconds can apparently be too low some time.
 2024-11-25 11:44:04 +01:00
Andreas Steffen af28aac85f Version bump to 6.0.0rc1 2024-11-25 11:11:17 +01:00
Andreas Steffen 2c18e87b25 testing: Added ML-KEM test cases 2024-11-23 16:53:02 +01:00
Andreas Steffen def312d200 testing: Fixed typos 2024-11-23 15:06:37 +01:00
Andreas Steffen 6735c3d7ca Define new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 558529afe2 testing: Migrated wolfssl scenarios 2024-11-22 14:14:53 +01:00
Andreas Steffen 2e4c062512 testing: Migrated tnc scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 11bb0a73b8 testing: Migrated tkm scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 89acb24bd7 testing: Migrated sql scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen b891da52b4 testing: Migrated route-based scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 8fc6340c05 testing: Migrated pfkey scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 93b6162d74 testing: Migrated p2pnat scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen bd93dfb09b testing: Migrated libipsec scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 0cf08b45dd testing: Migrated ha scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen dc69cf2f65 testing: Migrated gcrypt-ikev2 scenarios 2024-11-22 14:14:53 +01:00
Andreas Steffen b9e5764b75 testing: Migrated botan scenarios 2024-11-22 14:14:53 +01:00
Andreas Steffen 17e0f20f57 testing: Migrated af-alg scenarios 2024-11-22 14:14:53 +01:00
Andreas Steffen fdc9e69523 testing: Migrated ike scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 6ae40ac581 testing: Migrated ikev1-stroke to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 950d4fe7a0 testing: Migrated ikev2-stroke scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 2dbcb15338 testing: Migrated ipv6-stroke scenarios to new default plugins 2024-11-22 14:14:53 +01:00
Andreas Steffen 38bacea63b testing: Migrated ipv6 scenarios to new default plugins 2024-11-22 14:14:52 +01:00
Andreas Steffen e7166c342b testing: Distributed openssl-ikev1 scenarios 2024-11-22 14:14:52 +01:00
Andreas Steffen c9883d612b testing: Migrated ikev1-algs scenarios to new default plugins 2024-11-22 14:14:52 +01:00
Andreas Steffen 8060541f53 testing: Migrated ikev1 scenarios to new default plugins 2024-11-22 14:14:52 +01:00
Andreas Steffen 4df94b56c0 testing: Distributed openssl-ikev2 scenarios 2024-11-22 14:14:52 +01:00
Andreas Steffen f766a7ed49 testing: Migrated ikev2-algs scenarios to new default plugins 2024-11-22 14:14:52 +01:00
Andreas Steffen 2099a52618 testing: Migrated ikev2 scenarios to new default plugins 2024-11-22 14:14:52 +01:00
Andreas Steffen 1265d78cac ntru: Remove legacy NTRU key exchange method 2024-11-22 14:05:36 +01:00
Andreas Steffen 8e3a373e18 newhope: Remove legacy Newhope key exchange method 2024-11-22 14:05:36 +01:00
Andreas Steffen 4833f29b15 bliss: Remove legacy BLISS signatures 2024-11-22 14:05:36 +01:00
Tobias Brunner d14bb3881b botan: Add support for ML-KEM 2024-11-22 14:03:17 +01:00
Tobias Brunner 974f9c37df Use Botan 3.6.1 for tests 
With 3.6.0 support for ML-KEM was added.
 2024-11-22 14:03:17 +01:00
Tobias Brunner 1bb6f1dd73 wolfssl: Add support for ML-KEM 2024-11-22 14:03:17 +01:00
Tobias Brunner 307dea6b5f Use wolfSSL 5.7.4 for tests 
This adds support for ML-KEM etc.
 2024-11-22 14:03:17 +01:00
Tobias Brunner 2b1885b892 testing: Add TKM scenarios with multiple key exchanges 2024-09-19 14:39:13 +02:00
Stefan BerghoferandTobias Brunner 7975a0cfa4 charon-tkm: Adapt to interface changes to support multiple key exchanges 
Also includes ESA flags.

Co-authored-by: Tobias Brunner <tobias@strongswan.org>
 2024-09-19 14:39:13 +02:00
Tobias Brunner f3c7e5227c testing: Add ikev2/rw-cert-multi-ke scenario 2024-08-07 16:20:19 +02:00
Tobias Brunner 56b6eeb385 testing: Add ikev2/start-action-start scenario 
This tests the behavior for configs with start_action=start during
reloads of the config (updates/removal).
 2024-07-26 16:56:32 +02:00
Tobias Brunner 07ce6b44c5 testing: Enable IPv6 guest-to-guest communication 
Not sure what changed, but without this setting, ND packets would not
get through to other hosts connected to the same bridge.
 2024-07-26 11:34:44 +02:00
Tobias Brunner d759bd9efa Use wolfSSL 5.7.2 for tests 2024-07-11 15:57:12 +02:00
Tobias Brunner c4bce2b79b testing: Enable mgf1 plugin for scenarios where FreeRADIUS uses PSS signatures 
Looks like a cipher suite without DHE was selected previously.

Could be a side-effect of dc1085734f ("testing: Remove unnecessary
FreeRADIUS dh_file option as recommended in the log").
 2024-06-26 14:56:22 +02:00
Tobias Brunner a9ced3ccb4 testing: Fix IP pool scenarios after changing base address 
Fixes: 2b11764b70 ("mem-pool: Adjust the base address if it's the network ID")
 2024-06-26 14:56:22 +02:00
Maxim Uvarov dd256e730d testing: Enable error code checks for load-testconfig 
Errors in load-testconfig are hidden due to not checking scp
return code and mute all errors. Add -e to trap script on
any errors in this script.

References strongswan/strongswan#2310

Signed-off-by: Maxim Uvarov <muvarov@gmail.com>
 2024-06-26 14:55:52 +02:00
Maxim Uvarov d8c6fa3b9a testing: Enable sftp subsystem in default sshd_config 
OpenSSH defaults have changed and scp stopped to work with newer versions.
There are 2 options to fix it, either use -O (legacy scp protocol)
with scp, or enable the sftp subsystem in the SSH server config.
This fix uses the second variant.

Closes strongswan/strongswan#2310

Signed-off-by: Maxim Uvarov <muvarov@gmail.com>
 2024-06-26 14:54:38 +02:00
Tobias Brunner 1cbcf198ab testing: Make RADIUS server enforce client identity in certificate's CN 2024-06-17 14:47:11 +02:00
Tobias Brunner dc1085734f testing: Remove unnecessary FreeRADIUS dh_file option as recommended in the log 2024-06-17 14:47:11 +02:00
Tobias Brunner 84166508f8 Use wolfSSL 5.7.0 for tests 2024-03-22 11:43:39 +01:00