denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
14,624 Commits 1 Branch 0 Tags
85af8400dfdcdce3ac2a05e53e1a28ad708b7c8a
Commit Graph
200 Commits
Author SHA1 Message Date
Andreas Steffen 946bc3a3f5 testing: Fixed some more timing issues 2015-11-10 16:54:38 +01:00
Tobias Brunner 10051b01e9 testing: Reduce runtime of all tests that use SQLite databases by storing them in ramfs 2015-11-09 15:18:39 +01:00
Tobias Brunner f519acd42f testing: Remove nearly all sleep calls from pretest and posttest scripts 
By consistently using the `expect-connection` helper we can avoid pretty
much all previously needed calls to sleep.
 2015-11-09 15:18:35 +01:00
Tobias Brunner f36b6d49af testing: Adapt tests to retransmission settings and reduce DPD delay/timeout 2015-11-09 15:18:34 +01:00
Tobias Brunner e9ea7e6fb7 testing: Updated environment variable documentation in updown scripts 2015-08-31 11:00:05 +02:00
Andreas Steffen 362e87e3e0 testing: Updated carol's certificate from research CA and dave's certificate from sales CA 2015-04-26 16:52:06 +02:00
Martin Willi 2b0f34a2ef testing: Don't check for exact IKEv1 fragment size 
Similar to 7a9c0d51, the exact packet size depends on many factors we don't
want to consider in this test case.
 2015-03-10 10:21:16 +01:00
Tobias Brunner 8b2af616ac testing: Update modified updown scripts to the latest template 
This avoids confusion and makes identifying the changes needed for each
scenario easier.
 2015-03-06 16:51:50 +01:00
Martin Willi 050556bf59 testing: Be a little more flexible in testing for established CHILD_SA modes 
As we now print the reqid parameter in the CHILD_SA details, adapt the grep
to still match the CHILD_SA mode and protocol.
 2015-02-20 13:34:58 +01:00
Andreas Steffen 9b01a061ec Increased check size du to INITIAL_CONTACT notify 2014-11-29 14:57:41 +01:00
Tobias Brunner 144b40e07c testing: Update ikev1/net2net-fragmentation scenario 2014-10-10 09:32:42 +02:00
Tobias Brunner 2c7ad260f9 testing: Update carols certificate in several test cases 2014-10-03 12:44:13 +02:00
Martin Willi 44b6a34d43 configure: Load fetcher plugins after crypto base plugins 
Some fetcher plugins (such as curl) might build upon OpenSSL to implement
HTTPS fetching. As we set (and can't unset) threading callbacks in our
openssl plugin, we must ensure that OpenSSL functions don't get called after
openssl plugin unloading.

We achieve that by loading curl and all other fetcher plugins after the base
crypto plugins, including openssl.
 2014-09-24 17:34:54 +02:00
Tobias Brunner 7a61bf9032 testing: Run 'conntrack -F' before all test scenarios 
This prevents failures due to remaining conntrack entries.
 2014-04-02 11:55:05 +02:00
Andreas Steffen c683b389ba Merged libstrongswan options into charon section 2014-03-15 14:07:34 +01:00
Andreas Steffen f2a3a01134 strongswan.conf is not needed on RADIUS server alice 2014-03-15 14:07:33 +01:00
Tobias Brunner 96e8715e32 testing: Use installed SQL schema instead of local copy 2014-02-12 14:08:34 +01:00
Andreas Steffen f0ffb9f9af Fixed description of ikev1/rw-ntru-psk scenario 2014-02-12 13:21:46 +01:00
Andreas Steffen 83caf0827c Added ikev1/net2net-ntru-cert and ikev1/rw-ntru-psk scenarios 2014-02-12 13:16:34 +01:00
Martin Willi fa7815538f testing: Add an IKEv1 host2host AH transport mode test case 2013-10-11 10:15:22 +02:00
Martin Willi ef4560121d testing: Add an IKEv1 net2net AH test case 2013-10-11 10:15:22 +02:00
Andreas Steffen 97346f2a7e Added ikev1/config-payload-push scenario 2013-09-07 08:23:58 +02:00
Martin Willi 2cfe88aacb testing: enforce xauth-eap in ikev1/xauth-rsa-eap-md5-radius 
As eap-radius now provides its own XAuth backend and eap-radius is loaded before
xauth-eap, we have to enforce the exact XAuth backend to use.
 2013-07-29 10:35:59 +02:00
Martin Willi 9d75f04eee testing: add a testcase for plain XAuth RADIUS authentication 2013-07-29 09:00:49 +02:00
Andreas Steffen 654c88bca8 Added charon.initiator_only option which causes charon to ignore IKE initiation requests by peers 2013-04-14 19:57:49 +02:00
Andreas Steffen 5374fe3a09 added ikev1/net2net-fragmentation scenario 2013-02-12 23:01:48 +01:00
Tobias Brunner b1169a880a Updated comments in test.conf of all tests 2013-01-17 16:56:02 +01:00
Tobias Brunner 7699a928f7 Renamed $UMLHOSTS to $VIRTHOSTS 2013-01-17 16:56:02 +01:00
Reto Buerki 530f7b8421 No need to enable ip_forward in pretest files 
It is enabled by default now.
 2013-01-17 16:55:03 +01:00
Andreas Steffen ac09da8e50 added ikev1/nat-virtual-ip scenario 2013-01-17 16:55:00 +01:00
Andreas Steffen ca0128588f converted all ikev1 iptables scenarios 2013-01-17 16:55:00 +01:00
Reto Buerki 533177003c Adapt test configurations 
Adapt test configurations to the new Debian-based system.
 2013-01-17 15:22:07 +01:00
Andreas Steffen 04bb739578 do not enable integrity and crypto tests in ikev1/rw-cert-unity scenario 2012-09-21 21:26:52 +02:00
Martin Willi 995a9c8a0a Add a simple test case for the unity plugin, featuring both includes and excludes 2012-09-18 17:20:47 +02:00
Andreas Steffen 979027ae04 ikev1 hybrid authentication does not need client certificates 2012-09-12 12:42:24 +02:00
Andreas Steffen d401bcfe97 adapted ip-pool evaltests 2012-09-10 15:41:27 +02:00
Andreas Steffen 1e5634c9b3 remove virtual IP for moon's inner interface 2012-06-29 23:20:32 +02:00
Andreas Steffen 1c959e4479 added ikev1/virtual-ip scenario 2012-06-28 14:52:07 +02:00
Andreas Steffen 5a86589d0c corrected description of ikev1/ip-pool-db scenario 2012-06-28 14:44:10 +02:00
Andreas Steffen 5c0d1bccb0 corrected description of ikev1/ip-pool scenario 2012-06-28 14:42:34 +02:00
Andreas Steffen 788e512d58 added ikev1/ip-pool scenario 2012-06-28 14:37:04 +02:00
Andreas Steffen f39a2f275e merged xauth-id-rsa and xauth-rsa-config scenarios 2012-06-28 14:23:47 +02:00
Andreas Steffen 8cad9ed42c charon automatically removes virtual interfaces 2012-06-28 09:30:24 +02:00
Andreas Steffen bc60bb8bf4 added ikev1/xauth-id-rsa-hybrid scenario 2012-06-18 22:51:50 +02:00
Andreas Steffen 771a66c6a0 added ikev1/xauth-id-rsa-aggressive scenario 2012-06-18 22:30:26 +02:00
Andreas Steffen 8b8f5c6141 rsasig is not recognized as authentication method 2012-06-18 22:03:36 +02:00
Andreas Steffen 49d18a8e06 enable potentially unsafe aggressive mode 2012-06-18 21:34:48 +02:00
Andreas Steffen 7a892288fb change ikev1/xauth scenarios to modern notation 2012-06-18 21:22:01 +02:00
Andreas Steffen daa857029f removed plutostart parameter 2012-06-13 21:19:05 +02:00
Andreas Steffen 47f8ae7cfd added ikev1/dynamic scenarios using allow-any 2012-06-08 22:54:12 +02:00