Tobias Brunner
1091b3a636
testing: Fix CRL URIs in ipv6/net2net-ip4-in-ip6-ikev* scenarios
2015-11-09 15:18:36 +01:00
Tobias Brunner
c6aa606a65
testing: Actually send an uncompressed packet in the ipv6/rw-compress-ikev2 scenario
...
The default of 56 bytes already exceeds the threshold of 90 bytes (8 bytes
ICMP + 40 bytes IPv6 = 104 bytes). By reducing the size we make sure the
packet is not compressed (40 + 8 + 40 = 88).
This also fixes a strange failure of this scenario due to the recently
added post-test `ip xfrm state` check. The kernel stores a reference to
the used SAs on the inbound skbuffs and since these are garbage collected
it could take a while until all references to an SA disappear and the SA
is finally destroyed. But while SAs might not get destroyed immediately
when we delete them, they are actually marked as dead and therefore won't
show up in `ip xfrm state`. However, that's not the case for the tunnel
SAs the kernel attaches to IPComp SAs, which we don't explicitly delete,
and which aren't modified by the kernel until the IPComp SA is destroyed.
So what happened when the last ping unintentionally got compressed is that
the skbuff had a reference to the IPComp SA and therefore the tunnel SA.
This skbuff often was destroyed after the `ip xfrm state` check ran and
because the tunnel SA would still get reported the test case failed.
2015-10-06 15:48:55 +02:00
Andreas Steffen
db69295d2e
tests: Introduced IPV6 flag in tests.conf
2015-07-21 23:17:14 +02:00
Andreas Steffen
5028644943
Updated RFC3779 certificates
2014-12-28 12:53:16 +01:00
Andreas Steffen
a521ef3b8e
Increased fragment size to 1400 in ipv6/net2net-ikev1 scenario
2014-10-18 14:05:53 +02:00
Andreas Steffen
09b46cdb6a
Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario
2014-10-18 14:05:18 +02:00
Martin Willi
44b6a34d43
configure: Load fetcher plugins after crypto base plugins
...
Some fetcher plugins (such as curl) might build upon OpenSSL to implement
HTTPS fetching. As we set (and can't unset) threading callbacks in our
openssl plugin, we must ensure that OpenSSL functions don't get called after
openssl plugin unloading.
We achieve that by loading curl and all other fetcher plugins after the base
crypto plugins, including openssl.
2014-09-24 17:34:54 +02:00
Tobias Brunner
62e050e0ef
testing: Add ipv6/rw-compress-ikev2 scenario
2014-01-23 10:27:13 +01:00
Andreas Steffen
b1f1e5e5f2
5.1.0 changes for test cases
2013-06-29 00:07:15 +02:00
Tobias Brunner
b1169a880a
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
Tobias Brunner
7699a928f7
Renamed $UMLHOSTS to $VIRTHOSTS
2013-01-17 16:56:02 +01:00
Andreas Steffen
5c09942d54
converted all ipv6 iptables/ip6tables scenarios
2013-01-17 16:55:03 +01:00
Reto Buerki
76ccd25a05
Add expect-connection guest image script
...
This script can be used in pretest.dat files to wait until an IPsec
connection becomes available. This avoids unconditional sleeps and
improves test performance.
The ipv6 tests have been updated to use the expect-connection script.
2013-01-17 16:54:55 +01:00
Reto Buerki
533177003c
Adapt test configurations
...
Adapt test configurations to the new Debian-based system.
2013-01-17 15:22:07 +01:00
Andreas Steffen
bf577b6714
fixed typo
2012-06-20 11:15:09 +02:00
Andreas Steffen
0802b8359e
added ipv6/rw-ip6-in-ip4-ikev1 scenario
2012-06-20 11:13:20 +02:00
Andreas Steffen
36988a0a37
added ipv6/rw-ip6-in-ip4-ikev2 scenario
2012-06-20 11:03:51 +02:00
Andreas Steffen
daa857029f
removed plutostart parameter
2012-06-13 21:19:05 +02:00
Andreas Steffen
08951eb7a8
upgraded ipv6 scenarios to 5.0.0
2012-05-29 23:40:01 +02:00
Andreas Steffen
897a9baaba
define explicit IKEv1 keyexchange mode III
2010-10-14 07:34:13 +02:00
Tobias Brunner
91ea48352c
testing: Adding kernel-netlink to pluto.load statements.
2010-09-02 19:04:22 +02:00
Andreas Steffen
295d9cc313
all x509 based ipv6/*-ikev2 scenarios require the revocation plugin
2010-07-15 23:02:17 +02:00
Martin Willi
f90d465ce2
Added addrblock plugin to RFC3779 test cases
2010-07-13 10:26:07 +02:00
Tobias Brunner
a5166b16a1
Adding socket-default to the plugin list in all test cases.
2010-03-09 17:43:21 +01:00
Andreas Steffen
2d07095e01
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
2010-02-06 12:34:41 +01:00
Andreas Steffen
76fe5500c4
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
2010-02-06 11:39:33 +01:00
Andreas Steffen
5094bfd85f
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
2010-02-05 20:39:13 +01:00
Andreas Steffen
61d7ff0c19
IPv6 fragment and http access are not needed in PSK scenario
2010-02-05 20:27:03 +01:00
Andreas Steffen
699c47a9be
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
2010-02-05 20:16:26 +01:00
Andreas Steffen
1f2da75069
IPv6 frag netfilter rule not needed anymore
2010-02-05 20:04:01 +01:00
Andreas Steffen
563a177830
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
2010-02-05 19:58:42 +01:00
Andreas Steffen
a2847740d2
removed charon-specific load statement in pluto scenario
2009-12-26 17:13:53 +01:00
Andreas Steffen
7c697964d3
added three RFC 3779 scenarios
2009-12-25 11:20:59 +01:00
Andreas Steffen
92f0aa9736
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
2009-12-17 19:43:33 +01:00
Andreas Steffen
02ee613325
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
2009-12-17 18:50:45 +01:00
Andreas Steffen
601e2a6986
added ipv6/net2net-ip4-in-ip6-ikev1 and ipv6/net2net-ip4-in-ip6-ikev1 scenarios
2009-10-16 15:04:17 +02:00
Martin Willi
41f57038e4
tests load pem/pkcs1 plugins, pubkey plugin not needed anymore
2009-08-26 11:23:55 +02:00
Martin Willi
6f3ea4a516
loading updown plugin if required
2008-10-16 12:48:27 +00:00
Andreas Steffen
e8c58d8e64
explicitly load kernel-netlink plugin in UML scenarios
2008-10-07 04:51:20 +00:00
Andreas Steffen
990ebd4a75
added ipv6/net2net-ip6-in-ip6-ikev2 scenario
2008-08-06 20:40:14 +00:00
Andreas Steffen
c9be754a45
define plugins to be loaded in strongswan.conf
2008-05-28 08:29:51 +00:00
Andreas Steffen
6927d37c2c
fixed another transport mode evaltest
2008-04-18 07:42:57 +00:00
Andreas Steffen
c2fc3379ac
added ipv6/net2net-ipv4-ikev2 scenario
2008-04-18 07:24:01 +00:00
Andreas Steffen
e4f5123ac7
add ip xfrm state test for ikev1 transport mode
2007-12-19 21:02:15 +00:00
Andreas Steffen
6a49300c55
added ipv6 transport mode scenarios for IKEv1 and IKEv2
2007-12-19 00:45:26 +00:00
Andreas Steffen
b3b379e044
fixed typo in iptables script
2007-11-16 22:45:47 +00:00
Andreas Steffen
97aef73e9c
added rw-psk-ikev2 scenario
2007-11-16 20:25:26 +00:00
Andreas Steffen
3f42fcb7a7
added rw-psk-ikev1 scenario
2007-11-16 20:25:15 +00:00
Andreas Steffen
397bf2a1e7
IPv6 scenarios now used the new IPv6 topology graphs
2007-11-08 13:28:30 +00:00
Andreas Steffen
c65ad277c2
another four IPv6 scenarios fully demonstrate ip6tables firewall use
2007-11-08 11:59:29 +00:00
Tobias Brunner