denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,367 Commits 1 Branch 0 Tags
befdefa5d38d2ddbb8d4e97f470d6812e803663a
Commit Graph
1978 Commits
Author SHA1 Message Date
Tobias Brunner 023070b6d0 Use wolfSSL 5.5.0 for tests 2022-09-06 09:33:00 +02:00
Andreas Steffen af3b8c49c5 Version bump to 5.9.8dr2 2022-09-02 06:32:13 +02:00
Andreas Steffen 057b3806aa Version bump to 5.9.8dr1 2022-08-26 12:32:04 +02:00
Andreas Steffen e4cb9a59d2 testing: Fixed typo of mfg1 to mgf1 plugin 2022-08-26 12:31:33 +02:00
Andreas Steffen 49ddfe91f0 Version bump to 5.9.7 2022-07-29 06:54:09 +02:00
Andreas Steffen 1e444454e1 Version bump to 5.9.7rc1 2022-07-23 14:38:36 +02:00
Andreas Steffen c01d765c11 testing: Increased memory of KVM instance sun 2022-07-23 14:36:50 +02:00
Andreas Steffen 67f7d8fe8a testing: Replace deprecated tempfile command by mktemp 2022-07-23 11:28:08 +02:00
Tobias Brunner eae30af029 Use wolfSSL 5.4.0 for tests 
The 5.4.0 update changed the default bignum implementation to what
could explicitly be enabled via `--enable-sp-math-all`.  Since this uses
fixed-sized buffers sufficient for key sizes of SP_INT_BITS, with a default
of 4096, modp6144 and modp8192 didn't work anymore (wc_DhGenerateKeyPair()
returned MP_EXPTMOD_E).  So we have to adapt the feature checks for this.

To support the larger DH groups we can either increase the buffer size
via `--with-max-rsa-bits` or add `--enable-heapmath` so buffers get
(re-)allocated as needed.  We go with the latter for now.
 2022-07-18 12:42:24 +02:00
Andreas Steffen e8c2ae3c54 Version bump to 5.9.7dr2 2022-06-29 11:33:34 +02:00
Andreas Steffen 432111720d Version bump to 5.9.7dr1 2022-05-26 17:41:14 +02:00
Tobias Brunner 63f35993d9 testing: Use sans-serif font for test results 
We could later extend the stylesheet more or even add something similar
to actual templates (e.g. a shared header/footer).
 2022-05-24 08:11:56 +02:00
Tobias Brunner f62b942d6a Use wolfSSL 5.3.0 for tests 2022-05-06 12:03:48 +02:00
Tobias Brunner cc094c30d1 testing: Fix 'unsafe repository' error when accessing Git repository 
A recent security fix for Git added a fatal error if the directory that
contains the .git directory is not owned by the user that runs git in
that directory tree:

  Determine strongSwan version fatal: unsafe repository ('...' is owned by someone else)

To avoid this, we call the git commands as owner of the source
directory (the script has to run as root, so this is no problem).

The user/group ID and name is now also determined via `stat(1)` so it
directly depends on the actual source dir and should work even when not
using sudo.
 2022-05-02 11:09:14 +02:00
Andreas Steffen 4cf8cd0321 Version bump to 5.9.6 2022-04-28 22:38:10 +02:00
Andreas Steffen 7df710095e Version bump to 5.9.6rc1 2022-04-16 10:23:35 +02:00
Tobias Brunner 96c7692661 wolfssl: Implement prf+ via wolfSSL's HKDF implementation 2022-04-14 19:02:56 +02:00
Tobias Brunner cb8f924051 botan: Implement prf+ via Botan's HKDF implementation 2022-04-14 19:02:56 +02:00
Tobias Brunner 3a52fc83f8 testing: Load kdf plugin in all scenarios that require it 
Once we use plugin-provided prf+() these won't work otherwise.
 2022-04-14 19:02:48 +02:00
Tobias Brunner 6910347d1a testing: Add DSCP scenario that uses simple labels 
Instead of creating two IKE_SAs with different identities, this scenario
uses simple labels to select the correct child config.
 2022-04-14 18:42:01 +02:00
Tobias Brunner 994d9d37d4 testing: Copy comments to test log 2022-04-14 18:42:01 +02:00
Tobias Brunner c8045f86a3 testing: Increase memory on winnetou even more 2022-03-01 10:10:37 +01:00
Tobias Brunner e69438450f Use wolfSSL 5.2.0 for tests 2022-02-22 09:35:01 +01:00
Tobias Brunner b47e9919f5 testing: Print the actual start time of a command for do-tests -t 
Because the command line, together with the results, is printed after
executing it, there could have been weird delays between commands.
 2022-02-09 18:58:08 +01:00
Tobias Brunner 1bb05006d3 Use Botan 2.19.1 for tests 2022-01-24 17:30:33 +01:00
Andreas Steffen 57d6e96943 Version bump to 5.9.5 2022-01-24 12:01:10 +01:00
Andreas Steffen 1321fdb8aa Version bump to 5.9.5rc1 2022-01-16 07:48:12 +01:00
Andreas Steffen 85d626e9ae testing: Modified ikev2/net2net-rfc3779 scenario 2022-01-10 21:14:11 +01:00
Tobias Brunner cd0c9919d9 Use wolfSSL 5.1.1 for tests 
Add --tags when fetching commits so we get tags that are not in any
branches, which is currently the case with this tag.
 2022-01-04 15:47:16 +01:00
Andreas Steffen 36c64589d8 Version bump to 5.9.5dr4 2021-12-31 14:46:31 +01:00
Andreas Steffen 903c68e069 sw-collector: Iterate through history logs 
The logrotate function causes the apt history to be split into
several parts at arbitrary points in time. If history.log only
is parsed then some package installation changes stored in
zipped backup history files might get lost.

Thus sw-collector now searches all backup history files until
a date older than the current event stored in the collector.db
database is found, so that no entries get overlooked.
 2021-12-31 14:33:22 +01:00
Andreas Steffen dadcd9060e Version bump to 5.9.5dr3 2021-12-11 16:39:34 +01:00
Andreas Steffen 54d7e39d40 wolfssl: Support of AES-CFB encryption 2021-12-06 12:53:11 +01:00
Tobias Brunner e9ba195910 github: Run charon-tkm tests 
Use a Debian-based Docker container to run the unit tests for charon-tkm,
once without and once with TKM running.  The container can also be used
locally to run the tests (see comments in the Dockerfile).
 2021-11-29 15:30:43 +01:00
Tobias Brunner 43927e60a7 Revert "testing: Don't run tests when building tkm" 
This reverts commit e74bca9e19.
 2021-11-29 15:06:57 +01:00
Tobias Brunner 6b9c8a674f Revert "testing: Don't run tests when building tkm-rpc" 
Let's try that again on current systems.

This reverts commit 9c2aba2735.
 2021-11-29 15:06:57 +01:00
Tobias Brunner deb288ddc1 testing: Increase memory of winnetou 
Looks like named requires a lot more memory than previously so that
Apache seems to struggle serving the test results sometimes.
 2021-11-19 15:27:58 +01:00
Andreas Steffen 4124b1d376 Version bump to 5.9.5dr2 2021-11-18 22:06:09 +01:00
Tobias Brunner d1278ed926 Use wolfSSL 5.0.0 for tests 2021-11-02 09:41:25 +01:00
Tobias Brunner e19eb070fa Use Botan 2.18.2 for tests 2021-10-29 09:07:38 +02:00
Andreas Steffen bcbf1862d7 Version bump to 5.9.5dr1 2021-10-26 08:04:19 +02:00
Andreas Steffen f0935a63ed testing: Optimized plugin use in pkcs8 scenarios 2021-10-23 11:44:15 +02:00
Andreas Steffen 9c7288d6f1 testing: Minimum required plugins for net2net-pkcs12 scenarios 2021-10-22 11:39:20 +02:00
Tobias Brunner 8c48de739d testing: Use AES and SHA-256 to protect PKCS#12 files 
The -aes128 option is used when encrypting private keys read from a
PKCS#12 file, not when generating such a file.
 2021-10-18 14:27:14 +02:00
Andreas Steffen 66fa7c959a Version bump to 5.9.4 2021-10-18 11:45:53 +02:00
Andreas Steffen 8cc89b505e testing: Correctly remove pkcs8 key after test case 2021-10-18 11:45:31 +02:00
Andreas Steffen 1ecb0b8133 Version bump to 5.9.4rc1 2021-10-12 08:54:03 +02:00
Andreas Steffen 740038e401 Version bump to 5.9.4dr3 2021-10-04 15:47:05 +02:00
Tobias Brunner 3edf3856d4 testing: Use Debian bullseye as base image 2021-10-01 15:05:44 +02:00
Tobias Brunner bc51815839 testing: Determine Debian version in TNC scenarios automatically again 
Was statically set to 10 since f3d96b7bc9 ("Version bump to 5.9.1dr1").
 2021-10-01 15:05:44 +02:00