denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2c7f6cd93f3e309b5ee37f716f138dc9487c8fa2
strongswan-ext/testing/tests/ikev2
T
History
Tobias Brunner 5ce1c91b58 ikev2: Trigger ike_updown() event after all IKE-specific tasks ran 
This makes sure the event is only triggered after the IKE_SA is fully
established and e.g. virtual IPs, additional peer addresses or
a modified reauth time (on the initiator) are assigned to it.  This was
e.g. a problem for the selinux plugin if virtual IPs are used.

We use a separate task to trigger the event that's queued before the
child-create task so the event is triggered before the child_updown()
event.  Same goes for the state change to IKE_ESTABLISHED.

A new condition is used to indicate the successful completion of all
authentication rounds, so we don't have to set the IKE_ESTABLISHED state
in the ike-auth task (it was used as condition in other tasks).

Since set_state() also sets the rekey and reauth times, this required
some minor changes in regards to how AUTH_LIFETIME notifies are handled.
2022-09-23 16:28:35 +02:00
..
acert-cached
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
acert-fallback
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
acert-inline
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
after-2038-certs
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
compress
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
compress-nat
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
config-payload
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
critical-extension
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
crl-from-cache
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
crl-ldap
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
crl-revoked
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
crl-to-cache
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dhcp-dynamic
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dhcp-static-client-id
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dhcp-static-mac
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
double-nat
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
double-nat-net
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dpd-clear
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dpd-restart
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dpd-trap
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
dynamic-initiator
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
farp
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
force-udp-encap
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
forecast
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
host2host-ah
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
host2host-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
host2host-transport
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
host2host-transport-connmark
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
host2host-transport-nat
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
inactivity-timeout
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-pool
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-pool-db
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-split-pools-db
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-two-pools
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-two-pools-db
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-two-pools-mixed
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-two-pools-v4v6
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ip-two-pools-v4v6-db
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
lookip
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
mobike
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
mobike-nat-mappings
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
mobike-virtual-ip
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
mobike-virtual-ip-nat
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
mult-auth-rsa-eap-sim-id
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
nat-rw
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
nat-rw-mark
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
nat-rw-psk
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
nat-virtual-ip
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-ah
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-cert-sha2
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-childless
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-dnscert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-dnssec
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-dscp
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-ed25519
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-esn
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-gw
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-multicast
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-ntru-bandwidth
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-pkcs12
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-psk
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-psk-dscp
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-psk-fail
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-pubkey
testing: Reorganizing IKEv1 and IKEv2 examples
2021-05-21 09:42:50 +02:00
net2net-rekey
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-rfc3779
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-route
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-same-nets
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-sha3-rsa-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
net2net-start
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-disabled
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-local-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-no-signer-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-revoked
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-root-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-signer-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-timeouts-good
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-timeouts-unknown
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
ocsp-untrusted-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
protoport-dual
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
protoport-range
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
protoport-trap
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
reauth-early
ikev2: Trigger ike_updown() event after all IKE-specific tasks ran
2022-09-23 16:28:35 +02:00
reauth-late
ikev2: Trigger ike_updown() event after all IKE-specific tasks ran
2022-09-23 16:28:35 +02:00
reauth-mbb
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
reauth-mbb-revoked
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
reauth-mbb-virtual-ip
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
redirect-active
testing: Fixed two issues
2022-09-06 21:14:07 +02:00
rw-cert
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-cert-ppk
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-cert-pss
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-dnssec
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-aka-id-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-aka-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-aka-sql-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-dynamic
testing: Fixed typo of mfg1 to mgf1 plugin
2022-08-26 12:31:33 +02:00
rw-eap-framed-ip-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-md5-class-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-md5-id-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-md5-id-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-md5-id-rsa-ppk
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-md5-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-md5-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-mschapv2-id-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-peap-md5
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-peap-mschapv2
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-peap-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-sim-id-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-sim-only-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-sim-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-sim-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-tls-fragments
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-tls-only
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-tls-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-tls-sha3-rsa
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-ttls-only
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-eap-ttls-radius
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-ed25519-certpol
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-hash-and-url
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-initiator-only
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-mark-in-out
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-newhope-bliss
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-ntru-bliss
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-ntru-psk
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-pkcs8
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-psk-fqdn
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-psk-ipv4
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-psk-no-idr
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-psk-ppk
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-psk-rsa-mixed
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-psk-rsa-split
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-pubkey-anon
testing: Reorganizing IKEv1 and IKEv2 examples
2021-05-21 09:42:50 +02:00
rw-pubkey-keyid
testing: Migrate ikev2-stroke-bye scenarios to vici
2021-06-22 10:23:06 +02:00
rw-radius-accounting
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-sig-auth
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
rw-whitelist
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
shunt-manual-prio
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
shunt-policies-nat-rw
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
strong-keys-certs
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
trap-any
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
two-certs
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
wildcards
testing: Load kdf plugin in all scenarios that require it
2022-04-14 19:02:48 +02:00
.gitignore
testing: Deleting dynamic test keys and certificates
2019-05-08 14:56:48 +02:00