denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
3748fc70a7075121f847fd50b4aed4e54b25845d
strongswan-ext/testing/tests/ikev2
T
History
Martin Willi 9ed09d5f77 testing: Add a connmark plugin test 
In this test two hosts establish a transport mode connection from behind
moon. sun uses the connmark plugin to distinguish the flows.

This is an example that shows how one can terminate L2TP/IPsec connections
from two hosts behind the same NAT. For simplification of the test, we use
an SSH connection instead, but this works for any connection initiated flow
that conntrack can track.
2015-02-20 16:34:54 +01:00
..
acert-cached
testing: Add some notes about how to reissue attribute certificates
2014-10-03 12:31:01 +02:00
acert-fallback
testing: Add some notes about how to reissue attribute certificates
2014-10-03 12:31:01 +02:00
acert-inline
testing: Add some notes about how to reissue attribute certificates
2014-10-03 12:31:01 +02:00
after-2038-certs
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-3des-md5
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-aes-ccm
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-aes-ctr
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-aes-gcm
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-aes-xcbc
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-blowfish
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-modp-subgroup
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-sha256
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-sha256-96
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-sha384
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
alg-sha512
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
any-interface
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
compress
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
compress-nat
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
config-payload
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
config-payload-swapped
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
critical-extension
The critical-extension scenarios need the old private keys
2014-10-05 20:58:03 +02:00
crl-from-cache
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
crl-ldap
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
crl-revoked
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
crl-to-cache
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
default-keys
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
dhcp-dynamic
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
dhcp-static-client-id
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
dhcp-static-mac
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
double-nat
testing: Be a little more flexible in testing for established CHILD_SA modes
2015-02-20 13:34:58 +01:00
double-nat-net
testing: Be a little more flexible in testing for established CHILD_SA modes
2015-02-20 13:34:58 +01:00
dpd-clear
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
dpd-hold
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
dpd-restart
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
dynamic-initiator
testing: Update carols certificate in several test cases
2014-10-03 12:44:13 +02:00
dynamic-two-peers
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
esp-alg-aes-gmac
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
esp-alg-md5-128
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
esp-alg-null
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
esp-alg-sha1-160
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
farp
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
force-udp-encaps
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
host2host-ah
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
host2host-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
host2host-swapped
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
host2host-transport
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
host2host-transport-connmark
testing: Add a connmark plugin test
2015-02-20 16:34:54 +01:00
host2host-transport-nat
testing: Update description and test evaluation of host2host-transport-nat
2015-02-20 13:34:58 +01:00
inactivity-timeout
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-pool
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-pool-db
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-pool-wish
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-split-pools-db
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-two-pools
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-two-pools-db
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-two-pools-mixed
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-two-pools-v4v6
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ip-two-pools-v4v6-db
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
lookip
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
mobike
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
mobike-nat
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
mobike-virtual-ip
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
mult-auth-rsa-eap-sim-id
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
multi-level-ca
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
multi-level-ca-cr-init
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
multi-level-ca-cr-resp
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
multi-level-ca-ldap
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-loop
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
multi-level-ca-pathlen
Renewed expired certificates
2014-11-29 14:51:18 +01:00
multi-level-ca-revoked
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
multi-level-ca-strict
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
nat-rw
testing: Be a little more flexible in testing for established CHILD_SA modes
2015-02-20 13:34:58 +01:00
nat-rw-mark
testing: Be a little more flexible in testing for established CHILD_SA modes
2015-02-20 13:34:58 +01:00
nat-rw-psk
testing: Be a little more flexible in testing for established CHILD_SA modes
2015-02-20 13:34:58 +01:00
nat-virtual-ip
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-ah
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-dnscert
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
net2net-dnssec
testing: Update public keys in DNSSEC scenarios
2014-10-03 12:44:13 +02:00
net2net-esn
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-fragmentation
testing: Add ikev2/net2net-fragmentation scenario
2014-10-10 09:33:23 +02:00
net2net-ntru-bandwidth
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-ntru-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-pgp-v3
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-pgp-v4
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-pkcs12
testing: Update PKCS#12 containers
2014-10-03 12:44:13 +02:00
net2net-psk
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-psk-dscp
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-psk-fail
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-pubkey
Load any type (RSA/ECDSA) of public key via left|rightsigkey
2013-05-07 17:08:31 +02:00
net2net-rfc3779
Updated RFC3779 certificates
2014-12-28 12:53:16 +01:00
net2net-route
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-rsa
Load any type (RSA/ECDSA) of public key via left|rightsigkey
2013-05-07 17:08:31 +02:00
net2net-same-nets
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
net2net-start
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-local-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-multi-level
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-no-signer-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-revoked
Updated revoked certificate in ikev2/ocsp-revoked scenario
2014-10-05 21:33:35 +02:00
ocsp-root-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-signer-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-strict-ifuri
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-timeouts-good
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-timeouts-unknown
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
ocsp-untrusted-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
protoport-dual
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
protoport-route
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
reauth-early
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
reauth-late
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
reauth-mbb
testing: Add a test scenario for make-before-break reauth without a virtual IP
2015-02-20 13:34:57 +01:00
reauth-mbb-virtual-ip
testing: Add a test scenario for make-before-break reauth using a virtual IP
2015-02-20 13:34:58 +01:00
rw-cert
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-dnssec
testing: Update public keys in DNSSEC scenarios
2014-10-03 12:44:13 +02:00
rw-eap-aka-id-rsa
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-aka-rsa
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-dynamic
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-framed-ip-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-md5-class-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-md5-id-prompt
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-md5-id-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-md5-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-md5-rsa
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-mschapv2-id-rsa
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-peap-md5
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-peap-mschapv2
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-peap-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-sim-id-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-sim-only-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-sim-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-sim-rsa
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-tls-fragments
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-tls-only
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-tls-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-ttls-only
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-ttls-phase2-piggyback
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-eap-ttls-radius
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-hash-and-url
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-initiator-only
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-mark-in-out
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-ntru-bliss
Updated BLISS CA certificate in ikev2/rw-ntru-bliss scenario
2014-12-12 13:55:03 +01:00
rw-ntru-psk
Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenarios
2013-11-27 20:21:40 +01:00
rw-pkcs8
testing: Update PKCS#8 keys
2014-10-03 12:44:13 +02:00
rw-psk-fqdn
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-ipv4
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-no-idr
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-rsa-mixed
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-psk-rsa-split
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-radius-accounting
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
rw-whitelist
testing: Make sure the whitelist plugin is ready before configuring it
2014-10-03 12:44:14 +02:00
shunt-policies-nat-rw
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
strong-keys-certs
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
two-certs
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
virtual-ip
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
virtual-ip-override
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00
wildcards
configure: Load fetcher plugins after crypto base plugins
2014-09-24 17:34:54 +02:00