Adrian-Ken Rueegsegger
a0a0571bd1
Verify certificate chains starting from the root CA certificate and moving towards the leaf/user certificate. Also update TKM-RPC and TKM in testing scripts to version supporting the reworked CC handling.
23 lines
1.8 KiB
Plaintext
23 lines
1.8 KiB
Plaintext
sun::ipsec stroke status 2> /dev/null::conn1.*ESTABLISHED.*sun.strongswan.org.*carol.strongswan.org::YES
|
|
sun::ipsec stroke status 2> /dev/null::conn2.*ESTABLISHED.*sun.strongswan.org.*dave.strongswan.org::YES
|
|
carol::ipsec status 2> /dev/null::host-host.*ESTABLISHED.*carol.strongswan.org.*sun.strongswan.org::YES
|
|
dave::ipsec status 2> /dev/null::host-host.*ESTABLISHED.*dave.strongswan.org.*sun.strongswan.org::YES
|
|
sun::ipsec stroke status 2> /dev/null::conn1.*INSTALLED, TRANSPORT::YES
|
|
sun::ipsec stroke status 2> /dev/null::conn2.*INSTALLED, TRANSPORT::YES
|
|
carol::ipsec status 2> /dev/null::host-host.*INSTALLED, TRANSPORT::YES
|
|
dave::ipsec status 2> /dev/null::host-host.*INSTALLED, TRANSPORT::YES
|
|
carol::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_.eq=1::YES
|
|
dave::ping -c 1 PH_IP_SUN::64 bytes from PH_IP_SUN: icmp_.eq=1::YES
|
|
carol::tcpdump::IP carol.strongswan.org > sun.strongswan.org: ESP::YES
|
|
carol::tcpdump::IP sun.strongswan.org > carol.strongswan.org: ESP::YES
|
|
dave::tcpdump::IP dave.strongswan.org > sun.strongswan.org: ESP::YES
|
|
dave::tcpdump::IP sun.strongswan.org > dave.strongswan.org: ESP::YES
|
|
sun::cat /tmp/tkm.log::RSA private key '/etc/tkm/sunKey.der' loaded::YES
|
|
sun::cat /tmp/tkm.log::Adding policy \[ 1, 192.168.0.2 <-> 192.168.0.100 \]::YES
|
|
sun::cat /tmp/tkm.log::Adding policy \[ 2, 192.168.0.2 <-> 192.168.0.200 \]::YES
|
|
sun::cat /tmp/tkm.log | grep "Certificate chain of CC context 1 is valid" | wc -l::2::YES
|
|
sun::cat /tmp/tkm.log::Authentication of ISA context 1 successful::YES
|
|
sun::cat /tmp/tkm.log::Authentication of ISA context 2 successful::YES
|
|
sun::cat /tmp/tkm.log::Adding ESA \[ 1, 192.168.0.2 <-> 192.168.0.100, SPI_in.*, SPI_out.*, soft 30, hard 60 \]::YES
|
|
sun::cat /tmp/tkm.log::Adding ESA \[ 2, 192.168.0.2 <-> 192.168.0.200, SPI_in.*, SPI_out.*, soft 30, hard 60 \]::YES
|