denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e5d73b0dfa6bc57b2ed8745df4409308eeaf272e
strongswan-ext/testing/tests/ikev2
T
History
Martin Willi 91d71abb16 revocation: Restrict OCSP signing to specific certificates 
To avoid considering each cached OCSP response and evaluating its trustchain,
we limit the certificates considered for OCSP signing to:

- The issuing CA of the checked certificate
- A directly delegated signer by the same CA, having the OCSP signer constraint
- Any locally installed (trusted) certificate having the OCSP signer constraint

The first two options cover the requirements from RFC 6960 2.6. For
compatibility with non-conforming CAs, we allow the third option as exception,
but require the installation of such certificates locally.
2014-03-31 14:40:33 +02:00
..
acert-cached
testing: Add an acert test using locally cached attribute certificates
2014-03-31 11:14:59 +02:00
acert-fallback
testing: Add an acert test that forces a fallback connection based on groups
2014-03-31 11:14:59 +02:00
acert-inline
testing: Add an acert test case sending attribute certificates inline
2014-03-31 11:14:59 +02:00
after-2038-certs
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-3des-md5
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-aes-ccm
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-aes-ctr
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-aes-gcm
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-aes-xcbc
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-blowfish
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-modp-subgroup
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-sha256
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-sha256-96
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-sha384
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
alg-sha512
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
any-interface
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
compress
testing: Enable firewall for ikev2/compress scenario
2014-01-23 10:27:13 +01:00
compress-nat
testing: Add ikev2/compress-nat scenario
2014-01-23 10:27:13 +01:00
config-payload
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
config-payload-swapped
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
critical-extension
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
crl-from-cache
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
crl-ldap
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
crl-revoked
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
crl-to-cache
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
default-keys
Removed UML from description of ikev2/default-keys test
2013-01-17 16:56:02 +01:00
dhcp-dynamic
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
dhcp-static-client-id
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
dhcp-static-mac
dhcp: Use chunk_hash_static() to calculate ID-based MAC addresses
2013-06-28 17:00:29 +02:00
double-nat
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
double-nat-net
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
dpd-clear
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
dpd-hold
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
dpd-restart
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
dynamic-initiator
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
dynamic-two-peers
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
esp-alg-aes-gmac
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
esp-alg-md5-128
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
esp-alg-null
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
esp-alg-sha1-160
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
farp
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
force-udp-encaps
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
host2host-ah
testing: Add an IKEv2 host2host AH transport mode test case
2013-10-11 10:15:22 +02:00
host2host-cert
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
host2host-swapped
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
host2host-transport
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
host2host-transport-nat
testing: Add ikev2/host2host-transport-nat scenario
2014-01-23 10:27:13 +01:00
inactivity-timeout
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ip-pool
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ip-pool-db
testing: Use installed SQL schema instead of local copy
2014-02-12 14:08:34 +01:00
ip-pool-wish
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ip-split-pools-db
testing: Use installed SQL schema instead of local copy
2014-02-12 14:08:34 +01:00
ip-two-pools
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ip-two-pools-db
testing: Use installed SQL schema instead of local copy
2014-02-12 14:08:34 +01:00
ip-two-pools-mixed
testing: Use installed SQL schema instead of local copy
2014-02-12 14:08:34 +01:00
ip-two-pools-v4v6
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ip-two-pools-v4v6-db
testing: Use installed SQL schema instead of local copy
2014-02-12 14:08:34 +01:00
lookip
Added ikev2/lookip scenario
2014-02-17 12:04:21 +01:00
mobike
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
mobike-nat
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
mobike-virtual-ip
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
mult-auth-rsa-eap-sim-id
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-cr-init
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-cr-resp
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-ldap
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-loop
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-pathlen
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
multi-level-ca-revoked
Renewed revoked Research CA certificate
2014-03-22 15:16:15 +01:00
multi-level-ca-strict
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
nat-rw
conntrack -F makes ikev2/nat-rw scenario to work always
2013-07-10 17:50:25 +02:00
nat-rw-mark
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
nat-rw-psk
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
nat-virtual-ip
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-ah
testing: Add an IKEv2 net2net AH test case
2013-10-11 10:15:22 +02:00
net2net-cert
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-dnscert
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
net2net-dnssec
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
net2net-esn
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-ntru-bandwidth
Completed integration of ntru_crypto library into ntru plugin
2014-03-22 09:51:00 +01:00
net2net-ntru-cert
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
net2net-pgp-v3
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-pgp-v4
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-pkcs12
testing: Don't load certificates explicitly and delete CA certificates in PKCS#12 scenarios
2013-07-15 11:27:07 +02:00
net2net-psk
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-psk-dscp
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-psk-fail
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-pubkey
Load any type (RSA/ECDSA) of public key via left|rightsigkey
2013-05-07 17:08:31 +02:00
net2net-rfc3779
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-route
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-rsa
Load any type (RSA/ECDSA) of public key via left|rightsigkey
2013-05-07 17:08:31 +02:00
net2net-same-nets
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
net2net-start
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ocsp-local-cert
Renewed self-signed OCSP signer certificate
2014-03-27 22:52:11 +01:00
ocsp-multi-level
Check that valid OCSP responses are received in the ikev2/ocsp-multi-level scenario
2014-03-24 23:57:55 +01:00
ocsp-no-signer-cert
revocation: Restrict OCSP signing to specific certificates
2014-03-31 14:40:33 +02:00
ocsp-revoked
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ocsp-root-cert
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ocsp-signer-cert
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ocsp-strict-ifuri
Updated expired certificates issued by the Research and Sales Intermediate CAs
2014-03-24 23:38:45 +01:00
ocsp-timeouts-good
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ocsp-timeouts-unknown
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
ocsp-untrusted-cert
revocation: Restrict OCSP signing to specific certificates
2014-03-31 14:40:33 +02:00
protoport-dual
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
protoport-route
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
reauth-early
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
reauth-late
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-cert
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
rw-dnssec
Load any type (RSA/ECDSA) of public key via left|rightsigkey
2013-05-07 17:08:31 +02:00
rw-eap-aka-id-rsa
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-aka-rsa
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
rw-eap-dynamic
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-framed-ip-radius
Added ikev2/rw-eap-framed-ip-radius scenario
2013-03-22 19:08:42 +01:00
rw-eap-md5-class-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-md5-id-prompt
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-md5-id-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-md5-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-md5-rsa
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-mschapv2-id-rsa
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-peap-md5
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-peap-mschapv2
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-peap-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-sim-id-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-sim-only-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-sim-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-sim-rsa
Merged libstrongswan options into charon section
2014-03-15 14:07:34 +01:00
rw-eap-tls-fragments
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-tls-only
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-tls-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-ttls-only
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-ttls-phase2-piggyback
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-eap-ttls-radius
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-hash-and-url
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-initiator-only
disable reauth, too
2013-04-15 20:21:27 +02:00
rw-mark-in-out
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-ntru-psk
Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenarios
2013-11-27 20:21:40 +01:00
rw-pkcs8
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-fqdn
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-ipv4
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-no-idr
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-rsa-mixed
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-psk-rsa-split
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
rw-radius-accounting
Added Framed-IP-Address information to RADIUS accounting records
2013-03-22 23:52:01 +01:00
rw-whitelist
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
shunt-policies
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
strong-keys-certs
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
two-certs
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
virtual-ip
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
virtual-ip-override
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00
wildcards
Updated comments in test.conf of all tests
2013-01-17 16:56:02 +01:00