diff options
author | Tobias Brunner <tobias@strongswan.org> | 2015-11-05 15:03:06 +0100 |
---|---|---|
committer | Tobias Brunner <tobias@strongswan.org> | 2015-11-09 15:18:35 +0100 |
commit | bb66b4d56b7080ead80d0cfaa2ab7de5b0009622 (patch) | |
tree | c4b3307731d8c063b94c1480f25fe018b53d1106 /testing/tests/ikev2/ocsp-no-signer-cert | |
parent | 0ee4a333a8202f4bf176c87b17aa640685ec5ada (diff) | |
download | strongswan-bb66b4d56b7080ead80d0cfaa2ab7de5b0009622.tar.bz2 strongswan-bb66b4d56b7080ead80d0cfaa2ab7de5b0009622.tar.xz |
testing: Speed up OCSP scenarios
Don't make clients wait for the TCP connections to timeout by dropping
packets. By rejecting them the OCSP requests fail immediately.
Diffstat (limited to 'testing/tests/ikev2/ocsp-no-signer-cert')
-rw-r--r-- | testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat b/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat index 9d3999937..6296b4e06 100644 --- a/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat +++ b/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat @@ -1,4 +1,4 @@ -moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP +moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset moon::ipsec start carol::ipsec start carol::expect-connection home |