diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-11-05 15:03:06 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2015-11-09 15:18:35 +0100 |
| commit | bb66b4d56b7080ead80d0cfaa2ab7de5b0009622 (patch) | |
| tree | c4b3307731d8c063b94c1480f25fe018b53d1106 /testing/tests/ikev2 | |
| parent | 0ee4a333a8202f4bf176c87b17aa640685ec5ada (diff) | |
| download | strongswan-bb66b4d56b7080ead80d0cfaa2ab7de5b0009622.tar.bz2 strongswan-bb66b4d56b7080ead80d0cfaa2ab7de5b0009622.tar.xz | |
testing: Speed up OCSP scenarios
Don't make clients wait for the TCP connections to timeout by dropping
packets. By rejecting them the OCSP requests fail immediately.
Diffstat (limited to 'testing/tests/ikev2')
| -rw-r--r-- | testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat | 2 | ||||
| -rw-r--r-- | testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat | 4 | ||||
| -rw-r--r-- | testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat | 2 |
3 files changed, 4 insertions, 4 deletions
diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat b/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat index 9d3999937..6296b4e06 100644 --- a/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat +++ b/testing/tests/ikev2/ocsp-no-signer-cert/pretest.dat @@ -1,4 +1,4 @@ -moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP +moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset moon::ipsec start carol::ipsec start carol::expect-connection home diff --git a/testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat b/testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat index 2006925af..a43ba3550 100644 --- a/testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat +++ b/testing/tests/ikev2/ocsp-timeouts-unknown/pretest.dat @@ -1,5 +1,5 @@ -moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP -carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP +moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset +carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset moon::ipsec start carol::ipsec start carol::expect-connection home diff --git a/testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat b/testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat index 9d3999937..6296b4e06 100644 --- a/testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat +++ b/testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat @@ -1,4 +1,4 @@ -moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP +moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset moon::ipsec start carol::ipsec start carol::expect-connection home |