diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-03-03 19:37:53 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2015-03-04 13:54:12 +0100 |
| commit | 53217d70b011e2c5ccc1c5d85f00e34491374b1c (patch) | |
| tree | 8be899b890f3023d645f7407553366940cee4b52 /testing/tests/openssl-ikev2 | |
| parent | 4e6f102842ef13dd3b78bfddfcb8b5482904e968 (diff) | |
| download | strongswan-53217d70b011e2c5ccc1c5d85f00e34491374b1c.tar.bz2 strongswan-53217d70b011e2c5ccc1c5d85f00e34491374b1c.tar.xz | |
testing: Disable signature authentication on dave in openssl-ikev2/ecdsa-certs scenario
Diffstat (limited to 'testing/tests/openssl-ikev2')
| -rw-r--r-- | testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat | 4 | ||||
| -rw-r--r-- | testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf | 1 |
2 files changed, 3 insertions, 2 deletions
diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat b/testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat index 442696289..55ac10935 100644 --- a/testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat +++ b/testing/tests/openssl-ikev2/ecdsa-certs/evaltest.dat @@ -7,9 +7,9 @@ dave:: ipsec status 2> /dev/null::home.*INSTALLED, TUNNEL::YES moon:: ipsec status 2> /dev/null::rw[{]1}.*INSTALLED, TUNNEL::YES moon:: ipsec status 2> /dev/null::rw[{]2}.*INSTALLED, TUNNEL::YES moon:: cat /var/log/daemon.log::authentication of.*carol@strongswan.org.*with ECDSA_WITH_SHA256_DER successful::YES -moon:: cat /var/log/daemon.log::authentication of.*dave@strongswan.org.*with ECDSA_WITH_SHA384_DER successful::YES +moon:: cat /var/log/daemon.log::authentication of.*dave@strongswan.org.*with ECDSA-384 signature successful::YES carol::cat /var/log/daemon.log::authentication of.*moon.strongswan.org.*with ECDSA_WITH_SHA512_DER successful::YES -dave:: cat /var/log/daemon.log::authentication of.*moon.strongswan.org.*with ECDSA_WITH_SHA512_DER successful::YES +dave:: cat /var/log/daemon.log::authentication of.*moon.strongswan.org.*with ECDSA-521 signature successful::YES carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES diff --git a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf index 4a5e52dbd..d94b17950 100644 --- a/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf +++ b/testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf @@ -2,4 +2,5 @@ charon { load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown + signature_authentication = no } |