aboutsummaryrefslogtreecommitdiffstats
path: root/testing/scripts
Commit message (Collapse)AuthorAgeFilesLines
* testing: Enable systemdAndreas Steffen2017-11-102-2/+3
|
* testing: Make removal of SWID tags work with different releasesTobias Brunner2017-08-161-2/+1
| | | | The regid.2004-03.org.strongswan directory might not exist in new images.
* testing: Move collector.db in tnc/tnccs-20-ev-pt-tls scenario to /etc/db.dTobias Brunner2017-08-072-4/+1
| | | | | Also move initialization to the pretest script (it's way faster in the in-memory database).
* testing: Added tnc/tnccs-20-ev-pt-tls scenarioAndreas Steffen2017-08-041-1/+5
|
* testing: Adaptation to ISO 19770-2:2015 SWID standardAndreas Steffen2017-07-081-0/+2
|
* testing: Created ikev2/rw-eap-aka-sql-rsa scenarioAndreas Steffen2017-04-261-0/+1
| | | | This test scenario tests the eap-simaka-sql plugin.
* testing: Fix URL for kernel sourcesTobias Brunner2017-03-201-1/+1
|
* testing: load-testconfig script loads config from source dirTobias Brunner2017-03-021-10/+109
| | | | | | It now does replace the IPs too. This way it's easier to play around with a config (otherwise a do-tests run was required to build the config files in the build dir).
* testing: strongTNC does not come with django.db any moreAndreas Steffen2016-12-171-1/+1
|
* testing: Mount and serve testresults from the hostTobias Brunner2016-08-291-0/+3
| | | | | | | | This avoids having to copy testresults, makes results of cancelled runs browsable (runs may actually be followed live) and preserves old results when rebuilding guest images (e.g. when using the build-strongswan script). The number of consecutive test runs without any intermittent rebuild of the guest images is also not limited by the image size anymore.
* testing: Serve images in testresults via mod_rewrite and not a symlinkTobias Brunner2016-08-291-0/+1
|
* testing: Added ikev2/rw-newhope-bliss scenarioAndreas Steffen2016-08-101-1/+2
|
* testing: Remove obsolete openssl-fips recipeTobias Brunner2016-07-041-23/+0
| | | | | | This was only required when we initially started and OpenSSL was built from sources, which was changed with b97dd59ba841 ("install FIPS-aware OpenSSL Debian packages").
* testing: Update FreeRADIUS to 2.2.8Tobias Brunner2016-06-172-3/+3
| | | | | | | | | While this is not the latest 2.x release it is the latest in /old. Upgrading to 3.0 might be possible, not sure if the TNC-FHH patches could be easily updated, though. Upgrading to 3.1 will definitely not be possible directly as that version removes the EAP-TNC module. So we'd first have to get rid of the TNC-FHH stuff.
* testing: Build hostapd from sourcesTobias Brunner2016-06-163-1/+78
| | | | | | | | There is a bug (fix at [1]) in hostapd 2.1-2.3 that let it crash when used with the wired driver. The package in jessie (and sid) is affected, so we build it from sources (same, older, version as wpa_supplicant). [1] http://w1.fi/cgit/hostap/commit/?id=e9b783d58c23a7bb50b2f25bce7157f1f3
* testing: Update download URL for wpa_supplicantTobias Brunner2016-06-161-1/+1
|
* testing: Correctly dis-/enable services with systemdTobias Brunner2016-06-162-4/+16
|
* testing: Install packages like the FIPS-enabled OpenSSL from a custom apt repoTobias Brunner2016-06-162-14/+25
|
* testing: Update base image to Debian jessieTobias Brunner2016-06-152-6/+25
| | | | | | | | | | | | | Several packages got renamed/updated, libgcrypt was apparently installed by default previously. Since most libraries changed we have to completely rebuild all the tools installed in the root image. We currently don't provide a clean target in the recipes, and even if we did we'd have to track which base image we last built for. It's easier to just use a different build directory for each base image, at the cost of some additional disk space (if not manually cleaned). However, that's also the case when updating kernel or software versions.
* testing: Update Apache config for newer Debian releasesTobias Brunner2016-06-151-0/+1
| | | | | | It is still compatible with the current release as the config in sites-available will be ignored, while conf-enabled does not exist and is not included in the main config.
* testing: Add script to chroot into an imageTobias Brunner2016-06-151-0/+67
| | | | | If changes are made to the base or root image the images depending on these have to be rebuilt.
* testing: Add a patch to tnc-fhh that avoids building the tncsim packageTobias Brunner2016-06-152-1/+20
| | | | This sub-package does not build on Debian jessie.
* testing: Don't attempt to stop services when building base imageTobias Brunner2016-06-151-2/+0
| | | | | | Unlike `apt-get install` in a chroot debootstrap does not seem to start the services but stopping them might cause problems if they were running outside the chroot.
* testing: -D and -u options in sfdisk are not supported any moreAndreas Steffen2016-04-261-1/+1
|
* testing: swanctl is enabled by defaultAndreas Steffen2015-12-181-1/+0
|
* testing: Record strongSwan version when building from tarballTobias Brunner2015-11-091-0/+1
|
* testing: Record strongSwan version when building from source treeTobias Brunner2015-11-091-0/+11
|
* testing: Remove old SWID tags when building from repositoryTobias Brunner2015-11-091-0/+3
| | | | This fixes the TNC-PDP scenarios.
* testing: Add a base strongswan.conf file used by all hosts in all scenariosTobias Brunner2015-11-091-0/+1
| | | | | | We will use this to set some defaults (e.g. timeouts to make testing negative tests quicker). We don't want these settings to show up in the configs of the actual scenarios though.
* testing: BLISS CA uses SHA-3 in its CRLAndreas Steffen2015-11-031-1/+2
|
* testing: Update tkm to version 0.1.3Tobias Brunner2015-10-301-1/+1
| | | | | | Adds XFRM state/policy flush when terminating which caused tests to fail due to the check added with 9086f060d35a ("testing: Let test scenarios fail if IPsec SAs or policies are not removed").
* testing: enable HCD IMC and IMVAndreas Steffen2015-08-181-0/+2
|
* testing: Suppress errors when checking for running hostsTobias Brunner2015-08-031-1/+1
| | | | | If libvirt is not running virsh can't connect to it and will complain that the socket does not exist.
* testing: Fix initial kernel buildTobias Brunner2015-07-311-2/+2
| | | | | | The directory does not exist yet if the kernel was never built. Fixes: a4a13d0be29b ("testing: Extract and patch each kernel version only once")
* testing: Do not overwrite kernel configuration if it already existsMartin Willi2015-07-121-1/+4
| | | | | This allows us to do changes to the kernel configuration using menuconfig and friends, and update the kernel with make-testing.
* testing: Extract and patch each kernel version only onceMartin Willi2015-07-121-8/+11
| | | | | | This allows us to do modifications to the kernel tree and rebuild that kernel using make-testing. We can even have a git kernel tree in a directory to do kernel development.
* testing: Build with --enable-chapolyMartin Willi2015-07-121-0/+1
|
* testing: Include iperf and htop in base imageTobias Brunner2015-05-221-2/+2
|
* testing: Don't check parent dir (and subdirs) when downloading OpenSSL packagesTobias Brunner2015-05-211-1/+1
|
* testing: Fix kernel download URL for kernel versions != 4.xTobias Brunner2015-05-191-1/+1
|
* testing: Update alog to version 0.3.1Reto Buerki2015-05-051-1/+1
|
* testing: Update tkm to version 0.1.2Reto Buerki2015-05-051-1/+1
|
* testing: Update tkm-rpc to version 0.2Reto Buerki2015-05-051-1/+1
|
* testing: Migration of KVM framework to Linux 4.x kernelAndreas Steffen2015-04-251-1/+1
|
* testing: Build forecast pluginMartin Willi2015-02-201-0/+1
|
* testing: Build strongSwan with the connmark pluginMartin Willi2015-02-201-0/+1
|
* testing: Install iptables-dev to guest imagesMartin Willi2015-02-201-1/+1
|
* Created ikev2/rw-ntru-bliss scenarioAndreas Steffen2014-11-291-1/+2
|
* testing: Ensure no guest is running when modifying imagesTobias Brunner2014-10-105-0/+16
| | | | | Sometimes guests are not stopped properly. If images are then modified they will be corrupted.
* testing: Make TKM related build recipes future-proofTobias Brunner2014-10-076-24/+36
| | | | | | | | The tkm scenarios recently failed due to a segmentation fault on my host because I had an old build of the tkm library already built in the build directory. Because the stamp file was not versioned the new release was never checked out or built and charon-tkm was linked against the old version causing a segmentation fault during key derivation.