Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | testing: Enable systemd | Andreas Steffen | 2017-11-10 | 2 | -2/+3 |
| | |||||
* | testing: Make removal of SWID tags work with different releases | Tobias Brunner | 2017-08-16 | 1 | -2/+1 |
| | | | | The regid.2004-03.org.strongswan directory might not exist in new images. | ||||
* | testing: Move collector.db in tnc/tnccs-20-ev-pt-tls scenario to /etc/db.d | Tobias Brunner | 2017-08-07 | 2 | -4/+1 |
| | | | | | Also move initialization to the pretest script (it's way faster in the in-memory database). | ||||
* | testing: Added tnc/tnccs-20-ev-pt-tls scenario | Andreas Steffen | 2017-08-04 | 1 | -1/+5 |
| | |||||
* | testing: Adaptation to ISO 19770-2:2015 SWID standard | Andreas Steffen | 2017-07-08 | 1 | -0/+2 |
| | |||||
* | testing: Created ikev2/rw-eap-aka-sql-rsa scenario | Andreas Steffen | 2017-04-26 | 1 | -0/+1 |
| | | | | This test scenario tests the eap-simaka-sql plugin. | ||||
* | testing: Fix URL for kernel sources | Tobias Brunner | 2017-03-20 | 1 | -1/+1 |
| | |||||
* | testing: load-testconfig script loads config from source dir | Tobias Brunner | 2017-03-02 | 1 | -10/+109 |
| | | | | | | It now does replace the IPs too. This way it's easier to play around with a config (otherwise a do-tests run was required to build the config files in the build dir). | ||||
* | testing: strongTNC does not come with django.db any more | Andreas Steffen | 2016-12-17 | 1 | -1/+1 |
| | |||||
* | testing: Mount and serve testresults from the host | Tobias Brunner | 2016-08-29 | 1 | -0/+3 |
| | | | | | | | | This avoids having to copy testresults, makes results of cancelled runs browsable (runs may actually be followed live) and preserves old results when rebuilding guest images (e.g. when using the build-strongswan script). The number of consecutive test runs without any intermittent rebuild of the guest images is also not limited by the image size anymore. | ||||
* | testing: Serve images in testresults via mod_rewrite and not a symlink | Tobias Brunner | 2016-08-29 | 1 | -0/+1 |
| | |||||
* | testing: Added ikev2/rw-newhope-bliss scenario | Andreas Steffen | 2016-08-10 | 1 | -1/+2 |
| | |||||
* | testing: Remove obsolete openssl-fips recipe | Tobias Brunner | 2016-07-04 | 1 | -23/+0 |
| | | | | | | This was only required when we initially started and OpenSSL was built from sources, which was changed with b97dd59ba841 ("install FIPS-aware OpenSSL Debian packages"). | ||||
* | testing: Update FreeRADIUS to 2.2.8 | Tobias Brunner | 2016-06-17 | 2 | -3/+3 |
| | | | | | | | | | While this is not the latest 2.x release it is the latest in /old. Upgrading to 3.0 might be possible, not sure if the TNC-FHH patches could be easily updated, though. Upgrading to 3.1 will definitely not be possible directly as that version removes the EAP-TNC module. So we'd first have to get rid of the TNC-FHH stuff. | ||||
* | testing: Build hostapd from sources | Tobias Brunner | 2016-06-16 | 3 | -1/+78 |
| | | | | | | | | There is a bug (fix at [1]) in hostapd 2.1-2.3 that let it crash when used with the wired driver. The package in jessie (and sid) is affected, so we build it from sources (same, older, version as wpa_supplicant). [1] http://w1.fi/cgit/hostap/commit/?id=e9b783d58c23a7bb50b2f25bce7157f1f3 | ||||
* | testing: Update download URL for wpa_supplicant | Tobias Brunner | 2016-06-16 | 1 | -1/+1 |
| | |||||
* | testing: Correctly dis-/enable services with systemd | Tobias Brunner | 2016-06-16 | 2 | -4/+16 |
| | |||||
* | testing: Install packages like the FIPS-enabled OpenSSL from a custom apt repo | Tobias Brunner | 2016-06-16 | 2 | -14/+25 |
| | |||||
* | testing: Update base image to Debian jessie | Tobias Brunner | 2016-06-15 | 2 | -6/+25 |
| | | | | | | | | | | | | | Several packages got renamed/updated, libgcrypt was apparently installed by default previously. Since most libraries changed we have to completely rebuild all the tools installed in the root image. We currently don't provide a clean target in the recipes, and even if we did we'd have to track which base image we last built for. It's easier to just use a different build directory for each base image, at the cost of some additional disk space (if not manually cleaned). However, that's also the case when updating kernel or software versions. | ||||
* | testing: Update Apache config for newer Debian releases | Tobias Brunner | 2016-06-15 | 1 | -0/+1 |
| | | | | | | It is still compatible with the current release as the config in sites-available will be ignored, while conf-enabled does not exist and is not included in the main config. | ||||
* | testing: Add script to chroot into an image | Tobias Brunner | 2016-06-15 | 1 | -0/+67 |
| | | | | | If changes are made to the base or root image the images depending on these have to be rebuilt. | ||||
* | testing: Add a patch to tnc-fhh that avoids building the tncsim package | Tobias Brunner | 2016-06-15 | 2 | -1/+20 |
| | | | | This sub-package does not build on Debian jessie. | ||||
* | testing: Don't attempt to stop services when building base image | Tobias Brunner | 2016-06-15 | 1 | -2/+0 |
| | | | | | | Unlike `apt-get install` in a chroot debootstrap does not seem to start the services but stopping them might cause problems if they were running outside the chroot. | ||||
* | testing: -D and -u options in sfdisk are not supported any more | Andreas Steffen | 2016-04-26 | 1 | -1/+1 |
| | |||||
* | testing: swanctl is enabled by default | Andreas Steffen | 2015-12-18 | 1 | -1/+0 |
| | |||||
* | testing: Record strongSwan version when building from tarball | Tobias Brunner | 2015-11-09 | 1 | -0/+1 |
| | |||||
* | testing: Record strongSwan version when building from source tree | Tobias Brunner | 2015-11-09 | 1 | -0/+11 |
| | |||||
* | testing: Remove old SWID tags when building from repository | Tobias Brunner | 2015-11-09 | 1 | -0/+3 |
| | | | | This fixes the TNC-PDP scenarios. | ||||
* | testing: Add a base strongswan.conf file used by all hosts in all scenarios | Tobias Brunner | 2015-11-09 | 1 | -0/+1 |
| | | | | | | We will use this to set some defaults (e.g. timeouts to make testing negative tests quicker). We don't want these settings to show up in the configs of the actual scenarios though. | ||||
* | testing: BLISS CA uses SHA-3 in its CRL | Andreas Steffen | 2015-11-03 | 1 | -1/+2 |
| | |||||
* | testing: Update tkm to version 0.1.3 | Tobias Brunner | 2015-10-30 | 1 | -1/+1 |
| | | | | | | Adds XFRM state/policy flush when terminating which caused tests to fail due to the check added with 9086f060d35a ("testing: Let test scenarios fail if IPsec SAs or policies are not removed"). | ||||
* | testing: enable HCD IMC and IMV | Andreas Steffen | 2015-08-18 | 1 | -0/+2 |
| | |||||
* | testing: Suppress errors when checking for running hosts | Tobias Brunner | 2015-08-03 | 1 | -1/+1 |
| | | | | | If libvirt is not running virsh can't connect to it and will complain that the socket does not exist. | ||||
* | testing: Fix initial kernel build | Tobias Brunner | 2015-07-31 | 1 | -2/+2 |
| | | | | | | The directory does not exist yet if the kernel was never built. Fixes: a4a13d0be29b ("testing: Extract and patch each kernel version only once") | ||||
* | testing: Do not overwrite kernel configuration if it already exists | Martin Willi | 2015-07-12 | 1 | -1/+4 |
| | | | | | This allows us to do changes to the kernel configuration using menuconfig and friends, and update the kernel with make-testing. | ||||
* | testing: Extract and patch each kernel version only once | Martin Willi | 2015-07-12 | 1 | -8/+11 |
| | | | | | | This allows us to do modifications to the kernel tree and rebuild that kernel using make-testing. We can even have a git kernel tree in a directory to do kernel development. | ||||
* | testing: Build with --enable-chapoly | Martin Willi | 2015-07-12 | 1 | -0/+1 |
| | |||||
* | testing: Include iperf and htop in base image | Tobias Brunner | 2015-05-22 | 1 | -2/+2 |
| | |||||
* | testing: Don't check parent dir (and subdirs) when downloading OpenSSL packages | Tobias Brunner | 2015-05-21 | 1 | -1/+1 |
| | |||||
* | testing: Fix kernel download URL for kernel versions != 4.x | Tobias Brunner | 2015-05-19 | 1 | -1/+1 |
| | |||||
* | testing: Update alog to version 0.3.1 | Reto Buerki | 2015-05-05 | 1 | -1/+1 |
| | |||||
* | testing: Update tkm to version 0.1.2 | Reto Buerki | 2015-05-05 | 1 | -1/+1 |
| | |||||
* | testing: Update tkm-rpc to version 0.2 | Reto Buerki | 2015-05-05 | 1 | -1/+1 |
| | |||||
* | testing: Migration of KVM framework to Linux 4.x kernel | Andreas Steffen | 2015-04-25 | 1 | -1/+1 |
| | |||||
* | testing: Build forecast plugin | Martin Willi | 2015-02-20 | 1 | -0/+1 |
| | |||||
* | testing: Build strongSwan with the connmark plugin | Martin Willi | 2015-02-20 | 1 | -0/+1 |
| | |||||
* | testing: Install iptables-dev to guest images | Martin Willi | 2015-02-20 | 1 | -1/+1 |
| | |||||
* | Created ikev2/rw-ntru-bliss scenario | Andreas Steffen | 2014-11-29 | 1 | -1/+2 |
| | |||||
* | testing: Ensure no guest is running when modifying images | Tobias Brunner | 2014-10-10 | 5 | -0/+16 |
| | | | | | Sometimes guests are not stopped properly. If images are then modified they will be corrupted. | ||||
* | testing: Make TKM related build recipes future-proof | Tobias Brunner | 2014-10-07 | 6 | -24/+36 |
| | | | | | | | | The tkm scenarios recently failed due to a segmentation fault on my host because I had an old build of the tkm library already built in the build directory. Because the stamp file was not versioned the new release was never checked out or built and charon-tkm was linked against the old version causing a segmentation fault during key derivation. |