tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	testing: make curve25519 the default DH group	Andreas Steffen	2016-11-14	8	-8/+12
\|
*	testing: Update test scenarios for Debian jessie	Tobias Brunner	2016-06-16	2	-6/+6
\| \| \| \| \| \| \|	The main difference is that ping now reports icmp_seq instead of icmp_req, so we match for icmp_.eq, which works with both releases. tcpdump now also reports port 4500 as ipsec-nat-t.
*	testing: Don't attempt to start the daemon twice in ha/active-passive scenario	Tobias Brunner	2016-02-01	1	-1/+0
\|
*	testing: Updated expired mars.strongswan.org certificate	Andreas Steffen	2015-11-26	8	-164/+164
\|
*	testing: Remove nearly all sleep calls from pretest and posttest scripts	Tobias Brunner	2015-11-09	2	-3/+5
\| \| \| \| \|	By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
*	testing: Adapt tests to retransmission settings and reduce DPD delay/timeout	Tobias Brunner	2015-11-09	1	-1/+1
\|
*	testing: Adapted ha/both-active scenario to new jhash values	Andreas Steffen	2015-07-31	6	-8/+11
\|
*	testing: use a decent PSK	Andreas Steffen	2015-05-30	2	-2/+2
\|
*	testing: Added ha/active-passive scenario	Andreas Steffen	2015-05-30	21	-0/+441
\|
*	testing: Fix active/passive role description in ha/both-active test case	Martin Willi	2015-03-10	1	-2/+2
\|
*	configure: Load fetcher plugins after crypto base plugins	Martin Willi	2014-09-24	4	-4/+4
\| \| \| \| \| \| \| \| \| \|	Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl.
*	testing: Run 'conntrack -F' before all test scenarios	Tobias Brunner	2014-04-02	1	-2/+0
\| \| \| \|	This prevents failures due to remaining conntrack entries.
*	Updated comments in test.conf of all tests	Tobias Brunner	2013-01-17	1	-3/+3
\|
*	Renamed $UMLHOSTS to $VIRTHOSTS	Tobias Brunner	2013-01-17	1	-2/+2
\|
*	converted ha/both-active iptables scenario	Andreas Steffen	2013-01-17	6	-216/+108
\|
*	Adapt test configurations	Reto Buerki	2013-01-17	3	-4/+4
\| \| \| \|	Adapt test configurations to the new Debian-based system.
*	removed plutostart parameter	Andreas Steffen	2012-06-13	4	-4/+0
\|
*	load nonce plugin	Andreas Steffen	2012-05-23	4	-4/+4
\|
*	upgraded ha scenario for 5.0.0	Andreas Steffen	2012-05-06	5	-17/+9
\|
*	alice is now master in the ha/both-active scenario	Andreas Steffen	2011-07-14	1	-6/+6
\|
*	active and passive IKEv2 hosts changed again	Andreas Steffen	2011-06-03	1	-7/+7
\|
*	with the 2.6.38 kernel alice is preferred for handling the IKE connections	Andreas Steffen	2011-04-08	1	-7/+7
\|
*	fixed iptables script of gateway alice	Andreas Steffen	2010-11-20	1	-6/+6
\|
*	removed copy of strongswancCert.pem	Andreas Steffen	2010-11-20	1	-22/+0
\|
*	added ha/both-active scenario	Andreas Steffen	2010-11-20	22	-0/+555