tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	testing: make curve25519 the default DH group	Andreas Steffen	2016-11-14	2	-2/+2
\|
*	testing: Add expect-connection calls for all tests and hosts	Tobias Brunner	2016-06-16	1	-0/+1
\| \| \| \|	There are some exceptions (e.g. those that use auto=start or p2pnat).
*	testing: Update test scenarios for Debian jessie	Tobias Brunner	2016-06-16	1	-2/+2
\| \| \| \| \| \| \|	The main difference is that ping now reports icmp_seq instead of icmp_req, so we match for icmp_.eq, which works with both releases. tcpdump now also reports port 4500 as ipsec-nat-t.
*	testing: Speed up ifdown calls in ikev2/mobike scenarios	Tobias Brunner	2015-11-09	1	-0/+4
\| \| \| \| \| \|	ifdown calls bind's rndc, which tries to access TCP port 953 on lo. If these packets are dropped by the firewall we have to wait for the TCP connections to time out, which takes quite a while.
*	testing: Remove nearly all sleep calls from pretest and posttest scripts	Tobias Brunner	2015-11-09	1	-2/+1
\| \| \| \| \|	By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
*	configure: Load fetcher plugins after crypto base plugins	Martin Willi	2014-09-24	2	-2/+2
\| \| \| \| \| \| \| \| \| \|	Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl.
*	Updated comments in test.conf of all tests	Tobias Brunner	2013-01-17	1	-3/+3
\|
*	Renamed $UMLHOSTS to $VIRTHOSTS	Tobias Brunner	2013-01-17	1	-2/+2
\|
*	use iptables-restore in all ikev2 firewall scenarios	Andreas Steffen	2013-01-17	6	-177/+74
\|
*	Adapt test configurations	Reto Buerki	2013-01-17	5	-16/+11
\| \| \| \|	Adapt test configurations to the new Debian-based system.
*	removed plutostart parameter	Andreas Steffen	2012-06-13	2	-2/+0
\|
*	load nonce plugin	Andreas Steffen	2012-05-23	2	-2/+2
\|
*	upgraded ikev2 scenarios to 5.0.0	Andreas Steffen	2012-05-11	3	-12/+8
\|
*	all x509 based ikev2 scenarios require the revocation plugin	Andreas Steffen	2010-07-15	2	-2/+2
\|
*	Adding socket-default to the plugin list in all test cases.	Tobias Brunner	2010-03-09	2	-2/+2
\|
*	use static IPsec policy netfilter rules in MOBIKE scenarios	Andreas Steffen	2010-02-04	4	-3/+92
\|
*	tests load pem/pkcs1 plugins, pubkey plugin not needed anymore	Martin Willi	2009-08-26	2	-2/+2
\|
*	use static IPsec policy iptables rule for alice in mobike scenario	Andreas Steffen	2008-11-25	2	-1/+4
\|
*	loading updown plugin if required	Martin Willi	2008-10-16	2	-2/+2
\|
*	explicitly load kernel-netlink plugin in UML scenarios	Andreas Steffen	2008-10-07	2	-2/+2
\|
*	check migration of ESP sequence numbers in MOBIKE scenarios4.2.4	Andreas Steffen	2008-06-26	2	-3/+5
\|
*	define plugins to be loaded in strongswan.conf	Andreas Steffen	2008-05-28	2	-0/+10
\|
*	added three mobike scenarios	Andreas Steffen	2007-07-04	8	-0/+190