| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | testing: Globally define logging via syslog for charon-systemd | Tobias Brunner | 2017-11-15 | 3 | -14/+0 |
| | | | | | | | | We could make the same change for charon (actually setting it for charon in strongswan.conf.testing would work for charon-systemd too), however, there are dozens of test cases that currently set charondebug in ipsec.conf. | ||||
| * | testing: Converterd tnc to systemd | Andreas Steffen | 2017-11-11 | 5 | -23/+19 |
| | | |||||
| * | testing: Use TLS 1.2 in RADIUS test cases | Tobias Brunner | 2016-06-17 | 1 | -0/+3 |
| | | | | | | | | | | This took a while as in the OpenSSL package shipped with Debian and on which our FIPS-enabled package is based, the function SSL_export_keying_material(), which is used by FreeRADIUS to derive the MSK, did not use the correct digest to calculate the result when TLS 1.2 was used. This caused IKE to fail with "verification of AUTH payload with EAP MSK failed". The fix was only backported to jessie recently. | ||||
| * | testing: Add expect-connection calls for all tests and hosts | Tobias Brunner | 2016-06-16 | 1 | -0/+2 |
| | | | | | There are some exceptions (e.g. those that use auto=start or p2pnat). | ||||
| * | testing: Update test scenarios for Debian jessie | Tobias Brunner | 2016-06-16 | 1 | -4/+4 |
| | | | | | | | | The main difference is that ping now reports icmp_seq instead of icmp_req, so we match for icmp_.eq, which works with both releases. tcpdump now also reports port 4500 as ipsec-nat-t. | ||||
| * | testing: Include IKE port information in evaltests | Andreas Steffen | 2016-03-05 | 1 | -4/+4 |
| | | |||||
| * | testing: Converted tnc scenarios to swanctl | Andreas Steffen | 2015-12-11 | 17 | -107/+181 |
| | | |||||
| * | testing: Avoid delays with ping by using -W and -i options | Tobias Brunner | 2015-11-09 | 1 | -2/+2 |
| | | | | | | | With -W we reduce timeouts when we don't expect a response. With -i the interval between pings is reduced (mostly in case of auto=route where the first ping yields no reply). | ||||
| * | testing: Remove nearly all sleep calls from pretest and posttest scripts | Tobias Brunner | 2015-11-09 | 1 | -2/+2 |
| | | | | | | By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep. | ||||
| * | testing: Fix URL to TNC@FHH project in scenario descriptions | Tobias Brunner | 2015-05-05 | 1 | -1/+1 |
| | | |||||
| * | testing: Update test conditions because signature schemes are now logged | Tobias Brunner | 2015-03-04 | 1 | -2/+2 |
| | | | | | | RFC 7427 signature authentication is now used between strongSwan hosts by default, which causes the actual signature schemes to get logged. | ||||
| * | configure: Load fetcher plugins after crypto base plugins | Martin Willi | 2014-09-24 | 3 | -3/+3 |
| | | | | | | | | | | | Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl. | ||||
| * | Implemented PT-EAP protocol (RFC 7171) | Andreas Steffen | 2014-05-12 | 2 | -0/+14 |
| | | |||||
| * | 5.1.0 changes for test cases | Andreas Steffen | 2013-06-29 | 2 | -5/+3 |
| | | |||||
| * | cleaned up XML code in tnccs-11 plugin | Andreas Steffen | 2013-04-04 | 1 | -2/+2 |
| | | |||||
| * | Updated comments in test.conf of all tests | Tobias Brunner | 2013-01-17 | 1 | -4/+4 |
| | | |||||
| * | Renamed $UMLHOSTS to $VIRTHOSTS | Tobias Brunner | 2013-01-17 | 1 | -2/+2 |
| | | |||||
| * | converted all tnc iptables scenarios | Andreas Steffen | 2013-01-17 | 4 | -90/+38 |
| | | |||||
| * | Adapt test configurations | Reto Buerki | 2013-01-17 | 13 | -144/+12 |
| | | | | | Adapt test configurations to the new Debian-based system. | ||||
| * | make sending of IETF Assessment Result attributes configurable | Andreas Steffen | 2012-09-09 | 1 | -0/+1 |
| | | |||||
| * | removed plutostart parameter | Andreas Steffen | 2012-06-13 | 3 | -3/+0 |
| | | |||||
| * | load nonce plugin | Andreas Steffen | 2012-05-23 | 3 | -3/+3 |
| | | |||||
| * | upgraded tnc scenarios to 5.0.0 | Andreas Steffen | 2012-05-04 | 2 | -13/+12 |
| | | |||||
| * | edited description of tnc/tnccs-11-radius scenario | Andreas Steffen | 2012-03-14 | 1 | -1/+1 |
| | | |||||
| * | added tnc-tnccs plugin and removed xcbc plugin | Andreas Steffen | 2011-10-25 | 2 | -2/+2 |
| | | |||||
| * | Run scenarios without xcbc plugin | Andreas Steffen | 2011-10-17 | 3 | -3/+3 |
| | | |||||
| * | adapted tnc scenarios to new imcvs library path | Andreas Steffen | 2011-07-06 | 4 | -4/+12 |
| | | |||||
| * | restablish the lost links to the TNC@FHH project | Andreas Steffen | 2011-06-15 | 1 | -2/+3 |
| | | |||||
| * | fixed some descriptions | Andreas Steffen | 2011-06-15 | 1 | -4/+3 |
| | | |||||
| * | link to the TNC@FHH project | Andreas Steffen | 2011-06-03 | 1 | -2/+3 |
| | | |||||
| * | moved TNC scenarios to tnc folder | Andreas Steffen | 2011-06-03 | 30 | -0/+607 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |