aboutsummaryrefslogtreecommitdiffstats
path: root/testing/tests/tnc/tnccs-20-mutual-eap
Commit message (Collapse)AuthorAgeFilesLines
* testing: Configure logging via syslog in strongswan.confTobias Brunner2017-11-151-2/+1
| | | | | Globally configure logging in strongswan.conf.testing and replace all charondebug statements with strongswan.conf settings.
* testing: Globally define logging via syslog for charon-systemdTobias Brunner2017-11-152-6/+0
| | | | | | | We could make the same change for charon (actually setting it for charon in strongswan.conf.testing would work for charon-systemd too), however, there are dozens of test cases that currently set charondebug in ipsec.conf.
* testing: Converterd tnc to systemdAndreas Steffen2017-11-114-21/+13
|
* testing: Add expect-connection calls for all tests and hostsTobias Brunner2016-06-161-2/+3
| | | | There are some exceptions (e.g. those that use auto=start or p2pnat).
* testing: Update test scenarios for Debian jessieTobias Brunner2016-06-161-1/+1
| | | | | | | The main difference is that ping now reports icmp_seq instead of icmp_req, so we match for icmp_.eq, which works with both releases. tcpdump now also reports port 4500 as ipsec-nat-t.
* testing: Include IKE port information in evaltestsAndreas Steffen2016-03-051-2/+2
|
* Fix of the mutual TNC measurement use caseAndreas Steffen2016-02-164-8/+11
| | | | | | | | | | | | | | | | | If the IKEv2 initiator acting as a TNC server receives invalid TNC measurements from the IKEv2 responder acting as a TNC clienti, the exchange of PB-TNC batches is continued until the IKEv2 responder acting as a TNC server has also finished its TNC measurements. In the past if these measurements in the other direction were correct the IKEv2 responder acting as EAP server declared the IKEv2 EAP authentication successful and the IPsec connection was established even though the TNC measurement verification on the EAP peer side failed. The fix adds an "allow" group membership on each endpoint if the corresponding TNC measurements of the peer are successful. By requiring a "allow" group membership in the IKEv2 connection definition the IPsec connection succeeds only if the TNC measurements on both sides are valid.
* testing: Converted tnc scenarios to swanctlAndreas Steffen2015-12-1110-61/+109
|
* testing: Remove nearly all sleep calls from pretest and posttest scriptsTobias Brunner2015-11-091-1/+1
| | | | | By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
* Added tnc/tnccs-20-pt-tls scenarioAndreas Steffen2015-03-2711-0/+153
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-29 23:17:14 +0000