aboutsummaryrefslogtreecommitdiffstats
path: root/testing/tests/tnc/tnccs-20-pdp-pt-tls
Commit message (Collapse)AuthorAgeFilesLines
* testing: Globally define logging via syslog for charon-systemdTobias Brunner2017-11-151-5/+2
| | | | | | | We could make the same change for charon (actually setting it for charon in strongswan.conf.testing would work for charon-systemd too), however, there are dozens of test cases that currently set charondebug in ipsec.conf.
* testing: Converterd tnc to systemdAndreas Steffen2017-11-114-9/+9
|
* testing: Fixed the path of pt-tls-clientAndreas Steffen2017-07-181-2/+2
|
* testing: Adaptation to ISO 19770-2:2015 SWID standardAndreas Steffen2017-07-081-1/+1
|
* testing: Fix ALLOWED_HOSTS in strongTNC settings.iniTobias Brunner2017-02-161-1/+1
|
* testing: strongTNC does not come with django.db any moreAndreas Steffen2016-12-171-1/+1
|
* testing: Start charon before Apache in tnc/tnccs-20-pdp-pt-tlsTobias Brunner2016-06-211-1/+1
| | | | | | | | | | | | | The change in c423d0e8a124 ("testing: Fix race in tnc/tnccs-20-pdp-pt-tls scenario") is not really ideal as now the vici plugin might not yet be ready when `swanctl --load-creds` is called. Perhaps starting charon before Apache causes enough delay. Once we switch to charon-systemd this isn't a problem anymore as starting the unit will block until everything is up and ready. Also, the individual swanctl calls will be redundant as the default service unit calls --load-all. But start scripts do run before charon-systemd signals that the daemon is ready, so using these would work too then.
* testing: Fix race in tnc/tnccs-20-pdp-pt-tls scenarioTobias Brunner2016-06-172-3/+1
| | | | | | | | | | aacf84d837e7 ("testing: Add expect-connection calls for all tests and hosts") removed the expect-connection call for the non-existing aaa connection. However, because the credentials were loaded asynchronously via start-script the clients might have been connecting when the secrets were not yet loaded. As `swanctl --load-creds` is a synchronous call this change avoids that issue without having to add a sleep or failing expect-connection call.
* testing: Fix firewall rule on alice in tnc/tnccs-20-pdp-pt-tls scenarioTobias Brunner2016-06-171-2/+2
|
* testing: Add expect-connection calls for all tests and hostsTobias Brunner2016-06-161-1/+0
| | | | There are some exceptions (e.g. those that use auto=start or p2pnat).
* testing: Update Apache config for newer Debian releasesTobias Brunner2016-06-152-26/+32
| | | | | | It is still compatible with the current release as the config in sites-available will be ignored, while conf-enabled does not exist and is not included in the main config.
* testing: Use absolute path of imv_policy_managerAndreas Steffen2016-04-261-1/+1
|
* testing: Some minor fixes in test scenariosAndreas Steffen2016-02-281-0/+2
|
* testing: Converted tnc scenarios to swanctlAndreas Steffen2015-12-1120-40/+36
|
* testing: Reduce runtime of all tests that use SQLite databases by storing ↵Tobias Brunner2015-11-095-11/+6
| | | | them in ramfs
* testing: Improve runtime of TNC tests by storing the SQLite DB in ramfsTobias Brunner2015-11-092-2/+5
| | | | This saves about 50%-70% of the time needed for scenarios that use a DB.
* testing: Remove nearly all sleep calls from pretest and posttest scriptsTobias Brunner2015-11-091-2/+1
| | | | | By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
* testing: Updated expired AAA server certificateAndreas Steffen2015-08-042-42/+42
|
* imv_policy_manager: Added capability to execute an allow or block shell ↵Andreas Steffen2015-04-267-2/+24
| | | | command string
* testing: Don't check for the actual number of SWID tags in PDP scenariosTobias Brunner2014-10-071-4/+4
| | | | | The number of SWID tags varies depending on the base image, but lets assume the number is in the hundreds.
* testing: Make TNC scenarios agnostic to the actual Debian versionTobias Brunner2014-10-072-7/+8
| | | | | The scenarios will work with new or old base images as long as the version in use is included as product in the master data (src/libimcv/imv/data.sql).
* configure: Load fetcher plugins after crypto base pluginsMartin Willi2014-09-243-4/+4
| | | | | | | | | | Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl.
* Removed django.db from swid scenariosAndreas Steffen2014-06-261-0/+0
|
* Updated strongTNC configurationAndreas Steffen2014-06-113-4/+7
|
* Test SWID REST API ins tnc/tnccs-20-pdp scenariosAndreas Steffen2014-05-3112-53/+86
|
* Migration from Debian 7.4 to 7.5Andreas Steffen2014-05-311-2/+2
|
* Updated SWID scenariosAndreas Steffen2014-04-153-2/+5
|
* Implemented segmented SWID tag attributes on IMV sideAndreas Steffen2014-04-1527-0/+388