Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | testing: Fix typo in p2pnat/behind-same-nat scenario | Tobias Brunner | 2015-08-21 | 1 | -2/+2 | |
| | ||||||
* | testing: Add missing sim_files file to ikev2/rw-eap-sim-radius scenario | Tobias Brunner | 2015-08-21 | 1 | -0/+3 | |
| | ||||||
* | testing: alice is RADIUS server in the ikev2/rw-eap-sim-radius scenario | Tobias Brunner | 2015-08-21 | 1 | -0/+4 | |
| | ||||||
* | testing: Print triplets.dat files of clients in EAP-SIM scenarios | Tobias Brunner | 2015-08-21 | 4 | -0/+7 | |
| | | | | References #1078. | |||||
* | testing: Add ikev2/trap-any scenario | Tobias Brunner | 2015-08-19 | 17 | -0/+181 | |
| | ||||||
* | Extend HCD attribute data for tnc/tnccs-20-hcd-eap scenario | Andreas Steffen | 2015-08-18 | 2 | -16/+45 | |
| | ||||||
* | Added reason string support to HCD IMV | Andreas Steffen | 2015-08-18 | 1 | -7/+10 | |
| | ||||||
* | Fixed patches format delimited by CR/LF | Andreas Steffen | 2015-08-18 | 4 | -50/+50 | |
| | ||||||
* | testing: Added tnc/tnccs-20-hcd-eap scenario | Andreas Steffen | 2015-08-18 | 24 | -0/+674 | |
| | ||||||
* | testing: Updated expired AAA server certificate | Andreas Steffen | 2015-08-04 | 4 | -84/+84 | |
| | ||||||
* | testing: Adapted ha/both-active scenario to new jhash values | Andreas Steffen | 2015-07-31 | 6 | -8/+11 | |
| | ||||||
* | testing: Regenerated BLISS certificates due to oracle changes | Andreas Steffen | 2015-07-27 | 6 | -0/+0 | |
| | ||||||
* | testing: Updated loop ca certificates | Andreas Steffen | 2015-07-22 | 2 | -17/+17 | |
| | ||||||
* | testing: Updated all swanctl scenarios and added some new ones | Andreas Steffen | 2015-07-22 | 102 | -104/+1744 | |
| | ||||||
* | tests: Introduced IPV6 flag in tests.conf | Andreas Steffen | 2015-07-21 | 19 | -0/+76 | |
| | ||||||
* | tests: Introduced SWANCTL flag in test.conf | Andreas Steffen | 2015-07-21 | 8 | -0/+32 | |
| | ||||||
* | tests: fixed evaltest of swanctl/rw-cert scenario | Andreas Steffen | 2015-07-21 | 1 | -2/+2 | |
| | ||||||
* | tests: fixed description of swanctl ip-pool scenarios | Andreas Steffen | 2015-07-21 | 2 | -9/+8 | |
| | ||||||
* | testing: use a decent PSK | Andreas Steffen | 2015-05-30 | 2 | -2/+2 | |
| | ||||||
* | testing: Added ha/active-passive scenario | Andreas Steffen | 2015-05-30 | 21 | -0/+441 | |
| | ||||||
* | testing: Fix URL to TNC@FHH project in scenario descriptions | Tobias Brunner | 2015-05-05 | 6 | -8/+8 | |
| | ||||||
* | testing: Update TKM assert strings | Reto Buerki | 2015-05-05 | 7 | -10/+10 | |
| | ||||||
* | testing: Updated carol's certificate from research CA and dave's certificate ↵5.3.1dr1 | Andreas Steffen | 2015-04-26 | 42 | -838/+837 | |
| | | | | from sales CA | |||||
* | testing: Wait for DH crypto tests to complete | Andreas Steffen | 2015-04-26 | 8 | -8/+8 | |
| | ||||||
* | imv_policy_manager: Added capability to execute an allow or block shell ↵ | Andreas Steffen | 2015-04-26 | 7 | -2/+24 | |
| | | | | command string | |||||
* | Added tnc/tnccs-20-fail-init and tnc/tnccs-20-fail-resp scenarios | Andreas Steffen | 2015-03-27 | 30 | -0/+404 | |
| | ||||||
* | Added tnc/tnccs-20-pt-tls scenario | Andreas Steffen | 2015-03-27 | 24 | -5/+114 | |
| | ||||||
* | testing: added tnc/tnccs-20-mutual scenario | Andreas Steffen | 2015-03-23 | 11 | -0/+151 | |
| | ||||||
* | testing: Remove obsolete leftnexthop option from configs | Tobias Brunner | 2015-03-12 | 6 | -6/+0 | |
| | ||||||
* | testing: Don't check for exact IKEv1 fragment size | Martin Willi | 2015-03-10 | 1 | -2/+2 | |
| | | | | | Similar to 7a9c0d51, the exact packet size depends on many factors we don't want to consider in this test case. | |||||
* | testing: Fix active/passive role description in ha/both-active test case | Martin Willi | 2015-03-10 | 1 | -2/+2 | |
| | ||||||
* | testing: Update modified updown scripts to the latest template | Tobias Brunner | 2015-03-06 | 14 | -2589/+993 | |
| | | | | | This avoids confusion and makes identifying the changes needed for each scenario easier. | |||||
* | use SHA512 for moon's BLISS signature | Andreas Steffen | 2015-03-04 | 2 | -2/+3 | |
| | ||||||
* | testing: Test classic public key authentication in ikev2/net2net-cert scenario | Tobias Brunner | 2015-03-04 | 2 | -0/+2 | |
| | ||||||
* | testing: Disable signature authentication on dave in ↵ | Tobias Brunner | 2015-03-04 | 2 | -2/+3 | |
| | | | | openssl-ikev2/ecdsa-certs scenario | |||||
* | testing: Don't check for exact IKEv2 fragment size | Tobias Brunner | 2015-03-04 | 1 | -2/+2 | |
| | | | | | Because SHA-256 is now used for signatures the size of the two IKE_AUTH messages changed. | |||||
* | testing: Update test conditions because signature schemes are now logged | Tobias Brunner | 2015-03-04 | 33 | -58/+58 | |
| | | | | | RFC 7427 signature authentication is now used between strongSwan hosts by default, which causes the actual signature schemes to get logged. | |||||
* | testing: Add ikev2/rw-sig-auth scenario | Tobias Brunner | 2015-03-04 | 12 | -0/+180 | |
| | ||||||
* | testing: Add ikev2/net2net-cert-sha2 scenario | Tobias Brunner | 2015-03-04 | 9 | -0/+104 | |
| | ||||||
* | Implemented improved BLISS-B signature algorithm | Andreas Steffen | 2015-02-25 | 3 | -0/+0 | |
| | ||||||
* | testing: Add a forecast test case | Martin Willi | 2015-02-20 | 11 | -0/+152 | |
| | ||||||
* | testing: Add a connmark plugin test | Martin Willi | 2015-02-20 | 9 | -0/+109 | |
| | | | | | | | | | | In this test two hosts establish a transport mode connection from behind moon. sun uses the connmark plugin to distinguish the flows. This is an example that shows how one can terminate L2TP/IPsec connections from two hosts behind the same NAT. For simplification of the test, we use an SSH connection instead, but this works for any connection initiated flow that conntrack can track. | |||||
* | testing: Update description and test evaluation of host2host-transport-nat | Martin Willi | 2015-02-20 | 3 | -9/+8 | |
| | | | | | | | | As we now reuse the reqid for identical SAs, the behavior changes for transport connections to multiple peers behind the same NAT. Instead of rejecting the SA, we now have two valid SAs active. For the reverse path, however, sun sends traffic always over the newer SA, resembling the behavior before we introduced explicit SA conflicts for different reqids. | |||||
* | testing: Be a little more flexible in testing for established CHILD_SA modes | Martin Willi | 2015-02-20 | 8 | -21/+21 | |
| | | | | | As we now print the reqid parameter in the CHILD_SA details, adapt the grep to still match the CHILD_SA mode and protocol. | |||||
* | testing: Add a test scenario for make-before-break reauth using a virtual IP | Martin Willi | 2015-02-20 | 9 | -0/+100 | |
| | ||||||
* | testing: Add a test scenario for make-before-break reauth without a virtual IP | Martin Willi | 2015-02-20 | 9 | -0/+97 | |
| | ||||||
* | testing: Add tkm xfrmproxy-expire test | Reto Buerki | 2015-02-20 | 11 | -0/+121 | |
| | | | | | | This test asserts that the handling of XFRM expire messages from the kernel are handled correctly by the xfrm-proxy and the Esa Event Service (EES) in charon-tkm. | |||||
* | testing: Assert ees acquire messages in xfrmproxy tests | Reto Buerki | 2015-02-20 | 2 | -0/+2 | |
| | ||||||
* | testing: Assert proper ESA deletion | Reto Buerki | 2015-02-20 | 1 | -0/+4 | |
| | | | | | Extend the tkm/host2host-initiator testcase by asserting proper ESA deletion after connection shutdown. | |||||
* | Updated RFC3779 certificates5.2.2 | Andreas Steffen | 2014-12-28 | 14 | -299/+299 | |
| |