Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | testing: Add swanctl/net2net-gw scenario | Tobias Brunner | 2016-04-09 | 11 | -0/+204 | |
| | ||||||
* | testing: List conntrack table on sun in ikev2/host2host-transport-connmark ↵ | Tobias Brunner | 2016-04-06 | 1 | -0/+1 | |
| | | | | scenario | |||||
* | testing: Updated updown scripts in libipsec scenarios to latest version | Tobias Brunner | 2016-03-23 | 11 | -0/+341 | |
| | ||||||
* | Updated swanctl/rw-psk-ikev1 scenario | Andreas Steffen | 2016-03-10 | 5 | -28/+36 | |
| | ||||||
* | testing: Add ikev2/reauth-mbb-revoked scenario | Tobias Brunner | 2016-03-10 | 9 | -0/+105 | |
| | ||||||
* | testing: Added swanctl/mult-auth-rsa-eap-sim-id scenario | Andreas Steffen | 2016-03-06 | 20 | -0/+335 | |
| | ||||||
* | testing: Added swanctl/xauth-rsa scenario | Andreas Steffen | 2016-03-06 | 11 | -0/+211 | |
| | ||||||
* | testing: attr-sql is a charon plugin5.4.0dr8 | Andreas Steffen | 2016-03-05 | 11 | -42/+10 | |
| | ||||||
* | testing: Added swanctl/rw-psk-ikev1 scenario | Andreas Steffen | 2016-03-05 | 11 | -0/+271 | |
| | ||||||
* | testing: Include IKE port information in evaltests | Andreas Steffen | 2016-03-05 | 68 | -238/+221 | |
| | ||||||
* | testing: Add ikev2/redirect-active scenario | Tobias Brunner | 2016-03-04 | 20 | -0/+322 | |
| | ||||||
* | testing: Added swanctl/protoport-range scenario | Andreas Steffen | 2016-03-04 | 9 | -0/+159 | |
| | ||||||
* | libhydra: Remove empty unused library | Tobias Brunner | 2016-03-03 | 11 | -11/+11 | |
| | ||||||
* | testing: Added swanctl/shunt-policies-nat-rw | Andreas Steffen | 2016-02-28 | 12 | -0/+231 | |
| | ||||||
* | testing: Some minor fixes in test scenarios | Andreas Steffen | 2016-02-28 | 2 | -0/+3 | |
| | ||||||
* | testing: Added swanctl/protoport-dual scenario | Andreas Steffen | 2016-02-28 | 9 | -0/+142 | |
| | ||||||
* | testing: converted af-alg scenarios to swanctl | Andreas Steffen | 2016-02-26 | 25 | -149/+198 | |
| | ||||||
* | testing: Use absolute path to the _updown script in SQL scenarios | Tobias Brunner | 2016-02-17 | 47 | -55/+55 | |
| | | | | | | /usr/local/sbin is not included in PATH set by the charon init script and since the ipsec script is obsolete when using swanctl it makes sense to change this anyway. | |||||
* | testing: Increased ping interval in ikev2/trap-any scenario | Andreas Steffen | 2016-02-16 | 1 | -5/+5 | |
| | ||||||
* | Corrected the description of the swanctl/dhcp-dynamic scenario | Andreas Steffen | 2016-02-16 | 1 | -1/+1 | |
| | ||||||
* | Fix of the mutual TNC measurement use case | Andreas Steffen | 2016-02-16 | 15 | -8/+214 | |
| | | | | | | | | | | | | | | | | | If the IKEv2 initiator acting as a TNC server receives invalid TNC measurements from the IKEv2 responder acting as a TNC clienti, the exchange of PB-TNC batches is continued until the IKEv2 responder acting as a TNC server has also finished its TNC measurements. In the past if these measurements in the other direction were correct the IKEv2 responder acting as EAP server declared the IKEv2 EAP authentication successful and the IPsec connection was established even though the TNC measurement verification on the EAP peer side failed. The fix adds an "allow" group membership on each endpoint if the corresponding TNC measurements of the peer are successful. By requiring a "allow" group membership in the IKEv2 connection definition the IPsec connection succeeds only if the TNC measurements on both sides are valid. | |||||
* | testing: Added swanctl/dhcp-dynamic scenario | Andreas Steffen | 2016-02-03 | 15 | -0/+279 | |
| | ||||||
* | ikev1: Log successful authentication with signature scheme | Thomas Egerer | 2016-02-01 | 3 | -6/+6 | |
| | | | | | | Output is now identical to that of the IKEv2 pubkey authenticator. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | |||||
* | testing: Don't attempt to start the daemon twice in ha/active-passive scenario | Tobias Brunner | 2016-02-01 | 1 | -1/+0 | |
| | ||||||
* | testing: Added swanctl/config-payload scenario | Andreas Steffen | 2016-01-14 | 12 | -0/+219 | |
| | ||||||
* | testing: Use include statement in swanctl/rw-pubkey-keyid scenario | Andreas Steffen | 2016-01-14 | 3 | -30/+19 | |
| | ||||||
* | testing: swanctl/rw-pubkey-anon uses anonymous public keys in remote access ↵ | Andreas Steffen | 2016-01-09 | 20 | -0/+297 | |
| | | | | scenario | |||||
* | testing: added swanctl scenarios net2net-pubkey, rw-pubkey-keyid and rw-dnssec | Andreas Steffen | 2016-01-09 | 55 | -0/+824 | |
| | ||||||
* | testing: Fixed description of swanctl/frags-iv4 scenario | Andreas Steffen | 2016-01-09 | 1 | -4/+4 | |
| | ||||||
* | testing: Change sql scenarios to swanctl | Andreas Steffen | 2016-01-03 | 172 | -379/+422 | |
| | ||||||
* | testing: Fix some IKEv1 scenarios after listing DH groups for CHILD_SAs | Tobias Brunner | 2015-12-21 | 4 | -8/+8 | |
| | ||||||
* | testing: Fixed description in swanctl/rw-ntru-bliss scenario | Andreas Steffen | 2015-12-18 | 1 | -1/+1 | |
| | ||||||
* | testing: Added swanctl/rw-ntru-bliss scenario | Andreas Steffen | 2015-12-17 | 20 | -0/+214 | |
| | ||||||
* | 128 bit default security strength requires 3072 bit prime DH group | Andreas Steffen | 2015-12-14 | 30 | -64/+64 | |
| | ||||||
* | testing: swanctl/rw-cert scenario tests password-protected RSA key | Andreas Steffen | 2015-12-12 | 2 | -0/+38 | |
| | ||||||
* | Upgraded IKE and ESP proposals in swanctl scenarios to consistent 128 bit ↵ | Andreas Steffen | 2015-12-12 | 46 | -237/+83 | |
| | | | | security | |||||
* | Use VICI 2.0 protocol version for certificate queries | Andreas Steffen | 2015-12-11 | 1 | -5/+5 | |
| | ||||||
* | testing: Converted tnc scenarios to swanctl | Andreas Steffen | 2015-12-11 | 386 | -2383/+5091 | |
| | ||||||
* | testing: Use expect-connection in swanctl scenarios | Tobias Brunner | 2015-12-11 | 13 | -15/+37 | |
| | | | | | Only in net2net-start do we have to use `sleep` to ensure the SA is up when the tests are running. | |||||
* | testing: Some more timing fixes | Andreas Steffen | 2015-12-01 | 2 | -2/+2 | |
| | ||||||
* | testing: Updated expired mars.strongswan.org certificate | Andreas Steffen | 2015-11-26 | 8 | -164/+164 | |
| | ||||||
* | testing: Error messages of curl plugin have changed5.3.4rc1 | Andreas Steffen | 2015-11-13 | 3 | -4/+4 | |
| | ||||||
* | testing: Fixed another timing issue | Andreas Steffen | 2015-11-13 | 1 | -1/+1 | |
| | ||||||
* | testing: Check for leases in swanctl/ip-pool scenario | Andreas Steffen | 2015-11-11 | 1 | -0/+2 | |
| | ||||||
* | testing: Fixed some more timing issues | Andreas Steffen | 2015-11-10 | 10 | -8/+10 | |
| | ||||||
* | testing: Reduce runtime of all tests that use SQLite databases by storing ↵ | Tobias Brunner | 2015-11-09 | 161 | -312/+319 | |
| | | | | them in ramfs | |||||
* | testing: tnc/tnccs-20-hcd-eap scenario does not use SWID IMV/strongTNC | Tobias Brunner | 2015-11-09 | 4 | -114/+1 | |
| | ||||||
* | testing: Improve runtime of TNC tests by storing the SQLite DB in ramfs | Tobias Brunner | 2015-11-09 | 14 | -9/+30 | |
| | | | | This saves about 50%-70% of the time needed for scenarios that use a DB. | |||||
* | testing: Fix test constraints in ikev2/rw-ntru-bliss scenario | Tobias Brunner | 2015-11-09 | 1 | -4/+4 | |
| | | | | | Changed with a88d958933ef ("Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemes"). | |||||
* | testing: Use sha3 plugin in ikev2/rw-cert scenario | Andreas Steffen | 2015-11-09 | 3 | -3/+3 | |
| |