Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Updated RFC3779 certificates5.2.2 | Andreas Steffen | 2014-12-28 | 32 | -309/+440 | |
| | ||||||
* | Updated BLISS CA certificate in ikev2/rw-ntru-bliss scenario5.2.2rc1 | Andreas Steffen | 2014-12-12 | 3 | -0/+0 | |
| | ||||||
* | Updated BLISS scenario keys and certificates to new format | Andreas Steffen | 2014-12-12 | 8 | -0/+0 | |
| | ||||||
* | Increased check size du to INITIAL_CONTACT notify | Andreas Steffen | 2014-11-29 | 1 | -1/+1 | |
| | ||||||
* | Renewed expired certificates | Andreas Steffen | 2014-11-29 | 19 | -171/+223 | |
| | ||||||
* | Created ikev2/rw-ntru-bliss scenario | Andreas Steffen | 2014-11-29 | 27 | -2/+193 | |
| | ||||||
* | testing: Update tkm/multiple-clients/evaltest.dat | Reto Buerki | 2014-10-31 | 1 | -2/+1 | |
| | | | | | | Since the CC context is now properly reset in the bus listener plugin, the second connection from host dave re-uses the first CC ID. Adjust the expect string on gateway sun accordingly. | |||||
* | Increased fragment size to 1400 in ipv6/net2net-ikev1 scenario5.2.1 | Andreas Steffen | 2014-10-18 | 2 | -2/+2 | |
| | ||||||
* | Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario | Andreas Steffen | 2014-10-18 | 4 | -2/+6 | |
| | ||||||
* | testing: Enable nat table for iptables on 3.17 kernels | Tobias Brunner | 2014-10-13 | 1 | -2/+5 | |
| | ||||||
* | testing: Lower batch size to demonstrated segmetation of TCG/SWID Tag ID ↵5.2.1rc1 | Andreas Steffen | 2014-10-11 | 1 | -2/+2 | |
| | | | | Inventory attribute | |||||
* | Added KVM config for 3.16 and 3.17 kernels | Andreas Steffen | 2014-10-11 | 2 | -0/+4229 | |
| | ||||||
* | testing: Ensure no guest is running when modifying images | Tobias Brunner | 2014-10-10 | 5 | -0/+16 | |
| | | | | | Sometimes guests are not stopped properly. If images are then modified they will be corrupted. | |||||
* | testing: Enable virtio console for guests | Tobias Brunner | 2014-10-10 | 9 | -16/+87 | |
| | | | | | | | | | | | This allows accessing the guests with `virsh console <name>`. Using a serial console would also be possible but our kernel configs have no serial drivers enabled, CONFIG_VIRTIO_CONSOLE is enabled though. So to avoid having to recompile the kernels let's do it this way, only requires rebuilding the guest images. References #729. | |||||
* | testing: Add ikev2/net2net-fragmentation scenario | Tobias Brunner | 2014-10-10 | 9 | -0/+116 | |
| | ||||||
* | testing: Update ikev1/net2net-fragmentation scenario | Tobias Brunner | 2014-10-10 | 1 | -2/+2 | |
| | ||||||
* | testing: Don't check for the actual number of SWID tags in PDP scenarios | Tobias Brunner | 2014-10-07 | 2 | -8/+8 | |
| | | | | | The number of SWID tags varies depending on the base image, but lets assume the number is in the hundreds. | |||||
* | testing: Make TNC scenarios agnostic to the actual Debian version | Tobias Brunner | 2014-10-07 | 18 | -45/+52 | |
| | | | | | The scenarios will work with new or old base images as long as the version in use is included as product in the master data (src/libimcv/imv/data.sql). | |||||
* | testing: Make TKM related build recipes future-proof | Tobias Brunner | 2014-10-07 | 6 | -24/+36 | |
| | | | | | | | | The tkm scenarios recently failed due to a segmentation fault on my host because I had an old build of the tkm library already built in the build directory. Because the stamp file was not versioned the new release was never checked out or built and charon-tkm was linked against the old version causing a segmentation fault during key derivation. | |||||
* | testing: Updated certificates and keys in sql scenarios | Andreas Steffen | 2014-10-06 | 35 | -121/+121 | |
| | ||||||
* | Updated revoked certificate in ikev2/ocsp-revoked scenario | Andreas Steffen | 2014-10-05 | 2 | -42/+42 | |
| | ||||||
* | The critical-extension scenarios need the old private keys | Andreas Steffen | 2014-10-05 | 4 | -0/+108 | |
| | ||||||
* | testing: Updated swanctl certificates and keys | Tobias Brunner | 2014-10-03 | 14 | -292/+292 | |
| | ||||||
* | testing: Wait a bit in swanctl scenarios before interacting with the daemon | Tobias Brunner | 2014-10-03 | 7 | -9/+16 | |
| | ||||||
* | testing: Actually build swanctl | Tobias Brunner | 2014-10-03 | 1 | -1/+2 | |
| | ||||||
* | testing: Make sure the whitelist plugin is ready before configuring it | Tobias Brunner | 2014-10-03 | 1 | -1/+3 | |
| | ||||||
* | testing: Update PKCS#12 containers | Tobias Brunner | 2014-10-03 | 4 | -0/+0 | |
| | ||||||
* | testing: Update PKCS#8 keys | Tobias Brunner | 2014-10-03 | 3 | -81/+81 | |
| | ||||||
* | testing: Update public keys in DNSSEC scenarios | Tobias Brunner | 2014-10-03 | 3 | -0/+0 | |
| | | | | | The tests are successful even if the public keys are not stored locally, but an additional DNS query is required to fetch them. | |||||
* | testing: Update public keys and certificates in DNS zone | Tobias Brunner | 2014-10-03 | 1 | -64/+60 | |
| | ||||||
* | testing: Update carols certificate in several test cases | Tobias Brunner | 2014-10-03 | 6 | -129/+129 | |
| | ||||||
* | testing: Add some notes about how to reissue attribute certificates | Martin Willi | 2014-10-03 | 3 | -0/+61 | |
| | ||||||
* | testing: Reissue attribute certificates for the new holder certificates | Martin Willi | 2014-10-03 | 8 | -72/+72 | |
| | | | | | | Due to the expired and reissued holder certificates of carol and dave, new attribute certificates are required to match the holder certificates serial in the ikev2/acert-{cached,fallback,inline} tests. | |||||
* | configure: Load fetcher plugins after crypto base plugins | Martin Willi | 2014-09-24 | 669 | -681/+676 | |
| | | | | | | | | | | Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl. | |||||
* | testing: Use multiple jobs to install strongSwan | Tobias Brunner | 2014-09-19 | 1 | -1/+1 | |
| | ||||||
* | testing: Add a script to build the current (or an arbitrary) source tree | Tobias Brunner | 2014-09-19 | 1 | -0/+65 | |
| | | | | | | | | | | | | | | This allows to (relatively) quickly (re-)build and install the current or an arbitrary strongSwan source tree within the root image. bindfs is used to bind mount the source directory using the regular user and group (only works if sudo is used to run the script) so that newly created files are not owned by root. As with building the root image in general the guests must not be running while executing this script. The guest images are automatically rebuilt after the root image has been updated so configuration files and other modifications in guests will be lost. | |||||
* | testing: Add packages to rebuild strongSwan from the repository | Tobias Brunner | 2014-09-19 | 1 | -1/+2 | |
| | ||||||
* | testing: Make strongSwan build recipe more configurable | Tobias Brunner | 2014-09-19 | 1 | -4/+13 | |
| | ||||||
* | testing: Update certs and keys in tkm tests | Reto Buerki | 2014-09-17 | 6 | -0/+0 | |
| | | | | References #705. | |||||
* | testing: Update x509-ada version to 0.1.1 | Reto Buerki | 2014-09-17 | 1 | -1/+1 | |
| | | | | Fixes #705. | |||||
* | Generated new test certificates | Andreas Steffen | 2014-08-28 | 76 | -351/+542 | |
| | ||||||
* | testing: Make sure the kernel exists when starting | Tobias Brunner | 2014-08-25 | 1 | -0/+1 | |
| | ||||||
* | Updated URL to swidGenerator in recipe5.2.0 | Andreas Steffen | 2014-07-09 | 1 | -1/+1 | |
| | ||||||
* | Update KVM test framework to 3.15 guest kernel5.2.0rc1 | Andreas Steffen | 2014-06-27 | 2 | -3/+2086 | |
| | ||||||
* | testing: Add sql/shunt-policies-nat-rw scenario | Tobias Brunner | 2014-06-26 | 18 | -0/+740 | |
| | ||||||
* | testing: Add pfkey/shunt-policies-nat-rw scenario | Tobias Brunner | 2014-06-26 | 13 | -0/+175 | |
| | ||||||
* | testing: Remove obsolete shunt-policies scenarios | Tobias Brunner | 2014-06-26 | 24 | -688/+0 | |
| | ||||||
* | Updated description of TNC scenarios concerning RFC 7171 PT-EAP support | Andreas Steffen | 2014-06-26 | 6 | -24/+30 | |
| | ||||||
* | Removed django.db from swid scenarios | Andreas Steffen | 2014-06-26 | 2 | -0/+0 | |
| | ||||||
* | testing: Add ikev2/shunt-policies-nat-rw scenario | Tobias Brunner | 2014-06-19 | 12 | -0/+171 | |
| |