strongswan.git
6 years agoDrop cecho functions
Reto Buerki [Fri, 7 Dec 2012 11:33:31 +0000 (12:33 +0100)]
Drop cecho functions

6 years agoUse log_action function in do-tests script
Reto Buerki [Fri, 7 Dec 2012 11:31:11 +0000 (12:31 +0100)]
Use log_action function in do-tests script

6 years agoRemove executable bit from testing.conf
Reto Buerki [Fri, 7 Dec 2012 11:00:35 +0000 (12:00 +0100)]
Remove executable bit from testing.conf

6 years agoUse qemu/KVM virtualization instead of UML
Reto Buerki [Fri, 7 Dec 2012 10:48:48 +0000 (11:48 +0100)]
Use qemu/KVM virtualization instead of UML

Guest and network configuration is setup using the libvirt
virtualization API. The [start|stop]_testing scripts have been updated
accordingly.

qemu/KVM does not currently support a hostfs, so the shared build tree
mount has been dropped for now.

6 years agoRename build-umlkernel script to build-guestkernel
Reto Buerki [Fri, 7 Dec 2012 10:33:27 +0000 (11:33 +0100)]
Rename build-umlkernel script to build-guestkernel

6 years agoMove ROOTFSDIR declaration to testing.conf
Reto Buerki [Fri, 7 Dec 2012 08:41:38 +0000 (09:41 +0100)]
Move ROOTFSDIR declaration to testing.conf

6 years agoPrefix all recipes with a number
Reto Buerki [Thu, 6 Dec 2012 18:43:20 +0000 (19:43 +0100)]
Prefix all recipes with a number

6 years agoUse do_on_exit() in build scripts for cleanup
Reto Buerki [Thu, 6 Dec 2012 18:26:48 +0000 (19:26 +0100)]
Use do_on_exit() in build scripts for cleanup

6 years agoProvide do_on_exit() function
Reto Buerki [Thu, 6 Dec 2012 18:17:30 +0000 (19:17 +0100)]
Provide do_on_exit() function

This function allows to register an exit action which executes when the
calling script terminates.

6 years agoImport testing.conf file in function.sh
Reto Buerki [Thu, 6 Dec 2012 18:03:45 +0000 (19:03 +0100)]
Import testing.conf file in function.sh

This is needed to have access to $LOGFILE and possibly other config
settings.

6 years agoDrop build-hostconfig script
Reto Buerki [Thu, 6 Dec 2012 17:26:39 +0000 (18:26 +0100)]
Drop build-hostconfig script

Use processed host configurations directly instead.

6 years agoUpdate build-umlhostfs script to new log format
Reto Buerki [Thu, 6 Dec 2012 16:42:51 +0000 (17:42 +0100)]
Update build-umlhostfs script to new log format

6 years agoUpdate build-umlrootfs script to new log format
Reto Buerki [Thu, 6 Dec 2012 16:32:44 +0000 (17:32 +0100)]
Update build-umlrootfs script to new log format

6 years agoUpdate build-umlkernel script to new log format
Reto Buerki [Thu, 6 Dec 2012 16:02:38 +0000 (17:02 +0100)]
Update build-umlkernel script to new log format

6 years agoUse red color in die() function
Reto Buerki [Thu, 6 Dec 2012 16:00:15 +0000 (17:00 +0100)]
Use red color in die() function

This is the function where red color SHOULD be used.

6 years agoMove execute wrappers to function.sh file
Reto Buerki [Thu, 6 Dec 2012 15:58:37 +0000 (16:58 +0100)]
Move execute wrappers to function.sh file

6 years agoUse log_action, log_status in build-baseimage script
Reto Buerki [Thu, 6 Dec 2012 15:25:13 +0000 (16:25 +0100)]
Use log_action, log_status in build-baseimage script

6 years agoProvide log_action and log_status functions
Reto Buerki [Thu, 6 Dec 2012 14:48:14 +0000 (15:48 +0100)]
Provide log_action and log_status functions

These two functions are used to log action descriptions and the
corresponding command exit status in a consistent way.

6 years agoAdd chroot() helper function
Reto Buerki [Thu, 6 Dec 2012 13:39:51 +0000 (14:39 +0100)]
Add chroot() helper function

6 years agoUse execute wrapper to disable root password
Reto Buerki [Thu, 6 Dec 2012 10:54:27 +0000 (11:54 +0100)]
Use execute wrapper to disable root password

6 years agoSimplify test starting and stopping logic
Reto Buerki [Thu, 6 Dec 2012 10:27:06 +0000 (11:27 +0100)]
Simplify test starting and stopping logic

Reduce the coupling of the different scripts.

make-testing  : Build the testing environment
start-testing : Start switches and guests
do-tests      : Run tests
stop-testing  : Stop switches and guests

6 years agoUse key(and password-)less SSH authentication
Tobias Brunner [Wed, 5 Dec 2012 17:53:20 +0000 (18:53 +0100)]
Use key(and password-)less SSH authentication

6 years agoAdjust strongSwan version handling in HTML output
Reto Buerki [Tue, 4 Dec 2012 17:46:21 +0000 (18:46 +0100)]
Adjust strongSwan version handling in HTML output

6 years agoPatch AVP parsing in EAP-TTLS module in FreeRADIUS
Tobias Brunner [Tue, 4 Dec 2012 17:43:30 +0000 (18:43 +0100)]
Patch AVP parsing in EAP-TTLS module in FreeRADIUS

6 years agoAdd recipes for libtnc and TNC@FHH
Tobias Brunner [Tue, 4 Dec 2012 17:39:00 +0000 (18:39 +0100)]
Add recipes for libtnc and TNC@FHH

6 years agoCopy and display host specific tcpdump.log files
Tobias Brunner [Wed, 28 Nov 2012 15:19:48 +0000 (16:19 +0100)]
Copy and display host specific tcpdump.log files

6 years agoDrop SHAREDTREE in favor of mounting the compile dir
Tobias Brunner [Wed, 28 Nov 2012 15:10:22 +0000 (16:10 +0100)]
Drop SHAREDTREE in favor of mounting the compile dir

6 years agoPatch EAP-SIM module in FreeRADIUS
Tobias Brunner [Wed, 28 Nov 2012 15:07:42 +0000 (16:07 +0100)]
Patch EAP-SIM module in FreeRADIUS

6 years agoDon't generate do-tests
Tobias Brunner [Wed, 28 Nov 2012 15:03:52 +0000 (16:03 +0100)]
Don't generate do-tests

6 years agoAdapt test configurations
Reto Buerki [Mon, 19 Nov 2012 16:30:58 +0000 (17:30 +0100)]
Adapt test configurations

Adapt test configurations to the new Debian-based system.

6 years agoAdapt host configuration
Reto Buerki [Mon, 19 Nov 2012 16:17:38 +0000 (17:17 +0100)]
Adapt host configuration

Adapt the configuration of the test hosts to the new Debian-based
system.

6 years agoAdd recipe for iptables
Reto Buerki [Wed, 21 Nov 2012 17:42:57 +0000 (18:42 +0100)]
Add recipe for iptables

6 years agoAdd freeradius recipe
Reto Buerki [Wed, 21 Nov 2012 17:39:08 +0000 (18:39 +0100)]
Add freeradius recipe

6 years agoFactor out building of strongswan into own Makefile
Reto Buerki [Wed, 21 Nov 2012 17:08:24 +0000 (18:08 +0100)]
Factor out building of strongswan into own Makefile

Small Makefiles (recipes) are used to install software from source into
the root UML image.

6 years agotesting: Switch to Debian based guest images
Reto Buerki [Mon, 19 Nov 2012 09:43:42 +0000 (10:43 +0100)]
testing: Switch to Debian based guest images

Instead of extracting a downloaded Gentoo filesystem tree into a file
containing a reiserfs filesystem, create an ext3 filesystem inside a
sparse file, mount it and debootstrap an up-to-date Debian system. Use
this image as base for all UML guest images.

Also, drop support for the various consoles and use xterm
unconditionally.

6 years agoFix deadlock in IMC/IMV managers
Tobias Brunner [Tue, 18 Dec 2012 14:50:08 +0000 (15:50 +0100)]
Fix deadlock in IMC/IMV managers

Since reserve_id() might be called from e.g. notify_connection_change()
using a write lock will not work as this can't be acquired while holding
the read lock.

Also, with the previous code it was possible that two IMCs/IMVs added by
two threads at the same time would get the same ID assigned.

6 years agoProperly select IMC/IMV according to given primary ID in reserve_id()
Tobias Brunner [Tue, 18 Dec 2012 14:49:21 +0000 (15:49 +0100)]
Properly select IMC/IMV according to given primary ID in reserve_id()

6 years agoUse a ./configure check to detect pthread spinlock availability
Martin Willi [Thu, 13 Dec 2012 10:22:40 +0000 (11:22 +0100)]
Use a ./configure check to detect pthread spinlock availability

_POSIX_SPIN_LOCKS does not seem to be defined correctly on all
systems (Debian libc 2.3.6). Fixes #262.

6 years agokernel-netlinks get_interface() considers virtual IPs, too
Martin Willi [Mon, 17 Dec 2012 13:23:44 +0000 (14:23 +0100)]
kernel-netlinks get_interface() considers virtual IPs, too

When using load-tester, we can install tunnel outer addresses on
demand. As these are installed as "virtual", we have to consider
virtual IPs in the get_interface() lookup to install "real" virtual
IPs to these dynamic external addresses.

6 years agoIf load-tester requests a virtual IP, use a dynamic local traffic selector
Martin Willi [Mon, 17 Dec 2012 13:22:25 +0000 (14:22 +0100)]
If load-tester requests a virtual IP, use a dynamic local traffic selector

6 years agoAdd missing CHILD_SA specific proposal keyword in conftest README
Martin Willi [Mon, 17 Dec 2012 09:58:47 +0000 (10:58 +0100)]
Add missing CHILD_SA specific proposal keyword in conftest README

6 years agoFix traffic selectors also as initiator in case of transport mode over NAT
Tobias Brunner [Thu, 13 Dec 2012 14:25:59 +0000 (15:25 +0100)]
Fix traffic selectors also as initiator in case of transport mode over NAT

6 years agoFix debug output if responder selected invalid traffic selectors during QM
Tobias Brunner [Thu, 13 Dec 2012 14:25:03 +0000 (15:25 +0100)]
Fix debug output if responder selected invalid traffic selectors during QM

6 years agofixed memory leak in TPM Version Info
Andreas Steffen [Thu, 13 Dec 2012 10:10:24 +0000 (11:10 +0100)]
fixed memory leak in TPM Version Info

6 years agoFixed reading of configs in conftest utility
Tobias Brunner [Thu, 13 Dec 2012 10:08:32 +0000 (11:08 +0100)]
Fixed reading of configs in conftest utility

6 years agoMigrate RADIUS accounting state while IKE_SA unique id changes during rekey
Martin Willi [Tue, 11 Dec 2012 09:40:59 +0000 (10:40 +0100)]
Migrate RADIUS accounting state while IKE_SA unique id changes during rekey

6 years agoMigrate cache and fire lookip events for unique_id change during IKE_SA rekey
Martin Willi [Mon, 10 Dec 2012 16:04:26 +0000 (17:04 +0100)]
Migrate cache and fire lookip events for unique_id change during IKE_SA rekey

6 years agoInherit virtual IP and attributes from old to new, not from new to old
Martin Willi [Mon, 10 Dec 2012 16:01:00 +0000 (17:01 +0100)]
Inherit virtual IP and attributes from old to new, not from new to old

6 years agoAvoid that ruby 1.9 redefines snprintf(3) etc.
Tobias Brunner [Mon, 10 Dec 2012 10:41:37 +0000 (11:41 +0100)]
Avoid that ruby 1.9 redefines snprintf(3) etc.

Otherwise our custom printf specifiers won't work.

6 years agoProperly initialize linked list when enumerating interface addresses
Tobias Brunner [Mon, 10 Dec 2012 08:46:51 +0000 (09:46 +0100)]
Properly initialize linked list when enumerating interface addresses

6 years agorb_cvar_set() takes three arguments in Ruby 1.9
Tobias Brunner [Mon, 10 Dec 2012 08:41:32 +0000 (09:41 +0100)]
rb_cvar_set() takes three arguments in Ruby 1.9

6 years agoUse rb_errinfo() instead of ruby_errinfo for Ruby 1.9
Tobias Brunner [Thu, 8 Nov 2012 18:24:04 +0000 (19:24 +0100)]
Use rb_errinfo() instead of ruby_errinfo for Ruby 1.9

6 years agoUse proper Ruby library depending on the available version
Tobias Brunner [Thu, 8 Nov 2012 18:23:05 +0000 (19:23 +0100)]
Use proper Ruby library depending on the available version

6 years agoFixed search for ruby.h in ./configure for newer Ruby releases
Tobias Brunner [Thu, 8 Nov 2012 15:20:41 +0000 (16:20 +0100)]
Fixed search for ruby.h in ./configure for newer Ruby releases

6 years agoadd dlcose strongswan.conf option to tnc-imc/tnc-imv plugins
Andreas Steffen [Sun, 9 Dec 2012 18:40:13 +0000 (19:40 +0100)]
add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins

6 years agooptionally skip dlclose() of IMCs/IMVs in order to track memory leaks
Andreas Steffen [Sun, 9 Dec 2012 18:35:23 +0000 (19:35 +0100)]
optionally skip dlclose() of IMCs/IMVs in order to track memory leaks

6 years agofixed memory leak in error case
Andreas Steffen [Sun, 9 Dec 2012 16:07:51 +0000 (17:07 +0100)]
fixed memory leak in error case

6 years agonewer releases of dpkg-query does not have PackageSpec
Andreas Steffen [Sun, 9 Dec 2012 12:55:22 +0000 (13:55 +0100)]
newer releases of dpkg-query does not have PackageSpec

6 years agoignore ports of the 127.0.1.1 internal system address
Andreas Steffen [Sun, 9 Dec 2012 12:26:34 +0000 (13:26 +0100)]
ignore ports of the 127.0.1.1 internal system address

6 years agoProperly trigger ike_updown() event if IKEv1 DPD times out
Martin Willi [Tue, 4 Dec 2012 10:11:50 +0000 (11:11 +0100)]
Properly trigger ike_updown() event if IKEv1 DPD times out

Fixes missing RADIUS Accounting Stop, #257.

6 years agoReplace optionsfrom LGPLv2 header by a GPLv2
Martin Willi [Fri, 30 Nov 2012 16:24:28 +0000 (17:24 +0100)]
Replace optionsfrom LGPLv2 header by a GPLv2

6 years agoFix GPL license header to properly "sed" it
Martin Willi [Fri, 30 Nov 2012 16:15:37 +0000 (17:15 +0100)]
Fix GPL license header to properly "sed" it

6 years agoAdd locking to IMC/IMV managers to add/remove IMC/IMVs on the fly
Martin Willi [Tue, 20 Nov 2012 13:34:00 +0000 (14:34 +0100)]
Add locking to IMC/IMV managers to add/remove IMC/IMVs on the fly

6 years agoReuse generic constructor in IMV/IMC message
Martin Willi [Mon, 19 Nov 2012 15:18:50 +0000 (16:18 +0100)]
Reuse generic constructor in IMV/IMC message

6 years agoAdd getters for the raw encoding in IMV/IMC messages
Martin Willi [Mon, 19 Nov 2012 15:11:59 +0000 (16:11 +0100)]
Add getters for the raw encoding in IMV/IMC messages

6 years agoClean up whitespaces in IMC/IMV messages
Martin Willi [Mon, 19 Nov 2012 15:11:27 +0000 (16:11 +0100)]
Clean up whitespaces in IMC/IMV messages

6 years agoDon't remove IETF standard errors while parsing IMC/IMV messages
Martin Willi [Mon, 19 Nov 2012 14:03:45 +0000 (15:03 +0100)]
Don't remove IETF standard errors while parsing IMC/IMV messages

6 years agoRemove unused get_vendor_id() method in IETF error IF-M attributes
Martin Willi [Mon, 19 Nov 2012 13:15:11 +0000 (14:15 +0100)]
Remove unused get_vendor_id() method in IETF error IF-M attributes

6 years agoCheck os_version when reading release file, os_name is not set for Debian
Martin Willi [Mon, 19 Nov 2012 12:26:05 +0000 (13:26 +0100)]
Check os_version when reading release file, os_name is not set for Debian

6 years agoDon't unload IMC/IMV managers if no IMC/IMVs loaded from tnc_config
Martin Willi [Thu, 15 Nov 2012 10:51:21 +0000 (11:51 +0100)]
Don't unload IMC/IMV managers if no IMC/IMVs loaded from tnc_config

6 years agoAdd wrappers to IMC/IMV managers loading IMC/IMVs from function pointers
Martin Willi [Thu, 15 Nov 2012 08:50:20 +0000 (09:50 +0100)]
Add wrappers to IMC/IMV managers loading IMC/IMVs from function pointers

6 years agoIf adding an IMC/IMV fails, terminate() it only if it has been initialize()d
Martin Willi [Wed, 14 Nov 2012 15:17:57 +0000 (16:17 +0100)]
If adding an IMC/IMV fails, terminate() it only if it has been initialize()d

6 years agoAdd an IMV constructor taking a set of custom TNC_IMV functions
Martin Willi [Wed, 14 Nov 2012 11:30:19 +0000 (12:30 +0100)]
Add an IMV constructor taking a set of custom TNC_IMV functions

6 years agoAdd an IMC constructor taking a set of custom TNC_IMC functions
Martin Willi [Wed, 14 Nov 2012 11:17:10 +0000 (12:17 +0100)]
Add an IMC constructor taking a set of custom TNC_IMC functions

6 years agoClean up memory management when loading IMC/IMVs from files
Martin Willi [Wed, 14 Nov 2012 10:17:36 +0000 (11:17 +0100)]
Clean up memory management when loading IMC/IMVs from files

6 years agoFix passing of IKE_SA unique_id over lookip socket
Martin Willi [Fri, 30 Nov 2012 12:36:38 +0000 (13:36 +0100)]
Fix passing of IKE_SA unique_id over lookip socket

6 years agoattest displays dates either in local time or UTC
Andreas Steffen [Fri, 30 Nov 2012 08:55:38 +0000 (09:55 +0100)]
attest displays dates either in local time or UTC

6 years agostore detected improper OS settings in database
Andreas Steffen [Thu, 29 Nov 2012 23:12:38 +0000 (00:12 +0100)]
store detected improper OS settings in database

6 years agoAdd load-tester NEWS
Martin Willi [Thu, 29 Nov 2012 09:29:17 +0000 (10:29 +0100)]
Add load-tester NEWS

6 years agoStore load-tester address leases in a hashtable for fast removal
Martin Willi [Mon, 12 Nov 2012 15:24:24 +0000 (16:24 +0100)]
Store load-tester address leases in a hashtable for fast removal

6 years agoConsolidated %any(6) host_t parsing
Martin Willi [Mon, 12 Nov 2012 14:58:39 +0000 (15:58 +0100)]
Consolidated %any(6) host_t parsing

6 years agoRemove numeric conversion from resolver, it is done directly in host_t
Martin Willi [Mon, 12 Nov 2012 14:49:48 +0000 (15:49 +0100)]
Remove numeric conversion from resolver, it is done directly in host_t

6 years agohost_create_from_dns() tries a numeric conversion before asking resolver
Martin Willi [Mon, 12 Nov 2012 14:48:48 +0000 (15:48 +0100)]
host_create_from_dns() tries a numeric conversion before asking resolver

6 years agoAdd a host_t constructor from string, but with a specific family
Martin Willi [Mon, 12 Nov 2012 16:10:45 +0000 (17:10 +0100)]
Add a host_t constructor from string, but with a specific family

6 years agoDon't wait while removing external IPs used for load testing
Martin Willi [Mon, 12 Nov 2012 10:14:03 +0000 (11:14 +0100)]
Don't wait while removing external IPs used for load testing

6 years agoInstall virtual IPs via interface name, and use an interface lookup where required
Martin Willi [Mon, 12 Nov 2012 09:06:09 +0000 (10:06 +0100)]
Install virtual IPs via interface name, and use an interface lookup where required

6 years agoload-tester can dynamically install a dedicated external IP for each IKE_SA
Martin Willi [Fri, 9 Nov 2012 14:48:37 +0000 (15:48 +0100)]
load-tester can dynamically install a dedicated external IP for each IKE_SA

For consistency, the local/remote parameters have been replaced by the
initiator/responder options. As initiator, the initiator option can
be overriden by an addrs section taking key/value pairs with address
pools to use on a specific interface.

6 years agoAdd an optional kernel-interface parameter to install IPs with a custom prefix
Martin Willi [Fri, 9 Nov 2012 14:46:58 +0000 (15:46 +0100)]
Add an optional kernel-interface parameter to install IPs with a custom prefix

6 years agoAdd a delay option to load-tester socket
Martin Willi [Fri, 19 Oct 2012 12:54:23 +0000 (14:54 +0200)]
Add a delay option to load-tester socket

6 years agoIndicate message retransmissions while initiating load-test batches
Martin Willi [Fri, 19 Oct 2012 09:36:31 +0000 (11:36 +0200)]
Indicate message retransmissions while initiating load-test batches

6 years agoAdd alerts for sent/received message retransmissions and timeout
Martin Willi [Fri, 19 Oct 2012 09:32:20 +0000 (11:32 +0200)]
Add alerts for sent/received message retransmissions and timeout

6 years agoInitiate each load-testing connection with a fresh peer config
Martin Willi [Fri, 19 Oct 2012 08:57:27 +0000 (10:57 +0200)]
Initiate each load-testing connection with a fresh peer config

6 years agoInitiate IKE_SAs trigger over load-tester socket in parallel
Martin Willi [Fri, 19 Oct 2012 08:47:31 +0000 (10:47 +0200)]
Initiate IKE_SAs trigger over load-tester socket in parallel

6 years agoAdd a simple load-tester utility to initiate over control socket
Martin Willi [Thu, 18 Oct 2012 13:41:44 +0000 (15:41 +0200)]
Add a simple load-tester utility to initiate over control socket

6 years agoAdd a load-tester control socket to manually trigger initiation
Martin Willi [Thu, 18 Oct 2012 13:40:37 +0000 (15:40 +0200)]
Add a load-tester control socket to manually trigger initiation

6 years agoLookip plugin additionally reports the IKE_SA unique identifier
Martin Willi [Thu, 29 Nov 2012 08:53:10 +0000 (09:53 +0100)]
Lookip plugin additionally reports the IKE_SA unique identifier

6 years agoallow update of file hashes
Andreas Steffen [Wed, 28 Nov 2012 22:18:33 +0000 (23:18 +0100)]
allow update of file hashes

6 years agoremoved unused header include
Andreas Steffen [Wed, 28 Nov 2012 13:37:15 +0000 (14:37 +0100)]
removed unused header include

6 years agodifferentiate attestation reason strings
Andreas Steffen [Wed, 28 Nov 2012 13:14:41 +0000 (14:14 +0100)]
differentiate attestation reason strings

6 years agostore collected device information in database
Andreas Steffen [Wed, 28 Nov 2012 09:50:56 +0000 (10:50 +0100)]
store collected device information in database