Tobias Brunner [Thu, 31 Jan 2013 17:22:25 +0000 (18:22 +0100)]
Add a configure option to disable all default plugins
The --disable-defaults option disables all plugins that would be
enabled by default. This allows to selectively enable specific plugins
without issues when new default options get added in future releases.
Andreas Steffen [Mon, 4 Feb 2013 12:05:29 +0000 (13:05 +0100)]
time is a time_t pointer
Andreas Steffen [Mon, 4 Feb 2013 06:51:07 +0000 (07:51 +0100)]
version bump to 5.0.3dr1
Andreas Steffen [Sun, 3 Feb 2013 19:48:05 +0000 (20:48 +0100)]
improved control when an attribute request is sent
Andreas Steffen [Sun, 3 Feb 2013 17:52:59 +0000 (18:52 +0100)]
print PEN value 0xfffffe as Unassigned
Andreas Steffen [Sun, 3 Feb 2013 17:52:03 +0000 (18:52 +0100)]
send an error attribute if vendor ID or type of received attribute is reserved
Tobias Brunner [Thu, 31 Jan 2013 16:33:23 +0000 (17:33 +0100)]
openssl: Properly honor OPENSSL_NO_* defines
Tobias Brunner [Thu, 31 Jan 2013 11:11:37 +0000 (12:11 +0100)]
Fix Doxygen comment for rdrand plugin
Tobias Brunner [Thu, 31 Jan 2013 10:52:11 +0000 (11:52 +0100)]
Typo in strongswan.conf(5) man page fixed
Andreas Steffen [Wed, 30 Jan 2013 06:51:44 +0000 (07:51 +0100)]
version bump to 5.0.2
Tobias Brunner [Fri, 25 Jan 2013 19:17:41 +0000 (20:17 +0100)]
Documented new options in strongswan.conf(5) man page
Tobias Brunner [Fri, 25 Jan 2013 12:18:50 +0000 (13:18 +0100)]
Don't use pointer to a union member in host_create_from_string_and_family()
Tobias Brunner [Thu, 24 Jan 2013 18:42:40 +0000 (19:42 +0100)]
Properly check MSB in openssl plugin's PKCS#7 implementation
Tobias Brunner [Thu, 24 Jan 2013 18:22:52 +0000 (19:22 +0100)]
Use proper buffer sizes for parse_smartcard()
Tobias Brunner [Thu, 24 Jan 2013 17:59:03 +0000 (18:59 +0100)]
Cast first argument for %.*s to int
Tobias Brunner [Thu, 24 Jan 2013 17:48:30 +0000 (18:48 +0100)]
Removed unused command name when printing usage info for lookip
Tobias Brunner [Thu, 24 Jan 2013 17:47:04 +0000 (18:47 +0100)]
Removed unused argument
Tobias Brunner [Thu, 24 Jan 2013 17:43:10 +0000 (18:43 +0100)]
Properly read data from stream in pki --pkcs7
Tobias Brunner [Thu, 24 Jan 2013 17:38:29 +0000 (18:38 +0100)]
Properly destroy mem_cred object on pki --pkcs7 --help
Tobias Brunner [Thu, 24 Jan 2013 17:36:22 +0000 (18:36 +0100)]
Try to determine OS type if name and version are configured
Tobias Brunner [Thu, 24 Jan 2013 17:32:43 +0000 (18:32 +0100)]
Add missing va_end() call
Tobias Brunner [Thu, 24 Jan 2013 17:17:27 +0000 (18:17 +0100)]
g_thread_init() is deprecated since Glib 2.23
Tobias Brunner [Sat, 19 Jan 2013 17:05:48 +0000 (18:05 +0100)]
Fix check-in of IKE_SA when IKE_SA_INIT fails and hash table is enabled
Setting the responder SPI to 0 can only be done while generating the
response, otherwise we'd fail to check in the IKE_SA again in case the
hash table is enabled. That's because we use the responder SPI as hash
value since 5.0.0.
Adrian-Ken Rueegsegger [Wed, 23 Jan 2013 14:38:28 +0000 (15:38 +0100)]
Return SS_RC_INITIALIZATION_FAILED if pid file exists
Let charon return SS_RC_INITIALIZATION_FAILED if an existing pid file is found.
Starter only terminates itself if the result code of the daemon is a valid
SS_RC_* value.
Tobias Brunner [Wed, 23 Jan 2013 14:51:47 +0000 (15:51 +0100)]
Avoid a deadlock when installing a trap policy failed
Martin Willi [Tue, 22 Jan 2013 13:42:06 +0000 (14:42 +0100)]
Encode IETF Numeric Version Service Pack Version with two byte words
Adrian-Ken Rueegsegger [Mon, 21 Jan 2013 20:42:08 +0000 (21:42 +0100)]
starter: Add --attach-gdb option to usage text
Adrian-Ken Rueegsegger [Sat, 14 Apr 2012 14:45:04 +0000 (16:45 +0200)]
Fix IKE SA inherit API doc
Martin Willi [Mon, 21 Jan 2013 11:14:50 +0000 (12:14 +0100)]
Filter TS list for Split-Includes before printing them to debug log
Tobias Brunner [Thu, 13 Dec 2012 14:31:47 +0000 (15:31 +0100)]
Add the ability to use a named pool for conftest configs
Andreas Steffen [Thu, 17 Jan 2013 22:20:37 +0000 (23:20 +0100)]
Removed INSTALL from EXTRA_DIST
Tobias Brunner [Thu, 17 Jan 2013 16:00:05 +0000 (17:00 +0100)]
Merge branch 'debian-testing'
These changes update the integration test system. It previously was based
on a pretty much unmaintainable Gentoo root image and the dated UML
virtualization technology. Among many other changes the test environment
is now based on KVM and uses reproducible Debian-based guest images.
Conflicts:
NEWS
Tobias Brunner [Thu, 17 Jan 2013 15:15:39 +0000 (16:15 +0100)]
NEWS about updated integration tests added
Tobias Brunner [Thu, 17 Jan 2013 15:04:45 +0000 (16:04 +0100)]
Updated documentation for the integration tests
Tobias Brunner [Thu, 17 Jan 2013 15:46:13 +0000 (16:46 +0100)]
Removed UML from description of ikev2/default-keys test
Tobias Brunner [Thu, 17 Jan 2013 15:41:10 +0000 (16:41 +0100)]
Updated comments in test.conf of all tests
Tobias Brunner [Thu, 17 Jan 2013 15:37:19 +0000 (16:37 +0100)]
Renamed $UMLHOSTS to $VIRTHOSTS
Reto Buerki [Wed, 16 Jan 2013 17:24:31 +0000 (18:24 +0100)]
Drop vim swap file
Reto Buerki [Wed, 16 Jan 2013 15:28:26 +0000 (16:28 +0100)]
Enforce reception of multicast traffic on virbr[1|2]
This is needed to let the ha/both-active test pass.
Reto Buerki [Wed, 16 Jan 2013 13:49:50 +0000 (14:49 +0100)]
Make core dumps work
Core dumps are written to the /var/local/dumps directory.
Reto Buerki [Wed, 16 Jan 2013 12:54:14 +0000 (13:54 +0100)]
Append seconds to TESTDATE
This avoids 'file exists' warnings when running tests multiple times in
one minute.
Reto Buerki [Wed, 16 Jan 2013 10:58:01 +0000 (11:58 +0100)]
Switch to 'mapped' access mode for hostfs
Passthrough mode only works as expected when running as root. On
Debian/Ubuntu systems qemu runs as user 'libvirt-qemu' and group 'kvm'
so all shared files must be chowned to grant access from guests.
Symlinks created on the host are still problematic because the Plan 9
filesystem has no direct notion of symbolic links, see [1].
[1] - http://ericvh.github.com/9p-rfc/rfc9p2000.u.html
Reto Buerki [Wed, 16 Jan 2013 10:54:28 +0000 (11:54 +0100)]
Make guest ACPI shutdown work
Reto Buerki [Wed, 16 Jan 2013 09:16:58 +0000 (10:16 +0100)]
Drop obsolete Gentoo dhcpd init script
Reto Buerki [Wed, 16 Jan 2013 09:06:49 +0000 (10:06 +0100)]
No need to enable ip_forward in pretest files
It is enabled by default now.
Reto Buerki [Tue, 15 Jan 2013 15:49:42 +0000 (16:49 +0100)]
Auto-create symlink to testing directory in workdir
Andreas Steffen [Mon, 14 Jan 2013 04:42:43 +0000 (05:42 +0100)]
converted ha/both-active iptables scenario
Andreas Steffen [Mon, 14 Jan 2013 03:08:29 +0000 (04:08 +0100)]
converted all ipv6 iptables/ip6tables scenarios
Andreas Steffen [Fri, 11 Jan 2013 10:21:00 +0000 (11:21 +0100)]
converted all p2pnat iptables scenarios
Andreas Steffen [Fri, 11 Jan 2013 03:37:41 +0000 (04:37 +0100)]
Rename UML to KVM tests
Andreas Steffen [Fri, 11 Jan 2013 03:19:07 +0000 (04:19 +0100)]
converted all tnc iptables scenarios
Andreas Steffen [Thu, 17 Jan 2013 14:19:03 +0000 (15:19 +0100)]
List daemon.log on $RADIUSHOSTS
Andreas Steffen [Fri, 11 Jan 2013 02:30:28 +0000 (03:30 +0100)]
implemented ip6tables.rules
Andreas Steffen [Fri, 11 Jan 2013 02:26:21 +0000 (03:26 +0100)]
converted all sql iptables scenarios
Andreas Steffen [Tue, 8 Jan 2013 07:22:59 +0000 (08:22 +0100)]
converted all pfkey iptables scenarios
Andreas Steffen [Tue, 8 Jan 2013 06:57:52 +0000 (07:57 +0100)]
converted all openssl-ikev2 iptables scenarios
Andreas Steffen [Tue, 8 Jan 2013 06:54:57 +0000 (07:54 +0100)]
converted all openssl-ikev1 iptables scenarios
Andreas Steffen [Tue, 8 Jan 2013 06:48:30 +0000 (07:48 +0100)]
converted all gcrypt-ikev2 iptables scenarios
Andreas Steffen [Tue, 8 Jan 2013 06:45:56 +0000 (07:45 +0100)]
converted all af-alg iptables scenarios
Andreas Steffen [Mon, 7 Jan 2013 12:22:37 +0000 (13:22 +0100)]
added ikev1/nat-virtual-ip scenario
Andreas Steffen [Mon, 7 Jan 2013 05:52:57 +0000 (06:52 +0100)]
converted all ikev1 iptables scenarios
Andreas Steffen [Sun, 6 Jan 2013 07:43:51 +0000 (08:43 +0100)]
use iptables-restore in all ikev2 firewall scenarios
Andreas Steffen [Sun, 6 Jan 2013 05:08:32 +0000 (06:08 +0100)]
Updated mark_update script in several IKEv2 scenarios
Andreas Steffen [Sun, 6 Jan 2013 05:05:57 +0000 (06:05 +0100)]
activated iptables in some ikev2 scenarios
Andreas Steffen [Sun, 23 Dec 2012 17:50:24 +0000 (18:50 +0100)]
Fixed NO evaltest in tnc/tnccs-20-pdp scenario
Andreas Steffen [Sun, 23 Dec 2012 17:46:50 +0000 (18:46 +0100)]
Disable IPv4 forwarding on carol in order to pass tnc/tnccs-20-os scenario
Andreas Steffen [Sun, 23 Dec 2012 17:35:37 +0000 (18:35 +0100)]
Added less package to Debian base image
Andreas Steffen [Sun, 23 Dec 2012 17:34:24 +0000 (18:34 +0100)]
Added config directory to EXTRA-DIST
Andreas Steffen [Sun, 23 Dec 2012 17:33:19 +0000 (18:33 +0100)]
Added config für Linux 3.6 guest kernels
Reto Buerki [Tue, 18 Dec 2012 15:44:21 +0000 (16:44 +0100)]
Make test scripts callable from any path
Reto Buerki [Mon, 17 Dec 2012 18:00:31 +0000 (19:00 +0100)]
Export compile directory to guests
Use 9p over virtio to share files on the host with the guest domains.
The files are accessible in the guests /hostfs directory.
Reto Buerki [Fri, 14 Dec 2012 14:38:10 +0000 (15:38 +0100)]
Create all images in $BUILDDIR/images
Reto Buerki [Fri, 14 Dec 2012 10:38:52 +0000 (11:38 +0100)]
Also restore 'default' host configuration
Reto Buerki [Fri, 14 Dec 2012 10:14:08 +0000 (11:14 +0100)]
Add eth1 NIC to alice domain
Reto Buerki [Fri, 14 Dec 2012 10:05:08 +0000 (11:05 +0100)]
Adjust ikev2/farp test to qemu network interfaces
Reto Buerki [Fri, 14 Dec 2012 09:16:37 +0000 (10:16 +0100)]
Directly use STRONGSWANHOSTS in build-guestimages
Drop support for building guests specified on the command line; creating
all images unconditionally is very fast now thanks to qcow2.
Reto Buerki [Fri, 14 Dec 2012 09:13:17 +0000 (10:13 +0100)]
Drop SELECTEDTESTSONLY support
Reto Buerki [Fri, 14 Dec 2012 08:06:55 +0000 (09:06 +0100)]
Use exit trap to kill open ssh sessions
Tobias Brunner [Thu, 13 Dec 2012 17:59:25 +0000 (18:59 +0100)]
Don't refer to recipes and images via $TESTDIR
This way no symlink to the testing directory is required in $TESTDIR.
Reto Buerki [Thu, 13 Dec 2012 17:53:16 +0000 (18:53 +0100)]
Adjust ikev2/dhcp tests to qemu network interfaces
Reto Buerki [Thu, 13 Dec 2012 17:48:17 +0000 (18:48 +0100)]
Disable checksum offloading on moon's eth1 interface
Disable checksum offloading on eth1 because it does not currently work
with virtio and the isc-dhcp-server running on venus, see [1].
[1] - https://bugs.mageia.org/show_bug.cgi?id=1243
Reto Buerki [Thu, 13 Dec 2012 17:51:02 +0000 (18:51 +0100)]
Add ethtool to debootstrap package includes
Reto Buerki [Thu, 13 Dec 2012 09:31:44 +0000 (10:31 +0100)]
stop-testing requires virsh
Reto Buerki [Thu, 13 Dec 2012 09:22:50 +0000 (10:22 +0100)]
Add ssh config to guest root account
Tobias Brunner [Wed, 12 Dec 2012 18:37:12 +0000 (19:37 +0100)]
Patch iptables for use with HA kernel patch (XFRM hooks)
Tobias Brunner [Wed, 12 Dec 2012 18:24:42 +0000 (19:24 +0100)]
start-testing requires virsh
Reto Buerki [Wed, 12 Dec 2012 08:46:51 +0000 (09:46 +0100)]
Make root image a clone of the base image
Reto Buerki [Mon, 10 Dec 2012 15:16:56 +0000 (16:16 +0100)]
Add expect-connection guest image script
This script can be used in pretest.dat files to wait until an IPsec
connection becomes available. This avoids unconditional sleeps and
improves test performance.
The ipv6 tests have been updated to use the expect-connection script.
Reto Buerki [Mon, 10 Dec 2012 09:38:27 +0000 (10:38 +0100)]
Rename build-umlhostfs script to build-guestimages
Reto Buerki [Mon, 10 Dec 2012 09:33:19 +0000 (10:33 +0100)]
Rename build-umlrootfs script to build-rootimg
Reto Buerki [Mon, 10 Dec 2012 09:05:02 +0000 (10:05 +0100)]
Unify naming of base,root image settings
Reto Buerki [Sun, 9 Dec 2012 20:03:29 +0000 (21:03 +0100)]
Drop now obsolete UML helper functions
Reto Buerki [Sun, 9 Dec 2012 17:40:02 +0000 (18:40 +0100)]
Exclude iptables from debootstrap
Reto Buerki [Sun, 9 Dec 2012 09:50:28 +0000 (10:50 +0100)]
Run on_exit commands in FILO order
Reto Buerki [Sun, 9 Dec 2012 09:23:37 +0000 (10:23 +0100)]
Inform kernel about /dev/nbd0 partition changes
Reto Buerki [Sun, 9 Dec 2012 08:49:04 +0000 (09:49 +0100)]
Test availability of required commands
Reto Buerki [Sun, 9 Dec 2012 08:41:54 +0000 (09:41 +0100)]
Exit make-testing on script failure
Reto Buerki [Fri, 7 Dec 2012 16:54:19 +0000 (17:54 +0100)]
Switch from raw images to qcow2 format
This allows to use minimal copy-on-write clones of the base image as
guest images, which in turn saves a lot of disk space.
Reto Buerki [Fri, 7 Dec 2012 13:47:13 +0000 (14:47 +0100)]
Set default TESTDIR to /srv/strongswan-testing
Reto Buerki [Fri, 7 Dec 2012 13:23:57 +0000 (14:23 +0100)]
Drop unneeded TZUML variable