]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
Added test config 11.1.1
authorMartin Willi <martin@revosec.ch>
Wed, 1 Dec 2010 13:58:08 +0000 (14:58 +0100)
committerMartin Willi <martin@revosec.ch>
Thu, 10 Mar 2011 09:19:35 +0000 (10:19 +0100)
src/conftest/suiteb/11.1.1/dut.conf [new file with mode: 0644]
src/conftest/suiteb/11.1.1/test.conf [new file with mode: 0644]

diff --git a/src/conftest/suiteb/11.1.1/dut.conf b/src/conftest/suiteb/11.1.1/dut.conf
new file mode 100644 (file)
index 0000000..7e9db62
--- /dev/null
@@ -0,0 +1,14 @@
+
+configs {
+       ike-wrong {
+               proposal = aes128-sha1-modp1024
+               lhost = 172.16.1.10
+               rhost = 172.16.1.20
+               lid = 172.16.1.10
+               rid = 172.16.1.20
+               child-wrong {
+                       lts = 10.10.10.0/24
+                       rts = 10.20.20.0/24
+               }
+       }
+}
diff --git a/src/conftest/suiteb/11.1.1/test.conf b/src/conftest/suiteb/11.1.1/test.conf
new file mode 100644 (file)
index 0000000..32affb5
--- /dev/null
@@ -0,0 +1,40 @@
+
+hooks {
+       add_payload {
+               request = yes
+               id = 1
+               replace = yes
+               type = IDi
+               # ID_IPV4_ADDR | reserved[3] | 172.16.1.20
+               data = 0x01000000AC100114
+       }
+       rebuild_auth {
+       }
+}
+
+configs {
+       ike-wrong {
+               proposal = aes128-sha1-modp1024
+               lhost = 172.16.1.20
+               rhost = 172.16.1.10
+               # certificate IP to look it up, change ID in hook
+               lid = 172.16.1.99
+               rid = 172.16.1.10
+               child-wrong {
+                       lts = 10.20.20.0/24
+                       rts = 10.10.10.0/24
+               }
+       }
+}
+
+certs {
+       untrusted {
+               x509 = ../ls-wrong-san.crt
+       }
+}
+
+actions {
+       initiate {
+               config = child-wrong
+       }
+}