diff options
| author | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2009-04-01 20:13:30 +0000 |
|---|---|---|
| committer | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2009-04-01 20:13:30 +0000 |
| commit | c3e7f611ea8273c6b3909cb006ade4903a74aad0 (patch) | |
| tree | a5ae5b5059f98c0e5366d61b1b19cd9e70162f9f /testing/tests/ikev2/after-2038-certs/description.txt | |
| parent | 7a229aeb240cc750546f55ad089022f0ca7dc44f (diff) | |
| download | vyos-strongswan-c3e7f611ea8273c6b3909cb006ade4903a74aad0.tar.gz vyos-strongswan-c3e7f611ea8273c6b3909cb006ade4903a74aad0.zip | |
[svn-upgrade] Integrating new upstream version, strongswan (4.2.14)
Diffstat (limited to 'testing/tests/ikev2/after-2038-certs/description.txt')
| -rw-r--r-- | testing/tests/ikev2/after-2038-certs/description.txt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/testing/tests/ikev2/after-2038-certs/description.txt b/testing/tests/ikev2/after-2038-certs/description.txt new file mode 100644 index 000000000..fb622dc15 --- /dev/null +++ b/testing/tests/ikev2/after-2038-certs/description.txt @@ -0,0 +1,13 @@ +The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>. +The authentication is based on <b>X.509 certificates</b> that are valid until +the year 2039 and are issued by a certification authority with a root ca +certificate valid until the year 2059. On 32-bit platforms, dates after +Jan 19 03:14:07 UTC 2038 cannot by represented by the time_t data type. +Thus if a time wrap-around occurs during ASN.1 to time_t conversions, +dates contained in the certificates are set to the maximum value, +i.e. to Jan 19 03:14:07 UTC 2038. + +Upon the successful establishment of the IPsec tunnels, <b>leftfirewall=yes</b> +automatically inserts iptables-based firewall rules that let pass the tunneled traffic. +In order to test both tunnel and firewall, <b>carol</b> ping the client <b>alice</b> +behind the gateway <b>moon</b>. |