strongSwan KVM Tests / gcrypt-ikev2 / rw-cert
Test gcrypt-ikev2/rw-cert
Description
The roadwarrior carol and the gateway moon use the gcrypt plugin based on the GNU Libgcrypt library for all cryptographical functions whereas roadwarrior dave uses openssl as the default strongSwan cryptographical plugin.The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on X.509 certificates. Upon the successful establishment of the IPsec tunnels, the updown directive in swanctl.conf automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon.
