mirror of https://github.com/trailofbits/algo
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
36 lines
888 B
Bash
36 lines
888 B
Bash
#!/usr/bin/env bash
|
|
|
|
set -euxo pipefail
|
|
|
|
xmllint --noout ./configs/10.0.8.100/ipsec/apple/user1.mobileconfig
|
|
|
|
CA_CONSTRAINTS="$(openssl verify -verbose \
|
|
-CAfile ./configs/10.0.8.100/ipsec/.pki/cacert.pem \
|
|
./configs/10.0.8.100/ipsec/.pki/certs/google-algo-test-pair.com.crt 2>&1)" || true
|
|
|
|
echo "$CA_CONSTRAINTS" | grep "permitted subtree violation" >/dev/null && \
|
|
echo "Name Constraints test passed" || \
|
|
(echo "Name Constraints test failed" && exit 1)
|
|
|
|
echo "$CA_CONSTRAINTS"
|
|
|
|
ansible-playbook deploy_client.yml \
|
|
-e client_ip=localhost \
|
|
-e vpn_user=desktop \
|
|
-e server_ip=10.0.8.100 \
|
|
-e rightsubnet='172.16.0.1/32'
|
|
|
|
ipsec up algovpn-10.0.8.100
|
|
|
|
ipsec statusall
|
|
|
|
ipsec statusall | grep -w ^algovpn-10.0.8.100 | grep -w ESTABLISHED
|
|
|
|
fping -t 900 -c3 -r3 -Dse 10.0.8.100 172.16.0.1
|
|
|
|
host google.com 172.16.0.1
|
|
|
|
echo "IPsec tests passed"
|
|
|
|
ipsec down algovpn-10.0.8.100
|