Annotation of embedaddon/strongswan/testing/tests/ikev2/after-2038-certs/description.txt, revision 1.1.1.1

1.1       misho       1: The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
                      2: The authentication is based on <b>X.509 certificates</b> that are valid until
                      3: the year 2039 and are issued by a certification authority with a root ca 
                      4: certificate valid until the year 2059. On 32-bit platforms, dates after
                      5: Jan 19 03:14:07 UTC 2038 cannot by represented by the time_t data type.
                      6: Thus if a time wrap-around occurs during ASN.1 to time_t conversions,
                      7: dates contained in the certificates are set to the maximum value,
                      8: i.e. to Jan 19 03:14:07 UTC 2038.
                      9: 
                     10: Upon the successful establishment of the IPsec tunnels, <b>leftfirewall=yes</b>
                     11: automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
                     12: In order to test both tunnel and firewall, <b>carol</b> ping the client <b>alice</b>
                     13: behind the gateway <b>moon</b>.

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>