strongSwan KVM Tests / botan / rw-mlkem

Test botan/rw-mlkem

Description

The roadwarrior carol and the gateway moon use the botan plugin based on the Botan library for all cryptographical functions whereas roadwarrior dave uses the openssl and ml plugins. The authentication is based on X.509 certificates and the key exchange on ecp384-ke1_mlkem768 for carol and ecp521-ke1_mlkem1024 for dave.

Upon the successful establishment of the IPsec tunnels, the updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon.

alice moon carol winnetou dave

moon

 

carol

 

dave

 

tcpdump