vrudikov

StrongSwan IKEv2 for macOS, iOS 11, Windows 10 and BlackBerry 10 With Local DNS Cache (Unbound), Dnscrypt-proxy + (Cloudflare DoH) for IPv4/6

This setup is for remote users to connect into an office/home LAN using a VPN (ipsec). This is based on (but not the same as) the strongSwan documentation and this guide: https://raymii.org/s/tutorials/IPSEC_vpn_with_Ubuntu_16.04.html

• StrongSwan 5.6.2
• Dnscrypt-proxy 2.0.12
• Unbound 1.7.1

Set up DNS service Set up a network interface for DNS listening

vrudikov

import org.junit.Test;
import org.junit.runner.RunWith;
import org.master.Application;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.test.IntegrationTest;
import org.springframework.boot.test.SpringApplicationConfiguration;
import org.springframework.http.converter.json.MappingJackson2HttpMessageConverter;
import org.springframework.security.oauth2.client.DefaultOAuth2ClientContext;
import org.springframework.security.oauth2.client.OAuth2RestTemplate;
import org.springframework.security.oauth2.client.token.grant.client.ClientCredentialsResourceDetails;

vrudikov

*** Cluster Setup for Google Container Engine ***

0/  Install and configure local gcloud and kubectl: https://cloud.google.com/sdk/docs/
    > gcloud components install kubectl

1/  Configure Google Cloud account:
    > gcloud config set account YOUR_EMAIL_ADDRESS
    > gcloud config set project YOUR_PROJECT_ID
    > gcloud config set compute/zone us-west1-a
    > gcloud config set container/cluster example

vrudikov

import com.fasterxml.jackson.databind.ObjectMapper;
import io.netty.buffer.ByteBuf;
import io.netty.buffer.ByteBufInputStream;
import io.netty.buffer.ByteBufOutputStream;
import io.netty.channel.ChannelHandlerContext;
import io.netty.handler.codec.ByteToMessageCodec;

import java.util.List;

public class BasicJacksonCodec<T> extends ByteToMessageCodec<T> {

vrudikov

import com.google.api.client.auth.oauth2.Credential;
import com.google.api.client.auth.oauth2.TokenResponse;
import com.google.api.client.googleapis.auth.oauth2.GoogleAuthorizationCodeFlow;
import com.google.api.client.googleapis.auth.oauth2.GoogleAuthorizationCodeRequestUrl;
import com.google.api.client.googleapis.auth.oauth2.GoogleCredential;
import com.google.api.client.googleapis.auth.oauth2.GoogleTokenResponse;
import com.google.api.client.http.GenericUrl;
import com.google.api.client.http.HttpRequest;
import com.google.api.client.http.HttpRequestFactory;
import com.google.api.client.http.HttpTransport;

vrudikov

/*
 * See LICENSE for licensing and NOTICE for copyright.
 */
package edu.vt.middleware.app;

import java.io.File;
import java.security.*;
import java.util.ArrayList;
import java.util.List;
import java.util.function.Predicate;

vrudikov

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

#include <openssl/pem.h>
#include <openssl/cms.h>
#include <openssl/err.h>
#include "gost_lcl.h"

/* Convert little-endian byte array into bignum */

vrudikov

package ru.cti.crypto;

import java.io.ByteArrayOutputStream;
import java.io.FileInputStream;
import java.security.Key;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.Provider;
import java.security.cert.X509Certificate;
import java.util.ArrayList;

vrudikov

package com.chelonix.selenium;

import java.util.ArrayList;
import java.util.Iterator;
import java.util.List;
import com.dumbster.smtp.SimpleSmtpServer;
import com.dumbster.smtp.SmtpMessage;
import com.google.common.collect.Lists;
import org.junit.rules.ExternalResource;

vrudikov

<changeSet>
  <createTable>
    ...
  </createTable>
<!-- Place this <modifySql> block at the bottom of each table definition. Search and replace works really well. -->
  <modifySql dbms="mysql">
    <append value="ENGINE=INNODB DEFAULT CHARSET=UTF8"/>
  </modifySql>
  
</changeSet>